Security Directory

A

a-net group a.s.

cavalletto.cz

49

Cavalletto.cz is an established Czech e-commerce retailer specializing in equestrian products, including horse carts, riding equipment, apparel, stable supplies, and related services. The business targets horse owners, riders, and stable operators primarily within the Czech Republic. The website presents a comprehensive product catalog with clear navigation and a professional design, supporting a good user experience. Technically, the site uses jQuery and video.js libraries and appears to be built on a custom or Nette-based e-commerce platform hosted on Czechland.net servers. Mobile optimization is good, and basic accessibility features are present. Security measures include HTTPS usage, CSRF tokens in forms, and a cookie consent mechanism with opt-in for analytics and advertising cookies. However, explicit security headers and privacy policies are missing, representing areas for improvement. WHOIS data confirms the domain's legitimacy and long-standing presence since 2009. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance documentation.

J

Jezdecké centrum Královický dvůr

kralovickydvur.cz

46

Jezdecké centrum Královický dvůr is a hospitality and equestrian service provider located near Prague, Czech Republic. The business offers a restaurant, accommodation in a historic building, corporate event hosting, and a comprehensive equestrian center. Their target audience includes horse enthusiasts, tourists, families, and corporate clients seeking unique event venues. The website reflects a well-structured and professionally designed platform with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Typekit fonts, with a CMS likely based on Nette framework. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. Contact information is clearly presented with phone numbers and a contact form, but no privacy or cookie policies were found, indicating compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

Dostihový spolek a.s. operates as a prominent horse racing organization based in Pardubice, Czech Republic, managing events such as the renowned Velká pardubická race. The company targets horse racing enthusiasts and visitors, providing event calendars, ticketing, and visitor information. The website reflects a medium-sized regional business with a focus on hospitality and transportation services related to horse racing events. Technically, the website is built on WordPress using modern plugins and themes, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

EQS magazín

eqsmagazin.cz

42

EQS magazín is a Czech-language online media platform dedicated to equestrian topics including horse care, nutrition, health, equipment, and interviews with riders and trainers. The website targets horse enthusiasts and riders primarily in the Czech Republic. It operates on a WordPress CMS infrastructure with common plugins and technologies such as Smart Slider 3, jQuery, Google Fonts, and Font Awesome. The site is well-structured with good content quality and consistent branding. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is professional and safe for general audiences, with moderate tracking via Google Analytics.

G

GSG Berlin GmbH

gsg.de

46

GSG Berlin GmbH is a well-established real estate company specializing in leasing office, commercial, and warehouse spaces primarily in Berlin. With over 60 years of experience and a portfolio exceeding 1 million square meters, it serves a diverse clientele including startups, craftsmen, and SMEs. The company emphasizes flexibility in space usage and offers value-added services such as highspeed fiber internet and electric vehicle charging stations. The website reflects a strong market position with multiple locations and a broad tenant network. Technically, the website is built on WordPress using modern plugins and frameworks, optimized for performance and mobile responsiveness. It integrates analytics and marketing tools like Google Tag Manager and HubSpot, and employs a cookie consent mechanism compliant with GDPR. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and professional content. The domain registration data is minimal but consistent with the business claims. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Regular security audits of third-party scripts and further accessibility improvements would strengthen the security posture and user experience.

K

Kestria ry

kestria.com

68

Kestria ry operates as the world’s largest executive search alliance, connecting boutique executive search firms globally to provide leadership recruitment services across multiple industries and functions. Founded in 2020, the organization has established a strong market position with offices spanning 6 continents, 40+ countries, and 90+ cities, targeting companies seeking executive talent and search firms wishing to join the alliance. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, jQuery, and Google Maps API, likely running on a Django backend. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Privacy and cookie policies are well implemented with explicit consent mechanisms, indicating good compliance with GDPR. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers. There is no public security policy or incident response information, nor a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, Kestria’s website presents a trustworthy and professional digital presence with strong business credibility and privacy compliance. Strategic enhancements in security policies and technical security controls would further strengthen its posture.

M

Musée des Beaux-Arts de Bordeaux

musba-bordeaux.fr

57

The Musée des Beaux-Arts de Bordeaux is a well-established cultural institution showcasing European art from the 15th to the 20th century. It offers permanent collections, temporary exhibitions, educational programs, and public events, serving a broad general audience including families, students, and art enthusiasts. The museum is positioned as a key cultural entity within Bordeaux, supported by official city partnerships and a strong online presence. Technically, the website is built on Drupal 11, leveraging modern web technologies such as jQuery and Bootstrap for responsive design. It incorporates privacy and cookie consent management via Tarteaucitron and uses Piano Analytics for visitor tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks explicit security headers and a published security policy or incident response information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of WHOIS data slightly reduces trust but does not detract from the legitimacy indicated by the content and official affiliations. Strategic improvements in security transparency and header implementation would further strengthen the site’s security and compliance stance.

