Security Directory

S

S.C. GAROM FOOD S.R.L.

garomfood.ro

42

S.C. GAROM FOOD S.R.L. operates as a regional distributor and retailer of canned fish, vegetables, fruits, and related food products in Romania. The company is part of the larger Gaston group, which has multiple regional partners across Central and Eastern Europe. The website presents a professional image with clear branding and product focus, targeting general consumers and business clients interested in quality food products. The business model centers on distribution and retail within the food sector, leveraging established brand partnerships.

G

Gaston, s.r.o.

giana.pl

47

Gaston, s.r.o. operates as a regional distributor specializing in canned fish, vegetables, and fruits under multiple brand names including Gianna and Franz Josef. The company targets general consumers and retail businesses primarily in Poland and neighboring countries. Their business model focuses on wholesale distribution with a portfolio of premium and exotic food products, positioning them as an established player in the retail food sector. Technically, the website employs a traditional jQuery-based stack with UI enhancements such as sliders and modals, indicating moderate digital maturity. The site is mobile optimized and provides a clear navigation structure, though it lacks modern CMS or advanced frameworks. Security posture is moderate; HTTPS is used but no explicit security headers or privacy policies are present, and WHOIS data is missing, which impacts trust. Overall, the website is functional and professional but could benefit from enhanced security and compliance documentation.

G

GA FOOD Kft.

gafood.hu

45

GA FOOD Kft. is a Hungarian company specializing in the distribution of premium and exotic food products, including seafood, fruits, vegetables, oils, and specialty items. It operates as part of the Gaston Group, which includes multiple partner brands and domains, positioning itself as a medium-sized player in the retail food sector. The website provides clear business contact information and brand consistency, targeting both general consumers and business clients interested in quality food products. Technically, the website uses multiple versions of jQuery and several JavaScript libraries to enhance user experience, but lacks modern security practices such as HTTPS and security headers. The cookie consent mechanism is implemented, but no privacy policy or terms of service pages are found, indicating gaps in compliance. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and protect users.

G

GORAL, spol. s r.o.

goral.sk

45

GORAL, spol. s r.o. is a Slovak-based distributor specializing in canned fish, vegetables, and fruit products under well-known brands such as Franz Josef Kaiser, Giana, and Marinna. The company operates primarily in the retail sector, targeting general consumers in Slovakia and neighboring countries. It is part of the Gaston Group, which includes several partner companies across Central and Eastern Europe. The website reflects a medium-sized business with a consistent brand presence and recognized market position, evidenced by awards like Superbrands 2025. Technically, the website employs a traditional tech stack centered around jQuery and related plugins for UI components and sliders. While the site is mobile-optimized and has good SEO fundamentals, it lacks modern security practices such as HTTPS enforcement and security headers. Multiple versions of jQuery are loaded, which could introduce security vulnerabilities. The site does not appear to use a known CMS, and no advanced analytics or tracking tools are detected. From a security perspective, the site shows basic compliance with cookie consent requirements but lacks a published privacy policy, terms of service, or incident response contacts. The absence of HTTPS and security headers reduces the overall security posture. No critical vulnerabilities or malware indicators were found, but improvements are needed to align with best practices and GDPR compliance. Overall, the website is functional and professional but requires enhancements in security and privacy documentation to improve trust and compliance. Strategic recommendations include implementing HTTPS, consolidating JavaScript libraries, publishing privacy and security policies, and adding security headers to protect users and data.

FRANZ JOSEF KAISER, operated by GASTON, s.r.o., is a premium food brand focused on high-quality products such as tuna, seafood, olives, oils, pasta, and related specialties. The website serves as a marketing and informational platform offering recipes and product details to a general consumer audience primarily in the Czech Republic. The brand holds a recognized consumer trust certification (Superbrands Consumer 2025), indicating a positive market position within its niche. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience with multilingual support and GDPR-compliant cookie management. Security posture is solid with HTTPS and consent mechanisms, though some improvements in security headers and contact transparency are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and compliance measures mitigate this risk. Overall, the site is functional, trustworthy, and well-positioned for its market segment.

