Security Directory

M

McRent

mcrent.se

50

McRent is a prominent motorhome rental company operating primarily in Sweden and across Europe, with a significant presence including over 100 stations worldwide. The company offers a wide range of motorhomes, including vans, campervans, and integrated models, catering to individuals and families seeking flexible and comfortable travel options. Their business model focuses on providing new vehicles, comprehensive insurance, and personalized customer service, supported by an online booking platform and multiple contact channels. The website reflects a mature digital infrastructure utilizing modern web technologies such as React, Mapbox GL JS, and cookie consent management tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and secure payment integration, though some security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data for the domain is missing, indicating the domain might be a subdomain or alias, which slightly impacts trust but does not detract from the overall legitimacy. Strategic recommendations include improving security headers, maintaining up-to-date WHOIS records, and continuous monitoring of third-party scripts to uphold security and compliance standards.

M

Město Letovice

letovice.net

59

The website letovice.net serves as the official municipal portal for the town of Letovice in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, and administrative procedures. The site is well-structured, targeting local citizens with services such as personal document information, fee payments, waste management, social services, and crisis management. The business model is that of a government service portal, focusing on transparency and citizen engagement. Technically, the website employs modern web technologies including Vue.js, Mustache.js, Google reCAPTCHA v3, and a proprietary CMS platform called Vismo. Hosting is provided by Webhouse.cz, and the site uses HTTPS with a good SSL configuration. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks DNSSEC for DNS security and does not appear to implement common security headers such as Content-Security-Policy or X-Frame-Options. Privacy compliance is basic, with a privacy and cookie policy present but no explicit GDPR-compliant consent mechanism. No incident response or vulnerability disclosure information is found. Overall, the website is trustworthy and professional, with a high legitimacy score based on WHOIS data and content consistency. Minor improvements in security headers, DNSSEC, and privacy compliance would enhance its security posture and user trust.

M

Město Hodonín

hodonin.eu

48

The website hodonin.eu serves as the official digital portal for the city of Hodonín, Czech Republic. It provides comprehensive municipal information, including news, public notices, online services, social and educational resources, and tourism information. The site targets residents and visitors, offering practical tools and updates relevant to the local community. The business model is that of a government municipal service platform, positioning itself as the authoritative source for city-related information and services. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The presence of a chatbot hosted on Azure indicates a moderate level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent mechanisms are in place, reflecting GDPR compliance. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. Overall, hodonin.eu is a trustworthy and professional municipal website with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and trustworthiness.

H

Heatmap.com | The #1 Website Heatmap & Behavior Analytics Tool for eCommerce

heatmap.com

66

Heatmap.com is a SaaS platform specializing in ecommerce website analytics, providing revenue-based heatmaps, scrollmaps, session recordings, and AI-driven insights to optimize conversion rates and increase revenue. The company positions itself as a leader in ecommerce behavioral analytics, targeting online retailers and ecommerce brands. The website is professionally designed, mobile optimized, and integrates multiple third-party marketing and analytics tools such as Google Tag Manager, Facebook Pixel, ProfitWell, and Hyros, indicating a mature digital infrastructure. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS enforced and asynchronous script loading, but lacks explicit security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies, which could pose compliance risks. Overall, the website presents a professional and trustworthy front for its business model but would benefit from enhanced transparency and compliance documentation.

Т

Товариство з обмеженою відповідальністю "УНІАН ТБ"

plus-plus.tv

56

The website plus-plus.tv/1plus1video is the official online video portal for the Ukrainian children's TV channel ПЛЮСПЛЮС, operated by ТОВ "УНІАН ТБ". It offers streaming of children’s cartoons and family-friendly content in HD quality, targeting primarily children and families in Ukraine. The business is positioned as a recognized media entity with a strong online presence supported by multiple partner TV channels and media brands. The domain is mature and registered consistently with the business identity. Technically, the site uses a modern JavaScript stack with integrations for Google Analytics, Facebook SDK, Gemius analytics, and ad serving via DoubleClick and Adtelligent. The site is mobile optimized with good SEO and basic accessibility features. Hosting and domain registration are transparent, though DNSSEC is not enabled. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and does not expose sensitive data. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. The WHOIS data aligns well with the website’s claims, supporting legitimacy. Overall, the site is safe, professional, and trustworthy with a good content offering for its audience. Strategic recommendations include enhancing privacy compliance with cookie consent, enabling DNSSEC, publishing security policies, and improving accessibility to strengthen security posture and user trust.

