Security Directory

C

Chráníme mořské želvy z.s.

morskezelvy.cz

9

Chráníme mořské želvy z.s. is a Czech Republic based non-profit organization dedicated to the protection and conservation of marine turtles, primarily in Indonesia and Sri Lanka, with educational outreach in the Czech Republic. The organization focuses on protecting turtle nesting sites, relocating eggs to safety, releasing hatchlings, and educating local communities and children about environmental stewardship. Their market position is niche within marine conservation, supported by partnerships with governments, universities, and volunteers. The website demonstrates a good level of content quality and user engagement through social media and donation transparency. Technically, the site uses common web technologies such as jQuery, Google Analytics, and MailChimp, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and some privacy consent mechanisms, but lacks advanced security headers and detailed privacy policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Overall, the site is professional and trustworthy for its non-profit mission, though improvements in security and compliance documentation are recommended.

K

KAO.cz

kao.cz

10

KAO.cz is a Czech-based small business specializing in comprehensive digital solutions including web design, graphic design, media production (photo and video), and custom internet systems such as reservation and e-commerce platforms. The company targets small businesses, sports clubs, cultural organizations, and individual entrepreneurs, positioning itself as a one-stop provider for digital and media services. Founded in 2007, KAO.cz demonstrates a stable market presence with a focus on local and regional clients. Technically, the website employs a custom or proprietary CMS with a technology stack that includes jQuery, Owl Carousel, and Google Fonts. The site is moderately performant, mobile-optimized, and uses standard web technologies with custom scripts for UI and cookie management. Hosting is provided through a Czech registrar and hosting provider, consistent with the business location. From a security perspective, the site uses HTTPS (assumed from domain and modern standards), implements a detailed cookie consent mechanism compliant with GDPR, and avoids exposing sensitive data. However, no explicit security policies or incident response information is published, and security headers are not detected in the provided data. Tracking technologies include Google Analytics and Facebook pixels, indicating moderate user tracking. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no signs of adult or questionable content. The domain registration data aligns well with the website's claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular security audits to improve the security posture further.

NRW Partner Zoo is a consortium of 12 major zoos and animal parks in North Rhine-Westphalia, Germany, focused on conservation, education, and providing visitor benefits such as discounted entry. The website is well-structured, informative, and targets families, zoo visitors, and conservation enthusiasts. Technically, it uses modern front-end frameworks like Bootstrap and jQuery, with responsive design and conditional Google Analytics tracking respecting user consent. Security posture is moderate with cookie consent implemented and anonymized analytics, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and strong partner representation.

V

VdZ - Verband der Zoologischen Gärten e.V.

vdz-zoos.org

51

The Verband der Zoologischen Gärten (VdZ) is a reputable non-profit association representing 71 scientifically managed zoos across Germany, Austria, Switzerland, and Spain. The organization focuses on species conservation, animal welfare, education, scientific research, and advocacy. The website reflects a professional and consistent brand presence with comprehensive content targeting zoo visitors, conservationists, researchers, and policymakers. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious patterns were detected. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

F

Fundacja FaniMani

fanipay.pl

35

FaniPay.pl is a specialized online payment platform tailored for foundations and associations in Poland, enabling them to collect donations securely and efficiently. Operated by Fundacja FaniMani since 2016, it integrates with the FaniMani platform and offers features such as simple registration, transparent fees, daily payouts, and donor data access. The platform enjoys trust from over 12,500 NGOs and partners with reputable payment processors like Autopay and Tpay. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are needed in DNSSEC and security headers. Privacy compliance is partial due to the absence of a privacy policy page, but cookie consent is implemented. Overall, the site demonstrates a mature business model with strong credibility in the non-profit sector.

Gočárova Galerie is a regional cultural institution based in Pardubice, Czech Republic, focused on art and architecture exhibitions, educational programs, and community engagement. The gallery operates under the auspices of the Pardubice regional government and offers a variety of exhibitions, workshops for children and adults, and event space rentals. The website is professionally designed, primarily in Czech, with clear navigation and a modern technical stack including jQuery, Foundation, and Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are not evident. The domain registration aligns well with the gallery's founding date, supporting legitimacy. Overall, the site presents a trustworthy and well-maintained digital presence for a government-supported cultural entity.

