Security Directory

D

DS Automobiles

dsautomobiles.cz

62

DS Automobiles Czech Republic operates a professionally designed website showcasing their luxury French automobile offerings, including new models, financing, leasing, and after-sales services. The site targets B2C customers in the Czech market with a focus on premium vehicles and connected services. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and responsive design, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though explicit privacy policies and security headers are lacking. The absence of WHOIS data reduces domain trustworthiness but the overall branding and content quality indicate a legitimate business under the Stellantis group.

K

Kofola a.s.

saratica.cz

52

Šaratica.cz is a website dedicated to promoting and selling Šaratica, a natural mineral water rich in magnesium, known for its health benefits related to digestion, constipation relief, detoxification, and weight loss. The product has a long historical background dating back to the late 19th century and is currently managed by Kofola a.s., a recognized beverage company in the Czech Republic. The website targets health-conscious consumers, including pregnant women and those seeking natural remedies for digestive issues. Technically, the site uses a traditional jQuery-based stack with fullPage.js for navigation and integrates Google Analytics and Tag Manager for tracking. The site is hosted on servers associated with the registrar Gransy, consistent with the WHOIS data. Security-wise, the site uses HTTPS and has a cookie consent mechanism compliant with GDPR, but lacks explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in formal security disclosures and enhanced HTTP security headers.

N

Nadace Partnerství

stromroku.cz

54

Nadace Partnerství operates the Strom roku website as a non-profit platform dedicated to promoting environmental awareness and community engagement through an annual tree contest. The organization has a strong market presence in the Czech Republic with over two decades of activity, supported by recognized partners such as Ondrášovka mineral water and the European Tree of the Year initiative. The website effectively communicates its mission and engages its audience with clear navigation, social media integration, and relevant content. Technically, the site uses a modern stack including AngularJS, jQuery, Bootstrap, and Kentico CMS, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong business signals and partner ecosystem.

Innovation Week 2025 is a major European event focused on innovation and artificial intelligence, held in Prague. The website serves as the primary platform for event information, ticket sales, and partnership opportunities. It targets a broad audience including leaders, tech enthusiasts, startups, investors, and companies seeking visibility and networking. The event boasts a decade-long history, multiple stages, seminars, and a large roster of global speakers, positioning it as a leading innovation conference in Europe. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with extensive use of tracking and marketing tools including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The site is mobile optimized and offers a professional user experience with clear navigation and rich content. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks some security headers and explicit privacy and terms of service documentation. WHOIS data is privacy protected, which is typical for event domains, and no suspicious patterns were detected. Overall, the website is credible and professionally maintained, though improvements in privacy transparency and security headers are recommended.

C

Corneliani S.p.A.

corneliani.com

74

Corneliani S.p.A. is a well-established Italian luxury menswear brand specializing in high-end clothing, shoes, and accessories. The company targets discerning male customers seeking timeless elegance and quality craftsmanship. The website serves as an official e-commerce platform offering the latest collections, gift cards, and store locator services, supporting a global audience with multiple language and country versions. The business model focuses on direct retail through an online store, complemented by physical retail presence. Technically, the website is built on the Magento Commerce platform, leveraging modern JavaScript libraries such as RequireJS, KnockoutJS, and jQuery. It integrates advanced marketing and payment tools including Google Tag Manager, Klarna, Amazon Pay, and Hotjar for analytics and user experience enhancement. The site is mobile optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on login forms, and applies secure cookie settings. However, some security headers are not explicitly visible in the HTML source and could be verified or improved. No explicit security policy or incident response contact is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy front for Corneliani's luxury retail business. The main concern is the absence of WHOIS registration data, which is unusual for a commercial domain and slightly reduces domain trustworthiness. This may be due to privacy protection or a WHOIS server issue. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing a security policy and incident response information.

H

HONOR

honor.com

65

HONOR is a leading global manufacturer of smart devices, including smartphones, tablets, laptops, and wearables, targeting the Finnish market with localized content. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and product categorization. The technical infrastructure leverages modern web technologies such as Google Tag Manager, Google Analytics, and TrustArc for consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, including cookie consent and GDPR-aligned privacy policies. However, the absence of publicly available WHOIS data and lack of explicit contact or security policy information slightly reduce business credibility. Overall, the site is trustworthy and well-maintained, suitable for consumer electronics retail and brand engagement.

