Security Directory

H

Hory.app s.r.o.

horobrani.cz

63

Hory.app s.r.o. operates a niche digital platform focused on mountain hiking enthusiasts, offering a year-round adventure game that rewards users for visiting mountains based on altitude points. The business model includes a freemium app with premium subscriptions and an e-commerce shop for outdoor equipment. The website is professionally designed, multilingual, and targets outdoor lovers primarily in the Czech Republic and surrounding regions. Technically, the site uses modern JavaScript frameworks, Google Analytics, and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is trustworthy and legitimate with consistent WHOIS data matching the business identity.

A

Asociace sportu pro radost, z.s.

behejlesy.cz

49

Běhej lesy is a well-established Czech trail running series organized by Asociace sportu pro radost, z.s., with a history dating back to 2014. The website promotes a series of 8 trail running events across scenic natural locations in the Czech Republic, targeting outdoor sports enthusiasts and families. The business model centers on event organization, participant registration, and merchandise sales, supported by a strong network of reputable partners and sponsors. The site is professionally designed with consistent branding and high-quality content, reflecting a mature and trusted market position.

F

Fakultní nemocnice Olomouc

fnol.cz

52

Fakultní nemocnice Olomouc is a well-established public healthcare institution in the Czech Republic, providing a wide range of medical services including hospitalization, emergency care, outpatient clinics, and specialized patient and healthcare professional portals. The website serves as an official information hub targeting patients, visitors, and medical professionals, with active social media engagement and event calendars. Technically, the site uses modern web technologies including Google Analytics, Hotjar, and a CMS by ESMEDIA Interactive s.r.o., with good mobile optimization and structured navigation. Security posture is solid with HTTPS and consent-based analytics loading, though explicit security headers and formal security policies are missing. Privacy compliance is partial, with cookie consent mechanisms present but no dedicated privacy or terms of service pages. WHOIS data confirms domain legitimacy and long-standing registration consistent with the institution's history. Overall, the site is professional, trustworthy, and functional, with room for improvement in security and privacy transparency.

S

STOB

stob.cz

47

STOB is a Czech organization specializing in healthy and sustainable weight loss through educational courses, individual counseling, exercise programs, and seminars. The website targets individuals seeking to improve their health and manage obesity, including children. The business model is service-oriented with an e-commerce component offering related materials. Technically, the site uses modern web technologies including jQuery, Bootstrap, Google Analytics, and Facebook Pixel, with a custom or Yii-based CMS. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure information. The absence of WHOIS data is a concern but the website content and contact details suggest legitimacy.

S

SONNENTOR

sonnentor.com

69

SONNENTOR is an established Austrian company specializing in organic teas and spices, operating since 1988. The company positions itself as a pioneer in organic and sustainable products, serving customers through both physical retail stores in Austria, Germany, and the Czech Republic, as well as an online shop. The website reflects a mature e-commerce platform with a focus on organic product offerings and sustainability. Technically, the website employs modern frameworks such as Bootstrap and integrates compliance and security tools like Usercentrics CMP and Google reCAPTCHA, indicating a commitment to user privacy and bot protection. Security posture is generally good with HTTPS enabled and some security best practices observed, though additional security headers could enhance protection. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website is professional, trustworthy, and compliant with GDPR, but domain registration inconsistencies slightly reduce trust.

N

NET -SITE:IT s.r.o.

narodnyzdravotnyregister.sk

41

Modernylekar.sk is a Slovak healthcare portal operated by NET -SITE:IT s.r.o., providing a comprehensive directory of doctors and medical offices across Slovakia since 2009. The platform offers various services including appointment booking, newsletters, and a medical marketplace, targeting patients and healthcare providers. The website is professionally designed with good content quality and clear navigation, supporting Slovak language users effectively. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates third-party services like Google Analytics and Smartlook for analytics and user behavior tracking. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The domain registration details align well with the business claims, indicating legitimacy and trustworthiness. Overall, the site presents a reliable and professional healthcare service platform with moderate tracking and good privacy compliance.

Motion Tactic is a boutique custom web design agency founded in 2017, specializing in delivering compelling, user-friendly websites and SEO services tailored for innovative B2B companies. The company emphasizes strategic partnerships, an in-house US-based team, and a client-focused approach to drive tangible ROI. Their market position is strengthened by a strong portfolio, client testimonials, and Clutch Gold verification, positioning them as a trusted partner in the B2B technology sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Hotjar, and HubSpot integrations. The site is mobile-optimized, accessible, and SEO-friendly, although performance is moderate. The domain is registered with NameCheap since 2017, consistent with the company's founding date, and uses HTTPS with a clientTransferProhibited status, indicating good domain security practices. Security posture is solid with HTTPS enforced but lacks visible security headers and published privacy or cookie policies, which are compliance gaps. The site uses multiple third-party tracking scripts, indicating moderate user tracking. No incident response or vulnerability disclosure information is provided. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening. The overall risk is moderate with recommendations to implement DNSSEC, publish privacy and cookie policies, add security headers, and provide incident response contacts to enhance trust and compliance.

