Security Directory

G

Galileo Corporation s.r.o.

infocentrumostravice.cz

9

Infocentrum Ostravice operates as a local municipal information center serving the Beskydy recreational area in the Czech Republic. It provides comprehensive tourism-related services including accommodation listings, event calendars, weather forecasts, and local news. The website is professionally designed with consistent branding and targets tourists, families, seniors, and cyclists visiting the region. The business is supported by Galileo Corporation s.r.o., which operates the website infrastructure. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, ensuring good mobile responsiveness and accessibility. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks advanced security headers and published privacy policies. The absence of WHOIS data limits full domain legitimacy verification, though the site content and external links suggest a trustworthy municipal service. Overall, the website is functional, informative, and serves its local tourism audience effectively.

S

SMOLO a.s.

smolo.cz

48

SMOLO a.s. is a Czech regional company specializing in waste management, road maintenance, demolition, and earthworks primarily in the Moravian-Silesian region. The company emphasizes sustainable waste handling, including reuse and recycling, and maintains strong long-term customer relationships. Their market position is that of a regional leader with a medium-sized business footprint. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Nette Framework, with Google Analytics and reCAPTCHA integrated for analytics and security. The site is mobile optimized and well-structured, though some accessibility features could be improved. Security posture is good with HTTPS and cookie consent implemented, but lacks explicit security headers and a vulnerability disclosure mechanism. WHOIS data is unavailable, limiting domain legitimacy verification, but the professional presentation and active social media presence support credibility. Overall, the website is functional, secure, and compliant with basic privacy regulations, serving its regional business audience effectively.

D

Destinační management turistické oblasti Beskydy-Valašsko o.p.s

beskydyportal.cz

54

The website www.beskydyportal.cz serves as a comprehensive tourism portal for the Beskydy and Valašsko regions in the Czech Republic. It offers extensive information on local attractions, accommodation options, events, cycling and hiking routes, and multimedia content to support tourism activities. The portal targets families, couples, and individual tourists seeking regional travel experiences. The business operates as a regional destination management organization, supported by Czech Ministry for Regional Development funding, and maintains partnerships with official tourism entities. Technically, the site employs a modern web stack including Bootstrap, jQuery, Google Maps API, Mapy.cz API, and Leaflet.js for interactive maps. It integrates social media SDKs and tracking pixels such as Facebook Pixel and uses Google reCAPTCHA for form security. The site is mobile-optimized with responsive design and includes cookie consent mechanisms, although it lacks explicit privacy and terms of service pages. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish a privacy policy or incident response contacts, which are important for GDPR compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain legitimacy verification, but the presence of official logos and consistent branding supports trustworthiness. Overall, the site is a well-structured, content-rich tourism portal with good technical implementation and moderate security posture. To enhance trust and compliance, it should publish privacy and terms policies, implement security headers, and provide clearer contact information. Domain registration details should be verified to ensure legitimacy and reduce risk.

The website sfpi.cz represents the Státní fond podpory investic (SFPI), a Czech government fund focused on providing loans and grants for housing, regeneration of public spaces, and construction of rental housing. It serves public sector entities and legal persons in the Czech Republic, offering financial support and consulting services. The site is professionally designed, with clear navigation and relevant content in Czech language, targeting municipalities and public investors. Technically, the site is built on WordPress with modern plugins for SEO, accessibility, and cookie compliance, hosted by a Czech registrar. Security posture is good with HTTPS and cookie consent, though explicit security headers and vulnerability disclosure mechanisms are absent. The domain registration data is consistent with the business profile, indicating legitimacy. Overall, the site is trustworthy and well-maintained, supporting government housing initiatives.

J

JoomlArt

joomlart.com

57

JoomlArt is a well-established provider of Joomla templates, extensions, and related services with over 19 years of experience and a large customer base exceeding 300,000 members. The company operates multiple top Joomla clubs, offering a comprehensive suite of products including the T4 Page Builder and T4 Framework, targeting Joomla developers and businesses seeking professional website solutions. Technically, the website is built on Joomla CMS with modern frameworks and libraries, optimized for mobile and SEO, and integrates multiple analytics and marketing tools. Security posture is good with HTTPS enforced and secure payment indicators, though explicit security policies and incident response details are lacking. The absence of WHOIS domain registration data is a concern but the website's content quality, branding, and community presence support its legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the Joomla ecosystem.

Tlapnet s.r.o. operates a customer portal primarily serving its telecommunications customers in the Czech Republic. The portal provides login access for customers to manage their services such as internet, television, and VOIP. The website is professionally designed with a clear structure and good mobile optimization, leveraging modern JavaScript libraries and frameworks including jQuery, Bootstrap, Alpine.js, and the Nette Framework. The domain registration and hosting are consistent with the company's Czech location and business profile, indicating legitimacy and stable operation since 2019. From a security perspective, the site uses secure form practices such as POST method and password input types, but lacks visible HTTP security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates a moderate to good security posture but would benefit from implementing formal privacy and cookie policies, security headers, and vulnerability disclosure mechanisms to improve compliance and trust. The technical infrastructure is modern but could be enhanced with better accessibility and SEO optimizations. The risk level is moderate with no critical vulnerabilities detected in the visible content.

