Security Directory

E

EGroupware

egroupware.org

64

EGroupware is a German-based software company specializing in online collaboration and groupware solutions. Their offerings include a comprehensive suite of business applications such as calendar, contacts, tasks, project management, timesheets, and e-invoicing. The company targets businesses and organizations seeking efficient collaboration tools, providing both SaaS and on-premises deployment options. The website reflects a mature market position with a focus on privacy and German hosting standards. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good performance, mobile responsiveness, and SEO optimization. The use of Borlabs Cookie for consent management and WPML for multilingual support indicates a commitment to privacy and international reach. The site employs HTTPS with strong security headers, contributing to a robust security posture. Security-wise, while the site demonstrates good practices such as HTTPS enforcement and cookie consent, it lacks a publicly visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is privacy protected, which is typical for this business type and does not detract from legitimacy. Overall, EGroupware presents a professional, trustworthy, and secure online presence suitable for its business model. Strategic improvements could include publishing a dedicated security policy and incident response contacts to enhance transparency and trust.

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales with flexible payment options including payment plans. The company has established a strong market presence since 2005, offering secure and user-friendly domain purchasing experiences. Their website demonstrates a mature technical infrastructure leveraging modern web technologies, including jQuery, Google Analytics, and Cloudflare services, ensuring performance and security. Security posture is robust with HTTPS enforced and bot management in place, complemented by comprehensive cookie consent mechanisms and privacy policies aligned with GDPR standards. Overall, the business exhibits high credibility with clear contact channels, customer testimonials, and trust signals, although WHOIS data is privacy protected, which is justified for this business type.

S

STACKIT

stackit.de

67

STACKIT is a German cloud service provider offering enterprise-grade cloud infrastructure, colocation, and managed solutions with a strong emphasis on data sovereignty, EU compliance, and stability. The company targets businesses within Germany and the EU, providing tailored cloud services including consulting and user awareness training. Their market position is that of a trusted German cloud alternative, supported by ISO 27001 certification and GDPR compliance. Technically, the website is built on WordPress with modern SEO and privacy tools such as OneTrust and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy-by-default cookie settings, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, accessible, and trustworthy, with no signs of blocking or malicious content.

Jefferson is a large integrated enterprise focused on healthcare, education, and insurance services primarily serving Pennsylvania and New Jersey. The website presents a professional and consistent brand image highlighting its three main business units: Jefferson Health, Thomas Jefferson University, and Jefferson Health Plans. The site targets residents, students, patients, and insurance customers in the region. Technically, the site is built on Adobe Experience Manager with modern analytics tools like Google Tag Manager and Adobe Data Layer, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy policies are lacking. WHOIS data is privacy protected, which is reasonable for this type of organization. Overall, the site is trustworthy and well-maintained but could improve transparency around privacy and security policies.

H

Health Partners Plans

healthpartnersplans.com

62

Health Partners Plans, Inc. is a regional healthcare insurance provider offering Medicaid, CHIP, Medicare Advantage, and Individual and Family health plans. Affiliated with Jefferson Health and Thomas Jefferson University, it serves a broad audience including families, children, and seniors, focusing on whole-person health coverage. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site uses Adobe Experience Manager CMS and integrates multiple modern analytics and tracking tools such as Microsoft Clarity, Crazy Egg, Google Tag Manager, and Freshpaint, indicating a mature digital infrastructure. Mobile optimization and SEO practices are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks some recommended security headers and explicit incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was detected despite tracking scripts in use. WHOIS data is unavailable, which slightly reduces trust but the strong affiliation with known healthcare entities supports legitimacy. Overall, the website is professional, secure, and trustworthy with room for improvement in privacy and security transparency.

M

mPulse

healthtrioconnect.com

50

HealthTrio connect operates as a healthcare portal providing secure login and registration services for multiple user types including providers, employers, brokers, and members. The platform is positioned as a niche service within the healthcare sector, facilitating access to healthcare-related resources and services. The website is professionally designed with consistent branding and clear navigation, targeting healthcare stakeholders. The domain is well-established since 2000 and registered through Cloudflare, indicating a stable and legitimate online presence. Technically, the website employs a legacy technology stack including jQuery and Dojo, alongside modern integrations such as Google Fonts and Google Maps API. Hosting and DNS services are managed by Cloudflare, providing a reliable infrastructure. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO practices. The site lacks a cookie consent mechanism and advanced privacy compliance features. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers such as CSP or HSTS, which are recommended to enhance security posture. The login form uses secure POST methods with autocomplete disabled, which is a positive practice. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and enhancing accessibility to align with best practices and regulatory requirements.

