Security Directory

B

Books & Ideas / La Vie des Idées

booksandideas.net

43

Books & Ideas is a well-established intellectual online journal serving as the English-language mirror of the French publication La Vie des Idées. Founded in 2007, it targets academics, researchers, and intellectually curious readers interested in social sciences and humanities. The website offers essays, reviews, interviews, and dossiers, maintaining a consistent and professional brand image. It operates on the SPIP CMS platform with a moderate modern technology stack including jQuery, Google Analytics, and cookie consent management via tarteaucitron.js. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and basic security headers, though improvements such as DNSSEC and security.txt are recommended. Privacy compliance is basic with a legal notice page and cookie consent but lacks explicit GDPR statements or terms of service. WHOIS data confirms domain legitimacy and long-term operation. Overall, the site is trustworthy, safe, and professionally maintained.

Sportovně kulturní centrum v Ondřejově is a local community center in the Czech Republic providing a wide range of sports, cultural, educational, and recreational courses and events. Established since 2006, it serves a general audience including families and individuals interested in active leisure. The website offers detailed information about courses, events, rental services, and a café with a children's play area, reflecting a well-rounded community service model. Technically, the website uses a mix of older and modern web technologies including jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics, running on the IPO content management system. The site is mobile responsive with good navigation and content structure, though some libraries are outdated. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and formal privacy or terms of service documents. The cookie consent mechanism is present and functional, indicating some GDPR awareness. WHOIS data is unavailable, limiting domain trust verification, but the site content and contact details appear legitimate and consistent with a community organization. Overall, the site is trustworthy and professionally presented but would benefit from enhanced security headers, updated libraries, published privacy policies, and improved WHOIS transparency to strengthen its security posture and compliance.

T

Trustami GmbH

produktbewertungen.org

59

Produktbewertungen.org is a German-based product review aggregation platform operated by Trustami GmbH. It consolidates over 10 million product reviews from various e-commerce and marketplace websites, providing consumers with a comprehensive overview and unified rating to facilitate informed purchasing decisions. The platform targets online shoppers seeking to save time by accessing all relevant product feedback in one place. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics with IP anonymization, and uses a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and presents a professional, consistent brand experience aligned with Trustami's corporate identity. Security-wise, the site enforces HTTPS and anonymizes analytics data but lacks some advanced security headers and explicit security policies. The absence of WHOIS registration data limits domain trust verification, though the presence of company contact details and social media links supports legitimacy. Overall, the website demonstrates a solid digital maturity level with room for improvement in security transparency and WHOIS data availability.

Elephant Orchestra, a.s. is a Czech Republic-based digital marketing company specializing in lead generation, email marketing, mobile marketing, telemarketing, affiliate programs, and discount portals. With over 12 years of market presence and recognition such as Deloitte's Technology Fast 50 CE Rising Star in 2011, the company serves a broad range of business clients aiming to enhance their online customer acquisition and marketing effectiveness. The company operates multiple projects and is part of the Klik.cz & ePojisteni.cz s.r.o group, indicating a strong partnership ecosystem. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Bootstrap, and various JavaScript libraries for UI and performance enhancements. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some security headers are missing, and WHOIS data is unavailable, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enabled and no visible vulnerabilities in the content. Privacy compliance is good with clear policies and consent banners. The absence of WHOIS registration data is a notable risk factor, but the website content and business information suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from improved security headers and domain registration transparency. Strategic recommendations include enhancing security headers, conducting regular security audits of third-party scripts, improving accessibility, and verifying domain registration details to strengthen trust and compliance.

KPMG Business Institute, operated by KPMG Česká republika, s.r.o., is a professional educational platform specializing in finance, accounting, compliance, and management training. The website offers a broad catalog of courses targeting professionals and companies in the Czech Republic, leveraging the strong global KPMG brand. The business model focuses on B2B and B2C training services with a well-established market position supported by client testimonials and ACCA accreditation. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager and Google Analytics for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. No CMS or hosting provider details are explicitly detected. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR alignment. Overall, the website presents a low-risk profile with strong business credibility and professional content. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

O

Online-textil.cz

online-textil.cz

60

Online-textil.cz is a well-established Czech e-commerce platform specializing in promotional textiles, including branded clothing such as t-shirts, polos, hoodies, and workwear. Founded in 2012, it serves both B2B and individual customers primarily in the Czech Republic and the broader EU market. The website offers a broad product catalog with detailed categories and supports bulk orders with custom printing and embroidery services. The company positions itself as one of the largest players in the Czech promotional textile market, emphasizing fast delivery and extensive stock availability. Technically, the website employs modern web technologies including jQuery, Owl Carousel, Google Tag Manager, and a cookie consent solution from cookie-script.com. It uses Cloudflare DNS services and enforces HTTPS, ensuring secure connections. The site is mobile-optimized with good navigation and SEO practices, though it appears to be custom-built without a common CMS. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site benefits from HTTPS and standard security practices but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, Online-textil.cz presents a professional and trustworthy e-commerce presence with a solid market position. To enhance trust and compliance, it should publish comprehensive privacy and terms of service documents and improve transparency around security policies and incident response.

