Security Directory

O

OSRAM Ceska republika s.r.o.

osram.cz

72

OSRAM Ceska republika s.r.o. operates a professional corporate website focused on innovative and sustainable lighting solutions, targeting B2B customers in automotive, industrial, and entertainment sectors. The company is positioned as a global leader in optical and lighting technologies, supported by its parent company ams OSRAM. The website provides comprehensive product information, contact details, and links to global and regional OSRAM sites, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries, Algolia search, and a consent management platform (Usercentrics), alongside Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and accessible navigation, although accessibility features are basic. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and dedicated security policy pages. The absence of WHOIS data limits domain registration trust analysis, but the website's professional branding, structured data, and consistent content strongly indicate legitimacy. No adult or questionable content is present, and privacy compliance is well addressed with clear policies and consent banners. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration visibility.

K

KNX národní skupina České Republiky, z.s.

knxcz.cz

45

KNX národní skupina České Republiky, z.s. is a Czech non-profit association dedicated to promoting and supporting KNX technology for intelligent building installations. The website serves as an information hub offering training courses, community activities, and documentation for professionals and companies involved in KNX systems. The organization is well-established since 2015 and holds a national position within the Czech Republic. Technically, the website uses a mix of legacy and modern technologies including jQuery 1.4, CKEditor 5, and Google Analytics for tracking. While the site is functional and content-rich, some technical debt is evident, particularly the use of outdated JavaScript libraries which pose security risks. Security posture is moderate with no visible security headers and no explicit security policies published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

H

HELUKABEL® CZ s.r.o

helukabel.cz

68

HELUKABEL® CZ s.r.o is a leading international manufacturer and supplier of cables, wires, and cable accessories, operating primarily in the manufacturing, energy, and transportation sectors. Founded in 1978, the company maintains a strong market position with a large operational footprint across 43 countries and 76 branches. Their website reflects a professional and comprehensive digital presence, targeting industrial and infrastructure customers with a broad portfolio of products and services including custom cable solutions and energy chains. The company emphasizes sustainability, evidenced by their EcoVadis Bronze Medal and compliance with DIN, REACH, and RoHS certifications. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Piwik PRO analytics, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but the absence of explicit security headers and a security.txt file suggests room for improvement in security best practices. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies and provides comprehensive contact information. However, the lack of WHOIS data for the domain introduces a minor trust concern, though the overall legitimacy is supported by consistent business information and certifications. No critical vulnerabilities or malicious content were detected. Overall, HELUKABEL's website is a professional, secure, and trustworthy platform that effectively supports their business operations and customer engagement. Strategic enhancements in security headers, incident response transparency, and accessibility would further strengthen their digital maturity and risk posture.

R

Robelshoes.pl

robelshoes.pl

55

Robelshoes.pl is a professional e-commerce retailer specializing in branded women's and men's footwear and accessories, targeting primarily the Polish market and neighboring European countries. The website offers a broad selection of products with key services including free delivery for orders over 249 PLN and a 30-day return policy, positioning itself as a customer-friendly online shoe store. The presence of multiple regional partner domains indicates a broader regional footprint in Central and Eastern Europe. Technically, the website employs modern web technologies such as Google reCAPTCHA for bot protection, Sentry for error monitoring, and Google Tag Manager for marketing and analytics. The site is built on the CREATIVE shop CMS platform and uses HTTPS with a good SSL configuration, ensuring secure communications. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected, which could be improved for better compliance and protection. The WHOIS data for the domain is not publicly available, which is common for .pl domains managed by NASK, but the website's professional design, structured data, and consistent branding support its legitimacy. Overall, the site presents a solid security posture with room for enhancement in privacy compliance and security headers. Strategic recommendations include implementing cookie consent banners, adding security headers, publishing a security policy, and maintaining regular audits of third-party scripts to strengthen security and compliance.

A

ALPINA Sports

alpina-sports.com

56

ALPINA Sports operates an official e-commerce webshop specializing in high-quality sports safety equipment such as bicycle helmets, ski helmets, and sports eyewear. The website targets sports enthusiasts primarily in Germany and offers direct sales with customer support and product guidance. The digital infrastructure is built on Magento Commerce with modern JavaScript frameworks and includes integrations for analytics, consent management, and search optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA implementations, although the absence of a public security policy and vulnerability disclosure reduces transparency. The missing WHOIS registration data is a notable anomaly that impacts domain trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving a medium-sized retail business effectively.

F

Formulayt

gatedcontent.com

64

Formulayt is an enterprise-focused SaaS platform specializing in scalable web form management and compliance for marketing operations teams. The company offers a solution that enables rapid deployment, governance, and updating of web forms integrated with major marketing automation platforms. The website presents a professional and polished digital presence with strong branding and customer trust signals, including testimonials and logos of reputable clients. Technically, the site is built on WordPress with modern performance and analytics tools, hosted with Cloudflare DNS and registrar services. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is partially addressed via a detailed cookie consent banner, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns.