A

AmBilet

ambilet.ro

48

AmBilet is an online ticketing platform primarily serving the Romanian market, offering tickets for concerts, festivals, theater, stand-up comedy, and children's events. The website is built on WordPress with e-commerce and event management plugins, providing a visually appealing and user-friendly experience optimized for mobile devices. The platform integrates marketing and analytics tools such as Facebook and TikTok pixels to track user engagement and retarget visitors. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and visible security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the site appears legitimate and professionally maintained, targeting event attendees in Romania.

S

Svět interiérů

svetinterieru.cz

45

Svět interiérů is a small Czech Republic based company specializing in interior design, apartment renovation, and custom furniture manufacturing. Their website presents a professional image with clear descriptions of services, customer testimonials, and a contact form protected by Google reCAPTCHA. The technical infrastructure includes modern JavaScript libraries and Google Tag Manager for analytics and advertising. Security posture is good with HTTPS and spam protection, but lacks some HTTP security headers and formal privacy and terms of service pages. The absence of WHOIS data reduces domain trust verification, but the website content and contact details suggest a legitimate business. Overall, the site is well-structured, mobile-optimized, and user-friendly, targeting residential and commercial clients seeking quality interior solutions.

S

Smart Livin automation s.r.o.

otevribyt.cz

42

The website www.otevribyt.cz represents a locksmith and security services provider operating primarily in Prague, Czech Republic. The company, Smart Livin automation s.r.o., offers emergency locksmith services including non-damaging door openings and security system installations. The business targets local residents and property owners requiring urgent locksmith assistance. The website is professionally designed using WordPress with modern SEO and tracking tools, indicating a moderate level of digital maturity. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and business registration details. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but the site lacks comprehensive security headers and explicit security or privacy policies. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced compliance and transparency measures.

E

Erasmus Lisboa - Airport pickup, sim cards, rooms and more

erasmuslisboa.com

50

Erasmus Lisboa is a service-oriented website targeting Erasmus students and visitors in Lisbon, offering airport pickup, SIM cards, accommodation, and bundled service packages. The website presents a professional design with consistent branding and relevant content tailored to its niche audience. Technically, it employs common web technologies including jQuery and integrates analytics tools such as Google Analytics and Crazy Egg for user behavior tracking. However, the site lacks visible privacy and cookie policies, which raises compliance concerns. Security posture is moderate with no evident HTTPS or security headers information, and no explicit incident response or data protection officer contacts are provided. The WHOIS data is unavailable or unregistered, which questions domain legitimacy and requires further verification. Overall, the site is functional and relevant but needs improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

P

PortusPark

portuspark.org

47

PortusPark is a well-established network of science and technology parks and incubators serving the northern region of Portugal. Founded in 2007, it operates as a regional leader providing capital participation and advanced services to its member parks and associated companies. The website reflects a professional and consistent brand presence, targeting technology parks, incubators, and related stakeholders in the region. Technically, the site is built on WordPress with common plugins for multilingual support and rich media content, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating room for compliance improvements. Overall, the domain registration data aligns well with the business claims, supporting a high legitimacy score. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing comprehensive privacy and cookie policies to improve compliance and trust.

T

t4h (Tech4home)

tech4home.com

68

t4h (Tech4home) is a technology company specializing in the design, development, and delivery of remote control solutions primarily for IPTV, cable, and Pay-TV operators worldwide. With over 20 years of experience, the company offers OEM remote controls, IoT integration, and sustainability initiatives through its Symbiosis Programme. The website reflects a mature business with a strong market position, evidenced by design awards and a broad client base. Technically, the site is built on WordPress with modern plugins and analytics tools, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and reCAPTCHA, though improvements can be made by adding security headers and explicit incident response policies. Overall, the site is professional and trustworthy, but the lack of WHOIS data reduces domain registration transparency.

C

Compagnie des Transports Strasbourgeois

cts-strasbourg.eu

65

Compagnie des Transports Strasbourgeois (CTS) operates as the primary public transportation provider in Strasbourg, France, offering bus and tram services, ticketing, trip planning, and real-time traffic information. The website serves a broad audience including daily commuters and tourists, providing essential transit information and online services. The company maintains a solid market position as the main transit operator in the region. Technically, the website is built on OpenCms 8 ADE with a technology stack including jQuery, Select2, Chosen, and Matomo for analytics. Payment processing is securely integrated via PayZen. The site demonstrates moderate performance and basic mobile optimization, with accessibility and SEO features at a basic level. From a security perspective, the site uses HTTPS and secure payment iframes but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through cookie consent mechanisms and a privacy policy, though GDPR-specific details are basic. Overall, the website is professional, trustworthy, and functional with room for improvement in security policies and technical optimizations. The domain registration aligns well with the business, supporting legitimacy and trustworthiness.

