Security Directory

R

Accueil - Régions de France

regions-france.org

9

The website regions-france.org is an informational platform focused on providing details about the regions of France, targeting a general French-speaking audience. The site is built on WordPress using the Elementor page builder, incorporating standard web technologies such as Google Fonts and Font Awesome icons. The hosting is provided by OVH sas, a reputable hosting provider, with the domain registered since 2016, indicating a stable online presence. From a technical perspective, the website demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Security posture is adequate with HTTPS enabled; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to the lack of privacy and cookie policies, and no incident response or vulnerability disclosure mechanisms are evident. Overall, the website is safe and suitable for general audiences, with no adult or questionable content detected. The business credibility is moderate, but the lack of contact information and compliance documentation limits trustworthiness. Strategic improvements in security headers, privacy policies, and contact transparency would enhance the site's security and compliance standing.

E

EXIsport

exisport.sk

54

EXIsport is a large regional retailer specializing in sportswear, sports footwear, and electric bicycles, operating both online and through 21 physical stores in Slovakia, with additional presence in the Czech Republic and Hungary. The website offers a comprehensive e-commerce platform with a wide product range exceeding 650,000 items, free shipping over 69 €, and personal pickup options. The company targets consumers interested in fitness, cycling, winter sports, and outdoor activities, positioning itself as a trusted and established brand in the regional sports retail market. Technically, the website is built on PrestaShop CMS, leveraging modern JavaScript frameworks and libraries such as Vue.js, Swiper.js, and SweetAlert2, with integrated Google Tag Manager and affiliate tracking. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses secure forms, though explicit security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable from the provided raw output, indicating privacy protection or registrar data not publicly accessible, which slightly reduces transparency but does not detract from the site's professionalism. Overall, EXIsport demonstrates a mature digital presence with solid business credibility and security posture.

G

GIVERSDON s.r.o.

azcasopis.cz

42

The website azcasopis.cz represents a specialized professional magazine named A-Z ELEKTRO, focusing on electrical engineering, automation, energy, software, lighting, and related technologies. It targets professionals and companies within these technical sectors primarily in the Czech Republic. The business operates as a small-sized publishing entity with a history dating back to 2009, offering industry news, magazine publications, advertising, and subscription services. The site demonstrates consistent branding and good content quality with regular updates and industry partnerships.

A

Alfred Kärcher GmbH & Co. KG

karcher.cz

10

Kärcher Česká republika operates as the official Czech branch of Alfred Kärcher GmbH & Co. KG, a leading global manufacturer and retailer of cleaning technology for both household and professional markets. The website offers a comprehensive catalog of cleaning products including window vacuums, steam cleaners, floor washers, vacuum cleaners, and pressure washers, supported by services such as repair, warranty extensions, and rental of professional equipment. The company holds a strong market position in the Czech Republic as a trusted brand with extensive product and service offerings tailored to both consumers and professionals. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Adobe Dynamic Tag Management for analytics and marketing tag control, and OneTrust for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate with asynchronous loading of scripts and preloading of key assets. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. Security headers are partially observed, and third-party scripts are managed via Adobe DTM. However, explicit security headers like Content-Security-Policy and incident response contacts are not clearly published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional, trustworthy, and compliant digital presence for Kärcher in the Czech market. The absence of WHOIS data limits domain trust assessment, but the brand consistency and compliance signals support legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure information, and improving transparency of contact details to strengthen trust and security posture.

J

Jean Lain Mobilités

jeanlain.com

70

Jean Lain Mobilités is a French automotive dealership and mobility services provider offering a wide range of vehicle brands including Volkswagen, Audi, Toyota, and others. The company provides new and used vehicle sales, leasing, after-sales services, electric mobility solutions, and professional fleet services. The website is well-structured and professionally designed, targeting both consumers and business clients seeking automotive and mobility solutions. Technically, the site is built on WordPress with modern frameworks and includes analytics tools such as Matomo and Facebook Pixel. Security posture is good with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are not found on the homepage. The domain is a subdomain of jeanlain.com, a known automotive group, with no separate WHOIS registration, which is expected and legitimate. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

R

Randonner

randonner.fr

49

Randonner.fr is an official regional website dedicated to hiking, cycling, and horseback riding activities in the Aisne department of the Picardie region in France. It serves as an informational portal providing detailed circuits, thematic hikes, event agendas, and practical guidance for outdoor enthusiasts. The website targets a general audience interested in outdoor recreational activities and promotes local tourism. Technically, the site is built on WordPress using the Woody theme and incorporates modern JavaScript libraries such as jQuery, Swiper, and Leaflet for interactive maps and user experience enhancements. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS and uses reputable analytics and tracking tools like Google Tag Manager and Smartlook. However, it lacks visible security headers and explicit privacy and terms of service policies, which are important for compliance and user trust. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency but does not directly impact the website's operational legitimacy. Overall, the site is professional and trustworthy for its intended purpose but would benefit from improved privacy disclosures and security practices.