E

Euroregion-pomoravi

euroregion-pomoravi.cz

61

Euroregion Pomoraví is a non-profit organization focused on supporting municipalities and regional entities through cross-border cooperation primarily with Austria and Slovakia. The organization facilitates EU-supported projects, consulting, partner searches, and various cultural and informational activities. The website reflects a regional government/non-profit entity with a clear mission to foster cooperation and development at the regional level. Technically, the website employs modern web technologies including JavaScript modules, Google Tag Manager for analytics, and responsive design with Google Fonts. The site is served over HTTPS, ensuring secure communication. However, some security best practices such as explicit security headers and published privacy policies are missing, which could be improved to enhance trust and compliance. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. The absence of WHOIS data is a concern for domain legitimacy, but the professional presentation and contact transparency mitigate some risk. The site lacks formal security policies and incident response contacts, which are recommended for improved security posture. Overall, the website is functional, professional, and serves its business purpose well, but improvements in privacy compliance and security transparency would strengthen its trustworthiness and compliance with modern standards.

The website hofats.com is currently inaccessible beyond a Web Application Firewall (WAF) security challenge page indicating 'Under Attack Mode - checking your browser'. This prevents access to any substantive content, business information, or user interaction elements. The domain is registered since 2011 with InterNetX GmbH as registrar, showing a stable registration history but no public registrant details. The lack of accessible content and policies limits the ability to assess the company's market position, services, or compliance posture. Technically, the site uses JavaScript for the challenge page but no other detectable frameworks or CMS. Security posture cannot be fully evaluated due to the blocking mechanism, but no SSL or security headers data was provided. Overall, the site appears to be protected by a generic WAF, which restricts analysis and reduces transparency.

Nitro Snowboards operates a well-established e-commerce platform specializing in snowboarding equipment including snowboards, bindings, and boots. Founded in 2002, the company has a strong market presence in the snowboarding industry, targeting enthusiasts and sports consumers primarily in Germany and Europe. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations such as Cookiebot for cookie consent management and Mailchimp for marketing communications. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a positive user experience.

M

Maloja

maloja.de

59

Maloja is a German-based e-commerce retailer specializing in high-quality outdoor and cycling apparel. The website targets German-speaking outdoor enthusiasts and cyclists, offering a broad range of products for women, men, and youth. The business model focuses on sustainable and authentic outdoor clothing, positioning itself as a premium brand in the niche market. The website is built on Magento with the Hyvä theme, leveraging modern JavaScript frameworks such as Alpine.js and integrating Google Tag Manager for analytics. Usercentrics CMP is used for cookie consent management, indicating attention to privacy compliance. Security posture is generally good with HTTPS enforced and anti-CSRF measures in place, but lacks visible security headers and published security policies. WHOIS data for the domain is unavailable, which raises moderate concerns about domain registration transparency. Overall, the website is professional, well-structured, and provides a good user experience, but could improve in privacy disclosures and security transparency.

S

Summer holidays & Winter holidays | Sölden | soelden.com

soelden.com

68

The website www.soelden.com serves as a tourism portal for the Sölden region in Austria, promoting summer and winter holiday activities such as skiing, biking, and hiking. The site targets tourists and outdoor sports enthusiasts, providing information and services related to alpine nature exploration and urban experiences in the valley. The business model focuses on destination marketing and visitor engagement, positioning itself within the hospitality industry. The website demonstrates a good level of content quality and branding consistency, with a professional design and clear navigation. From a technical perspective, the site employs modern JavaScript libraries including GSAP, Swiper, Leaflet, and Rive, alongside Google Tag Manager and Cookiebot for analytics and cookie consent management. The performance is moderate with good mobile optimization, though accessibility features are basic. No CMS or hosting provider details were identified from the provided data. Security posture shows room for improvement; while HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected in the analyzed content. The site implements a cookie consent mechanism, indicating some privacy compliance efforts, but lacks visible privacy policy, terms of service, or security incident contact information. The WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, transparent privacy policies, and verified domain registration to improve trustworthiness and compliance.

D

Dethleffs

dethleffs.fi

61

Dethleffs is a well-established manufacturer of recreational vehicles including caravans, motorhomes, and camper vans, targeting families and leisure travelers primarily in Europe. The company emphasizes quality, safety, and customization with a history spanning over 90 years and manufacturing rooted in Germany. The website is professionally designed, mobile-optimized, and offers multilingual support with tools such as a vehicle configurator and dealer locator enhancing user experience. Technically, the site uses modern frameworks like Pimcore CMS and UIkit, with Mapbox integration for dealer maps and Google Tag Manager for analytics. Security posture is good with HTTPS and secure forms, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and business credible but would benefit from improved transparency on privacy and security policies.

D

Dethleffs

dethleffs.no

64

Dethleffs is a well-established company specializing in manufacturing and selling recreational vehicles such as camping trailers, motorhomes, and camper vans, targeting families and camping enthusiasts primarily in Norway and Europe. The website reflects a mature brand with over 90 years of history, emphasizing quality and German manufacturing heritage. Technically, the site uses modern web technologies including Pimcore CMS, UIkit framework, and integrates Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data limits domain trust assessment, but the website content and external partner links support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security header implementation.

