Security Directory

Terrena is a well-established agricultural cooperative based in the Grand Ouest region of France, serving 18,000 member farms and employing 13,000 people. The cooperative focuses on supporting farmers through local supply chains and strong brand management, aiming to provide responsible and accessible food. The website reflects a mature digital presence built on WordPress, with good SEO, mobile optimization, and privacy-conscious analytics via Matomo. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism in place. Security posture is solid with HTTPS enforced, though explicit security headers and incident response policies are not published. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high due to consistent branding and external partner references.

A

Alumni Agro Bordeaux

alumni-agro-bordeaux.org

57

Alumni Agro Bordeaux is a French alumni association dedicated to graduates of Bordeaux Sciences Agro, providing a platform for networking, career development, and community engagement. The website offers access to alumni directories, event information, a career center, and a magazine publication, targeting agronomy professionals and students. Technically, the site uses a mix of modern JavaScript libraries and frameworks, including jQuery, Bootstrap, and hCaptcha for security, with a CMS likely based on NetAssoc. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and spam protection, though improvements in HTTP security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust analysis, but the association with reputable educational institutions and federations supports legitimacy. Overall, the website is professional, secure, and well-suited for its audience.

A

AnaEnsaia

anaensaia.org

58

AnaEnsaia is a French alumni association for graduates of ENSAIA, an agricultural engineering school. The website serves as a community hub offering networking, career services, events, and publications to its members. It is well-branded and professionally maintained, targeting alumni and professionals in the agricultural sector. The technical infrastructure uses modern JavaScript libraries and CMS features, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protection, and GDPR-compliant cookie consent, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but the website's content and social presence strongly indicate legitimacy. Overall, AnaEnsaia presents a trustworthy, professional online presence supporting its community effectively.

I

Institut Agro Alumni

institut-agro-alumni.fr

46

Institut Agro Alumni operates as a dedicated alumni community platform for graduates of Institut Agro schools in France. The website offers a range of services including networking, career support, event organization, and publication of a magazine. It targets alumni and professionals connected to the agricultural and educational sectors, positioning itself as a niche but important community resource. The platform integrates modern web technologies and provides a mobile-friendly experience, including a dedicated mobile app. Security measures such as HTTPS, CSRF tokens, and hCaptcha are implemented, alongside GDPR-compliant cookie consent mechanisms. Contact information and social media presence enhance trust and accessibility.

A

Aptalumni

aptalumni.org

48

Aptalumni is a well-established alumni association serving graduates of AgroParisTech, a prestigious French engineering school. The website provides a comprehensive platform for alumni networking, career services, events, solidarity initiatives, and publications. It targets AgroParisTech alumni and professionals connected to the institution, offering membership benefits and community engagement. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized organization in the education and non-profit sectors based in France. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, SweetAlert, and hCaptcha for security. It uses a specialized CMS likely based on NetAssoc. The site is mobile-optimized and includes accessibility and SEO best practices. Privacy and cookie policies are well implemented with GDPR compliance, including a consent banner managed by tarteaucitron. Analytics and error tracking are handled via Google Analytics and Raygun. Security posture is strong with HTTPS enforced, CSRF protection on forms, and bot mitigation via hCaptcha. However, security headers are not visibly configured, and no explicit security or incident response policies are published. WHOIS data is unavailable due to a malformed response, but the website's professionalism and content quality indicate legitimacy. No suspicious or malicious indicators were found. Overall, the site presents a low-risk profile with good privacy and security hygiene, serving an important educational community. Strategic improvements include adding security headers, publishing a security policy, and enhancing incident response transparency.

B

Breek

breek.fr

51

Breek is a French technology consultancy specializing in web strategy, functional specifications, and development services primarily using Drupal and iOS platforms. Established in 2003, the company serves a professional clientele including major brands such as LVMH, Apple, and BNP Paribas, positioning itself as a niche expert in web development and AMOA services. The website reflects a professional and consistent brand image with a clear focus on technology and consulting services. Technically, the site is built on Drupal CMS with modern JavaScript libraries and frameworks, offering good mobile optimization and SEO practices. Analytics are implemented via Piwik PRO, indicating moderate user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partial, lacking a cookie consent mechanism and detailed GDPR indicators. Overall, the website is trustworthy and professional, with a strong business credibility score and no signs of malicious or adult content.