C

Commune de Villefargeau

villefargeau.fr

63

The website www.villefargeau.fr serves as the official online presence for the commune of Villefargeau in the Yonne department of France. It provides municipal information, local news, event calendars, administrative procedures, and contact details aimed primarily at residents and visitors. The site is positioned as a local government portal with a focus on community engagement and public service. Technically, the site uses a variety of JavaScript libraries including jQuery, Leaflet for mapping, and Jssor Slider for image slideshows, all managed via the WebSee CMS platform. The site is mobile-optimized and accessible, with a clear navigation structure and cookie consent mechanisms in place. Security-wise, the site enforces HTTPS but lacks visible HTTP security headers and formal incident response or vulnerability disclosure information. The absence of WHOIS data reduces domain trustworthiness, though the official nature of the site and consistent branding mitigate concerns. Overall, the site is functional and professional but could improve security posture and transparency.

S

Saint-Georges-sur-Baulche

saint-georges-sur-baulche.fr

44

Saint-Georges-sur-Baulche is a French municipal government website providing comprehensive information and services to local residents, including administrative procedures, urban planning, family portals, and community news. The site serves as the official digital presence of the commune, targeting residents, families, seniors, youth, and local associations. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Bootstrap framework, and Leaflet.js for mapping, ensuring good mobile responsiveness and SEO optimization. The site employs cookie consent mechanisms and Google Analytics with user consent, reflecting a good privacy compliance posture. Security-wise, the site uses HTTPS with an excellent SSL configuration but lacks some HTTP security headers and formal security policies, indicating room for improvement. The WHOIS data is unavailable, likely due to privacy protection or registry policies, but the website content and branding strongly indicate legitimacy as an official municipal site. Overall, the site is professional, trustworthy, and well-maintained, with moderate technical performance and good user experience.

C

Commune de Champs-sur-Yonne

champs-sur-yonne.fr

54

The website champs-sur-yonne.fr serves as the official digital portal for the municipal government of Champs-sur-Yonne, France. It provides residents and visitors with essential information including local news, administrative procedures, municipal services, and contact details. The site is positioned as a trusted local government resource, focusing on transparency and community engagement. The business model is public service oriented, with no commercial activities evident. The website is well-branded and consistent with the identity of a small municipal entity founded in 2014. Technically, the site employs a modern technology stack including Bootstrap, jQuery, and several carousel libraries for UI enhancement. It uses hCaptcha for form protection and a cookie consent management tool (tarteaucitron.js) to comply with privacy regulations. Hosting is provided by OVH, a reputable French hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses hCaptcha to mitigate spam on contact forms. However, it lacks visible HTTP security headers such as CSP or HSTS, and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid foundation for public sector communication. Strategic improvements include enhancing security headers, publishing incident response information, and expanding accessibility compliance. These steps would strengthen the site's security posture and trustworthiness further.

M

Mairie d'Appoigny

mairie-appoigny.fr

52

The website www.mairie-appoigny.fr serves as the official digital portal for the Mairie d'Appoigny, a local government entity in France. It provides residents and visitors with access to municipal news, administrative services, event information, and contact resources. The site is well-structured, featuring modern web technologies such as Joomla CMS, Bootstrap, jQuery, and Vue.js, ensuring a responsive and accessible user experience. The presence of GDPR-compliant cookie consent and clear contact details reflects a commitment to privacy and user rights. Security measures include HTTPS enforcement and CSRF tokens, though additional security headers could enhance protection. The absence of WHOIS data suggests privacy protection, which is reasonable for this type of entity. Overall, the site is trustworthy, professional, and serves its community effectively.

B

Botnation AI

botnation.ai

63

Botnation AI is a well-established technology company specializing in no-code chatbot creation platforms enhanced with AI capabilities. Founded in 2017 and registered in Switzerland, the company offers a SaaS model targeting businesses and agencies seeking to deploy conversational AI solutions across multiple channels such as websites, social media, and messaging apps. Their platform emphasizes ease of use, integration with CRM and APIs, and includes live chat features for seamless human handover. The website demonstrates a mature digital presence with comprehensive content, strong branding, and multiple certifications including GDPR, PCI-DSS, and ISO standards, reinforcing their commitment to security and compliance. Technically, the website is hosted on AWS infrastructure with a modern tech stack including JavaScript and jQuery, optimized for performance and mobile responsiveness. SEO and accessibility are well addressed with structured data and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is mostly met, but the absence of a cookie consent mechanism and incident response contacts are notable gaps. Overall, Botnation AI presents a trustworthy and professional online presence with a clear business model and strong market positioning in the chatbot technology sector. The site is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing privacy controls, improving DNS security, and publishing incident response details to further strengthen trust and compliance.

O

Otipass

otipass.com

57

Otipass is a French company specializing in the digitization of territorial and cultural passes, including tourist and multiservice passes. The company positions itself as a market leader in France with a strong presence in public procurement catalogs and a network of city clients. The website is built on Joomla CMS using modern frameworks and includes integrations with analytics and marketing tools such as Matomo and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy policies and terms of service are not clearly found. WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and client testimonials support a credible business presence. Overall, the site is professional, well-branded, and targets local governments and tourism sectors.