S

SIG Strasbourg

sigstrasbourg.fr

46

SIG Strasbourg is a professional basketball club based in Strasbourg, France, operating an official website to engage fans and provide services such as ticket sales and merchandise. The website is built on Drupal 10 and integrates modern web technologies including Google Analytics and Bootstrap 5, reflecting a moderate level of digital maturity. The site is well-branded, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published privacy policies, security headers, and explicit contact information for security or general inquiries. Overall, the domain registration is consistent and legitimate, supporting the trustworthiness of the site.

A

ARTEFACT PRL

artefact.org

52

Artefact is a well-established cultural organization based in Strasbourg, France, specializing in the management and programming of contemporary music venues and events since 1994. The website presents a professional and content-rich platform showcasing numerous upcoming concerts and cultural activities, targeting a general French-speaking audience interested in arts and entertainment. Technically, the site is built on WordPress with modern plugins and libraries, optimized for performance and mobile responsiveness. Security measures include HTTPS enforcement and anti-spam protections, though explicit security headers and privacy policies are missing, indicating room for improvement in compliance and security posture. Overall, the site reflects a credible and professional cultural entity with a solid digital presence.

O

Office des Sports de Strasbourg

ods67.com

60

Office des Sports de Strasbourg (ODS67) is a well-established non-profit organization dedicated to promoting and supporting sports activities and clubs in the Strasbourg region. Founded in 2003, it serves as a central hub for sports events, club directories, volunteer coordination, and community engagement. The website reflects a strong local presence with comprehensive resources for sports enthusiasts and residents. Technically, the website is built on WordPress using modern plugins such as Advanced Custom Fields Pro and WP Rocket for performance optimization. It employs HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site follows basic best practices including HTTPS enforcement and domain transfer protection. However, it lacks DNSSEC and does not publish explicit security or incident response policies, which are areas for improvement. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and implementing a security.txt file to improve transparency and security posture.

A

ARTUS Théâtre Universitaire de Strasbourg

artusasso.fr

47

ARTUS Théâtre Universitaire de Strasbourg is a small, non-profit university theatre association based in Strasbourg, France. It offers theatrical productions, workshops, auditions, and cultural events primarily targeting university students and theatre enthusiasts. The website is multilingual and professionally translated, reflecting a commitment to accessibility for international audiences. The business model focuses on community engagement and cultural enrichment rather than commercial profit. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, hosted by OVH. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and a cookie consent mechanism but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no detailed GDPR compliance or incident response information. Overall, the website is trustworthy and professional, with a solid business presence and technical foundation. Strategic improvements in security policies and privacy transparency would enhance its posture and compliance.

A

Alsace Tech

alsacetech.org

53

Alsace Tech is a regional network of higher education institutions in Alsace, France, specializing in engineering, architecture, management, and design education. The website serves as a portal for students, companies, and partners to access information about the member schools, programs, events, and collaborative opportunities. The network positions itself as a key regional player in education with a focus on multidisciplinary and international programs. Technically, the website is built on WordPress with a mature set of plugins including Yoast SEO, Revolution Slider, and Max Mega Menu. It uses modern web technologies such as Bootstrap and jQuery and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable, which slightly impacts trust but the professional presentation and partner affiliations support legitimacy. Overall, Alsace Tech's website is a well-structured, professional educational network portal with moderate technical sophistication and a good security baseline. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance.

C

Coze - L'Agenda Culturel Alsacien

coze.fr

40

Coze.fr is a well-established regional cultural magazine and event listing platform focused on the Alsace region in France. It offers a comprehensive agenda of cultural events including concerts, exhibitions, festivals, and artist features, targeting residents and visitors interested in local culture. The website is professionally designed with consistent branding and regularly updated content, positioning it as a trusted media source in its niche. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses modern JavaScript libraries like Flickity for carousels. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and explicit cookie consent mechanisms, which are recommended for enhanced protection and GDPR compliance. The absence of WHOIS data reduces trust slightly but the professional nature of the site and its social media presence support its legitimacy. Overall, Coze.fr presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen its posture.