C

Concrete CMS

concrete5.org

74

Concrete CMS is an open source content management system designed for teams including content creators, designers, and developers. It offers a website builder with built-in tools to simplify content editing and management. The company behind Concrete CMS, PortlandLabs, positions itself as a provider of secure, compliant, and enterprise-ready CMS solutions, serving notable clients such as the U.S. Army, BASF, and Home Depot. Their business model includes offering the open source CMS software alongside hosting, support, and custom development services. The website demonstrates strong branding consistency, professional design, and clear navigation, targeting medium-sized to enterprise organizations in technology and government sectors. Technically, the website leverages modern web technologies including jQuery, Bootstrap, Vue.js, and integrates analytics and marketing tools such as Google Tag Manager, Matomo, ZoomInfo, Leadfeeder, and Pipedrive LeadBooster. The CMS platform itself is Concrete CMS, hosted likely by PortlandLabs. The site is mobile optimized and performs moderately well, with good SEO and accessibility features. From a security perspective, Concrete CMS emphasizes compliance with ISO 27001, SOC 2, and HIPAA standards, offering role-based access control, workflow approvals, and version control. The site uses HTTPS and has cookie consent mechanisms. However, explicit security headers are not detected, and there is no public vulnerability disclosure or incident response contact information, which are areas for improvement. Overall, the website is professional, trustworthy, and content safe for general audiences. The main concern is the lack of WHOIS registration data, which raises questions about domain legitimacy despite the strong business presence. Strategic recommendations include improving security header implementation, publishing vulnerability disclosure policies, and clarifying domain registration details to enhance trust.

P

PortlandLabs

concretecms.org

72

Concrete CMS is an established open source content management system developed and maintained by PortlandLabs since 2008. It targets web developers and content editors seeking an easy-to-use, flexible CMS platform with built-in features and a strong community backing. The website positions Concrete CMS as a trusted solution used by governments and Fortune 500 companies, emphasizing security, extensibility, and user-friendly editing experiences. The business model revolves around open source software distribution complemented by community engagement and commercial support services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Vue.js, FontAwesome, and analytics tools such as Matomo and Google Analytics. The CMS itself is Concrete CMS, which is also the product being promoted. The site is mobile optimized, well-structured, and uses responsive design techniques. Performance is moderate with room for improvement in accessibility features. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes a dedicated security page. Cookie consent mechanisms and a comprehensive privacy policy demonstrate compliance with privacy regulations including GDPR. However, explicit security headers are not detected, and no public vulnerability disclosure or incident response contacts are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and well-maintained with a high level of content quality and business credibility. The lack of WHOIS data limits domain registration trust analysis, but the site’s branding and external trust signals strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, improving accessibility, and maintaining transparency in data protection practices.

L

Loyalty Marketing Services SAPI de CV

recomiendayganathermomix.mx

59

The website recomiendayganathermomix.mx serves as a login portal for a customer referral and rewards program associated with Thermomix products in Mexico. Operated by Loyalty Marketing Services SAPI de CV, the platform targets Thermomix customers to facilitate user authentication, password recovery, and registration. The site leverages modern frontend technologies such as jQuery, Bootstrap 5, and SweetAlert2, and is built on an ASP.NET Core Identity framework, indicating a mature technical infrastructure. The website is mobile optimized and presents a consistent brand image aligned with Thermomix official branding. From a security perspective, the site enforces HTTPS and includes anti-forgery tokens in forms, enhancing protection against common web attacks. However, the absence of security headers like Content-Security-Policy and lack of a cookie consent mechanism indicate areas for improvement. No explicit privacy or incident response policies are published on the site, which could impact compliance with data protection regulations. The WHOIS data is privacy protected but consistent with the business branding, and no suspicious patterns were detected. Overall, the website demonstrates a moderate to good security posture and technical maturity suitable for its business purpose. Strategic enhancements in privacy compliance, security headers, and transparency around data protection would strengthen trust and regulatory adherence. The platform's focused business model and clear target audience position it well within the niche Thermomix customer referral market in Mexico.

T

TN Média s.r.o.

salonkyhk.cz

44

Salonky is a regional news media website operated by TN Média s.r.o., focusing on delivering local news, sports, cultural events, and multimedia content to the Hradec Králové region in the Czech Republic. The site targets local residents and those interested in regional affairs, leveraging a content-rich platform with regular updates and social media integration. The business model appears to be advertising-supported, with visible banners and campaign redirects embedded in the site. Technically, the website is built on WordPress and utilizes modern front-end libraries such as jQuery, Bootstrap, Owl Carousel, and Font Awesome. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a responsive design and includes interactive features like video tabs and newsletter subscription forms. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. The newsletter subscription form uses JavaScript fetch API for secure data submission, but no explicit privacy policy or cookie consent mechanism is present, which may raise compliance concerns. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and design indicate a legitimate media outlet. Overall, Salonky presents a professional and content-rich platform for regional news but would benefit from enhanced privacy disclosures, security headers, and WHOIS transparency to improve trust and compliance. Strategic improvements in these areas will strengthen its security posture and user confidence.

