Security Directory

V

Vorwerk

espace-recettes.fr

44

The website espace-recettes.fr serves as the official French platform for Thermomix recipes, offering a large database of over 29,000 recipes and fostering a community of Thermomix users. It is closely integrated with the Thermomix ecosystem, including the Cookidoo® platform, and is branded under Vorwerk, the parent company. The site targets French-speaking cooking enthusiasts and Thermomix owners, providing recipe search, user forums, and product information. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and lazy loading, with integration of Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is used, but explicit security headers are not visible in the provided data. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. No WHOIS data was found, which slightly reduces trust but the official branding and domain context support legitimacy. Overall, the site is a well-maintained community platform with moderate to good security posture and compliance.

L

LOU Rugby

lourugby.fr

10

LOU Rugby is a professional rugby club based in France, operating an official website that serves as a hub for news, ticketing, merchandise, business partnerships, and event information. The website targets rugby fans and stakeholders, providing up-to-date content and branded experiences. The digital infrastructure is built on Drupal 8, integrating modern web technologies such as Matomo for analytics and Google DFP for advertising, alongside a cookie consent mechanism to address privacy requirements. The site demonstrates good mobile optimization and user experience, with consistent branding and clear navigation. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or terms of service pages, which are recommended for compliance and trust. WHOIS data is unavailable, likely due to privacy protection, but the domain and content appear legitimate and consistent with the business purpose. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and security hardening.

B

Brownells France

brownells.fr

58

Brownells France operates as a specialized e-commerce retailer focused on firearms accessories, spare parts, and gunsmithing tools, serving primarily the French market. The website demonstrates a professional design with clear navigation and a comprehensive product catalog targeting shooting sports enthusiasts, hunters, and armory professionals. The company emphasizes customer satisfaction with trust signals such as high customer ratings and a long-standing market presence. Technically, the site leverages modern JavaScript libraries, the ePages platform, and integrates marketing and analytics tools like Microsoft Clarity and APSIS, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and incident response disclosures are missing. The absence of WHOIS data is a notable gap, slightly impacting trustworthiness, but the overall business credibility remains good based on content and operational indicators.

5

5DM.cz

affiliateclub.cz

52

AffiliatePort.eu is a well-established international affiliate marketing network operating primarily in the Czech Republic and other European markets. The company, operated by 5DM.cz, offers a comprehensive affiliate platform with a strong network of publishers and exclusive performance projects. Their services include affiliate campaign management, conversion tracking, and publisher support, targeting e-commerce businesses and publishers seeking monetization opportunities. The website reflects a professional and consistent brand image with multilingual support and clear calls to action for advertisers and publishers. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO, mobile responsiveness, and moderate performance. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though additional security headers could enhance protection. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent, including email, phone, and social media channels. Overall, the site demonstrates a mature digital presence with a trustworthy reputation and solid business credibility.

V

VSA Xtreme s.r.o.

vsaxtreme.cz

57

VSA Xtreme s.r.o. is a Czech-based sports entertainment agency specializing in freestyle BMX, scooter, and parkour shows, camps, and events. Established in 2011, the company has a strong presence in the Czech Republic and parts of Europe, offering professional sports shows and athlete representation. Their website reflects a well-structured and content-rich platform targeting families, youth, and sports enthusiasts. Technically, the site is built on WordPress with modern plugins for multilingual support and cookie consent, ensuring a good digital maturity level. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a professional and trustworthy business presence with good compliance to privacy regulations.

Y

Y-zone

yzone.sk

47

Y-zone is a Slovak esports and gaming news platform established in 2018, providing timely articles, event information, and community engagement for gamers and esports enthusiasts primarily in Slovakia and the Czech Republic. The website leverages modern web technologies including React and Next.js, ensuring a responsive and user-friendly experience. Hosting is managed via WebSupport with DNSSEC enabled, and HTTPS is enforced, reflecting a solid technical foundation. However, the site lacks visible privacy and cookie policies, which presents compliance risks under GDPR. Security posture is generally good with no critical vulnerabilities detected, but the absence of incident response and vulnerability disclosure information limits transparency. Overall, Y-zone is a credible regional media outlet with room for improvement in privacy compliance and security documentation.

