Security Directory

S

Slovenská produkčná, a.s.

joj.sk

59

TV JOJ, operated by Slovenská produkčná, a.s., is a leading Slovak media company specializing in television broadcasting and digital content delivery. The website serves as a comprehensive portal for live TV streaming, program archives, news, sports, and entertainment, targeting the Slovak-speaking general public. The company holds a strong market position as a major broadcaster in Slovakia, supported by a consistent brand presence and a broad content offering.

S

Slovenská produkčná, a.s.

noviny.sk

64

Noviny.sk is a prominent Slovak online news portal operated by Slovenská produkčná, a.s., a media company based in Bratislava, Slovakia. The website offers a wide range of news content including politics, economy, sports, crime, weather, and multimedia such as videos and podcasts. It targets a general audience seeking up-to-date news and information. The business model relies primarily on advertising revenue, supported by multiple ad networks and programmatic bidding technologies integrated into the site. The portal is part of a larger media group including joj.sk and jojgroup.sk, enhancing its market position in the Slovak media landscape. Technically, the website employs modern JavaScript modules, header bidding with Prebid.js, and multiple analytics and advertising platforms such as Google Analytics, Facebook Pixel, Gemius, Smart AdServer, and Teads. Consent management is handled via the Didomi CMP, ensuring GDPR compliance mechanisms are in place. The site is mobile-optimized with good SEO practices and structured data markup to enhance search engine visibility. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and there is no public security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided HTML content. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk assessment is low, with the site appearing legitimate, professionally managed, and compliant with basic privacy regulations. Strategic recommendations include publishing clear privacy and terms of service pages, enhancing security headers, and providing incident response contacts to improve trust and compliance.

S

Studio 9 s.r.o.

studio9.cz

54

Studio 9 s.r.o. is a Czech-based creative digital agency specializing in web design, e-commerce solutions, mobile and web applications, and digital branding services. The company targets businesses seeking tailored digital solutions and has established a reputable market position with a portfolio of notable clients. Their website reflects a professional and modern digital presence with multimedia content and clear service offerings. Technically, the site uses a custom CMS (Studio9 webManager), integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel, and employs modern web technologies including jQuery and SVG graphics. Security-wise, the site enforces HTTPS with a DigiCert SSL certificate and includes a cookie consent mechanism, though it lacks advanced security headers and formal incident response disclosures. The absence of WHOIS data suggests privacy protection, which is typical for small agencies. Overall, the website is trustworthy, well-designed, and compliant with basic privacy regulations.

P

Playmain

playmain.com

47

Playmain is a small web development duo based in Indonesia, operated by a married couple who focus on crafting quality websites with an emphasis on both aesthetic design and functional code. Their website serves as a personal portfolio and family playground for their creative web design and development projects. The site is simple, with limited content and no advanced interactive features. Technically, the site uses basic web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Google Analytics for tracking. However, there is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises concerns about domain legitimacy. Overall, the site is functional but lacks professional security and compliance features.

P

Programy na Programosy.pl - codzienna dawka programów

programosy.pl

34

Programosy.pl is a well-established Polish software download portal offering a large categorized database of installation programs, portable versions, and language localizations. The site features user comments, ratings, and an active forum, catering primarily to Polish-speaking users interested in software downloads and reviews. The business model revolves around content aggregation and advertising revenue, primarily through Google Adsense. Technically, the site uses classic web technologies including HTML5, CSS3, JavaScript with jQuery 1.7.1, and integrates Google Analytics and Google Custom Search Engine for enhanced user experience and tracking. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and uses an outdated jQuery version, which could pose risks. WHOIS data is privacy protected, common for this type of portal, but the site claims a long operational history consistent with domain age expectations. Overall, the site is functional, content-rich, and moderately secure, serving a general audience without adult or questionable content.

O

Office de Tourisme de La Grande Motte

lagrandemotte.com

42

La Grande Motte's official tourism website provides comprehensive information and services for visitors including accommodation booking, activity reservations, and event details. The site targets tourists and business travelers, positioning itself as a key local tourism authority with a strong digital presence. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for tracking. The site is well-designed, mobile-optimized, and offers a good user experience. Security posture is adequate with HTTPS and cookie consent, but lacks visible security headers and a published privacy policy. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

O

Office de Tourisme Béziers Méditerranée

beziers-mediterranee.uk

60

The website represents the official Office de Tourisme Béziers Méditerranée, providing comprehensive tourist information, event promotion, and ticketing services for the Béziers region in France. It targets tourists and visitors seeking cultural, leisure, and practical information about the Mediterranean area. The site is well-branded, professionally designed, and offers multilingual support, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. Cookie consent is managed via Axeptio, indicating attention to privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of HTTP security headers and lack of published security policies or incident response contacts are areas for improvement. The WHOIS data is missing or invalid due to domain naming rules violation, which slightly reduces trust from a domain registration perspective but does not detract from the site's legitimacy based on content and certifications. Overall, the site is low risk with strong business credibility and privacy compliance, but should address domain registration clarity and enhance security headers and policies to improve trust and resilience.