W

Wp Royal

wp-royal.com

57

WP Royal Themes is a small technology company specializing in the development and sale of WordPress themes, targeting bloggers, small businesses, and WordPress users seeking quality, customizable themes. The company emphasizes customer support, providing forums, documentation, and video tutorials to enhance user experience. Their market position is that of a niche WordPress theme provider with a focus on quality and support, leveraging modern WordPress technologies and e-commerce capabilities via WooCommerce. Technically, the website is built on WordPress with a robust tech stack including WooCommerce, Yoast SEO, WPBakery Page Builder, and Slider Revolution. Hosting is provided by Bluehost Inc., and the site uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured data. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are provided, which could be improved for better trust and compliance. Cookie consent is implemented, indicating some GDPR compliance efforts. Overall, the website is professional, trustworthy, and safe for general audiences. The main risks relate to minor security hardening and privacy policy transparency. Strategic improvements in these areas would enhance compliance and user trust.

M

Město Říčany

ricany.cz

57

Město Říčany is the official municipal government website for the town of Říčany in the Czech Republic. It serves as a comprehensive portal for citizens and local businesses, providing news updates, cultural event calendars, public service information, official notices, and contact details. The site targets local residents and stakeholders, offering a user-friendly experience with multilingual support and clear navigation. The business model is focused on public administration and community engagement, positioning itself as a trusted local government authority. Technically, the website is built on WordPress with a modern tech stack including jQuery, WPML for multilingual support, and various plugins for GDPR compliance and user interaction. The site demonstrates good performance, mobile optimization, and accessibility features. It integrates Google Analytics and Tag Manager for analytics and marketing purposes, with a clear cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and uses best practices such as cookie consent and DOMPurify for sanitization. However, some minor issues like broken lazy loading images and missing explicit security headers (CSP, X-Frame-Options) were noted. The WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and official branding support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, fixing image loading errors, and adding a security.txt file for vulnerability disclosure to further strengthen trust and compliance.

F

Fondation Thuram

education-racisme.fr

49

The website education-racisme.fr is a French non-profit educational platform dedicated to combating racism through awareness and scientific knowledge dissemination. It is affiliated with the Fondation Thuram and offers interactive educational resources such as videos, animations, cards, and legal texts. The site targets educators, students, and the general public interested in anti-racism education. Technically, it is built on WordPress with common plugins for SEO and caching, and uses Google Analytics for visitor tracking. The site is secured with HTTPS and includes cookie consent mechanisms, reflecting good privacy compliance. However, WHOIS data is unavailable, likely due to privacy protection, but the website's content and partner affiliations support its legitimacy. Security headers could be improved, and accessibility and mobile optimization are basic but functional.

N

Nadace pro rozvoj architektury a stavitelství

stavbaroku.cz

45

Stavba roku is a Czech Republic-based non-profit foundation focused on promoting excellence in architecture and construction through various awards and competitions. The website serves as a platform to showcase these awards, provide information about the competitions, and engage with professionals and stakeholders in the construction and architectural sectors. The foundation operates with a clear mission to support architectural development and urban projects, targeting industry professionals and regional participants. The site is well-positioned in its niche with partnerships including media and construction industry leaders.

N

Netinteractive

webpublication.fr

61

Webpublication.fr is a French-based digital content creation company specializing in interactive digital publishing solutions such as catalogs, magazines, annual reports, and sales presentations. Established in 2007, it serves a broad B2B market including agencies and advertisers, positioning itself as a mature player with a solid client base and reputable testimonials. The website is built on WordPress with a modern tech stack including analytics and marketing tools, demonstrating a good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved and formal security policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with room for enhanced transparency in security and incident response.

M

Mauges Communauté

maugescommunaute.fr

48

Mauges Communauté is a French local government community of agglomeration providing a broad range of public services and information to residents and stakeholders within the Mauges territory. The website serves as an official portal offering details on governance, environmental initiatives, economic development, cultural activities, and citizen participation. It targets local residents and public sector stakeholders, positioning itself as a key regional authority. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Matomo analytics for user tracking. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Security posture is solid with HTTPS enforced and use of security plugins, but lacks visible security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain appears legitimate despite missing WHOIS data, consistent with privacy protection norms for government domains. Strategic improvements in security headers, privacy mechanisms, and transparency would enhance trust and compliance.

