Security Directory

B

Beaune et le Pays Beaunois Tourisme - Bourgogne

beaune-tourisme.fr

62

Beaune et le Pays Beaunois Tourisme is a regional tourism office website dedicated to promoting Beaune and the Burgundy wine region. The site offers comprehensive information on accommodations, wine tourism experiences, cultural visits, and local events, targeting tourists and visitors interested in the region. The business model focuses on destination marketing and facilitating tourism services. Technically, the website is built on WordPress with a modern tech stack including JavaScript libraries such as jQuery, Leaflet, and Google Maps API, providing a good user experience with multi-language support and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit privacy policy or security contact information is found. The absence of WHOIS registration data is a concern for domain legitimacy, but the website content and structure indicate a legitimate tourism office. Overall, the site is professional and trustworthy but would benefit from improved transparency regarding privacy and security policies.

S

Saint Germain Boucles de Seine

seine-saintgermain.fr

57

Saint Germain Boucles de Seine operates a regional tourism website promoting the Saint-Germain-en-Laye area and surrounding locales in France. The site targets tourists and locals interested in cultural, historical, and recreational activities. It offers event information, reservation links, and multilingual content to serve a broad audience. Technically, the website is built on WordPress with a custom Woody theme and uses modern JavaScript libraries and modules for interactive features and maps. The site is secured with HTTPS and employs a cookie consent framework, demonstrating basic GDPR compliance. However, explicit privacy policies and terms of service are not clearly found, which could be improved. Security headers are not fully verified, and no vulnerability disclosure or incident response information is published. Overall, the website presents a professional and trustworthy front for regional tourism, with moderate technical sophistication and a good security baseline.

D

Destination Pays Bigouden

destination-paysbigouden.com

62

Destination Pays Bigouden is a regional tourism website promoting the Pays Bigouden area in France. It offers comprehensive information on local experiences, accommodations, restaurants, events, and practical visitor information. The site targets tourists and families interested in exploring the region's culture and natural attractions. Technically, the website uses Drupal CMS with AngularJS and integrates multiple third-party services including Google Maps, YouTube, and marketing automation tools. The site is well-structured, mobile-optimized, and provides a good user experience with multilingual support. Security posture is adequate with HTTPS and reCAPTCHA Enterprise, but could be improved by adding more security headers and publishing explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy policy page. WHOIS data is unavailable, which raises some legitimacy concerns despite the professional appearance and content quality of the site. Overall, the website is a credible and useful tourism resource but should address WHOIS transparency and privacy policy gaps to enhance trust.

C

Champsaur Valgaudemar – Un territoire 4 saison aux portes du Parc national des Ecrins

champsaur-valgaudemar.com

58

The website www.champsaur-valgaudemar.com serves as a regional tourism portal for the Champsaur Valgaudemar area in France, offering comprehensive information on local attractions, accommodations, activities, and events. It targets tourists and outdoor enthusiasts interested in mountain experiences year-round. The site is built on WordPress with a modern tech stack including jQuery, Leaflet.js for maps, and integrates Google Analytics and Facebook Pixel for tracking. The design is professional and content-rich, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and terms of service pages are missing, which impacts compliance and trust. The WHOIS data is unavailable, raising concerns about domain registration transparency, but the active and professional website presence suggests legitimate operation. Overall, the site is functional and trustworthy for tourism purposes but would benefit from enhanced privacy disclosures and incident response information.

N

Nancy Tourisme

nancy-tourisme.fr

45

Nancy Tourisme operates as the official tourism office for the Grand Nancy area in France, focusing on promoting the city's rich cultural heritage, including its UNESCO sites and Art Nouveau architecture. The website provides comprehensive information on events, accommodations, dining, and experiences tailored to tourists and visitors interested in exploring Nancy. The site is well-branded and professionally maintained, reflecting a strong market position as a trusted local tourism authority. Technically, the website is built on WordPress using a custom Woody theme and integrates modern JavaScript libraries for enhanced user experience, including Leaflet for maps and Swiper for interactive content. The site is mobile-optimized and employs standard SEO and accessibility practices, though some accessibility features could be improved. Security-wise, the site uses HTTPS with good SSL configuration and includes essential security headers. Cookie consent mechanisms and privacy policies are implemented, indicating GDPR compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and branding strongly suggest authenticity. No critical security vulnerabilities or adult content were detected, making the site safe for general audiences.