E

Eurométropole de Metz

eurometropolemetz.eu

66

The Eurométropole de Metz website serves as the official digital presence of the metropolitan government entity responsible for the Metz region in France. It provides comprehensive information about local governance, public services, urban planning, cultural activities, and economic development initiatives. The site targets residents, businesses, visitors, and public stakeholders, offering a broad range of civic resources and support. The business model is that of a public sector government authority, focusing on service provision and community engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery, Foundation CSS framework, and OpenLayers for mapping. It integrates Matomo analytics for user tracking with GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could enhance its posture. From a security perspective, the site enforces HTTPS and employs explicit cookie consent aligned with GDPR requirements. However, it lacks visible HTTP security headers and does not provide explicit security policies or incident response contacts. The WHOIS data is privacy protected by EURid, which is typical for EU domains and justified for this public entity. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-maintained, with a solid foundation for public service delivery. Strategic recommendations include enhancing HTTP security headers, publishing security and incident response policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

Stanford Health Care

stanfordhealthcarenow.org

66

Stanford Health Care is a leading academic medical center and healthcare provider delivering advanced medical services including cancer treatment, heart disease care, brain disorder treatment, and primary care. The organization leverages cutting-edge technology and research to provide compassionate, patient-centered care. Their digital presence is supported by a robust technical infrastructure including Adobe Experience Manager CMS, AWS hosting, and modern analytics tools such as Google Analytics and Adobe Launch. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to patients, healthcare professionals, and visitors. Security posture is strong with HTTPS enforcement and domain security best practices, though DNSSEC is not enabled. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR and related regulations. Overall, the website reflects a mature, trustworthy healthcare institution with a high level of digital maturity and security awareness.

A

AGI - Information Management Consultants

dandelon.com

60

dandelon.com is a specialized academic library catalog enrichment platform operated by AGI - Information Management Consultants, based in Germany. It serves a European community of academic libraries by providing AI-enhanced indexing, translation, and detailed content extraction from printed and electronic books. The platform is non-commercial, free for private use, and emphasizes privacy and data protection. Technically, it is built on IBM Domino/XPages with Dojo and Bootstrap, hosted on German public library infrastructure. Security posture is good with HTTPS and minimal tracking, though DNSSEC and security headers could be improved. The website is well-structured, content-rich, and trustworthy with a long domain history.

T

The Conference Forum

drug-delivery.org

58

Drug-delivery.org is a specialized content and event platform serving the drug delivery and formulation ecosystem. It operates under The Conference Forum brand, providing industry professionals with conferences, editorial articles, podcasts, webinars, and marketing services. The website targets pharmaceutical and biotech stakeholders interested in drug delivery innovations and partnerships. The business model focuses on content dissemination and event organization within a niche healthcare sector. The domain is newly registered in 2023, consistent with the business timeline, and hosted on Amazon AWS infrastructure with CloudFront CDN for performance.

T

The Conference Forum

theconferenceforum.org

60

The Conference Forum is a specialized event organizer and content provider serving the pharmaceutical, biotechnology, and drug delivery sectors. Founded in 2010, it offers a portfolio of conferences, webinars, podcasts, and editorial content aimed at professionals and executives in these industries. The business model centers on delivering industry-specific knowledge and networking opportunities, supported by marketing services tailored to the medicine development ecosystem. The website reflects a mature and consistent brand presence with a clear focus on its niche audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Slick Carousel, Select2, and integrates advanced analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. Hosting is provided by Bluehost Inc., and the site uses HTTPS with a valid SSL certificate. Mobile optimization and user experience are good, though accessibility and SEO could be improved. The site lacks a CMS signature, suggesting a custom or proprietary platform. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms from abuse. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact information is limited to a web form, with no direct emails or phone numbers published. The domain registration is consistent and legitimate, with a long history and no privacy protection, reinforcing trustworthiness. Overall, the website is professionally maintained and serves its business purpose well. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust. The site is safe for general audiences and does not contain any adult or questionable content.