J

Josef Špaček

josefspacek.com

64

Josef Špaček's website serves as a professional digital portfolio showcasing his career as a renowned Czech solo violinist and former concertmaster of the Czech Philharmonic Orchestra. The site provides comprehensive information about his biography, upcoming concerts, media appearances, and album releases, targeting classical music enthusiasts and concert attendees. The website is built on the Squarespace platform, leveraging embedded media from YouTube and SoundCloud, and integrates social media channels for broader audience engagement. Technically, the site is well-structured with modern web technologies, responsive design, and basic accessibility features, though there is room for improvement in security headers and SEO enhancements. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced HTTP security headers. The absence of WHOIS data raises questions about domain registration transparency, though the professional presentation and consistent branding support legitimacy. Overall, the site is a high-quality, trustworthy artist portfolio with minor technical and compliance improvements recommended.

S

Společnost bratří Čapků

bratri-capkove.cz

48

Společnost bratří Čapků is a well-established Czech non-profit cultural society dedicated to promoting the legacy and works of the Čapek brothers. Founded in 1947, it serves a niche audience of literary enthusiasts, researchers, and the general public interested in Czech literature and culture. The website provides information about the society's history, membership, events, and contact details, reflecting a focused cultural mission. Technically, the site is built on Joomla CMS with common JavaScript libraries, offering a moderate performance and good mobile responsiveness. However, it lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but does not implement security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security measures.

D

Divadlo D21

divadlod21.cz

50

Divadlo D21 is a well-established theatre organization based in Prague, Czech Republic, founded in 2012. It offers theatrical performances, educational projects, and cultural events targeting the general public and schools. The website reflects a professional cultural institution with a clear focus on community engagement and artistic offerings. Technically, the site uses a mix of JavaScript libraries including jQuery, Vue.js, and Google Analytics for tracking, with a responsive design and moderate performance. Security-wise, the site implements GDPR compliance and cookie consent mechanisms but lacks visible HTTP security headers in the provided data, indicating room for improvement in security hardening. Overall, the domain registration and WHOIS data align well with the business profile, supporting legitimacy and trustworthiness.

C

Coop.tools

coop.tools

50

Coop.tools is a small technology-focused cooperative platform offering a suite of open-source digital collaboration tools including private cloud storage, blogging, federated video hosting, real-time document editing, and team chat. The platform also provides webmaster utilities such as hosting management and database administration. The website is built on the YesWiki CMS with modern frontend technologies like Bootstrap and FontAwesome, delivering a good user experience with clear navigation and mobile responsiveness. However, the site lacks explicit privacy and cookie policies, and no contact or business registration details are provided, which impacts trust and compliance perception. Security posture is moderate with HTTPS enabled and anti-CSRF tokens in forms, but missing security headers and incomplete WHOIS data reduce confidence. Overall, Coop.tools serves a niche cooperative audience with a focus on privacy-respecting, federated services but should improve transparency and security practices to enhance credibility.

Y

Yuba Gals Independent Media

peakmoment.tv

45

Peak Moment Television is a niche media organization focused on providing educational content related to sustainable living, community resilience, and personal growth. The website offers a variety of media including online videos, newsletters, and DVDs, targeting individuals interested in environmental and social sustainability. The business operates as a small media and educational entity based in the US, with a domain registration dating back to 2006, indicating a well-established presence. Technically, the website is built on WordPress using the Genesis Framework and hosted by DreamHost. The site employs modern web technologies such as jQuery and CSS3, with moderate performance and basic mobile optimization. SEO practices are adequate, but accessibility features are basic. The site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and important security headers, which could be improved to enhance security posture. From a security perspective, the site shows good basic practices such as HTTPS and domain transfer protection but lacks advanced security measures like DNSSEC and security headers. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure policies are present, which could be a risk in case of security incidents. Overall, the website is functional, content-rich, and trustworthy for its niche audience but would benefit from improved privacy compliance and enhanced security measures. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing incident response contacts to strengthen trust and compliance.

D

Dog-Eared Passport

johnhendersontravel.com

50

John Henderson's website 'Dog-Eared Passport' is a personal travel blog focused on travel adventures primarily in Rome, Italy, and other international destinations. The site offers travel stories, guides, and personal experiences targeting travel enthusiasts interested in Italy and global travel. The business model appears to be content publishing with monetization through advertising and affiliate marketing. The website is built on WordPress using the Themify Ultra theme and integrates several third-party tools including Google Analytics, Google Adsense, Mailchimp, and Grow.me. The technical infrastructure is modern but could benefit from enhanced security measures such as DNSSEC and security headers. The security posture is moderate with HTTPS enabled but lacks some best practices. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is accessible, well-structured, and provides good user experience with consistent branding and active social media presence.