É

Épices Énergie

epices-energie.fr

55

Épices Énergie is a French company specializing in software solutions for the supervision and management of renewable energy installations, including photovoltaic, wind, and hydroelectric power plants. The company targets energy producers and operators seeking efficient tools to monitor and optimize their renewable energy assets. Their market position is that of a niche provider offering a comprehensive web and mobile platform tailored to the renewable energy sector. Key services include data centralization, real-time production monitoring, performance evaluation, maintenance management, and personalized customer support. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, FontAwesome 6 Pro, and Matomo analytics, indicating a mature digital infrastructure with responsive design and moderate performance. However, there is no explicit CMS detected, and hosting details are not disclosed. The site is well-structured with good navigation and content relevance, supporting a positive user experience. From a security standpoint, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data limits domain trust assessment, though the presence of client logos and a LinkedIn profile adds credibility. Overall, Épices Énergie presents a professional and trustworthy online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen their risk posture and user confidence.

T

Transition Citoyenne

transitioncitoyenne.org

58

Transition Citoyenne operates a French-language website focused on providing comprehensive comparisons and guides for offshore sports betting sites accessible to French players in 2025. The site positions itself as a specialist resource offering detailed information on bonuses, payment methods including cryptocurrencies, and legal considerations for betting outside the French ANJ regulatory framework. Technically, the site is built on WordPress with common SEO and geotargeting plugins, hosted behind Cloudflare DNS, and uses modern web technologies such as jQuery and FontAwesome. The website is mobile-optimized and presents content in a clear, structured manner with good SEO metadata and JSON-LD structured data. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal policies such as privacy or cookie consent. No direct company contact information or incident response channels are provided, which limits transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

M

Mephisto Bordeaux

chaussuremephisto.fr

10

Mephisto Bordeaux operates as an official distributor and retailer of premium, comfortable footwear in France, leveraging a family heritage dating back to 1995. The website serves as a professional e-commerce platform built on PrestaShop, offering a wide range of Mephisto shoes for men and women with worldwide shipping and personalized customer support. The business targets consumers seeking high-quality, comfortable shoes with a focus on craftsmanship and premium materials. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Google Analytics, Google Tag Manager, and Sendinblue, ensuring a moderate to good digital maturity level. Security posture is solid with HTTPS enforced and secure payment methods, though HTTP security headers could be improved. Privacy compliance is well addressed with clear GDPR and cookie policies. The absence of WHOIS data for the .fr domain is a notable gap, slightly impacting trust but not undermining the overall legitimacy of the business. Overall, the website is professional, user-friendly, and trustworthy for its target audience.

C

Cysnews

cysnews-new.cz

59

Cysnews.cz is a Czech news media website providing regional, sports, cultural, transportation, and lifestyle news primarily targeting the Czech-speaking general public. The site operates on a WordPress platform with modern plugins for SEO and analytics, indicating a moderate level of digital maturity. The website is well-structured, mobile-optimized, and includes privacy and cookie policies compliant with GDPR standards. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. The absence of public WHOIS data suggests domain privacy protection, which is common for media outlets. Overall, the site presents a professional and trustworthy news source with moderate risk and good compliance.

S

Sdružení pro hračku a hru, z.s.

sdruzenihracky.cz

38

Sdružení pro hračku a hru, z.s. is a well-established Czech association founded in 1990, dedicated to supporting the toy manufacturing and distribution sector. The organization acts as a professional body connecting manufacturers, importers, and sellers of toys, providing industry information, quality and safety standards, and organizing events such as trade fairs and awards. The website reflects a mature digital presence with clear business information, membership benefits, and active communication channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering a responsive and user-friendly experience. Security posture is solid with HTTPS, reCAPTCHA protection on forms, and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting the association's mission effectively.

S

S. K. Ghosh Associates LLC

skghoshassociates.com

63

S. K. Ghosh Associates LLC is a specialized consulting firm focused on seismic and building code consulting services. The company offers a range of products including publications, computer programs, and training seminars/webinars targeted at engineers, governmental agencies, and trade associations. Their market position is that of a niche expert with a professional online presence and a clear business model centered on technical consulting and education. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Font Awesome. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enabled and secure forms, but lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism detected. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, though the website content and presentation suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

C

Cysnews

cysnews.cz

58

Cysnews is a Czech news website providing a broad range of content including regional news, sports, culture, lifestyle, and transportation topics. The site targets a general audience interested in current events and local news within the Czech Republic. It operates on a WordPress platform with common plugins for SEO and analytics, indicating a moderate level of digital maturity. The website demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed contact information for incident response or security policies. The absence of WHOIS registration data reduces trust signals, though the website's active social media presence and privacy policy contribute positively to its credibility. No critical vulnerabilities or adult content were detected, and advertising is managed primarily through Google Adsense and Google Analytics. Overall, Cysnews presents as a legitimate regional news portal with moderate technical and security maturity. Strategic improvements in security headers, transparency of contact information, and domain registration data would enhance trust and compliance.