T

The Good Life France

thegoodlifefrance.com

57

The Good Life France is a niche lifestyle and travel website dedicated to providing comprehensive information about France, its culture, holidays, and lifestyle. Established in 2011, it targets enthusiasts of French culture and travel, offering rich content that appeals to a general audience interested in France. The website leverages WordPress CMS with Elementor and Astra theme, indicating a modern and maintainable technical infrastructure. Hosting is managed via OpenHostingService, and the site uses HTTPS with domain protections in place, though DNSSEC is not enabled. Security headers are minimal, and no explicit privacy or cookie policies are present, which are areas for improvement. Social media integration is strong, enhancing the site's reach and trustworthiness.

S

Sellcodes

sellcodes.com

67

Sellcodes is an online marketplace specializing in the buying and selling of software codes, including themes, plugins, scripts, and software licenses. Founded in 2016, the platform currently operates in a limited capacity, processing payments exclusively for digital products licensed by its partner Inisev. The website targets software developers and digital product creators seeking a marketplace to monetize or acquire code assets. Technically, Sellcodes employs a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries, with integrations for payment processing via Paddle and analytics through Google services. The site is hosted with a reputable registrar and uses Cloudflare DNS, ensuring stable domain management and HTTPS security. Security posture is moderate, with HTTPS enforced and CSRF protections in place, but lacks DNSSEC and explicit security headers. Privacy compliance is basic, with privacy and terms pages present but no cookie consent mechanism or detailed GDPR indicators. Overall, the website is professionally designed, user-friendly, and safe for general audiences, though improvements in security policies and privacy compliance are recommended.

MyPopUps is a specialized SaaS platform founded in 2017 that offers website owners and marketers a comprehensive solution to create and deploy customizable pop-ups. The platform provides a marketplace of ready-made pop-up themes and an advanced builder tool to create pop-ups for email collection, discount codes, cookie notices, and adblocker detection. The business targets digital marketers and website owners seeking to enhance user engagement and conversion rates through pop-ups. Technically, the website leverages modern JavaScript frameworks (likely Vue.js), integrates with popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager, and uses Cloudflare DNS for domain management. The site is hosted with a reputable registrar and employs HTTPS for secure communications. Security posture is solid but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, functional, and trustworthy with moderate risk and room for security and compliance enhancements.

S

Sencyb

miniurl.be

45

MiniUrl.be is a French-language URL shortening service operated by Online sas since 2010, providing users with a free and simple way to shorten and share URLs. The website is well-established with a consistent brand presence and offers additional features such as QR code generation and an API for webmasters. The business model relies on advertising revenue and voluntary donations via PayPal. Technically, the site uses modern frontend technologies including Bootstrap and jQuery, integrates Google Analytics and Adsense for tracking and monetization, and implements a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enforced, but could be improved by adding advanced security headers and publishing explicit security policies. No direct contact information is provided, which may impact user trust. Overall, the site is functional, compliant with privacy regulations, and serves a niche audience effectively.

L

La Kunsthalle, Centre d’Art Contemporain d’Intérêt National

kunsthallemulhouse.com

53

La Kunsthalle is a French contemporary art center operated by the city of Mulhouse, established since 2008. It serves as a cultural institution offering exhibitions, artist residencies, mediation programs, and publishing activities. The website targets the general public interested in contemporary art and is positioned as a nationally recognized center supported by public and regional cultural bodies. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Google Analytics for visitor tracking. The site is moderately optimized for mobile and SEO, with a good content structure and navigation. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Privacy compliance is weak, with no cookie consent mechanism despite tracking scripts. Overall, the website is professional and trustworthy but could improve in privacy and security practices.