W

WPlook Themes

wplook.com

44

WPlook Themes is a Canadian-based small technology company specializing in premium WordPress themes and hosting solutions. Established in 2010, it serves a broad audience including nonprofits, creatives, agencies, and businesses seeking high-quality, speed-optimized WordPress themes. The company operates an e-commerce model offering yearly and lifetime access to theme bundles, hosting plans, and customization services. The website demonstrates strong branding, professional design, and clear navigation, supported by a robust technical infrastructure built on WordPress, WooCommerce, and modern web technologies. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are integrated for user tracking and advertising purposes. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, WPlook presents a trustworthy and professional online presence with a mature digital footprint.

A

Ayush Valley Foundation

ayushvalley.org

50

Ayush Valley Foundation is a small non-profit organization founded in 2020 in India, dedicated to promoting Ayurveda and wellness through education, research, publications, and events. The website serves as a platform for professionals and scholars to collaborate and share knowledge, with a focus on bilateral exchange of Ayurveda practices globally. Technically, the website uses a modern tech stack including Bootstrap 4, jQuery, and various plugins, hosted likely via GoDaddy. The site is mobile optimized and has good SEO practices but lacks a CMS and advanced accessibility features. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy and cookie policies exist but lack explicit consent mechanisms. No direct company contact emails or phone numbers are published, only a contact form. Overall, the website is professional and trustworthy but could improve security and privacy compliance.

I

International Society for Traditional, Complementary & Integrative Medicine Research (ISCMR)

iscmr.org

66

The International Society for Traditional, Complementary & Integrative Medicine Research (ISCMR) is a well-established international scientific organization focused on advancing research in whole person healing and integrative healthcare. The website serves as a platform for knowledge exchange, membership services, and event promotion, targeting researchers and practitioners globally. The organization has a strong market position with multiple regional chapters and partnerships with reputable journals and research bodies. Technically, the website is built on the ClubExpress platform using ASP.NET WebForms and Telerik UI components, with integrations including Google Tag Manager and Zendesk for analytics and user engagement. The site demonstrates moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improvement. Privacy compliance is basic with presence of privacy and terms policies but no cookie consent mechanism. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy features.

O

KIM – KONGRES INTEGROVANÉ MEDICÍNY – Oficiální webové stránky Kongresu integrované medicíny.

openmedicine.cz

58

The website openmedicine.cz serves as the official platform for the 10th annual Congress of Integrated Medicine (KIM) held in Prague, Czech Republic. It targets medical professionals interested in integrated and alternative medicine disciplines such as acupuncture and homeopathy. The site provides event information, registration links, and partner details, positioning itself as a niche event organizer within the healthcare sector. The domain age and WHOIS data support the legitimacy and consistency of the business. Technically, the site is built on WordPress using Elementor and standard web technologies like jQuery and Bootstrap. It is hosted likely in the Czech Republic with HTTPS enabled, ensuring basic security. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS but does not publish security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies and security headers lowers the overall security posture. Overall, the website is functional, professional, and trustworthy for its purpose but would benefit from enhanced privacy compliance, security best practices, and transparency in contact and policy disclosures to improve user trust and regulatory adherence.

E

European Congress Integrative Medicine Madrid

ecim24madrid.com

57

The website ecim24madrid.com serves as the official platform for the XVI European Congress of Integrative Medicine scheduled in Madrid in 2024. It targets healthcare professionals and researchers interested in integrative medicine, providing detailed event information, speaker profiles, and program schedules. The site is professionally designed and well-branded, reflecting a reputable event organization with international reach. Technically, it is built on WordPress with common plugins for event management and galleries, hosted by Acens Technologies, a known hosting provider. The site uses HTTPS and includes Google Analytics for visitor tracking, but lacks some privacy compliance features such as a cookie consent mechanism. Security posture is moderate with room for improvement in DNS security and security headers. Overall, the site is trustworthy and functional, supporting the event's business goals effectively.

G

Gabriela Filippi

gabrielafilippi.cz

59

Gabriela Filippi's website serves as a personal brand platform focused on spirituality, healing arts, and cultural events primarily targeting Czech-speaking audiences interested in personal development and spiritual growth. The site offers a variety of content including podcasts, meditations, workshops, and theatrical performances, supported by an e-commerce section and event ticket sales. The business model revolves around content monetization and event participation, positioning Gabriela Filippi as a niche influencer in the Czech spiritual and cultural community. Technically, the website is built on WordPress using the Mioweb3 theme, leveraging common web technologies such as jQuery, Google Tag Manager, and Smartlook for analytics and user behavior tracking. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain registration data. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies in Czech language, aligned with GDPR requirements. Overall, the website presents a professional and trustworthy digital presence with good content quality and user experience, though it lacks direct contact information and advanced security policies.