A

Aqualia

aqualia.com

68

Aqualia is a large, established Spanish company specializing in the integral management of the water cycle, with participation from FCC Group and IFM Investors. The company focuses on sustainable water management services targeting municipalities and citizens, emphasizing social responsibility and environmental sustainability. The website reflects a mature digital presence built on the Liferay CMS platform, integrating modern technologies such as jQuery, Bootstrap, and Google Tag Manager. It features comprehensive content, clear navigation, and multilingual support, indicating a well-maintained corporate site. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit incident response policies are recommended. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and trust signals. Overall, the site is suitable for general audiences and aligns well with corporate and regulatory standards.

Graphene Themes Solutions is a small technology company specializing in the development and support of WordPress themes, notably the Graphene theme family. With over 1.5 million downloads and a strong community presence, they offer both free and premium themes alongside custom website development services. Their market position is that of a reputable and established WordPress theme provider with a loyal user base. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies and third-party analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks important security headers and explicit cookie consent mechanisms. The absence of WHOIS registration data for the domain is a notable anomaly that impacts trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for its business, but improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

C

City Digital Media s.r.o

citydigital.cz

53

City Digital Media s.r.o operates a network of digital out-of-home (DOOH) advertising panels across shopping centers, fitness centers, healthcare facilities, and gas stations throughout the Czech Republic. The company offers integrated hardware and software solutions, including an intuitive online content management system and device monitoring, aimed at maximizing brand visibility and customer reach. Their website reflects a professional and consistent brand image, showcasing a broad client base and emphasizing GDPR compliance through privacy policies and consent mechanisms. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy.

B

BESIP

besip.cz

60

BESIP is the primary governmental entity responsible for coordinating road safety efforts in the Czech Republic. It operates as an expert body under the Ministry of Transport, focusing on education, awareness campaigns, and safety strategies for various road users including pedestrians, cyclists, drivers, and motorcyclists. The website serves as a comprehensive resource for road safety information, educational materials, and campaign updates, targeting a broad audience from the general public to professionals in the field. Technically, the website is built on ASP.NET WebForms with integration of modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js. It employs Kentico CMS for content management and includes features like Google Maps integration and social sharing tools. The site is mobile-optimized and demonstrates good SEO practices, although some legacy technology components remain. From a security perspective, the site enforces HTTPS and includes CSRF protection tokens in forms. It implements a cookie consent mechanism aligned with GDPR requirements. However, no explicit security headers were detected, and no public security or incident response policies are available. The absence of WHOIS data limits domain registration transparency, but the official government domain and consistent branding support legitimacy. Overall, BESIP's website is a well-structured, authoritative platform for road safety in the Czech Republic, with a solid technical foundation and good privacy compliance. Enhancements in security headers and public security policies would further strengthen its posture.

S

STOPNI TO s.r.o.

stopnito.cz

48

STOPNI TO s.r.o. operates the website www.stopnito.cz, providing specialized chip timing and GPS tracking services for various sports events primarily in the Czech Republic. Their offerings include race timing, online results publication, GPS tracking maps, start and finish line equipment, and race registration support. The company targets sports event organizers and participants, positioning itself as a niche service provider with a localized market focus. The website content is professionally presented, with clear navigation and relevant service descriptions, supporting a small business model.

Č

Český svaz koloběhu z. s.

ceskykolobeh.cz

43

Český svaz koloběhu is a Czech non-profit organization dedicated to the promotion and development of scooter sports nationally and internationally. It serves as the governing body for scooter sports in the Czech Republic, organizing events, supporting clubs, and representing Czech interests in international federations such as IKSA. The website provides event calendars, news updates, club information, and registration portals to serve its community of athletes and enthusiasts. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including My Calendar and GP Premium. It uses modern web technologies such as HTTPS, Google Fonts, and jQuery. The site is mobile-optimized and accessible with good SEO practices, though performance is moderate. Hosting is provided by a Czech hosting provider associated with the registrar WEDOS. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, indicating room for improvement in compliance and security posture. Analytics are implemented via WP Statistics with moderate user tracking. Overall, the website is professional and trustworthy with consistent branding and active content. The main risks relate to privacy compliance and security best practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

C

CNL Invest

cnlinvest.cz

49

CNL Invest operates the website Zadosti.cz, a Czech Republic-based platform offering a smart application designed to simplify the process of obtaining confirmations about the existence of engineering networks for construction projects. The company targets builders, IT infrastructure managers, and state employees, providing services that reduce administrative burdens and minimize risks related to errors and delays. The business is positioned as a niche service provider within the real estate and construction sector, founded in 2018, with a small company size and a focused market presence. Technically, the website is built on WordPress using the Elementor page builder, hosted on Azure DNS infrastructure. It employs modern web technologies including Google Tag Manager and Google Analytics for tracking and performance monitoring. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features, delivering a moderate performance experience. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and there is no visible security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy digital presence with strong privacy compliance and a clear business focus. Strategic improvements in security headers and incident response documentation would enhance its security posture and trustworthiness.