Brioni S.p.A. is a prestigious Italian luxury menswear brand specializing in tailored clothing, bespoke services, and made-to-measure offerings. Established in 1945 and now part of the Kering group, Brioni maintains a strong market position in the high-end fashion retail sector, targeting discerning consumers seeking exclusive and high-quality apparel. The website serves as an official e-commerce platform showcasing collections, bespoke services, and brand heritage. Technically, the site is built on modern web technologies including Next.js and React, hosted on a robust CDN infrastructure (Akamai), and optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and a vulnerability disclosure policy, though some formal security policies and incident response details could be more explicit. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site reflects a mature digital presence aligned with luxury brand standards, with no signs of blocking or WAF interference, and a high trustworthiness rating.

FENDI is a renowned luxury fashion brand established in 1925, operating under the LVMH group. The website serves as the official online boutique offering a wide range of products including fashion collections for women, men, kids, and home. It targets a global audience with a focus on high-end luxury consumers. The business model centers on e-commerce retail complemented by personalized shopping services and boutique appointments. The site demonstrates strong branding consistency and high-quality content aligned with its market position. Technically, the website leverages a modern e-commerce platform (Demandware/Salesforce Commerce Cloud) with integrations for advanced search (Algolia), personalization (Dynamic Yield), and analytics (Google Tag Manager, Matomo, AWS RUM). The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforced, multiple security headers, and encrypted payment processing. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site is trustworthy and professionally managed, though WHOIS data is unavailable likely due to privacy protections. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and enhancing transparency on data retention to further strengthen trust and compliance.

F

Florea Holand s.r.o.

florea.cz

55

Florea Holand s.r.o. operates Florea.cz, the largest online florist in the Czech Republic, specializing in fresh flower sales and nationwide delivery. The company targets consumers seeking quality bouquets and floral accessories, offering a broad product range and strong customer support. The website demonstrates a mature e-commerce platform with professional design, clear navigation, and mobile optimization. Technically, it employs modern JavaScript libraries, tracking tools, and analytics services, with a focus on user consent and privacy compliance. Security posture is solid with HTTPS and secure forms, though some security headers and policies could be improved. The absence of WHOIS data slightly impacts trust but is mitigated by visible certifications and contact transparency. Overall, Florea.cz presents a trustworthy, professional retail platform with room for enhanced security documentation.

P

PASSERINVEST GROUP, a.s.

republikabohatsi.cz

62

The website republikaBohatsi.cz represents an initiative led by PASSERINVEST GROUP, a.s., focused on promoting societal and infrastructural development in the Czech Republic. The initiative aims to foster changes in public thinking to support future prosperity, emphasizing transportation infrastructure, building development, and workforce availability. The site is well-structured, professionally designed, and targets Czech citizens and stakeholders interested in national development. The business is positioned as a significant player in infrastructure and real estate sectors, leveraging the reputation of its founder Radim Passer. Technically, the website is built on the Solidpixels CMS platform and integrates modern web technologies including Google Analytics and Tag Manager for tracking, as well as various UI enhancement libraries. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and publicly available incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the website presents a credible business initiative with good technical implementation and privacy compliance. However, improvements in security headers, WHOIS transparency, and incident response disclosures would enhance trust and security posture.

F

FLEKSI prostor, a.s.

fleksi.cz

62

FLEKSI prostor, a.s. is a flexible workspace provider operating multiple locations in the Brumlovka district of Prague, offering offices, coworking spaces, event venues, and meeting rooms. The company positions itself as a modern, community-oriented real estate service provider with a strong emphasis on flexibility and quality. Their market presence is supported by professional certifications such as the Fitwel 3-star certification, indicating a commitment to health and well-being in their facilities. The website is professionally designed, mobile-optimized, and integrates modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement, use of reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is well addressed with clear GDPR policies and cookie consent. Overall, the domain WHOIS data is privacy protected, which is justified for this business type, and no suspicious patterns were detected. The website provides clear contact information and social media presence, enhancing trust and credibility.

S

Společenské centrum Bethany

spolecenskecentrum.cz

44

Společenské centrum Bethany is a small, well-established non-profit Christian community center based in Prague, Czech Republic. It operates as part of the Seventh-day Adventist Church and offers a variety of spiritual, cultural, and educational programs including regular worship services, seminars, courses, and space rental. The website reflects an active community hub with frequent updates on events and sermons, targeting both believers and the general public seeking spiritual enrichment. Technically, the site is built on WordPress with a modern plugin ecosystem, including event calendars and contact forms, supported by Google Analytics and Facebook tracking for marketing purposes. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and formal privacy and cookie policies, indicating room for compliance improvements. Overall, the domain registration data is consistent with the business profile, showing a legitimate and trustworthy entity with a domain age appropriate for its history. Strategic recommendations include implementing GDPR-compliant privacy and cookie policies, enhancing security headers, and improving accessibility features to strengthen trust and compliance.