Entreprendredanslorne.com is a regional business facilitation platform focused on supporting companies seeking to establish operations in the Orne department of Normandy, France. The website offers services including project accompaniment, real estate and land search, public aid identification, and networking with local actors. It positions itself as a key regional player providing a free and tailored support network for business implantation. The site is linked to regional government entities, enhancing its credibility. Technically, the website employs a modern front-end stack including Bootstrap 3.3.7, jQuery, Font Awesome, Google Fonts, and interactive components like FlexSlider and Owl Carousel. It integrates Google Analytics, Google Tag Manager, and SnapEngage chat for user engagement and analytics. Security measures include HTTPS with reCAPTCHA v3 on forms, but lack explicit security headers and cookie consent mechanisms. The security posture is moderate with good SSL configuration and secure form handling, but improvements are needed in security headers and privacy compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact details suggest a legitimate regional business service. Overall, the site is professional and functional but would benefit from enhanced security and compliance transparency. Strategically, verifying domain registration and adding explicit privacy and security policies would strengthen trust. Enhancing security headers and cookie consent would improve compliance and user trust. Continued monitoring of third-party scripts and analytics is recommended to mitigate potential vulnerabilities.

P

Pays d'Argentan d'Auge et d'Ouche (P2AO)

p2ao.fr

57

Pays d'Argentan d'Auge et d'Ouche (P2AO) is a regional governmental entity focused on supporting local businesses and territorial development in the Argentan, Auge, and Ouche regions of France. The website serves as an informational portal providing event agendas and contact avenues for stakeholders. The business model is public administration with a focus on regional economic and community development. The site targets local businesses, residents, and regional partners. Technically, the website employs basic web technologies including jQuery and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. The absence of a CMS or modern frameworks suggests a simple, possibly custom-built site. No hosting provider or SSL configuration details were identified from the provided data. From a security perspective, the site uses a cookie consent banner indicating GDPR awareness but lacks visible privacy policies, terms of service, or security headers. WHOIS data is unavailable, which reduces domain trustworthiness. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. The security posture is moderate but could be improved by implementing HTTPS, security headers, and publishing clear privacy and incident response policies. Overall, the website is functional but basic, with room for improvement in content richness, security, and compliance documentation. The domain legitimacy is uncertain due to missing WHOIS data, but the content and contact information suggest a legitimate regional government presence.

A

AD Normandie

adnormandie.fr

47

AD Normandie is a regional economic development agency serving the Normandy region in France. The agency acts as a single point of contact for economic development and provides tailored support and aid to local businesses. The website reflects a professional government entity with a clear mission to assist companies in project formalization and implantation within Normandy. The digital infrastructure is built on a modern WordPress platform with SEO and analytics tools, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements. No critical vulnerabilities or suspicious elements were detected.

The website 'Produire bio en Bretagne' serves as an informational and support platform dedicated to organic farming in the Brittany region of France. Operated by FRAB, it provides educational content, technical resources, testimonials, and event information to assist farmers considering or undergoing conversion to organic agriculture. The site is positioned as a regional authoritative resource with a clear focus on organic agriculture principles and practices. Technically, the website is built on WordPress using the Total theme and Visual Composer, with integrations such as Google Analytics and Revolution Slider. Hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business's history and location. Security posture is adequate with HTTPS enforced and some privacy considerations, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. Overall, the site is professional, well-branded, and trustworthy, targeting agricultural professionals and stakeholders in organic farming.

B

Best4Run Běžecká speciálka

best4run.cz

54

Best4Run is a Czech Republic based specialty retailer focused on running shoes, apparel, and equipment. Established in 2015, it operates both an e-commerce platform and a physical store in Přerov, serving customers from surrounding regions. The website offers a comprehensive product catalog, educational content, and diagnostic services for runners. Technically, the site is built on the Shoptet e-commerce platform, leveraging modern web technologies and multiple analytics and marketing tools with user consent mechanisms. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data reduces domain trust but the website content and business presence appear professional and legitimate. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations.

S

Sykora spol. s r.o.

sykora.eu

60

Sykora spol. s r.o. is a Czech-based company specializing in high-quality custom kitchens and interior furniture solutions. Their website showcases a comprehensive product catalog including kitchens, wardrobes, bathrooms, and living room furniture, targeting consumers seeking tailored interior design. The company operates through multiple retail studios and emphasizes professional design and modern technology integration. Technically, the website is built on the Studio9 webManager CMS, uses modern JavaScript libraries such as jQuery, and integrates Google Tag Manager, Google Analytics, Facebook Pixel, and Pinterest tracking for marketing and analytics purposes. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and rich multimedia content. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and does not raise legitimacy concerns. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for customers.

