Security Directory

L

Le Cour Montilleul

lecourmontilleul.fr

51

Le Cour Montilleul is a small hospitality business offering comfortable gîtes (holiday homes) in the Champagne region of France. The company provides two main accommodations, Le Loft and La Maison, catering to groups from 2 to 10 people, with additional wine tasting experiences hosted by the fourth generation of local viticulturists. The website is professionally designed with clear branding and provides comprehensive contact information and legal pages, supporting a trustworthy online presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, and FontAwesome, hosted by OVH, a reputable provider. The presence of a cookie consent mechanism and GDPR-related pages indicates good privacy compliance. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is well-positioned as a boutique accommodation provider in a niche market with a solid digital foundation.

G

Group Mediterra a.s.

vamed-mediterra.cz

49

Group Mediterra a.s. is a Czech healthcare group operating six medical facilities and a secondary medical school, providing comprehensive healthcare services including preventive, acute, and follow-up care. The group serves both domestic and international patients, specializing in complex surgeries and intensive care. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress CMS, jQuery, and Google reCAPTCHA for security. Privacy and cookie policies are implemented with GDPR compliance, and multiple social media channels indicate active engagement. Security posture is good with HTTPS and reCAPTCHA, though additional security headers and policies could enhance protection. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but overall the website and business information appear legitimate and professional.

H

HFO Health Facility Operations Services GmbH

vamed-gesundheitsberufe.at

51

The website www.vamed-gesundheitsberufe.at represents the career portal for the healthcare facilities operated by VAMED care in Austria. The company operates a large network of 24 healthcare facilities including rehabilitation centers, nursing homes, acute care, and occupational health services, positioning itself as a leading healthcare provider in Austria. The site targets healthcare professionals and job seekers interested in careers within these facilities. The business model focuses on healthcare service provision and workforce recruitment within Austria's healthcare sector. Technically, the website employs modern JavaScript libraries such as jQuery and Modernizr, uses Matomo for privacy-conscious analytics, and is mobile optimized with good accessibility and SEO practices. The site is served over HTTPS, though lacks some advanced security headers which could improve its security posture. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. However, the absence of WHOIS data for the domain reduces trust signals and raises questions about domain registration transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance security readiness. Overall, the website is professional, content-rich, and trustworthy from a user perspective, but the lack of WHOIS data and some missing security headers suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and clarifying domain registration details to improve trust and compliance.

H

HFO Health Facility Operations Services GmbH

vamed-care.at

50

The website www.vamed-care.at represents the healthcare facilities of VAMED care Austria, operated by HFO Health Facility Operations Services GmbH. It showcases a network of 24 healthcare and rehabilitation centers across Austria, emphasizing medical and therapeutic excellence with a patient-centered approach. The site targets patients, healthcare professionals, and potential employees, offering comprehensive information about their services, locations, and corporate values. The business model focuses on providing integrated rehabilitation and medical care with a strong emphasis on quality and patient safety. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, with a Matomo Tag Manager for analytics, indicating a privacy-conscious approach. The site is mobile responsive, well-structured, and optimized for accessibility and SEO. However, no CMS or hosting provider details are explicitly detected. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. No explicit security headers were detected in the HTML source, and there is no visible vulnerability disclosure or incident response contact information. The absence of WHOIS data for the domain reduces trust slightly, but the professional presentation and comprehensive contact details support legitimacy. Overall, the website is a professional, trustworthy digital presence for a large healthcare provider in Austria. Strategic improvements in security headers and incident response transparency would enhance its security posture and compliance.

S

Salesiánské středisko mládeže – dům dětí a mládeže Brno-Líšeň

salesko.cz

59

Salesko is a Czech non-profit organization dedicated to supporting children and youth primarily from Brno-Líšeň and surrounding areas. The organization offers a variety of youth-oriented activities including sports, music, creative workshops, camps, and cultural events. Their mission focuses on physical, mental, and spiritual development of young people. The website reflects a well-structured community hub with event announcements, registration forms, and news updates, positioning Salesko as a trusted local youth center. Technically, the website is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, supplemented by plugins for forms, calendars, and push notifications. The site is mobile-optimized and uses HTTPS with Google reCAPTCHA to secure forms. Cookie consent is implemented, indicating awareness of privacy compliance, though no dedicated privacy policy page was found. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and form protection but lacks published security policies or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website content and social media presence support its legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, Salesko presents a credible, community-focused non-profit with a solid digital presence. Enhancements in privacy documentation and security transparency would further strengthen trust and compliance.