B

Balance Club Brumlovka

balanceclub.cz

50

Balance Club Brumlovka is a premium fitness and wellness club based in the Czech Republic, offering a wide range of services including fitness, physiotherapy, spa, and psychological support. The club positions itself as a top-tier facility comparable to international standards, targeting health-conscious adults seeking comprehensive wellness solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the site uses modern web technologies such as Google Tag Manager and Leaflet.js for maps, and it is well-optimized for mobile devices with good SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements, though it lacks advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trust but does not detract significantly from the website's professional presentation and business legitimacy. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain registration clarity.

Krčák žije is an online magazine dedicated to the Krčský les area in Prague, providing local news, event calendars, interactive maps, and community information. It is initiated and supported by Passerinvest Group, a real estate developer active in the region. The website serves local residents and visitors interested in nature, sports, and cultural activities. Technically, the site uses modern web technologies including Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism in place. The site is hosted on Czech infrastructure with consistent WHOIS data indicating legitimacy. Security posture is good with HTTPS and form validation, but lacks some advanced security headers and published security policies. Privacy compliance is basic, with no explicit privacy policy or terms of service found. Overall, the website is professional, trustworthy, and safe for general audiences.

P

Passerinvest Group, a.s.

hilabrumlovka.cz

49

Passerinvest Group, a.s. is a well-established Czech real estate developer with over 30 years of experience, specializing in mixed-use developments such as the Hila project in Prague's Brumlovka district. The website showcases a modern, sustainable building combining office, retail, and residential spaces, targeting tenants and investors. The digital infrastructure is built on WordPress with modern analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and consent-based tracking, though some security policies and incident response details are absent. Overall, the website reflects a professional and credible business presence aligned with its market position.

R

Ridera Sport – Jedinečný sportovní areál v Ostravě

riderasport.cz

54

Ridera Sport is a Czech Republic-based sports and recreation facility offering a variety of sports venues and wellness services. The website presents a well-structured and professionally designed platform targeting local sports enthusiasts and community members. Technically, the site is built on WordPress with Elementor and Astra theme, incorporating modern web technologies and tracking tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy documentation. The absence of direct contact details and privacy policies suggests room for improvement in transparency and compliance. Overall, the domain registration data supports the legitimacy of the business with a consistent and long-standing domain age.

R

RPM Facility

rpmfacility.cz

45

RPM Facility is a Czech-based company specializing in comprehensive facility management services covering all life cycles of real estate properties. Their offerings include technical maintenance, technology servicing, cleaning and greenery upkeep, security and reception, energy management, and consulting services. The company targets property owners and managers within the Czech Republic, positioning itself as an established local player with a medium-sized business footprint founded in 2017. The website reflects a professional and consistent brand image with good content quality and clear navigation.

T

TILL CONSULT a.s.

duna.cz

50

TILL CONSULT a.s. operates the website duna.cz, offering a suite of economic and accounting software products under the DUNA brand, targeting small to medium businesses, accounting firms, and specialized sectors such as medical offices and energy distributors. The company has a strong market presence with 28 years of experience and a comprehensive product portfolio including DUNA BUSINESS, TOP, SMART, TRADING, and related web extensions. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content including testimonials and industry news. Technically, the site uses modern JavaScript libraries, Bootstrap framework, and integrates Google Tag Manager and Seznam retargeting for marketing purposes. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and certifications are not published. Contact information is clearly provided with phone, email, and physical address. Overall, the site reflects a mature business with a solid digital presence but could improve transparency on privacy and security policies.

E

EPLAN

eplan.cz

57

EPLAN is a leading global provider of software and services focused on electrical engineering, automation, and mechatronics. The company operates a professional, multilingual website powered by TYPO3 CMS, reflecting a mature digital infrastructure with integrated marketing and analytics tools such as Google Tag Manager and HubSpot. The website demonstrates good design quality, mobile optimization, and clear navigation, targeting industrial and engineering professionals. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and vulnerability disclosures are not publicly available. Privacy compliance is supported by a cookie consent mechanism, but a formal privacy policy page was not detected in the provided content. Overall, the domain appears legitimate and professionally managed, though WHOIS data is privacy protected or unavailable, which is common for enterprises. Strategic recommendations include publishing detailed privacy and security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen trust and compliance.