Alpske.sk is an established online platform operated by eProgress s.r.o., specializing in accommodation listings across the Alpine region. The website offers direct contact to property owners, enabling commission-free bookings. It targets tourists and travelers interested in Alpine destinations such as Austria, Italy, France, Switzerland, and Germany. The platform also provides additional travel-related content including snow reports, weather updates, and webcams, positioning itself as a comprehensive resource for Alpine tourism. The business model focuses on direct owner-user interaction, enhancing trust and reducing intermediary costs. The company has a solid market presence since 2010 and maintains a consistent brand across related regional sites.

The website www.chorvatske.sk is operated by eProgress s.r.o., a Slovak company specializing in providing comprehensive travel and accommodation information for Croatia, targeting Czech and Slovak tourists. The platform emphasizes direct contact between guests and accommodation providers, offering listings without commission fees. It has a long operational history since 2003 and maintains a strong market position in Central and Western Europe for Croatian accommodation services. Technically, the site uses a custom CMS with modern frontend technologies including Tailwind CSS and JavaScript, and integrates Google Analytics and Tag Manager for user tracking with GDPR-compliant consent mechanisms. Security posture is good with HTTPS enforced and CSRF tokens present, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is professional, user-friendly, and trustworthy with consistent branding and clear business information. Recommendations include enhancing security headers, publishing terms of service and security policies, and adding vulnerability disclosure information to improve compliance and trust.

S

StudioForty9

studioforty9.com

72

StudioForty9 is a specialist ecommerce agency based in Ireland with over 15 years of experience, focusing on ecommerce strategy, web development, UX/UI design, and performance marketing. The company positions itself as an award-winning expert in ecommerce, targeting ecommerce businesses seeking expert support and advice. The website is built on the Shopify platform, leveraging modern technologies and integrations with marketing and analytics tools such as Google Analytics 4, Microsoft Clarity, HubSpot, and Klaviyo, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, CAPTCHA protection on forms, and GDPR-compliant cookie consent mechanisms. However, the absence of WHOIS registration data and lack of explicit security policies or incident response contacts present some trust and transparency concerns. Overall, the website is professional, well-designed, and compliant with privacy regulations, but domain legitimacy verification is recommended.

M

Malbon Golf

malbon.com

68

Malbon Golf operates as a niche e-commerce retailer specializing in premium golf apparel and lifestyle clothing. The website is built on the Shopify platform, leveraging modern e-commerce technologies and multiple marketing and analytics integrations to support customer acquisition and retention. The brand targets golf enthusiasts and lifestyle consumers, positioning itself as a premium and established player in the golf apparel market. The domain age and registration details support the legitimacy and maturity of the business.

L

Loewe

loewe.com

74

Loewe is a globally recognized luxury fashion brand specializing in designer bags, clothing, and accessories for both women and men. The website serves as a comprehensive e-commerce platform showcasing the latest collections with rich multimedia content and a strong brand presence. The company targets fashion-conscious consumers seeking high-end products. Technically, the website is built on modern frameworks such as React and leverages advanced marketing and analytics tools like Dynamic Yield and Dynatrace, hosted likely on Akamai infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and likely security headers in place, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data is noted but does not detract significantly from the site's legitimacy given the professional presentation and brand recognition. Overall, Loewe's website reflects a mature digital presence suitable for a luxury retail business.

C

Committee for a Responsible Federal Budget

futurebudget.org

51

The Committee for a Responsible Federal Budget operates the website futurebudget.org, which provides interactive tools and quizzes aimed at educating the public about federal government spending, taxes, national debt, and deficits. The site targets a general audience interested in fiscal policy and government budgeting. The business model is educational and advocacy-focused, typical of a non-profit organization. The website is professionally designed with consistent branding and clear navigation, supporting good user engagement. Technically, the site is built on Drupal 10 CMS and integrates Google Tag Manager and Google reCAPTCHA for analytics and form security. The site is mobile-optimized and accessible, with good SEO practices. However, some security best practices such as security headers are missing, and there is no explicit cookie consent mechanism, which could be improved for better privacy compliance. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to a malformed request, but the domain appears privacy protected, which is common and justified for non-profit organizations. The overall security posture is moderate with room for improvement. Overall, the website is a credible and professional resource for federal budget education with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