R

Rodinný svaz ČR, z.s.

tydenprorodinu.cz

52

Týden pro rodinu is a well-established non-profit initiative organized by Rodinný svaz ČR, z.s., focused on promoting family values and community engagement through annual events across the Czech Republic. The website reflects a mature digital presence with a clear focus on family-oriented content and partnerships with regional governments and organizations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Maps and social media SDKs to enhance user experience. Security posture is adequate with HTTPS and cookie consent implemented, though improvements in security headers and privacy policy transparency are recommended. The absence of WHOIS data limits domain trust verification, but the overall content and partner ecosystem support legitimacy. Strategic recommendations include enhancing security headers, publishing a privacy policy, and establishing a vulnerability disclosure channel to strengthen compliance and trust.

F

Fédération Équestre Internationale

fei.org

64

Fédération Équestre Internationale (FEI) is the international governing body for equestrian sport, dedicated to promoting and regulating the sport globally with a focus on athlete welfare and ethical partnership with horses. The organization operates as a large non-profit entity with a strong global presence, supported by reputable partners such as Longines and others. The website is professionally designed, content-rich, and targets equestrian athletes, fans, and stakeholders worldwide. Technically, the site is built on Drupal 7 with modern web technologies and integrates multiple analytics and marketing tools while maintaining good privacy compliance and cookie consent mechanisms. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers could be improved. Overall, the domain and website present a trustworthy and professional image consistent with an established international sports federation.

T

TIM s.a.s.

tim-sa.fr

59

TIM s.a.s. is a small manufacturing and retail company based in Reims, France, specializing in fencing, gates, motorization, and aluminum and plastic profiles. The company targets both professionals and private individuals, offering a broad range of products including industrial and residential fencing, motorization systems, and related accessories. Their market position is regional with a focus on quality professional products and services such as delivery and professional accounts. The website reflects a professional and consistent brand image with clear contact information and comprehensive product offerings. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and FontAwesome, and integrates a consent management platform for GDPR compliance. The site is mobile-optimized and provides good SEO and accessibility basics. Security-wise, HTTPS is used and cookie consent is implemented, but explicit security headers and incident response information are missing. The WHOIS data is unavailable, which slightly reduces trust but the overall site and business presentation are legitimate and professional. Recommendations include enhancing security headers, adding incident response contacts, and maintaining regular audits of third-party scripts.

C

Champagne L. Albert Guichon

champagne-albertguichon.fr

58

Champagne L. Albert Guichon is a small family-owned vineyard and champagne producer located in Mardeuil, France, with a heritage dating back to 1929. The company specializes in cultivating traditional champagne grape varieties and producing a range of champagne cuvées. Their market position is that of a boutique producer emphasizing quality and environmental responsibility, as evidenced by their HVE certification. The website reflects a professional and consistent brand image, targeting wine enthusiasts and hospitality clients. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics and a robust cookie consent mechanism via Consentmanager.net. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. The security evaluation shows good practices in data protection and privacy compliance, including GDPR adherence and cookie consent. However, the absence of WHOIS data limits domain trust assessment. Overall, the site is trustworthy and professionally maintained, with clear contact information and social media presence. Strategically, the company should consider enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust and compliance further.

A

ACI élévation

aci-elevation.com

59

ACI élévation is a French manufacturer specializing in vertical handling equipment including monte-charges, tables élévatrices, and plateformes élévatrices. The company positions itself as a leader in the French industrial equipment sector with a comprehensive offering from design to maintenance and a national commercial network. The website reflects a mature business with professional branding and detailed product information targeting industrial clients in France. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, and implements cookie consent and Google Analytics for tracking. Security posture is adequate with HTTPS and consent mechanisms but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high based on website content and client references. The site is fully accessible with no WAF or blocking detected.

R

RVF Ressorts & Visseries des Flandres

rvf.com

57

RVF Ressorts & Visseries des Flandres is a French manufacturer specializing in industrial and precision springs with nearly 100 years of history since its founding in 1923. The company offers a wide range of custom springs including compression, torsion, traction, spiral, flat, and shaped wire springs, serving diverse industrial sectors such as automotive, agriculture, building, medical, and luxury goods. The website reflects a professional and established business with ISO9001 and IATF 16949 certifications, indicating a commitment to quality and industry standards. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome Pro, and Owl Carousel, with Google Analytics integrated for user tracking. The site is mobile-optimized and SEO-friendly, providing a good user experience. However, some accessibility features could be enhanced. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security or incident response policies, which are areas for improvement. The WHOIS data for the domain www.rvf.com is notably missing, which is inconsistent with the company's long operational history and raises some trust concerns. Despite this, the website content, contact information, and certifications support the legitimacy of the business. Privacy and cookie policies are present and appear GDPR compliant, reflecting awareness of data protection regulations. Overall, RVF presents as a credible and professional manufacturing company with a solid digital presence but should address WHOIS transparency and enhance security policies to improve trust and compliance.