A

AERS s.r.o.

aers.cz

53

AERS s.r.o. is a Czech-based company specializing in the development and manufacture of energy storage technologies, focusing on battery systems for residential and industrial applications. Their offerings include home battery systems, industrial battery storage, and energy optimization services, targeting customers seeking energy self-sufficiency and efficiency. The company positions itself as a niche player in the energy sector within the Czech Republic, with a professional online presence and clear contact information. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and presents content in a structured and navigable manner. However, it lacks advanced SEO and accessibility features and does not implement visible security headers, which could be improved. From a security perspective, the site uses HTTPS but does not display security policies, privacy notices, or cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data reduces trustworthiness and transparency. No forms or sensitive data collection points were detected, minimizing immediate risk exposure. Overall, the security posture is moderate but could benefit from enhanced compliance and security best practices. The overall risk assessment indicates a legitimate small business with a professional web presence but with gaps in transparency and privacy compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, improving accessibility, and clarifying domain registration details to enhance trust and compliance.

F

Fenix Group

fenixgroup.cz

55

Fenix Group is a Czech-based manufacturer specializing in electric heating systems including radiant panels, heating cables, films, convectors, and control systems. The company targets residential, commercial, industrial, and agricultural sectors with a comprehensive product range and technical support services. Their market position is supported by certifications such as EUHA and a lifetime warranty program, indicating a strong commitment to quality and customer assurance. The website is professionally designed using Drupal 7, incorporating modern analytics and marketing tools with clear privacy compliance mechanisms including GDPR-aligned cookie consent. Security posture is solid with HTTPS enforced and bot management via Cloudflare, though security headers could be improved. WHOIS data is not publicly available, which slightly reduces transparency but does not detract from the overall legitimacy. The site is fully accessible with no blocking or WAF challenges detected.

Schmachtl CZ is a Czech-based company specializing in the distribution of components for industrial automation and electrical installations. They represent over 20 manufacturers and hold exclusive distributorship for the Wieland brand in the Czech market. Their offerings include advanced sensors, PLCs, electrical connectors, and installation components aimed at optimizing industrial processes and electrical infrastructure. The website is professionally designed, mobile optimized, and provides clear contact information, supporting their position as a reliable distributor in the manufacturing and energy sectors. Technically, the site leverages modern frameworks like Next.js and React, with integrated analytics from Google and Seznam.cz. Security posture is good with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies, which are areas for improvement. WHOIS data is unavailable, which slightly impacts trust but the site content and contact details support legitimacy.

O

OSRAM Ceska republika s.r.o.

osram.cz

72

OSRAM Ceska republika s.r.o. operates a professional corporate website focused on innovative and sustainable lighting solutions, targeting B2B customers in automotive, industrial, and entertainment sectors. The company is positioned as a global leader in optical and lighting technologies, supported by its parent company ams OSRAM. The website provides comprehensive product information, contact details, and links to global and regional OSRAM sites, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries, Algolia search, and a consent management platform (Usercentrics), alongside Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and accessible navigation, although accessibility features are basic. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and dedicated security policy pages. The absence of WHOIS data limits domain registration trust analysis, but the website's professional branding, structured data, and consistent content strongly indicate legitimacy. No adult or questionable content is present, and privacy compliance is well addressed with clear policies and consent banners. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration visibility.

K

KNX národní skupina České Republiky, z.s.

knxcz.cz

45

KNX národní skupina České Republiky, z.s. is a Czech non-profit association dedicated to promoting and supporting KNX technology for intelligent building installations. The website serves as an information hub offering training courses, community activities, and documentation for professionals and companies involved in KNX systems. The organization is well-established since 2015 and holds a national position within the Czech Republic. Technically, the website uses a mix of legacy and modern technologies including jQuery 1.4, CKEditor 5, and Google Analytics for tracking. While the site is functional and content-rich, some technical debt is evident, particularly the use of outdated JavaScript libraries which pose security risks. Security posture is moderate with no visible security headers and no explicit security policies published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from technical and compliance improvements.

A

AXIMA, spol. s r. o.

axima-obchod.cz

63

AXIMA, spol. s r. o. is a Czech-based medium-sized company specializing in wholesale distribution of electrotechnical materials and industrial automation components. With over 24 years of market presence, it serves primarily B2B customers in the Czech Republic and Slovakia, offering a wide range of products including power supplies, connectors, sensors, and safety equipment. The website reflects a professional and well-structured digital presence with clear product categorization and manufacturer partnerships. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager, and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced but lacks some recommended security headers like Content-Security-Policy and X-Frame-Options. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security headers to improve trust and compliance.