N

Naše Toustárna

nasetoustarna.cz

51

Naše Toustárna is a small artisan bakery business based in the Czech Republic, specializing in handcrafted breads, pastries, and coffee. The website presents a professional and well-branded digital presence with clear descriptions of their passion for traditional baking methods and local products. The business targets general consumers interested in quality bakery goods with a focus on craftsmanship and ecological values. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Instagram Feed, providing a moderate level of digital maturity and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, although the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

P

Pražská paroplavební společnost a.s.

paroplavba.cz

63

Pražská paroplavební společnost a.s. is a historic Czech company established in 1865, specializing in passenger water transport and leisure cruises on the Vltava river in Prague and surrounding areas. The company operates two culturally significant paddle steamers and offers a range of services including sightseeing cruises, gastronomic events, and boat rentals for private and corporate occasions. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with HTTPS enforced and cookie consent mechanisms in place. Security posture is good but could be improved by adding explicit security headers and publishing a security policy. The absence of WHOIS data limits domain trust assessment, but the business information and content quality strongly indicate legitimacy. Overall, the site is well-positioned for its target audience of tourists and event clients, with a strong brand and consistent messaging.

D

DVORCE TŘEBOŇ s.r.o.

dvorce.cz

58

Penzion Dvorce is a small hospitality business located in the South Bohemian region of the Czech Republic, offering accommodation and dining services with a focus on biofarm products and family-friendly experiences. The website presents a professional and consistent brand image, targeting families, couples, and tourists interested in nature and regional cuisine. The business model integrates accommodation, restaurant services, and gift voucher sales, positioning itself as a regional eco-friendly hospitality provider. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and SEO practices. The site is served over HTTPS with valid SSL, but lacks some security headers and formal privacy and terms of service pages, which are areas for improvement. Cookie consent is implemented, indicating some level of privacy compliance. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS data limits domain trust assessment. The site uses tracking pixels from Facebook and Google Analytics, with moderate user tracking levels. Overall, the website is safe, family-friendly, and professionally maintained, but could enhance compliance and security transparency. Recommendations include publishing privacy and terms policies, adding security headers, implementing a security.txt file, and verifying domain registration details to improve trust and compliance.

P

PRAGUE BOATS s.r.o.

prague-boats.cz

61

Prague Boats s.r.o. is a well-established company specializing in river cruises and boat rental services on the Vltava River in Prague. With over 30 years of experience, the company emphasizes sustainable and eco-friendly boating, operating a modern fleet including fully electric boats. Their market position is strong locally, targeting tourists and event organizers seeking sightseeing, dining, and private event cruises. The website is professionally designed, mobile-optimized, and offers multilingual support with online booking capabilities. Technically, the website employs modern JavaScript libraries such as Swiper.js and Glide.js for interactive content, integrates multiple marketing and analytics tools including Facebook Pixel and Bing UET, and uses Google Tag Manager for tag management. The site is served over HTTPS with good performance and accessibility features, though some security headers are missing. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies, vulnerability disclosure, and incident response contacts. WHOIS data is unavailable, which reduces trustworthiness slightly but is mitigated by clear business registration info and professional web presence. Overall, the website and business demonstrate a mature digital presence with room for improvement in transparency of privacy and security policies. Strategic recommendations include publishing privacy and terms of service pages, enhancing security headers, and providing vulnerability disclosure information to strengthen trust and compliance.

S

Stadt Trier

trier.de

63

The Stadt Trier website serves as the official digital portal for the city of Trier, Germany, providing a broad range of municipal services, citizen information, cultural events, and administrative resources. It targets residents, visitors, and businesses, positioning itself as a comprehensive government resource. The site is well-branded, professionally designed, and offers extensive navigation and content coverage, reflecting a mature digital presence for a public sector entity. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and privacy-focused analytics via Matomo, hosted on Azure Cloud infrastructure. Accessibility features such as Eye-Able tools and social share privacy plugins enhance user experience and compliance. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and privacy-respecting analytics, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a low-risk profile with a high degree of trustworthiness and professionalism. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

O

Ogenus Offshore UK Management Ltd

ogenusoffshore.com

60

Ogenus Offshore UK Management Ltd is a recruitment and manpower company specializing in supporting global oil and gas and renewable energy projects. Founded in 2018 and based in Athens, Greece, with presence in Scotland, UK, the company offers comprehensive recruitment services including marine crewing, drilling crews, inspection and maintenance manpower, and HR workforce strategy. Their market position is strengthened by a claimed 95% success rate in timely placements and a global presence in over 7 countries. The website is professionally designed using WordPress and Elementor, optimized for SEO with Yoast, and includes a cookie consent mechanism compliant with GDPR. However, direct contact information such as emails and phone numbers are not prominently displayed, relying instead on contact forms.