S

Svět receptů

svetreceptu.cz

50

Svět receptů is a Czech-language online community platform dedicated to sharing cooking recipes, particularly catering to Thermomix® users. The website offers a rich collection of recipes, user forums, and integration with the official Thermomix Cookidoo® platform, positioning itself as a niche community hub for cooking enthusiasts in the Czech Republic. The technical infrastructure leverages modern JavaScript libraries such as jQuery, Facebook SDK, Google Tag Manager, and lazy loading techniques to enhance user experience and performance. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response information. Overall, the site is functional, content-rich, and safe for general audiences but would benefit from enhanced privacy compliance and security best practices to increase trustworthiness.

A

AffiliatePort.eu

affiliateport.eu

52

AffiliatePort.eu is a well-established international affiliate marketing network based in the Czech Republic, operating for over 12 years. It offers a comprehensive affiliate platform with a strong partner base, proprietary performance projects, and services tailored for advertisers and publishers. The company is positioned as one of the leading affiliate networks in Central and Eastern Europe, supported by a professional website with multilingual support and clear business communication. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good SEO, mobile optimization, and user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policies or vulnerability disclosure pages. Overall, the domain registration data aligns well with the business claims, reinforcing trust and legitimacy.

A

ABF, a.s.

forkids.cz

50

ForKids.cz is a well-established Czech trade fair website focused on children's toys, games, and related products, organized by ABF, a.s. The event has a strong market presence with over 21,000 visitors and a history dating back to 2004. The website is professionally designed, multilingual (Czech and English), and provides comprehensive information for visitors, exhibitors, and media. Technically, it leverages WordPress with modern plugins and tracking tools, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant. Overall, the site reflects a mature digital presence with trustworthy business information and active partner engagement.

A

ABF, a.s.

forgames.cz

50

FOR GAMES is a well-established Czech interactive entertainment and video game festival organized by ABF, a.s., with a history dating back to 2012. The festival attracts over 26,000 visitors and offers a variety of activities including BYOC LAN tournaments, cosplay events, and gaming zones, positioning itself as a significant player in the Czech gaming and entertainment market. The website reflects a professional and consistent brand image, targeting gamers, families, and cosplay enthusiasts. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and incident response information are missing. Overall, the site is safe, compliant with GDPR, and free from adult or questionable content, making it suitable for a general audience.

Č

České modelky s.r.o.

ceskepromoterky.cz

55

České modelky s.r.o. is a professional event staffing company specializing in providing promoters, hostesses, and models primarily in the Czech Republic and neighboring countries. With over 25 years of experience and a large database of personnel, the company positions itself as a reliable partner for various promotional and event activities. The website reflects a mature business with clear service offerings and client references. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and interactive user experience. However, the absence of WHOIS data and lack of published privacy and security policies slightly diminish trust. Security measures such as CAPTCHA and GDPR consent are present, but additional improvements in security headers and incident response transparency are recommended. Overall, the website is professional and trustworthy, but could benefit from enhanced compliance documentation and technical security hardening.

A

Advisio marketing s.r.o.

advisio.cz

56

Advisio marketing s.r.o. is a well-established digital marketing agency based in the Czech Republic, operating since 2006. The company specializes in e-commerce marketing services including PPC advertising, SEO, data analytics, email marketing, consulting, and training. It serves multiple Central European markets and has a strong reputation supported by numerous industry certifications and client testimonials. The website is professionally designed, mobile-optimized, and provides comprehensive information about services and client successes. Technically, the site uses WordPress CMS with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and form protections, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the business presence and certifications. Overall, Advisio presents a credible, professional, and secure digital marketing service provider.

H

Hotel Mazanka

hotel-mazanka.cz

44

Hotel Mazanka is a hospitality business operating a hotel near the center of Prague, offering accommodation and conference facilities. The hotel has historical significance as it was originally built in 1968 for foreign scientists and guests of the Czech Academy of Sciences. The website reflects a small-sized, niche hospitality provider with a clear focus on comfort and accessibility. The business is affiliated with the Academy of Sciences of the Czech Republic, enhancing its credibility and trustworthiness. Technically, the website is built on OpenCms and uses a combination of legacy and modern web technologies including jQuery 1.11.0, Slick Carousel, and Google Analytics. The site is mobile optimized with good navigation and content quality, though some technical improvements could be made such as updating JavaScript libraries and enhancing accessibility features. The website is fully accessible with no blocking or WAF challenges detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. The WHOIS data is unavailable or privacy protected, which is common but limits domain registration transparency. The contact information is clear and professional, supporting business credibility. Overall, the website presents a trustworthy and professional hospitality business with moderate technical maturity and some room for security and privacy improvements. Strategic recommendations include implementing security headers, adding cookie consent, updating libraries, and publishing explicit security policies to enhance trust and compliance.