C

Committee for Responsible Federal Budget

covidmoneytracker.org

55

The COVID Money Tracker website is an informational platform operated by the Committee for Responsible Federal Budget, a non-profit organization focused on tracking and visualizing the trillions of dollars spent by the U.S. federal government in response to the COVID-19 pandemic. The site provides interactive data visualizations and detailed tables to help policymakers, researchers, and the public understand federal spending, tax cuts, loans, grants, and subsidies related to COVID relief efforts. The platform positions itself as a niche government transparency tool with a clear mission to enhance fiscal accountability. Technically, the website is built on Drupal 10 CMS and incorporates modern web technologies including Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, offering a good user experience with clear navigation and professional design. Performance is moderate, with no major technical issues detected in the provided content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. Privacy compliance is limited, with no visible privacy or cookie policies and no GDPR compliance indicators. Contact information and incident response channels are not evident, which could hinder user trust and security reporting. Overall, the website is a credible and trustworthy source for COVID-19 federal spending data, but it would benefit from improved privacy disclosures, enhanced security headers, and clearer contact information to strengthen its security posture and compliance. The domain WHOIS data is unavailable or privacy-protected, which is typical for non-profit organizations but limits external verification of registrant details.

Anywhere Consumer Care is a newly established website (domain created in October 2022) with minimal online presence and content. The site currently only displays a simple heading with no detailed business description, contact information, or user engagement features. The lack of privacy and cookie policies, terms of service, and contact details limits its credibility and user trust. Technically, the site uses Google Analytics and Google Tag Manager for tracking, hosted on AWS DNS infrastructure, but lacks visible security headers and other best practices. The security posture is weak due to missing policies and minimal content, although no blocking or WAF mechanisms were detected. Overall, the site appears to be in an early development stage or placeholder status, with significant improvements needed to enhance trust, compliance, and user experience.

S

Sotheby’s Institute of Art

sothebysinstitute.com

67

Sotheby’s Institute of Art is a well-established educational institution specializing in art business and art market studies with campuses in London, New York City, and online. The website reflects a mature digital presence with comprehensive program offerings, clear navigation, and professional branding consistent with its market position as a leader in art business education. The technical infrastructure is based on WordPress CMS, leveraging modern analytics and marketing tools, and hosted likely on AWS infrastructure. Security posture is good with HTTPS enforced and domain protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism implemented. Overall, the website is trustworthy, professional, and well-optimized for its target audience.

P

Premier Construction Software

premiercs.com

67

Premier Construction Software is a well-established provider of cloud-based ERP solutions tailored specifically for the construction industry. Founded in 2011 and headquartered in Canada, the company offers a comprehensive platform integrating financial management, accounting, job costing, project and field management, and AI-driven automation. Their market position is strong, supported by multiple industry awards and a broad target audience including contractors, owners, developers, and project managers globally. The business model is subscription-based SaaS with tiered pricing and implementation fees, designed to scale with company size and complexity. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Microsoft Azure with Cloudflare DNS and CDN services. The site demonstrates excellent performance, mobile optimization, and SEO practices. Marketing and analytics tools like HubSpot, Google Tag Manager, Hotjar, and LinkedIn Insight are actively used for user engagement and tracking. From a security perspective, the site enforces HTTPS with strong security headers and uses reputable hosting and DNS providers. However, DNSSEC is not enabled, and explicit privacy and cookie policies are missing, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Premier Construction Software presents a professional, trustworthy, and technically mature online presence with minor gaps in privacy compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, and adding a security policy or vulnerability disclosure to enhance trust and compliance.

J

JLL Technologies

jllt.com

75

JLL Technologies is a leading provider of commercial real estate technology solutions, offering software, data, and expertise to optimize property acquisition, management, and experience. Positioned as a market leader, JLLT serves enterprise clients globally with integrated workplace management systems, facilities management platforms, AI-powered workplace experience tools, and data analytics services. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding aligned with its parent company JLL. Technically, the site leverages WordPress CMS with modern frameworks like Bootstrap, integrates advanced analytics and marketing tools such as Microsoft Clarity, Google Tag Manager, and Drift live chat, and employs Cloudinary for optimized media delivery. Security posture is strong with HTTPS, security headers, and secure form handling, though public security policies and incident response contacts are not published. Overall, the site is trustworthy, well-optimized for SEO and accessibility, and compliant with privacy regulations including GDPR. The lack of WHOIS data suggests privacy protection, which is justified for this enterprise business. Strategic recommendations include publishing security policies and incident response information to enhance transparency and trust.

C

Cotality

corelogic.com

68

Cotality is a business specializing in property data and intelligence solutions, serving a broad range of industries including banking, finance, energy, government, real estate, and telecommunications. Their website showcases a comprehensive suite of products designed to enhance workflows, provide accurate valuations, and deliver actionable insights for property-related decision-making. The company positions itself as a leader in property data analytics with a strong focus on innovation and customer-centric solutions. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and various JavaScript libraries for enhanced user experience and analytics. The site is well-structured, mobile-optimized, and integrates marketing and tracking tools such as Intellimize and HubSpot forms. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which impacts domain legitimacy assessment. Overall, the website presents a professional and trustworthy front for a large enterprise-level business in the real estate data sector. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