I

INTEC S.A.

intec.gr

53

INTEC S.A. is a well-established Greek company specializing in providing digital solutions, products, and services to the industrial and energy sectors within Greece. The company positions itself as a leading supplier in the Greek industrial market, offering key services such as installation, training, maintenance, mechanical installation supervision, and cybersecurity solutions. The website reflects a professional B2B business model targeting industrial clients and energy companies. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap 5, jQuery, and Font Awesome, and it is optimized for mobile devices with good accessibility features. The presence of Google Analytics indicates moderate user tracking with a cookie consent mechanism in place, although a formal privacy policy is missing. Security posture is adequate with HTTPS enabled and accessibility tools implemented, but lacks explicit security headers and published security policies. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the company and its online presence.

reNews (operated by Renews Ltd) is a well-established renewable energy news platform founded in 2002, providing comprehensive coverage of offshore wind, onshore wind, solar, wave & tidal, energy storage, finance, grid, hydro, and industry people. The website targets renewable energy professionals, investors, and enthusiasts, offering news articles, daily newsletters, company profiles, and premium subscription content. Technically, the site uses modern web technologies including jQuery, Google Analytics, Google reCAPTCHA, and ShareThis, hosted behind Cloudflare DNS. The CMS is Umbraco, and the site is mobile-optimized with moderate performance. Security posture is decent with HTTPS and clientTransferProhibited domain status, but lacks DNSSEC and security headers. Privacy compliance is basic with a terms and conditions page referencing privacy but no dedicated privacy or cookie policy pages or consent mechanisms. Overall, the site is professional and trustworthy with room for improvement in security and privacy transparency.

Ε

ΕΛΕΤΑΕΝ

eletaen.gr

61

ΕΛΕΤΑΕΝ is a Greek scientific association dedicated to wind energy, providing information, advocacy, and educational resources to the public and stakeholders. The website serves as a comprehensive portal featuring news, statistics, events, and campaigns related to renewable energy in Greece. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though explicit contact details and security policies could be enhanced for better transparency and incident readiness.

D

DeTect, Inc.

detect-inc.com

55

DeTect, Inc. is a specialized technology company focused on advanced radar and remote sensing systems primarily serving the wind energy, aviation safety, and security sectors. Established in 2003, the company offers a range of products including bird and drone detection radars, security surveillance radars, and mitigation systems designed to enhance environmental protection and flight safety. Their market position is that of a niche leader with a strong focus on B2B clients requiring sophisticated detection technologies. The website infrastructure is built on WordPress with Elementor, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and CookieYes for consent management. The site demonstrates good digital maturity with responsive design, SEO optimization via Yoast SEO Premium, and basic accessibility features. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and Google reCAPTCHA implemented to prevent spam and bot attacks. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Privacy compliance is well addressed with a comprehensive privacy policy and a granular cookie consent mechanism aligned with GDPR requirements. Overall, the website presents a professional and trustworthy front for DeTect, Inc., with strong business credibility and technical implementation. Strategic improvements in security transparency and performance optimization could further enhance their digital presence and risk posture.

C

CLS (Collecte Localisation Satellites)

cls.fr

64

CLS (Collecte Localisation Satellites) is a large multinational company founded in 1986, specializing in satellite data collection and Earth observation services. The company operates globally with 35 sites and focuses on environmental monitoring, maritime security, sustainable fisheries, mobility, and energy infrastructure. CLS leverages advanced technologies such as data science, AI, and machine learning to provide actionable insights to governments, environmental agencies, and industry sectors. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. Technically, the website is built on WordPress using the Divi theme and incorporates modern JavaScript libraries like Swiper.js and GSAP. It employs HTTPS with good SSL configuration and uses hCaptcha for form security. The site includes detailed privacy and cookie policies with consent mechanisms, indicating good privacy compliance. Analytics are implemented via Google Tag Manager with moderate user tracking. From a security perspective, the site shows good practices such as HTTPS enforcement and CAPTCHA usage but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain legitimacy verification, but the professional web presence and certifications support trustworthiness. Overall, CLS presents a strong business and technical profile with good security posture and privacy compliance. The main risk is the lack of publicly available WHOIS data, which should be further investigated to confirm domain registration legitimacy.

C

Churchill

churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders in Paris and Lyon. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced tools and third-party services to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with a strong focus on SEO and user experience. Technically, the website is built on a modern WordPress platform with performance optimizations via WP Rocket, analytics through Matomo and Google Tag Manager, and cookie consent managed by Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, explicit security headers are not visibly configured, and no public security policy or incident response information is provided. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data limits domain trust verification. Privacy compliance is strong with comprehensive policies and consent mechanisms. Overall, the site demonstrates professionalism and trustworthiness, though domain registration transparency is lacking. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency to bolster trust and compliance.