N

Nordisk Media Utveckling AB

nmugroup.com

53

Nordisk Media Utveckling AB operates the NMU Group website as a trusted Nordic domain registrar and IT service provider specializing in domain name registration, DNS management, hosting, IT security, and domain legal services. Established since 1999, the company positions itself as a proactive domain agency with a strong focus on security and personalized service, targeting businesses and organizations requiring comprehensive domain and digital brand management solutions. The website reflects a professional and consistent brand image with detailed service offerings and customer testimonials, reinforcing its market credibility. Technically, the website is built on WordPress with modern technologies including Bootstrap 5, jQuery, and performance optimizations such as lazy loading and caching plugins. It employs Google Tag Manager for analytics and marketing, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and DNSSEC services promoted, although the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. However, the website content and business information are consistent and professional, mitigating immediate trust issues. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and support channels available. Overall, NMU Group presents a reliable and secure digital presence for domain and IT services in the Nordic region, with recommendations to enhance security headers, publish vulnerability disclosure information, and verify domain registration details to strengthen trust and compliance.

N

Nordisk Media Utveckling AB

nmugroup.se

53

Nordisk Media Utveckling AB operates the NMU Group website, providing comprehensive domain name registration, DNS, hosting, IT security, and domain legal services primarily targeting Nordic businesses and organizations. Established since 1999, the company positions itself as a trusted, accredited registrar and domain partner with a strong focus on security and personalized service. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, reinforcing its market position in the Nordic region. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as lazy loading and caching via WP Rocket. It integrates Google Tag Manager and Google Site Kit for analytics and marketing, with a cookie consent mechanism aligned with GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and promotes advanced DNS security features like DNSSEC and Anycast. However, it lacks visible HTTP security headers and a published security.txt file, which are recommended for enhanced security posture. The absence of WHOIS domain registration data raises concerns about domain legitimacy, despite the professional appearance and business credibility of the site. Overall, the website demonstrates a solid digital presence and security awareness but should address domain registration transparency and implement additional security headers to strengthen trust and compliance.

G

GroundTruth

xad.com

72

GroundTruth, formerly known as xAd, is a leading location-based advertising platform that provides advertisers with powerful tools to drive in-store visits and real business results. The company offers a comprehensive suite of targeting products and media channels, leveraging its proprietary Blueprints technology and a global footprint across 21 countries. The website reflects a mature digital presence with professional branding, extensive use of modern marketing and analytics technologies, and a strong focus on privacy compliance. While the WHOIS data is unavailable, the website content and social media presence support the legitimacy of the business. The technical infrastructure is built on WordPress with integrations of multiple third-party analytics and advertising tools, ensuring robust tracking and user engagement capabilities. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site provides a trustworthy and professional experience for its target audience of advertisers and marketers.

C

ci Net Host

cinethost.com

47

ci Net Host is a small US-based company specializing in premium web hosting, web design, graphic design, business printing, and digital services. The company targets small businesses and individuals seeking personalized hosting and design solutions. Their business model focuses on providing a range of digital services with an emphasis on customer service and local support. The website reflects a niche market position with clear service offerings and a professional presentation. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MonsterInsights, although the latter is not configured. Hosting is provided by NameHero, as indicated by the nameservers. The site is mobile optimized and has good SEO practices but lacks some accessibility features and security headers. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers are present. The absence of a cookie consent mechanism and unconfigured analytics plugin indicate gaps in privacy compliance. No incident response or security policy information is available on the site. Overall, the website is functional and professional but could improve its security posture and privacy compliance to enhance trust and regulatory adherence. The domain registration data supports legitimacy with consistent business information and appropriate domain age.

Laughing Dog Brewing is a small craft brewery based in Northern Idaho, known for its award-winning beers and community-focused taproom experience. The company emphasizes quality and variety in its beer offerings, targeting craft beer enthusiasts and local patrons. The website is hosted on WordPress using the Divi theme and integrates common marketing and analytics tools such as Google Analytics and Facebook SDK. While the site is well-designed and provides relevant content, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and Cloudflare DNS usage, but missing DNSSEC and security headers reduce overall security maturity. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

Johnson Brothers Mountain State Beverage is a leading distributor and broker of wine, craft beer, and spirits in West Virginia, serving all 55 counties with a large portfolio of products. The company has a strong market position and a medium-sized team, supported by a professionally designed website built on WordPress with modern technologies such as Divi theme and Revolution Slider. The website demonstrates good SEO and mobile optimization but lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Contact information is available primarily via a contact form and social media links, with no direct emails or phone numbers published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

L

Legalporno4k.com - Download Exclusive Porn - Flashbit

legalporn4k.com

48

Legalporno4k.com is an adult entertainment website specializing in providing free downloads and online viewing of pornographic content across multiple genres. The site operates using the DataLife Engine CMS and is hosted with DNS services from Cloudflare, registered via NameCheap since 2018. The platform targets adult users seeking explicit video content, with daily updates and a large categorized library. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, but lacks advanced security headers and privacy compliance mechanisms. There is no visible privacy or cookie policy, and contact is limited to a feedback form, which reduces trust and compliance with data protection regulations. Security posture is moderate with some domain protection but missing DNSSEC and security headers. Overall, the site functions as a niche adult content aggregator with basic technical implementation and limited privacy and security maturity.