C

Comité Régional du Tourisme de la Bretagne

tourismebretagne.com

66

Tourisme Bretagne is the official regional tourism authority website for Brittany, France, providing comprehensive information and services to tourists and visitors. The site offers multilingual support, detailed destination guides, accommodation options, and event information, positioning itself as a key resource for vacation planning in the region. The website demonstrates a mature digital presence with modern technologies and a strong focus on user experience and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the site's legitimacy given its official branding and content. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

O

Office de Tourisme de Rochefort Océan

rochefort-ocean.com

68

Office de Tourisme de Rochefort Océan operates as a regional tourism office providing comprehensive information and services related to tourism in the Rochefort Océan area of France. The website offers details on accommodations, events, local attractions, and thermal cures, targeting tourists and visitors interested in this coastal region. The business model focuses on tourism promotion and facilitating bookings and event ticketing, positioning itself as a key regional tourism resource. Technically, the website is built on Drupal CMS with AngularJS and Bootstrap frameworks, integrating modern web technologies such as Google Maps API, Matomo analytics, and Crisp chat for user engagement. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with a professional design and consistent branding. From a security perspective, the site enforces HTTPS and includes several security headers, along with a cookie consent mechanism indicating some privacy compliance. However, the absence of a dedicated privacy policy page and incident response information represents gaps in compliance and security transparency. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. The WHOIS data is missing, with the domain appearing unregistered or expired in the registry, which raises concerns about domain legitimacy. Despite this, the website content and presentation suggest a legitimate tourism office. Monitoring domain registration status is recommended to ensure continued trustworthiness. Overall, the site is a well-constructed regional tourism platform with room for improvement in privacy compliance and domain registration transparency.

M

Megève Tourisme

megeve-tourisme.fr

69

Megève Tourisme operates a comprehensive and professionally designed tourism website promoting the alpine resort of Megève in France. The site targets tourists seeking a four-season mountain destination, offering detailed information on accommodations, activities, and visitor services. The business model focuses on tourism promotion and facilitating accommodation bookings through partner sites. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and some security monitoring, though additional security headers could enhance protection. Privacy compliance is well addressed with visible cookie and privacy policies and consent mechanisms. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site presentation and content quality. Overall, the website is a reliable and authoritative source for tourism information about Megève.

S

SYDO Ghost - Error

sydoghost.cz

43

The website sydoghost.cz currently displays a database connection error, indicating backend issues that prevent normal content delivery. The site appears to be a small-scale or personal project with minimal content and no visible business or contact information. The technical infrastructure includes legacy Bootstrap 2.2.2, Google Analytics, Google Tag Manager, and Live Helper Chat integration, but lacks modern security practices such as HTTPS enforcement and security headers. The WHOIS data is consistent and shows the domain was registered in 2013 with a Czech registrar, suggesting legitimacy but the website itself lacks professionalism and operational stability. Security posture is weak due to exposed errors, lack of HTTPS, and absence of privacy or cookie policies. Overall, the site presents a low trust profile and requires significant improvements to be considered secure and compliant.

GEMOS CZ spol s r.o. operates the website usekovarychlost.cz, providing specialized traffic monitoring and management systems, particularly focusing on section speed measurement technology. The company targets transportation authorities and municipalities, offering B2B solutions including weight measurement systems, smart speed indicators, and navigation tools. The business is positioned as a niche player within the Czech Republic's transportation technology sector, with a domain age consistent with its operational history since 2014. Technically, the website employs standard web technologies such as Bootstrap and jQuery, with Google Analytics and Tag Manager for tracking. However, the site lacks visible HTTPS enforcement and security headers, indicating room for security improvements. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and functional but requires enhancements in security and privacy to meet modern standards.

GEMOS DOPRAVNÍ SYSTÉMY a.s. is a Czech company specializing in intelligent traffic monitoring and control systems, including speed indicators and meteorological data integration. The website presents a professional image with clear product descriptions and partner affiliations, targeting organizations involved in traffic management. The business model is B2B, focusing on providing technology solutions for transportation safety and efficiency. The domain age and WHOIS data align well with the company's stated history, supporting legitimacy. Technically, the website uses established web technologies such as Bootstrap, jQuery, and Jssor Slider, providing a moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. However, the site lacks advanced security headers and does not explicitly enforce HTTPS based on the provided data, which could be a risk. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Security posture is moderate but could be improved by implementing HTTPS, security headers, and formal privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which limits transparency and readiness for security events. The site uses Google Tag Manager for analytics, but no cookie consent mechanism is present, which may expose the company to privacy compliance risks. Overall, the website is functional and professional but requires enhancements in security and privacy compliance to reduce risk and improve trustworthiness. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

J

Jezdecký areál Stará Pošta

jkstaraposta.cz

40

Jezdecký areál Stará Pošta is a small equestrian facility located near Brno, Czech Republic, offering horseback riding lessons, camps, and related services. The business emphasizes horse welfare and quality riding experiences in a natural setting. The website is professionally designed using WordPress with modern JavaScript libraries and Bootstrap for responsiveness. It provides clear contact information and social media presence but lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is generally good with HTTPS enabled, but security headers and incident response mechanisms are missing. Overall, the website is functional and trustworthy for its target audience but could improve compliance and security practices.