Robert Policar operates a personal website focused on astrology, dream work, meditation techniques, and related personal development services. The business targets a general audience interested in spiritual and mental growth, offering services such as astrology consultations, Reiki, and gift vouchers. The website is positioned as a niche personal guidance service primarily serving the Czech Republic market. Technically, the site is built on WordPress using the MioWeb platform, hosted likely by Wedos, and employs common web technologies such as jQuery and Google Fonts. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but would benefit from improved privacy and security practices.

Studio Biorezonance is a small healthcare service provider based in the Czech Republic specializing in holistic and alternative medicine therapies, including biorezonance, massage, and anti-aging programs. The website presents a professional and clear overview of their services targeting adults, children, and pets. Technically, the site uses a traditional tech stack with jQuery and Bootstrap, hosted by a Czech hosting provider. While the site is functional and moderately optimized for mobile, it lacks advanced security headers and privacy compliance features such as privacy and cookie policies. The security posture is moderate with room for improvement in headers and script management. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security configurations would enhance trust and compliance.

D

Diochi

diochi.cz

48

Diochi.cz is an established Czech company specializing in the development, manufacturing, and sale of natural bioinformational dietary supplements. The website reflects a mature e-commerce platform with a membership club, targeting health-conscious consumers interested in natural products. The company has a long-standing domain since 2003, indicating stability and market presence. Technically, the site is built on Joomla CMS with modern JavaScript libraries and frameworks, supporting responsive design and accessibility at a basic level. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and advanced login options including WebAuthn, though some security headers could be improved. Advertising and analytics are implemented with user consent, reflecting GDPR compliance. Overall, the site is professional, trustworthy, and well-positioned in its niche.

E

Ekokoza s.r.o.

ekokoza.sk

67

Ekokoza s.r.o. operates a professional e-commerce website focused on supplying natural raw materials and kits for home production of cosmetics, candles, and food products. The company targets consumers interested in ecological and DIY lifestyle products primarily in Slovakia and the Czech Republic. The website demonstrates a mature digital infrastructure with modern tracking and marketing tools, good mobile optimization, and clear navigation. Privacy and cookie policies are well implemented with GDPR compliance, enhancing user trust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data aligns with the business claims, supporting legitimacy.

B

BSSHOP s.r.o.

bsshop.cz

60

BSSHOP s.r.o. is a Czech technology company specializing in the development of e-commerce platforms tightly integrated with the economic system POHODA. With over 20 years of experience and more than 650 active e-shops, the company holds a strong market position in the Czech and Slovak e-commerce sector. Their key services include e-shop creation, process automation, supplier integration, and marketing tools tailored for business clients. The website reflects a professional and business-oriented approach, targeting companies seeking robust e-commerce solutions integrated with POHODA. Technically, the website employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is safe, professional, and trustworthy for its intended business audience. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding incident response contacts, and improving accessibility to strengthen compliance and user trust.

D

Divadlo RB s.r.o.

divadlorb.cz

56

Divadlo RB s.r.o. operates the Divadlo Radka Brzobohatého theatre located in the center of Prague, Czech Republic. The company provides live theatrical performances including comedies, musicals, and classic plays, targeting a general audience interested in cultural entertainment. The business model revolves around ticket sales and event hosting, supplemented by a partner cafe service. The website reflects a well-established local cultural venue with a domain age dating back to 2004, indicating a stable presence in the market. Technically, the website is built on WordPress with modern web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for visitor tracking and uses Owl Carousel and FancyBox for UI enhancements. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting and domain registration are consistent with the Czech Republic location. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, but lacks important security headers and does not provide visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is available, and no security.txt file is found. The site does not expose sensitive data or show signs of vulnerabilities in the HTML content. Overall, the website is professional and trustworthy for its intended purpose but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing clear incident response contacts to improve trust and compliance.

D

Divadlo Hybernia

hybernia.eu

43

Divadlo Hybernia is a Czech theatre offering cultural performances and entertainment services, targeting a general audience interested in theatre arts. The website is built on WordPress and employs modern web technologies including Google Tag Manager, Microsoft Clarity, and FontAwesome for icons. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. However, it lacks explicit privacy and cookie policies, and no direct contact information is found in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for small businesses. Strategic improvements in privacy compliance and security practices are recommended.

H

Hudební divadlo Karlín

hdk.cz

55

Hudební divadlo Karlín is a musical theater company based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as a platform for event information, ticket sales, and e-commerce related to the theater's offerings. It targets a general audience interested in musical theater and cultural activities. The business model revolves around ticket sales, merchandise, and educational programs. The site is well-branded and consistent, reflecting a medium-sized cultural institution with a solid local presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various third-party libraries for UI components and tracking. It uses HTTPS and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event listings. From a security perspective, the site uses HTTPS but lacks explicit security headers and a published security policy or incident response contacts. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the security posture is moderate but could be improved with better transparency and technical controls. The overall risk is moderate; the site appears legitimate and functional but would benefit from enhanced privacy disclosures, security headers, and verified domain registration information to increase trust and compliance.