U

uvex safety

uvex-safety.de

71

uvex safety is a well-established manufacturer and provider of personal protective equipment (PPE) and occupational safety products, primarily targeting business customers and safety professionals. The company offers a broad portfolio including safety helmets, protective eyewear, hearing protection, respiratory masks, gloves, footwear, and workwear. The website reflects a mature digital presence with comprehensive product information, dealer locator tools, and digital PSA solutions, positioning uvex safety as a key player in the manufacturing sector focused on workplace safety in Germany and beyond. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks and leverages Amazon Cloudfront CDN for fast content delivery. It employs Google Tag Manager for analytics and tracking, and implements cookie consent management compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent and privacy policies are comprehensive and transparent. However, the absence of publicly available WHOIS data for the domain www.uvex-safety.com introduces some uncertainty regarding domain registration transparency. No security policy or incident response information is explicitly published, and no vulnerability disclosure mechanism is evident. Overall, the website presents a professional, trustworthy, and secure digital front for uvex safety’s business operations. The main risk lies in the lack of WHOIS transparency, which should be addressed to enhance trust. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure program, and providing direct security contact channels.

D

Dev-Com Informatikai kft.

judobcknmbr.com

44

JUDOBCKNMBR.COM is a specialized e-commerce platform launched in 2024 by Dev-Com Informatikai kft., focused on providing official and custom judo backnumbers, sponsor labels, and related products. The website targets judokas and judo enthusiasts seeking personalized and competition-approved identifiers. The business leverages official partnerships with the International Judo Federation (IJF) and the European Judo Union (EJU), enhancing its market credibility within the niche sports apparel sector. The platform offers a user-friendly interface with clear navigation and product categorization, supporting a seamless ordering experience.

MYBACKNUMBER.com is an e-commerce website specializing in official judo back numbers for international federations such as IJF, EJU, and DJB. The site targets judo athletes, clubs, and federations, offering customized back numbers and club registration services. The business operates primarily in Germany and appears to be a niche market leader in its segment. The website is professionally designed with clear navigation and consistent branding, supporting a small-sized retail business model focused on sports equipment. Technically, the website employs a classic JavaScript stack including Prototype.js and Scriptaculous, with integrations for Google Tag Manager and Hotjar for analytics and user behavior tracking. The site shows moderate performance and basic mobile optimization. SEO practices are good with proper meta tags and structured navigation. However, no modern CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No security policy or incident response contacts are published, and WHOIS data is missing, which raises concerns about domain registration legitimacy. The site does not expose sensitive data or show obvious vulnerabilities but would benefit from enhanced security practices. Overall, the website is functional, professional, and trustworthy from a user perspective but has gaps in domain registration transparency and privacy compliance. Strategic improvements in security headers, cookie consent, and WHOIS data verification are recommended to strengthen trust and compliance.

O

Official backnumber

officialbacknumber.com

46

Officialbacknumber.com is an e-commerce website specializing in the sale of official and custom backnumber products primarily targeting sports organizations and athletes, particularly in martial arts contexts. The site features multiple product categories including IJF-approved official backnumbers, sponsor labels, and children’s backnumbers. The business operates from Hungary and presents itself as a niche market player with official endorsements from recognized sports bodies such as IJF and EJU. The website is professionally designed with multilingual support and clear navigation, enhancing user experience for an international audience. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and lightbox scripts, with moderate performance and good mobile optimization. Security posture is adequate with SSL usage and cookie consent mechanisms, though explicit security headers and policies are not evident. WHOIS data is unavailable or not publicly accessible, which raises some concerns about domain registration transparency but does not negate the legitimacy suggested by the website content and partner affiliations. Overall, the site is safe, trustworthy, and well-positioned within its niche market.

V

Vivatip

vivatip.hr

46

Vivatip is a Croatian-based e-commerce business specializing in trophies, medals, plaques, ribbons, and promotional materials. Established in 2003, it serves customers primarily in Croatia, offering a variety of award products and custom orders. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure suitable for retail operations. The site is well-structured with good SEO practices and moderate performance, optimized for mobile devices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy or cookie policies, indicating compliance gaps. No direct contact information or incident response details are visible, which may affect customer trust and regulatory compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

A

adidas Combat Sports

combat-sports.net

44

The website combat-sports.net represents a small-scale online presence focused on adidas Combat Sports products, likely targeting combat sports enthusiasts and athletes interested in adidas apparel and equipment. The site is built on WordPress using the Salient theme and includes basic integrations such as Instagram Feed. The technical infrastructure is moderate, hosted by OVH sas, a reputable provider, with HTTPS enabled but lacking advanced security headers and DNSSEC. The content is basic and consistent with the brand but lacks comprehensive privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security posture is average with room for improvement in headers and vulnerability disclosures. Overall, the site is safe with no adult or questionable content detected.