The website uspi.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This prevents any direct analysis of the site's content, business model, or services. The domain is long-established, registered since 2001 with Network Solutions, LLC, indicating a mature domain age. However, no business or contact information is available from the accessible content. The technical infrastructure includes Cloudflare as a security and hosting provider, but no further technology stack details can be determined due to the block. Security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site cannot be properly evaluated until the block is resolved.

The website oktagon.cz currently serves as a minimal placeholder page hosted by FORPSI, a Czech hosting provider. The content is limited to branding and hosting provider information, with no substantive business description, contact details, or user engagement features. The domain is mature, registered since 2011, and the WHOIS data aligns with the hosting provider, indicating legitimacy of the domain registration. However, the lack of meaningful content and absence of privacy or security policies limit the website's utility and trustworthiness. From a technical perspective, the site lacks modern web technologies, security headers, HTTPS enforcement, and any analytics or tracking mechanisms. The design is basic and not optimized for mobile or accessibility. No forms or interactive elements are present, indicating no data collection or user interaction capabilities. Security posture is weak due to missing HTTPS and security headers, and no evidence of compliance with GDPR or other privacy regulations. The absence of contact information or incident response channels further reduces the site's security maturity. There are no detected vulnerabilities or malicious content, but the site is essentially a parked domain with minimal risk but also minimal value. Overall, the site scores low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements should focus on establishing secure HTTPS access, publishing privacy and cookie policies, adding clear business and contact information, and developing meaningful content to improve user trust and engagement.

Č

Český florbal & eSports.cz, s.r.o.

ceskyflorbal.cz

61

Český florbal is the official governing body for floorball in the Czech Republic, providing comprehensive information and services related to national competitions, youth development, and national teams. The website serves as a central hub for players, clubs, officials, and fans, offering schedules, news, training resources, and event information. The organization holds a strong market position as the authoritative source for floorball in the country. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, Google Analytics, and reCAPTCHA v3, alongside frameworks like Nette. The site is well-optimized for mobile devices, features good accessibility, and maintains a professional design with clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies present. Overall, the website presents a low risk profile with strong business credibility and good digital maturity. The absence of WHOIS data limits domain trust verification, but the site’s content and external partnerships support its legitimacy. Strategic improvements in security headers and performance optimization are recommended.

Physicians' Education Resource operates a professional online platform specializing in continuing medical education (CME) and continuing education (CE) for healthcare professionals. The website offers a broad catalog of live events, webcasts, and on-demand educational activities targeting physicians, nurses, optometrists, and pharmacists. The company positions itself as a reputable provider in the healthcare education sector with a focus on delivering accessible and accredited learning experiences. Technically, the website is built using modern web technologies including Ember.js and is hosted on a robust infrastructure leveraging Amazon CloudFront CDN. It integrates multiple analytics and marketing tools such as Google Tag Manager, Matomo, Facebook Pixel, and Segment Analytics, all implemented with user consent mechanisms to comply with privacy regulations. The site demonstrates good mobile optimization and SEO practices, providing a user-friendly experience. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. It employs a cookie consent banner aligned with GDPR requirements. However, there is no publicly available dedicated security policy or incident response information, which could be improved to enhance transparency and trust. The absence of WHOIS domain registration data limits the ability to fully verify domain legitimacy, though the professional presentation and contact information mitigate some concerns. Overall, the website presents a secure, professional, and privacy-conscious platform for healthcare education. Strategic recommendations include publishing a formal security policy, establishing incident response contact channels, and considering a vulnerability disclosure program to further strengthen security posture and stakeholder confidence.

Pharmacy Times Continuing Education (PTCE) is a specialized healthcare education platform providing free and paid continuing education courses primarily for pharmacists and pharmacy technicians. The website offers a broad catalog of educational activities including live events, on-demand webinars, satellite symposia, and curricula across numerous pharmacy-related topics. PTCE positions itself as a trusted resource in the pharmacy education market, leveraging a professional design and comprehensive content to serve its target audience effectively. The platform is built on modern web technologies including Ember.js and Thought Industries LMS, ensuring a robust and scalable infrastructure. The site integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Segment Analytics, supported by a GDPR-compliant cookie consent mechanism powered by Osano. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, which is justified given the nature of the business. Overall, PTCE demonstrates a mature digital presence with strong business credibility and compliance practices.

dvm360 is a specialized veterinary news and information platform operated by MJH Life Sciences, targeting veterinarians and veterinary professionals in the United States. The website provides essential medical news, veterinary expertise, and insights on pet care products and regulations, positioning itself as a trusted resource in the veterinary healthcare sector. Founded in 2008, the company maintains a consistent and professional brand presence with active social media engagement and comprehensive content offerings. Technically, the website employs modern analytics and consent management tools, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for mobile and SEO, delivering a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies or incident response contacts, which could be improved. The WHOIS data is unavailable or protected, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, dvm360 demonstrates a mature digital presence with room for enhanced security transparency and incident readiness.