A

ATELIERS MECANIQUES DE SAUCOURT

ressorts-ams.com

57

ATELIERS MECANIQUES DE SAUCOURT (AMS) is a French manufacturer specializing in the production of industrial springs, offering both small and large series fabrication. Positioned regionally in Hauts-de-France and part of the QUARSOR SPRING SOLUTIONS group, AMS serves various industrial sectors including automotive, agriculture, medical, and luxury goods. Their website reflects a professional and consistent brand image, emphasizing certifications such as ISO9001 and IATF 16949, which reinforce their quality and reliability in manufacturing. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. The presence of Cookiebot for cookie consent and Google Analytics for traffic monitoring indicates a mature digital infrastructure with attention to privacy compliance. However, the absence of visible security headers and incomplete WHOIS data are notable gaps. From a security perspective, the site benefits from HTTPS encryption and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. The missing WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is secure and professional but could improve in transparency and security best practices. The overall risk assessment is moderate with recommendations focusing on domain registration verification, enhanced security headers, and clearer security policies. These improvements will strengthen AMS's digital trustworthiness and compliance posture.

S

Státní fond životního prostředí ČR

modernizacni-fond.cz

67

The website represents the official portal of the State Environmental Fund of the Czech Republic (SFŽP ČR), focusing on the Modernization Fund which supports energy and environmental projects. It serves a broad audience including businesses, municipalities, and households, providing detailed information about funding programs, project successes, and future plans. The site is well-branded, consistent, and linked to trusted government and EU resources. Technically, it is built on WordPress with modern plugins and frameworks, offering good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and some security plugins in use, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves as a critical government resource for environmental funding in the Czech Republic.

N

Naše Toustárna

nasetoustarna.cz

51

Naše Toustárna is a small artisan bakery business based in the Czech Republic, specializing in handcrafted breads, pastries, and coffee. The website presents a professional and well-branded digital presence with clear descriptions of their passion for traditional baking methods and local products. The business targets general consumers interested in quality bakery goods with a focus on craftsmanship and ecological values. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Instagram Feed, providing a moderate level of digital maturity and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, although the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

P

Pražská paroplavební společnost a.s.

paroplavba.cz

63

Pražská paroplavební společnost a.s. is a historic Czech company established in 1865, specializing in passenger water transport and leisure cruises on the Vltava river in Prague and surrounding areas. The company operates two culturally significant paddle steamers and offers a range of services including sightseeing cruises, gastronomic events, and boat rentals for private and corporate occasions. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with HTTPS enforced and cookie consent mechanisms in place. Security posture is good but could be improved by adding explicit security headers and publishing a security policy. The absence of WHOIS data limits domain trust assessment, but the business information and content quality strongly indicate legitimacy. Overall, the site is well-positioned for its target audience of tourists and event clients, with a strong brand and consistent messaging.

D

DVORCE TŘEBOŇ s.r.o.

dvorce.cz

58

Penzion Dvorce is a small hospitality business located in the South Bohemian region of the Czech Republic, offering accommodation and dining services with a focus on biofarm products and family-friendly experiences. The website presents a professional and consistent brand image, targeting families, couples, and tourists interested in nature and regional cuisine. The business model integrates accommodation, restaurant services, and gift voucher sales, positioning itself as a regional eco-friendly hospitality provider. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and SEO practices. The site is served over HTTPS with valid SSL, but lacks some security headers and formal privacy and terms of service pages, which are areas for improvement. Cookie consent is implemented, indicating some level of privacy compliance. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS data limits domain trust assessment. The site uses tracking pixels from Facebook and Google Analytics, with moderate user tracking levels. Overall, the website is safe, family-friendly, and professionally maintained, but could enhance compliance and security transparency. Recommendations include publishing privacy and terms policies, adding security headers, implementing a security.txt file, and verifying domain registration details to improve trust and compliance.

A

America250PADelco

america250padelco.org

56

The website america250padelco.org serves as the official online presence for the Delaware County, Pennsylvania committee dedicated to celebrating America's 250th birthday. The site provides informational content about the committee's activities and events, targeting a general audience interested in local government and community celebrations. The website is professionally designed with consistent branding and good content relevance, though it lacks detailed business information and contact data. Technically, the site uses modern web fonts and JavaScript libraries, hosted on a platform associated with f-static.com, but does not reveal advanced frameworks or CMS details. Security posture is moderate; HTTPS is implied but no security headers or policies are detected, and WHOIS data is unavailable, limiting domain trust assessment. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is functional and informative but would benefit from enhanced security and compliance features.

Price-check.cz is a professional online price monitoring and comparison tool operated by E-solutions, s.r.o., targeting e-commerce businesses including B2C and B2B sellers and suppliers. The platform offers real-time data monitoring with frequent updates, alerting, reporting, and comprehensive analytics to support pricing strategies. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Technically, it leverages modern web technologies including Google Tag Manager, Google Analytics, and Vue.js components, ensuring a moderate to good performance level. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published privacy or security policies. The absence of WHOIS data limits domain trust verification, but the presence of multiple reputable brand references and professional presentation supports legitimacy. Overall, the site is a credible resource for price monitoring in the Czech and European markets.