B

Blue Panther s.r.o.

blue-panther.cz

43

Blue Panther s.r.o. is a Czech-based company specializing in measurement equipment, calibration services, audits, and professional training primarily targeting industrial maintenance, metrology laboratories, healthcare technology, and energy sectors. The company maintains a solid market position supported by partnerships with reputable brands such as Fluke and Kyoritsu and holds ISO 9001 certification, indicating a commitment to quality management. Their business model focuses on B2B sales and services, offering a comprehensive portfolio including equipment supply, calibration, audits, and educational seminars. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.10.2, Klaro for cookie consent, Algolia for search, and multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Smartsupp chat. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. However, some technical debt is noted with the use of an outdated jQuery version and absence of explicit security headers. From a security perspective, the site enforces HTTPS and uses consent-based tracking scripts, reflecting good privacy practices. No critical vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and business information appear professional and trustworthy. No explicit security policy or incident response contacts were found, suggesting room for improvement in transparency and preparedness. Overall, Blue Panther s.r.o. presents a professional and trustworthy online presence with good compliance and security posture, albeit with some technical and domain registration concerns. Strategic improvements in security headers, updating legacy libraries, and clarifying domain registration details would enhance trust and resilience.

R

Robelshoes.pl

robelshoes.pl

55

Robelshoes.pl is a professional e-commerce retailer specializing in branded women's and men's footwear and accessories, targeting primarily the Polish market and neighboring European countries. The website offers a broad selection of products with key services including free delivery for orders over 249 PLN and a 30-day return policy, positioning itself as a customer-friendly online shoe store. The presence of multiple regional partner domains indicates a broader regional footprint in Central and Eastern Europe. Technically, the website employs modern web technologies such as Google reCAPTCHA for bot protection, Sentry for error monitoring, and Google Tag Manager for marketing and analytics. The site is built on the CREATIVE shop CMS platform and uses HTTPS with a good SSL configuration, ensuring secure communications. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected, which could be improved for better compliance and protection. The WHOIS data for the domain is not publicly available, which is common for .pl domains managed by NASK, but the website's professional design, structured data, and consistent branding support its legitimacy. Overall, the site presents a solid security posture with room for enhancement in privacy compliance and security headers. Strategic recommendations include implementing cookie consent banners, adding security headers, publishing a security policy, and maintaining regular audits of third-party scripts to strengthen security and compliance.

R

Robelshoes.ro

robelshoes.ro

49

Robelshoes.ro is an e-commerce retailer specializing in footwear and accessories for women, men, and children, offering a wide range of branded products. The website targets consumers primarily in Romania and neighboring European countries, providing a 30-day return policy and multiple localized country sites. The business model is focused on online retail with a multi-brand catalog, positioning itself as a regional player in the footwear market. Technically, the site uses a CREATIVE shop CMS platform with integrations such as Google Tag Manager, Facebook Pixel, and Sentry for error tracking, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement, CSRF tokens, and Google reCAPTCHA on forms, though there is room for improvement in security headers and published policies. Overall, the site is professional and functional with good content quality and moderate trustworthiness. The domain WHOIS data is privacy protected by ROTLD, which is common for Romanian domains and does not raise immediate concerns. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and improving mobile optimization.

R

Robelshoes.at

robelshoes.at

58

Robelshoes.at is an Austrian e-commerce retailer specializing in branded footwear and accessories for women, men, and children. The website offers a broad selection of products with free shipping over a certain threshold and a 30-day return policy, positioning itself as a regional player with multiple country-specific domains. The site is built on the CREATIVE shop CMS platform and integrates modern technologies such as Google reCAPTCHA, Facebook Pixel, Google Tag Manager, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-bot measures in place, though some security headers are missing and privacy compliance could be improved. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for e-commerce businesses. Overall, the site is professional, secure, and user-friendly, targeting consumers in Austria and neighboring countries.

R

Robelshoes.eu

robelshoes.eu

58

Robelshoes.eu is an established European e-commerce retailer specializing in branded footwear and accessories. The website targets a broad audience across multiple European countries, offering a wide selection of products from well-known brands. The business model is focused on online retail with multi-language support and a clear product categorization structure. Technically, the site is built on the CREATIVE shop CMS platform, utilizing modern web technologies including HTTPS, Google reCAPTCHA for bot protection, and Sentry for error monitoring. While the site demonstrates good design and navigation, mobile optimization is basic and could be improved. Security posture is solid with HTTPS and some security best practices, but lacks explicit security headers and cookie consent mechanisms. WHOIS data is privacy protected, which is common for e-commerce but limits transparency. Overall, the site is professional and trustworthy with moderate risk.