I

Ing. Hana Cindrová

hanacindrova.cz

41

Ing. Hana Cindrová operates a small external accounting office primarily serving clients in the Olomoucký region and across the Czech Republic. The business offers comprehensive accounting, tax processing, and financial reporting services with over 17 years of industry experience. The website is professionally designed using WordPress and the Divi theme, providing clear service descriptions and contact information. Technically, the site is well-structured and mobile-optimized but lacks advanced security headers and privacy compliance features. The absence of WHOIS data limits domain trust assessment, though the site content and contact details appear legitimate. Overall, the site demonstrates a solid business presence with room for improvement in security and compliance.

E

EcoSmart Building

ecosmart-building.com

58

EcoSmart Building is a French company specializing in energy performance and indoor air quality solutions for buildings. The company offers innovative predictive supervision technologies to optimize energy consumption and maintain healthy indoor environments. Their services target building managers and businesses seeking sustainable and efficient building management solutions. The website is built on WordPress using modern plugins such as Elementor and Revolution Slider, hosted by OVH sas. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a professional image with clear contact information but would benefit from enhanced security and privacy disclosures.

A

ANCV Cheque-Vacances

cheque-vacances.com

57

ANCV Cheque-Vacances operates a well-established French government-backed program providing holiday vouchers to individuals and organizations, facilitating access to tourism, leisure, and cultural activities. The website reflects a mature digital presence with a strong brand, extensive partner network, and multiple user segments including public agents, enterprises, and tourism professionals. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use, though some accessibility and security header improvements are recommended. Security posture is solid with HTTPS and bot protection, but lacks some advanced DNS and header configurations. Privacy compliance is minimal on the homepage, with no visible privacy or cookie policies, which should be addressed to meet GDPR standards. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims.

M

Mettler-Toledo International Inc.

mt.com

65

Mettler-Toledo International Inc. operates a professional and comprehensive website targeting B2B customers in laboratory, industrial, and process analytics sectors. The company provides precision instruments and services globally, with a strong market position as a leader in weighing, measuring, and analytical technologies. The website reflects a mature digital presence with multiple business units and detailed contact information. Technically, the site uses Adobe Experience Manager CMS, integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM, and implements cookie consent via OneTrust. Security posture is solid with HTTPS and secure forms, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which is unusual but does not detract from the site's legitimacy given the professional content and branding. Overall, the site is well-structured, compliant with privacy regulations, and trustworthy for its target audience.

G

GardenSpa s.r.o.

higold.hu

56

HIGOLD, operated by GardenSpa s.r.o., is a Slovak-based company specializing in the design, manufacture, and retail of luxury outdoor furniture. The company has a rich history dating back to 1989 and has expanded globally with a presence in over 150 countries. Their business model focuses on high-quality, modular outdoor furniture collections targeting discerning customers seeking premium products. The website supports multiple languages and offers an online showroom and catalog access, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google APIs, and the Nette framework, providing a responsive and user-friendly experience. Security measures include Google reCAPTCHA v3 integration on contact forms, but the absence of explicit security headers and privacy policy pages indicates room for improvement. The WHOIS data is unavailable due to EURid privacy policies, but the website content and contact information suggest a legitimate and professional business. Overall, the site scores well on content quality and business credibility but should enhance privacy compliance and security posture.

K

Kanguroo-event

kanguroo-event.fr

46

Kanguroo-event.fr is a French event management platform specializing in complex event scenarios such as protocol invitations, conferences, and sports federations. The company offers a customizable SaaS solution with features including invitation management, access control via QR codes, seating arrangements, payment processing, and multi-language support. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. However, the absence of WHOIS data limits domain trust verification. Security posture is solid with HTTPS and some security headers, but could be improved with explicit policies and disclosures. Privacy compliance is basic with a cookie consent mechanism but no clear privacy policy page. Overall, the platform appears legitimate and professional, targeting organizers of specialized events.

S

SELA Immo

sela-immo.fr

50

SELA Immo is a regional real estate company specializing in the sale and rental of land, houses, and apartments primarily in the Loire-Atlantique region of France. The website serves both individual consumers and professional clients, offering property listings, advice, and partnership opportunities with construction companies. The company positions itself as a trusted local real estate developer with a focus on sustainable and community-oriented projects. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Analytics, providing a modern and responsive user experience. However, some technical improvements are possible, including better security header implementation and full configuration of analytics tools. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is professional, content-rich, and compliant with GDPR privacy requirements, making it a credible platform for real estate services in its market niche.