C

Champsaur Valgaudemar – Un territoire 4 saison aux portes du Parc national des Ecrins

champsaur-valgaudemar.com

58

The website www.champsaur-valgaudemar.com serves as a regional tourism portal for the Champsaur Valgaudemar area in France, offering comprehensive information on local attractions, accommodations, activities, and events. It targets tourists and outdoor enthusiasts interested in mountain experiences year-round. The site is built on WordPress with a modern tech stack including jQuery, Leaflet.js for maps, and integrates Google Analytics and Facebook Pixel for tracking. The design is professional and content-rich, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and terms of service pages are missing, which impacts compliance and trust. The WHOIS data is unavailable, raising concerns about domain registration transparency, but the active and professional website presence suggests legitimate operation. Overall, the site is functional and trustworthy for tourism purposes but would benefit from enhanced privacy disclosures and incident response information.

N

Nancy Tourisme

nancy-tourisme.fr

45

Nancy Tourisme operates as the official tourism office for the Grand Nancy area in France, focusing on promoting the city's rich cultural heritage, including its UNESCO sites and Art Nouveau architecture. The website provides comprehensive information on events, accommodations, dining, and experiences tailored to tourists and visitors interested in exploring Nancy. The site is well-branded and professionally maintained, reflecting a strong market position as a trusted local tourism authority. Technically, the website is built on WordPress using a custom Woody theme and integrates modern JavaScript libraries for enhanced user experience, including Leaflet for maps and Swiper for interactive content. The site is mobile-optimized and employs standard SEO and accessibility practices, though some accessibility features could be improved. Security-wise, the site uses HTTPS with good SSL configuration and includes essential security headers. Cookie consent mechanisms and privacy policies are implemented, indicating GDPR compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and branding strongly suggest authenticity. No critical security vulnerabilities or adult content were detected, making the site safe for general audiences.

E

eSports.cz, s.r.o.

fkmb.cz

46

FK Mladá Boleslav operates an official website serving as the primary digital platform for the Czech football club. The site provides comprehensive information about the club's teams, match schedules, youth academy, partners, and multimedia content, targeting fans and the local community. The business model focuses on fan engagement, merchandising through an integrated fanshop, and promoting club partners. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

F

FC Hradec Králové, a.s.

fchk.cz

53

FC Hradec Králové, a.s. operates an official website serving as the primary digital platform for the Czech football club FC Hradec Králové. The site provides comprehensive information including match schedules, team rosters, news updates, ticketing services, and a fanshop for merchandise. The club has a strong market presence in Czech football, with a history dating back over 120 years, positioning itself as a well-established sports entity. The website targets football fans, local community members, and sports enthusiasts, offering a user-friendly and content-rich experience. Technically, the website employs modern JavaScript libraries such as GSAP and Swiper.js for animations and interactive elements, alongside Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, hosted under a Czech registrar with consistent domain registration data. Cookie consent mechanisms and GDPR compliance are well implemented, reflecting a mature approach to privacy and user data protection. From a security perspective, the website enforces HTTPS and uses cookie consent categories to manage tracking scripts responsibly. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the website demonstrates a high level of professionalism, content quality, and trustworthiness, with a strong alignment between domain registration and business identity. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen the security posture.

B

Bohemians Praha 1905

bohemians.cz

53

Bohemians Praha 1905 is a well-established Czech football club with a rich history dating back to 1905. The website serves as the official digital platform providing comprehensive information about the club, including news, match schedules, ticket sales, fan engagement, and merchandise. The site targets football fans and the local community, offering a professional and consistent brand experience. Technically, the website employs modern JavaScript libraries such as Swiper.js and Google reCAPTCHA, hosted behind Cloudflare for DNS and CDN services, ensuring moderate performance and good mobile optimization. Security measures include HTTPS enforcement and standard security headers, with a GDPR-compliant cookie consent mechanism and a basic privacy policy in place. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the club's business model and audience.

F

FANSHOP

fanshopfcb.cz

57

The website fanshopfcb.cz operates as an e-commerce platform specializing in fan merchandise for FC Baník Ostrava, offering a variety of products including clothing, accessories, and wines. The site targets fans of the football club and general sports merchandise buyers primarily in the Czech Republic. The business model is focused on online retail with a niche market position serving regional fan communities. Technically, the website employs a mix of JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics for tracking, and uses external services like Mapy.cz API and Packeta for shipping. The platform appears to be built on a proprietary or custom CMS (likely K2). The site is mobile optimized with moderate performance and basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks visible security headers and comprehensive privacy or terms of service documentation. No WHOIS data is available, which raises concerns about domain registration transparency. The site includes cookie consent mechanisms but does not provide explicit privacy policy details, impacting privacy compliance. Overall, the website presents a functional and professional e-commerce presence with room for improvement in security best practices, privacy transparency, and domain registration legitimacy. Strategic recommendations include implementing security headers, publishing privacy and terms policies, and verifying domain registration details to enhance trust and compliance.