M

MARTHI STORE

marthistore.com

43

MARTHI STORE is a specialized retail business focused on interior design products such as branded wallpapers, curtains, blinds, carpets, and furniture, primarily serving customers in the Czech Republic. The company offers custom-made textile decorations and installation services, supported by a physical showroom in Prague. The website reflects a professional and consistent brand presence with comprehensive product information and active social media engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking and marketing. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities in the content. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perception. Privacy policies and cookie management are well implemented, supporting compliance with data protection regulations. Overall, the website presents a solid digital presence for a small retail business in interior design, but should address WHOIS transparency and enhance security best practices to improve trust and compliance.

Coworking Příbram z.s. is a small local business providing coworking spaces, meeting rooms, and office rentals in the center of Příbram, Czech Republic. The company targets freelancers, remote workers, and small businesses seeking flexible office solutions with amenities such as fast WiFi, coffee, and 3D printing. Their business model is membership and rental-based with tiered pricing plans and daily access options. The website is professionally designed with clear navigation and relevant content, supporting their market position as a community-focused coworking provider. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or hosting provider details are evident. Security practices are minimal with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Security posture is moderate; HTTPS is assumed but no explicit security headers or privacy policies are present. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the business claims, showing domain registration in 2021, appropriate for a small startup. Contact information is clear and trustworthy, with no suspicious external links or content detected. Overall, the website is functional and professional but lacks critical privacy and security policies. Strategic improvements in security headers, privacy compliance, and incident response readiness are recommended to enhance trust and regulatory adherence.

A

ATONdesign s.r.o.

atondesign.cz

45

ATONdesign s.r.o. is a Czech Republic based professional design studio specializing in graphic design, interior design, and exhibition stand construction. With over 25 years of experience, the company positions itself as a trusted partner for businesses seeking to enhance their brand and physical spaces through creative design solutions. The website reflects a well-structured and professional digital presence, leveraging WordPress CMS and modern web technologies to deliver a responsive and user-friendly experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some improvements in security headers and privacy compliance are recommended. Overall, the website and business appear legitimate and credible, though the absence of WHOIS data and privacy policies slightly reduce trust levels.

G

Gymnázium Třebíč

gtr.cz

36

Gymnázium Třebíč is a Czech educational institution providing secondary education through 8-year and 4-year gymnasium programs, including a specialized sports preparation track. The school emphasizes meaningful curriculum, critical thinking, personal development, and offers a variety of extracurricular activities including international exchanges and Erasmus+ accreditation. The website is professionally designed using WordPress CMS and integrates common web technologies such as jQuery and Google Tag Manager. It is mobile-optimized and provides clear navigation and relevant content for students and prospective applicants. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but the website content and contact information appear legitimate and consistent with an educational institution.

G

Gymnázium Kadaň

gymka.cz

45

Gymnázium Kadaň is a well-established secondary educational institution in the Czech Republic offering comprehensive study programs including eight-year and four-year tracks, language exam preparation, and extracurricular activities. The website reflects a professional and modern digital presence built on WordPress with various plugins enhancing user experience and content delivery. Privacy and cookie policies are clearly presented with an active consent mechanism, demonstrating compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities in the site content. The site is trustworthy and targets students, parents, and the educational community effectively.

J

Janáčkova akademie múzických umění

jamu.cz

51

Janáčkova akademie múzických umění is a Czech educational institution specializing in music and performing arts. The website serves students, prospective students, alumni, and the general public interested in cultural events and academic programs. It provides information on study programs, creative activities, public events, and student services. The institution appears to be a medium-sized regional academic entity with a consistent brand presence and a professional website design. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, incorporating plugins like NextGEN Gallery and Owl Carousel for enhanced user experience. It uses HTTPS and Google Tag Manager for analytics and tracking. The site is mobile responsive and optimized for SEO, though accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with granular controls, indicating some level of privacy compliance. However, it lacks explicit privacy policy and terms of service pages, security headers, and vulnerability disclosure information. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. Overall, the website is functional, professional, and safe for general audiences but would benefit from improved transparency in privacy and security policies and clearer contact information to enhance trust and compliance.

A

ARSY line, s.r.o.

webproskoly.cz

57

ARSY line, s.r.o. operates the website www.webproskoly.cz, providing specialized web hosting and content management solutions tailored for Czech primary and kindergarten schools. The company offers a subscription-based model with no upfront investment, focusing on modern, accessible, and legislatively compliant web platforms. Their services include modules for photo galleries, news updates, event calendars, and integration with school meal systems, targeting educational institutions in the Czech Republic. The website demonstrates a professional and consistent brand presence with strong customer testimonials and clear contact information. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, and proprietary CMS components. It is optimized for mobile devices and accessibility, with good SEO practices and performance. The site uses HTTPS and consent-based cookie management, reflecting a good security posture, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with HTTPS enforcement and CAPTCHA on forms, but lacks explicit published security policies or incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website is a well-executed niche educational service platform with good technical and security practices, though improvements in transparency around security policies and WHOIS data availability would enhance trust and compliance.