F

FastPixel

fastpixel.io

49

FastPixel is a cloud-based WordPress plugin focused on website speed optimization through caching, image optimization, minification, and CDN integration. Backed by the reputable ShortPixel team, it targets WordPress site owners seeking an easy-to-use, all-in-one performance solution. The website demonstrates a modern technical infrastructure leveraging WordPress, Cloudflare DNS, and Google marketing tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies are not explicitly published. Overall, the site is professional, trustworthy, and well-positioned in the WordPress optimization market.

W

West Virginia MetroNews Network

wvmetronews.com

60

West Virginia MetroNews Network is a well-established regional media company focused on delivering news, sports, weather, and podcasts relevant to West Virginia residents. The website serves as a comprehensive platform for local news coverage, sports updates including high school and college sports, and multimedia content such as podcasts and live streams. It holds a strong market position as a trusted voice in the region with a business model centered on advertising revenue and digital content delivery. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Tag Manager, and various advertising and analytics integrations. The site is mobile-optimized and employs SEO best practices through Yoast SEO. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site demonstrates moderate to good performance and accessibility, though some improvements in security headers and DNSSEC could enhance its posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, and no formal security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Contact information is transparent with a physical address and phone number, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively balances content quality, technical implementation, and privacy compliance, though there is room for improvement in security best practices and formal incident response disclosures. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing a vulnerability disclosure or security policy to further strengthen trust and resilience.

P

Peak Health

peakhealth.org

53

Peak Health is a regional health insurance provider headquartered in Morgantown, West Virginia, owned by three established not-for-profit healthcare providers. The company offers health insurance plans including Medicare Advantage PPO plans, focusing on improving health outcomes for West Virginians and surrounding communities. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies and tracking tools, though some privacy compliance aspects are lacking. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

J

Jefferson Health Plans

jeffersonhealthplans.com

65

Jefferson Health Plans is a regional healthcare insurance provider offering Medicare Advantage, Individual and Family plans, Medicaid, and CHIP plans. It operates under the umbrella of Health Partners Plans, Inc. and is affiliated with Jefferson Health and Thomas Jefferson University, providing a strong brand presence and community focus. The website presents comprehensive information about their products and services, targeting individuals and families seeking affordable health coverage in the region. Technically, the site is built on Adobe Experience Manager and uses modern analytics and tracking tools such as Crazy Egg, Microsoft Clarity, and Freshpaint, indicating a mature digital infrastructure. The site is mobile optimized and well-structured with good SEO practices. Security posture is generally good with HTTPS enforced, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data is unavailable, which reduces transparency and trust slightly, but the overall branding and external references support legitimacy. Privacy and terms of service pages are present, though GDPR compliance indicators are minimal. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

T

Tower Health

towerhealth.org

67

Tower Health is a large regional healthcare provider based in the United States, founded in 2017. The organization offers a comprehensive range of healthcare services including hospitals, urgent care, virtual care, pharmacy, and specialized medical services such as cancer care and neuroscience. The website reflects a mature digital presence with a professional design, clear navigation, and strong branding consistency. It targets patients, medical professionals, and the community with a focus on coordinated and accessible healthcare. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and accessibility tools. It integrates Google Analytics and Tag Manager for analytics and marketing, and uses The Trade Desk for advertising and retargeting. The site is mobile optimized and includes accessibility features, although performance is moderate. Security measures include HTTPS enforcement and some security headers, but DNSSEC is not enabled and cookie consent mechanisms are absent. From a security perspective, the site demonstrates good practices with secure forms and no exposed sensitive data. However, it lacks explicit incident response contacts and vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy policies are comprehensive and GDPR compliant, but cookie consent is missing, which could be a compliance gap. Overall, Tower Health's website is professional, trustworthy, and well-positioned in its market. Strategic improvements in DNS security, privacy compliance, and incident response transparency would further strengthen its security and compliance posture.

D

Delcros

delcros.fr

54

Delcros is a French company specializing in surface treatment of stainless steel and aluminum parts, with a history dating back to 1965. The company offers a range of industrial services including chemical pickling, passivation, electrolytic polishing, tribofinition, microblasting, and anodization. Recently acquired by ANODUR, Delcros has expanded its market presence and is recognized for compliance with nuclear industry standards such as ISO 9001:2015 and ISO 19443:2018. The website targets professional clients in the energy sector and emphasizes quality and reactivity as key differentiators. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern web technologies and a cookie consent mechanism implemented via Tarteaucitron. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy policy documentation. No contact emails or phone numbers are directly visible, which may impact user trust and compliance. Overall, the site is professional and well-structured, but could improve transparency and security practices.