D

Dethleffs

dethleffs.dk

62

Dethleffs is a well-established manufacturer and retailer of leisure vehicles including caravans, motorhomes, and camper vans, targeting families and leisure travelers primarily in Denmark and Europe. The website reflects a mature digital presence with comprehensive product information, multilingual support, and dealer/service locator tools. Technically, the site uses modern frameworks such as Pimcore CMS and UKit UI, integrates Google Tag Manager for analytics, and Mapbox for dealer mapping, indicating a solid infrastructure. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data limits domain registration verification but does not detract from the professional presentation and trust signals on the site. Overall, the site is trustworthy, user-friendly, and well-optimized for its audience.

D

Dethleffs

dethleffs.se

58

Dethleffs is a well-established manufacturer and retailer of recreational vehicles including caravans, motorhomes, camper vans, and urban campers, with a strong heritage dating back to 1931. The website targets families and camping enthusiasts primarily in Sweden and Europe, offering a broad product portfolio and dealer network. Technically, the site uses modern web technologies including Pimcore CMS and UKit framework, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy/cookie policies. WHOIS data for the www subdomain is missing, which slightly reduces domain trustworthiness but does not impact the brand's overall credibility. The site is free of adult content and fully accessible without WAF or blocking mechanisms.

Dethleffs is a well-established company specializing in the manufacturing and retail of high-quality recreational vehicles including caravans, motorhomes, camper vans, and urban campers. With over 90 years of experience, the brand holds a strong market position in the transportation sector, targeting families and recreational vehicle enthusiasts. The website reflects a professional and comprehensive digital presence with detailed product information, configurator tools, and dealer locators, supporting a broad European market. Technically, the site uses modern technologies such as Pimcore CMS, UIkit framework, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the website is safe, family-friendly, and trustworthy, though WHOIS data is not publicly available, likely due to privacy protection.

Dethleffs is a well-established company specializing in the production and sale of recreational vehicles including caravans, campers, camper vans, and urban campers. With over 90 years of history, the company holds a strong market position as a trusted brand for family-oriented caravaning solutions. The website reflects a professional and comprehensive digital presence, targeting families and caravan enthusiasts with detailed product offerings and dealer support. Technically, the site uses modern frameworks and CMS technology, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements in security headers and privacy compliance mechanisms are recommended. Overall, the site is trustworthy and professionally maintained, supporting the brand's reputation and business model.

D

Dethleffs

dethleffs.es

54

Dethleffs is a well-established manufacturer and retailer of leisure vehicles including caravans, motorhomes, camper vans, and urban campers, targeting families and leisure travelers primarily in Spain and Europe. The website reflects a mature digital presence with a professional design, comprehensive product information, and useful tools such as a vehicle configurator and dealer locator. Technically, the site uses modern web technologies including Pimcore CMS and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a high trust level.

Dethleffs.co.uk is the UK portal for Dethleffs, a well-established manufacturer of leisure vehicles including motorhomes and camper vans with over 90 years of heritage. The website targets families and travel enthusiasts, offering detailed product information, dealer search, and vehicle configurator tools. Technically, the site uses modern web technologies including Pimcore CMS and UIkit framework, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and DNSSEC enabled, though explicit security headers and privacy policies are missing. Analytics is implemented via Google Tag Manager, but privacy compliance needs improvement. Overall, the site is professional and trustworthy, reflecting the brand's market position.

D

Dethleffs

dethleffs.fr

68

Dethleffs is a well-established European company specializing in caravaning products including camping-cars, campervans, and urban campers, targeting families and travel enthusiasts. The website reflects a professional and consistent brand presence with multi-language support and a comprehensive cookie consent mechanism, indicating a mature digital presence. Technically, the site uses modern technologies such as Pimcore CMS, Matomo analytics, Google Tag Manager, and Cookiebot for privacy compliance, demonstrating a good level of digital maturity. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit security policies are not detected. Overall, the website is trustworthy and professionally maintained, with no signs of blocking or WAF interference.

D

Dethleffs

dethleffs.at

66

Dethleffs is a well-established European company specializing in caravaning products including motorhomes, campervans, and urban campers, targeting families and outdoor enthusiasts. The website reflects a professional brand presence with consistent branding and a focus on user experience. The technical infrastructure leverages modern technologies such as Pimcore CMS, Google Tag Manager, Matomo analytics, and Cookiebot for privacy compliance, indicating a mature digital setup. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no public security or incident response policies are found. The absence of WHOIS data due to privacy protection is common and does not detract significantly from legitimacy. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience.