K

KWON KG - Kampfsportartikel

kwon.com

41

KWON KG operates an e-commerce platform specializing in martial arts and security equipment, targeting martial arts practitioners primarily in Germany. The website offers a broad range of products including gear for Taekwondo, Karate, Judo, MMA, and other combat sports. The business model focuses on online retail with additional services such as product individualization and multilingual support. The company appears to be a medium-sized retailer with a consistent brand presence and a professional website design. Technically, the website uses modern web technologies including JavaScript and Google Tag Manager for analytics. The CMS is likely Shopware, inferred from URL and CSS patterns. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and HTTPS is enforced, ensuring secure data transmission. From a security perspective, the site has a solid SSL configuration but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No WHOIS data is available for the domain, which raises concerns about domain registration legitimacy and reduces overall trust. Contact information is provided via phone and WhatsApp, but no company emails or physical addresses were found. Overall, the website is functional and professional but would benefit from improved transparency in privacy and security policies, better WHOIS registration clarity, and enhanced security headers to strengthen trust and compliance.

I

IPPON-SHOP.COM

ippon-shop.com

64

IPPON-SHOP.COM is a specialized e-commerce platform established since 2003, serving martial arts practitioners including Judoka, Karateka, and BJJ fighters. The site offers a wide range of high-quality martial arts products, including their own brand IPPON GEAR, and targets both individual consumers and clubs. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies and tracking tools such as Google Analytics and Facebook Pixel. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and comprehensive product categorization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some explicit security headers which could enhance protection. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the website presents a professional and trustworthy front for its business, but domain registration details should be verified to strengthen trust.

E

Essimo B.V.

essimo-judo.com

51

Essimo B.V. operates the website essimo-judo.com, an e-commerce platform specializing in judo and martial arts equipment. The company offers a range of IJF approved products, uniforms, mats, and accessories targeting martial arts practitioners and clubs primarily in the Netherlands. The website is built on Magento Open Source, leveraging modern web technologies such as RequireJS, jQuery, and Knockout.js, providing a responsive and user-friendly shopping experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, although additional security headers could enhance protection. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, suggesting the domain may be newly registered or privacy protected. Overall, the website presents a professional and trustworthy front for its niche retail market.

J

Never miss a throw! - JudoTV

judotv.com

67

JudoTV is a niche media streaming platform dedicated to the sport of Judo, offering live competitions, expert commentary, training tips, and community engagement. The website targets Judo enthusiasts and sports fans, positioning itself as a specialized destination for Judo content. The business appears to be small-sized with a long-standing domain registration dating back to 2004, indicating an established presence in its niche. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates third-party services such as YouTube for video playback, OneSignal for notifications, and Cookiebot for cookie consent management. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security at the infrastructure level. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. From a security perspective, HTTPS is properly enabled, and cookie consent mechanisms are in place, reflecting awareness of privacy regulations. However, the absence of security headers, privacy policy, terms of service, and incident response contacts indicates areas for improvement in compliance and security posture. No vulnerabilities or suspicious elements were detected, and the domain registration details support the legitimacy of the business. Overall, JudoTV presents a professional and focused platform with good content quality and technical implementation but requires enhancements in privacy compliance, security best practices, and transparency to strengthen trust and regulatory adherence.

E

Log in to the site | eju-education.net

eju-education.net

42

The website eju-education.net serves as an educational login portal, likely supporting students and educators involved with the Examination for Japanese University Admission (EJU). It provides user authentication features including account creation, guest access, and password recovery. The platform is built on Moodle, a widely used open-source learning management system, indicating a focus on structured educational content delivery. The site targets learners preparing for EJU or related educational programs, offering a secure and user-friendly interface for accessing course materials. From a technical perspective, the site employs modern web technologies including Moodle LMS, YUI JavaScript libraries, jQuery, RequireJS, and MathJax for mathematical content rendering. The platform is served over HTTPS with secure login forms incorporating CSRF tokens, reflecting a good baseline security posture. The site is mobile-optimized and accessible, with clear navigation and consistent branding. However, the absence of explicit privacy and terms of service pages, as well as lack of contact information, limits transparency and user trust. Security-wise, the site benefits from HTTPS encryption and secure form handling but lacks visible security headers and formalized privacy compliance mechanisms. No vulnerabilities or malicious content were detected, and no WAF or blocking mechanisms interfere with access. The missing WHOIS data for the domain raises some concerns about registration transparency, though the active and professional nature of the site suggests legitimate operation. Overall, the security posture is solid but could be improved with enhanced privacy disclosures and security headers. Strategically, the site should prioritize publishing comprehensive privacy and cookie policies, implement explicit consent mechanisms, and provide clear contact channels for user support and incident response. Regular security audits and updates to third-party libraries will further strengthen resilience. These steps will enhance user trust, regulatory compliance, and overall platform credibility.