C

Centrála cestovního ruchu – Jižní Morava, z.s.p.o.

jizni-morava.cz

45

The website www.jizni-morava.cz serves as the official regional tourism portal for South Moravia, Czech Republic, managed by Centrála cestovního ruchu – Jižní Morava, z.s.p.o. It offers comprehensive information on local attractions, events, and cultural experiences, targeting tourists interested in nature, history, gastronomy, and wine. The site is well-branded and consistent with its regional tourism mission, supported by partnerships with national and regional tourism authorities. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for interactivity, and Google Tag Manager for analytics and marketing. It features a cookie consent mechanism compliant with GDPR, ensuring user privacy preferences are respected. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS but lacks visible security headers in the provided data. No WHOIS information is available, which limits domain legitimacy verification. No explicit security policies or incident response contacts are published, indicating room for improvement in transparency and security posture. Overall, the website is professional, trustworthy, and serves its business purpose effectively. However, enhancing security headers, publishing security and incident response policies, and resolving WHOIS data visibility would strengthen its security and compliance profile.

K

Kreatura - kreativní agentura

kreatura.cz

46

Kreatura is a small creative agency based in Brno, Czech Republic, specializing in meaningful visual communication projects and offering proprietary CMS and mass mailing solutions. The website reflects a professional and client-focused business with clear contact information and a consistent brand presence. Technically, the site uses a mix of jQuery, Google Analytics, Google Tag Manager, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. Overall, the site is trustworthy and compliant with GDPR, though WHOIS data is unavailable, likely due to privacy protection. Strategic improvements in security headers and transparency could enhance trust further.

Č

Člověk v tísni, o.p.s.

skutecnapomoc.cz

58

The website 'Skutečná pomoc Člověka v tísni' represents a Czech non-profit organization named Člověk v tísni, o.p.s., focused on humanitarian aid and encouraging regular donations. The site targets a general Czech audience and promotes ongoing charitable contributions. The business model is donation-based, positioning itself as an established medium-sized non-profit entity in the Czech Republic. The website content is professionally presented with consistent branding and good quality content relevant to its mission.

Č

Člověk v tísni

doucujte.cz

56

Doučujte.cz is a Czech non-profit educational platform affiliated with the reputable organization Člověk v tísni. The website focuses on supporting children in need through tutoring and provides methodological support to volunteers, non-profit workers, students, parents, and teachers. It offers curated materials, tips, and recommendations to facilitate and enhance tutoring efforts. The platform targets a broad audience involved in educational support and operates primarily in the Czech Republic. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for optimization, Cookiebot for cookie consent management, and Google Tag Manager for analytics. The site is well-structured with good mobile optimization and moderate performance. It employs HTTPS with a strong SSL configuration and includes cookie consent mechanisms, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, some advanced security headers like Content-Security-Policy are not confirmed, and no security.txt or vulnerability disclosure pages are present. No exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of explicit privacy policy and terms of service pages slightly impacts privacy compliance. Overall, Doučujte.cz presents a trustworthy and professional online presence for a non-profit educational initiative. The lack of WHOIS data is consistent with privacy protection practices common among non-profits. Strategic recommendations include publishing clear privacy and terms policies, enhancing security headers, and providing explicit contact information for security and privacy concerns to strengthen trust and compliance.

U

Union sport & cycle

unionsportcycle.com

50

Union sport & cycle is a French membership organization serving the sports and leisure industry, providing advocacy, studies, events, and member services. The website demonstrates a professional and consistent brand presence targeting industry professionals and stakeholders in France. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and moderate performance. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a concern but does not critically undermine trust given the professional site content and social media presence.

C

Comité Paralympique et Sportif Français

france-paralympique.fr

51

The Comité Paralympique et Sportif Français (CPSF) is a well-established non-profit organization dedicated to coordinating and representing parasport federations in France. Founded in 1992, it serves as the official French Paralympic Committee recognized by the International Paralympic Committee. The website reflects a mature digital presence with comprehensive content focused on parasports development, events, and resources for persons with disabilities and related stakeholders. The organization maintains a strong market position as the authoritative body for parasports in France, supported by numerous official partners and federations. Technically, the website is built on WordPress with modern SEO and accessibility features, including Yoast SEO Premium and cookie consent management via tarteaucitron. The site is mobile-optimized and performs moderately well, with a clean and professional design. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Privacy policies and cookie consent mechanisms are in place and GDPR compliant. Contact information is primarily via contact forms and social media channels, with no direct emails or phone numbers publicly listed. The site does not publish explicit security or incident response policies, nor vulnerability disclosure information. Overall, the CPSF website demonstrates a strong, trustworthy, and professional online presence suitable for its mission and audience, with recommendations to enhance security headers and formalize incident response documentation for further maturity.