R

Requestor.com s.r.o.

servicedesk.net

49

Requestor.com s.r.o. is a technology company specializing in advanced helpdesk and ticket management solutions for customer service and internal operations. Their offerings include a cloud-based platform and an on-premises server version, both featuring integrated AI to enhance service delivery. The company targets businesses seeking efficient communication consolidation and ticketing systems. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and no exposed sensitive data, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the website is professional and functional but would benefit from enhanced compliance and security disclosures.

The Adventist Organizational Directory is a long-established, authoritative online resource maintained by the General Conference Corporation of Seventh-day Adventists. It serves as a comprehensive locator and reference for Adventist churches, schools, and other entities worldwide, targeting members, researchers, and the general public interested in Adventist organizational information. The website provides updated contact information and facilitates change requests, differentiating itself from the Adventist Yearbook by including local entities and more frequent updates. Technically, the website employs a custom-built platform leveraging jQuery, jQuery UI, Google Tag Manager, and TrustArc for cookie consent management. It is hosted behind Cloudflare DNS services but lacks DNSSEC, and some scripts are loaded over HTTP, which may introduce mixed content risks. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks visible security headers and DNSSEC, which are recommended for enhanced protection. The cookie consent mechanism indicates GDPR compliance efforts, although no explicit security or incident response policies are published. Overall, the security posture is moderate with actionable recommendations to improve DNS security, script delivery, and header implementation. The website is trustworthy and professional, with consistent branding and clear organizational affiliation. It does not contain any adult or questionable content, making it safe for general audiences. The domain registration data supports legitimacy with a long history and consistent organizational identity. Strategic improvements in security and technical modernization would enhance the site's resilience and user trust.

주

주식회사 니온밸리코리아

fightersmarket.co.kr

62

Fightersmarket.co.kr is a Korean e-commerce website specializing in Brazilian Jiu-Jitsu apparel, belts, and accessories, operating both online and with a physical store in Seongsu-dong. The business targets martial arts practitioners seeking premium and diverse brands. The website is built on the Godomall platform, leveraging modern JavaScript libraries and integrates analytics and marketing tools such as Facebook Pixel and Naver Analytics. The site is well-structured with good design and navigation, optimized for mobile devices. Security posture is adequate with HTTPS and CSRF tokens, but lacks explicit security headers and privacy compliance mechanisms. WHOIS data shows transparent registration with no privacy protection, consistent with the business profile and domain age. Overall, the site is credible and functional but could improve privacy and security policies.

O

ONF International

onfinternational.org

43

ONF International is a French-based consulting and expertise firm specializing in forestry management, sustainable forest practices, and climate change mitigation projects. Operating globally with subsidiaries in Latin America and Africa, it serves both public and private sector clients. The company is a subsidiary of the Office National des Forêts (ONF), leveraging French forestry expertise internationally. The website is professionally designed, multilingual, and provides comprehensive information about its services and projects. Technically, the website is built on WordPress with modern web technologies including Google Analytics, Tag Manager, and reCAPTCHA for security. It uses HTTPS with a valid SSL certificate and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and has good SEO and accessibility basics, though some security headers are missing. From a security perspective, the site shows good practices such as HTTPS enforcement and bot protection on forms. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. WHOIS data is unavailable due to privacy protection, but the domain and website content appear legitimate and consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and enhanced security headers would further strengthen its posture.

A

AUMOVIO Aftermarket GmbH

cryptontechnology.com

62

Continental Aftermarket, operated by AUMOVIO Aftermarket GmbH, is a prominent player in the automotive aftermarket sector, offering a comprehensive range of products including replacement parts, garage equipment, tyres, and specialized vehicle solutions. The company targets automotive professionals, garages, and distributors primarily in the United Kingdom and internationally. The website reflects a mature B2B business model with strong branding and a broad product portfolio. Technically, the website employs modern tracking and consent management technologies, ensuring GDPR compliance and user privacy. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes a Content Security Policy, but could enhance security headers further. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data retrieval issues, which slightly impacts trustworthiness. Overall, the website demonstrates a solid digital presence aligned with Continental's brand standards.