Z

Základní škola a gymnázium Navis

zsnavis.cz

53

Základní škola a gymnázium Navis is a Czech educational institution offering preschool, primary, and gymnasium level education with a focus on intellectual, personal, and spiritual development. The school positions itself as a modern, value-based institution founded by families for children, aiming to nurture responsible freedom and comprehensive growth. The website reflects a professional and well-structured digital presence, targeting students, parents, and prospective applicants. Technically, the site uses a modern CMS (Dmp.Cms.Core) and popular JavaScript libraries such as jQuery and Bootstrap, hosted partially on Microsoft Azure Blob Storage for media assets. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is safe, professional, and compliant with GDPR, serving its educational mission effectively.

Základní škola a Praktická škola, Opava is a public educational institution located in Opava, Czech Republic, providing primary and practical school education. The website serves students, parents, and the local community with information about school events, projects, and contact details. The institution maintains a consistent brand presence and complies with GDPR regulations, reflecting a responsible approach to data privacy. Technically, the website uses a modern tech stack including jQuery, Mapy.cz API, and Owl Carousel, built on the AKTIVNÍ ŠKOLA CMS platform. It is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, supporting the institution's mission effectively.

L

LED

weareled.fr

50

LED is a French digital agency specializing in designing, developing, and optimizing digital products such as websites, e-commerce platforms, and applications. As a subsidiary of Groupe Les Enchanteurs, LED positions itself as a user-centric agency with expertise in digital strategy, UX/UI design, development, and project management. The website reflects a professional and consistent brand image targeting organizations and brands seeking digital transformation. Technically, the site is built on WordPress with integrations of modern frameworks like Laravel, React, and Next.js, hosted by OVH. It employs Google Tag Manager and Axeptio for analytics and cookie consent, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, well-structured, and compliant with GDPR, though it could improve by publishing detailed security policies and vulnerability disclosure information.

L

Les Bricos du Cœur

bricosducoeur.org

49

Les Bricos du Cœur is a French non-profit association founded in 2013 dedicated to supporting social aid organizations by organizing solidarity renovation projects, managing donations of materials, and operating a solidarity hardware store. The website reflects a well-established organization with a clear mission to improve the living and working environments of social structures such as associations, foundations, hospitals, and EHPADs. Their market position is strengthened by over 1200 completed projects and a network of engaged partners. Technically, the site is built on WordPress with modern libraries and performance optimizations, ensuring good user experience and mobile responsiveness. Security posture is strong with HTTPS, security headers, and anti-bot protections, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

C

Centrum pro rodinu a sociální péči z. s.

prorodiny.cz

54

Centrum pro rodinu a sociální péči z. s. is a well-established non-profit organization based in Ostrava, Czech Republic, dedicated to supporting families, relationships, individuals with disabilities, caregivers, and seniors. The organization offers a broad range of services including counseling, education, social support, and community engagement, with a strong focus on inclusivity and social welfare. Their website reflects a mature digital presence with rich content, active event calendars, and social media integration, positioning them as a trusted local entity in the social care sector. Technically, the website employs modern JavaScript libraries and Google Analytics with consent management, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern that slightly impacts trustworthiness, though the website content and social presence strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving its target audience effectively.

M

Ma planète BIO

maplanetebio.com

60

Ma planète BIO is a regional event organizer focused on organic agriculture, sustainable living, and related cultural activities in South Alsace, France. The website promotes an annual event held at Parc Expo Mulhouse, targeting enthusiasts and professionals interested in organic farming and eco-friendly lifestyles. The business is relatively new, founded in 2022, and operates primarily in French. The website provides event information, exhibitor details, conference schedules, and visitor guidance, positioning itself as a key regional player in the organic agriculture event space. Technically, the website uses a combination of jQuery, Bootstrap, Owl Carousel, and cookie management via tarteaucitron.js. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is hosted by OVH sas, a reputable hosting provider, and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website presents a professional and trustworthy front for a niche event business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness.