Y

Yoga Market

yogamarket.cz

48

Yoga Market is a Czech Republic-based e-commerce retailer specializing in yoga, meditation, and wellness products. The website offers a broad range of items including yoga mats, clothing, books, and health supplements, targeting yoga practitioners and wellness enthusiasts. The business appears to be a niche player with a consistent brand presence and a clear focus on the yoga community. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates marketing and analytics tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and has cookie consent mechanisms in place, but lacks visible security headers and detailed security policies. The absence of WHOIS data reduces transparency and trustworthiness somewhat, but the website content and contact information suggest a legitimate business. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security posture and WHOIS transparency.

L

L’Ecole Nationale Supérieure Agronomique de Toulouse (AgroToulouse)

agrotoulouse.fr

56

L’Ecole Nationale Supérieure Agronomique de Toulouse (AgroToulouse) is a reputable public engineering school in France specializing in agronomy, environment, food, and oenology education. The institution serves a diverse audience including students, apprentices, partner companies, and international students. It holds recognized certifications such as CTI, ISO 9001, and EUR-ACE, reinforcing its market position as a quality educational provider. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the Ametys CMS platform, leveraging common frontend libraries like jQuery, Bootstrap, and Owl Carousel. It demonstrates good mobile optimization and moderate performance. The site employs HTTPS with excellent SSL configuration and integrates a cookie consent mechanism compliant with GDPR using tarteaucitron.js. Analytics are handled via Matomo, indicating a moderate level of user tracking with privacy considerations. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The WHOIS data aligns well with the website’s claims, confirming legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable digital presence for AgroToulouse. Strategic improvements in security transparency and accessibility could further strengthen its position.

P

Provide Support, LLC

providesupport.com

52

Provide Support, LLC is a technology company specializing in live chat and customer support software solutions for websites. Established in 2004 and based in New York, USA, the company offers a SaaS model with a comprehensive live chat widget, cross-platform agent applications, and integrations with popular platforms such as WordPress, Shopify, and Joomla. Their market position is solid with over 10,000 sites using their service and a reputation for reliable, easy-to-integrate customer service tools. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Tag Manager, ensuring good performance and mobile optimization. The presence of multi-language support and detailed integration options indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS, encrypts chat data, and implements cookie consent mechanisms, although it lacks a dedicated security policy or incident response page. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The business credibility is reinforced by clear contact information, customer testimonials, and a transparent pricing and refund policy. Strategic recommendations include publishing explicit security and incident response policies and enhancing security headers to further strengthen the security posture.

Y

Yoga Market

jogamarket.cz

48

Yoga Market is a specialized e-commerce retailer based in the Czech Republic, offering a wide range of yoga and wellness products including mats, clothing, books, meditation accessories, and health supplements. The website targets yoga practitioners and wellness enthusiasts, positioning itself as a niche player in the retail sector with a focus on quality and customer trust. The site is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, ensuring a responsive and interactive user interface. The site is served over HTTPS with cookie consent mechanisms in place, reflecting a good level of digital maturity and privacy compliance. However, some security headers are missing, and there is no visible security.txt or incident response information, indicating room for improvement in security transparency. From a security perspective, the site demonstrates solid practices including secure login forms and GDPR-compliant cookie management. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and clear contact details support a trustworthy business profile. Overall, Yoga Market presents a secure, privacy-conscious, and user-friendly online retail platform with a strong focus on yoga and wellness products. Strategic enhancements in security policy publication and domain transparency could further strengthen its trustworthiness and compliance posture.

Č

České modelky s.r.o.

modelingovekurzy.eu

56

The website modelingovekurzy.eu is operated by České modelky s.r.o., a Czech company specializing in modeling courses and workshops for aspiring and experienced models. The company has been active since 2006 and offers a variety of services including modeling walk training, professional photo shoots, TV camera moderation courses, and individual coaching sessions with pageant judges. The site targets women and girls interested in pursuing a modeling career and positions itself as a trusted, long-standing provider in the Czech modeling education market. Technically, the website uses modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google reCAPTCHA for bot protection, and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected in the provided data, which is a potential area for improvement. The WHOIS data is privacy protected by EURid, which is common for .eu domains, limiting transparency but not raising immediate concerns. Overall, the site is professional, content-rich, and well-structured, with clear contact information and social media presence.