D

Département de France

departements.fr

44

Départements de France is an official association representing French departmental elected officials, providing thematic commissions, news, resources, and advocacy services. The website serves as a comprehensive informational platform targeting government stakeholders and the public interested in departmental affairs. It holds a strong market position as the authoritative voice for French departments. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted by OVH, and integrates modern web technologies and analytics tools. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though it lacks dedicated security and incident response pages. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Blue Kiwi s.r.o.

bluekiwi.sk

61

Blue Kiwi s.r.o. is a Slovak-based creative agency specializing in branding, web development, e-commerce solutions, graphic design, and video production services. Established in 2012, the company targets startups and established businesses seeking to enhance their brand identity and digital presence. Their website showcases a professional portfolio and highlights key services, positioning them as a reliable partner in the creative industry within Slovakia. The company maintains an active social media presence and provides a newsletter subscription to engage with clients and prospects. Technically, the website is built on WordPress using the Enfold theme, supplemented by plugins for SEO (Yoast), GDPR compliance (Complianz), knowledge base management, and content display (The Grid). The site employs modern web technologies including Google Fonts, jQuery, and Google reCAPTCHA for form security. Hosting is likely provided by Websupport, as indicated by the nameservers. The website is mobile-optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS with DNSSEC enabled, uses Google reCAPTCHA to protect forms, and implements a cookie consent banner compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Blue Kiwi's website reflects a professional and trustworthy digital presence with good compliance and security posture for a small creative agency. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen their security and compliance standing.

E

EXIsport

exisport.sk

54

EXIsport is a large regional retailer specializing in sportswear, sports footwear, and electric bicycles, operating both online and through 21 physical stores in Slovakia, with additional presence in the Czech Republic and Hungary. The website offers a comprehensive e-commerce platform with a wide product range exceeding 650,000 items, free shipping over 69 €, and personal pickup options. The company targets consumers interested in fitness, cycling, winter sports, and outdoor activities, positioning itself as a trusted and established brand in the regional sports retail market. Technically, the website is built on PrestaShop CMS, leveraging modern JavaScript frameworks and libraries such as Vue.js, Swiper.js, and SweetAlert2, with integrated Google Tag Manager and affiliate tracking. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses secure forms, though explicit security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable from the provided raw output, indicating privacy protection or registrar data not publicly accessible, which slightly reduces transparency but does not detract from the site's professionalism. Overall, EXIsport demonstrates a mature digital presence with solid business credibility and security posture.

G

GIVERSDON s.r.o.

azcasopis.cz

42

The website azcasopis.cz represents a specialized professional magazine named A-Z ELEKTRO, focusing on electrical engineering, automation, energy, software, lighting, and related technologies. It targets professionals and companies within these technical sectors primarily in the Czech Republic. The business operates as a small-sized publishing entity with a history dating back to 2009, offering industry news, magazine publications, advertising, and subscription services. The site demonstrates consistent branding and good content quality with regular updates and industry partnerships.

I

ILAC

ilac.org

10

ILAC (International Laboratory Accreditation Cooperation) is a globally recognized non-profit organization focused on laboratory and inspection accreditation. It facilitates mutual recognition arrangements to promote quality and reliability in testing and inspection worldwide. The website serves as a resource hub for accreditation bodies, regulators, and stakeholders, offering signatory searches, certificates, publications, and event information. The organization is well-established with a domain age of over 25 years, reflecting its longstanding presence in the accreditation sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It employs standard plugins for forms, events, and analytics, although some analytics tools like MonsterInsights are not fully configured. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security practices include HTTPS and reCAPTCHA, but could be enhanced by enabling DNSSEC and adding security headers. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected. However, the absence of explicit privacy and cookie policies, as well as security headers, indicates room for improvement in compliance and hardening. The WHOIS data confirms the domain's legitimacy and consistent registration history. Overall, ILAC's website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security configurations would further enhance its credibility and user trust.

U

Ubytování U Nás

ubytovani-unas.cz

66

Ubytování U Nás is a small hospitality business offering affordable and comfortable accommodation in the Pálava region of the Czech Republic. The website provides detailed information about their apartments and facilities, including a reservation system with calendar availability. The business targets tourists seeking a quiet and nature-rich environment near Mikulov. Technically, the website uses a modern tech stack with jQuery, Bootstrap, and various UI libraries, hosted by a reputable Czech registrar. Security measures include HTTPS and Google ReCAPTCHA, but lack advanced security headers and published security policies. Privacy compliance is basic with a cookie consent banner but no explicit privacy policy or terms of service pages. Overall, the site is professional and trustworthy with clear contact details and positive user testimonials.