C

Club des Sports de Megève

csmegeve.com

45

The Club des Sports de Megève is a well-established sports club based in Megève, France, with a rich history dating back to 1931. The organization offers a variety of sports activities and community events throughout the year, targeting both youth and adults. Their website reflects a strong community focus and provides detailed information about their sports sections, events, and partnerships. Technically, the website is built on WordPress using the Divi theme, hosted by o2switch, and incorporates common web technologies such as jQuery and Swiper.js. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security-wise, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is a notable gap, as no privacy or cookie policies were found, which could expose the organization to regulatory risks. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

G

Graduates

tbsgraduates.net

51

TBS Graduates is an educational and career resource platform targeting college and university students and young professionals in Bangladesh. It operates as an initiative of The Business Standard, providing articles, job listings, admissions, and scholarship information. The platform is positioned as a niche content provider within the education sector, leveraging its parent company's brand recognition. Technically, the site is built on WordPress with modern frontend libraries and uses Cloudflare DNS services. It has moderate performance and good mobile optimization but lacks some advanced accessibility features. Security posture is adequate with HTTPS and domain transfer protections but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

C

Accueil | Chamonix

chamonix.com

52

The website www.chamonix.com serves as the official tourism portal for the Vallée de Chamonix-Mont-Blanc in France. It provides comprehensive information and services including accommodation booking, activity reservations, restaurant finders, event calendars, and transport details. The site targets tourists and visitors interested in mountain and nature experiences, positioning itself as a key resource for destination marketing in the hospitality sector. Technically, the site is built on Drupal 10 CMS and employs modern JavaScript libraries such as Swiper.js and Litepicker, alongside analytics tools like Matomo, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent management implemented, though explicit security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism present but no explicit privacy policy detected in the provided content. The absence of WHOIS registration data is a concern but does not appear to affect the site's legitimacy based on content and external references. Overall, the site is professional, user-friendly, and trustworthy, serving its business purpose effectively.

N

noBrother

nobrother.cz

46

noBrother is a small Czech Republic-based design and development studio specializing in UI/UX, graphic design, frontend and backend development, CMS, and 3D modeling. Their portfolio includes reputable clients such as CASIO and OMG Research, positioning them as a niche player in the technology and creative services market. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, PHP with the Nette framework, and JavaScript libraries like Swiper.js. Google Tag Manager is implemented for analytics and tracking, though privacy and cookie policies are absent, indicating compliance gaps. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosures. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Carts Guru

carts.guru

56

Carts Guru is a specialized SaaS provider offering ecommerce marketing automation tools that enable online merchants to engage customers across multiple channels including email, SMS, and Facebook Messenger. The company targets ecommerce businesses seeking to increase revenue through automated, multichannel marketing campaigns and data-driven decision making. Their platform includes features such as campaign automation, audience segmentation, templates, and detailed dashboards, supported by a professional team offering premium support services. The website reflects a medium-sized business based in Spain with a strong market presence and over 1000 clients worldwide. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries such as jQuery, Swiper, noUiSlider, and Select2. It is well optimized for mobile devices, fast loading, and SEO-friendly with proper meta tags and structured data. Google Tag Manager is used for analytics and marketing tracking. The site employs HTTPS with good SSL configuration but lacks some advanced security headers. Contact is primarily via a secure web form, with no direct email or phone contacts publicly listed. From a security perspective, the site demonstrates good practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit cookie consent mechanisms and published incident response contacts or vulnerability disclosure policies. WHOIS data is unavailable due to privacy or query failure, which slightly reduces trust but is common for SaaS businesses. Overall, the security posture is solid but could be improved with additional transparency and security headers. The overall risk assessment is low with no critical issues detected. Strategic recommendations include implementing cookie consent, publishing incident response contacts, adding security headers, and maintaining regular vulnerability audits. The website is professional, trustworthy, and well-positioned in the ecommerce marketing automation sector.

S

Saint-Gervais Mont-Blanc

saintgervais.com

61

Saint-Gervais Mont-Blanc is an official tourism website promoting the mountain village of Saint-Gervais in Haute-Savoie, France. It offers comprehensive information about mountain activities, wellness, thermal spas, and local events, targeting tourists and visitors interested in alpine experiences. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Google Tag Manager, and Leaflet maps. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms policies are not clearly found. The WHOIS data is missing or unavailable, which is unusual but the website content and technical setup suggest legitimacy. Overall, the site is a well-maintained digital presence for regional tourism with room for improvement in privacy transparency and contact information.