S

Středisko společných činností AV ČR, v. v. i.

zamek-liblice.cz

55

Zámek Liblice operates as a historic hospitality and conference center affiliated with the Academy of Sciences of the Czech Republic (Akademie věd ČR). It offers accommodation, conference facilities, wellness services, restaurant dining, and event hosting including weddings. The venue leverages its cultural heritage and baroque architecture to attract visitors seeking a unique experience. The business targets general audiences including tourists, corporate clients, and event organizers. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized operation with a niche market position in the hospitality sector.

S

Středisko společných činností AV ČR, v. v. i.

bistro-narodni.cz

54

Bistro Národní operates as a hospitality and catering service located within the main building of the Academy of Sciences of the Czech Republic in Prague. It provides daily lunch menus, coffee, snacks, catering for events, and conference room rentals. The website is professionally designed, targeting institutional clients and visitors to the Academy. The business model focuses on serving a niche market within a government/non-profit research environment, leveraging its association with the Academy for trust and credibility. Technically, the website uses OpenCms CMS with modern JavaScript libraries such as jQuery and Slick Carousel. It employs Google Fonts and Font Awesome for styling and icons. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Analytics are implemented via Plausible, indicating a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for compliance with EU regulations. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the website's content and institutional affiliation strongly indicate legitimacy. Overall, the website presents a trustworthy and professional digital presence for Bistro Národní, with room for improvement in security headers and privacy compliance to enhance user trust and regulatory adherence.

P

Profitroom

profitroom.net

74

Profitroom is a hospitality technology company specializing in direct booking solutions for hotels, resorts, and hotel groups. Their website presents a professional and consistent brand image, targeting hospitality businesses seeking to enhance direct booking capabilities. The site is built on HubSpot CMS and integrates modern marketing and analytics tools such as Google Analytics 4, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and mobile-optimized, providing a good user experience and SEO optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, explicit security headers and incident response information are lacking. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and technology usage suggest a legitimate business presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to improve security headers, provide contact and legal information, and verify domain registration.

S

Storck

toffifee.cz

61

The website www.toffifee.cz represents the Toffifee confectionery brand, a product line under the larger Storck company. It targets a general audience with family-friendly content promoting its unique chocolate and caramel treats. The site is built on TYPO3 CMS and uses modern JavaScript libraries to deliver a responsive and visually appealing user experience. Privacy compliance is addressed with a cookie consent banner and a linked privacy policy in Czech. However, the absence of WHOIS data limits transparency and trust assessment. Security posture is moderate with no detected security headers and unknown SSL configuration. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is professional and trustworthy but could improve transparency and security practices.

C

Comin.cz, s.r.o.

growito.cz

45

GROWITO is a Czech-based digital platform specializing in lead management and online marketing with artificial intelligence support. The platform aims to maximize business opportunities by converting potential leads into paying customers through a synergistic approach combining marketing and sales activities. The website targets a broad audience including medium to large companies, small businesses, automotive sector, and marketing agencies. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google reCAPTCHA, and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses bot protection mechanisms but lacks visible advanced security headers and published security policies. Privacy compliance is partially addressed via a cookie consent mechanism, but no explicit privacy policy or terms of service were found. Overall, the website presents a professional and trustworthy front with room for improvement in privacy and security transparency.

G

Goldfein s.r.o.

goldfein.cz

51

Goldfein s.r.o. is a Czech bakery manufacturer with a long tradition of over 80 years, specializing in traditional products such as Pardubický perník and other confectionery items. The company operates manufacturing facilities in Chrudim and Pardubice and holds multiple certifications including IFS, UTZ, RSPO, and a license from the Celiac Association, supporting its market position as a trusted supplier to retail chains domestically and internationally. The website is built on Drupal 8 with modern front-end technologies and includes multilingual support, cookie consent mechanisms, and Google Analytics integration with IP anonymization, reflecting a moderate level of digital maturity.

F

FCC Environment CEE

fcc-group.eu

60

FCC Environment CEE is a prominent waste management company operating in Central and South East Europe, offering a wide range of services including municipal, business, household, and environmental waste solutions. The company emphasizes sustainability and resource efficiency, supported by ISO certifications and a clear mission statement. The website demonstrates a mature digital presence with multimedia content, social media integration, and comprehensive cookie consent mechanisms. Technically, the site uses modern JavaScript libraries and tracking tools, though some security headers and explicit security policies are not publicly visible. The absence of WHOIS registrant data suggests privacy protection, which is justified for this business type. Overall, the site is professional, trustworthy, and well-positioned in its market.