T

TAŠ STAPPA

tas-stappa.cz

47

TAŠ STAPPA is a Czech Republic based company specializing in the supply of concrete and aggregates primarily serving the Zlín region. With over 25 years of experience, it positions itself as a reliable local supplier offering concrete delivery, pumping services, and concrete plant equipment. The website reflects a medium-sized business with a clear focus on construction materials and services. Technically, the site is built on Joomla CMS using modern frameworks and libraries such as Bootstrap, jQuery, and Smart Slider 3, with integrated Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

P

PURLIVE

purlive.cz

47

PURLIVE is a Czech-based certified manufacturer and supplier specializing in prefabricated construction systems primarily for family houses, modular wooden buildings, and container components. The company positions itself as a leading provider of energy-efficient and cost-effective building solutions in the Czech market. Their website reflects a professional digital presence with clear business offerings targeted at construction firms, architects, and private customers interested in modern prefabricated housing solutions. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Smart Slider 3, ensuring a responsive and user-friendly experience. The site integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data for the domain is a notable gap in trust verification, though the website content and structured data suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

S

Selectra

selectra.com

59

Selectra is a well-established international company specializing in utilities comparison and subscription services across energy, telecom, insurance, and finance sectors. Founded in 2007 and operating in 17 countries, Selectra serves a broad consumer base seeking to optimize household utility expenses. The website demonstrates strong branding, professional design, and extensive content supporting its market position as a leading player in its industry. Technically, the website employs modern tracking tools such as Google Analytics and Google Tag Manager, with DNS managed via Cloudflare and domain registration through Amazon Registrar. The site is mobile-optimized and SEO-friendly, though some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture. Security-wise, the site uses HTTPS and domain status protections but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms, which is a notable gap given the tracking technologies in use. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security transparency to align with best practices and regulatory expectations.

Z

Zdravie.sk, s.r.o.

zdravie.sk

56

Zdravie.sk is a well-established Slovak health and lifestyle portal founded in 2004, operated by Zdravie.sk, s.r.o. It offers comprehensive health information, lifestyle content, medical news, and community forums targeting a general audience in Slovakia. The website enjoys a strong market position as a popular and trusted source of health-related content. Technically, the site uses a modern tech stack including Google Fonts, Google Analytics, Facebook SDK, and multiple advertising platforms. It is hosted with Google Domains and employs HTTPS for secure communications. However, the site lacks explicit privacy and cookie policies and does not display security headers, which are areas for improvement. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the site demonstrates good content quality and business credibility but could enhance privacy compliance and security posture.

Z

Zoznam, s.r.o.

feminity.sk

57

Feminity.sk is a Slovak lifestyle media website operated by Zoznam, s.r.o., offering content focused on fashion, beauty, health, horoscopes, and celebrity news. The site targets a broad audience of modern Slovak men and women interested in lifestyle topics. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates multiple third-party analytics and advertising services, and uses a CDN for content delivery. It demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses standard security headers, and implements GDPR-compliant cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact information. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

Z

Zoznam s.r.o.

sportky.sk

58

Športky.sk is a Slovak-language sports news portal operated by Zoznam s.r.o., providing comprehensive coverage of sports such as football, hockey, tennis, and cycling. The site targets Slovak sports fans with up-to-date results, event calendars, and multimedia content. It holds a solid market position as part of the established Zoznam media brand. Technically, the website employs modern JavaScript frameworks including Vue.js and jQuery, integrates Google Analytics and Tag Manager for tracking, and uses Didomi for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced and basic security headers are present, though some headers like HSTS and X-Content-Type-Options should be confirmed or added. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear cookie policy and consent mechanism. However, explicit contact details and terms of service pages are not directly found on the site, which could be improved for transparency. Overall, the website is professional, trustworthy, and well-maintained, suitable for its audience and business model.

C

Chráníme mořské želvy z.s.

morskezelvy.cz

9

Chráníme mořské želvy z.s. is a Czech Republic based non-profit organization dedicated to the protection and conservation of marine turtles, primarily in Indonesia and Sri Lanka, with educational outreach in the Czech Republic. The organization focuses on protecting turtle nesting sites, relocating eggs to safety, releasing hatchlings, and educating local communities and children about environmental stewardship. Their market position is niche within marine conservation, supported by partnerships with governments, universities, and volunteers. The website demonstrates a good level of content quality and user engagement through social media and donation transparency. Technically, the site uses common web technologies such as jQuery, Google Analytics, and MailChimp, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and some privacy consent mechanisms, but lacks advanced security headers and detailed privacy policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Overall, the site is professional and trustworthy for its non-profit mission, though improvements in security and compliance documentation are recommended.