O

Obec Ladná

obecladna.cz

48

Obec Ladná operates an official municipal website serving the residents and visitors of Ladná, Czech Republic. The site provides comprehensive information about the municipality, including news, official documents, event calendars, and contact details. It positions itself as a trusted source for local government information and community engagement. The website is well-structured, mobile-optimized, and uses modern web technologies such as jQuery, Bootstrap, and Leaflet for mapping. It also integrates accessibility and multilingual support via Google Translate. From a technical perspective, the site employs a modern tech stack with several third-party libraries and scripts, ensuring a responsive and user-friendly experience. However, the absence of explicit security headers and lack of WHOIS data for the domain are notable gaps. The site uses HTTPS and implements cookie consent mechanisms, indicating attention to privacy compliance, including GDPR adherence. Security posture is moderate; while no critical vulnerabilities or exposed sensitive data were detected, the lack of security headers and missing WHOIS information reduce overall trust. The website does not display any signs of malicious activity or adult content, making it safe for general audiences. Overall, the website is a credible and functional municipal portal but would benefit from enhanced security configurations and verification of domain registration details to improve trustworthiness and compliance.

R

Rentalia

rentalia.cz

52

Rentalia is a Czech Republic based small business specializing in the rental of professional film and photography equipment, positioning itself as the largest rental service of its kind in Zlín. The company targets filmmakers, photographers, and students, offering a broad range of equipment including cameras, lighting, sound, and grip gear. The website is built on WordPress with modern technologies and includes SEO and privacy compliance features. The business model includes direct rentals and a partner platform for equipment owners to list their gear. Technically, the site is well-structured, mobile-optimized, and uses reputable third-party services such as Google Analytics and Facebook Pixel for marketing and analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

F

Frontio NET s.r.o.

frontio.net

50

Frontio NET s.r.o. is a Czech Republic-based small technology company specializing in custom web development, front-end coding, and e-commerce solutions primarily using WordPress CMS. The company targets businesses and agencies seeking tailored web solutions and has a professional web presence with client references and contact information clearly displayed. Technically, the website is built on a modern WordPress stack with JavaScript libraries such as jQuery and Swiper.js, and it integrates Google Analytics and Yoast SEO for performance and search optimization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and security headers, and it does not publish a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

M

MUSIL spol. s r.o.

musil.cz

57

MUSIL spol. s r.o. is a Czech family-owned company with over 30 years of experience specializing in drywall installation and spray foam insulation services. The company positions itself as a trusted regional player offering a unique combination of drywall and insulation solutions, targeting residential and commercial property owners. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on the Webflow platform using modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Google Ads for marketing and tracking purposes. Security measures include HTTPS, Google reCAPTCHA, and Cloudflare Turnstile anti-bot protection, though some security headers and policies could be improved. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility remains high based on website content and trust indicators. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms.

Z

Zrůst

zrust.cz

57

Zrůst is a Czech Republic-based company specializing in the manufacturing, sale, rental, and servicing of flatbed trailers. Established in 1993, the company has built a strong market position with a focus on quality and customer service, offering new and used trailers, general repairs, and nonstop service support. Their website reflects a professional and consistent brand image, targeting businesses requiring reliable transportation equipment. Technically, the site is built on Webflow with modern JavaScript libraries and includes analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers are not explicitly detected. The absence of WHOIS data and privacy policy are notable gaps. Overall, the site is trustworthy and business-focused with room for improvement in privacy and security transparency.

M

MASTEX s.r.o.

mastex.cz

53

MASTEX s.r.o. is a Czech marketing agency specializing in comprehensive marketing solutions including branding, website development, and online marketing services. The company positions itself as a trusted local player with over 7 years of experience and a strong client base exceeding 900 satisfied customers. Their website reflects a professional and modern digital presence, leveraging Webflow CMS and integrating advanced marketing and analytics tools such as Google Analytics, Google Tag Manager, and Leady. Security measures include HTTPS, Google reCAPTCHA, and Cloudflare Turnstile, ensuring protection against automated abuse and spam. Privacy compliance is robust with a clear GDPR policy and cookie consent mechanisms. However, WHOIS data is unavailable, indicating domain privacy protection, which is common for small businesses but reduces transparency. Overall, the website is well-designed, secure, and compliant, supporting the company's credibility and market position.

I

IS Produkce

isprodukce.cz

45

IS Produkce is a Czech media production company established in 2008, offering a broad range of services including commercials, films, videos, photography, and visual effects. The company emphasizes integrated production workflows covering preproduction, production, and postproduction under one roof, enabling efficient and seamless project delivery. Their website showcases a professional portfolio with references to notable clients and projects, targeting businesses and professionals seeking high-quality media content. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including jQuery, Swiper.js, and Lightbox.js. It uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and includes analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. However, it lacks visible privacy and cookie policies, and no cookie consent mechanism is implemented, which is a compliance gap. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses Google reCAPTCHA v3 to protect forms. Despite this, it lacks security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a legitimate and stable presence since 2008. Overall, IS Produkce presents a professional and trustworthy online presence with good technical implementation and business credibility. The main areas for improvement include enhancing privacy compliance by publishing policies and implementing cookie consent, adding security headers, and providing clear security and incident response information.