P

Profitroom

profitroom.net

74

Profitroom is a hospitality technology company specializing in direct booking solutions for hotels, resorts, and hotel groups. Their website presents a professional and consistent brand image, targeting hospitality businesses seeking to enhance direct booking capabilities. The site is built on HubSpot CMS and integrates modern marketing and analytics tools such as Google Analytics 4, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and mobile-optimized, providing a good user experience and SEO optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, explicit security headers and incident response information are lacking. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and technology usage suggest a legitimate business presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to improve security headers, provide contact and legal information, and verify domain registration.

A

ALEPTE - Agence Locale de l'Énergie Paris Terres d'Envol

alepte.fr

51

ALEPTE - Agence Locale de l'Énergie Paris Terres d'Envol is a local energy agency focused on informing, advising, and supporting individuals, local authorities, social landlords, asset managers, businesses, and artisans in the Paris Terres d'Envol territory. The agency provides services such as energy diagnostics, renovation support, and educational workshops, positioning itself as a trusted local resource in the energy sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the SPIP CMS platform and utilizes modern web technologies including Google Analytics, Google Tag Manager, WebFont Loader, and Owl Carousel for enhanced user experience. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain is a notable concern, impacting the trustworthiness of the domain registration. However, the presence of multiple reputable partners and the professional nature of the content mitigate some risks. Overall, ALEPTE's website is a well-structured and informative platform serving its community effectively but would benefit from enhanced security practices, transparent privacy policies, and domain registration transparency to improve trust and compliance.

L

L’Ecole Nationale Supérieure Agronomique de Toulouse (ENSAT)

ensat.fr

55

ENSAT is a reputable public engineering school in France specializing in agronomy, environment, food, and oenology education. It serves a medium-sized student body and maintains strong partnerships with regional and international institutions. The website reflects a professional educational institution with clear communication channels and certifications. Technically, the site uses a Java-based CMS (Ametys) with modern front-end libraries and implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but this does not detract from the site's legitimacy. Overall, ENSAT presents a trustworthy and well-maintained digital presence.

K

KOSTKA footbike

kostkakolobezky.cz

59

KOSTKA footbike is a well-established Czech manufacturer and retailer specializing in scooters for adults, children, seniors, and specialized uses such as mushing and racing. The company boasts over 25 years of tradition and operates a professional e-commerce platform with multilingual support. Their business model focuses on direct sales, custom configurations, and community engagement through blogs and events. Technically, the website is built on Prestashop CMS, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data slightly reduces trust but does not outweigh the strong brand presence and content quality. Overall, the website is professional, secure, and compliant with GDPR, serving a broad audience interested in scooters and outdoor mobility.

О

ООО «Центр Болотова»

balzambolotova.com

49

The website balzambolotova.com serves as the official e-commerce platform for the sale and promotion of the Bolotov Balm, a health supplement aimed at rejuvenation, fat burning, and improving various health conditions such as diabetes and hypertension. The company behind the product, ООО «Центр Болотова», operates primarily in Ukraine and targets consumers interested in natural health remedies. The site features multiple language versions, customer testimonials, certifications, and detailed product information, positioning itself as a trusted source for this niche product. Technically, the website is built on the Bitrix CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and various marketing and analytics tools including Google Tag Manager and Facebook Pixel. Hosting is provided by Hosting Ukraine LLC. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. From a security perspective, the site employs HTTPS and secure form submissions but lacks DNSSEC and advanced security headers like Content Security Policy or X-Frame-Options. There is no visible cookie consent mechanism despite the use of tracking scripts, indicating partial privacy compliance. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the website is professionally designed with consistent branding and good content quality. The business credibility is supported by certifications and clear contact information. However, improvements in privacy compliance and security hardening are recommended to elevate the site's trustworthiness and regulatory adherence.

B

Bici.cz

bici.cz

55

Bici.cz is a Czech Republic based e-commerce and retail business specializing in drums, percussion instruments, and related musical accessories. Established since 1996, it serves professional, amateur, and beginner musicians with a broad product catalog and a physical store located in Prague. The website demonstrates a mature digital presence with modern web technologies and integration of popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit security policies. Overall, the business appears legitimate and well-positioned in its niche, but should enhance privacy compliance and security disclosures to strengthen trust and regulatory adherence.