S

Sportway Media Group

sportwaymediagroup.com

10

Sportway Media Group is a Swedish-based media company specializing in AI-automated sports video and data production. Founded in 2022, it offers end-to-end automated video production services for live sporting events, focusing on lower-tier leagues and youth sports. The company partners with sports federations, broadcasters, and content owners to produce, market, and monetize sports content and associated brands. Their subsidiaries include sportway.se, livearenasports.com, and mygame.no, indicating a scalable and integrated business model in the sports media industry. The website is professionally designed, SEO optimized, and GDPR compliant, reflecting a mature digital presence for a relatively young company.

M

MEDIA MARKETING SERVICES a.s.

fajnradio.cz

57

Fajn Rádio is a Czech media company operating multiple radio streams and digital content platforms including podcasts and music playlists. The website presents a professional and consistent brand image targeting general music listeners in the Czech Republic. Their business model centers on media broadcasting and digital engagement with advertising and listener clubs as key revenue streams. Technically, the site uses a modern JavaScript stack with frameworks like Foundation and libraries such as jQuery, Slick Carousel, and MixItUp, supported by Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and SEO-friendly with good accessibility features. Security posture is solid with HTTPS enforced, CSRF tokens, and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or privacy compliance issues were detected. Overall, the site is trustworthy and professionally maintained, with clear contact information and GDPR-compliant privacy practices.

N

Noclegi - rezerwuj tanie noclegi u nas, płać w hotelu – Noclegi.pl

noclegi.pl

60

Noclegi.pl is a well-established Polish online accommodation booking platform founded in 1998, offering over 91,600 lodging options across 175 countries. The platform targets Polish-speaking travelers seeking affordable hotels, apartments, and other lodging types, supported by over 3 million user reviews. The website demonstrates a mature digital presence with multi-language and multi-currency support, indicating a broad regional reach. Technically, the site uses modern web technologies including Google Tag Manager, Sentry for error tracking, and cookie consent mechanisms, with a Bootstrap 3 based responsive design. Security posture is solid with HTTPS enforced and consent-based tracking, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with cookie consent present but no explicit privacy or terms of service pages detected in the provided content. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

R

RevNGo.com - Book here, pay at the Hotel!

revngo.com

65

RevNGo.com is an established online travel accommodation booking platform founded in 2014, targeting travelers seeking hotels, apartments, and wellness packages primarily in Central Europe. The website offers a multilingual experience with a large inventory and emphasizes guaranteed lowest prices and pay-at-hotel convenience. Technically, the site uses a modern tech stack including Google Tag Manager, analytics, and personalization tools, hosted on Amazon AWS infrastructure. The site is well-optimized for desktop and mobile with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain locking, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could improve transparency and security documentation.

T

Travelminit.ro - Îți rezervăm cazarea

travelminit.ro

56

Travelminit.ro is an established Romanian online travel agency specializing in accommodation bookings including hotels, guest houses, apartments, and wellness packages primarily targeting Romanian-speaking travelers. The website offers a VIP membership program with discounts and features extensive user reviews and promotional campaigns, positioning itself as a trusted regional player in the hospitality and e-commerce sectors. The domain is well aged since 2010, indicating a mature business presence. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics (both GA3 and GA4), Cloudflare DNS, and various marketing and personalization tools such as Criteo, Facebook Pixel, and Emarsys. The site uses Bootstrap 3 for responsive design and is optimized for desktop and mobile users with moderate performance. Hosting and DNS are managed via Cloudflare, enhancing availability and security. Security posture is good with HTTPS enforced, use of reCAPTCHA, and error tracking via Sentry. However, some security headers are not explicitly detected, and DNSSEC is not enabled, which could be improved. Privacy compliance is basic; no explicit privacy or terms of service pages were found in the provided content, and no direct contact information or security policies are visible, which may impact user trust and regulatory compliance. Overall, the website is professional, content-rich, and trustworthy, but it would benefit from publishing clear privacy and security policies and enhancing security headers and DNS configurations. The extensive use of third-party marketing and tracking scripts indicates a high level of user tracking, which should be transparently disclosed to comply with GDPR and similar regulations.

O

Office de tourisme de Chalon sur Saône

achalon.com

51

The website www.achalon.com serves as the official tourism office portal for Chalon-sur-Saône, a region in Burgundy, France. It provides comprehensive tourism-related information including accommodations, restaurants, cultural events, and leisure activities. The site is multilingual (French, English, German) and features rich multimedia content such as videos and image galleries, enhancing user engagement. The business model focuses on promoting regional tourism and supporting local businesses through event promotion and visitor information services. Technically, the site is built on WordPress with a custom Woody theme and leverages modern JavaScript libraries and APIs for maps, video playback, and UI components. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and some best practices, though security headers could be improved. Privacy compliance is moderate with cookie consent mechanisms but lacks a clearly identified privacy policy page. WHOIS data is unavailable, raising concerns about domain registration legitimacy, which should be verified. Overall, the site is professional and trustworthy from a content and technical perspective but requires attention to domain registration and privacy documentation.