T

Téčko, příspěvková organizace

vratnice.com

63

The website www.vratnice.com represents Téčko, příspěvková organizace, a cultural organization operating the Vrátnice Art & Music Club and Café & Bar in Rožnov pod Radhoštěm, Czech Republic. The business focuses on providing cultural events, music performances, café services, and venue rental, targeting a general audience interested in arts and culture. The website is professionally designed with clear navigation and good mobile optimization, supporting the organization's community engagement and event promotion efforts. Technically, the site uses common JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear consistent and trustworthy. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional, compliant, and serves its business purpose well, but improvements in security and domain registration transparency are recommended.

F

Fresh Services, s.r.o.

freshservices.cz

53

Fresh Services, s.r.o. is a Czech digital marketing agency established in 2007, specializing in digital marketing and web development services. The company maintains a professional online presence with active social media profiles and a website optimized for SEO and user experience. Their business model focuses on providing marketing and web solutions to businesses primarily in the Czech Republic. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Cookiebot for compliance and analytics. The site is mobile-optimized and uses Google Tag Manager for marketing and tracking purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though additional security headers could improve protection. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

ENERGETICKÝ A PRŮMYSLOVÝ HOLDING, a.s.

epholding.cz

48

ENERGETICKÝ A PRŮMYSLOVÝ HOLDING, a.s. (EPH) is a leading Central European vertically integrated energy holding company managing approximately 70 subsidiaries across multiple European countries including the Czech Republic, Slovakia, Germany, Italy, the UK, Ireland, France, and Switzerland. The company focuses on electricity generation, gas and electricity distribution, gas storage, renewable energy production, gas transit, and district heating services. The website presents comprehensive corporate, investor, and sustainability information, reflecting a mature enterprise with a strong market position in the energy sector. The business model centers on managing a diversified portfolio of energy assets and infrastructure to ensure energy security and support energy transition goals.

Z

Zserver s.r.o.

zserver.cz

49

Zserver s.r.o. is a Czech-based small business specializing in webhosting, managed server administration, and web development services, particularly for popular CMS and e-commerce platforms such as WordPress, PrestaShop, and ZenCart. The company has been operating since 2001 and positions itself as a trusted provider for small to medium-sized businesses seeking optimized hosting solutions and related IT services. Their website reflects a professional and consistent brand image with clear service offerings and customer references. Technically, the website is built on WordPress with common plugins like Yoast SEO and Complianz GDPR for privacy compliance. It uses jQuery and Cufon for font rendering and includes Google Analytics and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, no advanced security headers were detected, and there is no publicly available security or incident response policy. The WHOIS data for the domain is unavailable, likely due to privacy protection, but the website content and contact information suggest legitimacy. Overall, the security posture is adequate but could be improved with additional headers and published policies. The overall risk assessment indicates a trustworthy and professional small business website with moderate technical maturity and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain a strong security posture.

Levné weby is a small Czech-based web development company specializing in affordable web presentations, e-shops, and SEO consulting services. The company targets small and medium businesses or individuals primarily in the Czech Republic, offering comprehensive web solutions including domain and hosting management, graphic design, content management systems, and ongoing support. The website is professionally designed using WordPress with the Sydney theme and includes GDPR-compliant privacy and cookie policies, reflecting a moderate level of digital maturity. Technically, the site employs standard web technologies such as PHP, jQuery, Bootstrap, and WooCommerce, with cookie consent managed by the Complianz GDPR plugin. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response documentation could enhance protection. Overall, the site is trustworthy and functional, though the absence of direct contact information and WHOIS data limits full business transparency.

E

Reboots – Masážní nohavice pro úlevu a regeneraci nohou ❤️

e-reboots.cz

45

The website e-reboots.cz is an e-commerce platform specializing in massage pants designed to aid in leg recovery and muscle regeneration. The business targets athletes and individuals seeking enhanced physical recovery, positioning itself as a niche player in the wellness and sports retail sector within the Czech Republic. The site features product listings, video content, and endorsements from sports professionals, enhancing its market credibility. Technically, the site is built on WordPress with WooCommerce, leveraging common web technologies such as jQuery and various plugins for UI and marketing integrations. The site is mobile optimized and SEO friendly, with structured data implemented via Yoast SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and formal incident response information. Privacy compliance is weak due to missing privacy and cookie policies, which poses a risk for GDPR adherence. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.

U

UNEF

unef.es

60

UNEF is the leading Spanish association representing the solar photovoltaic sector, with over 790 member companies and coverage of more than 90% of the industry activity in Spain. The website serves as a comprehensive platform for advocacy, certifications, industry reports, events, and member services, positioning UNEF as a key stakeholder and spokesperson in the renewable energy market. Technically, the website employs modern web technologies including Google Analytics and Tag Manager, uses HTTPS with good SSL configuration, and provides a responsive and well-structured user experience. Security posture is solid with encrypted communications and cookie consent mechanisms, though it lacks publicly disclosed security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for industry participants and stakeholders.