H

Hortim-International, spol. s r.o.

hortim-kariera.sk

62

Hortim-International, spol. s r.o. operates a professional career portal focused on transportation and logistics job opportunities primarily in the Czech Republic and Slovakia. The website serves as a recruitment platform for Hortim Group companies, listing active job positions with detailed descriptions and locations. The company appears to be a medium-sized regional employer with a stable workforce and a clear focus on employee satisfaction and retention. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery, Slick Carousel, and SimpleLightbox. It employs Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata enhancing search engine visibility. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with a valid SSL certificate, but lacks some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Privacy compliance is strong, with clear user consent and data protection information. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. The lack of WHOIS data due to privacy protection does not detract significantly from legitimacy, given the consistent business information and domain usage. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining transparency in data retention practices.

A

ABF, a.s.

veletrhkosmetiky.cz

50

The website veletrhkosmetiky.cz represents a professional event organizer, ABF, a.s., specializing in biannual beauty trade fairs in the Czech Republic. The site targets beauty professionals, exhibitors, and visitors interested in cosmetics, hairdressing, nail design, and foot care. It offers comprehensive event information, exhibitor catalogs, and professional competition details, positioning itself as a leading organizer in the beauty industry within the region. Technically, the site is built on WordPress with modern libraries and plugins, including Google Tag Manager and Yoast SEO, ensuring good SEO and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security best practices and accessibility.

E

EDF solutions solaires

edfenr.com

69

EDF solutions solaires is a well-established French company specializing in photovoltaic solar energy solutions for both residential and professional clients. The company positions itself as a leader in the French solar autoconsumption market with over 20 years of experience and more than 100,000 customers. Their services include installation, maintenance, financing, and administrative support for solar panel projects. The website reflects a professional and comprehensive approach to solar energy, targeting individuals and businesses seeking sustainable energy solutions. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries such as jQuery and Google Tag Manager for analytics and marketing. The site is well-optimized for SEO, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. Consent management is handled via Didomi, ensuring GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration and includes some security headers, though the Content-Security-Policy header is commented out and could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact is noted as an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern lies in the WHOIS data, which is missing or unavailable, potentially due to privacy protection or registry issues. This should be monitored to ensure domain legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving transparency around incident response.

M

MS Group

wemakespaces.archi

49

MS Group operates the website 'We Make Spaces - MS Architekti', an established architectural studio based in the Czech Republic since 1990. The company specializes in architectural design, urban planning, and realization of various projects including residential, commercial, and public spaces. The website presents a professional image with a clear focus on their services and portfolio, targeting clients seeking architectural and urban planning expertise. Technically, the site uses a moderate technology stack including Bootstrap, jQuery, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile optimized and has good SEO practices but lacks visible privacy and cookie policies, which is a compliance concern. Security posture is moderate with HTTPS usage but no detected security headers or explicit security policies. WHOIS data is unavailable due to privacy protection and malformed WHOIS response, limiting domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

P

Pin Up Secret

pinup-secret.fr

55

Pin Up Secret is a French e-commerce company specializing in natural cosmetic products, particularly those based on goat milk. Established in 2011, the company offers a range of skincare products including soaps, exfoliants, peelings, and curated sets targeting women seeking effective and natural beauty solutions. The website is professionally designed, mobile-optimized, and integrates modern e-commerce technologies such as PrestaShop, Google Tag Manager, and secure payment options including Scalapay and PayPal. Privacy and cookie policies are present, indicating compliance with GDPR requirements. The security posture is strong with HTTPS enforced and use of reCAPTCHA to protect forms. Customer trust is reinforced by a high volume of positive reviews and certification from Société des Avis Garantis. Overall, the website presents a trustworthy and professional online presence with moderate to good technical maturity.

T

TOMPRINT

tomprint.cz

48

TOMPRINT is a Czech-based company specializing in textile printing and promotional product services, including screen printing, digital printing, sublimation, embroidery, and advertising production. With an established presence of approximately 35 years, they serve both business and individual customers through a physical location in Prague and an online e-shop. The website reflects a professional and customer-focused business with clear contact information and positive customer testimonials. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager and analytics scripts, with a cookie consent mechanism implemented to comply with privacy regulations. However, the absence of a published privacy policy and terms of service, along with missing WHOIS registration data, presents gaps in transparency and trust. Security posture is moderate, with HTTPS implied but no visible security headers or incident response information. Overall, the site is functional, safe, and well-designed but would benefit from enhanced compliance and security documentation.