T

TATRA INVEST

demanovavillage.sk

41

TATRA INVEST is a Slovak real estate investment company focused on projects in the Tatras region. The company offers investment opportunities in functional real estate projects, including free apartments and resale options, targeting investors seeking protection against inflation and partnership benefits. The website is professionally designed using WordPress with Elementor and WooCommerce, integrating modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security measures include HTTPS, security headers, and Google reCAPTCHA to protect against bots. Cookie consent is implemented with granular user controls, reflecting good privacy compliance. However, explicit privacy policy and terms of service pages are limited or not clearly linked, and contact information is primarily via a contact form without direct emails or phone numbers visible. Overall, the website presents a trustworthy and professional digital presence aligned with its business sector.

Tourmkr.com is a technology-focused website operated by Gothru Media Inc., offering a virtual tour creation platform tailored for Google Trusted Photographers and businesses requiring immersive 360-degree virtual tours. The platform provides a rich set of features including predefined themes, plugins, VR support, and downloadable tours, positioning itself as a niche player in the virtual tour market. The business model is subscription-based with free and paid tiers, targeting professionals in real estate, architecture, and tourism sectors. The company is based in Canada and has been operational since 2015, reflecting a mature presence in its domain. Technically, the website leverages modern web technologies such as Angular 14 and Progressive Web Application standards, ensuring good mobile optimization and user experience. Hosting is managed via Amazon AWS infrastructure, and the site integrates with external services including Oculus VR platforms and Google APIs. While the site performs moderately well, there is room for improvement in SEO and accessibility compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks several security headers and formalized privacy and cookie policies, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure mechanisms are publicly available, indicating potential gaps in security governance. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, Tourmkr.com presents a professional and trustworthy platform with solid technical foundations but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

W

World Leagues Association

worldleagues.com

52

The World Leagues Association website serves as a global representative platform for professional football leagues, fostering cooperation with political and sports bodies. The organization is well-established, with a domain registered since 2002, and presents itself professionally with a clear mission and multiple league logos. The website is built on a modern CMS (Kirby) and demonstrates good technical implementation with responsive design and SEO optimization. Security posture is adequate with HTTPS and domain transfer protection, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a cookie policy and consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the site is trustworthy and safe, with no adult or questionable content.

T

TecAlliance

tecalliance.net

68

TecAlliance is a global leader in providing automotive aftermarket data solutions and digital services. Their offerings include comprehensive parts catalogues, logistics and order management platforms, repair and maintenance data, and fleet management tools. The company targets manufacturers, traders, workshops, e-commerce businesses, and fleet owners worldwide, positioning itself as a key enabler of innovation and efficiency in the automotive aftermarket industry. The website reflects a mature digital presence built on WordPress and Elementor, with modern technologies and good mobile optimization. Privacy compliance is well addressed through Usercentrics consent management. Security posture is generally good with HTTPS and no exposed sensitive data, though some security headers are not evident in the HTML source and should be verified server-side. The absence of WHOIS data is a notable anomaly that requires further investigation to confirm domain registration legitimacy. Overall, TecAlliance presents a professional and trustworthy business front with strong branding and partner ecosystem.

B

Barum

barum-reifen.de

66

Barum is a well-established tire brand operating under the Continental umbrella, offering affordable and durable tires for passenger cars, SUVs, vans, trucks, and industrial vehicles. The website is professionally designed using Adobe Experience Manager, featuring comprehensive product information, dealer search, and customer support options. The digital infrastructure includes modern tracking and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The absence of WHOIS data reduces domain trustworthiness, but the brand association and website professionalism support legitimacy. Overall, the site serves its target audience effectively with good user experience and content quality.

U

Uniroyal

uniroyal.de

70

Uniroyal is a well-established tire brand specializing in tires optimized for wet conditions, operating under the Continental group. The website targets primarily German-speaking customers in Europe, offering products for passenger cars, vans, trucks, and commercial vehicles. The site is built on a modern Adobe Experience Manager platform with integrated analytics and consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response information are not publicly visible. The absence of WHOIS registrant data reduces transparency but does not undermine the brand's credibility given its association with Continental. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

S

Semperit

semperit-reifen.de

66

Semperit is a well-established tire brand with a history dating back to 1906, specializing in quality tires for passenger cars, trucks, buses, and vans, primarily targeting the German-speaking market. The website is professionally designed, leveraging Adobe Experience Manager CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though explicit security headers and published security policies are absent. The domain WHOIS data is missing, which raises some concerns about registration transparency, but the brand's association with Continental supports its legitimacy. Overall, the website presents a trustworthy and professional front with room for improvement in security disclosures and domain transparency.

C

Continental Industry

contitech.de

70

Continental Industry is an enterprise-level B2B company specializing in industrial technology solutions across multiple sectors including manufacturing, transportation, and energy. The website presents a comprehensive portfolio of products and services, emphasizing their expertise and global market position as a leading industrial specialist. The digital infrastructure employs modern web technologies such as jQuery, Bootstrap, and Azure Media Player, with integrated consent management and analytics tools to ensure GDPR compliance and user tracking. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the website is professional, content-rich, and trustworthy from a business and user experience perspective.