P

Pražský fotbalový svaz

fotbalpraha.cz

48

Pražský fotbalový svaz operates as a regional football association dedicated to organizing, promoting, and reporting on football activities in Prague. The website serves as a comprehensive portal for football news, match schedules, competitions, player and club profiles, and community projects. It targets a broad audience including players, coaches, referees, officials, parents, and fans within the Prague football ecosystem. The business model is non-profit and community-focused, emphasizing information dissemination and event coordination. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and popular libraries such as jQuery and Slick Carousel. It integrates Google Analytics for visitor tracking and Facebook SDK for social media engagement. The site is mobile-optimized with responsive design and includes SEO best practices such as meta tags and Open Graph data. Cookie consent mechanisms are implemented to comply with privacy regulations. From a security perspective, the site enforces HTTPS and provides cookie consent with granular user controls. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust assessment, but the website's content and partner affiliations suggest legitimacy. Overall, the website presents a professional and trustworthy digital presence for the Prague football community. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance.

L'Echo is a well-established Belgian francophone media organization specializing in economic, political, financial, and cultural news. Founded in 1881 and operating under the parent company Mediafin, it holds a leading position in the Belgian media landscape. The website offers a broad range of services including real-time news, market data, podcasts, and subscription-based content, targeting a general audience interested in business and finance. The presence of subsidiaries like Mon Argent and Sabato further diversifies its media offerings. Technically, the website employs modern web technologies such as React, Google Tag Manager, and Adobe Experience Manager CMS, ensuring a responsive and accessible user experience. The site integrates advanced consent management via Didomi and uses multiple advertising and analytics platforms, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and uses monitoring tools like Dynatrace. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit security headers and incident response information are not publicly detailed, suggesting room for improvement in transparency and security posture. Overall, L'Echo presents a trustworthy and professional online presence with strong business credibility and compliance. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen its security maturity.

O

OK REAL ESTATE s.r.o.

okrealestate.cz

48

OK REAL ESTATE s.r.o. is a Czech Republic based real estate agency offering a comprehensive range of services including property sales, rentals, financial services, insurance, and virtual tours. The company is part of the larger OK HOLDING group, which enhances its market position and service capabilities. The website is professionally designed with clear navigation, multiple client engagement forms, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies including Google Analytics and Seznam Map API, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and form validations, though some security headers could be improved. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, the site is a reliable digital presence for a medium-sized real estate business in the Czech market.

O

OK GRANT s.r.o.

okgrant.cz

9

OK GRANT s.r.o. is a Czech-based consulting company specializing in grant advisory services for businesses. Positioned as a member of the OK HOLDING group, it targets companies seeking professional assistance with grants and funding opportunities. The website reflects a small-sized, professional business with clear contact information and a consistent brand presence. The business model focuses on consulting services within the financial support sector for enterprises. Technically, the website is built on simploCMS and employs modern web technologies including Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. The website uses HTTPS, ensuring secure communication. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks published privacy and terms of service policies, which are important for GDPR compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, though the site content and contact details appear legitimate. Overall, the website presents a professional and trustworthy business front with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and improving accessibility to strengthen compliance and user trust.

O

OK BROKERS s.r.o.

okbrokers.cz

10

OK BROKERS s.r.o. operates as a partnership network for independent insurance intermediaries in the Czech Republic, providing a range of services including software tools, legislative support, and benefits to its partners. The company is part of the larger OK HOLDING group, which strengthens its market position and credibility. The website is professionally designed, targeting insurance brokers and partners with clear navigation and relevant content in Czech language. Technically, the website uses modern technologies such as simploCMS, Google Tag Manager, and Google Analytics, ensuring a moderate to good performance and mobile optimization. However, some technical improvements are recommended, including the implementation of security headers and changing login forms to use POST methods to enhance security. From a security perspective, the site enforces HTTPS and uses secure login portals, but lacks explicit security policies and incident response information. No critical vulnerabilities were detected, but improvements in security headers and form handling would strengthen the security posture. Privacy compliance is partially addressed with a privacy policy and cookie consent mechanism, but terms of service and vulnerability disclosure are missing. Overall, the website presents a trustworthy and professional image with a solid business foundation. Strategic recommendations include enhancing security headers, improving form security, adding comprehensive security and incident response policies, and maintaining transparency in privacy and terms of service to improve compliance and user trust.

B

Brightwall

brightwall.be

58

Brightwall is a Belgium-based digital performance agency specializing in SEO, paid advertising, web development, and data-driven web analytics. Founded in 2017, the company targets businesses seeking to improve their online presence and sales through professional web services. The website reflects a modern, professional design with clear navigation and comprehensive service offerings. Technically, the site uses a modern JavaScript framework (Nuxt.js), integrates multiple marketing and analytics tools, and is hosted by OVH, a reputable provider. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but should improve privacy and security transparency.