Eleventy is an open-source static site generator designed for simplicity, performance, and flexibility. It targets developers who want full control over their static website output without the overhead of client-side JavaScript frameworks. The project is mature, founded in 2017, and enjoys strong community support and sponsorship from reputable organizations. The website is professionally designed with excellent content quality and clear navigation, reflecting a high level of digital maturity.

I

INSPIRE CZ s.r.o.

clubspire.cz

62

CLUBSPIRE.cz is a Czech-based software solution specializing in comprehensive management systems for fitness and sports centers. The platform offers a wide range of modules including reservation systems, membership management, email marketing, access control, and point of sale functionalities. With a client base of over 200 sports centers, CLUBSPIRE positions itself as a reliable and efficient tool for business managers in the fitness industry. The website reflects a professional and consistent brand image, supported by active content updates and social media engagement. Technically, the website employs a modern technology stack including Java-based backend architecture, Google reCAPTCHA for form security, and Google Analytics for user tracking. The site is optimized for multiple platforms including Windows, Linux, and Apple, and demonstrates good mobile responsiveness and SEO practices. Security measures such as HTTPS and consent-based cookie management are implemented, though some security headers could be enhanced. From a security perspective, the site shows a solid posture with encrypted communications and protection against automated abuse via CAPTCHA. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits the ability to fully verify domain legitimacy, though the professional presentation and active business operations mitigate some concerns. Overall, CLUBSPIRE.cz is a credible and well-maintained business website with good technical and security foundations. Strategic enhancements in security policy publication, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance posture.

IFET.fr is the official website of IFET, a French training organization specializing in educating local elected officials, their collaborators, and public agents. The organization is recognized and certified by the French Ministry of the Interior and holds the Qualiopi certification, underscoring its credibility and compliance with national training standards. The website provides detailed information about upcoming training sessions, certification attestations, and contact details for engagement. The target audience is primarily local government officials and associated personnel seeking professional development in governance and public administration. Technically, the site is built on Drupal 9, leveraging modern web technologies and standard analytics tools such as Google Analytics and Google Tag Manager, with a cookie consent mechanism in place to comply with GDPR requirements. The site is mobile-optimized and accessible, with a professional design and clear navigation.

A

Assemblée des départements de France

departements-en-reseaux.fr

46

Départements en réseaux is a collaborative open-source platform operated by the Assemblée des départements de France, targeting French departmental administrations. The platform facilitates collaboration and resource sharing among departments, positioning itself as a niche government/non-profit service provider. The website is professionally designed with consistent branding and clear navigation, supporting its role as a trusted government-related resource. Technically, the site is built on the Elgg CMS framework, utilizing modern web technologies such as jQuery and Font Awesome. Hosting is provided by reputable French providers OVH and o2switch.net. The site demonstrates good mobile optimization and basic accessibility features, although SEO optimization is basic. Performance is moderate, suitable for its intended audience. From a security perspective, the website enforces HTTPS and employs CSRF tokens in forms, alongside a robust cookie consent mechanism respecting GDPR and Do Not Track signals. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

CONCILIUM is a French consulting firm specializing in digital transformation and digital support services for businesses, public institutions, foundations, and associations. Established since 2015, the company offers tailored consulting in digital projects, e-marketing, e-commerce, social media management, event digitalization, GDPR compliance, and training. The firm positions itself as a trusted advisor in the digital transformation space with a strong presence in Paris and across France. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies and analytics tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled, though additional security headers could enhance protection. Privacy compliance is basic with no explicit privacy or terms of service pages found, but a cookie consent mechanism is present. Overall, the site is well-designed, accessible, and trustworthy, with no signs of malicious activity or content blocking.

SOCAMA is a French financial entity specializing in providing guarantees for professional loans, primarily associated with Banque Populaire. The website presents a professional image with clear focus on facilitating credit access for artisans, merchants, and liberal professions by limiting personal asset exposure. The business model centers on loan guarantees, positioning SOCAMA as a trusted partner in the finance sector. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and cookie consent plugins, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, though security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service pages in the provided content. Overall, the website is trustworthy and professionally maintained, with room for enhancements in security and compliance documentation.