C

Continental Reifen

continental-reifen.de

68

Continental Reifen operates as a major tire manufacturer and retailer focused on providing high-quality tires for various vehicle types including cars, trucks, motorcycles, bicycles, and specialized sectors such as agriculture and earthmoving. The website targets both private and business customers primarily in Germany and Europe, positioning itself as a leader in the tire industry with a strong emphasis on safety, comfort, and innovation. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and consent management tools, and includes accessibility features to ensure compliance with digital accessibility standards. Security posture is generally good with HTTPS and consent mechanisms in place, though explicit security headers and policies are not evident in the provided data. Privacy compliance is partial due to the absence of a clearly linked privacy policy and terms of service. Overall, the website is professional, trustworthy, and well-structured, supporting the brand's market position. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information for incident response and data protection officers.

C

ContiTech Antriebssysteme

continental-engineparts.com

56

The website for Continental Engineparts serves as a regional portal for automotive aftermarket belt drive components, targeting professional workshops and distributors. It is branded under ContiTech Antriebssysteme, a division of Continental AG, a large multinational automotive supplier. The site provides a language and region selection interface but lacks detailed business or contact information on the landing page. Technically, the site uses standard web technologies such as Bootstrap, jQuery, and Font Awesome, but lacks advanced SEO, accessibility, and security headers. The absence of privacy and cookie policies and no visible contact details reduce compliance and trustworthiness. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy, although the branding and content align with a reputable parent company.

ATE, a brand under Continental Aftermarket & Services GmbH, operates a comprehensive website focused on automotive brake technology products and services. The site targets both B2B and B2C customers, offering a wide range of brake components, hydraulic parts, tools, and support services. The brand is well-established with a strong market position in the transportation sector, particularly in Germany and globally through Continental. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA Enterprise, and a consent management platform, ensuring a secure and privacy-compliant user experience. The site is well-structured, mobile-optimized, and professionally designed, reflecting high digital maturity. Security posture is strong with HTTPS enforcement and form protections, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.

P

PlaxidityX (Formerly Argus)

plaxidityx.com

75

PlaxidityX is a newly established automotive cybersecurity company, recently rebranded from Argus, focusing on providing cybersecurity solutions tailored for the automotive industry. The company targets vehicle manufacturers and related stakeholders, positioning itself as a specialized provider in the transportation technology sector. The website reflects a professional digital presence built on WordPress, incorporating modern SEO and performance tools such as Yoast SEO and Cookiebot for cookie consent management. The technical infrastructure includes lazy loading scripts and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is newly registered with GoDaddy, consistent with the company's recent rebranding and launch. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures and more visible contact information to improve trust and compliance.

E

Elektrobit

elektrobit.com

73

Elektrobit is a well-established automotive software company specializing in embedded software products for ECU, AUTOSAR, automated driving, connected vehicles, and user experience solutions. The company targets automotive industry professionals, OEMs, and Tier 1 suppliers with a B2B business model. Their market position is strong, supported by a comprehensive portfolio of software products and engineering services, including cybersecurity and software-defined vehicle technologies. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Owl Carousel, supported by a CDN (Cloudfront) for performance optimization. SEO and accessibility are well implemented, with Yoast SEO plugin usage and responsive design. Security measures include HTTPS, cookie consent mechanisms, and security incident reporting, although some security headers could be explicitly added for enhanced protection. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. WHOIS data is unavailable, possibly due to privacy protection, but the domain and website content indicate legitimacy and professionalism. Overall, Elektrobit's website demonstrates a mature digital presence with strong business credibility and security awareness. Minor improvements in explicit security headers and incident response transparency are recommended to further enhance trust and compliance.

S

SportZoo, s. r. o.

sportzoo.store

53

SportZoo, s. r. o. operates an official e-commerce website specializing in collectible sports cards and related merchandise, primarily targeting collectors and sports enthusiasts in Slovakia and neighboring countries. The website offers a variety of products including albums, boxes, and starter packs, with clear product categorization and multilingual support. The business model is retail-focused, leveraging direct online sales and marketing through digital channels. The company positions itself as a legitimate Slovak manufacturer and retailer with a consistent brand presence and customer support availability. Technically, the website is built on the Upgates e-commerce platform, utilizing modern web technologies such as Google Tag Manager, Google Analytics 4, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with a responsive design and includes cookie consent mechanisms to comply with basic privacy requirements. Performance is moderate with good SEO and accessibility features, though some advanced security headers are missing. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain registration, matching the company’s Slovak origin and business claims. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and establishing formal incident response and vulnerability disclosure processes.