F

FaniMani

fanimani.pl

72

FaniMani.pl is a well-established Polish platform founded in 2014 that enables users to support social organizations through their online shopping activities. The website acts as an affiliate donation platform, partnering with over 1800 online stores and more than 12,500 charitable organizations. It offers browser extensions and mobile applications to facilitate user participation seamlessly. The platform enjoys a strong market position in Poland's charitable e-commerce niche, supported by a professional, well-designed website and extensive partner network. Technically, the site leverages a modern technology stack including Django backend, WordPress CMS, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Facebook Pixel. Cookie consent is managed via CookieYes, ensuring GDPR compliance with granular user consent options. Hosting is provided by OVH SAS, a reputable provider, and the site uses HTTPS with good SSL configuration. From a security perspective, the platform demonstrates good practices including CSRF protection, secure cookies, and use of reCAPTCHA. However, some security headers are not explicitly detected and DNSSEC is not enabled, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent mechanisms. Overall, FaniMani.pl presents a low-risk profile with a high level of professionalism, compliance, and technical maturity. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and resilience.

F

Fundacja FaniMani

fanipay.pl

35

FaniPay.pl is a specialized online payment platform tailored for foundations and associations in Poland, enabling them to collect donations securely and efficiently. Operated by Fundacja FaniMani since 2016, it integrates with the FaniMani platform and offers features such as simple registration, transparent fees, daily payouts, and donor data access. The platform enjoys trust from over 12,500 NGOs and partners with reputable payment processors like Autopay and Tpay. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are needed in DNSSEC and security headers. Privacy compliance is partial due to the absence of a privacy policy page, but cookie consent is implemented. Overall, the site demonstrates a mature business model with strong credibility in the non-profit sector.

K

Krajowy Integrator Płatności S.A.

tpay.com

70

Tpay is a well-established Polish payment service provider specializing in online payments and fast bank transfers, serving primarily e-commerce businesses in Poland. The company is legally registered as Krajowy Integrator Płatności S.A., founded in 2009, and operates with a strong market position supported by a partnership with Bank Pekao and PCI DSS level 1 certification. Their website reflects a mature digital presence with comprehensive service offerings including payment gateways, marketplace settlements, and integration modules for popular e-commerce platforms. Technically, the site uses modern analytics, tracking, and accessibility tools, hosted on OVH with Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS, cookie consent, and bank-grade standards, though DNSSEC is not enabled and explicit security headers are not evident. Privacy compliance is basic but includes a cookie policy with consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

media4free.cz is a small independent publishing company focused on cultural, artistic, and social topics, primarily publishing the printed cultural monthly magazine Artikl since 2014. The website content is minimal but clearly communicates the company's niche in cultural media. Technically, the site runs on an outdated WordPress version (2.8.4) and uses Google Analytics for visitor tracking. The site lacks modern security headers and privacy policies, which indicates a low maturity level in security and compliance. The absence of WHOIS data limits the ability to verify domain legitimacy and ownership, which is a concern for trustworthiness. Overall, the website is functional but basic, with moderate performance and poor mobile optimization.

N

National Theatre

narodni-divadlo.cz

51

The National Theatre in Prague is a prestigious cultural institution representing the Czech Republic's national identity and European cultural heritage. The website provides comprehensive information about upcoming theatre performances across various genres including drama, ballet, opera, and multimedia shows. It offers ticket sales, subscriptions, and an e-shop for related merchandise. The institution maintains partnerships with prominent companies and media outlets, reinforcing its market position as a leading national theatre. Technically, the website is built using modern web technologies such as React and Next.js, with integration of Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some areas such as explicit privacy policy and security headers could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the presence of official partners and professional content supports trustworthiness. Overall, the website is a well-maintained digital presence for a major cultural institution, with moderate to good security posture and privacy compliance. Strategic improvements in transparency, security headers, and contact information would enhance trust and compliance.

The website for Mairie de Saint-Bris-le-Vineux serves as the official digital presence of the local government of Saint-Bris-le-Vineux, France. It provides comprehensive information about municipal services, local news, cultural events, and viticulture, targeting residents and visitors. The site is built on WordPress and leverages common plugins such as Yoast SEO, Contact Form 7, and WP Cloudy for weather information. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is minimal, with no visible cookie consent or detailed privacy policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy measures.

P

ProFitArt

profitart.cz

56

ProFitArt is a cultural organization dedicated to supporting independent artists specializing in dance, physical, and nonverbal theatre. The organization provides production facilities, workshops, and event hosting to foster artistic development and collaboration. Their market position is niche, focusing on the independent performing arts community primarily in the Czech Republic. The website reflects a small-sized entity with a professional and consistent brand presence, supported by partnerships with cultural institutions and funding bodies. Technically, the website is built on WordPress with modern plugins such as Autoptimize and Yoast SEO, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with lazy loading images and optimized CSS. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, indicating GDPR compliance. However, the absence of security headers and incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the presence of clear contact information and partner logos. Overall, ProFitArt's website is a trustworthy and professional platform for its target audience, with good privacy compliance and a secure environment. Strategic enhancements in security policies and domain transparency would further strengthen its risk profile.