G

GIO Notaires

gio-notaires.fr

45

GIO Notaires is a professional alliance of nine certified or ISO-certification-pursuing notarial offices in France, offering a wide range of legal and notarial services including family law, business law, wealth management, and real estate. The group emphasizes proximity, adaptability, and performance, serving clients primarily in Ile-de-France and other regions with a team of 24 notaries and 180 collaborators. The website is built on WordPress with Elementor and integrates modern technologies such as Google Maps and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent in place, though security headers are not detected and could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of professional service. Overall, the website presents a trustworthy and professional image with comprehensive contact information and compliance with GDPR.

P

Poissonnerie des Halles

poissonneriedeshalles.fr

46

Poissonnerie des Halles is a small local business based in Reims, France, specializing in seafood retail and restaurant services. The website promotes their fish, shellfish, and crustacean sales alongside dining options and event catering. The business also highlights partnerships with related entities such as L'Etal, Le Bocal restaurant, Le Triporteur mobile restaurant, and La Maison d'Oléron vacation rental, indicating a diversified local ecosystem. The website content is well structured, professionally designed, and targets local customers and visitors interested in seafood and dining experiences. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, FontAwesome Pro, and Google Fonts. The site is mobile optimized and SEO friendly with proper meta tags and Open Graph data. However, no CMS or hosting provider information is evident. Performance is moderate with no major technical issues detected. Accessibility is basic but functional. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which reduces compliance with GDPR and best practices. No forms or user data collection mechanisms are present, minimizing attack surface but also limiting engagement. The WHOIS data is missing, which raises concerns about domain legitimacy and registration status. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is a good representation of a small local seafood business with moderate technical maturity but with room for improvement in security, privacy compliance, and domain legitimacy verification. Strategic recommendations include adding privacy and cookie policies, implementing security headers, verifying domain registration, and enhancing trust signals.

D

Danone s.r.o

nutriklub.sk

67

Nutriklub.sk is a professionally managed website operated by Danone s.r.o, a reputable multinational company specializing in infant and toddler nutrition products. The site serves as both an e-commerce platform and an expert advisory resource for pregnancy, breastfeeding, and child nutrition, targeting parents and caregivers primarily in Slovakia. The website features a rich content library authored by experts, integrated e-shop functionality, and multiple user engagement tools including live chat support. Technically, the site is built on Adobe Experience Manager with React components, leveraging modern web technologies and third-party services such as Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

N

Nutricia

nutricia.sk

44

Nutricia is a specialized healthcare nutrition company operating in Slovakia, providing tailored nutritional products and services for patients with special dietary needs, including infants, seniors, oncology patients, and those with metabolic disorders. The company is part of the Danone Group, a globally recognized entity in the food and nutrition sector. The website reflects a professional and consistent brand presence with a focus on clinical nutrition and patient care. Technically, the site is built on WordPress using Elementor, with integration of Google Analytics and Tag Manager for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and serves its target audience effectively.

V

VHS Benešov a.s.

vhsbenesov.cz

44

VHS Benešov a.s. is a regional water utility company based in the Czech Republic, providing essential water supply and sewage services to over 100 municipalities and more than 70,000 inhabitants. The company operates under the umbrella of the global SUEZ group, indicating a strong market position and access to international expertise. Their service portfolio includes water treatment, distribution, sewage management, infrastructure construction, and customer billing. The website is professionally designed using Joomla CMS and incorporates modern web technologies such as jQuery and Bootstrap, ensuring a good user experience and mobile responsiveness. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks some security headers and explicit privacy compliance mechanisms, which could be improved. Overall, the domain registration data aligns well with the company's profile, supporting legitimacy and trustworthiness.

Pivovar Ferdinand, s.r.o. is a Czech brewery specializing in traditional and gluten-free beers, serving both retail and hospitality sectors primarily in the Czech Republic. The website presents a professional and content-rich platform showcasing their product range, brewing philosophy, and services including direct delivery. Technically, the site uses a custom CMS with common JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Facebook SDK for marketing and analytics. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with cookie consent implemented but lacks visible security headers and privacy policy pages. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is mature content-wise due to alcohol products and includes age consent mechanisms.

Sport & Relax Centrum Benešov operates a comprehensive hospitality and sports complex located in Benešov, Czech Republic. The business offers a wide range of services including hotel accommodation, sports facilities such as tennis, badminton, volleyball, and padel courts, a restaurant specializing in Czech and Italian cuisine, bowling lanes, wellness amenities, and conference/event spaces. The website targets a general audience including families, sports enthusiasts, and corporate clients seeking teambuilding venues. The company positions itself as a regional leader in leisure and hospitality with convenient access from Prague.