R

Robelshoes.hu

robelshoes.hu

52

Robelshoes.hu is a Hungarian e-commerce retailer specializing in branded footwear and accessories, offering a wide range of quality shoes from world-renowned brands. The website targets general consumers seeking convenient online shopping with home delivery. The platform is part of a multi-country network with sister sites serving neighboring markets. Technically, the site uses a proprietary CMS (CREATIVE shop), integrates modern tracking and analytics tools such as Facebook Pixel, Google Tag Manager, and Sentry for error monitoring. Security measures include HTTPS, CSRF tokens, and Google reCAPTCHA, indicating a mature security posture. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with moderate performance and good mobile optimization.

R

Rainer Winter Stiftung

rainer-winter-stiftung.de

67

The Rainer Winter Stiftung is a well-established non-profit foundation based in Fürth, Germany, founded in 1980. It focuses on supporting disadvantaged, sick, and socially weak children and youth primarily in the Nürnberg metropolitan area and internationally. The foundation operates with a transparent, unbureaucratic model, ensuring 100% of donations go directly to the cause, supported strongly by the uvex group and its partners. The website reflects a professional and consistent brand image, with clear messaging and good content quality. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including StencilJS and Amazon Cloudfront CDN for performance. It employs Usercentrics for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. From a security perspective, the site uses HTTPS with strong SSL configuration and implements consent mechanisms for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be verified and incident response policies published to enhance security posture. Overall, the site presents low risk with a strong trust profile, good privacy compliance, and a clear business purpose. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and maintaining regular security audits.

H

Hiplok

hiplok.com

70

Hiplok is a specialized e-commerce business focused on providing innovative bike security solutions including locks for bikes, motorbikes, e-bikes, and scooters. The company emphasizes product quality with Sold Secure Insurance Rated locks and offers lifetime warranties, positioning itself as a trusted niche player in the transportation security market. The website is built on a modern WordPress platform with WooCommerce, integrating various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Klaviyo, indicating a mature digital marketing strategy. Technically, the site is well-structured, mobile optimized, and uses HTTPS with a valid SSL certificate, though it lacks some advanced security headers and explicit privacy and terms policies. The domain is long-established since 2009, registered transparently without privacy protection, which supports the legitimacy of the business. Overall, the security posture is moderate with room for improvement in policy transparency and security headers. The website content is safe for general audiences and professionally presented.

U

UVEX ARBEITSSCHUTZ GMBH

uvex-safety.com

72

UVEX ARBEITSSCHUTZ GMBH operates the uvex safety website, a professional platform offering a wide range of personal protective equipment (PPE) designed and certified in Germany. The company targets business clients, safety professionals, and retailers, positioning itself as a leading manufacturer and distributor of occupational safety products including helmets, glasses, gloves, footwear, and respirators. The website reflects a mature digital presence with comprehensive product information, dealer locator tools, and advisory content.

U

uvex laservision

uvex-laservision.de

59

uvex laservision is a German-based manufacturer specializing in the development, production, and distribution of laser protection products, serving industrial and medical sectors. The company positions itself as a global leader in laser safety equipment, offering a range of products accessible via an online shop. The website is professionally designed, primarily in German with English language support, and targets professionals requiring laser safety solutions. Technically, the site leverages modern web technologies including Shopware CMS, Amazon Cloudfront CDN, Google Tag Manager, and Usercentrics for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and published security policies suggests room for improvement. WHOIS data confirms domain legitimacy with consistent registration and authoritative nameservers. Overall, the site is trustworthy and professionally maintained but could enhance transparency by publishing privacy policies and security disclosures.

H

HexArmor

hexarmor.com

70

HexArmor is a well-established global leader in the manufacturing and distribution of high-performance personal protective equipment (PPE), including gloves, eyewear, helmets, hearing protection, and body protection. The company targets safety professionals and industrial workers, providing innovative and reliable safety solutions designed to improve workplace safety and compliance. Their market position is strong, supported by extensive product lines and educational content that reinforce their brand as a trusted PPE provider. Technically, the website demonstrates a mature digital infrastructure with modern tracking and marketing technologies such as Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized, well-structured, and SEO-friendly, with good performance and accessibility features. The use of cookie consent tools and privacy policies indicates a commitment to privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a concern but may be due to privacy protection or registrar policies. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in security transparency and WHOIS data clarity. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trustworthiness.