E

EKLEKTIK design & shop

eklekticky.cz

55

EKLEKTIK design & shop is a small Czech Republic based business specializing in interior design services and retail of unique home decorations and vintage furniture. The company operates both a physical store in Šumperk and an online e-shop, targeting customers interested in personalized interior design and stylish home accessories. The website is professionally designed, consistent in branding, and provides clear contact information and customer testimonials, indicating a trustworthy local boutique business. Technically, the website is built on the Shoptet CMS platform, utilizing common JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Analytics and Facebook SDK for marketing and tracking purposes. The site is served over HTTPS with valid SSL, but lacks some security headers and up-to-date libraries, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly present, representing a compliance gap with GDPR requirements. Overall, the website is accessible, functional, and presents a positive user experience with moderate technical maturity and a good security baseline.

Č

ČVIRO

cviro.sk

54

ČVIRO is a small Slovak vehicle rental company specializing in utility vehicles such as vans, pickups, buses, refrigerated trucks, and tractors. The website presents basic information about the business and its offerings, targeting individuals and businesses in need of utility vehicle rentals. The domain is well established since 2006, with consistent WHOIS data and DNSSEC enabled, indicating legitimacy and good domain security practices. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern web design features such as mobile responsiveness and accessibility enhancements. Security posture is weak with no visible security headers or HTTPS enforcement details, and privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to phone numbers and one email address, with no physical address or social media presence. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

M

MARKETING MALÝCH FIREM | Ing. Andrea Frodlová

andreafrodlova.cz

42

MARKETING MALÝCH FIREM | Ing. Andrea Frodlová is a small Czech Republic based business specializing in creating simple WordPress websites and providing marketing consulting services tailored for small businesses and local entrepreneurs. The website presents a professional image with clear contact details and a focus on helping clients improve their online presence and marketing communications. The business appears to be active since at least 2019 and emphasizes personalized service and affordability. Technically, the website is built on WordPress with standard marketing and analytics tools such as Google Analytics and Facebook Pixel, and it includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business registration details support legitimacy. Overall, the site is well-structured, mobile-optimized, and provides a good user experience with clear business focus.

P

Pan Europe

low-impact-farming.info

47

The website www.low-impact-farming.info is an advocacy and informational platform operated by Pan Europe, a non-profit organization focused on promoting sustainable agriculture practices, specifically low impact farming and Integrated Pest Management (IPM) across Europe. The site provides educational resources, policy position papers, and multimedia content to support pesticide reduction and environmentally friendly farming methods. It targets farmers, policymakers, environmental advocates, and the general public interested in sustainable agriculture. The business model is centered on advocacy and education rather than commercial sales, positioning itself as a niche player in the European sustainable agriculture sector. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Google Analytics and Google Tag Manager for user tracking and AddToAny for social sharing. The site is mobile optimized with good accessibility and SEO practices, though performance is moderate. The technical infrastructure appears maintained and up to date, but lacks some advanced security headers and formal privacy/cookie policies. From a security perspective, the site uses HTTPS and anonymizes IPs in analytics, but does not implement key security headers or publish security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR. WHOIS data is unavailable due to privacy protection, which is reasonable for this non-profit entity. Overall, the security posture is moderate but could be improved with better policy transparency and technical controls. The overall risk assessment is low to moderate. The site is legitimate and trustworthy for its advocacy purpose but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, implementing security headers, adding a security.txt file, and improving incident response visibility.

S

SELA Immo

sela-immo.fr

50

SELA Immo is a regional real estate company specializing in the sale and rental of land, houses, and apartments primarily in the Loire-Atlantique region of France. The website serves both individual consumers and professional clients, offering property listings, advice, and partnership opportunities with construction companies. The company positions itself as a trusted local real estate developer with a focus on sustainable and community-oriented projects. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Analytics, providing a modern and responsive user experience. However, some technical improvements are possible, including better security header implementation and full configuration of analytics tools. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is professional, content-rich, and compliant with GDPR privacy requirements, making it a credible platform for real estate services in its market niche.