O

Obec Strašov

obecstrasov.cz

50

Obec Strašov is the official municipal website for the village of Strašov in the Czech Republic. It serves as a local government portal providing residents and visitors with information about municipal services, news, events, public notices, and contact details. The website targets local citizens and community members, offering a centralized platform for civic engagement and communication. The business model is that of a government entity focused on public service and community information dissemination. The domain was registered in 2022, consistent with a relatively new or modernized municipal web presence.

K

Klub legend

klublegend.cz

45

Klub legend is a Czech sports club website dedicated to honoring players and coaches who have participated extensively in the Chance Liga, the Czech Republic's second-tier football league. The site serves as a prestige platform recognizing individuals with at least 300 matches played or coached since the 1993/94 season. It features member profiles, inauguration highlights, brand manuals, and multimedia content targeting football fans and stakeholders within the Czech football community. The business model revolves around community recognition and brand promotion within the sports sector. Technically, the website is built on WordPress using the Elementor page builder, hosted by a Czech registrar REG-ZONER, and employs modern web technologies including jQuery and Swiper.js. The site is mobile-optimized and includes SEO best practices such as structured data and Open Graph tags. Security-wise, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism via the Complianz plugin. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could improve in security transparency and contact availability.

E

Ecogra

ecogra.org

77

eCOGRA is a well-established independent certification and testing laboratory specializing in the online gambling and iGaming sector. Founded in 2003 and headquartered in the United Kingdom, the company offers a comprehensive suite of services including game testing, ISO certification, alternative dispute resolution, and cybersecurity services. With over 20 years of experience and accreditations across 47 jurisdictions, eCOGRA holds a strong market position as a trusted compliance partner for operators and software providers. Their website reflects a professional and authoritative presence, featuring detailed service descriptions, client testimonials, and multiple accreditations that reinforce their credibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, integrated with Google Tag Manager and HubSpot for analytics and marketing automation. The site is hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. Mobile optimization and accessibility are well addressed, and SEO best practices are implemented through meta tags and structured data. Security measures include HTTPS enforcement and Google reCAPTCHA Enterprise for form protection, although DNSSEC is not enabled and some security headers could be improved. From a security posture perspective, eCOGRA demonstrates strong adherence to industry standards, notably ISO 27001, and maintains rigorous operational independence and integrity policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security.txt and explicit incident response contacts suggests room for enhancement in vulnerability disclosure and incident management transparency. Overall, eCOGRA presents a low-risk profile with a mature digital infrastructure and strong business credibility. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security.txt file, and providing clear incident response contact information to further strengthen trust and compliance.

Morzine Réservation operates as the central reservation office for the Morzine Tourist Office, providing online booking services for a variety of accommodations including hotels, chalets, and apartments in the Morzine and Portes du Soleil region of France. The website offers detailed information, availability, pricing, and promotional offers, targeting tourists seeking mountain vacations. The platform supports secure online payments and customer account management, positioning itself as a trusted local booking service. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.9.0, Google Tag Manager, Zendesk Chat, and custom reservation widgets. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, some technical improvements are recommended such as updating JavaScript libraries and adding security headers. From a security perspective, the site uses HTTPS and secure payment processing but lacks explicit security policies and incident response information. No major vulnerabilities were detected, but the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the security posture is good but could be enhanced with additional headers and transparency. The overall risk is moderate; the website appears legitimate and professional but the missing WHOIS data and minor technical issues suggest the need for verification and improvements. Strategic recommendations include verifying domain registration, enhancing security headers, updating libraries, and publishing security policies to increase trust and compliance.

M

Morzine Avoriaz

morzine-avoriaz.com

9

The website www.morzine-avoriaz.com serves as a professional tourism portal promoting the Morzine-Avoriaz ski resort area in Haute-Savoie, France. It targets tourists and ski vacationers, offering information on ski activities, accommodations, events, and local services. The site is well-structured, multilingual, and optimized for SEO, leveraging WordPress and modern web technologies including Google Tag Manager and MapTiler for maps. Despite the lack of WHOIS registration data, the website presents a credible and consistent brand image with good content quality and user experience. Technically, the site uses a modern tech stack with WordPress CMS, jQuery, and various plugins for enhanced functionality. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is limited due to absence of explicit privacy and terms of service pages, though a cookie consent mechanism is present. Overall, the security posture is adequate but could benefit from enhanced security headers and formalized policies. The absence of WHOIS data and contact information slightly reduces trustworthiness but does not detract significantly from the professional presentation. Strategic recommendations include implementing comprehensive privacy and security policies, adding security.txt for vulnerability disclosure, and improving accessibility and security headers to strengthen compliance and user trust.