The domain aneventapart.com is currently a parked domain managed by GoDaddy.com, LLC, a major domain registrar and parking service provider. The website content is minimal, serving primarily as a placeholder with an option to purchase the domain. The site includes GoDaddy branding and a Trustpilot widget to provide some trust signals but lacks any active business content or services. The target audience is domain buyers or investors interested in acquiring the domain. Technically, the site uses a basic JavaScript framework likely React-based for rendering the parking page, with external scripts from Google Adsense, Trustpilot, and Truste for advertising and consent management. The hosting and domain registration are consistent with GoDaddy's infrastructure. The site is mobile optimized and loads quickly but lacks SEO and accessibility features. From a security perspective, the site does not present advanced security headers or HTTPS confirmation in the provided data. DNSSEC is not enabled, which is a recommended improvement. No forms or user input fields are present, reducing attack surface but also limiting user engagement. Privacy compliance is limited to GoDaddy's general privacy policy and cookie consent mechanisms. No incident response or security policies are disclosed. Overall, the site poses low risk but also offers limited business value or user engagement. Strategic recommendations include enabling DNSSEC, improving security headers, confirming HTTPS usage, and providing clearer business or contact information if the domain is to be developed further.

A

Avenue Restaurace

avenuejihlava.cz

65

Avenue Restaurace is a newly established hospitality business located in Jihlava, Czech Republic, offering international cuisine with a focus on fresh ingredients and a unique dining experience in a two-story glass space. The restaurant caters to a broad audience including local residents, tourists, and event organizers, providing services such as dine-in, catering, private event hosting, takeaway, and wedding receptions. The business leverages a modern digital presence with multilingual support and integrated reservation systems to enhance customer engagement. Technically, the website is built on the Dish.co platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Adobe Dynamic Tag Management for analytics and marketing. The site is mobile-optimized with good SEO practices and accessibility features, although some improvements in security headers and performance optimization could be made. From a security perspective, the website employs HTTPS and cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are absent, suggesting room for improvement in formal security governance. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent registration. Overall, Avenue Restaurace presents a professional and trustworthy online presence suitable for its hospitality market segment. Strategic enhancements in security policy transparency and technical hardening would further strengthen its risk posture and customer trust.

G

Glanbia Nutritionals

glanbianutritionals.com

68

Glanbia Nutritionals is a science-led, quality-focused provider of innovative nutritional ingredient solutions serving global food, beverage, and supplement brands. The company positions itself as a leading manufacturer with a broad portfolio including proteins, bioactive ingredients, micronutrients, and premix solutions. Their website reflects a mature digital presence built on Drupal 10, featuring rich content, structured data, and a professional design that targets B2B customers. The technical infrastructure includes modern analytics and consent management tools, supporting GDPR compliance. Security posture is solid with HTTPS and cookie consent, though explicit security headers and policies are absent. WHOIS data is missing, which slightly impacts trust but the overall business credibility remains high based on website content and branding.

DBtune is a technology company specializing in AI-powered automated tuning of PostgreSQL databases. Their platform dynamically optimizes database server parameters to improve performance, reduce costs, and increase productivity for a wide range of workloads and machine sizes. The company targets enterprises and database professionals seeking to enhance PostgreSQL efficiency without manual tuning effort. Their market position is supported by reputable clients and positive testimonials, positioning DBtune as a leading innovator in database performance optimization. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Google Cloud infrastructure with DNS managed by Google Domains. The site employs advanced analytics tools including Microsoft Clarity, HubSpot, and Google Analytics, indicating a mature digital marketing and user tracking strategy. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of technical maturity. From a security perspective, the site enforces HTTPS with domain status locks to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response information are published, and no vulnerability disclosure program or security.txt file is found. Overall, the security posture is solid but could be enhanced with additional transparency and DNS security. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. The domain registration is consistent with the business profile, showing a stable and legitimate presence since 2018. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

C

ServiceNow Development Consultant | ServiceNow Platform Solutions

casknx.com

69

The website casknx.com appears to be a business-oriented site utilizing HubSpot CMS and marketing tools. The domain is registered since 2018 with GoDaddy.com, LLC and has standard domain protection statuses enabled, indicating a legitimate and stable registration. The site employs multiple external scripts for analytics and marketing, including HubSpot Analytics, Facebook Pixel, and Microsoft Clarity, reflecting a moderate level of digital maturity. However, the website content is minimal and lacks explicit business descriptions, contact information, or detailed policies, which limits the overall user experience and trustworthiness. Security posture is moderate with HTTPS implied but no visible security headers or published security policies. Privacy compliance is basic with a cookie consent banner but no privacy or terms of service pages detected. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in transparency, security headers, and content richness are recommended.