T

Toulouse INP

inp-toulouse.fr

52

Toulouse INP is a reputable French higher education and research institution specializing in engineering education and scientific research. The website presents a comprehensive offering of academic programs, research initiatives, and innovation partnerships, targeting students, researchers, and industry collaborators. The institution maintains a strong regional presence with multiple partner schools and international collaborations. Technically, the website is built on the Ametys CMS platform, leveraging modern JavaScript libraries for an interactive user experience. It is mobile-optimized and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and WHOIS data transparency are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

B

BTR Consulting s.r.o.

btrconsulting.cz

47

BTR Consulting s.r.o. is a specialized real estate consulting company focused on the Build to Rent segment in the Czech Republic. The company offers a comprehensive suite of services including project acquisition consulting, expert advice, marketing strategies, property management, rental services, construction optimization, and furnishing of rental apartments. Their target audience includes investors, developers, and small companies seeking tailored real estate solutions. The website reflects a boutique service provider with a strong emphasis on quality and long-term client relationships. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile-optimized and uses security best practices such as HTTPS and security headers. However, it lacks explicit cookie consent mechanisms and dedicated security or incident response policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market position.

G

Gegarandeerde Beoordelingen Nederland

g-b-n.nl

54

Gegarandeerde Beoordelingen Nederland operates as a specialized SaaS platform focused on collecting and managing authentic customer reviews for e-commerce merchants, primarily targeting the Dutch market with multilingual capabilities. The company positions itself as a trusted partner with over 3000 clients and offers integrations with major e-commerce platforms such as WooCommerce, Magento, and PrestaShop. Their services include moderation, Google Shopping and Google My Business integration, automatic translation, and customizable widgets and emails to enhance customer trust and conversion rates. The website reflects a professional and consistent brand image with clear business and contact information, supported by GDPR compliance and certifications such as CNIL and FEVAD.

G

Guaranteed Reviews Company

guaranteed-reviews.com

62

Guaranteed Reviews Company operates a professional SaaS platform specializing in authentic customer review collection and management for e-commerce merchants. The company offers multilingual modules and integrations with major e-commerce platforms such as WooCommerce, Prestashop, Magento, and Shopify. Their market position is solid with over 3,000 merchants trusting their solution, emphasizing conversion rate improvement and e-reputation enhancement. The website is well-designed, mobile-optimized, and provides clear navigation and comprehensive content about their services. Technically, the site is built on WordPress with WooCommerce and uses modern JavaScript libraries and plugins, including Google reCAPTCHA for form security. Hosting appears to be on a dedicated server, likely OVH/Dedibox. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers are missing and no incident response or security policy pages were found. The WHOIS data is missing, which raises concerns about domain registration transparency and slightly lowers the trust score. Overall, the site is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security headers.

T

TOMPRINT

tomprint.cz

48

TOMPRINT is a Czech-based company specializing in textile printing and promotional product services, including screen printing, digital printing, sublimation, embroidery, and advertising production. With an established presence of approximately 35 years, they serve both business and individual customers through a physical location in Prague and an online e-shop. The website reflects a professional and customer-focused business with clear contact information and positive customer testimonials. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager and analytics scripts, with a cookie consent mechanism implemented to comply with privacy regulations. However, the absence of a published privacy policy and terms of service, along with missing WHOIS registration data, presents gaps in transparency and trust. Security posture is moderate, with HTTPS implied but no visible security headers or incident response information. Overall, the site is functional, safe, and well-designed but would benefit from enhanced compliance and security documentation.

S

Speciální Medicínská Technologie s.r.o.

smt-praha.com

59

Speciální Medicínská Technologie s.r.o. is a Czech-based manufacturer specializing in the development, production, and sales of electrosurgical and cryosurgical medical devices. The company targets medical professionals across various specialties including surgery, dermatology, and ophthalmology. Their market position is that of a specialized small manufacturer with active participation in European and international medical trade fairs, emphasizing reliability and modern technology in their product offerings. The website reflects a professional and consistent brand image with clear business information and contact channels. Technically, the site is built on WordPress with popular plugins such as WooCommerce, WPBakery, and Elementor, indicating a mature digital infrastructure. Security posture is solid with HTTPS and reCAPTCHA implementations, though it lacks some advanced security headers and visible privacy compliance documentation. WHOIS data is unavailable, which slightly impacts domain trust but does not detract from the overall legitimacy of the business. Recommendations include adding privacy and cookie policies, enhancing security headers, and publishing a vulnerability disclosure policy to improve compliance and trust.

The website isl2025lymphology.org serves as the official platform for the 30th World Congress of the International Society of Lymphology (ISL) scheduled for October 2025 in Antalya, Turkey. It targets medical professionals, researchers, and clinicians specializing in lymphology, providing comprehensive event information including scientific programs, workshops, registration, and social activities. The business model centers on event organization and promotion within the healthcare sector, positioning itself as a specialized international congress organizer. Technically, the site employs a modern frontend stack including Bootstrap, jQuery, Font Awesome, and various UI enhancement libraries such as Owl Carousel and AOS for animations. The site is mobile optimized and uses HTTPS with Google reCAPTCHA for form security. However, it lacks DNSSEC, security headers, and visible privacy or cookie policies, indicating room for improvement in security and compliance maturity. From a security perspective, the site benefits from HTTPS and anti-bot measures but misses critical security headers and formalized privacy and incident response policies. The WHOIS data shows a recently registered domain consistent with the event timeline but with an unclear registrant name, slightly reducing trust. No signs of malicious content or blocking mechanisms were detected. Overall, the site is professionally designed and functional with moderate security posture and limited privacy compliance. Strategic improvements in policy publication, security headers, and registrant transparency would enhance trust and compliance.