The website sorties-scolaires-loireatlantique.com is operated by Loire-Atlantique Développement and serves as a regional platform for organizing school outings and pedagogical stays in the Loire-Atlantique area of France. It targets schools, teachers, and parents of primary and college students, offering educational trips and classes de découvertes. The site is positioned as a trusted regional educational tourism service provider with a medium-sized organizational footprint, founded in 2019. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Google Analytics, and Complianz GDPR for cookie consent. The hosting registrar is Nuxit, and the site uses HTTPS with a good SSL configuration. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and reCAPTCHA on forms but lacks some security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include adding a comprehensive privacy policy, enabling DNSSEC, and enhancing security headers to strengthen the security posture and privacy compliance.

M

Mulhouse Alsace Agglomération - m2A

mulhouse-alsace.fr

10

Mulhouse Alsace Agglomération (m2A) is a regional government entity serving 39 communes in the Mulhouse Alsace area of France. The website serves as an official portal providing information on territorial development, public services including water, waste management, mobility, energy, culture, tourism, social services, and environmental initiatives. The organization positions itself as a key regional authority with a broad scope of services aimed at residents and stakeholders in the region. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium, Elementor, AngularJS, and various performance and UI enhancement plugins. It integrates Google Analytics and Google Tag Manager for analytics and uses a chatbot service for user interaction. The site is mobile-optimized and features good SEO and accessibility practices, although some legacy technologies like AngularJS 1.4.14 may pose security concerns. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, explicit security headers are not clearly detected, and the use of an older AngularJS version suggests a need for review and upgrade. No exposed sensitive data or critical vulnerabilities were found in the HTML content. The WHOIS data is unavailable, which slightly reduces domain trust but the official social media presence and content quality support legitimacy. Overall, the website is professional, well-structured, and serves its public service mission effectively. Strategic recommendations include enhancing security headers, upgrading legacy frameworks, and improving transparency in domain registration information to strengthen trust and security posture.

Artikl.org is a Czech cultural magazine focused on non-mainstream arts including music, film, theater, literature, and visual arts. Established in 2013, it operates both as a print monthly and an online content platform targeting Czech-speaking cultural enthusiasts interested in alternative culture. The website uses WordPress CMS with several plugins for multimedia and search functionalities. The technical infrastructure is moderate with outdated software versions and basic SEO and accessibility features. Security posture is weak due to lack of modern security headers, outdated software, and no cookie or privacy policies, posing compliance and vulnerability risks. The site is fully accessible without WAF or blocking mechanisms and contains no adult or explicit content, making it safe for general audiences. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and resilience.

I

International Animal Rescue

internationalanimalrescue.org

67

International Animal Rescue is a well-established non-profit organization dedicated to saving and protecting animals worldwide. Their website reflects a professional and comprehensive approach to animal rescue, rehabilitation, conservation, and community engagement. The organization targets animal welfare supporters, donors, volunteers, and the general public interested in wildlife protection. Their business model relies on donations, adoptions, fundraising, and merchandise sales, positioning them as a reputable charity in the animal welfare sector. Technically, the website is built on Drupal 10 with Commerce 2, integrating modern analytics and tracking tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security measures include HTTPS enforcement and reCAPTCHA v3 on forms, though some security headers could be improved for enhanced protection. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. However, no explicit security policies or incident response contacts are found, which could be areas for improvement. WHOIS data is privacy protected, common for non-profits, and does not raise immediate concerns. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity, making it a reliable platform for supporters and stakeholders. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around incident response to further strengthen trust and compliance.

L

Little Fireface Project

nocturama.org

46

The Little Fireface Project is a specialized non-profit organization dedicated to the conservation of loris species, led by the internationally recognized expert Professor Anna Nekaris OBE. The project operates a research station in Java since 2012 and conducts extensive research, education, and community empowerment activities to protect critically endangered lorises and other nocturnal wildlife. The website reflects a well-structured and content-rich platform targeting conservationists, researchers, and supporters worldwide. Technically, the site is built on WordPress with modern plugins and tracking tools like Google Analytics, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to a malformed request, but the website's professional presentation and social media presence support its legitimacy. Overall, the site scores well in business credibility and content quality but should enhance privacy compliance and security best practices.

S

swaraOwa

swaraowa.org

58

swaraOwa is a small non-profit organization dedicated to the conservation of Indonesian gibbons and their habitats. The website serves as an educational and community engagement platform, featuring detailed blog posts, field stories, and conservation updates. It targets conservationists, researchers, local communities, and donors interested in biodiversity preservation. Technically, the site is built on WordPress and hosted via Cloudflare, using standard web technologies and Google Analytics for tracking. While the site is accessible and content-rich, it lacks formal privacy and cookie policies, and runs an outdated WordPress version, which poses security risks. The security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from improved privacy compliance and security hardening.