G

Gordon Research Conferences

grc.org

60

Gordon Research Conferences (GRC) is a well-established non-profit organization that organizes international scientific conferences and seminars focused on frontier research in biological, chemical, physical, and engineering sciences. The website serves as a comprehensive portal for conference information, applications, and community engagement, targeting scientists and researchers globally. The organization maintains a strong market position as a reputable forum for scientific discourse and networking. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery, Slick Carousel, and Swiper for UI enhancements. It integrates Google Analytics and Tag Manager for tracking and uses Google reCAPTCHA v3 and Olark Live Chat for security and support. The site is mobile-optimized with good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. The presence of a phishing alert indicates proactive security awareness. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is justified given the organization's nature. Overall, the website is professional, content-rich, and trustworthy, with minor improvements recommended in security headers and privacy compliance mechanisms to further enhance user trust and regulatory adherence.

C

Chiesi USA, Inc.

mindfullyrare.com

57

Mindfully Rare is a healthcare-focused informational website developed by Chiesi USA, targeting individuals affected by Fabry disease and their caregivers in the United States. The site provides mental health support, educational resources, and connections to the NAMI community, positioning itself as a niche resource within the rare disease and mental health sectors. The partnership with NAMI and Chiesi Global Rare Diseases enhances its credibility and market position. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and accessibility tools, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and consent management, though explicit security headers and formal security policies are absent. Privacy compliance is basic with a privacy policy and terms of use linked to the parent company’s domain but lacks a dedicated cookie policy page. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though improvements in security transparency and privacy compliance are recommended.

A

Amicus Therapeutics, Inc.

galafold.com

62

Galafold.com is the official patient website for Galafold, an FDA-approved oral therapy for adults with Fabry disease. The site is operated by Amicus Therapeutics, Inc., a medium-sized healthcare company based in the United States. The website provides comprehensive patient education, treatment information, support programs, and resources tailored to patients and healthcare professionals. It maintains a strong market position in the niche pharmaceutical sector focused on rare diseases. Technically, the site employs modern web technologies including Bootstrap, jQuery, and various analytics and marketing tools, ensuring good performance, mobile optimization, and accessibility compliance. Security posture is solid with HTTPS, privacy policies, cookie consent, and data protection officer contact information, though improvements could be made by enabling DNSSEC and security headers. Overall, the website is professional, trustworthy, and compliant with relevant regulations, supporting patient engagement and education effectively.

N

National Organization for Rare Disorders

rarediseases.org

66

The National Organization for Rare Disorders (NORD) is a well-established non-profit organization dedicated to supporting education, elevating care, advancing research, and driving policy for rare diseases. Founded in 1998, NORD serves a broad audience including patients, caregivers, healthcare professionals, researchers, and policymakers. The organization holds a leading position in the rare disease advocacy space in the United States, offering key services such as education, advocacy, research support, and policy influence. Their website reflects a professional and consistent brand image, with excellent content quality and clear navigation tailored to their target audience. Technically, the website is built on WordPress and leverages a modern technology stack including Gravity Forms, Cloudflare CDN, Google Analytics, Google Tag Manager, Facebook Pixel, and Hotjar. The site is optimized for performance, mobile responsiveness, accessibility, and SEO, indicating a mature digital infrastructure. Hosting and DNS services are provided via reputable providers, ensuring reliability and speed. From a security perspective, the website enforces HTTPS, employs domain status protections, and uses Cloudflare for DNS and CDN services. A comprehensive cookie consent mechanism is implemented, supporting GDPR compliance. However, DNSSEC is not enabled, and no explicit security or incident response policies are published on the site. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a strong security posture and privacy compliance aligned with its non-profit healthcare mission. Recommendations include enabling DNSSEC, publishing security policies and incident response contacts, and considering a security.txt file to facilitate vulnerability disclosures. These steps would further enhance trust and security maturity.

E

Extra Publishing, s. r. o.

casopisrozmarynka.cz

41

Rozmarýnka is a Czech children’s magazine published by Extra Publishing, s. r. o., offering creative and educational content for children and families. The website serves as a digital platform for magazine issues, creative tasks, coloring pages, and subscription information. It targets a niche market of young readers and their parents in the Czech Republic. The business model revolves around content publishing, subscription sales, and advertising partnerships. The site maintains a consistent brand presence with active social media channels and a user-friendly design.