Î

Île de la Réunion Tourisme

reunion.fr

58

The website www.reunion.fr serves as the official tourism portal for La Réunion, providing comprehensive information for travelers including accommodation, activities, cultural visits, and practical travel details. It targets tourists interested in exploring the island's natural beauty, culture, and adventure opportunities. The site is multilingual, supporting French, German, and English, enhancing accessibility for international visitors. Technically, the site is built on WordPress with a custom Woody theme and integrates modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience.

C

Communauté de communes Pyrénées-Cerdagne

pyrenees-cerdagne.com

59

Pyrénées Cerdagne Tourisme is the official regional tourism website for the Pyrénées Cerdagne area in France, operated by the Communauté de communes Pyrénées-Cerdagne. The site provides comprehensive information on local attractions, accommodations, activities, events, and practical visitor information, targeting tourists and visitors interested in exploring the region. The business model is government-funded tourism promotion, positioning itself as a key regional authority and information portal. Technically, the website is built on Drupal 7 with AngularJS enhancements, uses Matomo for privacy-conscious analytics, and integrates mapping technologies such as Leaflet and Google Maps API. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent frameworks but lacks visible security headers and formal privacy or terms of service pages, which are recommended for compliance and trust. WHOIS data is missing or unavailable, which slightly impacts trust but is mitigated by the official branding and social media presence. Overall, the site is professional, trustworthy, and serves its tourism promotion purpose effectively.

L

Landes Chalosse Tourisme | Vos vacances dans le Sud-Ouest

landes-chalosse.com

59

The website www.landes-chalosse.com serves as the official tourism portal for the Landes Chalosse region in southwestern France. It provides comprehensive information about local attractions, events, accommodations, dining, and activities, targeting tourists and visitors interested in exploring this cultural and natural area. The site integrates booking functionalities and promotes regional heritage and leisure options, positioning itself as a key regional tourism resource. Technically, the site is built on Drupal CMS with AngularJS enhancements, leveraging modern web technologies such as Bootstrap, jQuery, and Leaflet for interactive maps. It employs Google Tag Manager and Zendesk Chat for analytics and user engagement. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks several important security headers and explicit privacy or security policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is professionally designed and functional, serving its tourism promotion purpose effectively. The main risks relate to incomplete WHOIS information and minimal security policy disclosures. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance trust and compliance.

B

Beaune et le Pays Beaunois Tourisme - Bourgogne

beaune-tourisme.fr

62

Beaune et le Pays Beaunois Tourisme is a regional tourism office website dedicated to promoting Beaune and the Burgundy wine region. The site offers comprehensive information on accommodations, wine tourism experiences, cultural visits, and local events, targeting tourists and visitors interested in the region. The business model focuses on destination marketing and facilitating tourism services. Technically, the website is built on WordPress with a modern tech stack including JavaScript libraries such as jQuery, Leaflet, and Google Maps API, providing a good user experience with multi-language support and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit privacy policy or security contact information is found. The absence of WHOIS registration data is a concern for domain legitimacy, but the website content and structure indicate a legitimate tourism office. Overall, the site is professional and trustworthy but would benefit from improved transparency regarding privacy and security policies.

D

Destination Pays Bigouden

destination-paysbigouden.com

62

Destination Pays Bigouden is a regional tourism website promoting the Pays Bigouden area in France. It offers comprehensive information on local experiences, accommodations, restaurants, events, and practical visitor information. The site targets tourists and families interested in exploring the region's culture and natural attractions. Technically, the website uses Drupal CMS with AngularJS and integrates multiple third-party services including Google Maps, YouTube, and marketing automation tools. The site is well-structured, mobile-optimized, and provides a good user experience with multilingual support. Security posture is adequate with HTTPS and reCAPTCHA Enterprise, but could be improved by adding more security headers and publishing explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy policy page. WHOIS data is unavailable, which raises some legitimacy concerns despite the professional appearance and content quality of the site. Overall, the website is a credible and useful tourism resource but should address WHOIS transparency and privacy policy gaps to enhance trust.

C

Champsaur Valgaudemar – Un territoire 4 saison aux portes du Parc national des Ecrins

champsaur-valgaudemar.com

58

The website www.champsaur-valgaudemar.com serves as a regional tourism portal for the Champsaur Valgaudemar area in France, offering comprehensive information on local attractions, accommodations, activities, and events. It targets tourists and outdoor enthusiasts interested in mountain experiences year-round. The site is built on WordPress with a modern tech stack including jQuery, Leaflet.js for maps, and integrates Google Analytics and Facebook Pixel for tracking. The design is professional and content-rich, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and terms of service pages are missing, which impacts compliance and trust. The WHOIS data is unavailable, raising concerns about domain registration transparency, but the active and professional website presence suggests legitimate operation. Overall, the site is functional and trustworthy for tourism purposes but would benefit from enhanced privacy disclosures and incident response information.