S

Skorošice ubytování

skorosiceubytovani.cz

40

Skorošice ubytování is a small hospitality business offering apartment rental accommodation in the Jeseníky mountain region of the Czech Republic. The website presents a family-friendly lodging option with amenities such as a garden, children's play area, and bike storage, targeting tourists interested in hiking and cycling. The business operates seasonally and emphasizes a peaceful natural environment. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and FontAwesome, with additional features like live chat and Google reCAPTCHA for security. However, the absence of WHOIS data and lack of privacy and cookie policies indicate gaps in compliance and trust verification. Security posture is moderate with HTTPS usage but missing security headers and limited vulnerability mitigation measures. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced privacy compliance and security hardening.

The website www.doutniky-humidory-prislusenstvi.cz appears to be an e-commerce platform focused on selling tobacco-related products such as cigars, humidors, and pipes. The site content is minimal, primarily consisting of a placeholder image with a clickable map and basic metadata describing the business. The lack of WHOIS data and registrant information limits the ability to verify the domain's legitimacy and history. Technically, the site uses common libraries such as Bootstrap, jQuery UI, and Google Analytics, but lacks visible security headers and privacy compliance documentation. The security posture is weak due to missing HTTPS confirmation and absence of security best practices. Overall, the site presents a low trust profile with poor content quality and minimal business transparency.

C

Czech Fashion Week

czechfashionweek.eu

44

Czech Fashion Week is a well-established fashion event and media platform based in the Czech Republic, focusing on organizing fashion shows, publishing interviews, news, and photo galleries related to the fashion industry. The website serves as a hub for event information, ticket sales, and partner promotion, targeting fashion enthusiasts and industry professionals. The business operates with a small-sized footprint and has been active since at least 2005, as indicated by copyright dates and content history. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, Facebook SDK, and various tracking and marketing tools. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR principles. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of Google reCaptcha for form protection, and cookie consent banners. However, it lacks explicit security headers and publicly available security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS information is privacy protected, which is common and justified for this type of business. Overall, the website presents a trustworthy and professional digital presence with moderate to good security and privacy compliance. Strategic improvements could include publishing explicit privacy and security policies, enhancing security headers, and providing incident response contact information to further strengthen trust and compliance.

J

Jóga Dnes

jogadnes.cz

10

Jóga Dnes is a well-established Czech media publication focused on yoga, health, and lifestyle topics. The website offers a rich content experience including articles, news, event calendars, and subscription services. It targets yoga enthusiasts primarily in the Czech Republic and maintains a consistent brand presence with active social media and newsletter engagement. Technically, the site uses a modern tech stack with popular libraries and frameworks, and it is mobile optimized with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced HTTP security headers and incident response disclosures. The absence of WHOIS data is a notable gap that impacts trust and legitimacy assessment. Overall, the site is professional, content-rich, and trustworthy, serving its niche audience effectively.

TOP REPORT is a Czech cultural and social magazine website established in 2008, providing news and articles on celebrities, music, health, theater, film, exhibitions, and local events. The website targets a general Czech-speaking audience interested in cultural and social topics. The business model is primarily content publishing supported by advertising and partnerships with cultural organizations. Technically, the site runs on WordPress 6.8.3 with common plugins and libraries such as jQuery, CanvasJS, and Owl Carousel, hosted on a Czech hosting provider. The website demonstrates good content quality, consistent branding, and moderate performance with mobile optimization. Security posture is basic with HTTPS usage but lacks advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and stable but would benefit from improved compliance and security practices.

D

Drips

drips.fr

42

Drips.fr is a French niche media website dedicated to graffiti culture, providing news, reports, photos, and videos. Supported by well-known graffiti brands Montana Colors, Grog, and Allcity.fr, it targets graffiti enthusiasts primarily in France. The site uses WordPress CMS with modern web technologies including Bootstrap, jQuery, and Owl Carousel, and integrates social media feeds and analytics tools. The website is well-structured with good content quality and SEO optimization, though it lacks some privacy compliance features such as cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the website's sponsorships and content quality support its credibility. Overall, the site is a valuable resource for its audience but could improve in privacy and security compliance.