S

SIAGI

siagi.com

64

SIAGI is a French mutual guarantee society specializing in facilitating credit access for small businesses such as artisans, local shops, liberal professions, and farmers. It offers a comprehensive range of credit guarantees and collaborates closely with all banks in the market, positioning itself as a key player in the financial support ecosystem for small enterprises. The website presents a professional image with clear navigation, testimonials, and detailed service offerings, targeting bankers, brokers, entrepreneurs, and general visitors interested in credit guarantees. Technically, the site uses modern JavaScript libraries including Mapbox for mapping, Google Tag Manager for analytics, and Bootstrap for responsive design, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional web presence and social media profiles mitigate some of these concerns. Security posture is adequate but could be improved by implementing security headers and explicit privacy and cookie policies. Overall, SIAGI's website is a credible resource for its target audience but would benefit from enhanced transparency and security practices.

MAAF Assurances is a well-established French insurance company offering a broad range of insurance and financial services targeting individuals and professionals. The company has a long-standing domain registration dating back to 1996, indicating a mature market presence. The website content provided is an error page indicating unavailability of the requested resource, with navigational links to main insurance product categories. The technical infrastructure includes use of jQuery 1.7.1 and hosting via CSC CORPORATE DOMAINS INC. The site lacks modern security headers and explicit HTTPS confirmation in the provided data, which suggests room for improvement in security posture. No privacy or cookie policies were found on this page, indicating potential compliance gaps. Overall, the website appears legitimate but the analyzed page is minimal and does not provide comprehensive content or contact information.

G

Groupe VYV

groupe-vyv.fr

58

Groupe VYV is the leading mutualist actor in health and social protection in France, offering comprehensive services across insurance, healthcare, and housing sectors. The organization protects over 10 million people and operates a large network of establishments and agencies nationwide. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to employers, intermediaries, and partners. Technically, the site is built on WordPress with modern caching and slider technologies, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS and privacy policies in place, though HTTP security headers could be improved. No WHOIS data is available, likely due to privacy protection, but the website's consistency and trust signals support its legitimacy. Overall, Groupe VYV presents a credible and professional online presence aligned with its mission of accessible health for all.

A

AG2R LA MONDIALE

ag2rlamondiale.fr

65

AG2R LA MONDIALE is a leading French insurance and social protection group specializing in health mutual insurance, provident insurance, savings, and retirement products. The website targets individuals, professionals, enterprises, accountants, and brokers, offering a wide range of insurance and financial services. The company positions itself as a specialist in social and patrimonial protection in France, with a strong market presence and comprehensive service offerings. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript libraries and the Jahia CMS platform, with good performance and accessibility features. Security posture is strong, with HTTPS enforced and multiple security headers present, although no explicit incident response or vulnerability disclosure policies are publicly available. Privacy and cookie policies are present and GDPR compliant, indicating good privacy practices. Overall, the website is trustworthy, professional, and well-aligned with the company's business identity.

U

U2P

u2p-tv.fr

33

U2P TV is a specialized web TV platform operated by the Union des entreprises de proximité (U2P) in France, providing live streaming and archived video content related to U2P events and activities. The website targets professionals and stakeholders interested in U2P's initiatives, offering a niche media service with a clear focus on event broadcasting and replay. Technically, the site is built on WordPress using Elementor and Yoast SEO, hosted by OVH, and integrates YouTube for video content delivery. The platform demonstrates moderate digital maturity with good SEO and mobile optimization but could improve performance and accessibility further. Security posture is adequate with HTTPS enforced but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices.

O

Obec Jiříkovice

jirikovice.cz

40

Obec Jiříkovice operates as the official municipal government website for the village of Jiříkovice in the Czech Republic. It provides residents and visitors with local news, official documents, event calendars, and contact information for municipal offices. The site serves as a key communication channel for community engagement and local governance. The website is positioned as a small government entity portal with a focus on transparency and public service. Technically, the website employs a combination of JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Highslide for interactive and responsive user experience. The CMS appears to be a proprietary or specialized system (Galileo CMS), supporting structured content delivery. The site is mobile-optimized and includes accessibility certification, indicating a commitment to inclusive design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or security incidents are evident from the content. The absence of WHOIS data limits domain trust assessment, but the official nature and consistent branding support legitimacy. Overall, the website is a well-structured, professional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