L

Loire-Atlantique Développement

boxloireatlantique.com

54

LA Box Loire-Atlantique is a French regional e-commerce platform specializing in local and responsible tourism gift boxes, offering curated weekend stays and activities in the Loire-Atlantique region. The company, represented by Loire-Atlantique Développement, targets consumers interested in authentic local experiences and sustainable tourism. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supported by modern WordPress and WooCommerce technologies. SEO and structured data are well implemented, enhancing discoverability and user engagement. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit contact information or incident response details are visible. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, suggesting a need for further verification. Overall, the website presents a trustworthy and professional front for a niche hospitality business, with room for improvement in security and transparency.

The website sorties-scolaires-loireatlantique.com is operated by Loire-Atlantique Développement and serves as a regional platform for organizing school outings and pedagogical stays in the Loire-Atlantique area of France. It targets schools, teachers, and parents of primary and college students, offering educational trips and classes de découvertes. The site is positioned as a trusted regional educational tourism service provider with a medium-sized organizational footprint, founded in 2019. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Google Analytics, and Complianz GDPR for cookie consent. The hosting registrar is Nuxit, and the site uses HTTPS with a good SSL configuration. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and reCAPTCHA on forms but lacks some security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include adding a comprehensive privacy policy, enabling DNSSEC, and enhancing security headers to strengthen the security posture and privacy compliance.

L

Les Enfoirés

enfoires.fr

60

Les Enfoirés is a prominent French non-profit organization focused on social aid and fundraising through charity concerts and merchandise sales. The website serves as the official platform to engage supporters, partners, and the general public with information about events, news, and donation opportunities. The organization leverages a modern WordPress-based infrastructure with integrations such as Google Tag Manager and OneTrust for cookie consent, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data limits domain trust verification but does not detract from the site's apparent legitimacy and professional presentation.

L

Le Tambour

assoletambour.com

52

Le Tambour is a French non-profit cultural association founded in 2001, dedicated to literary diffusion by connecting literature with other art forms. The organization offers writing workshops, public readings, theatrical performances, and text montages aimed at diverse audiences including schools and urban communities. The website reflects a professional and consistent brand presence with clear contact information and regional partnerships. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

T

TPF

tpf.eu

46

TPF is a well-established global multidisciplinary engineering consultancy headquartered in Belgium, with a strong presence in over 40 countries through multiple subsidiaries. The company offers a broad range of engineering services including consultancy, design, technical asset management, and project management. Their market position is reinforced by recognitions such as BREEAM Excellent certifications and rankings in ENR's Top 50 International Design Firms. The website reflects a professional and consistent brand image targeting engineering clients and infrastructure projects worldwide. Technically, the site is built on Drupal 10 with modern JavaScript libraries and is optimized for mobile and accessibility. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and policies are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

R

Rtone

rtone.fr

61

Rtone is a French product development studio specializing in end-to-end product lifecycle services, from conception to development and management. The company targets businesses and product developers seeking specialized product development expertise. The website is built on WordPress and employs modern digital tools such as Cookiebot for consent management, Matomo and Hotjar for analytics, and Google Tag Manager for marketing integration. The domain is mature, registered since 2007 with OVH, indicating a stable business presence. Technically, the site uses a standard WordPress CMS with Yoast SEO for optimization and includes several third-party scripts for analytics and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and could be improved. From a security and compliance perspective, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is found on the homepage, which slightly reduces privacy compliance and business credibility scores. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are present, supporting the legitimacy of the domain and business. Overall, Rtone presents a professional and trustworthy online presence with room for improvement in transparency and security best practices. Strategic enhancements in published policies and security headers would strengthen compliance and trust.

H

Horizon Project Management

hpmgroupe.com

43

Horizon Project Management (HPM) is a Moroccan-based engineering and project management company specializing in construction project oversight, technical studies, and consultancy services. Established in 2010 and now part of the Ingérop group, HPM serves both private and public sector clients, focusing on real estate, hospitality, transportation, and industrial sectors. The company offers key services including project management assistance, delegated project management, and technical project execution. Their website reflects a professional presence with clear service offerings and client references, targeting construction developers and project owners primarily in Morocco and Africa. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Maps API, hosted by OVH sas. While the site is mobile-optimized and well-structured, some technical issues like a Google Maps loading error and lack of advanced security headers are noted. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

A

Agence SBA

agence-sba.com

11

Agence SBA is a French digital agency based near Poitiers, specializing in custom website creation, digital strategy, web marketing, AI integration, and compliance services such as RGPD and accessibility. The company positions itself as a strategic partner for SMEs and public entities, leveraging over 25 years of experience to deliver innovative and tailored digital solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern libraries and plugins, ensuring good SEO, accessibility, and user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements like DNSSEC and security headers could enhance protection. Overall, the site is professional, trustworthy, and compliant with privacy regulations, reflecting a credible and established business.