H

HOSTEUR SA

hosteur.com

70

HOSTEUR SA is a Swiss-based technology company specializing in web hosting, domain registration, cloud services, and IT management with over 20 years of experience. The company emphasizes European data sovereignty, operating datacenters exclusively in Europe, and holds multiple ISO certifications (27001, 9001, 14001) that attest to its commitment to security, quality, and environmental responsibility. The website is professionally designed, mobile-optimized, and provides comprehensive service information targeting businesses and individuals seeking secure hosting solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google Fonts, with a cookie consent mechanism implemented via Tarteaucitron. The site is served over HTTPS with no visible security vulnerabilities in the HTML content. However, no explicit HTTP security headers were detected, and no CMS or hosting provider details are disclosed. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, HOSTEUR demonstrates strong compliance with recognized standards through its ISO certifications and cookie consent implementation. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and certifications support legitimacy. No incident response or vulnerability disclosure information is publicly available, indicating an area for improvement. Overall, HOSTEUR presents as a credible and professional hosting provider with a solid security posture and compliance focus. Strategic recommendations include enhancing transparency around incident response, publishing vulnerability disclosure policies, implementing additional security headers, and clarifying domain registration details to improve trust and compliance further.

А

Адвокатска кантора Дотова и Божинова

soflaw.bg

48

Адвокатска кантора Дотова и Божинова е утвърдена малка адвокатска кантора, базирана в София, България, предлагаща широк спектър от правни услуги, включително търговско, семейно, административно, трудово и медицинско право, както и недвижими имоти и изпълнителни дела. Сайтът е професионално изработен на WordPress с използване на модерни технологии и добри SEO практики. Въпреки липсата на публично достъпна политика за поверителност и бисквитки, контактната информация е изчерпателна и лесно достъпна, а клиентските отзиви и медийните упоменавания подсилват доверието в кантората. Техническият стек е съвременен, но липсват някои важни мерки за сигурност като security headers и политика за инциденти.

E

Elinor.bg

elinor.bg

50

Elinor.bg is a Bulgarian e-commerce website specializing in the sale of perfumes, cosmetics, and makeup products. The site targets a general audience interested in beauty products and offers a large catalog with over 30,000 items. The business model is retail-focused, leveraging online sales channels to reach customers primarily in Bulgaria. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Criteo, and SendPulse, indicating a mature digital marketing infrastructure. Mobile optimization and SEO practices are adequately implemented, contributing to a positive user experience.

П

Политическа партия Русофили за възраждане на Отечеството

ppvo.bg

43

The website represents a Bulgarian political party named "Политическа партия Русофили за възраждане на Отечеството" focused on Russian-Bulgarian relations and patriotic themes. It serves as an information and advocacy platform with regular content updates, news, and partner affiliations. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted likely by SuperHosting.BG. The design is professional and mobile-optimized, providing a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though some security best practices like CSP headers and security.txt are missing. Privacy compliance is partial with a GDPR-compliant privacy policy but lacking cookie consent mechanisms. WHOIS data is limited due to GDPR but domain status and nameservers indicate legitimacy. Overall, the site is functional, trustworthy, and serves its political advocacy purpose effectively.

D

deutsche Automobilberatung Oranienburg

dabag.de

48

The website www.dabag.de represents deutsche Automobilberatung Oranienburg, a small-sized automobile consulting and brokerage service based in Germany. The company offers services including automobile brokerage, fleet management, custom vehicle procurement, and financing solutions. The website is professionally designed using WordPress CMS with SEO optimization and targets automobile customers and fleet managers primarily in the German market. The business has been active since at least 2014, consistent with the domain age. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Meta Pixel, and Cookiebot for cookie consent management. The site is hosted likely on your-server.de, a German hosting provider, and uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and cookie consent with blocking mode, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The site uses multiple third-party analytics and marketing scripts, indicating extensive user tracking but with GDPR-compliant consent mechanisms in place. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration and hosting details align with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to further strengthen the security posture and compliance.

L

Liechtensteinische Musikschule

musikschule.li

64

The Liechtensteinische Musikschule is a regional educational institution specializing in music instruction for all ages, with a strong focus on children aged 1 to 8 years. The website presents a professional and well-structured platform offering a variety of music lessons, ensembles, workshops, and digital music production services. The school maintains an active presence with news updates, events, and social media engagement, positioning itself as a trusted community resource in Liechtenstein. Technically, the site is built on the concrete5 CMS and leverages modern JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience across devices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the website reflects a credible and professionally managed educational service with room for enhancement in privacy and security transparency.

L

Liechtenstein Marketing

liechtenstein-business.li

64

The website www.liechtenstein-business.li serves as an official platform promoting Liechtenstein as a prime business and economic location. It provides comprehensive information on the economic advantages, company formation processes, business news, and the financial and industrial sectors of Liechtenstein. The site targets businesses, entrepreneurs, and professionals interested in establishing or expanding operations in Liechtenstein. The business model is governmental and marketing-oriented, positioning Liechtenstein as a competitive and attractive business hub. Technically, the website is built on the Concrete5 CMS and utilizes modern web technologies including jQuery, Matomo and Google Analytics for tracking, Google Tag Manager, and Usercentrics for consent management. The site is mobile optimized with good SEO practices and a clear navigation structure, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates consent mechanisms for cookies, reflecting a good security posture. No vulnerabilities or exposed sensitive data were found. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports Liechtenstein's business promotion objectives while maintaining a secure and user-friendly environment. Strategic recommendations include adding explicit security and incident response policies, improving accessibility, and providing terms of service to further enhance compliance and user trust.