Wecoma Lite is a technology company offering a flexible, customizable cookie banner solution designed to help website owners comply with privacy regulations such as GDPR. The company positions itself as a provider of fast, lightweight, and fully controllable consent management tools suitable for small to enterprise-level websites. Their business model is subscription-based with transparent pricing tiers targeting different scales of website operations. The website demonstrates a modern technical infrastructure using Vue.js and Vuetify frameworks, with integration of Google Tag Manager for analytics and marketing purposes. Hosting appears to be on Azure, as inferred from CDN billing notes. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies. Contact information is provided via email and a contact form, but no phone numbers or physical addresses are listed. Overall, the website is professional, well-designed, and trustworthy, though it could improve transparency and compliance documentation.

D

Dětský domov Liptál

ddliptal.cz

51

Dětský domov Liptál is a longstanding educational and child care institution operating under the auspices of the Zlínský kraj regional government in the Czech Republic. The organization provides residential care and educational support to children who cannot live with their parents, emphasizing a safe and nurturing environment. The website reflects this mission with clear content and a professional presentation, targeting families, children, and regional stakeholders. Technically, the site is built on the Webnode CMS platform, leveraging modern web technologies and Amazon Cloudfront CDN for hosting static assets. Google Tag Manager is used for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data limits domain trust verification, though the website content and regional affiliation support legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

GARVIS Solutions s.r.o.

rezervace.online

69

REENIO, operated by GARVIS Solutions s.r.o., is a Czech-based online reservation system offering a cloud-hosted SaaS platform tailored for businesses providing direct customer services such as wellness centers, sports facilities, and cultural events. The platform features flexible booking options, automated notifications, integrated online payments, and a user-friendly interface optimized for desktop and mobile devices. It holds a strong market position in the Czech Republic with a growing customer base and recognized certifications including GDPR readiness and payment provider certifications. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, and cloud hosting on Microsoft Azure, ensuring fast performance and mobile responsiveness. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and secure payment integrations, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable service provider in its domain.

P

Povodňový plán České republiky

dppcr.cz

50

The website dppcr.cz serves as the official digital flood plan portal for the Czech Republic, providing comprehensive flood-related information, meteorological data, flood commission activities, and thematic maps. It targets government agencies, emergency responders, and public stakeholders involved in flood management. The site is well-structured with clear navigation and integrates links to national and European meteorological services, positioning itself as a key resource in national flood preparedness and response. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Google Fonts. It employs HTTPS and Google Analytics for tracking, though lacks advanced security headers and cookie consent mechanisms. Mobile optimization is basic but functional, and accessibility features are minimal. The hosting and domain registration are consistent with a Czech government entity, enhancing trustworthiness. From a security perspective, the site benefits from HTTPS and absence of visible vulnerabilities or sensitive data exposure. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and user trust. The use of Google Analytics without consent mechanisms may pose privacy compliance risks under GDPR. Overall, the website is a credible and authoritative government resource with good content quality and business credibility. To improve, it should implement privacy and cookie policies with consent, enhance security headers, and provide clear contact information for security and data protection matters. These steps will strengthen compliance, user trust, and security posture.

MAS Střední Vsetínsko, z. s. is a non-profit association focused on supporting commercial and non-profit activities to improve the quality of life in 12 municipalities within the Střední Vsetínsko region of the Czech Republic. The organization facilitates access to European subsidies for local development and supports various sectors including public, business, and non-profit. The website reflects a regional development facilitator with a clear mission and community focus. Technically, the website is built on WordPress using common libraries such as jQuery, Bootstrap, and Smart Slider 3, hosted by REG-WEDOS. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

S

Sdružení pro rozvoj mikroregionu Střední Vsetínsko

mikroregionsv.cz

54

The website mikroregionsv.cz represents the Sdružení pro rozvoj mikroregionu Střední Vsetínsko, a regional development association in the Czech Republic focused on community development, tourism, and local events. The site provides comprehensive information about projects, events, news, member municipalities, and documents relevant to the microregion. It targets local residents, tourists, and community stakeholders. The business model is non-profit and government-oriented, with a small organizational size and a founding year of 2017. Technically, the website employs modern web technologies including Bootstrap 5.3, jQuery, FontAwesome, Nette Forms and AJAX, LightGallery, Lightbox2, Swiper, and Leaflet.js for mapping. It is hosted with Cloudflare DNS and uses HTTPS, indicating a secure transport layer. The site is mobile optimized and has good navigation and content quality, although accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit security headers and does not provide a vulnerability disclosure policy or incident response contacts. Privacy and cookie policies are not found, which is a compliance gap. No exposed sensitive data or vulnerabilities were detected in the HTML content. Overall, the website is trustworthy and professional for its regional development purpose but would benefit from improved privacy compliance, security headers, and incident response transparency to enhance its security posture and regulatory adherence.