A

AffilBox

affilbox.cz

74

AffilBox is a Czech-based technology company specializing in affiliate marketing automation and partner program management. Established in 2014, it offers a SaaS platform that supports affiliate networks, influencer management, and referral marketing. The company targets e-commerce businesses and marketers seeking to increase sales through affiliate channels. The website is professionally designed, mobile-optimized, and rich in content, including case studies, educational resources, and a demo environment. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are absent. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

G

Glooton

glooton.com

60

Glooton is a French-language technology news and tutorial website providing content on current technology trends, cybersecurity, blockchain, AI, and ethical discussions related to technology. The site targets French-speaking technology enthusiasts and professionals seeking in-depth articles and practical tutorials. The business model appears to be content publishing, likely monetized through advertising and affiliate marketing. Technically, the site is built on WordPress with common plugins such as Rank Math PRO for SEO and Matomo for analytics, using modern web technologies like jQuery and Slick Carousel. The website is mobile-optimized and well-structured with good SEO practices. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, raising some concerns about domain legitimacy, though the active and professional website presence mitigates this somewhat. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

M

Maurerův Výběr

maureruv-vyber.cz

60

Maurerův Výběr operates a niche gastronomy-focused reservation and media platform based in the Czech Republic. The website promotes a curated reservation program called Maurerův Stůl, offering exclusive dining experiences, alongside media content including a regular column in the Metro newspaper. The business targets general audiences interested in gastronomy and restaurant culture. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, hosted on a Czech provider consistent with its domain registration. The site is mobile optimized and well-structured with good SEO practices but lacks visible privacy and cookie policies, which impacts compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers are not explicitly detected. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

J

Jóga Dnes

jogadnes.cz

10

Jóga Dnes is a well-established Czech media publication focused on yoga, health, and lifestyle topics. The website offers a rich content experience including articles, news, event calendars, and subscription services. It targets yoga enthusiasts primarily in the Czech Republic and maintains a consistent brand presence with active social media and newsletter engagement. Technically, the site uses a modern tech stack with popular libraries and frameworks, and it is mobile optimized with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced HTTP security headers and incident response disclosures. The absence of WHOIS data is a notable gap that impacts trust and legitimacy assessment. Overall, the site is professional, content-rich, and trustworthy, serving its niche audience effectively.

S

SK RN Hradec Králové, z. s.

pivnibehy.cz

40

Pivní běhy is a Czech event organizer specializing in a unique series of running races combined with beer tasting and brewery tours. The business targets running enthusiasts, nature lovers, and beer aficionados, offering both adult and children's events with a strong community and cultural focus. The website is professionally designed using WordPress with a modern tech stack including jQuery, Bootstrap, and various tracking tools. While the site is functional and visually appealing, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS usage but missing security headers and incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

A

Abasto s.r.o.

abasto.cz

65

Abasto s.r.o. is a Czech Republic-based medium-sized wholesale distributor specializing in fruits, vegetables, herbs, mushrooms, and other food products. The company targets HoReCa businesses, retail chains, catering services, manufacturing companies, and corporate canteens, positioning itself as a reliable supplier with a broad product range and certified quality standards. The website reflects a professional business presence with clear service offerings, customer references, and contact channels. Technically, the site is built on WordPress with common libraries such as jQuery, Bootstrap, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data and meta tags. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers are missing. The absence of WHOIS data is a notable concern for domain legitimacy, but the overall business credibility remains high based on content and certifications. Strategic recommendations include improving security headers, adding incident response and vulnerability disclosure information, and verifying domain registration details.

F

Farma Božice

farmabozice.cz

62

Farma Božice is a small Czech agricultural business specializing in the cultivation and distribution of fresh vegetables. Positioned as a local producer near Znojmo, Czech Republic, the company emphasizes quality, freshness, and adherence to health standards. It operates within the retail sector, supplying both wholesale and retail customers, supported by its membership in the Hortim Group and Global GAP certification. The website reflects a professional and consistent brand image with clear business messaging and a focus on regional partnerships with major retailers such as Kaufland, Lidl, and Makro. Technically, the website is built on WordPress using modern web technologies including Bootstrap, jQuery, and various plugins for SEO, image galleries, and user interaction. It employs HTTPS with good SSL configuration and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies with explicit consent mechanisms, indicating a mature approach to privacy compliance. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection but lacks visible security headers which could enhance protection against common web attacks. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting the need for further verification of domain registration legitimacy. No critical vulnerabilities or malicious content were detected. Overall, the website presents a trustworthy and professional front for a small agricultural business with good privacy practices and moderate technical sophistication. Strategic improvements in security headers and domain registration transparency would further strengthen its security posture and business credibility.