N

NaturZoo Rheine

naturzoo.de

48

NaturZoo Rheine operates as a medium-sized zoological park in Germany, hosting over 1,500 animals across approximately 100 species. The website serves as an informative platform targeting families, school groups, and animal enthusiasts, offering details about the zoo's exhibits, educational programs, and visitor information. The business model is non-profit, focusing on conservation, education, and recreation. The site is well-branded and consistent, with clear trust signals including affiliations with recognized zoo associations and transparent contact information. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as Slick Slider and FontAwesome. It integrates Google Tag Manager and Google Analytics for visitor tracking, with a GDPR-compliant cookie consent mechanism in place. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. However, it lacks visible security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen its security maturity.

Zoologická zahrada Ústí nad Labem operates as a regional zoological garden in the Czech Republic, providing animal exhibits, educational programs, and visitor services. The organization is supported by the statutory city of Ústí nad Labem and maintains affiliations with international zoological associations, enhancing its credibility and conservation efforts. The website targets families, schools, and tourists, offering multilingual content and an e-shop for merchandise. Technically, the site is built on ASP.NET WebForms with a custom CMS, integrating modern web technologies such as Google Analytics and social media SDKs. The site is mobile-optimized with good navigation and content quality. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and privacy policy documentation. The absence of WHOIS data limits domain legitimacy verification, though the website content and affiliations suggest a legitimate non-profit entity. Strategic recommendations include adding explicit privacy and terms policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

R

Ready for Boarding - travel not only by plane

readyforboardingblog.com

47

Ready for Boarding is a multilingual travel blog primarily targeting travel enthusiasts interested in experiences beyond air travel. Established around 2013, it offers travel stories, tips, and guides with a focus on Poland and Central Europe. The website is built on WordPress and integrates multiple third-party services including WooCommerce for e-commerce, Google Analytics for traffic analysis, and Facebook Pixel for advertising effectiveness. It employs a comprehensive cookie consent mechanism and privacy policy compliant with GDPR, reflecting a mature approach to privacy and user consent. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks visible security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and consistent with a small professional travel blog. Overall, the site demonstrates good technical and content quality with room for improvement in security transparency and domain registration clarity.

E

Eezy LLC

brusheezy.com

60

Brusheezy, operated by Eezy LLC, is a well-established online platform offering a vast collection of free and premium Photoshop brushes and related graphic design resources. The website targets graphic designers and digital artists seeking high-quality Photoshop assets. It operates a freemium business model, providing free downloads alongside premium subscription options for unlimited access. The site enjoys a strong market position within the digital media resource niche, supported by a vibrant community and a network of related sites such as Vecteezy and Videezy. Technically, Brusheezy employs a modern technology stack including JavaScript libraries, analytics tools like Google Analytics and Snowplow, and advertising frameworks such as Freestar and Google DoubleClick. The site is mobile-optimized with good SEO practices and uses HTTPS to secure user interactions. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. From a security perspective, the site demonstrates good practices including HTTPS enforcement and CSRF protection in forms. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Brusheezy presents a low-risk profile with a professional online presence and comprehensive content offerings. The main concern is the absence of WHOIS data transparency, which slightly impacts trust but does not detract significantly from the site's legitimacy. Strategic improvements in security policy publication and WHOIS transparency would enhance its credibility and compliance standing.

B

BIKEMAX

bikemax.cz

59

BIKEMAX.cz operates as the largest bicycle and electric bike gallery in the Czech Republic, offering a wide range of bicycles, accessories, and related services including bike servicing and franchise opportunities. The company targets cycling enthusiasts and general consumers within the Czech market, leveraging a medium-sized e-commerce retail business model. The website reflects a professional and consistent brand presence with clear navigation and comprehensive product categories. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern JavaScript libraries and tracking tools such as Google Analytics, Facebook SDK, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with a well-structured technical stack supporting the business operations. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. While basic security headers are likely present, explicit security policies and incident response contacts are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected during analysis. Overall, the website presents a trustworthy and professional front for BIKEMAX's retail operations. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and providing incident response contact information to strengthen trust and compliance.

R

Ready for Boarding

readyforboarding.pl

43

Ready for Boarding is a Polish travel blog and e-commerce platform established since 2013, offering travel-related content and digital products such as downloadable guides and merchandise. The website targets travel enthusiasts primarily in Poland but also supports multilingual audiences through sister sites. Technically, the site is built on WordPress with WooCommerce, integrating modern analytics and marketing tools including Google Analytics, Meta Pixel, and Real Cookie Banner Pro, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA, although some security headers could be improved. Overall, the site presents a professional and trustworthy online presence with good content quality and user experience.