Crexi operates as an online commercial real estate exchange platform, providing photos, maps, and property descriptions to facilitate real estate transactions. The website targets commercial real estate professionals and investors, positioning itself as a significant player in the real estate marketplace sector. The business model revolves around listing and exchanging commercial properties, leveraging digital tools to enhance market visibility and transaction efficiency. The platform's market position appears established, though specific company founding details and country of operation are not explicitly stated in the analyzed content. Technically, the website employs modern web technologies including Angular framework, Google Maps API for geospatial data, Stripe for payment processing, and various marketing and analytics tools such as Google Analytics, HubSpot, and Trustpilot widgets. The technical infrastructure supports a moderate performance level with basic mobile optimization and SEO practices. However, the absence of a detected CMS and hosting provider details limits a full assessment of the backend environment. From a security perspective, the site uses HTTPS and integrates reCAPTCHA v3 to mitigate automated abuse. Nonetheless, there is a lack of visible security headers and no published security or incident response policies, which are critical for a platform handling sensitive business data. The WHOIS data is notably absent or inaccessible, raising concerns about domain registration transparency and legitimacy. This gap impacts the overall trustworthiness and may warrant further investigation. Overall, while the platform demonstrates a professional business presence with essential digital tools, it exhibits gaps in privacy compliance, security best practices, and domain registration transparency. Addressing these areas will enhance trust, regulatory compliance, and security posture, thereby supporting sustainable business growth and user confidence.

F

FleishmanHillard

fleishman.com

73

FleishmanHillard is a global public relations and marketing agency specializing in strategic communications for brand and reputation management, corporate and consumer marketing, and crisis communications. The company operates on an enterprise scale with a long-established presence since 2000, supported by a professional and well-structured website that targets corporate clients and marketing professionals worldwide. The website demonstrates strong branding consistency and a comprehensive digital presence, including social media integration and SEO optimization. Technically, the website is built on WordPress with modern technologies such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management. The site is mobile-optimized and accessible, with good SEO practices implemented via the Yoast SEO plugin. Hosting and domain registration details indicate a stable and legitimate infrastructure, although DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, secure, and compliant with privacy regulations to a good extent, though explicit privacy and terms of service documents were not found in the analyzed content. The risk level is low, and the site reflects a mature digital presence suitable for a global enterprise agency.

Z

Zelinářská unie Čech a Moravy

zucm.cz

47

Zelinářská unie Čech a Moravy (ZUČM) is a professional union representing domestic vegetable growers in the Czech Republic. Established in 2012, it serves as an advocacy and information hub for its members, collaborating with government bodies and promoting vegetable production and consumption. The website provides news, educational resources, event information, and membership details, targeting industry professionals and consumers interested in Czech-grown vegetables. The organization positions itself as a key player in the Czech agricultural sector, focusing on quality and sustainability.

M

METRO AG

metro-campus.de

75

METRO Campus is a real estate and urban development project by METRO AG focused on creating a sustainable and innovative urban quarter in Düsseldorf, Germany. The website presents a professional and well-structured digital presence with clear information about the project, its vision, and latest news. The technical infrastructure leverages modern web technologies including Sitecore CMS, Bootstrap, and analytics tools such as Google Analytics and Siteimprove. The site is hosted on reputable infrastructure with Akamai nameservers and uses HTTPS with good security practices. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, explicit security policies and incident response information are not published. Overall, the website demonstrates a mature digital presence with a strong business credibility and good security posture.

M

METRO PROPERTIES

metro-properties.de

76

METRO PROPERTIES is the real estate arm of METRO AG, specializing in the active management, development, and maintenance of wholesale and retail properties internationally. The company leverages extensive retail and real estate expertise to increase the long-term value of its portfolio. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on corporate real estate services. Technically, the site uses modern frameworks and analytics tools, hosted on a reputable CDN provider (Akamai), ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high professionalism and trustworthiness, suitable for investors, partners, and real estate professionals.

M

METRO AG

metro-potentials.com

71

METRO Potentials is a corporate graduate management trainee programme operated by METRO AG, a large German retail company. The programme targets young professionals seeking international exposure and career development within retail management. The website is professionally designed, mobile-optimized, and provides comprehensive information about the programme, benefits, and application process. Technically, the site uses modern frameworks including Sitecore CMS, Google Analytics, and Siteimprove for analytics and performance monitoring. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and well-maintained but could improve transparency and security disclosures.

M

METRO Global Solution Center Poland

metro-gsc.pl

77

METRO Global Solution Center Poland operates as a specialized accounting and finance solutions hub within the global METRO AG group, a leader in wholesale trade and owner of the MAKRO chain. The company focuses on delivering high-quality accounting services, process automation, and career development opportunities in an international environment. Their website reflects a professional and consistent brand image, targeting accounting professionals and job seekers interested in finance careers. Technically, the site uses modern frameworks such as Sitecore CMS, Google Analytics, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response contacts are not publicly detailed. Overall, the site is trustworthy and well-maintained, supporting METRO's global growth strategy.