A

Agence tactee

seoh.fr

49

Tactee is a French digital agency founded in 2014, specializing in SEO, SEA, inbound marketing, and website creation and redesign. The agency targets SMEs, startups, and large groups seeking to enhance their digital presence and conversion rates. With multiple agency locations across France and a portfolio of notable clients, Tactee positions itself as a trusted partner in digital marketing. Technically, the website is built on WordPress with modern tools such as Yoast SEO, Google Tag Manager, and marketing automation via Plezi, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing vulnerability disclosure information.

A

America250PADelco

america250padelco.org

56

The website america250padelco.org serves as the official online presence for the Delaware County, Pennsylvania committee dedicated to celebrating America's 250th birthday. The site provides informational content about the committee's activities and events, targeting a general audience interested in local government and community celebrations. The website is professionally designed with consistent branding and good content relevance, though it lacks detailed business information and contact data. Technically, the site uses modern web fonts and JavaScript libraries, hosted on a platform associated with f-static.com, but does not reveal advanced frameworks or CMS details. Security posture is moderate; HTTPS is implied but no security headers or policies are detected, and WHOIS data is unavailable, limiting domain trust assessment. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is functional and informative but would benefit from enhanced security and compliance features.

V

Visit Philadelphia

visitphilly.com

59

Visit Philadelphia operates as the official tourism and visitor information website for the city of Philadelphia, providing comprehensive resources including hotels, events, dining, and local attractions. The site targets tourists, families, and culture enthusiasts, positioning itself as the authoritative source for planning visits to Philadelphia. The business model centers on destination marketing and travel facilitation, leveraging partnerships with local hotels and event organizers. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Klaviyo, and various advertising and tracking integrations, ensuring good SEO, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a public security policy or incident response information. The absence of WHOIS registration data is unusual but does not detract significantly from the site's legitimacy given its professional presentation and official branding. Overall, the website is a well-maintained, trustworthy resource for Philadelphia tourism.

P

PIBS

pibs.cz

63

Prague International Business School (PIBS) is an established educational institution based in the Czech Republic, specializing in advanced management education including MBA, DBA, and LL.M programs. The school targets current and future leaders seeking to enhance their managerial knowledge and skills, leveraging a network of experienced professors and business leaders. The website reflects a professional and consistent brand image with clear navigation and relevant content for prospective students. Technically, the site is built on WordPress using the Genesis Framework and Yoast SEO, hosted by Active24, and employs modern web technologies including Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers are not detected and could be improved. Privacy compliance is good with a detailed cookie consent mechanism, but explicit privacy and terms of service pages are not found in the provided content. Overall, PIBS presents a trustworthy and professional online presence suitable for its educational mission.

G

Groupe Sonatel

sonatel.sn

56

Groupe Sonatel is the leading telecommunications operator in Senegal, providing comprehensive fixed, mobile, internet, and data services. The company maintains a strong market position as the first operator in the region, with subsidiaries in Mali, Guinea, Sierra Leone, and Guinea Bissau. The website reflects a professional corporate presence with clear branding and a focus on business customers, investors, and the general public. Technically, the site is built on WordPress with modern plugins and SEO optimizations, offering good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and spam protections, though some improvements like DNSSEC and security headers could enhance it further. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and credible, supporting Sonatel's business objectives effectively.

G

GAINDE 2000

gainde2000.com

51

GAINDE 2000 is a Senegal-based technology company specializing in comprehensive digital transformation solutions for enterprises and public administrations across Africa. The company positions itself as a pioneer in African digital solutions, offering services such as sector expertise, partnerships, and international presence. Their website reflects a professional and consistent brand image with clear service offerings and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and formal privacy/cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and social presence suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security practices.

N

NIBE

nibe.cz

76

NIBE is a well-established European company specializing in sustainable heating and cooling solutions, primarily through advanced heat pump technology. The website targets the Czech market with localized content and offers a comprehensive product range including heat pumps, water heaters, ventilation units, and related accessories. The company positions itself as a leader in energy-efficient home comfort solutions. Technically, the website is built on the SiteVision CMS platform, utilizing modern web technologies such as jQuery, Uikit, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, reCAPTCHA integration, and a robust cookie consent mechanism via OneTrust, reflecting good privacy compliance and user data protection. The absence of exposed sensitive data and the use of security best practices contribute to a strong security posture. Overall, the website demonstrates professionalism, compliance with GDPR, and a trustworthy digital presence, although WHOIS data is privacy protected and unavailable. Strategic recommendations include publishing explicit security policies and incident response information to further enhance trust and transparency.