S

SYNOT Interactive

synotinteractive.com

47

SYNOT Interactive is a Czech-based technology company specializing in iGaming software solutions with over 20 years of expertise. They offer a broad portfolio of products including casino aggregation, live casino, sports betting, poker, lotteries, and responsible gaming solutions tailored for operators. The company holds a strong market position with high-profile partnerships and a medium-sized operational scale. Their website reflects a professional and modern digital presence built on WordPress with advanced SEO and user experience features. Security posture is solid with HTTPS and responsible disclosure policies, though some improvements in security headers and privacy compliance are recommended. The absence of WHOIS data for the domain is a notable concern but does not detract significantly from the overall trustworthiness given the company's transparency and business indicators.

I

International Fiscal Association, Česká republika

ifa-cr.cz

55

International Fiscal Association, Česká republika is a non-profit organization serving as the Czech branch of the international IFA. It focuses on tax law education, research, and networking among tax professionals, academics, and government officials. The website provides information about membership, statutes, upcoming events, and contact details. Technically, the site is built on JavaServer Faces with PrimeFaces and uses Matomo for privacy-respecting analytics. Security posture is adequate with HTTPS and session management, but lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy, serving a niche audience in the tax and fiscal law domain.

C

CFE Tax Advisers Europe

taxadviserseurope.org

48

CFE Tax Advisers Europe is a professional organization dedicated to supporting tax advisers across Europe through publications, events, and a European Register of Tax Advisers. The organization positions itself as a key player in European tax policy advocacy and professional standards development. The website reflects a medium-sized non-profit entity with a clear focus on finance and government sectors. Technically, the website is built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities, supported by plugins like Ultimate Member for user management. The infrastructure is hosted by OVH sas, a reputable provider, and employs HTTPS with reCAPTCHA for form security. However, DNSSEC is not enabled, and no advanced security headers were detected, indicating room for security enhancements. Privacy compliance is weak, with no visible privacy or cookie policies, which could pose regulatory risks. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.

Svaz účetních České republiky, z. s. is a well-established professional association founded in 1990 that serves accounting professionals, auditors, and tax advisors in the Czech Republic. The organization provides certification programs, publishes specialized accounting journals, and offers educational seminars and online professional systems. Their website reflects a professional and consistent brand presence with clear contact information and a comprehensive offering of services tailored to finance professionals and non-profit organizations. Technically, the site employs modern web technologies including Google Fonts, jQuery, Foundation framework, and integrates Google Analytics and Facebook Pixel for tracking. Security measures include HTTPS enforcement and use of Google reCAPTCHA on login forms, though security headers are not detected and could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. However, WHOIS data is unavailable, which reduces domain registration trustworthiness, though the website content and business information appear legitimate. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable resource for its target audience.

T

The Fast Mode

thefastmode.com

71

The Fast Mode is an independent research and media company specializing in telecommunications news, analysis, and industry insights. Founded in 2013, it serves a professional audience including telecom operators, technology providers, and industry analysts. The website offers breaking news, expert opinions, white papers, and event coverage, supported by advertising and newsletter subscriptions. Technically, the site is built on Joomla CMS with modern JavaScript libraries and integrates Google Analytics, AddThis, and OneSignal for analytics and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and CSRF protections, though it lacks some security headers and explicit incident response contacts. Privacy and cookie policies are present but lack explicit consent mechanisms. WHOIS data is unavailable, which reduces domain trustworthiness, but the website's professional content and social presence support legitimacy. Overall, the site is well-maintained, content-rich, and trustworthy for its target audience.

P

Pulse 2.0 LLC

pulse2.com

52

Pulse 2.0 LLC operates a specialized online media platform delivering business news, profiles, and deal flow coverage primarily focused on finance sectors such as venture capital, private equity, asset management, and mergers and acquisitions. Established in 2002, the website serves business professionals and investors seeking timely and relevant industry insights. The platform leverages WordPress CMS with modern web technologies including Bootstrap and jQuery, supported by Google Tag Manager and Google Analytics for marketing and analytics purposes. The site demonstrates good content quality, professional design, and clear navigation, optimized for mobile devices. From a security perspective, the website enforces HTTPS and employs domain registration locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms despite the use of tracking scripts. Contact information is limited to a web form and social media channels, with no direct emails or phone numbers disclosed. Overall, Pulse 2.0 presents a credible and professional business news service with moderate technical maturity and security posture. The absence of advanced privacy controls and security disclosures suggests room for improvement in compliance and transparency. The domain's long history and consistent registration details support the legitimacy of the business. Strategic recommendations include enabling DNSSEC, implementing cookie consent to comply with privacy regulations, publishing a security policy and incident response contacts, and conducting regular security audits of third-party scripts to enhance trust and security culture.