Bezpečná společnost z.s. is a Czech non-profit organization focused on crime prevention, public safety, education, and supporting employment for hard-to-employ individuals. The organization collaborates with the Police of the Czech Republic and runs community safety projects. Their website reflects a small, regionally focused entity with a clear mission to enhance public safety and social welfare. Technically, the website uses a standard open-source technology stack including jQuery, Bootstrap, and Google Analytics. The site is served over HTTPS, includes a cookie consent banner, and is mobile responsive with good navigation and content quality. However, it lacks explicit privacy and terms of service pages and does not implement advanced security headers, which are areas for improvement. From a security perspective, the site shows moderate maturity with HTTPS and cookie consent but lacks detailed security policies and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. No vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy and security policies, improved security headers, and verification of domain registration details to strengthen trust and compliance.

V

Vcestovani.cz

bezpecnystredoceskykraj.cz

45

Vcestovani.cz is a Czech travel portal providing comprehensive travel guides, destination recommendations, and travel insurance offers primarily targeting Czech-speaking travelers. The website is built on WordPress with SEO optimization via Yoast and integrates Google Analytics and Adsense for tracking and monetization. The technical infrastructure is modern and mobile-optimized, though minor backend PHP warnings indicate some code maintenance is needed. Security posture is adequate with HTTPS enabled but lacks advanced security headers. Privacy and cookie policies are present, supporting GDPR compliance. However, the absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional and functional, serving its niche effectively.

A

Association des Centraliens de Lyon (ACL)

technica-magazine.fr

57

Technica Magazine is a professional publication serving the alumni and engineering community of Centrale Lyon. It offers specialized content including dossiers, articles, and newsletters focused on engineering, career development, and alumni activities. The website demonstrates a solid technical infrastructure using modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security measures include HTTPS enforcement, CSRF tokens, and hCaptcha for form protection, reflecting a mature security posture. However, the absence of WHOIS data and explicit security policies slightly reduce transparency and trust. Overall, the site is professional, compliant with GDPR, and trustworthy for its target audience.

S

SZUŠ Natanael

szusnatanael.cz

40

SZUŠ Natanael is a private basic art school based in the Czech Republic, specializing in music education for children and youth. The school offers both collective and individual lessons, with a focus on instruments such as the double bass. The website serves as an information portal for prospective students, parents, and the community, providing schedules, teacher information, branch locations, and event announcements. Supported by local municipalities and the Ministry of Education, the school maintains a trusted local presence. Technically, the website is built on WordPress using the Understrap theme and Elementor page builder, incorporating modern web technologies such as jQuery, Font Awesome, and Google Fonts. The site is mobile responsive and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and formal privacy or cookie policies, which are compliance gaps. The absence of WHOIS data due to privacy protection is typical for small private entities and does not raise immediate concerns. Overall, the website is safe, professional, and suitable for its educational audience. Strategically, SZUŠ Natanael should focus on enhancing privacy compliance by adding clear privacy and cookie policies, implementing security headers, and considering a vulnerability disclosure policy to strengthen trust and security posture. These improvements will support the school's credibility and protect its users better.

C

Centrum pro rodinu Ráj z.s.

raj-pavlovice.cz

55

Centrum pro rodinu Ráj z.s. is a Czech non-profit organization established in 2008, dedicated to supporting families through educational programs, leisure activities, and community events. The organization targets families, parents, and children primarily in the Pavlovice u Přerova region. Their offerings include courses, summer camps, counseling, and volunteer opportunities, positioning them as a trusted local family center. The website is built on Joomla CMS with a moderate technical infrastructure including Bootstrap and jQuery, hosted on a Czech hosting provider. It features a clean, mobile-optimized design with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and CSRF protections, but lacks some security headers and a cookie consent mechanism. Privacy compliance is partially addressed with a GDPR page but no cookie banner. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Parafia Matki Bożej Częstochowskiej w Knurowie

mariahilf.eu

42

Maria Hilf is a religious pilgrimage site dedicated to the Virgin Mary, located in the Czech Republic. The website serves as an informational portal for pilgrims and visitors, providing details about the pilgrimage site, its history, religious services, and contact information. The organization behind the site is identified as Parafia Matki Bożej Częstochowskiej w Knurowie, indicating a religious parish managing the site. The site targets pilgrims and religious visitors interested in spiritual and cultural heritage. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, with integrations for Google Analytics and Facebook social media. The site is served over HTTPS with good SSL configuration but lacks some security headers and privacy compliance documents such as privacy and cookie policies. No forms are present on the homepage, indicating minimal data collection. The security posture is moderate with room for improvement in headers and compliance. Overall, the site is trustworthy and professionally presented, suitable for its non-profit religious purpose.