I

Ifor Williams Trailers Benelux

iforwilliams.net

51

Ifor Williams Trailers Benelux operates a website focused on the sale and distribution of trailers, including livestock, horse, and general-purpose trailers. The company positions itself as a market leader in the UK and serves a Belgian audience with Dutch and French language options. The website provides product catalogs, dealer information, and company background, targeting general consumers and businesses needing trailers. Technically, the site uses standard web technologies including JavaScript, jQuery, and Google Analytics for tracking. The hosting is provided by european-server.com, and the domain is well-established since 2003, indicating a mature business presence. Security posture is moderate; while HTTPS is implied, no advanced security headers or DNSSEC are enabled, and no explicit security policies are published. Privacy compliance is basic with a cookie consent banner and a privacy/cookie policy page present. Overall, the site is professional and functional but could improve in security and privacy transparency.

E

EQUINET s.r.o.

equitv.cz

47

EquiTV.cz is a specialized internet television platform focused on equestrian sports and related content, operated by EQUINET s.r.o. The website offers live streaming, video and audio content, podcasts, and news targeting horse enthusiasts primarily in the Czech Republic. The business operates as a niche media provider with advertising and fan club engagement as key revenue streams. Technically, the site uses modern web technologies including jQuery, Bootstrap, and media players, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which reduces transparency but the site content and business information appear legitimate. Overall, the site is professional and trustworthy within its niche.

E

EQUINET s.r.o.

jezdci.cz

46

Jezdci.cz is a Czech media platform specializing in equestrian sports, providing news, event schedules, live streaming information, and community engagement through fan clubs and applications. Operated by EQUINET s.r.o., the website serves a niche audience of equestrian enthusiasts primarily in the Czech Republic. The site demonstrates a solid market position within this specialized media sector, offering advertising opportunities and partnerships with related equestrian media entities. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and media presentation, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and consent management implemented, though there is room for improvement in security headers and explicit policy disclosures. The absence of WHOIS data is a notable concern for domain legitimacy, but the website content and business information appear professional and trustworthy. Overall, the site is a well-maintained media resource with moderate technical maturity and a good user experience.

Hobbyhorses Slovakia is a small e-commerce retailer specializing in hobby horses and related accessories, primarily targeting hobby horse enthusiasts and families in Slovakia. The website is built on WordPress using the Divi theme and several plugins to enhance functionality and multilingual support. The hosting is provided by HOSTINGER operations, UAB, with DNS managed via Cloudflare. The site demonstrates good content quality and user experience with a clear focus on its niche market. Technical infrastructure is modern but could benefit from enhanced security measures such as DNSSEC and improved security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism in place, though terms of service and security policies are absent. Overall, the site is safe for general audiences and shows moderate trustworthiness and professionalism.

CLIP Group S.A. is a well-established logistics company based in Poland, specializing in intermodal container terminal operations, storage, and transport services including rail and road. The company holds a strong market position as a leading operator in intermodal transport within Europe, supported by certifications and active participation in EU projects. Their website reflects a professional and comprehensive digital presence with clear service offerings and active communication channels. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements in security headers and privacy compliance mechanisms are recommended. Overall, the business demonstrates high credibility and operational maturity with room for enhancing privacy and security transparency.

B

bezDodavatele, a.s.

bezdodavatele.cz

42

bezDodavatele, a.s. operates as an alternative energy supplier in the Czech Republic, specializing in green electricity and gas with transparent, floating tariffs that avoid long-term commitments. The company positions itself as a customer-friendly, eco-conscious provider leveraging market opportunities to offer competitive pricing. Their services include electricity and gas supply, smart electricity tariffs, photovoltaic surplus buyback, and online calculators for savings estimation. The website is professionally designed, mobile-optimized, and provides clear navigation and multiple contact channels including forms, email, and phone support. Social media presence is active across major platforms, enhancing customer engagement. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Highcharts for interactive content. It integrates Google Tag Manager and CookieYes for analytics and cookie consent management, respectively. The site uses HTTPS with good SSL configuration, though additional security headers could improve its security posture. Forms are implemented securely using Gravity Forms, with consent mechanisms in place for data privacy compliance. Security-wise, the site demonstrates good practices including HTTPS enforcement and cookie consent, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is privacy protected, which is justified for this business type, though it limits domain age and registrant transparency. Overall, the site is trustworthy, professional, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and improving accessibility compliance. These steps will strengthen trust and security culture, supporting long-term business growth and customer confidence.