A

A&A KG

ox-linz.at

56

OX Steaks & Grill Linz is a well-established hospitality business located in Pasching, Austria, offering a premium dining experience focused on steaks, grill dishes, sushi, brunch, and breakfast buffet. The website reflects a medium-sized restaurant with a strong local market position and a clear business model centered on dine-in services, online reservations, and gift voucher sales. The company is legally registered as A&A KG with transparent contact and legal information provided. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. Privacy compliance is comprehensive with detailed GDPR-aligned policies and cookie management. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and customer engagement.

M

Media India Group

mediaindia.eu

42

Media India Group is a well-established global media platform founded in 2004, operating primarily in Europe and India. The company focuses on publishing, communication, consultation services, and event management, targeting a broad audience interested in culture, business, tourism, and education. The website demonstrates a solid market position with consistent branding and a professional content presentation. Technically, the site is built on WordPress with modern web technologies including jQuery, Bootstrap, and Owl Carousel, and integrates Google services for analytics and advertising. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, registered via GoDaddy.com, LLC, aligning with the business's legitimacy. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

T

Tennisverband Mecklenburg-Vorpommern e.V.

tennismv.de

57

The Tennisverband Mecklenburg-Vorpommern e.V. is a regional tennis association dedicated to promoting tennis activities, organizing tournaments, and supporting youth development within Mecklenburg-Vorpommern, Germany. The website serves as an information hub for players, clubs, and tennis enthusiasts, providing news, event details, and organizational resources. It positions itself as the official governing body for tennis in the region, operating as a non-profit entity focused on community engagement and sport development. Technically, the website is built on WordPress 6.8.3 using the GeneratePress theme and Visual Composer Website Builder, supplemented by plugins such as Contact Form 7 and Owl Carousel for enhanced user experience. The site is mobile-optimized with a moderate performance profile and good SEO practices, though accessibility features are basic. The infrastructure reflects a standard modern CMS setup suitable for small to medium-sized organizations. From a security perspective, the site enforces HTTPS with a good SSL configuration but lacks visible HTTP security headers such as CSP or HSTS in the HTML content. No exposed sensitive data or vulnerable libraries were detected. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no cookie consent mechanism is present. Contact information is primarily via forms, with no explicit emails or phone numbers found in the content. Overall, the website is trustworthy and professional, with a strong focus on tennis-related content and community engagement. Security posture is adequate but could be improved with additional headers and consent mechanisms. The domain registration data is consistent and legitimate, supporting the site's credibility. Strategic improvements in security and privacy compliance would enhance the site's resilience and user trust.

H

hoster.by

hoster.by

65

hoster.by is a Belarus-based technology company specializing in domain registration, web hosting, and cloud infrastructure services. Established in 2004, it offers a comprehensive platform for businesses to start and grow online, including free SSL certificates and promotional offers for domain purchases. The company targets businesses and individuals seeking reliable hosting and IT infrastructure solutions. The website demonstrates a solid technical foundation using Bitrix CMS and integrates multiple communication channels such as live chat and social media. Security posture is generally good with HTTPS and Let’s Encrypt SSL usage; however, the absence of explicit privacy and cookie policies indicates compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

DDr. med. univ. Jurij Kocmut

augenarzt-salzburg.at

47

The website represents a specialized ophthalmology practice located in Salzburg, Austria, led by DDr. Jurij Kocmut. It offers a range of eye care services including modern eye examinations, laser eye surgery, contact lens fittings, and other ophthalmic treatments. The practice emphasizes personalized care, high-quality standards, and accessibility including online appointment booking and wheelchair access. The target audience is local patients seeking professional eye care services. The website is well-structured, professionally designed, and provides clear contact information and patient testimonials, enhancing trust and credibility. Technically, the site is built on WordPress with common plugins such as WPBakery Page Builder and Contact Form 7, using Bootstrap for responsive design. It employs modern JavaScript libraries like jQuery and Owl Carousel for UI elements. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, but some security headers are missing and no explicit security or incident response policies are published. Overall, the security posture is solid but could be improved by adding security headers, a security.txt file, and more explicit privacy and security policies. No critical vulnerabilities or WAF blocking were detected. The domain registration data aligns well with the business claims, supporting legitimacy. The site does not use advertising or tracking services, indicating a privacy-conscious approach. Strategically, the practice should focus on enhancing security policies and transparency to further build patient trust and comply with evolving regulations. Technical modernization and regular updates will maintain performance and security. The website effectively supports the business model of a local specialized healthcare provider with a strong digital presence.