R

Radical Apps

usedust.com

53

Usedust.com is the official website for Dust, a secure messaging app developed by Radical Apps. The site promotes a suite of privacy-focused digital tools including encrypted messaging, private web search, and identity theft protection. The business targets privacy-conscious users seeking secure communication solutions. The website is built on WordPress and hosted on AWS infrastructure, leveraging modern web technologies and multimedia content to engage visitors. While the site is professionally designed and mobile-optimized, it lacks some advanced privacy compliance features such as a cookie policy and explicit GDPR indicators. Security posture is moderate with HTTPS enforced but missing DNSSEC and security headers. The domain registration is consistent and legitimate, with no privacy protection used, indicating transparency. Overall, the website presents a credible business with room for improvement in privacy and security practices.

T

Three Commas™

threecommas.com

69

Three Commas™ is an e-commerce apparel company co-founded by billionaire Mark Cuban, targeting entrepreneurs and fashion consumers. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing tools such as Facebook Pixel and Shopify Analytics. The site presents a professional and consistent brand image with a focus on apparel sales. Technically, the site is well-structured with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and security practices.

R

Revy Apps

revy.io

61

Revy Apps is a small Canadian-based company specializing in developing premium Shopify applications aimed at helping merchants grow their online stores. Their product portfolio includes apps such as Unlimited Bundles & Discounts and Unlimited Smart UpSell Offers, targeting Shopify store owners seeking to increase sales through automated and easy-to-use tools. The company has been operational since 2017 and serves thousands of merchants globally, positioning itself as a niche player in the e-commerce app market. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, and several UI libraries like Owl Carousel and Slick Carousel. It integrates Google Analytics and Helpscout Beacon for analytics and customer support, respectively. The site is hosted behind Cloudflare DNS, ensuring reliable performance and security, although DNSSEC is not enabled. The website is mobile-optimized with good SEO practices and a clean, professional design. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks several security headers and does not implement a cookie consent mechanism, which may impact privacy compliance. No explicit security policies or incident response contacts are published, and no vulnerability disclosure program is evident. The WHOIS data is consistent with the business claims, showing a legitimate registration with no privacy protection, enhancing trust. Overall, Revy.io presents a trustworthy and professional online presence with a solid business model and technical foundation. To improve, the company should enhance privacy compliance by adding cookie consent, implement security headers, and publish security policies. These steps will strengthen their security posture and regulatory adherence, supporting continued growth and customer trust.

S

Sirdata

sirdata.com

55

Sirdata is a well-established French technology company specializing in privacy-compliant data solutions for advertisers, agencies, and publishers. Their offerings include cookieless targeting, audience targeting, server-side Google Tag Manager deployment, and a premium consent management platform (ABconsent CMP). The company has a strong market presence with over 500 clients and recognized industry certifications, positioning itself as a trusted player in the advertising technology sector. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and custom CMP scripts, and is hosted by OVH sas. The site is mobile-optimized with good SEO and accessibility features, although some security headers are missing. Performance is moderate, with room for improvement in DNS security by enabling DNSSEC. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers or deletions. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR. Overall, Sirdata presents a professional, trustworthy, and privacy-conscious digital presence with minor technical and security enhancements recommended to further strengthen its posture.

V

Ville de La Rochelle

larochelle.fr

56

The website www.larochelle.fr serves as the official digital presence of the City of La Rochelle, France. It provides comprehensive municipal information, including news, public services, cultural and sports activities, urban planning, and citizen administrative procedures. The site targets residents, visitors, local businesses, and municipal stakeholders, positioning itself as a key government resource. The business model is public service-oriented, with no commercial intent, focusing on transparency and citizen engagement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and accessibility tools like ReadSpeaker. It employs cookie consent management via tarteaucitron and uses Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure appears stable and professionally maintained. From a security perspective, the site enforces HTTPS and uses cookie consent with anonymized IP tracking, reflecting GDPR compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces domain registration trust signals but does not detract from the site's legitimacy given its official nature and content quality. Overall, the website is a well-maintained, secure, and user-friendly municipal portal. Strategic recommendations include enhancing security headers, ensuring WHOIS data availability for transparency, and maintaining regular audits of third-party scripts to uphold security and privacy standards.

Z

Základní škola Jablůnka

zsjablunka.cz

48

Základní škola Jablůnka is a small primary educational institution located in the Czech Republic, serving approximately 200 students from grades 1 through 9. The school is municipally operated by the local government of Jablůnka and offers comprehensive educational services including daycare and a school canteen. The website reflects a well-maintained digital presence with regular updates on school activities and events, targeting students, parents, and the local community. Technically, the site employs common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience across devices. However, the site lacks advanced security headers and formal privacy and terms of service documentation, which are important for compliance and trust. The absence of WHOIS data limits domain legitimacy verification, but the presence of official contact details and local government affiliation supports the site's authenticity. Overall, the website demonstrates a good balance of content quality and technical implementation but would benefit from enhanced security and privacy compliance measures.