De Tijd is a leading Flemish financial newspaper and digital media platform based in Belgium, providing comprehensive news coverage in finance, economy, politics, and business. Established in 1968 and owned by Mediafin, it serves a professional audience with subscription-based content and advertising revenue. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, Adobe Experience Manager CMS, and advanced ad management tools. It employs robust GDPR-compliant consent management and integrates multiple analytics and marketing platforms. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. WHOIS data is restricted due to .be domain policies but aligns with a legitimate, privacy-conscious media entity. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

Ami.e.s des Parcs naturels de Wallonie is a small community or non-profit organization dedicated to promoting and supporting natural parks in the Wallonia region of Belgium. The website serves as an informational platform targeting local nature enthusiasts and environmental supporters. The business model appears to focus on community engagement and environmental awareness without commercial activities. Technically, the website is built using One.com Web Editor and hosted by One.com A/S, featuring basic HTML, CSS, and JavaScript with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance mechanisms such as privacy and cookie policies. No contact information or incident response details are published, which limits user trust and compliance. Overall, the site is functional but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

S

Spolek Luka na dlani

vlukach.cz

46

The website vlukach.cz serves as a local community portal for Luka nad Jihlavou, providing residents and visitors with timely information such as local news, weather updates, event calendars, public notices, and local business listings. It positions itself as a community-driven informational resource with a focus on accessibility and local engagement. The site is relatively new, with domain registration in December 2023, and is hosted by Active24, a known hosting provider. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) and is mobile responsive, though the design is basic and lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is minimal, with no privacy or terms of service pages, and a cookie policy that states no cookies are used, thus no consent mechanism is implemented. Overall, the site is safe for general audiences and does not contain any adult or explicit content.

I

Informační centrum Polná

infocentrumpolna.cz

43

The website infocentrumpolna.cz serves as the official information center for the town of Polná in the Czech Republic. It provides residents and visitors with local news, event listings, tourist information, and contact services. The site is positioned as a local government portal, focusing on community engagement and public service. The business model is non-commercial, aimed at supporting local administration and tourism. The website content is well-structured, regularly updated, and presented primarily in Czech with multilingual support via Google Translate.

The website www.sportli.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block that denies access based on the visitor's ASN. This results in a lack of any accessible content, metadata, or business information, preventing a thorough analysis of the site's offerings or market position. The domain WHOIS data is unavailable, which raises concerns about domain registration transparency and legitimacy. Technically, the site uses Cloudflare for security and performance, but no further technology stack details or CMS information can be determined due to the block. Security posture cannot be properly evaluated, and no privacy or cookie policies are detectable. Overall, the site appears to be poorly accessible and lacks publicly available trust or compliance indicators.

M

Město Chotěboř

chotebor.cz

55

The website chotebor.cz serves as the official online presence for the town of Chotěboř in the Czech Republic. It provides residents and visitors with comprehensive information about municipal services, local government officials, news updates, public tenders, and community events. The site targets local citizens and stakeholders seeking official information and services related to the town. The business model is that of a government service portal, focusing on transparency and public communication. The domain's long registration history since 1998 supports its legitimacy and established presence. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript frameworks like Vue.js, and server-side CMS technology (Vismo). It integrates Google reCAPTCHA v3 for form security and Google Translate for accessibility. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and CSRF protection, but lack some advanced HTTP security headers and a published security policy. From a security perspective, the site demonstrates good baseline protections with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and vulnerability disclosure mechanisms. Privacy compliance is partially met with privacy and cookie policies present, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and credibility. Overall, chotebor.cz is a trustworthy, well-maintained municipal website with good content quality and technical implementation. Strategic improvements could focus on enhancing security headers, publishing security policies, and implementing cookie consent to strengthen GDPR compliance and user trust.

The website at sitebuilderhostqa.net is currently inaccessible due to a 403 Access Forbidden error page, likely enforced by Cloudflare's security mechanisms. This prevents any meaningful content or business information from being analyzed. The domain is registered since 2015 with SafeNames Ltd. and uses Cloudflare DNS, indicating a legitimate registration and hosting setup. However, the lack of accessible content, privacy policies, contact information, and security headers severely limits the ability to assess the business or security posture. The technical infrastructure shows minimal implementation beyond basic JavaScript and Google Fonts usage, with no CMS or analytics detected. Overall, the site appears to be either under maintenance, restricted, or misconfigured, resulting in a poor user and security experience.