M

Mulhouse Alsace Agglomération - m2A

mulhouse-alsace.fr

10

Mulhouse Alsace Agglomération (m2A) is a regional government entity serving 39 communes in the Mulhouse Alsace area of France. The website serves as an official portal providing information on territorial development, public services including water, waste management, mobility, energy, culture, tourism, social services, and environmental initiatives. The organization positions itself as a key regional authority with a broad scope of services aimed at residents and stakeholders in the region. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium, Elementor, AngularJS, and various performance and UI enhancement plugins. It integrates Google Analytics and Google Tag Manager for analytics and uses a chatbot service for user interaction. The site is mobile-optimized and features good SEO and accessibility practices, although some legacy technologies like AngularJS 1.4.14 may pose security concerns. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism. However, explicit security headers are not clearly detected, and the use of an older AngularJS version suggests a need for review and upgrade. No exposed sensitive data or critical vulnerabilities were found in the HTML content. The WHOIS data is unavailable, which slightly reduces domain trust but the official social media presence and content quality support legitimacy. Overall, the website is professional, well-structured, and serves its public service mission effectively. Strategic recommendations include enhancing security headers, upgrading legacy frameworks, and improving transparency in domain registration information to strengthen trust and security posture.

L

La C'ART

lacart.fr

44

La C'ART is a cultural subscription service offering access to 15 museums and art centers in the Lille metropolitan area, targeting residents and visitors interested in arts and culture. The website is well-branded, professionally designed, and provides comprehensive information about the pass, events, and partner institutions. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics tools like Matomo and Facebook Pixel. It is mobile-optimized and includes accessibility features, although some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure information. WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and external references indicate legitimacy. Overall, the site is a reliable and professional platform for cultural engagement in Lille.

E

E-BAAN,SE

hapra.cz

49

HAPRA Design is a Czech digital agency specializing in web design, e-commerce development, SEO, social media management, and online marketing services. With over 20 years of experience, the company offers comprehensive digital solutions aimed at businesses seeking to enhance their online presence. Their service portfolio includes website and e-shop creation, content management, PPC advertising, and technical maintenance, positioning them as a full-service digital partner. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site employs a modern technology stack including PHP, MySQL, JavaScript libraries such as jQuery, Bootstrap framework, and integrates marketing and analytics tools like Google Tag Manager and Facebook SDK. The site is mobile-optimized and uses a custom CMS named publishWEB. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish security policies, and improve accessibility compliance to further strengthen their security posture and trustworthiness.

E

e-BAAN Internet s.r.o.

ostravski.cz

40

e-BAAN Internet s.r.o., operating under the brand 'Ostravski', is a Czech Republic-based small technology company specializing in web design, e-commerce solutions, and related digital services. With over 20 years of experience and a customer base exceeding 500 clients, the company offers comprehensive web development services including domain registration, hosting, SEO, graphic design, and content management. Their market position is focused on small businesses, freelancers, schools, and municipalities primarily within the Moravian-Silesian region and broader Czech Republic. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs a variety of modern web technologies such as jQuery, Bootstrap modals, Owl Carousel, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search engine visibility. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data raises concerns about domain registration transparency. No explicit security or incident response policies are published, and security headers are missing, which could expose the site to certain risks. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is moderate but could be improved with best practices. The overall risk assessment suggests the website is legitimate and professionally maintained but would benefit from enhanced transparency in domain registration and improved security practices. Strategic recommendations include adding security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

L

Little Fireface Project

nocturama.org

46

The Little Fireface Project is a specialized non-profit organization dedicated to the conservation of loris species, led by the internationally recognized expert Professor Anna Nekaris OBE. The project operates a research station in Java since 2012 and conducts extensive research, education, and community empowerment activities to protect critically endangered lorises and other nocturnal wildlife. The website reflects a well-structured and content-rich platform targeting conservationists, researchers, and supporters worldwide. Technically, the site is built on WordPress with modern plugins and tracking tools like Google Analytics, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to a malformed request, but the website's professional presentation and social media presence support its legitimacy. Overall, the site scores well in business credibility and content quality but should enhance privacy compliance and security best practices.