H

Heckel

heckel-securite.fr

57

Heckel is a French manufacturer specializing in safety footwear, offering a broad range of products from lightweight safety sneakers to shoes designed for extreme environments. The company is part of the uvex group, a well-established entity in the safety and sports equipment sectors. The website demonstrates a professional digital presence with a modern TYPO3 CMS infrastructure, CDN hosting, and integration of analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the overall website professionalism and branding consistency support legitimacy.

U

uvex sports

uvex-sports.com

61

uvex sports is a well-established brand specializing in the manufacturing and retail of sports protective equipment such as helmets and goggles for wintersports, biking, and equestrian activities. The company targets both professional athletes and amateurs, offering technologically advanced products designed for safety and performance. The website reflects a consistent brand image aligned with the parent company uvex group, indicating a strong market position in the sports safety equipment sector. Technically, the site is built on TYPO3 CMS with integrations for consent management and Google services, demonstrating a modern digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR, but the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security transparency and adding incident response contacts to improve user trust and compliance.

U

uvex group

uvex-group.com

71

The uvex group is a large, internationally recognized manufacturer specializing in safety, sports, and leisure products. The company operates multiple strong brands and maintains a significant presence in Germany and Europe, with a focus on in-house production and quality control. Their website reflects a mature digital infrastructure built on TYPO3 CMS, leveraging modern web technologies and CDN delivery for optimal performance and user experience. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent management via Usercentrics. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site projects professionalism and trustworthiness consistent with a large manufacturing enterprise.

F

Formulayt

gatedcontent.com

64

Formulayt is an enterprise-focused SaaS platform specializing in scalable web form management and compliance for marketing operations teams. The company offers a solution that enables rapid deployment, governance, and updating of web forms integrated with major marketing automation platforms. The website presents a professional and polished digital presence with strong branding and customer trust signals, including testimonials and logos of reputable clients. Technically, the site is built on WordPress with modern performance and analytics tools, hosted with Cloudflare DNS and registrar services. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is partially addressed via a detailed cookie consent banner, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns.

N

Nordisk Media Utveckling AB

nmugroup.com

53

Nordisk Media Utveckling AB operates the NMU Group website as a trusted Nordic domain registrar and IT service provider specializing in domain name registration, DNS management, hosting, IT security, and domain legal services. Established since 1999, the company positions itself as a proactive domain agency with a strong focus on security and personalized service, targeting businesses and organizations requiring comprehensive domain and digital brand management solutions. The website reflects a professional and consistent brand image with detailed service offerings and customer testimonials, reinforcing its market credibility. Technically, the website is built on WordPress with modern technologies including Bootstrap 5, jQuery, and performance optimizations such as lazy loading and caching plugins. It employs Google Tag Manager for analytics and marketing, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and DNSSEC services promoted, although the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. However, the website content and business information are consistent and professional, mitigating immediate trust issues. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and support channels available. Overall, NMU Group presents a reliable and secure digital presence for domain and IT services in the Nordic region, with recommendations to enhance security headers, publish vulnerability disclosure information, and verify domain registration details to strengthen trust and compliance.

N

Nordisk Media Utveckling AB

nmugroup.se

53

Nordisk Media Utveckling AB operates the NMU Group website, providing comprehensive domain name registration, DNS, hosting, IT security, and domain legal services primarily targeting Nordic businesses and organizations. Established since 1999, the company positions itself as a trusted, accredited registrar and domain partner with a strong focus on security and personalized service. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, reinforcing its market position in the Nordic region. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as lazy loading and caching via WP Rocket. It integrates Google Tag Manager and Google Site Kit for analytics and marketing, with a cookie consent mechanism aligned with GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and promotes advanced DNS security features like DNSSEC and Anycast. However, it lacks visible HTTP security headers and a published security.txt file, which are recommended for enhanced security posture. The absence of WHOIS domain registration data raises concerns about domain legitimacy, despite the professional appearance and business credibility of the site. Overall, the website demonstrates a solid digital presence and security awareness but should address domain registration transparency and implement additional security headers to strengthen trust and compliance.

T

Thomas Publishing Company

thomasnet.com

72

Thomasnet.com is a leading B2B industrial supplier discovery platform operated by Thomas Publishing Company, with over 125 years of history connecting buyers and suppliers in North America. The website offers extensive services including supplier discovery, instant quotes, product catalogs, CAD models, and advertising solutions for suppliers. It targets procurement professionals, engineers, and business owners in manufacturing and industrial sectors. Technically, the site is built on modern frameworks such as React and Next.js, leveraging multiple analytics and marketing tools to optimize user experience and business insights. The website is well-optimized for SEO, mobile responsiveness, and accessibility, providing a professional and trustworthy user interface. Security posture is strong with HTTPS enforcement and bot protection, though explicit security policies and incident response information are not publicly disclosed. WHOIS data is unavailable, likely due to privacy or registry restrictions, but the site’s long-standing market presence and trust signals mitigate concerns. Overall, Thomasnet.com demonstrates a mature digital infrastructure and solid business credibility, with recommendations to enhance transparency around security and incident response.