M

METRO AG

miag.com

75

MIAG operates as a specialized service provider within the METRO AG group, focusing on comprehensive invoicing, payment guarantee, early payment, and resolution services for METRO's suppliers. The website presents a professional and well-structured digital presence, leveraging modern web technologies such as Sitecore CMS, Google Analytics, and Siteimprove for analytics and performance monitoring. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a seamless user experience for its B2B audience. Security practices include HTTPS enforcement and cookie consent mechanisms, although explicit security headers are not detected in the provided data. The absence of WHOIS registration data for the domain www.miag.com is a notable anomaly that reduces domain trustworthiness, despite the strong branding and content alignment with METRO AG. Overall, the website demonstrates a mature digital infrastructure and a strong business credibility within the retail and finance sectors.

M

METRO Global Solutions Center Pvt. Ltd.

metro-gsc.in

68

METRO Global Solutions Center Pvt. Ltd. operates as a Center of Excellence under the METRO AG group, providing innovative business and finance solutions focused on process standardization, compliance, and digital transformation. The company targets business clients and potential employees, positioning itself as a key enabler of METRO's mission of excellence. Technically, the website leverages modern web technologies including Sitecore CMS, Google Analytics, and Siteimprove for analytics and performance monitoring, with a responsive design and good SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response information are absent. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

M

METRO SOURCING International Limited

metro-sourcing.hk

77

METRO SOURCING International Limited is a Hong Kong headquartered wholly owned subsidiary of METRO AG, specializing in global sourcing and supply chain solutions for METRO's wholesale divisions and third-party customers. Established in 1976, it operates a broad supplier network across multiple countries, providing a wide range of products including non-food, near food, and fresh/frozen food categories. The company positions itself as a strategic buying organization within the retail sector, leveraging its international procurement expertise to serve a diverse customer base. Technically, the website is built on a modern stack including Bootstrap and Sitecore CMS, with integrated analytics tools such as Google Analytics and Siteimprove. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with corporate branding. Cookie consent mechanisms are implemented with detailed categories, reflecting compliance with GDPR and privacy best practices. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs standard security practices such as request verification tokens and cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website reflects a mature digital presence with strong business credibility and compliance adherence. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security culture.

M

METRO AG

mpulse.de

76

MPULSE is the official online magazine of METRO AG, providing rich content focused on wholesale, gastronomy, and independent entrepreneurs. The website serves as a content marketing platform to engage METRO's target audience with industry insights, customer stories, and trends. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern web technologies including Bootstrap, Google Tag Manager, and Akamai CDN for performance and scalability. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting METRO AG's brand integrity.

S

Svět oken

svet-oken.cz

57

Svět oken is a leading Czech manufacturer and retailer specializing in windows, doors, shading technology, and related products with over 25 years of market presence. The company operates multiple physical stores across the Czech Republic and offers professional installation and customer service. Their website reflects a mature business with a comprehensive product catalog and clear contact information. Technically, the site employs modern web technologies including jQuery, Google Analytics, Microsoft Clarity, and a cookie consent management system, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain is a notable gap, reducing trustworthiness from a domain registration perspective. Overall, the website is professional, user-friendly, and compliant with GDPR cookie consent requirements, serving its target audience effectively.

B

B.E.S. - Petrovice, s.r.o.

bes-petrovice.cz

54

B.E.S. - Petrovice, s.r.o. is a Czech family-owned business specializing in the manufacture and sale of high-quality home textiles, including bedding, towels, mattresses, and related products. With over 30 years of experience, the company serves both retail customers and professional clients such as hotels and other accommodation providers across the Czech Republic and Europe. The website is built on the Shoptet e-commerce platform and integrates multiple modern technologies and marketing tools, reflecting a mature digital presence. Security posture is solid with HTTPS and CSRF protections, though additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent and a privacy policy aligned with GDPR requirements. The absence of WHOIS data limits domain trust verification, but the website content and business information indicate a legitimate and professional operation.

V

Valtech

valtech.com

69

Valtech is a global enterprise specializing in digital experience innovation and transformation services. The company offers a broad portfolio of services including experience elevation, commerce acceleration, enterprise transformation, marketing creativity, and data & AI solutions. Their market position is that of a leading technology consulting firm with a strong emphasis on helping clients achieve exceptional digital experiences. The website reflects a mature digital infrastructure with modern technologies such as Marketo for marketing automation, FriendlyCaptcha for bot protection, and Google Tag Manager for analytics. Hosting appears to be via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though explicit security headers and incident response policies are not publicly documented. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence. The WHOIS data is unavailable, which reduces transparency but the website's professional content, multiple subsidiaries, and trust indicators suggest a legitimate and established business. Overall, the site is well-designed, accessible, and trustworthy, supporting Valtech's brand as a leader in digital transformation.