H

Hortim-International, spol. s r.o.

hortim-kariera.cz

62

Hortim-International, spol. s r.o. operates a professional career portal focused on recruitment for transportation and logistics roles primarily in the Czech Republic. The website provides detailed job listings across multiple locations, supporting the recruitment efforts of the Hortim Group and its subsidiaries such as Abasto, s.r.o. The company targets job seekers in the regional transportation and warehousing sectors, offering a clear and user-friendly platform for applications and inquiries. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for UI components. SEO is enhanced through the Yoast SEO plugin, and Google Tag Manager is used for analytics and tracking. The site is mobile optimized and includes accessibility considerations, though some improvements could be made. Cookie consent and GDPR compliance are well implemented, with explicit user consent mechanisms and links to comprehensive privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, no explicit security headers were detected in the provided data, and there is no visible incident response or security policy documentation. The WHOIS data is unavailable, likely due to privacy protection, but the domain and website content are consistent with a legitimate business entity. No vulnerabilities or suspicious patterns were identified in the analysis. Overall, the website presents a trustworthy and professional front for Hortim Group's recruitment activities. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party libraries to further strengthen the security posture and compliance.

H

Hortim-International, spol. s.r.o.

hortim.es

62

Hortim-International, spol. s.r.o. is a medium-sized company specializing in the wholesale and logistics of fresh fruits and vegetables. With over 25 years of market presence, the company offers a comprehensive range of services including importation, cultivation, packaging, storage, ripening, and timely delivery. The business operates internationally with multiple subsidiaries and brands, targeting B2B clients in the fresh produce sector. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern libraries such as jQuery, Bootstrap, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for general audiences.

H

Hortim

hortim.de

68

Hortim is a well-established wholesale company specializing in fresh fruits and vegetables, offering a full range of services from import and cultivation to packing, storage, ripening, and logistics. With over 30 years of market presence and multiple subsidiaries, Hortim holds a strong position in the retail and transportation sectors within Germany and neighboring countries. The website reflects a professional and consistent brand image, supported by certifications and sustainability initiatives. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

H

Hortim-International, spol. s.r.o.

hortim.com

68

Hortim-International, spol. s.r.o. is a medium-sized Czech company specializing in the wholesale distribution and comprehensive services related to fresh fruits and vegetables. With over 30 years of market presence, Hortim operates multiple subsidiaries and premium brands, offering services ranging from import and cultivation to packing, storage, ripening, and logistics. The company targets wholesale buyers, retailers, and logistics partners, positioning itself as a reliable regional player in the fresh produce supply chain. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and SEO plugins. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. The site uses HTTPS and includes cookie consent mechanisms, Google Tag Manager, and Facebook SDK for marketing and tracking purposes. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the presence of certifications and consistent branding supports legitimacy. Overall, Hortim's website is professional and trustworthy with good content quality and privacy compliance. The main risk lies in the lack of publicly available WHOIS data and some missing security headers. Strategic improvements in security policies, contact transparency, and technical hardening are recommended to enhance trust and compliance.

H

Hortim

hortim.sk

64

Hortim is a well-established company specializing in wholesale and farming of fresh fruit and vegetables, with over 30 years of market presence. The company operates a group of five companies and two premium brands, providing end-to-end services including importing, farming, packaging, storage, ripening, and logistics. Their target audience primarily consists of business customers in the fresh produce supply chain. Technically, the website is built on WordPress with modern technologies such as jQuery, Bootstrap, and multilingual support via WPML. The site is mobile optimized and SEO friendly, with integration of Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

A

Aviato

aviato.be

49

Aviato is a specialized employment platform focused on providing quality and sustainable job opportunities at Brussels Airport. It serves both job seekers and employers by offering job listings, internships, career advice, and organizing events such as job fairs and info sessions. The website is professionally designed using Drupal 10, with modern web technologies and good mobile optimization. It integrates analytics and marketing tools like Google Analytics and Facebook Pixel, and complies with GDPR through a comprehensive privacy and cookie policy. Security posture is adequate with HTTPS and secure form handling, though security headers could be improved. WHOIS data is restricted, but the website's content and social media presence indicate a legitimate and trusted organization within the transportation sector in Belgium.