L

Les Radeliers : ligues AURA et SUD de hockey sur glace

hockey-radeliers.com

9

Les Radeliers is the official website representing the regional ice hockey leagues of South-East France, specifically the Auvergne-Rhône-Alpes and Sud Provence-Alpes-Côte d'Azur regions. The organization focuses on providing information about leagues, clubs, competitions, training stages, and events to players, officials, and fans within these regions. The website serves as a central hub for news, event calendars, and membership management, positioning itself as a key regional sports entity. Technically, the website is built on WordPress with popular plugins such as WooCommerce for e-commerce capabilities, Elementor for page building, and The Events Calendar for event management. It integrates Google Analytics and Google AdSense for analytics and advertising, respectively. The site demonstrates moderate performance and good mobile optimization, with a structured navigation system and consistent branding. From a security perspective, the site uses HTTPS and includes secure payment integration via PayPal. However, it lacks several important security headers like Content-Security-Policy and X-Frame-Options, which could be improved to enhance protection against common web attacks. No exposed sensitive data or vulnerable libraries were detected in the HTML source. Overall, the website is safe, professional, and well-structured for its audience, but the absence of WHOIS data and privacy policy pages slightly reduces trustworthiness. Strategic improvements in security headers and clearer privacy compliance documentation would strengthen its security posture and user trust.

P

Promoglace

promoglace.com

59

Promoglace is a French retailer specializing in hockey, roller hockey, street hockey, and skating equipment and accessories. The company positions itself as a trusted partner for players and clubs, offering a wide range of products including skates, sticks, protective gear, and apparel. With nearly 30 years of experience, Promoglace serves a diverse audience from beginners to elite athletes, combining e-commerce with physical stores and club partnerships. The website is professionally designed, mobile-optimized, and provides a seamless shopping experience with secure payment options and customer support.

L

Live Arena Sports

livearenasports.com

49

Live Arena Sports is a Sweden-based technology company specializing in sports management and live streaming solutions. They provide a comprehensive suite of products including AI-driven production management, OTT platforms, and analytics tools tailored for sports federations, leagues, athletes, and fans. Positioned as a market leader, they emphasize scalability, automation, and real-time data insights to enhance the sports viewing and management experience. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Google Analytics and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Overall, the site is professional, trustworthy, and compliant with GDPR cookie regulations, but lacks visible privacy and terms of service documentation. Strategic recommendations include adding comprehensive privacy and security policies, incident response contacts, and enhancing DNS security to further strengthen trust and compliance.

K

KLUB KULTURY Napajedla

kknapajedla.cz

49

KLUB KULTURY Napajedla is a local cultural organization based in the Czech Republic, serving as a hub for community cultural events, including theatre, folklore, puppet theatre, and other cultural programs. The website provides an event calendar, photo galleries, and information about various cultural services such as the library, museum, and cinema. The organization targets local residents, families, and seniors interested in cultural activities. Technically, the website uses a mix of common JavaScript libraries including jQuery, Bootstrap, and Swiper.js, and appears to be built on a custom or proprietary CMS. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enabled and a cookie consent mechanism is implemented, but there is a lack of security headers and no explicit privacy policy or terms of service pages, which are areas for improvement. The WHOIS data for the domain is unavailable, which reduces the trust score somewhat, but the website content and external links indicate a legitimate and established local cultural entity. Overall, the site is functional, safe, and serves its community purpose well, though it would benefit from enhanced security and privacy compliance documentation.

G

Galileo Corporation s.r.o.

koupaliste-brumov-bylnice.cz

50

The website for koupaliště Brumov Bylnice serves as the official online presence for a local public swimming pool facility in Brumov-Bylnice, Czech Republic. Operated by Galileo Corporation s.r.o., it offers seasonal swimming, beach volleyball, and community events. The site targets local residents and visitors seeking recreational activities. The business model is community-focused hospitality with a small-scale operation. The website content is relevant and well-structured, providing essential information such as opening hours, events, and contact details. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Swiper.js, and Leaflet for maps, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices. However, the absence of explicit security headers and privacy policy documents highlights areas for improvement in compliance and security posture. Security-wise, the site uses HTTPS and implements cookie consent, but lacks detailed security policies or incident response contacts. The WHOIS data is missing, which reduces domain legitimacy confidence. No vulnerabilities or malicious content were detected. Overall, the site is functional and trustworthy for its purpose but would benefit from enhanced transparency and security documentation. Strategically, the site should prioritize publishing privacy and terms of service policies, improve security headers, and clarify domain registration details to strengthen trust and compliance. These steps will enhance user confidence and align the site with best practices in security and privacy.

S

SK Sigma Olomouc a. s.

sigmafotbal.cz

50

SK Sigma Olomouc is a well-established Czech football club with a strong local and national presence. The website serves as the official digital platform for the club, providing news, match information, ticket sales, merchandise, and multimedia content to fans and stakeholders. The club operates a fanshop and maintains active engagement through multiple social media channels, reflecting a mature digital presence. The domain age and WHOIS data confirm the legitimacy and long-standing nature of the organization. Technically, the website uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics and Google Tag Manager for tracking, and supports multilingual access via Google Translate. The site is hosted by GRANSY, a known Czech hosting provider, and employs HTTPS with a good SSL configuration. The design is responsive and user-friendly, with clear navigation and professional branding. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and does not publish a clear privacy policy or terms of service, which are important for compliance and user trust. No direct contact information or incident response contacts are provided, limiting transparency in security matters. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security headers, and explicit contact details to improve compliance and security posture. The risk level is moderate with no critical vulnerabilities detected in the provided content.