M

Mateřská škola Jablůnka

ms-jablunka.cz

50

Mateřská škola Jablůnka is a small, local preschool educational institution located in the Czech Republic, serving the community of Jablůnka and surrounding areas. The website provides official information about the school, including educational programs, events, contact details, and news updates targeted primarily at parents and guardians of preschool children. The business model is that of a public or municipal preschool, focusing on early childhood education and related services. The site is well-branded and consistent with its educational mission. Technically, the website uses a combination of common web technologies including jQuery, Bootstrap, Swiper, and PhotoSwipe, integrated into a custom or proprietary CMS platform. The site is mobile optimized, accessible, and structured with clear navigation. Performance is moderate, with no major technical issues detected. However, there is no explicit hosting provider information or advanced frameworks identified. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published security policies. No WHOIS data is available, which reduces domain trustworthiness. There are no signs of vulnerabilities or malicious content, but the absence of privacy and terms of service documents and incident response contacts indicates room for improvement in compliance and transparency. Overall, the website is functional, trustworthy for its intended audience, and professionally presented. Strategic improvements in security posture, privacy compliance, and domain registration transparency would enhance its credibility and resilience.

J

JRK Česká republika s.r.o.

meneodpadu.cz

58

JRK Česká republika s.r.o. is a medium-sized company specializing in waste management consulting and solutions primarily targeting municipalities and local governments in the Czech Republic. With over 10 years of experience, JRK offers services such as PAYT system implementation, waste data tracking, composting solutions, and digital platforms to improve waste management efficiency and sustainability. The company positions itself as a trusted partner with a strong focus on environmental responsibility and cost savings for public entities. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and ActiveCampaign. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. However, some security headers are not explicitly detected, and the site relies on multiple external scripts which require ongoing security monitoring. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but improvements are recommended in implementing comprehensive security headers and ensuring robust input validation on forms. The absence of WHOIS data reduces transparency and trust slightly, but the presence of ISO 14001 certification and EU co-financed projects supports legitimacy. Overall, JRK Česká republika presents a professional and credible online presence aligned with its business goals. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and possibly publishing a security.txt file to improve vulnerability disclosure and incident response readiness.

F

French Riviera Pass

frenchrivierapass.com

53

French Riviera Pass operates a professional multilingual tourism website offering city passes for Nice and the Côte d'Azur region. The business targets tourists seeking convenient access to attractions and discounts. The website is built on WordPress with modern performance and SEO optimizations, including lazy loading and Google Tag Manager integration. Security posture is good with HTTPS enforced, but lacks explicit security headers and a visible incident response policy. The absence of WHOIS data for the domain is a notable anomaly that reduces trust, though the website content and design are professional and trustworthy. Overall, the site demonstrates a mature digital presence suitable for its hospitality sector niche.

F

Flocon Vert

flocon-vert.org

47

Flocon Vert is a French non-profit organization providing a sustainability label for mountain tourism destinations committed to ecological transition. The website presents detailed information about the label, criteria, partner destinations, and upcoming events. It targets mountain destinations, tourism professionals, and environmentally conscious visitors. The site is built on WordPress with Elementor and integrates modern web technologies and Google analytics tools. Security posture is good with HTTPS and CAPTCHA protections, but lacks some security headers and explicit privacy/cookie policies. Contact information and social media presence enhance business credibility. Overall, the site is professional and trustworthy with a clear mission in sustainable tourism.

R

R' La Radiostation

laradiostation.fr

39

R' La Radiostation is a regional French radio station focused on serving mountain vacationers in the Tarentaise area. The website provides radio broadcasting content, news updates in French and English, and weather information relevant to its audience. The business appears to be a small, local media entity with a domain registered since 2004, consistent with its described history. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Elementor, hosted by OVH, and uses HTTPS for secure connections. However, it lacks explicit privacy and cookie policies, contact information, and security headers, which are important for compliance and security best practices. Overall, the site is functional and professionally designed but could improve in privacy compliance and security hardening.

L

Les Arcs Reservation

lesarcs-reservation.com

51

Les Arcs Reservation operates as the official online booking platform for accommodations and ski packages in the Les Arcs ski resort area in France. The website offers a variety of lodging options including apartments, hotels, chalets, and all-inclusive ski packages, targeting tourists and vacationers seeking a seamless reservation experience. The business positions itself as a trusted local expert with a focus on customer service and comprehensive offerings for winter and summer stays. Technically, the website is built on the Drupal CMS platform and leverages modern JavaScript libraries such as jQuery, Swiper.js, and Air Datepicker to provide an interactive and responsive user experience. The site is mobile-optimized and includes SEO best practices, although performance is moderate. Security is implemented with HTTPS and secure form handling, but lacks some advanced security headers and explicit privacy and cookie policies. From a security perspective, the site shows a good baseline with HTTPS and no visible vulnerabilities in the HTML content. However, the absence of WHOIS registration data and domain transparency is a concern, reducing overall trustworthiness. No incident response or vulnerability disclosure information is provided, and privacy compliance indicators are minimal. Overall, the website is professional and functional with strong business credibility but would benefit from improved transparency in domain registration, enhanced privacy compliance, and stronger security header implementation to increase trust and security posture.