O

Office de Tourisme de Rochefort Océan

rochefort-ocean.com

68

Office de Tourisme de Rochefort Océan operates as a regional tourism office providing comprehensive information and services related to tourism in the Rochefort Océan area of France. The website offers details on accommodations, events, local attractions, and thermal cures, targeting tourists and visitors interested in this coastal region. The business model focuses on tourism promotion and facilitating bookings and event ticketing, positioning itself as a key regional tourism resource. Technically, the website is built on Drupal CMS with AngularJS and Bootstrap frameworks, integrating modern web technologies such as Google Maps API, Matomo analytics, and Crisp chat for user engagement. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with a professional design and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, along with a cookie consent mechanism indicating some privacy compliance. However, the absence of a dedicated privacy policy page and incident response information represents gaps in compliance and security transparency. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. The WHOIS data is missing, with the domain appearing unregistered or expired in the registry, which raises concerns about domain legitimacy. Despite this, the website content and presentation suggest a legitimate tourism office. Monitoring domain registration status is recommended to ensure continued trustworthiness. Overall, the site is a well-constructed regional tourism platform with room for improvement in privacy compliance and domain registration transparency.

M

Megève Tourisme

megeve-tourisme.fr

69

Megève Tourisme operates a comprehensive and professionally designed tourism website promoting the alpine resort of Megève in France. The site targets tourists seeking a four-season mountain destination, offering detailed information on accommodations, activities, and visitor services. The business model focuses on tourism promotion and facilitating accommodation bookings through partner sites. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and some security monitoring, though additional security headers could enhance protection. Privacy compliance is well addressed with visible cookie and privacy policies and consent mechanisms. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site presentation and content quality. Overall, the website is a reliable and authoritative source for tourism information about Megève.

GEMOS CZ spol s r.o. operates the website usekovarychlost.cz, providing specialized traffic monitoring and management systems, particularly focusing on section speed measurement technology. The company targets transportation authorities and municipalities, offering B2B solutions including weight measurement systems, smart speed indicators, and navigation tools. The business is positioned as a niche player within the Czech Republic's transportation technology sector, with a domain age consistent with its operational history since 2014. Technically, the website employs standard web technologies such as Bootstrap and jQuery, with Google Analytics and Tag Manager for tracking. However, the site lacks visible HTTPS enforcement and security headers, indicating room for security improvements. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and functional but requires enhancements in security and privacy to meet modern standards.

GEMOS DOPRAVNÍ SYSTÉMY a.s. is a Czech company specializing in intelligent traffic monitoring and control systems, including speed indicators and meteorological data integration. The website presents a professional image with clear product descriptions and partner affiliations, targeting organizations involved in traffic management. The business model is B2B, focusing on providing technology solutions for transportation safety and efficiency. The domain age and WHOIS data align well with the company's stated history, supporting legitimacy. Technically, the website uses established web technologies such as Bootstrap, jQuery, and Jssor Slider, providing a moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. However, the site lacks advanced security headers and does not explicitly enforce HTTPS based on the provided data, which could be a risk. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Security posture is moderate but could be improved by implementing HTTPS, security headers, and formal privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which limits transparency and readiness for security events. The site uses Google Tag Manager for analytics, but no cookie consent mechanism is present, which may expose the company to privacy compliance risks. Overall, the website is functional and professional but requires enhancements in security and privacy compliance to reduce risk and improve trustworthiness. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

J

Jezdecký areál Stará Pošta

jkstaraposta.cz

40

Jezdecký areál Stará Pošta is a small equestrian facility located near Brno, Czech Republic, offering horseback riding lessons, camps, and related services. The business emphasizes horse welfare and quality riding experiences in a natural setting. The website is professionally designed using WordPress with modern JavaScript libraries and Bootstrap for responsiveness. It provides clear contact information and social media presence but lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is generally good with HTTPS enabled, but security headers and incident response mechanisms are missing. Overall, the website is functional and trustworthy for its target audience but could improve compliance and security practices.

Č

Český florbal & eSports.cz, s.r.o.

ceskyflorbal.cz

61

Český florbal is the official governing body for floorball in the Czech Republic, providing comprehensive information and services related to national competitions, youth development, and national teams. The website serves as a central hub for players, clubs, officials, and fans, offering schedules, news, training resources, and event information. The organization holds a strong market position as the authoritative source for floorball in the country. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, Google Analytics, and reCAPTCHA v3, alongside frameworks like Nette. The site is well-optimized for mobile devices, features good accessibility, and maintains a professional design with clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies present. Overall, the website presents a low risk profile with strong business credibility and good digital maturity. The absence of WHOIS data limits domain trust verification, but the site’s content and external partnerships support its legitimacy. Strategic improvements in security headers and performance optimization are recommended.