D

Dolby Laboratories

dolby.com

70

Dolby Laboratories is a leading technology company specializing in audio, visual, and voice technologies for entertainment media including movies, TV, music, and gaming. The company is globally recognized for its premium technologies such as Dolby Atmos and Dolby Vision, which enhance immersive sound and stunning picture quality. The website reflects a strong market position with a professional and consistent brand presence targeting consumers, content creators, and device manufacturers. The business model centers on technology licensing and product innovation within the entertainment technology sector. Technically, the website employs a modern technology stack including JavaScript frameworks, Braze for marketing automation, Google Tag Manager, Hotjar for user behavior analytics, and Azure Application Insights for performance monitoring. The site is built on the EPiServer CMS platform, optimized for mobile devices, and demonstrates excellent performance and SEO practices. Accessibility features are present, supporting a broad user base. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent mechanisms and privacy policies indicate good privacy compliance aligned with GDPR. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and secure, with no signs of malicious activity or content safety concerns. The absence of WHOIS data is noted but likely due to privacy or registry policies rather than suspicious behavior. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and data protection officer contacts to enhance transparency and trust.

C

Chronopost

chronopost.fr

61

Chronopost is a leading French express parcel delivery company serving both individual and professional customers. The website offers comprehensive information about their services, including parcel tracking, online postage, and specialized delivery options such as Shop2Shop. The company is part of the Geopost group, which is reflected in the website branding and footer links. Technically, the website is built on Drupal 10 with modern libraries and includes cookie consent and tracking mechanisms. Security posture is good with HTTPS and secure forms, though explicit security headers and incident response contacts are not published. The absence of WHOIS data limits domain trust assessment but the website content and branding strongly indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

Č

ČEZ, a.s.

svetenergie.cz

64

Svět Energie is an educational portal operated by ČEZ, a.s., a major energy company in the Czech Republic. The website provides rich interactive content focused on physics and energy, targeting students, teachers, and the general public interested in energy education. It offers videos, experiments, quizzes, 3D printing models, and virtual tours of power plants, positioning itself as a comprehensive learning resource in the energy sector. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and security headers, although explicit security and privacy policies are not prominently published. The domain WHOIS data is unavailable, likely due to privacy protection, but the site’s affiliation with ČEZ and professional presentation support its legitimacy. Overall, the site is a trustworthy, well-maintained educational platform with room for improvement in privacy transparency and security disclosures.

K

Komerční banka

energetickeuspory.cz

61

Energetické úspory is a collaborative project led by Komerční banka and partnered with major Czech companies such as ČEZ, Vekra, and Wienerberger. The website offers comprehensive energy-saving solutions for homeowners, including photovoltaic panels, heat pumps, insulation, window replacements, and tailored financing options. It also assists customers with subsidy applications, enhancing affordability and adoption of sustainable technologies. The site is well-branded, professionally designed, and targets Czech homeowners interested in reducing energy costs through reliable partners. Technically, the website is built on modern frameworks including Next.js and React, ensuring fast performance and excellent mobile optimization. It integrates Google Tag Manager and reCAPTCHA v3 for analytics and security. The site implements a robust cookie consent mechanism aligned with GDPR requirements, reflecting a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA. However, the absence of explicit security headers and incident response contact details suggests room for improvement. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable due to privacy protection, but the strong business affiliations and professional presentation support the site's legitimacy. Overall, the website presents a trustworthy and professional front for energy-saving services with good technical and privacy practices. Strategic enhancements in security headers and incident response transparency would further strengthen its security posture.

A

Alma Career Czechia s.r.o.

kdejinde.cz

58

The website kdejinde.jobs.cz serves as the official career portal for the ČEZ Group, a leading energy company in the Czech Republic. It provides job listings, career information, and educational content targeted at students, graduates, and job seekers interested in the energy sector. The portal is professionally designed with consistent branding and clear navigation, reflecting the stature of its parent company, ČEZ, a.s. The site integrates multiple subsidiaries and partner companies, showcasing a broad ecosystem within the energy industry. The content is comprehensive and relevant, supporting the recruitment and employer branding efforts of the group. Technically, the website employs modern web technologies including React, jQuery, and Google Tag Manager, supported by a proprietary CMS from Alma Career. The site is mobile-optimized, accessible, and performs moderately well. It uses a robust cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. Analytics and marketing tools are implemented responsibly, with clear consent management. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. While explicit security headers like CSP or X-Frame-Options are not evident, no critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data suggests privacy protection, which is justified for a corporate recruitment portal. Overall, the site demonstrates a strong security posture and compliance with privacy regulations. The overall risk assessment is low, with the site representing a legitimate, well-maintained corporate career portal. Strategic recommendations include enhancing security headers, increasing visibility of incident response contacts, and continuous monitoring of third-party scripts. These measures will further strengthen the site's security and trustworthiness.