BENEKOV ENERGY SYSTEM operates a specialized energy monitoring platform branded as BENEKOV ENERGY MONITOR, focusing on photovoltaic energy systems. The website serves primarily as a login portal for users to access monitoring data, indicating a B2B or B2C service model centered on energy management. The company appears to be a small-sized entity based in the Czech Republic, founded around 2021, with a niche market position in energy monitoring services. Technically, the website employs standard JavaScript libraries such as jQuery, SweetAlert2, and ECharts for UI and data visualization. Hosting is managed via Czech providers, with domain registration consistent with the business timeline. However, the site lacks modern security headers, explicit HTTPS confirmation, and comprehensive SEO or accessibility features, indicating room for technical maturity improvements. From a security perspective, the site includes a basic login form but lacks advanced protections such as CSRF tokens, security headers, and visible HTTPS enforcement. No privacy or cookie policies are present, and contact information is limited to a single email address. These factors suggest a low to moderate security posture with significant opportunities for enhancement to meet compliance and best practice standards. Overall, the website is functional but minimalistic, with moderate trustworthiness based on domain legitimacy and business consistency. Strategic improvements in security, privacy compliance, and content richness are recommended to enhance user trust and regulatory adherence.

E

EVmate s.r.o.

evmate.cz

43

EVmate s.r.o. is a Czech-based company specializing in configurable home electric vehicle chargers, offering customers tailored wallbox solutions through an online configurator and e-commerce platform. The company targets electric vehicle owners seeking convenient and certified home charging options, positioning itself as a niche player in the Central European EV charging market. The website is professionally designed with good content quality, clear navigation, and multi-language support, reflecting a mature digital presence. Technically, the site leverages modern technologies including nopCommerce, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility with transparent contact information, customer testimonials, and CE certification. The domain WHOIS data aligns well with the business claims, enhancing trustworthiness.

G

Ghoda s.r.o.

absorbinecz.cz

40

The website www.absorbinecz.cz represents Ghoda s.r.o., the exclusive distributor of the Absorbine brand in the Czech and Slovak markets. Absorbine is a historic brand specializing in horse care products including cosmetics, insect repellents, hoof care, muscle and joint treatments, and leather care. The site targets horse owners and equestrian enthusiasts, offering a range of retail products with a focus on quality and tradition dating back to 1892. The business model is retail distribution with a clear market position as the exclusive local representative of the brand. Technically, the website uses modern web technologies such as Bootstrap 5, jQuery, Google Analytics, and Facebook Pixel for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Privacy and cookie policies are implemented with GDPR compliance and user consent mechanisms. From a security perspective, the site uses HTTPS and includes cookie consent banners, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is missing, which reduces domain registration trust but the website content and business information appear legitimate and professional. Overall, the website is well-structured, professional, and trustworthy from a business and user perspective. The main risk is the lack of WHOIS transparency and some security header improvements. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining compliance with privacy regulations.

The website 'Use Social Proof' appears to be a minimal WordPress-based site with very limited content, primarily a default 'Hello world!' post. There is no clear business description, contact information, or privacy and security policies present. The technical infrastructure leverages common WordPress plugins and themes, including Astra theme, Yoast SEO, Google Analytics, and Google Tag Manager, indicating a basic digital maturity level. Security posture is moderate due to HTTPS usage and spam protection, but lacks advanced security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but lacks professionalism, business credibility, and compliance features.

A

Analyzati

analyzati.com

52

Analyzati is a privacy-focused website analytics provider offering a lightweight, GDPR-compliant alternative to Google Analytics. The company provides real-time visitor tracking, event tracking, and detailed analytics with a focus on user data privacy. The business operates on a SaaS subscription model with freemium and paid plans, targeting website owners and developers who prioritize privacy. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. Hosting is likely via NameCheap, consistent with the domain registrar data. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is claimed but lacks visible privacy and cookie policies on the homepage. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in transparency and security best practices.

N

Nadační fond Rozum a Cit

rozumacit.org

58

Nadační fond Rozum a Cit is a well-established Czech non-profit foundation dedicated to supporting foster families and children with psychological and social challenges. With over 27 years of experience, it provides key services such as funding psychotherapies, organizing support meetings, and managing donations through trusted platforms. The website reflects a professional and consistent brand image with clear contact information and GDPR compliance indications. Technically, the site is built on Joomla CMS with modern libraries and frameworks, offering good mobile optimization and moderate performance. Security posture is solid with HTTPS and CSRF protections, though improvements in security headers and cookie consent are recommended. WHOIS data is unavailable due to privacy protection, which is typical for non-profits and does not detract from the site's legitimacy. Overall, the site is trustworthy, user-friendly, and serves its target audience effectively.