P

Login - pmb.community

pmb.community

63

PMB Community is a niche social network platform dedicated to users of the PMB library management software. It offers thematic spaces, forums, and collaborative tools such as wikis, shared calendars, and file sharing to facilitate knowledge exchange among librarians and documentalists. The platform is powered by the HumHub CMS and built on the Yii PHP framework, leveraging modern web technologies like jQuery and Bootstrap for a responsive and user-friendly experience. The website is secured with HTTPS and employs CSRF tokens to protect user interactions. However, it lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The WHOIS data is unavailable due to TLD restrictions and privacy protections, limiting domain registration transparency. Overall, the site presents a professional and safe environment for its target audience but could improve in privacy compliance and transparency.

P

Parola spol. s r.o.

jihlavske-listy.cz

49

Jihlavske-listy.cz is a regional news website operated by Parola spol. s r.o., serving the Vysočina region in the Czech Republic. The site offers a broad range of local news, cultural content, sports updates, and magazines, targeting residents and readers interested in regional affairs. The business model relies on advertising and subscription services, supported by a consistent brand presence and active social media engagement. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for tracking, and CKEditor for content management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA for form protection, but lacks visible security headers which are recommended for enhanced protection. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site presents a professional and trustworthy regional news platform with moderate technical and security maturity. Strategic improvements in security headers, privacy policy presence, and WHOIS transparency would enhance trust and compliance.

P

PhDr. Vladimír Sůva

denik-knihy.cz

55

Deník KNIHY is a Czech media platform focused on providing daily updated information about newly published books, authors, and literary events. It serves as a comprehensive resource for readers, publishers, distributors, and booksellers, offering a catalog of books with direct purchase options and editorial content including interviews and videos. The website is positioned as a key player in the Czech literary market, supporting both domestic and international authors with promotional services. Technically, the site is built on WordPress with common plugins for galleries and polls, integrates Google Analytics and Facebook SDK for tracking, and is hosted under a Czech registrar with appropriate domain age and consistency. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks formal privacy and cookie policies, which impacts its compliance posture. Security practices are basic with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is trustworthy and professional but could improve in privacy compliance and security hardening.

I

Institut pro TCIM/CAM, z. ú.

mkz2021praha.cz

53

The website www.mkz2021praha.cz serves as the official portal for the International Health Congress 2021 held in Prague, focusing on traditional, complementary, and integrative medicine (TCIM). It provides extensive information about the congress, including participant profiles, event recordings, publications, and a dedicated information platform called Platforma 2020 Praha. The site targets healthcare professionals, researchers, and the general public interested in TCIM, positioning itself as a niche but reputable organizer in the healthcare non-profit sector. Technically, the website employs a modern but straightforward tech stack including jQuery, bxSlider, simpleLightbox, Google reCAPTCHA, and Google Tag Manager for analytics. It is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. The site uses HTTPS and includes anti-bot measures on forms, but lacks advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data reduces transparency and trust slightly. Privacy compliance is basic, with a privacy policy implied on the contact page but no dedicated cookie or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich, supporting its mission to disseminate TCIM knowledge. Strategic improvements in security headers, privacy transparency, and WHOIS data availability would enhance trust and compliance.

G

Green Beauty Market

greenbeautymarket.cz

10

Green Beauty Market is a well-established event organizer specializing in natural, bio, vegan, and eco-friendly cosmetics, hosting Europe's largest pop-up event in this niche since 2016. The website effectively communicates the event details, brand values, and social media presence, targeting consumers interested in clean beauty products primarily in the Czech Republic and Slovakia. Technically, the site is built on WordPress with a modern theme and includes essential features such as cookie consent and GDPR compliance, though it lacks some advanced security headers and explicit security policies. The security posture is solid with HTTPS and cookie management but could be enhanced with additional headers and incident response information. Overall, the website is professional, trustworthy, and provides a good user experience with clear navigation and relevant content.