G

GroundTruth

xad.com

72

GroundTruth, formerly known as xAd, is a leading location-based advertising platform that provides advertisers with powerful tools to drive in-store visits and real business results. The company offers a comprehensive suite of targeting products and media channels, leveraging its proprietary Blueprints technology and a global footprint across 21 countries. The website reflects a mature digital presence with professional branding, extensive use of modern marketing and analytics technologies, and a strong focus on privacy compliance. While the WHOIS data is unavailable, the website content and social media presence support the legitimacy of the business. The technical infrastructure is built on WordPress with integrations of multiple third-party analytics and advertising tools, ensuring robust tracking and user engagement capabilities. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site provides a trustworthy and professional experience for its target audience of advertisers and marketers.

C

Combell

combell.nl

69

Combell is a well-established hosting specialist operating primarily in the Netherlands, offering a comprehensive suite of services including professional webhosting, cloud hosting, dedicated servers, domain registration, SSL certificates, email hosting, and website building tools. The company targets a broad audience ranging from starters and small to medium enterprises (KMO) to large enterprises, positioning itself as a premium hosting provider with a strong emphasis on security and customer support. The website reflects a mature digital presence with consistent branding and high-quality content, supporting its market position effectively. Technically, the website leverages modern web technologies such as Font Awesome, Google Fonts, Google Analytics, Google Tag Manager, Visual Website Optimizer, Hotjar, and Iubenda for cookie compliance. The site is hosted by Combell itself, indicating control over infrastructure. Performance is moderate with excellent mobile optimization and good accessibility and SEO practices. The presence of security headers, HTTPS enforcement, and CSRF tokens indicates a strong security posture, although there is room for improvement in publishing explicit security policies and incident response information. Security-wise, the site demonstrates good practices including HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or vulnerability disclosure program suggests an opportunity to enhance transparency and incident readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Combell presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include publishing dedicated security and incident response policies, establishing a vulnerability disclosure program, and continuing to enhance privacy and security transparency to maintain and strengthen customer trust.

Laughing Dog Brewing is a small craft brewery based in Northern Idaho, known for its award-winning beers and community-focused taproom experience. The company emphasizes quality and variety in its beer offerings, targeting craft beer enthusiasts and local patrons. The website is hosted on WordPress using the Divi theme and integrates common marketing and analytics tools such as Google Analytics and Facebook SDK. While the site is well-designed and provides relevant content, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and Cloudflare DNS usage, but missing DNSSEC and security headers reduce overall security maturity. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

Johnson Brothers Mountain State Beverage is a leading distributor and broker of wine, craft beer, and spirits in West Virginia, serving all 55 counties with a large portfolio of products. The company has a strong market position and a medium-sized team, supported by a professionally designed website built on WordPress with modern technologies such as Divi theme and Revolution Slider. The website demonstrates good SEO and mobile optimization but lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Contact information is available primarily via a contact form and social media links, with no direct emails or phone numbers published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

D

Deliveroo

deliveroo.net

75

Deliveroo is a prominent UK-based online food delivery platform founded in 2012, offering a wide range of services including food, groceries, pharmacy, and gift deliveries. The company operates a large-scale digital marketplace connecting consumers with local restaurants and delivery riders, positioning itself as a leader in the transportation and e-commerce sectors within the UK. The website reflects a mature digital presence with a professional design, clear navigation, and mobile-optimized interfaces, supported by modern web technologies such as React and Next.js. Deliveroo employs robust security measures including HTTPS, security headers, and bot protection, alongside comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and aligned with the company's business model and market position.

D

Deliveroo

deliveroo.com

75

Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom with a strong international presence. The company connects consumers with local restaurants, grocery stores, pharmacies, and gift services, offering fast and convenient delivery options. Deliveroo's market position is strong, supported by a large user base, extensive restaurant partnerships, and a robust rider network. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization, supporting a seamless user experience across platforms. Technically, the site leverages modern frameworks such as React and Next.js, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent management, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and uses bot protection services, demonstrating a solid security posture. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for users and partners alike.