K

Kirin Holdings Company, Limited

kirinholdings.com

58

Kirin Holdings Company, Limited operates as a global leader in creating shared value across the food and beverage to pharmaceutical sectors. The company emphasizes sustainability, innovation, and responsible business practices, targeting investors, customers, and partners worldwide. Their diversified portfolio includes alcoholic and non-alcoholic beverages, pharmaceuticals, and health science products, supported by a strong corporate governance framework and comprehensive investor relations resources. Technically, the website employs modern JavaScript libraries and asynchronous script loading to optimize performance and user experience, with excellent mobile responsiveness and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. The absence of WHOIS data for the domain is a concern but the professional content and branding consistency support legitimacy. Overall, the site presents a mature, trustworthy corporate presence with room for enhanced privacy compliance and security transparency.

R

Réunion des musées nationaux Grand Palais

rmngp.fr

63

Réunion des musées nationaux Grand Palais (GrandPalaisRmn) is a prominent French cultural institution dedicated to promoting access to culture nationwide. It operates multiple expertises including acquisitions, photographic agency, art workshops, publishing, exhibitions, cultural engineering, mediation, and retail through bookshops and product sales. The organization is closely linked to the French Ministry of Culture, as evidenced by branding and domain information. The website is professionally designed, content-rich, and targets a broad audience including the general public, professionals, and educational institutions. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries such as Swiper.js and Matomo for analytics, with a cookie consent manager (Tarteaucitron) ensuring GDPR compliance. Hosting is provided by ECRITEL, a reputable provider. The site demonstrates good mobile optimization and accessibility features, though some security headers could be improved. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its cultural mission with a strong digital presence. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

G

Grand Palais

grandpalais.fr

64

Grand Palais is a prominent French cultural institution offering exhibitions, concerts, educational workshops, and guided tours. The website is well-designed, mobile-optimized, and uses Drupal CMS with modern technologies such as Google Tag Manager and OneTrust for cookie consent. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly reduces trust but the website content and branding strongly indicate legitimacy. Overall, the site is professional, compliant with GDPR, and serves a broad audience including families, professionals, and visitors with special needs.

H

Hisense

hisense-air.kz

50

Hisense-air.kz is the official representative and authorized dealer of Hisense air conditioning products in Kazakhstan. The company offers a wide range of HVAC solutions including residential and semi-industrial air conditioning systems, supported by regional offices and warehouses in major cities such as Almaty and Nur-Sultan. Their business model focuses on direct sales, installation, and project support, targeting residential, commercial, and institutional customers. The website reflects a professional and consistent brand presence with clear contact information and product catalogs. Technically, the site uses a standard OpenCart CMS with common libraries like jQuery and tracking tools such as Google Analytics and Yandex Metrika. The site is mobile-optimized and SEO-friendly but lacks advanced accessibility features and some security headers. Security posture is moderate with HTTPS enforced and basic form validation, but missing security policies and headers reduce the overall security maturity. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Hisense HVAC France operates as a localized branch of Qingdao Hisense HVAC equipment Co., Ltd., focusing on commercial and residential HVAC solutions including VRF systems, air-to-water heat pumps, and chillers. The website presents a professional and consistent brand image targeting HVAC customers in France and globally, offering product information, technical documentation, and showroom support. The digital infrastructure is built on a custom ASP.NET CMS with modern JavaScript libraries such as jQuery and Swiper, providing a good user experience with mobile optimization and clear navigation. However, the website lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are exposed, which limits user trust and compliance transparency. Security posture is moderate with HTTPS implied but no advanced security headers or vulnerability disclosures present. The domain registration is consistent and legitimate, supporting the business claims.

C

Combine Cargo Malawi Limited

combinecargo.mw

45

Combine Cargo Malawi Limited is a small-sized, premier logistics company based in Malawi, specializing in freight forwarding, customs clearing, removals, warehousing, and transport logistics. The company holds a licensed customs agent status, positioning it as a trusted service provider in the local transportation sector. Their website reflects a professional and consistent brand image targeting businesses and individuals requiring reliable logistics solutions. Technically, the website is built on WordPress using Elementor and related addons, providing a modern and mobile-optimized user experience with moderate performance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the website claims, supporting legitimacy and trustworthiness.

E

EXIsport

exisport.cz

52

EXIsport is a large Czech-based e-commerce retailer specializing in sportswear, footwear, and accessories. The website offers a broad product catalog with over 650,000 items, free shipping above a certain threshold, and services such as ski binding mounting. The company targets sports enthusiasts and general consumers within the Czech Republic and operates multiple country-specific domains, indicating a strong regional presence. Technically, the website uses modern web technologies including Vue.js, PrestaShop CMS, and integrates popular marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not negate the site's legitimacy given its professional appearance and active marketing. Overall, EXIsport presents a trustworthy and mature e-commerce platform with a solid technical foundation and good privacy compliance.