Č

ČEZ Prodej a.s.

cezakademie.cz

64

ČEZ Akademie is an educational platform operated by ČEZ Prodej a.s., a major energy company in the Czech Republic. The website provides popular educational videos, articles, and event information focused on energy savings and modern energy technologies. It targets both business and general consumers interested in reducing energy costs and adopting sustainable practices. The platform is part of the larger Skupina ČEZ group, reinforcing its market position as a leading energy provider. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The site is mobile-optimized with good SEO practices and clear navigation, providing a positive user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts. WHOIS data is unavailable, likely due to registry policies, but the website's professional presentation and official contact details support its legitimacy. Overall, the site is a trustworthy, well-maintained resource for energy education and customer engagement.

M

MCPHub

mcphub.com

58

MCPHub is a technology platform launched in 2024 that serves as a comprehensive directory and discovery service for Model Context Protocol (MCP) servers, offering over 21,000 servers to enhance AI workflows. The platform targets developers and AI practitioners seeking to integrate and utilize AI tools and MCP servers efficiently. MCPHub positions itself as a niche leader in the AI tooling ecosystem by providing certified servers, online hosted options, and a searchable catalog. Technically, MCPHub is built on modern web technologies including Next.js and React, hosted likely on AWS infrastructure. The website demonstrates good performance, mobile optimization, and SEO practices, leveraging Google Tag Manager for analytics and tracking. However, some areas such as DNSSEC and security headers could be improved to enhance security posture. From a security perspective, the site uses HTTPS and domain registration protections but lacks visible privacy and cookie policies, which impacts compliance and user trust. No incident response or vulnerability disclosure information is present. The domain is very new, consistent with the business launch timeline, and registered through a reputable registrar. Overall, MCPHub presents a professional and functional platform with a solid technical foundation but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

G

Gannett

gannett.com

61

Gannett is a large, enterprise-level media company with a long history dating back to 1924. The company operates a portfolio of hundreds of brands including USA TODAY and local news networks, providing journalism, digital marketing solutions, and events. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site uses WordPress CMS with modern technologies such as jQuery, Google Tag Manager, LinkedIn Insight Tag, and OneTrust for cookie consent, indicating a good level of digital maturity. Security posture is generally strong with HTTPS enforced and cookie consent implemented, though the absence of security headers and a public security policy or incident response page suggests room for improvement. The lack of WHOIS data for the domain is a notable discrepancy that impacts trustworthiness. Overall, the site is safe, professional, and compliant with privacy regulations, targeting a general audience interested in media and corporate information.

The website www.slovenske.sk is operated by eProgress s.r.o. and serves as a comprehensive portal for accommodation and travel information focused on Slovak mountains. It offers direct booking opportunities without commission, snow reports, webcams, and weather updates, targeting tourists and travelers interested in Slovak mountain regions. The business model emphasizes direct communication between guests and accommodation providers, positioning itself as a trusted regional leader with over two decades of operation. Technically, the site uses modern JavaScript and CSS frameworks, with Google Analytics and Tag Manager for tracking, and implements cookie consent mechanisms to comply with GDPR. Security posture is moderate with HTTPS enforced and CSRF tokens present, but lacks some security headers and formal incident response disclosures. Overall, the site is professional, well-structured, and trustworthy, with room for improvement in security policies and transparency.

R

Redakce časopisu TREKING

treking.cz

63

Treking.cz is a Czech-language online portal dedicated to hiking, trekking, and outdoor activities, offering a wide range of articles, guides, event calendars, and accommodation listings. It serves a niche audience of outdoor enthusiasts primarily in the Czech Republic and Slovakia. The website is content-rich, regularly updated, and maintains partnerships with other reputable outdoor and travel websites. Technically, it uses common web technologies including Google Fonts, Adsense, and Tag Manager, with basic mobile optimization and SEO practices in place. Security posture is moderate with HTTPS usage and a consent management platform, but lacks visible security headers and detailed security policies. The absence of WHOIS data limits domain trust verification, but the website content and structure indicate a legitimate and professional operation. Overall, the site scores well in content quality and privacy compliance but could improve in security best practices and domain transparency.

O

Optimizely

newscred.com

74

Optimizely is a leading enterprise SaaS company specializing in AI-powered digital experience optimization. Their platform empowers marketing, digital, and ecommerce teams to create, test, personalize, and scale content and customer experiences efficiently. The website demonstrates a mature digital presence with rich content, professional design, and strong partner and customer references, positioning Optimizely as a market leader in digital experience technology. Technically, the site leverages modern JavaScript frameworks such as React, integrates with Azure Application Insights for monitoring, and uses Google Tag Manager and Marketo for marketing automation and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforced, secure form validation, and monitoring tools in place. However, explicit security policies and incident response contacts are not publicly disclosed, and WHOIS data is unavailable, which slightly reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website and business exhibit a strong, trustworthy profile with minor areas for improvement in transparency and security communication. Strategic recommendations include publishing detailed security and incident response policies, verifying WHOIS data availability, and enhancing privacy officer contact visibility.