E

EUROIMMUN Medizinische Labordiagnostika AG

euroimmun.info

53

Euroimmun Medizinische Labordiagnostika AG is a large, internationally recognized manufacturer of medical diagnostic products, specializing in reagents and test systems for autoimmune, infectious, and allergy diagnostics. The company operates globally with multiple country-specific domains and is part of the Revvity, Inc. portfolio. The website is built on TYPO3 CMS, employs Piwik analytics, and offers a comprehensive product portfolio with a professional and modern design. However, the absence of explicit privacy and cookie policies and lack of WHOIS registration data reduce the overall trust and compliance posture. Security headers are not detected, and incident response information is missing, indicating areas for improvement in security maturity. Overall, the website is well-structured and serves its target audience effectively but would benefit from enhanced transparency and security practices.

M

Ministério da Gestão e Inovação em Serviços Públicos

vlibras.gov.br

69

The website represents an official Brazilian government digital service focused on accessibility, specifically the VLibras suite which provides automatic translation of digital content into Brazilian Sign Language (Libras). It is a collaborative initiative involving multiple government ministries and a federal university, positioning it as a key public service for digital inclusion of deaf individuals. The site is well-structured, professionally designed, and leverages modern web technologies and accessibility standards to deliver its content effectively. Technically, it uses Plone CMS and integrates common libraries such as jQuery and Font Awesome, hosted likely on government infrastructure with strong SSL and security headers in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though incident response contacts and vulnerability disclosure mechanisms could be improved. Privacy and cookie policies are present and appear comprehensive, aligning with GDPR and Brazilian LGPD requirements. Overall, the site is trustworthy, professional, and serves a critical government function in digital accessibility.

G

Grosset Janin

grossetjanin.com

46

Grosset Janin is a well-established French company specializing in custom wooden chalet construction and renovation, with a history dating back to 1950. The company targets clients seeking bespoke chalet solutions, offering turnkey projects and renovation services. The website is professionally designed, bilingual (French and English), and optimized for performance and mobile devices. The technical infrastructure is based on WordPress with modern optimization tools like NitroPack and includes integrations such as Google Tag Manager and Google Maps API. Security posture is solid with HTTPS enforced and domain locking, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website reflects a credible and trustworthy business with room for enhanced transparency and security documentation.

M

Manufacture Mercier

mercier.cc

71

Manufacture Mercier is a heritage French brand specializing in premium cycling apparel, leveraging a century-old legacy dating back to 1919. The company operates an e-commerce platform built on Shopify, targeting discerning cyclists seeking high-quality textiles designed in France and manufactured in Europe. The website reflects a strong brand identity with rich multimedia content and a professional design that enhances user experience and trust. Technically, the site employs modern web technologies and integrates multiple marketing and analytics tools, ensuring robust performance and customer engagement. Security posture is solid with HTTPS enforcement and privacy compliance, although explicit security policies and incident response details are absent. The domain WHOIS data is unavailable, which introduces some uncertainty regarding domain registration legitimacy, but the overall digital presence and branding suggest a credible business. Strategic recommendations include publishing security policies, improving transparency on incident response, and addressing WHOIS data gaps to enhance trust.

E

Energiequelle GmbH

energiequelle.de

69

Energiequelle GmbH is a well-established family-owned company founded in 1997, specializing in the development, construction, and operation of renewable energy projects including wind energy, photovoltaic systems, substations, hybrid solutions, and energy storage. With over 600 employees and international presence across Europe and South Africa, the company positions itself as a reliable partner in the energy transition sector. The website reflects a professional and comprehensive digital presence, leveraging the Neos CMS and modern web technologies to deliver content effectively. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are not directly found in the provided content. Overall, the company demonstrates strong business credibility and technical maturity, with room for improvement in transparency of security and privacy documentation.

E

Epta Finland

epta-finland.com

70

Epta Finland is a specialized Finnish sales company established in 2003, providing comprehensive refrigeration solutions and services primarily to the Finnish food retail sector. The company operates multiple offices across Finland and emphasizes sustainable refrigeration technologies. Their business model focuses on product sales, installation, maintenance, and after-sales services, positioning themselves as a market leader in their niche. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 10 with modern front-end libraries and integrates marketing and analytics tools such as Google Tag Manager and Pardot. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS domain registration data is a notable concern, suggesting either privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site is professional, compliant with GDPR, and serves its business purpose effectively.