E

EXIsport

exisport.hu

54

EXIsport is a large Hungarian e-commerce retailer specializing in sportswear, footwear, and accessories, offering an extensive catalog of over 650,000 products. The website targets a broad audience including men, women, and children interested in sports and outdoor activities. It operates multiple regional domains indicating a strong Central European market presence. Technically, the site is built on PrestaShop with modern JavaScript libraries and uses Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and some consent management for cookies, but lacks explicit privacy and cookie policy pages, security policies, and incident response information. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

B

Bookio

bookio.com

45

Bookio is a mature SaaS company specializing in online booking and reservation management solutions, serving a broad range of industries with over 18,000 clients and 19 million customers served. The website reflects a professional and well-established business with a comprehensive feature set including online payments, SMS/email reminders, and extensive analytics. Technically, the site employs modern frameworks such as Bootstrap, integrates Google Tag Manager, Analytics, Hotjar, and uses Cloudflare for DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS, CSRF tokens, reCAPTCHA, and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

D

Duell

duell.no

54

Duell is a Norwegian company specializing in point-of-sale (POS) systems and related software solutions tailored for various industries such as retail, hospitality, logistics, museums, restaurants, workshops, and beauty salons. The company offers extensive integrations with popular accounting and business management software, enhancing operational efficiency for its clients. The website demonstrates a professional and modern digital presence built on WordPress with Elementor, indicating a mature technical infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of privacy and cookie policies suggests room for improvement in compliance. Overall, Duell presents as a credible and established business in its sector, with a solid market position in Norway.

SIEGENIA is a well-established manufacturing company specializing in hardware and smart systems for windows, doors, sliding doors, ventilation, and smart home integration. The website presents a professional and comprehensive digital presence with detailed product information, service offerings, and compliance disclosures. The company targets end users, business partners, and architects, positioning itself as a leader in room comfort solutions with a focus on security, energy efficiency, and smart technology. Technically, the website is built on the IMPERIA CMS platform and uses modern frontend technologies such as Bootstrap and Swiper.js. It integrates multiple analytics and marketing tools including Google Analytics, LinkedIn Insight, and Bing Ads, managed through Google Tag Manager and Usercentrics for consent compliance. The site is mobile-optimized and exhibits good SEO and accessibility practices, though some improvements in accessibility and security headers are recommended. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. It maintains a PSIRT page for vulnerability disclosures, indicating a mature security posture. However, the absence of explicit security headers and direct security contact information suggests room for enhancement. The WHOIS data is unavailable or protected, which slightly impacts trust but is not uncommon for corporate domains. Overall, the website demonstrates a strong business credibility and technical maturity with minor gaps in security and transparency. Strategic improvements in security headers, contact information, and WHOIS transparency would further enhance trust and compliance.

S

Schlotterer GmbH

schlotterer.com

68

Schlotterer GmbH is an Austrian company specializing in manufacturing and supplying exterior sun protection and insect protection products, including roller shutters, venetian blinds, insect screens, and textile sun protection. The company positions itself as the market leader in Austria for exterior sun protection, targeting professional partners such as the specialist trade and window manufacturers, as well as end customers. The website is professionally designed, multilingual, and powered by TYPO3 CMS, indicating a mature digital presence. Technical infrastructure includes modern JavaScript libraries and Matomo analytics for user tracking. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the website content and branding are consistent and professional. Overall, the site is safe, business-focused, and well-structured, though improvements in privacy compliance and security transparency are recommended.

W

Webwings s.r.o.

webwings.cz

52

Webwings s.r.o. is a Czech-based digital agency specializing in custom IT solutions including web applications, websites, and graphic design. Established in 2009, the company serves clients domestically and internationally, focusing on innovation and tailored digital products. Their market position is that of a trusted regional player with a portfolio of diverse projects and satisfied clients. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, hosted via WEDOS and utilizing Cloudflare DNS for reliability and security. The site is well-optimized for mobile and SEO, with good content quality and professional design. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are present and GDPR compliant, but no explicit incident response or security policies are published. Overall, the site is professional, trustworthy, and business-focused with moderate user tracking via Google Analytics and Tag Manager.

K

K.I.T. Group

wfnr-congress.org

59

The website wfnr-congress.org serves as the official platform for the 14th World Congress for Neurorehabilitation (WCNR 2026), organized by K.I.T. Group. It targets professionals in neurorehabilitation, providing comprehensive information about the event, including program details, registration, social events, and sponsorship opportunities. The site is well-structured and professionally designed, reflecting a medium-sized organization with a focus on healthcare events in South Korea. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Swiper.js, hosted behind Cloudflare DNS, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism, but no terms of service or security policies are published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.