W

Welttierschutzgesellschaft e.V.

welttierschutz.org

51

Welttierschutzgesellschaft e.V. is a German non-profit organization dedicated to animal protection and welfare across multiple continents including Africa, Asia, South America, and Europe. The organization operates various projects such as animal rescue, veterinary aid, educational programs, and wildlife protection. Their website reflects a medium-sized NGO with a professional online presence, targeting donors, volunteers, and animal welfare supporters. Technically, the website is built on WordPress using the Kadence theme and includes modern JavaScript libraries and GDPR-compliant cookie management via Borlabs Cookie. Security posture is good with HTTPS enforced and domain registration protections in place, though DNSSEC is not enabled. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and professionally maintained, with room for improvement in formal privacy disclosures and enhanced DNS security.

Zoologická zahrada Ústí nad Labem operates as a regional zoological garden in the Czech Republic, providing animal exhibits, educational programs, and visitor services. The organization is supported by the statutory city of Ústí nad Labem and maintains affiliations with international zoological associations, enhancing its credibility and conservation efforts. The website targets families, schools, and tourists, offering multilingual content and an e-shop for merchandise. Technically, the site is built on ASP.NET WebForms with a custom CMS, integrating modern web technologies such as Google Analytics and social media SDKs. The site is mobile-optimized with good navigation and content quality. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and privacy policy documentation. The absence of WHOIS data limits domain legitimacy verification, though the website content and affiliations suggest a legitimate non-profit entity. Strategic recommendations include adding explicit privacy and terms policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

F

Fundacja DODO

fundacjadodo.pl

53

Fundacja DODO is a Polish non-profit foundation dedicated to supporting the Wrocław Zoo and animal welfare initiatives. The website serves as a platform for fundraising and donations, leveraging WooCommerce and payment gateways such as Przelewy24 and Tpay. The organization appears to be small-sized and locally focused, with a domain age consistent with its founding year of 2016. The website is built on WordPress with modern technologies including React and jQuery, and integrates marketing tools like MailerLite for email campaigns. Mobile optimization and user experience are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance documentation.

Z

ZOO JH s.r.o.

zoonahradecku.cz

46

ZOO Na Hrádečku is a private zoological garden located in the Czech Republic, operating since 2014 with a focus on conservation, education, and public engagement. The zoo hosts over 200 animal species, including endangered ones, and offers various visitor experiences such as guided tours, animal adoptions, and educational programs. It operates without subsidies, relying on ticket sales, merchandise, and donations. The website reflects a well-established regional institution with strong community and conservation partnerships. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery libraries, hosted by a reputable Czech registrar and hosting provider. The site is mobile-optimized with good SEO practices and clear navigation, though some advanced security headers and explicit security policies are not evident. Cookie consent and privacy policies are implemented, indicating awareness of GDPR compliance. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers or incident response information. No vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site presents a trustworthy, professional online presence for a medium-sized private zoo with good content quality and privacy compliance. Strategic improvements in security policy transparency and technical security controls are recommended to enhance the security posture and trust further.

E

Eezy LLC

brusheezy.com

60

Brusheezy, operated by Eezy LLC, is a well-established online platform offering a vast collection of free and premium Photoshop brushes and related graphic design resources. The website targets graphic designers and digital artists seeking high-quality Photoshop assets. It operates a freemium business model, providing free downloads alongside premium subscription options for unlimited access. The site enjoys a strong market position within the digital media resource niche, supported by a vibrant community and a network of related sites such as Vecteezy and Videezy. Technically, Brusheezy employs a modern technology stack including JavaScript libraries, analytics tools like Google Analytics and Snowplow, and advertising frameworks such as Freestar and Google DoubleClick. The site is mobile-optimized with good SEO practices and uses HTTPS to secure user interactions. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. From a security perspective, the site demonstrates good practices including HTTPS enforcement and CSRF protection in forms. However, it lacks explicit security headers and a published security policy or vulnerability disclosure program, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Brusheezy presents a low-risk profile with a professional online presence and comprehensive content offerings. The main concern is the absence of WHOIS data transparency, which slightly impacts trust but does not detract significantly from the site's legitimacy. Strategic improvements in security policy publication and WHOIS transparency would enhance its credibility and compliance standing.

K

Kavárna Stará Pošta

starapostabela.cz

57

Kavárna Stará Pošta is a small local café and bar located in Bělá pod Bezdězem, Czech Republic, offering specialty coffee (Nordbeans), local beers (Zichovec), Prosecco, smoothies, homemade desserts, and light meals. The business targets a general mature audience seeking a calm and welcoming space for socializing or relaxation. The website is built on WordPress with modern plugins like Elementor and WooCommerce, featuring a professional design and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

Běhy Zlín, z.s. is a small non-profit organization based in the Czech Republic focused on organizing running competitions and running school workshops primarily in the Zlín region. The website serves as a hub for event information, registration, news updates, and community engagement. It targets local runners and sports enthusiasts, providing event schedules, partner information, and educational content. The organization has been active since 2014, with a consistent domain registration and transparent business information. Technically, the website uses modern web technologies including JavaScript libraries like jQuery, Moment.js, and Swiper.js, and is built on the Nette PHP framework. It is mobile optimized and provides a good user experience with clear navigation and content relevance. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism with granular controls, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