A

ADOL Monitor s.r.o.

monitordrazeb.cz

53

ADOL Monitor s.r.o. is a Czech Republic based company specializing in providing monitoring services for real estate investments, focusing on distressed properties such as auctions, executions, and insolvencies. With over 10 years of market presence, the company offers unique map-based applications and daily updated data to investors and real estate professionals. Their business model includes subscription-based monitoring services and educational seminars led by industry experts. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services, team, and client testimonials, establishing a trustworthy market position. Technically, the website is built on WordPress CMS with a modern technology stack including Bootstrap, jQuery, and various plugins for enhanced functionality. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes, and employs a cookie consent mechanism ensuring GDPR compliance. The site demonstrates good SEO practices and moderate performance with room for improvement in accessibility. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be added to strengthen security posture. No visible vulnerabilities or exposed sensitive data were found. The WHOIS data is unavailable, which reduces transparency, but the website content and business details support legitimacy. Overall, ADOL Monitor presents a professional and secure online presence suitable for its target audience. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and documenting incident response policies to further improve trust and compliance.

Ú

Údolí Svratky a.s.

udolikultury.cz

50

Údolí kultury is a regional cultural and tourism information platform focused on the Svratka river valley area in the Czech Republic. It provides curated cultural event information, accommodation listings, and promotes regional projects in collaboration with local municipalities and microregions. The website targets general audiences interested in culture and tourism within this region. Technically, the site uses Google Maps API for location services, Google Fonts for typography, and appears to be built on a CMS platform likely WebSynergy, hosted by a Czech hosting provider. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with HTTPS usage and cookie consent mechanisms implemented, but lacks visible advanced security headers or explicit security policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and external partner links indicate a legitimate regional cultural project. Contact information including emails, phone numbers, and physical addresses are clearly provided, along with active social media channels on Facebook, Instagram, and YouTube.

Ú

Údolí Svratky a.s.

udolihistorie.cz

51

Údolí historie is a regional tourism and cultural heritage website focused on promoting the historical sites, accommodations, and cultural events in the valley of the Svratka river in the Czech Republic. The site targets tourists and history enthusiasts interested in exploring castles, historical landmarks, and local culture. It serves as an informational and promotional platform for regional tourism, supported by partner organizations and local businesses. Technically, the website uses modern web technologies including Google Fonts, Google Maps API, and a CMS likely provided by WebSynergy. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks explicit security headers and formal security or incident response policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and external references indicate a legitimate regional tourism project. Overall, the site is well-positioned for its niche but could improve security posture and transparency.

Veacom operates as an established online auction portal specializing in the sale of vehicles, construction machinery, and special equipment primarily targeting professional traders and companies in Central Europe. The company emphasizes transparency, professional service, and administrative support for buyers, positioning itself as a trusted intermediary in the auction market with partnerships including major energy and construction firms. The website is well-structured, professionally designed, and offers multi-language support, enhancing accessibility for its target audience. Technically, the website employs common web technologies such as jQuery, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile devices. However, there is a lack of visible security headers and explicit privacy or cookie policy pages, which are critical for compliance and user trust. The default denial of ad and analytics consent indicates some privacy awareness, but overall privacy compliance could be improved. Security posture is moderate; HTTPS is implied but not explicitly confirmed in the data, and no WHOIS registration details are available, which raises concerns about domain legitimacy and trustworthiness. The absence of WHOIS data is unusual and should be investigated further. No critical vulnerabilities or exposed sensitive data were detected in the content provided. Overall, Veacom presents a credible business with a solid market position and professional online presence but should enhance its security and privacy compliance measures to strengthen trust and regulatory adherence.