M

Město Újezd u Brna

ujezdubrna.cz

49

Město Újezd u Brna operates an official municipal website serving residents and visitors with comprehensive information about local government, events, public services, and community news. The website is well-structured and professionally designed, reflecting the town's commitment to transparent communication and civic engagement. The platform targets local citizens and stakeholders, providing easy access to essential municipal resources and contact points. Technically, the website leverages a modern technology stack including jQuery, Bootstrap, Swiper.js, and the Nette framework, ensuring responsive design and interactive features. The use of Leaflet.js for mapping and integration of social media channels enhances user experience. Hosting and domain registration are consistent with the official nature of the site, with a domain age dating back to 2002. From a security perspective, the site employs HTTPS, Google reCAPTCHA v3, and includes a cookie consent mechanism, demonstrating adherence to privacy and security best practices. While some security headers could be improved, no critical vulnerabilities were detected. The website complies with GDPR, providing a comprehensive privacy policy and data protection officer contact information. Overall, the website presents a low-risk profile with strong business credibility and a high level of trustworthiness. Strategic recommendations include enhancing security headers, implementing Subresource Integrity for external scripts, and maintaining regular updates to third-party libraries to sustain security and compliance.

Obec Zbýšov's official website serves as a comprehensive portal for local government information, community news, and public services for the residents of the Vyškov district in the Czech Republic. It provides access to municipal documents, event calendars, contact information, and reservation systems for local facilities, positioning itself as a trusted source for civic engagement and administrative transparency. The website targets local residents and stakeholders interested in municipal affairs, operating under a government public service model with a small organizational size. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services including reCAPTCHA for form security and Google Translate for multilingual support, alongside OpenWeatherMap for weather updates. The site demonstrates moderate performance with good mobile optimization and basic accessibility features, though there is room for improvement in SEO and security header implementation. From a security perspective, the website enforces HTTPS and employs Google reCAPTCHA to protect its contact form, minimizing exposure to automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and detailed security or incident response policies indicates areas for enhancement. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, fulfilling its role as a municipal information hub. Strategic improvements in security policies, privacy mechanisms, and technical optimizations would further strengthen its posture and user trust.

O

Obec Kučerov

kucerov.cz

40

Obec Kučerov operates an official municipal website serving the residents and visitors of Kučerov, Czech Republic. The site provides comprehensive local government information including news, events, official documents, and public services. It targets local citizens and stakeholders interested in municipal affairs. The business model is governmental public service with a focus on transparency and community engagement. The website is positioned as a trusted local government portal with consistent branding and clear navigation.

The website holubiceou.cz serves as the official online presence for the municipality of Holubice in the South Moravian Region of the Czech Republic. It provides residents and visitors with information about the village, municipal office, local services, cultural events, and community organizations. The site targets local citizens and stakeholders interested in municipal affairs. The business model is that of a government entity providing public services and information. The domain has been active since 2006, indicating a stable and established municipal web presence. Technically, the website employs a traditional web stack including Bootstrap 4, jQuery, Popper.js, and Moment.js, with a custom or proprietary CMS platform. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is no evidence of advanced analytics or marketing tools, reflecting its public service nature. From a security perspective, the site lacks visible security headers and explicit security policies. There is no privacy or cookie policy, and no contact information for security incidents or data protection officers is provided. The site uses HTTPS (implied by the URL), but SSL configuration details are unknown. No vulnerabilities or malicious content were detected, but security posture is basic and could be improved with standard best practices. Overall, the website is functional and serves its purpose as a municipal information portal but lacks comprehensive privacy, security, and compliance features. Strategic improvements in these areas would enhance trust and legal compliance.

O

Obec Telnice

obec-telnice.cz

50

Obec Telnice operates as the official municipal government website for the village of Telnice in the Czech Republic. It provides residents and visitors with comprehensive information about local governance, community events, citizen services, and tourism. The website is positioned as a trusted local government resource, offering key services such as official notices, forms, event calendars, and community center activities. The target audience primarily includes local residents, government officials, and tourists interested in the area. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, Swiper.js, and Mmenu.js, likely built on the Galileo CMS platform. The site is mobile-optimized and accessible, with good SEO practices and a clear navigation structure. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the official nature of the content and contact information supports legitimacy. Overall, the website presents a professional and trustworthy digital presence for the municipality, with room for improvement in security best practices and domain registration transparency. Strategic recommendations include adding security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

O

Obec Podolí

podoliubrna.cz

48

Obec Podolí is the official municipal website for the village of Podolí in the Czech Republic, providing residents and visitors with comprehensive information about local government, community events, public services, and contact details. The site serves as a central hub for municipal news, official documents, and community engagement. Technically, the website employs a mix of established JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, alongside a custom CMS platform likely based on Lego2. The site is mobile optimized and includes modern features like an AI chatbot for user assistance. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit privacy or security policies, which are areas for improvement. The absence of WHOIS data suggests privacy protection on the domain registration, which is common and acceptable for municipal websites. Overall, the website is professional, trustworthy, and serves its intended audience effectively, though it could enhance its privacy and security posture.