C

Computer-L.A.N. GmbH

lansoftware.de

51

Computer-L.A.N. GmbH operates LAN Software, a specialized software house based in Fulda, Germany, focusing on software solutions for education institutions, seminar houses, authorities, and group accommodations. Their offerings include cloud-based seminar management (LANcloud), house and academy management (AkademieManager), group house management (HausManager), and ERP and HCM solutions via Sage partnerships. The company positions itself as an experienced, regional provider with a strong focus on tailored business software and customer support including workshops and training. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, Bootstrap, and Borlabs Cookie for privacy compliance. The site is well-optimized for SEO and mobile devices, with moderate performance and good accessibility. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

R

Raxalpenhof

raxalpenhof.com

52

Raxalpenhof is a family-run hospitality business located in Reichenau an der Rax, Austria, offering lodging, wellness, culinary experiences, and seminar facilities. The website is professionally designed, content-rich, and targets tourists, seminar guests, and families seeking a nature-oriented vacation. The technical infrastructure includes modern analytics and tracking tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and explicit cookie consent are recommended. The absence of WHOIS data slightly reduces trust but the overall business credibility remains high due to clear contact information, certifications, and partner affiliations.

Il Canto della fabbrica is a cultural and artistic project website associated with Fondazione Pirelli, focusing on the intersection of industrial heritage and music. The site offers multimedia content including videos, audio playlists, interviews, and a book promotion, targeting a general audience interested in culture and industrial innovation. The website is well-structured with good design quality and consistent branding, providing a positive user experience. Technically, it employs a modern JavaScript stack with libraries such as jQuery, Modernizr, and Vimeo API, hosted under an Italian registrar with no CMS detected. Security posture is moderate with some gaps such as lack of DNSSEC and missing explicit security headers, but the domain registration is legitimate and protected against unauthorized transfers. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is safe, professional, and trustworthy, though it lacks direct contact information and formal security policies.

C

Culligan Luxembourg

culligan.lu

53

Culligan Luxembourg is a professional provider of water fountain solutions and hydration services tailored for businesses of all sizes in Luxembourg. The company offers a range of products including bottle-based and network-connected water fountains, water delivery services, and related accessories. The website reflects a strong market position as part of an established international brand, with a focus on quality service and environmental sustainability. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes security features such as HTTPS and Google reCAPTCHA. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS data limits domain trust analysis. Overall, the site is professional, secure, and user-friendly, supporting Culligan's business credibility in the hydration solutions market.

C

Culligan Middle East

culliganmiddleeast.com

59

Culligan Middle East is a professional water solutions provider specializing in hydration products and services for businesses and homes across the Middle East. Their offerings include advanced water coolers, filtration systems, bottled water delivery, and maintenance services, supported by innovative technologies such as Firewall® UVC purification and BioCote® antimicrobial surfaces. The website demonstrates a strong market position with a large customer base and trusted brand presence. Technically, the site is built on WordPress with modern frameworks and includes comprehensive SEO and tracking implementations. Security posture is good with HTTPS and secure forms, though some security headers and policies could be improved. Overall, the site is well-designed, user-friendly, and trustworthy, though domain WHOIS transparency is lacking, which slightly impacts trust. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and improving WHOIS transparency where possible.

Time Service is a specialized company providing innovative software and hardware solutions for race tracks and motorsport timekeeping worldwide. Established since 2005, it offers the RSTime software suite for automating and optimizing race timing and circuit management, alongside licensed sports timing services and a webshop for timing hardware. The company targets race circuits, timekeepers, and motorsport event organizers, positioning itself as a trusted provider with over two decades of experience and global reach. Technically, the website is built on a modern WordPress platform with WooCommerce and Elementor, delivering a professional and responsive user experience. Security measures include HTTPS and DNSSEC, though additional security headers and privacy policies are recommended to enhance compliance and trust. Overall, the website reflects a moderate to good security posture with room for improvement in privacy compliance and contact transparency.

P

Pieper Holz GmbH

pieperholz.de

41

Pieper Holz GmbH is a medium-sized German manufacturing company specializing in woodworking products including sawmill operations, raw wood trade, playground equipment, and bridge construction. Their website emphasizes sustainability and future-oriented wood solutions, targeting businesses and organizations in need of quality wood products and landscape construction materials. The company maintains a professional online presence with clear contact information and basic compliance with privacy regulations. Technically, the website uses common JavaScript libraries and Google Analytics with privacy-conscious configurations such as IP anonymization and opt-in cookie consent. However, no explicit security policies or incident response information are published, and security headers are not evident, indicating room for improvement in security posture. WHOIS data is limited but consistent with a legitimate hosting provider, supporting the website's credibility. Overall, the site is well-structured, user-friendly, and trustworthy with a moderate security maturity level.