T

TecAlliance

tecalliance.net

68

TecAlliance is a global leader in providing automotive aftermarket data solutions and digital services. Their offerings include comprehensive parts catalogues, logistics and order management platforms, repair and maintenance data, and fleet management tools. The company targets manufacturers, traders, workshops, e-commerce businesses, and fleet owners worldwide, positioning itself as a key enabler of innovation and efficiency in the automotive aftermarket industry. The website reflects a mature digital presence built on WordPress and Elementor, with modern technologies and good mobile optimization. Privacy compliance is well addressed through Usercentrics consent management. Security posture is generally good with HTTPS and no exposed sensitive data, though some security headers are not evident in the HTML source and should be verified server-side. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain registration legitimacy. Overall, TecAlliance presents a professional and trustworthy business front with strong branding and partner ecosystem.

C

Continental Industry

contitech.de

70

Continental Industry is an enterprise-level B2B company specializing in industrial technology solutions across multiple sectors including manufacturing, transportation, and energy. The website presents a comprehensive portfolio of products and services, emphasizing their expertise and global market position as a leading industrial specialist. The digital infrastructure employs modern web technologies such as jQuery, Bootstrap, and Azure Media Player, with integrated consent management and analytics tools to ensure GDPR compliance and user tracking. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the website is professional, content-rich, and trustworthy from a business and user experience perspective.

E

Elektrobit

elektrobit.com

73

Elektrobit is a well-established automotive software company specializing in embedded software products for ECU, AUTOSAR, automated driving, connected vehicles, and user experience solutions. The company targets automotive industry professionals, OEMs, and Tier 1 suppliers with a B2B business model. Their market position is strong, supported by a comprehensive portfolio of software products and engineering services, including cybersecurity and software-defined vehicle technologies. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Owl Carousel, supported by a CDN (Cloudfront) for performance optimization. SEO and accessibility are well implemented, with Yoast SEO plugin usage and responsive design. Security measures include HTTPS, cookie consent mechanisms, and security incident reporting, although some security headers could be explicitly added for enhanced protection. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. WHOIS data is unavailable, possibly due to privacy protection, but the domain and website content indicate legitimacy and professionalism. Overall, Elektrobit's website demonstrates a mature digital presence with strong business credibility and security awareness. Minor improvements in explicit security headers and incident response transparency are recommended to further enhance trust and compliance.

P

Povodňový plán České republiky

dppcr.cz

50

The website dppcr.cz serves as the official digital flood plan portal for the Czech Republic, providing comprehensive flood-related information, meteorological data, flood commission activities, and thematic maps. It targets government agencies, emergency responders, and public stakeholders involved in flood management. The site is well-structured with clear navigation and integrates links to national and European meteorological services, positioning itself as a key resource in national flood preparedness and response. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Google Fonts. It employs HTTPS and Google Analytics for tracking, though lacks advanced security headers and cookie consent mechanisms. Mobile optimization is basic but functional, and accessibility features are minimal. The hosting and domain registration are consistent with a Czech government entity, enhancing trustworthiness. From a security perspective, the site benefits from HTTPS and absence of visible vulnerabilities or sensitive data exposure. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and user trust. The use of Google Analytics without consent mechanisms may pose privacy compliance risks under GDPR. Overall, the website is a credible and authoritative government resource with good content quality and business credibility. To improve, it should implement privacy and cookie policies with consent, enhance security headers, and provide clear contact information for security and data protection matters. These steps will strengthen compliance, user trust, and security posture.

MAS Střední Vsetínsko, z. s. is a non-profit association focused on supporting commercial and non-profit activities to improve the quality of life in 12 municipalities within the Střední Vsetínsko region of the Czech Republic. The organization facilitates access to European subsidies for local development and supports various sectors including public, business, and non-profit. The website reflects a regional development facilitator with a clear mission and community focus. Technically, the website is built on WordPress using common libraries such as jQuery, Bootstrap, and Smart Slider 3, hosted by REG-WEDOS. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

S

Sdružení pro rozvoj mikroregionu Střední Vsetínsko

mikroregionsv.cz

54

The website mikroregionsv.cz represents the Sdružení pro rozvoj mikroregionu Střední Vsetínsko, a regional development association in the Czech Republic focused on community development, tourism, and local events. The site provides comprehensive information about projects, events, news, member municipalities, and documents relevant to the microregion. It targets local residents, tourists, and community stakeholders. The business model is non-profit and government-oriented, with a small organizational size and a founding year of 2017. Technically, the website employs modern web technologies including Bootstrap 5.3, jQuery, FontAwesome, Nette Forms and AJAX, LightGallery, Lightbox2, Swiper, and Leaflet.js for mapping. It is hosted with Cloudflare DNS and uses HTTPS, indicating a secure transport layer. The site is mobile optimized and has good navigation and content quality, although accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit security headers and does not provide a vulnerability disclosure policy or incident response contacts. Privacy and cookie policies are not found, which is a compliance gap. No exposed sensitive data or vulnerabilities were detected in the HTML content. Overall, the website is trustworthy and professional for its regional development purpose but would benefit from improved privacy compliance, security headers, and incident response transparency to enhance its security posture and regulatory adherence.