The website www.tvarozna.cz serves as the official online presence for the municipality of Tvarožná in the Czech Republic. It provides comprehensive local government information, including news, events, public notices, contact details, and community services. The site targets residents, local businesses, and visitors, offering a broad range of municipal resources and updates. The business model is governmental/non-profit, focusing on public service rather than commercial activities. Technically, the website employs a traditional tech stack with Bootstrap 3, jQuery 1.11.1, Fancybox, and Wow Book for UI and interactive elements. It uses the Synetix publishing system as its CMS. The site is mobile responsive with good navigation and content structure, though some technologies are outdated, which may pose security risks. Performance is moderate, and SEO and accessibility are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and employs an outdated jQuery version, which could expose it to vulnerabilities. No privacy or cookie policies are explicitly found, and no incident response or vulnerability disclosure mechanisms are present. WHOIS data is missing, which reduces transparency and trust slightly but does not indicate malicious intent given the official nature of the content. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. However, it would benefit from improved security practices, updated technologies, and enhanced privacy compliance to align with modern standards and regulations.

M

Městský úřad Vyškov

vyskov-mesto.cz

45

The website vyskov-mesto.cz is the official municipal portal for the city of Vyškov, Czech Republic, providing comprehensive information about city administration, services, news, events, and contact details. It serves residents, visitors, and local businesses with a broad range of public services and community resources. The site is well-established, with a domain registered since 2000, reflecting a mature digital presence. Technically, the site uses a custom CMS (vismo) with common web technologies including Bootstrap and jQuery, though the jQuery version is outdated and poses potential security risks. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, but the absence of visible security headers and a formal security policy indicates room for improvement. Privacy compliance is good, with a clear privacy and cookie policy, though the cookie consent mechanism could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use, supporting the city’s communication and service delivery objectives effectively.

Acaballado® z.s. is a small Czech non-profit organization dedicated to organizing cultural and historical events, primarily focusing on historical reenactments and promoting historical awareness. The website serves as a platform to inform visitors about upcoming events, archives, and organizational information. The organization targets a general audience interested in cultural heritage and history, particularly within the Czech Republic. The business model is centered on event organization and community engagement without commercial sales evident on the site. Technically, the website is built on WordPress 6.5.7, utilizing popular plugins such as Yoast SEO and libraries including jQuery, Bootstrap, and Slick Carousel. It integrates Google Tag Manager, Google Analytics, and Facebook SDK for analytics and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is legitimate and professionally maintained for a small non-profit. The lack of WHOIS data is consistent with privacy protection common in such organizations. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

Z

Zámek Slavkov – Austerlitz

zamek-slavkov.cz

46

Zámek Slavkov – Austerlitz is a historic cultural heritage site in the Czech Republic, serving as a prominent regional landmark and event venue. The website presents the castle as a destination for guided tours, exhibitions, weddings, corporate events, and hospitality services including a café and restaurant. The site targets general audiences including tourists, families, and event organizers. Technically, the website is built on WordPress with modern front-end libraries and frameworks, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though security headers and incident response information are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website's content quality, social media presence, and privacy compliance indicate a trustworthy and professional operation. Overall, the site is well-maintained with room for security and transparency improvements.

Burn IT, s.r.o. is a small Czech technology company specializing in web development, custom internet systems, Flash components, and internet marketing services. Their offerings include bespoke web presentations, internet system development, streaming applications, and packaged products such as Burn IT CMS and Burn IT E-shop. The website targets businesses seeking tailored online solutions and marketing support within the Czech Republic. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and references to Adobe Flash and Adobe Air platforms, indicating some legacy technology usage. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is basic with HTTPS enabled but no detected security headers or privacy policies, and no visible contact or incident response information. The WHOIS data is missing, which raises concerns about domain registration transparency and reduces trust. Overall, the website is functional and provides relevant business information but requires improvements in security, privacy compliance, and transparency to enhance trust and professionalism.

C

Centrála cestovního ruchu – Jižní Morava, z.s.p.o.

ccrjm.cz

45

The Tourist Authority South Moravia operates as a regional non-profit organization dedicated to promoting tourism in the South Moravia region of the Czech Republic. Their website serves as an information hub for tourists, partners, and media, offering details about regional events, promotional materials, and conference support through the Brno Convention Bureau. The organization positions itself as a key player in regional tourism development and marketing. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Yoast SEO, indicating a mature digital infrastructure. The site is mobile-optimized and incorporates cookie consent mechanisms to comply with GDPR. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and has implemented cookie consent with granular options, reflecting good privacy practices. However, the absence of WHOIS data and security headers suggests areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and trustworthy, serving its purpose effectively. The main risk lies in the lack of transparent domain registration data, which should be addressed to improve trustworthiness and compliance.