M

Media Business Insight (MBI)

globalproductionawards.com

47

The Global Production Awards website represents a professional event platform dedicated to recognizing excellence in sustainable film and TV production worldwide. Operated by Media Business Insight (MBI), a subsidiary of GlobalData, the site serves industry professionals and stakeholders with event information, award shortlists, winners, and sponsorship opportunities. The business model centers on event organization and media partnerships, positioning itself as a prestigious global awards entity within the media sector. Technically, the website employs a modern tech stack including jQuery, Slick Carousel, and the SHOWOFF CMS by ASP.events. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and performance. However, some improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site uses HTTPS and avoids exposing sensitive data. Tracking via Permutive is present, indicating moderate user tracking. The absence of WHOIS data for the domain is a notable concern, potentially indicating registration issues or privacy protection, which impacts domain legitimacy assessment. Overall, the website is trustworthy and professional, but the lack of WHOIS transparency and cookie consent mechanisms suggest areas for improvement to bolster compliance and trust. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing cookie consent to align with GDPR and best practices.

M

Media Business Insight Ltd (MBI)

screenfilmsummit.com

58

The Screen Film Summit website represents a professional event platform focused on the UK independent film industry, organized by Media Business Insight Ltd, a subsidiary of GlobalData. The site provides detailed information about the annual summit, including event descriptions, partners, speakers, and galleries, targeting producers, financiers, and distributors within the film sector. The business model centers on industry networking and knowledge sharing through events. Technically, the website is built on the SHOWOFF CMS by ASP.events, utilizing modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup. The site is mobile-optimized, accessible, and employs HTTPS with good performance. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. Tracking is done via Permutive, indicating moderate user tracking. The absence of WHOIS registration data is a concern, though the association with a reputable parent company supports legitimacy. No critical vulnerabilities or adult content were found, and privacy compliance is basic but present. Overall, the website is a credible and professional platform with room for improvement in security headers, privacy compliance, and transparency of contact information. The lack of WHOIS data should be investigated further to confirm domain legitimacy.

S

Sunzil

sunzil.com

49

Sunzil is a well-established company specializing in photovoltaic solar energy solutions, with a 40-year presence in French overseas territories. The company develops, constructs, and operates solar power plants for both residential and professional clients, offering turnkey solutions and consulting services. The website reflects a mature digital presence with comprehensive content, customer testimonials, and recognized certifications such as ISO 9001 and ISO 14001, reinforcing its market credibility. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern JavaScript libraries and analytics tools including Google Analytics and Facebook Pixel. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a good level of digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security policies and incident response information. Some JavaScript errors related to WooCommerce payment gateway dependencies were noted, which could affect user experience. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and certifications suggest a legitimate business. Overall, Sunzil presents a professional and trustworthy online presence with room for improvement in security transparency and domain registration clarity.

K

KBE Energy

kbe-energy.com

67

KBE Energy is a French company specializing in the installation, maintenance, and expertise of photovoltaic solar power plants. Established since 2006, it serves a broad range of clients including farmers, industrial investors, local authorities, and large retail and tertiary sectors. The company offers comprehensive photovoltaic solutions including large roof installations, floating parks, agrivoltaics, self-consumption systems, turnkey buildings, and project management assistance. It also provides financing options such as third-party investment and crowdfunding. The company is certified with ISO 14001, ISO 9001, Qualifelec RGE, and AQPV, reflecting its commitment to quality and environmental standards. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as Google reCAPTCHA, Yoast SEO, GSAP animations, and WP Rocket for performance optimization. The site is well-optimized for SEO, mobile-friendly, and provides a good user experience with clear navigation and professional design. Security measures include HTTPS enforcement, cookie consent management, and CAPTCHA integration, although explicit security headers and a published security policy are absent. The security posture is solid but could be improved by adding explicit security headers and publishing incident response information. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, although the website content and certifications support legitimacy. Overall, the site demonstrates a mature digital presence with good compliance to privacy regulations and a strong focus on renewable energy services. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, verifying domain registration details, and maintaining regular security audits to ensure ongoing protection and trustworthiness.

W

We Are ILL

wearewellnessweekend.com

52

We Are ILL is a non-profit organization dedicated to supporting Black women living with multiple sclerosis and other autoimmune disorders through its signature annual event, Wellness Week(end). The event offers education, community, and wellness activities, expanding its reach to include lupus and NMOSD patients and their support networks. The website is professionally designed using Squarespace, with a clear focus on community and advocacy. The event is hosted in Atlanta, GA, with ticketing managed via Eventbrite. Social media presence is active on Instagram, YouTube, and Facebook. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the website content and external links indicate a legitimate operation.