G

GARNEA a.s.

garnea-stavebni.cz

63

GARNEA a.s. operates as the exclusive importer and distributor of DEVELON construction machinery in the Czech Republic, offering a comprehensive range of compact, wheeled, and tracked excavators, wheel loaders, dozers, and dump trucks. The company provides sales, rental, servicing, and financing services, targeting construction companies and equipment operators. The website reflects a professional and well-structured digital presence with clear navigation and rich content tailored to its audience. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Analytics, Facebook Pixel, and retargeting services, with appropriate cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear trustworthy and consistent with a medium-sized enterprise in the transportation sector. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

P

Profi Press s.r.o.

agro-obchod.cz

44

AgroOBCHOD is an online agricultural classified ads portal operated by Profi Press s.r.o., targeting farmers and agricultural businesses primarily in the Czech Republic. The platform offers listings for agricultural machinery, land, livestock, and crops, facilitating trade within the agricultural sector. The website is built on WordPress and integrates common web technologies including jQuery, Isotope.js, and tracking tools such as Google Analytics and Matomo Tag Manager. It provides multilingual support via Google Translate and includes a newsletter subscription feature. Despite the professional presentation and relevant content, the absence of WHOIS registration data and lack of explicit privacy and terms of service policies represent gaps in transparency and compliance. Security posture is moderate with HTTPS enabled but missing key security headers. Overall, the site is functional and serves its niche market well but would benefit from enhanced compliance and security measures.

L

Lukáš Pavelec

lukaspavelec.cz

52

Lukáš Pavelec is a seasoned web designer and UX specialist based in the Czech Republic, offering professional web design and user experience services with over 14 years of experience and a portfolio exceeding 250 projects. The website showcases a well-structured, visually appealing, and mobile-optimized WordPress-based platform, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Google Analytics for enhanced functionality and tracking. Security measures include HTTPS enforcement and Google reCAPTCHA integration on the contact form, although explicit security headers and privacy policies are absent, indicating areas for improvement. Overall, the site presents a credible and professional business presence with clear contact information and a strong portfolio, but lacks formal privacy and cookie compliance documentation.

T

Telepace s.r.o.

tvnoe.cz

42

Telepace s.r.o. operates TV Noe, a Czech non-commercial, non-profit television channel focused on religious, cultural, and community programming. The website provides live streaming, program schedules, video archives, and avenues for viewer support and club membership. The organization targets a general audience interested in faith-based and cultural content within the Czech Republic. The site demonstrates a consistent brand presence and active social media engagement across multiple platforms. Technically, the website is built on Joomla CMS with the Gantry 5 framework, incorporating modern web technologies such as jQuery and Google Analytics for user insights. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. Security posture is moderate with no visible security headers and unknown SSL configuration, but no critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the website content and business information appear legitimate and consistent with a small non-profit media entity. Strategic recommendations include enhancing security headers, verifying SSL configuration, and providing explicit security and incident response policies to improve trust and compliance.

M

manzelskamediace.cz

manzelskamediace.cz

39

The website manzelskamediace.cz is a small Czech service provider specializing in marital mediation, helping couples resolve conflicts and relationship crises through voluntary and confidential mediation processes. The business appears to be newly established in 2023 and targets married couples or those in relationship difficulties. The website is built on WordPress using the Astra theme and incorporates the Smart Slider 3 plugin for visual content. Hosting is provided by REG-WEBGLOBE, a Czech hosting provider, consistent with the website's local focus. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. No analytics or tracking scripts are detected, indicating minimal user tracking. Contact information includes a company email but lacks phone numbers or physical addresses in the provided content. Overall, the website is professionally designed with good user experience and navigation but requires improvements in privacy compliance and security best practices.

T

Tomáš Ševčík

sevciktomas.cz

40

Tomáš Ševčík is an experienced freelance web designer and developer based in the Czech Republic, offering a broad range of web-related services including design, consulting, security, optimization, translation, maintenance, and custom WordPress plugin development. The website positions him as a seasoned professional with over 15 years of practice and a strong portfolio of satisfied clients. The business model is focused on providing tailored web solutions to clients seeking effective and profitable online presence. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various plugins for performance, SEO, and GDPR compliance. The site is well-optimized for mobile and desktop, with good SEO and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data is a notable gap in domain legitimacy verification, but the website content and business information are professional and trustworthy. Overall, the site reflects a mature digital presence with room for improvement in security transparency and domain registration clarity.

S

Sdružení pro dopravní telematiku

sdt.cz

43

Sdružení pro dopravní telematiku is a Czech non-profit association established in 2002, dedicated to promoting and supporting the development of new technologies in transportation across road, rail, water, and air sectors. The organization focuses on enhancing mobility efficiency through intelligent transport systems and telematics. Their market position is that of a well-established, trusted entity within the Czech transportation technology sector, offering services such as networking, publications, and event coordination. The website reflects a professional and consistent brand image with clear business information and a LinkedIn presence. Technically, the site is built on WordPress with Elementor and related plugins, hosted likely by Active24, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced, though it lacks some security headers and formal privacy and cookie policies, which are areas for improvement. Overall, the site is safe, trustworthy, and well-aligned with its business purpose.