NajduZboží.cz is a Czech price comparison website that aggregates product offers from over 3,700 registered online stores. It provides users with price comparisons, product reviews, and store ratings to facilitate informed purchasing decisions. The platform targets Czech internet shoppers and has been operational since at least 2009, positioning itself as a recognized player in the Czech e-commerce ecosystem. The business model centers on aggregating and comparing product prices rather than direct sales, serving as an intermediary service for consumers. Technically, the website employs standard web technologies including jQuery and Google Analytics for tracking user interactions. The site is accessible, with a responsive design that is basic but functional. SEO practices are adequately implemented with proper meta tags and structured navigation. However, there is room for improvement in mobile optimization and accessibility features. The absence of a detected CMS or hosting provider details suggests a custom or less common infrastructure. From a security perspective, the site uses HTTPS and includes a cookie consent banner, indicating awareness of privacy regulations such as GDPR. However, no advanced security headers were detected, and there is no published security or incident response policy. The lack of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and longevity suggest legitimate operations. No critical vulnerabilities or exposed sensitive data were found, but security posture could be enhanced by implementing best practices and publishing security policies. Overall, NajduZboží.cz presents a moderately secure and professionally maintained e-commerce comparison platform with good content quality and user experience. The main risks stem from limited transparency in domain registration and modest security implementations. Strategic improvements in security policies, WHOIS transparency, and technical hardening would strengthen trust and compliance.

M

Městské informační centrum Havířov

michavirovshop.cz

52

MIC Havířov shop is an e-commerce platform operated by the Municipal Information Center of Havířov, offering a variety of collectible souvenirs, textile goods, and publications related to the city of Havířov. The website targets local residents and tourists interested in purchasing local memorabilia conveniently online or at their physical location. The business model is primarily retail-focused with a local government affiliation, positioning it as a trusted source for authentic Havířov merchandise. Technically, the website is built on the Upgates e-commerce platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. Security is well-handled with HTTPS enforced and secure form validation, but lacks some advanced security headers and explicit security policies. From a security and compliance perspective, the site implements a comprehensive cookie consent mechanism aligned with GDPR requirements and provides basic privacy and terms of service documentation. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, which should be further investigated. No major vulnerabilities or tracking technologies were detected, indicating a privacy-conscious approach. Overall, the website presents a professional and trustworthy front for a local government-affiliated e-commerce business, with room for improvement in domain transparency and security header implementation. Strategic recommendations include verifying domain registration, enhancing security policies, and publishing vulnerability disclosure information to strengthen trust and compliance.

G

Genesii

genesii.fr

52

Genesii is a French technology company specializing in bespoke web application development, custom websites, and AI integration services. Positioned as a small but innovative agency, it serves businesses seeking digital transformation solutions. The company holds the 'Jeune Entreprise Innovante' certification, highlighting its commitment to innovation and research, particularly in machine learning and e-learning platforms. The website is professionally designed, mobile-optimized, and provides clear contact information, supporting its business credibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Owl Carousel, and Swiper. It integrates Google Analytics, Google Tag Manager, and Calendly for marketing and scheduling. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a GDPR-compliant cookie consent mechanism. However, additional security headers and a published security policy would enhance its security posture. The security evaluation shows a good baseline with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong with visible policies and consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the website content and certifications support legitimacy. Overall, the site is safe, professional, and trustworthy, with recommendations to improve security headers and incident response transparency. Strategically, Genesii should focus on enhancing its security documentation, expanding accessibility compliance, and maintaining transparency in data protection to strengthen trust and compliance in the evolving regulatory landscape.

A

Association La SEVE

seve-asso.fr

57

Association La SEVE is a small French non-profit organization focused on education about biodiversity and permaculture training. The website presents a professional and consistent brand image with clear navigation and relevant content targeting a general audience interested in environmental education. The organization offers key services including nature animations, project accompaniment, and environmental site management, positioning itself as a regional leader in ecological education and permaculture. Technically, the site is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response information are lacking. Privacy compliance is basic with no explicit privacy or cookie policies found, but a cookie consent mechanism is present. Overall, the site is trustworthy and safe, with no adult or questionable content detected. However, the absence of WHOIS data reduces domain trustworthiness, suggesting a need for domain registration verification.