F

Fundación Estatal para la Formación en el Empleo - Fundae

fundae.es

64

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

E

ESSENS Restaurant

restaurantessens.cz

9

ESSENS Restaurant is a fine dining establishment located in the culturally significant Chateau de Frontiere in South Moravia, Czech Republic. It offers a high-end gastronomic experience focusing on multi-course tasting menus with locally sourced and seasonal ingredients. The restaurant targets discerning customers seeking Michelin-quality cuisine in a refined setting. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various sliders, with tracking integrations including Google Tag Manager and Facebook Pixel. However, there is a lack of visible privacy and cookie policies, and WHOIS data is unavailable, which impacts trust and compliance. Security headers are not evident, suggesting room for improvement in security posture. Overall, the website is professionally designed and user-friendly but requires enhancements in privacy compliance and security transparency.

P

Paris&Co

parisandco.com

10

Paris&Co is a territorial innovation agency serving Paris and its metropolitan area, focused on accelerating impactful projects related to sustainable transitions. The organization targets entrepreneurs, enterprises, institutions, and territories, providing sector-specific expertise and tailored programs to foster innovation. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. It integrates marketing and analytics tools such as Google Analytics and HubSpot, and implements a cookie consent mechanism to comply with privacy regulations. However, the absence of a visible privacy policy, terms of service, and explicit contact information limits full compliance and user trust. The lack of WHOIS data for the domain is a notable concern, although the website content and branding strongly indicate legitimacy. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information.

Axess Groupe is a French technology company specializing in cloud sovereign hosting and IT infrastructure services. They provide secure, performant, and compliant cloud hosting solutions tailored for enterprises, including healthcare data hosting certified under HDS and ISO 27001 standards. The company targets a broad range of clients from SMEs to large public institutions within France, emphasizing data sovereignty and security. Their website demonstrates a mature digital presence with comprehensive content, professional design, and strong GDPR compliance. Technically, the site uses Drupal CMS with modern analytics and marketing tools, ensuring good performance and accessibility. Security posture is strong with certifications and secure hosting practices, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS registration data slightly impacts domain trust but does not overshadow the overall professionalism and legitimacy of the business. Strategic recommendations include enhancing security disclosures and verifying domain registration details to improve trust further.

M

MVE Sarl

mve.fr

46

MVE Sarl operates a website focused on the sale of used construction and public works equipment, targeting businesses and professionals in the construction sector primarily in France. The company has a long-standing domain registered since 1999, indicating an established presence in the market. The website uses WordPress with WooCommerce for e-commerce functionality and integrates SEO and analytics tools such as Yoast SEO and Google Tag Manager. The technical infrastructure is modern but lacks some advanced security headers and explicit privacy compliance documentation. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but no published security or incident response policies were found. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

C

Chiesi Global Rare Diseases

chiesirarediseases.com

10

Chiesi Global Rare Diseases is a family-owned biopharmaceutical company specializing in rare disease therapeutics. The company positions itself as a Certified B Corporation committed to providing innovative treatments and support to patients with rare diseases. Their market position is niche but well-established, supported by a clear business model focused on research, development, and patient advocacy. The website reflects a medium-sized enterprise with a global presence and a parent company, Chiesi Farmaceutici S.p.A., which recently acquired Amryt Pharma, expanding its portfolio. Technically, the website uses modern frameworks such as Bootstrap and integrates Google Tag Manager for analytics. Hosting is managed via EasyDNS, and the site is mobile-optimized with good SEO practices. Accessibility is basic but present. Security posture is adequate with HTTPS enforced, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the security posture is solid with no critical vulnerabilities detected, but the absence of a public security policy or incident response information is a gap. The domain WHOIS data is consistent with the business claims, showing transparency and legitimacy. The website content is safe for general audiences, focusing on healthcare and patient support without any adult or explicit content. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

F

Fondation Lilian Thuram

thuram.org

46

Fondation Lilian Thuram is a French non-profit organization dedicated to education against racism and promoting equality. The website serves as a platform to provide educational resources, multimedia content, and public awareness campaigns. It targets a broad audience including educators, students, and activists. The foundation is well-positioned in the non-profit education sector with a clear mission and professional online presence. Technically, the site is built on WordPress with common plugins and multimedia integrations, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website's content and structure support its legitimacy. Overall, the site is a credible and valuable resource for anti-racism education.

S

Storck

riesen.de

10

The website www.riesen.de represents the RIESEN brand, a confectionery product line specializing in dark chocolate caramel candies, owned by the established company Storck. The site serves primarily as a marketing and informational platform, providing detailed product descriptions, nutritional information, and brand-related content targeted at general consumers in Germany. The website is professionally designed with consistent branding and clear navigation, optimized for mobile devices and compliant with GDPR through a visible privacy and cookie consent mechanism. Technically, the site employs modern JavaScript libraries such as RequireJS, jQuery, and Lodash, and uses Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. No direct contact emails or phone numbers are published, but a contact page is available. Overall, the site is trustworthy, safe, and well-maintained, reflecting the reputation of the parent company Storck.