D

DOMOPLAN SICAV, a.s.

domoplanfund.eu

39

DOMOPLAN SICAV, a.s. operates the Domoplan Fund, an investment fund specializing in premium residential real estate development primarily in the Czech Republic. The fund targets qualified investors seeking stable, low-risk investment opportunities with above-standard returns. The company emphasizes portfolio diversification, guarantee mechanisms, and transparency through webcams and detailed project information. Technically, the website employs modern JavaScript libraries and frameworks, including jQuery, Barba.js, and Highcharts, with a cookie consent mechanism and Google Analytics integration. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reputable real estate investment fund.

F

FIPOX a.s.

fipox.com

60

FIPOX a.s. is an established investment group primarily focused on real estate and financial consulting sectors, operating mainly in the Czech Republic with a portfolio of brands such as MyResorts, QPD, Stoix, Domoplan, and THIERRA. The company targets investors and partners interested in sustainable and innovative real estate projects and comprehensive financial services. Their business model combines investment with operational management of their brands, emphasizing long-term value creation. The website reflects a professional corporate presence with clear branding, contact information, and investor-focused content. Technically, the website employs a modern JavaScript stack including jQuery, GSAP, ScrollMagic, Owl Carousel, and analytics tools like Google Analytics, Microsoft Clarity, and Smartlook. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are evident, and some security headers appear missing. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, FIPOX presents a credible and professional business front with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

A

AiVision, s.r.o.

ai-shop.cz

46

AiVision, s.r.o. operates the website www.ai-shop.cz offering advanced e-shop solutions with ERP system integrations such as Pohoda, Helios, Money, Cezar, Premier, and SAP. The company targets small to medium-sized businesses seeking customizable e-commerce platforms with B2B and B2C capabilities. With over 20 years of experience and more than 1100 satisfied clients, AiVision positions itself as a reliable technology provider in the Czech Republic's e-commerce sector. The website showcases a modern, responsive design with comprehensive content, client references, and integration options, reflecting a mature digital presence. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring good performance and security basics. However, explicit security headers and incident response policies are not published, indicating areas for improvement. The site is GDPR compliant with a clear privacy and cookie policy, and contact information is readily available. WHOIS data is missing or privacy protected, which slightly reduces trustworthiness but does not negate the evident business legitimacy. Overall, the website demonstrates a strong business and technical foundation with moderate security posture and good privacy compliance.

S

Site officiel de la Ville de Tarbes

tarbes.fr

48

The website www.tarbes.fr serves as the official digital portal for the city of Tarbes, France, providing residents and visitors with comprehensive information about municipal services, news, urban planning, social programs, and cultural activities. The site is positioned as a key communication channel for the local government, offering a broad range of public service information and administrative resources. The target audience primarily includes local citizens, businesses, and visitors seeking official city information. Technically, the website is built on the WordPress CMS platform, utilizing popular plugins such as Yoast SEO for search engine optimization and Matomo for analytics, alongside Google Analytics which is disabled by default pending user consent. The site incorporates modern web technologies including jQuery, FontAwesome, and Leaflet for interactive maps. Mobile optimization and navigation clarity are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of a published privacy policy, terms of service, and incident response contact information represents gaps in compliance and transparency. The WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly given the official nature and branding of the site. Overall, the website demonstrates a solid foundation in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms documents, enhancing security headers, and establishing clear incident response channels to strengthen trust and compliance.

E

ESSENS Restaurant

essensrestaurant.cz

41

ESSENS Restaurant is a fine dining establishment located in South Moravia, Czech Republic, offering Michelin-quality gastronomic experiences focused on regional and seasonal ingredients. The website presents a professional and visually appealing interface with clear navigation and multilingual support, targeting discerning clients seeking high-end culinary experiences. The technical infrastructure leverages popular front-end libraries such as Bootstrap, jQuery, and Flexslider, alongside tracking and marketing tools including Google Tag Manager, Facebook Pixel, and Adform. While the site is mobile optimized and performs moderately well, some libraries are outdated and security headers are not evident, indicating room for improvement in security posture. The absence of privacy and cookie policies and missing WHOIS data represent compliance and trust concerns. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

T

Trendy Living

trendy-living.cz

44

Trendy Living is a Czech lifestyle and home decor website providing articles, tips, and product reviews focused on modern living and furniture. The site targets a general audience interested in home improvement and lifestyle trends. It operates primarily as a content publisher with advertising and partner promotions as key revenue streams. Technically, the website uses a mix of popular frontend libraries including jQuery, Bootstrap, and various sliders, along with Google Analytics and Facebook SDK for analytics and marketing. The site is served over HTTPS and includes a cookie consent mechanism, indicating some level of privacy compliance. However, explicit privacy policy and terms of service pages are not found, which is a compliance gap. Security posture is moderate with HTTPS and reCaptcha implemented but lacks security headers. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency but does not indicate malicious intent. Overall, the website is functional, professionally designed, and moderately secure, suitable for its business purpose.