C

Centrála cestovního ruchu - Jižní Morava

morawypoludniowe.pl

47

The website www.morawypoludniowe.pl serves as the official regional tourism portal for South Moravia, Czech Republic, promoting the area's natural beauty, historical sites, gastronomy, and wine culture. It targets tourists and enthusiasts interested in exploring this unique wine region with curated trip proposals, event calendars, and rich multimedia content. The site is well-positioned as a regional leader in tourism promotion, supported by official partners and government entities. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and uses a cookie consent mechanism compliant with GDPR. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. The absence of explicit CMS or hosting details limits deeper infrastructure insights. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or suspicious elements were detected in the content or scripts. WHOIS data is unavailable, likely due to registry privacy policies, but the website's trust signals and partner affiliations support its legitimacy. Overall, the site presents a professional, trustworthy, and content-rich platform for regional tourism promotion. Strategic improvements in security headers, accessibility, and transparency policies would further enhance its security posture and compliance.

T

Tourismuszentrale Südmähren

sued-maehren.de

47

Tourismuszentrale Südmähren operates as the official regional tourism authority promoting South Moravia, a renowned wine-growing and cultural region. The website provides comprehensive tourism information, including excursions, events, regional guides, and accommodation options, targeting tourists interested in nature, history, gastronomy, and cultural experiences. The business model focuses on regional tourism promotion and information dissemination, positioning itself as a trusted source for visitors to South Moravia. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, hosted on Active24 servers. The site is mobile-optimized with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear cookie policy and consent mechanism, though a dedicated privacy policy page could enhance compliance. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively supports the regional tourism business with clear contact information and social media presence. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture.

T

Tourist Authority South Moravia

south-moravia.com

50

The website www.south-moravia.com serves as the official tourism promotion platform for the South Moravia region in the Czech Republic. It offers comprehensive information about the region's attractions, experiences, trips, and events, targeting tourists and travelers interested in nature, wine, culture, and gastronomy. The site is well-branded and professionally designed, reflecting its role as a regional tourism authority. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and implements a cookie consent mechanism compliant with GDPR. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal incident response or vulnerability disclosure policies. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, though the website content and partner affiliations support its legitimacy. Overall, the site is a reliable and professional resource for tourism information with room for security and compliance improvements.

D

Deliveroo

deliveroostudents.co.uk

75

Deliveroo is a well-established online food and grocery delivery platform operating primarily in the UK and multiple international markets. The analyzed page focuses on a student partnership offering free delivery and exclusive discounts through the Deliveroo Plus Silver subscription, targeting students aged 18 and over enrolled in higher education. The company leverages a modern technology stack including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and consent management in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for its target audience.

U

UVEX ARBEITSSCHUTZ GMBH

uvex-sportstyle-rx.com

68

The website www.uvex-sportstyle-rx.com represents UVEX ARBEITSSCHUTZ GMBH's specialized product line for prescription sports eyewear. It targets sports enthusiasts requiring high-quality, safe, and stylish prescription glasses for various sporting activities. The site is professionally designed, mobile-optimized, and uses modern technologies including TYPO3 CMS and Amazon Cloudfront CDN. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is missing, which slightly reduces trust but the overall professional presentation and consistent branding support legitimacy. Recommendations include publishing explicit security and incident response policies and improving accessibility features.

H

Hansmann PR

hansmannpr.de

43

Hansmann PR is a Munich-based PR agency specializing in public relations, content marketing, and social media services across sports, fashion, tourism, and lifestyle sectors. Founded in 1988 and currently managed by two proprietors since 2011, the agency serves approximately 35 clients with a focus on inspiring and organizing dialogue, creating media buzz, and producing multimedia content. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance. The site is mobile-optimized and performs moderately well, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the domain and WHOIS data align with the business claims, showing legitimacy and consistency.

U

uvex group

uvex.de

66

The uvex group is a well-established manufacturer and retailer specializing in safety, sports, and protective equipment. The company operates multiple strong brands and targets both professional and consumer markets with a focus on occupational safety and sports gear. Their market position is solid, supported by a large-scale business model and a broad portfolio of subsidiaries. The website reflects a mature digital presence with a modern technology stack centered around TYPO3 CMS and cloud-based content delivery. Privacy and cookie compliance are well implemented, including a consent management platform. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for performance and mobile use.