S

Sdružení obcí Mikroregionu Vsetínsko

visit-valassko.cz

43

The website www.visit-valassko.cz serves as the official regional tourism portal for the Valašsko region in the Czech Republic, operated by the Sdružení obcí Mikroregionu Vsetínsko. It promotes local nature, traditions, cuisine, and recreational activities, targeting tourists and visitors interested in cultural and natural experiences. The site offers comprehensive information on places to visit, eat, stay, and events, supported by local government and tourism partners. Technically, the site uses a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google Maps API, with a cookie consent mechanism implemented for GDPR compliance. The website is mobile optimized with good navigation and content relevance. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal privacy and terms of service pages. WHOIS data is unavailable, which reduces domain trustworthiness, but the site’s content and partner affiliations indicate legitimacy. Overall, the site is a well-maintained regional tourism platform with room for improvement in privacy and security documentation.

Z

Zemědělské družstvo MÍR Ratiboř

zdmirratibor.cz

45

Zemědělské družstvo MÍR Ratiboř is a well-established agricultural cooperative based in Ratiboř, Czech Republic, with a history dating back to 1957. The cooperative focuses on traditional agricultural production including dairy cattle breeding, milk production, crop cultivation for feed, and operates a sawmill for timber processing. The website reflects a mature regional business with clear contact information and EU project involvement, indicating active development and modernization efforts. Technically, the site uses AMP technology for fast mobile performance and is hosted by a reputable Czech provider. Security posture is adequate but could be improved with explicit security headers and privacy policies. No forms or tracking scripts are present, reducing privacy risks but also indicating limited user interaction. Overall, the site is professional, trustworthy, and serves its target audience effectively.

T

TKR Jašek s.r.o.

valachnet.cz

53

TKR Jašek s.r.o. operates the VALACHNET.cz portal, providing regional telecommunications services including internet, television, telephone, mobile, and hosting primarily in the Valašsko region of the Czech Republic. The company has a long-standing presence since 1990 and targets residential and business customers within its service area. The website reflects a regional ISP with a focus on customer engagement and service announcements. Technically, the website uses a traditional tech stack with jQuery and jQuery UI libraries, serving content over HTTPS. While the site is functional and content-rich, it lacks advanced security headers and modern privacy compliance features such as a cookie consent mechanism. The site is moderately optimized for performance and accessibility but could benefit from modernization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but the absence of security headers and vulnerability disclosures indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear consistent and legitimate. Overall, the site presents a trustworthy regional ISP with good business credibility but requires enhancements in security best practices and privacy compliance to align with modern standards.

G

GObec

gobec.cz

52

GObec operates a specialized online map server platform designed primarily for Czech municipalities and local governments. The service integrates cadastral data, digital technical maps, and various GIS modules to facilitate efficient territorial management, asset administration, and public information dissemination. The platform offers real-time access to official cadastral data via WSDP and RÚIAN services, supporting informed decision-making and administrative simplification for municipalities. The business model appears to be service and subscription-based, targeting municipal administrations with a focus on compliance and transparency. Technically, the website is built on WordPress using the Avada theme, leveraging common web technologies such as jQuery and FontAwesome. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers are missing and no explicit privacy policy was found. The absence of WHOIS data for the domain is a concern for domain legitimacy but the website content and contact information suggest a legitimate and professional operation. Overall, the site is well-structured, content-rich, and serves a niche government sector effectively.

M

MJH Life Sciences

mjhlifesciences.com

59

MJH Life Sciences is a healthcare-focused company dedicated to providing trusted information, resources, and education to healthcare professionals to optimize patient outcomes. The company positions itself as a reliable source in the healthcare information sector, targeting professionals in the United States. The website is built on WordPress using a premium Brooklyn theme, incorporating modern JavaScript libraries and SEO tools, indicating a moderate level of digital maturity. The technical infrastructure supports good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy and cookie policies. The absence of WHOIS data raises concerns about domain registration transparency, which impacts overall trust. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and cookie policies, and improving domain registration transparency to strengthen credibility and compliance.

B

Banana Splash

banana-splash.com

61

Banana Splash is a technology company specializing in mobile web conversion optimization through a SaaS platform that enables businesses to customize messaging, perform A/B testing, and segment audiences for improved mobile revenues and leads. The company targets businesses seeking to enhance mobile user engagement and conversion rates. The website is professionally designed, mobile-optimized, and includes customer testimonials and clear contact information, indicating a credible market presence. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Tag Manager, and Facebook SDK, supporting marketing and analytics needs. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data is a notable risk factor, reducing domain trustworthiness despite the professional site appearance. Overall, the site is functional and business-focused but would benefit from improved transparency and security documentation.

L

LOBSTER BISTRO

lobster-bistro.cz

49

LOBSTER BISTRO is a small hospitality business operating a restaurant in the Czech Republic, offering a harmonious dining experience with creative food and a pleasant atmosphere. The website reflects a local restaurant's digital presence with a focus on user experience and basic analytics integration. The technical infrastructure includes modern analytics tools such as Google Analytics and Matomo, with cookie consent mechanisms implemented to comply with privacy regulations. However, the absence of visible privacy policies, terms of service, and contact information limits the website's compliance and trustworthiness. Security posture is moderate, with no detected security headers and unknown SSL configuration, suggesting room for improvement in hardening the website's defenses. Overall, the website is functional and professionally designed but lacks critical compliance and security documentation, which should be addressed to enhance trust and legal standing.