M

Micropulse

micropulse.fr

35

Micropulse is a French web agency specializing in the creation of custom websites and management software, with a focus on car rental and e-commerce sectors. The company offers tailored solutions including online rental sites, e-commerce platforms, collaborative sites, and bespoke management tools. The website presents a moderate level of digital maturity, utilizing common JavaScript libraries and Google Analytics for tracking, but lacks modern security headers and visible privacy or cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and client references suggest a legitimate business operation. Security posture is basic with room for improvement in SSL configuration and security best practices. Overall, the website is functional but would benefit from enhanced compliance and security measures to improve trust and user confidence.

M

M+H

mh.cz

58

M+H is a Czech Republic based small business specializing in automotive services including chiptuning, decarbonization, and car media systems. The company claims 28 years of experience, positioning itself as an established player in the automotive enhancement sector. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and use of reCAPTCHA and cookie consent, but lacks visible security policies and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and branding appear professional and consistent. Overall, the site is safe and suitable for general audiences with no adult or questionable content detected.

The website www.deky.eu is a Czech e-commerce platform specializing in the sale of bedding products including blankets, pillows, bed sheets, and mattress protectors. It emphasizes Czech manufacturing and quality products suitable for allergy sufferers. The site is structured with clear navigation and product categorization, targeting general consumers in the Czech Republic seeking home textile products. Technically, the site uses standard web technologies such as jQuery and custom JavaScript, with basic mobile optimization and SEO practices. However, there is no evidence of HTTPS enforcement or advanced security headers, which poses a moderate security risk. Privacy compliance is limited, with no explicit privacy policy page found, though a cookie consent mechanism is implemented. Contact information is not clearly provided, which may impact user trust and support accessibility. Overall, the site appears legitimate and functional but would benefit from enhanced security and privacy measures.

H

Hotel Lions Plzeň

hotellionsplzen.cz

50

Hotel Lions Plzeň is a small family-run hospitality business located near the historic center of Plzeň, Czech Republic. The hotel offers modern accommodation, restaurant services, conference facilities, and parking including electric vehicle charging. The website is professionally designed with good content quality and clear navigation, supporting multiple languages. The technical infrastructure is based on common web technologies including jQuery and Bootstrap, hosted likely by Czechia.com. Security posture is moderate with cookie consent implemented but lacking explicit privacy policies and security headers. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy for users but would benefit from enhanced security and compliance documentation.

P

PT SERVIS

ptservis.cz

43

PT SERVIS operates an e-commerce website focused on sports nutrition, healthy nutrition, bodybuilding, fitness, and aerobic products primarily targeting fitness enthusiasts and health-conscious consumers in the Czech Republic. The website offers a broad catalog of supplements, fitness equipment, and related health products, supported by promotional campaigns and customer engagement tools such as live chat and discount coupons. Technically, the site uses standard web technologies including JavaScript, jQuery, and CSS, with integrations for marketing and tracking services. The site is secured with HTTPS and includes a cookie consent mechanism, but lacks a publicly accessible privacy policy and terms of service pages, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, limiting the ability to verify domain legitimacy and age. Overall, the website presents a professional and functional e-commerce platform with moderate technical maturity and security posture.

L

Lékárna Srdcovka

lekarnasrdcovka.cz

45

Lékárna Srdcovka operates as a local and online pharmacy based in Prostějov, Czech Republic, offering a wide range of health-related products including over-the-counter medicines, supplements, and cosmetics. The business targets Czech-speaking customers seeking convenient access to pharmaceutical products both online and in physical stores. The website supports e-commerce transactions and provides services such as e-prescription reservations, positioning itself as a trusted regional healthcare retailer. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with integration of Facebook Pixel for marketing and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information suggest a legitimate business. Overall, the site maintains a moderate security posture with recommendations to improve privacy and security practices. The overall risk assessment is moderate with a score of 74 out of 100, reflecting good content quality and business credibility but some technical and compliance gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and investigating the missing WHOIS data to improve domain trustworthiness.

H

Hawaj.cz • ověřený český e-shop • 17 let s vámi | Hawaj.cz

hawaj.cz

49

Hawaj.cz is a Czech e-commerce retailer specializing in garden furniture, pools, whirlpools, solar showers, toys, pet supplies, and related leisure products. The website positions itself as an established player with 17 years of market presence, targeting Czech consumers seeking home and garden products. The site features a professional design with clear navigation and a broad product catalog. Technically, the site uses modern JavaScript libraries, Bootstrap 4, and integrates multiple marketing and analytics tools such as Facebook Pixel, Google Tag Manager, Hotjar, and Biano Pixel. HTTPS is enforced, and cookie consent mechanisms are in place, indicating a baseline of security and privacy awareness. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registrant data, reduce overall trust and compliance posture. No WAF or content blocking was detected, and the content is safe for general audiences.