V

Víkendový RELAX

vikendovyrelax.cz

44

Víkendový RELAX is a Czech hospitality content platform focusing on wellness resorts, hotels, and relaxation destinations. The website provides curated articles and recommendations for travelers seeking weekend getaways and wellness experiences primarily within the Czech Republic. The business operates as a content and referral platform, targeting individuals interested in leisure and hospitality services. Technically, the site is built on the PublicMC CMS platform using Bootstrap and jQuery frameworks, integrating multiple third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The website is mobile-optimized and features a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and detailed security policies. WHOIS data is unavailable, which reduces domain trustworthiness and suggests privacy protection or registration issues. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

GRAND Developer is a Czech online media platform specializing in real estate development projects, architectural news, interviews, and AI-generated content related to architecture and design. The website targets real estate developers, architects, and enthusiasts interested in the latest trends and projects in the Czech Republic and abroad. It operates under Studio Modern Creative and has been active since 2005, offering a niche content publishing business model supported by partnerships and advertising. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Translate, and reCAPTCHA, with a custom CMS platform. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, and the site uses HTTPS with a cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and dedicated security policy pages. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional and trustworthy front with comprehensive content and good technical implementation. The absence of WHOIS data reduces transparency but is common for Czech domains. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security posture.

C

Centrum léčby pohybového aparátu, s.r.o.

clpa-mediterra.cz

53

Centrum léčby pohybového aparátu (CLPA) is a specialized healthcare provider in the Czech Republic focusing on orthopedics, rehabilitation, and physiotherapy. It operates under the parent company Group Mediterra and holds recognized certifications such as the SAK accreditation, indicating high-quality medical care. The website presents a professional image with comprehensive service descriptions, clear contact information, and a user-friendly interface optimized for both desktop and mobile users. The target audience primarily includes patients seeking specialized musculoskeletal treatment and rehabilitation services. Technically, the site is built on WordPress with common plugins and modern JavaScript libraries, ensuring moderate performance and good SEO practices.

N

Nemocnice Tanvald, s.r.o.

nemocnice-tanvald.cz

50

Nemocnice Tanvald, s.r.o. is a regional healthcare provider located in Tanvald, Czech Republic, offering a broad range of ambulatory and inpatient medical services. Founded in 1889, the hospital operates in a modern renovated facility and is part of the Group Mediterra network, which includes several other healthcare and rehabilitation centers. The website presents a professional image with clear information about services, departments, and patient resources, targeting patients and visitors primarily in the Czech Republic. The business model focuses on comprehensive patient care with multidisciplinary medical teams across various specialties. Technically, the website is built on WordPress and employs modern JavaScript libraries such as jQuery and Owl Carousel for UI components. It integrates Google Analytics and Google Tag Manager for traffic analysis and marketing. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for privacy compliance. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the website content and affiliation with Group Mediterra support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Recommendations include adding security headers, publishing security policies, and implementing a vulnerability disclosure mechanism. Overall, Nemocnice Tanvald's website is a well-structured, professional healthcare portal with good privacy compliance and moderate technical maturity. Addressing minor security and transparency gaps will enhance trust and security posture further.

N

Nemocnice Sedlčany

nemocnice-sedlcany.cz

53

Nemocnice Sedlčany is a regional healthcare provider in the Czech Republic offering a wide range of medical services including surgeries, rehabilitation, and various specialized ambulances. The hospital is part of the Group Mediterra, indicating a structured parent company relationship. The website is professionally designed using WordPress CMS, with modern technologies such as jQuery, Owl Carousel, and Google Tag Manager integrated for analytics and user experience. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy in Czech language. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though security headers could be improved. Overall, the site reflects a trustworthy and professional healthcare institution with active communication channels and social media presence.

M

Mělnická zdravotní, a. s.

nemocnice-melnik.cz

44

Nemocnice Mělník is a significant multidisciplinary regional hospital in the Středočeský kraj of the Czech Republic, serving approximately 110,000 residents. It offers a broad spectrum of healthcare services including acute 24-hour care across multiple specialties such as surgery, traumatology, orthopedics, internal medicine, gynecology, neonatology, neurology, infectious diseases, anesthesiology, and rehabilitation. The hospital is part of the Group Mediterra healthcare network, which manages several related healthcare facilities and clinics. The website reflects a professional healthcare provider with comprehensive patient resources and clear communication channels. Technically, the website is built on WordPress and employs modern web technologies including jQuery, Owl Carousel, and Google Analytics for tracking. It uses HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. The site is mobile-optimized and provides good SEO and accessibility features, although some accessibility improvements could be made. From a security perspective, the website enforces HTTPS, uses security headers, and has secure contact forms. However, it lacks a publicly available security policy, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with consistent registrant information matching the healthcare entity's claims. Overall, Nemocnice Mělník's website demonstrates a high level of professionalism, security, and compliance suitable for a healthcare provider. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and security posture further.