W

Wine Point Plzeň

winepointplzen.cz

53

Wine Point Plzeň is a small, specialized wine retailer located in Plzeň, Czech Republic, focusing on Czech and Moravian wines. The business offers a combination of retail sales, wine tastings, events, and corporate services, supported by an e-commerce platform. The website is built on WordPress using Elementor, featuring modern frontend technologies and a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks explicit security policies and cookie consent mechanisms. The domain registration is consistent and transparent, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy image but should improve privacy compliance and security transparency.

T

Tvůj Dj

tvujdj.cz

39

Tvůj Dj is a Czech-based small business specializing in tailored music event services including weddings, corporate events, clubs, and private parties. Established in 2005, the company has a solid market presence in the Czech Republic and offers a broad portfolio of services such as event production, audiovisual production, and technical equipment rental. The website reflects a professional and consistent brand image with active social media channels and well-structured content. Technically, the site is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

T

TISKÁRNA SWL

tiskarna-swl.cz

50

TISKÁRNA SWL is a small Czech printing company specializing in offset and digital printing services, including business cards, flyers, catalogs, and calendars. The company claims 20 years of experience and targets local businesses and individuals seeking quality print products. The website is built on the inPage CMS platform and uses legacy JavaScript libraries such as jQuery and Lightbox. Hosting appears to be provided by Czechia.com. The site is accessible with no blocking or WAF detected, but lacks modern security headers and privacy policies. Contact information is clearly presented, enhancing business credibility. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small businesses.

E

EDM s.r.o.

edm-sro.cz

52

EDM s.r.o. is a Czech Republic based company founded in 2010, specializing in postal mailroom services for businesses, document digitization, and printing center operations primarily in Prague. The company targets business clients requiring outsourcing of mail handling and document management. Their market position appears local and specialized with a small company size. The website is built on WordPress CMS with standard plugins and external resources, showing moderate technical maturity and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and incident response information. Overall, the website is functional but could improve in privacy transparency and security best practices. The domain registration data is consistent with the business profile, supporting legitimacy.

S

Středočeský kraj

bezpecnevotice.cz

54

Bezpecnevotice.cz is a regional government website operated under the Středočeský kraj authority, providing public safety information, announcements, and contact details for police and municipal services in the Votice area. The site serves local residents and community members seeking crime prevention updates and emergency contact information. The business model is a government-funded public service project focused on community safety and crime prevention. Technically, the website is built on WordPress 5.3.20 with common plugins such as Yoast SEO and uses standard web technologies including jQuery, Slick Carousel, and Lightbox. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. However, some scripts are loaded over HTTP, which may cause mixed content warnings, and Google Analytics is incompletely configured. From a security perspective, the site uses HTTPS but lacks explicit security headers and advanced security policies. The cookie consent banner is implemented, indicating some privacy compliance, but no detailed privacy or security policies are published. No incident response or vulnerability disclosure information is available. The domain registration is consistent with the website's government affiliation and age, supporting legitimacy. Overall, the website is a trustworthy and professional regional government portal with good content quality and user experience. Security posture can be improved by addressing mixed content issues, adding security headers, and enhancing privacy and incident response disclosures. The site poses no content safety risks and is suitable for general audiences.

F

FairCasinos

fair-casinos.com

65

FairCasinos is a specialized online platform dedicated to providing comprehensive reviews and ratings of online casinos targeting Canadian players. Established in 2024, the site offers detailed insights into casino bonuses, game variety, licensing, and payment methods, positioning itself as a trusted affiliate and review resource in the Canadian gambling market. The platform leverages WordPress with modern SEO and user experience optimizations to deliver content effectively across devices. Security posture is solid with HTTPS and domain transfer protections, though improvements in DNS security and published policies are recommended. Overall, the site presents a professional and trustworthy front for users seeking reliable casino information.

N

National Breast Cancer Foundation, Inc.

nbcf.org

77

National Breast Cancer Foundation, Inc. is a well-established non-profit organization dedicated to providing help and hope to those affected by breast cancer through early detection, education, and support services. The organization has a strong market position supported by recognized certifications such as Four Star Charity and Platinum Transparency awards. Their website reflects a professional and trustworthy presence with comprehensive content targeting individuals affected by breast cancer and supporters. Technically, the website is built on WordPress with modern technologies and optimized for performance, mobile, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are not publicly available. Overall, the website demonstrates high credibility and trustworthiness, with a moderate risk due to lack of WHOIS transparency but justified by privacy protection for a non-profit entity.