S

Eshop se šperky z polodrahokamů a minerálů | Šperkyakameny.cz

sperkyakameny.cz

54

The website sperkyakameny.cz operates as an e-commerce platform specializing in the sale of jewelry made from semi-precious stones, minerals, and pearls. It targets consumers interested in unique and quality jewelry pieces, offering a wide range of products categorized by stone types and jewelry styles. The site is well-structured and provides comprehensive product information, care instructions, and customer support channels, positioning itself as a niche retailer in the Czech market. Technically, the website utilizes a proprietary e-commerce platform (eshop-rychle.cz) and integrates modern analytics and marketing tools such as Google Tag Manager, Matomo, and Sklik retargeting. The site is served over HTTPS, ensuring encrypted communications, and is optimized for mobile devices with good navigation clarity. However, it lacks some security best practices such as security headers and a visible cookie consent mechanism. From a security perspective, the site demonstrates a moderate posture with HTTPS enabled and consent settings restricting analytics and ad storage by default. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Privacy policies and terms of service are present and appear comprehensive, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its business, but the lack of domain registration data and some missing security headers suggest areas for improvement. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, and verifying domain registration details to bolster trust and compliance.

C

Committee for a Responsible Federal Budget

crfb.org

50

The Committee for a Responsible Federal Budget is a well-established nonpartisan, non-profit organization dedicated to educating the public and policymakers on fiscal policy issues. Their website reflects a professional and consistent brand presence, offering a variety of educational resources, interactive tools, and detailed fiscal policy analysis. The organization targets a broad audience including the general public, researchers, and government stakeholders. Technically, the site is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics and Google Tag Manager, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the website enforces HTTPS and includes some security headers, but lacks explicit advanced security policies such as Content Security Policy and a security.txt file. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic; while a privacy policy is present, there is no cookie consent mechanism or detailed GDPR compliance information, which could be improved. Contact information including phone and physical address is clearly provided, enhancing business credibility. Overall, the website demonstrates a strong security posture and professional business credibility, though improvements in privacy compliance and security policy transparency are recommended. The absence of WHOIS data limits domain registration trust verification, but the website content and structure strongly support legitimacy and trustworthiness.

R

Redfin

redfin.com

71

Redfin is a leading real estate platform in the United States offering comprehensive services including home buying, selling, rentals, mortgage services, and access to local real estate agents. The website is professionally designed with excellent content quality and user experience, targeting home buyers, sellers, renters, and mortgage seekers. The platform leverages modern web technologies such as React and integrates multiple analytics and marketing tools to optimize user engagement and business operations. Security posture is strong with HTTPS enforcement, appropriate security headers, and use of AWS WAF, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The absence of WHOIS data is noted but does not detract from the site's legitimacy given its brand recognition and operational scale.

U

U.S. Bureau of Economic Analysis

bea.gov

70

The U.S. Bureau of Economic Analysis (BEA) is a U.S. government agency responsible for providing official economic statistics such as GDP, personal income, international trade, and investment data. The website serves a broad audience including government officials, researchers, journalists, and the general public by offering comprehensive economic data, interactive tools, APIs, and research publications. The BEA holds a primary position as the authoritative source for U.S. economic statistics. Technically, the website is built on Drupal 10 CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and Font Awesome icons. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure appears stable and professionally maintained. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS data is incomplete, likely due to the nature of .gov domains, but the overall trustworthiness is high given the official branding and content. Overall, the BEA website is a professional, trustworthy, and authoritative source of economic data with room for improvement in privacy compliance and security header implementation.

B

Borga

borga.ua

70

Borga is a European construction company specializing in fast-assembly and modular buildings, including hangars, warehouses, and supermarkets. The company targets businesses and individuals in Ukraine seeking efficient and reliable building solutions. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies and analytics tools such as Google Tag Manager and New Relic for performance monitoring. Cookie consent is managed via Cookiebot, demonstrating awareness of privacy regulations. However, the site lacks explicit privacy policies and terms of service, which are important for compliance and user trust. Security posture is solid with HTTPS and some security best practices, but could be improved with additional headers and published security policies. Overall, the site presents a professional image with good technical implementation and moderate privacy compliance.

B

BORGA

borga.se

75

BORGA is a Swedish manufacturing company specializing in prefabricated building kits and steel halls with over 45 years of industry experience. The company targets construction professionals and project managers, offering turnkey solutions with a strong emphasis on quality and control throughout the supply chain. BORGA holds a solid market position in Sweden's construction sector, supported by a professional and well-structured website that reflects their expertise and reliability. The website leverages modern technologies including WordPress, WooCommerce, and various analytics and marketing tools, indicating a mature digital infrastructure. Security posture is good with HTTPS, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, BORGA presents a trustworthy and professional online presence aligned with its business operations.