G

GoPay s.r.o.

gopay.com

71

GoPay s.r.o. operates a professional payment gateway service targeting merchants and e-commerce businesses primarily in the Czech Republic and surrounding European markets. The company offers a comprehensive payment solution with over 80 features including support for Apple Pay, Google Pay, multiple currencies, and localized payment experiences in 19 languages. The website reflects a mature business with over 18,000 merchants and more than 10 years of operational history, positioning GoPay as a trusted player in the payment processing industry. Technically, the website is built with modern web technologies including HTML5 video, JavaScript, and CSS3, and integrates Google Tag Manager for analytics and marketing. The site is hosted on Amazon Web Services, indicating a robust infrastructure. The website is mobile optimized, fast loading, and includes cookie consent mechanisms compliant with GDPR, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS and PCI DSS certification is prominently displayed, indicating adherence to industry security standards. However, the absence of explicit security headers and a published security policy or incident response contact represents areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but the lack of WHOIS domain registration data raises concerns about domain legitimacy. Strategic recommendations include publishing a security policy, adding security headers, and clarifying domain registration details to enhance trust and security posture.

The website www.iagh.cz serves as a documentation portal for a Webflow developer toolkit offering components such as lightbox, carousel, and tooltip. It targets Webflow developers and designers seeking to enhance their projects with these tools. The site is built using modern JavaScript technologies including React and Next.js, supplemented by legacy libraries like jQuery and Bootstrap 3. The technical infrastructure is moderate in performance and mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak due to absence of security headers, privacy policies, and contact information. The domain WHOIS data is unavailable, raising concerns about domain legitimacy and transparency. Overall, the site provides basic content with limited business credibility and minimal privacy compliance.

1

1C-Битрикс

b24.to

69

Bitrix24 is a comprehensive business management platform offering a wide range of tools including CRM, project management, communication, and AI-powered assistants. It targets businesses seeking integrated solutions to streamline operations and improve collaboration. The platform holds a strong market position in Russia and CIS countries, supported by a robust partner network and extensive service offerings. Technically, the website is built on the Bitrix CMS framework, leveraging modern web technologies and integrating analytics and tracking tools with GDPR compliance. Security posture is solid with HTTPS enforcement and security headers, though lacks explicit public security policies and incident response contacts. Overall, the site is professional, well-structured, and trustworthy, with minor gaps in transparency and WHOIS data availability.

R

Rannís

erasmusplus.is

63

The website www.erasmusplus.is serves as the official Icelandic portal for the Erasmus+ program and the European Solidarity Corps, managed by Rannís, the Icelandic Centre for Research. It provides comprehensive information, news, and resources related to education, youth, and solidarity projects under the EU framework. The site targets students, educators, and youth organizations in Iceland, offering guidance on applications and program participation. The business model is government-funded, focusing on information dissemination and support rather than commercial activities. Technically, the site is built on the Eplica CMS platform, a specialized Icelandic content management system, and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized with good accessibility and SEO practices, though performance is moderate. Hosting appears to be provided by Hugsmiðjan ehf., a known Icelandic hosting provider. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or sensitive data exposures were detected. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information strongly indicate an official and legitimate entity. Overall, the site is professional, trustworthy, and safe for general audiences, but could enhance privacy compliance and security posture by adding cookie consent, security headers, and publishing security policies.

S

Simple Casual, LLC

logo.dev

64

Logo.dev is a technology company providing a comprehensive API service that grants developers and businesses access to hundreds of millions of company logos. Their platform is positioned as a leading solution in the logo API market, trusted by tens of thousands of developers. The service offers updated brand assets delivered via a global CDN, supporting various formats such as SVG, PNG, and WebP. The business model is API-as-a-service with tiered pricing plans targeting developers and enterprises needing reliable brand logos for websites and applications. Technically, the website is built on a modern stack including Next.js and React, with authentication handled by Clerk.js. The site is hosted likely on Vercel, ensuring fast performance and excellent mobile optimization. Security is well implemented with HTTPS, multiple security headers, and no exposed sensitive data. Analytics are handled via Fathom Analytics, reflecting a privacy-conscious approach with minimal user tracking. From a security perspective, the site demonstrates strong fundamentals but lacks explicit security policies and incident response contacts. Privacy compliance is good with a comprehensive privacy policy and terms of service, though no cookie consent mechanism was detected. The WHOIS data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, Logo.dev presents a professional, secure, and well-structured digital presence with minor areas for improvement in privacy and security transparency. The risk profile is low, and the platform is suitable for integration into professional environments requiring reliable logo assets.