A

aufsiemitgebrüll

aufsiemitgebruell.de

63

aufsiemitgebrüll is a small communication and design studio based in Berlin, Germany, focusing on societal awareness and creative services. The website is built on the Squarespace platform, leveraging modern web technologies and integrated cookie consent management via Cookiebot to comply with GDPR requirements. The business presents clear contact information and a professional online presence, targeting a German-speaking audience. Technically, the site is well-structured with good mobile optimization and performance, hosted on Cloudpit infrastructure. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and terms of service policies are missing, representing compliance gaps. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy disclosures and incident response readiness.

P

Philipp Veller

vellip.berlin

57

Philipp Veller operates a professional web development portfolio website based in Berlin, targeting clients seeking frontend and backend web development services. The site showcases a variety of projects including web apps for NGOs, government platforms, and AI tools, positioning Philipp as a skilled freelance developer in the technology sector. The technical infrastructure leverages modern frameworks such as React and Gatsby, with content managed via Sanity.io, ensuring a performant and mobile-optimized user experience. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, the website is trustworthy, professional, and well-structured, suitable for attracting clients in the German market.

B

Berliner Süden

berlinersueden.de

62

Berliner Süden is a small, Germany-based web development company specializing in accessible, user-centered, and design-focused websites. Their portfolio includes projects for cultural institutions and architectural firms, indicating a niche market focus. The website is built on WordPress and hosted with Gandi, reflecting a modern and reliable technical infrastructure. The site is well-structured, mobile-optimized, and provides clear contact information, enhancing user experience and trust. From a security perspective, the website uses HTTPS with an excellent SSL configuration, but lacks security headers and formal security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Privacy compliance is adequate with a GDPR-compliant privacy policy, though no cookie consent mechanism is present. Overall, the website presents a professional and trustworthy image with good technical implementation and business credibility. The absence of tracking and advertising scripts suggests a privacy-conscious approach. Strategic improvements in security headers, cookie consent, and security policies would further strengthen the site's security and compliance standing.

Y

Yola

yola.com

69

Yola is a technology company providing a free website builder platform aimed at small businesses and individuals seeking to establish an online presence. The website offers free hosting, SEO tools, and easy website creation services, positioning itself as a practical solution for entrepreneurs and small enterprises. The platform is moderately mature with a consistent brand presence and a user-friendly interface. Technically, the site employs modern web technologies including Google Tag Manager for analytics and tracking, WebFontLoader for fonts, and a proprietary CMS indicated by script references. The hosting appears to be managed by a specialized hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers are missing, and no dedicated security or incident response policies are published. The absence of WHOIS data reduces domain trustworthiness, though the website content and technical setup suggest a legitimate business operation. Overall, the site presents a moderate risk profile with room for improvement in transparency, security policy publication, and contact information availability. Strategic enhancements in these areas would strengthen trust and compliance posture.

D

DS Stříbrné Terasy o. p. s

stribrneterasy.cz

57

DS Stříbrné Terasy o. p. s is a Czech non-profit social service provider focused on senior care and meal provision, primarily serving individuals aged 55 and above in the Jihlava region. The website offers detailed information about meal services, registration, and contact details, positioning itself as a trusted local community resource. The presence of virtual tours and regular news updates indicates active engagement with its audience. Technically, the website employs modern JavaScript frameworks including Vue.js and Mustache.js, and is built on the Vismo CMS platform, hosted by Active24. It uses HTTPS and Google reCAPTCHA v3 to secure user interactions, particularly form submissions. However, there is room for improvement in security headers and comprehensive privacy and security policies. Overall, the site is well-structured, accessible, and professionally presented, with a clear focus on its target audience.

M

MANN+HUMMEL

mann-hummel.cz

68

MANN+HUMMEL is a global leader in filtration technology, specializing in air and water filtration solutions since 1941. The company targets industrial sectors including automotive, environmental, and life sciences, providing innovative filtration products and services. Their website reflects a mature digital presence with comprehensive corporate information and product offerings, primarily in Czech language for the regional audience. The site is built on Adobe Experience Manager, indicating a robust technical infrastructure with modern content management and analytics capabilities. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and established market position. Overall, the website is well-designed, accessible, and compliant with GDPR, supporting the company's credibility and business operations.

M

Město Třešť

trest.cz

48

Město Třešť operates an official municipal website serving as the primary digital portal for residents, visitors, and stakeholders. The site provides comprehensive information about the town, local government services, social and educational offerings, cultural events, and tourism. It targets local citizens and tourists, supporting community engagement and public service delivery. The business model is typical for a government entity, focusing on transparency and accessibility rather than commercial revenue. The domain's long-standing registration since 1999 supports its legitimacy and established presence. Technically, the website uses a traditional HTML/CSS/JavaScript stack with the Vismo CMS platform. It integrates Google services such as reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates moderate performance and good mobile optimization but could improve accessibility and SEO features. Hosting and domain registration are consistent with a Czech municipal entity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy and cookie information present but no active consent mechanism. No critical vulnerabilities or suspicious content were detected, and the site is accessible without WAF blocking. Overall, the website is a trustworthy, well-maintained municipal portal with good business credibility and moderate technical sophistication. Strategic improvements in security headers, privacy consent, and accessibility would enhance its posture. The risk level is low, but ongoing attention to security best practices is recommended.

M

Město Žďár nad Sázavou

zdarns.cz

61

The website www.zdarns.cz serves as the official municipal portal for the city of Žďár nad Sázavou in the Czech Republic. It provides comprehensive information and services for citizens, local businesses, and visitors, including city news, administrative contacts, tourism guides, cultural events, and online public services. The site is well-structured with clear navigation tailored to different user groups such as citizens, entrepreneurs, and visitors. The business model is that of a government service portal aimed at transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap for responsive design. It integrates Google Fonts and Google Analytics for typography and traffic analysis respectively. The site is served over HTTPS, ensuring encrypted communication. The cookie consent mechanism is implemented inline, allowing users to manage cookie preferences, which indicates a basic level of privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No security.txt or explicit incident response contacts are found. The WHOIS data for the domain is unavailable, which slightly reduces trust from a domain registration standpoint, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively. Recommendations include publishing a privacy policy and terms of service, implementing security headers, and improving transparency around data protection and incident response to enhance security posture and compliance.

M

Městys Stonařov

stonarov.cz

50

Městys Stonařov operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information including government notices, local news, event calendars, and contact channels for residents and visitors. It positions itself as a trusted source for local governance and community engagement. Technically, the website is built on the Vismo CMS platform, leveraging standard web technologies such as HTML5, CSS3, and JavaScript, with integrations like Google reCAPTCHA for form security and Google Translate for accessibility. The site is secured with HTTPS and shows moderate performance and basic mobile optimization. Security posture is adequate with encrypted connections and anti-bot measures, though it lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially addressed with linked privacy and cookie policies but lacks active consent mechanisms. Overall, the website demonstrates a solid business credibility and trustworthy presence consistent with a small government entity.

M

Městys Luka nad Jihlavou

lukanadjihlavou.cz

51

Městys Luka nad Jihlavou operates an official municipal website serving the local community and visitors by providing essential information about local governance, services, events, and contact details. The website is well-structured, primarily in Czech, and includes official social media channels, public notices, and an event calendar. The business model is focused on government transparency and citizen engagement, positioning it as a trusted local government portal. Technically, the site uses a CMS platform (Vismo), modern web standards, and integrates Google services such as reCAPTCHA and Translate to enhance usability and security. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers are missing and no explicit incident response contacts are provided. Overall, the site is legitimate, trustworthy, and serves its intended audience effectively.

K

KPŽ - Knoflíkářský průmysl Žirovnice

kpzas.cz

47

KPŽ - Knoflíkářský průmysl Žirovnice is a well-established Czech manufacturing company specializing in plastic components for the automotive industry, particularly lighting technology. With a history spanning over 161 years, the company serves numerous global automotive brands and maintains a medium-sized workforce. Their website reflects a professional and consistent brand image, targeting automotive clients and partners. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager and CookieScript for analytics and compliance. The site is mobile-optimized and provides clear navigation and relevant content. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks some advanced security headers which could be improved. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the company. Contact information is clearly presented, facilitating communication. No critical security or compliance issues were detected.

O

Obec Suchá

obecsucha.cz

51

The website obecsucha.cz serves as the official online presence for the municipality of Suchá in the Jihlava district of the Czech Republic. It provides residents and visitors with access to local government information, public notices, contact details, event calendars, and community updates. The site is clearly targeted at local citizens and government officials, offering essential municipal services and information in Czech language with some translation support via Google Translate. The business model is that of a government information portal, with no commercial activities. The domain age and WHOIS data confirm legitimacy and consistency with the municipal nature of the site. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google reCAPTCHA for form security and Google Translate for language accessibility. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, there is room for improvement in modern security practices, including the implementation of security headers and enhanced cookie consent mechanisms. From a security perspective, the site benefits from HTTPS encryption and uses reCAPTCHA to protect its contact form from spam and abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response information, and security headers suggests a moderate security posture. Privacy compliance is basic but present, with GDPR-related information available. Overall, the site demonstrates a reasonable level of security for a small municipal website but could enhance its posture with additional measures. The overall risk assessment is low, given the nature of the site and its content. Strategic recommendations include implementing security headers, enhancing privacy and cookie consent mechanisms, publishing clear security and incident response policies, and maintaining regular audits of third-party scripts. These steps will improve trust, compliance, and resilience against potential threats.