Security Directory

M

Maison du Tourisme Les Portes de la Champagne

lesportesdelachampagne.com

61

Maison du Tourisme Les Portes de la Champagne operates as a regional tourism office promoting the Les Portes de la Champagne area in France. The website provides information on local culture, nature activities, accommodations, restaurants, and events, targeting general tourists and visitors. The business model focuses on tourism promotion and visitor engagement through digital content and event listings. Technically, the site is built on WordPress with a custom Woody theme and uses modern JavaScript libraries such as jQuery, Leaflet, and Google Tag Manager for analytics and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and structure appear professional and trustworthy. Privacy compliance is basic, with no explicit privacy or terms of service pages found. Overall, the site is functional and credible but would benefit from enhanced transparency and domain registration verification.

T

Tourisme Lot

tourisme-lot.com

58

Tourisme Lot operates as a regional tourism promotion website for the Lot area in France, providing visitors with comprehensive information about local attractions, activities, and booking options. The site is well-structured, professionally designed, and targets tourists interested in nature, heritage, and leisure activities in the region. Technically, the website employs a modern JavaScript stack with modular components, integrates third-party analytics and marketing tools, and demonstrates good mobile and accessibility support. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a concern but does not detract significantly from the site's apparent legitimacy. Overall, the site presents a professional and trustworthy front for regional tourism promotion.

V

Vallée de la Dordogne Tourisme : guide officiel

vallee-dordogne.com

60

The website www.vallee-dordogne.com serves as the official tourism guide for the Vallée de la Dordogne region in France, offering comprehensive information about cultural sites, gastronomy, outdoor activities, and local events. It targets tourists and visitors seeking to explore the region's heritage and natural beauty. The site is built on WordPress with a modern tech stack including ES modules, jQuery, and various UI libraries, ensuring a responsive and engaging user experience. Security-wise, the site enforces HTTPS and uses cookie consent frameworks but lacks visible security headers and explicit privacy policies, which are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not directly impact the site's operational legitimacy. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

S

Saint Germain Boucles de Seine

seine-saintgermain.fr

57

Saint Germain Boucles de Seine operates a regional tourism website promoting the Saint-Germain-en-Laye area and surrounding locales in France. The site targets tourists and locals interested in cultural, historical, and recreational activities. It offers event information, reservation links, and multilingual content to serve a broad audience. Technically, the website is built on WordPress with a custom Woody theme and uses modern JavaScript libraries and modules for interactive features and maps. The site is secured with HTTPS and employs a cookie consent framework, demonstrating basic GDPR compliance. However, explicit privacy policies and terms of service are not clearly found, which could be improved. Security headers are not fully verified, and no vulnerability disclosure or incident response information is published. Overall, the website presents a professional and trustworthy front for regional tourism, with moderate technical sophistication and a good security baseline.

C

Comité Régional du Tourisme de la Bretagne

tourismebretagne.com

66

Tourisme Bretagne is the official regional tourism authority website for Brittany, France, providing comprehensive information and services to tourists and visitors. The site offers multilingual support, detailed destination guides, accommodation options, and event information, positioning itself as a key resource for vacation planning in the region. The website demonstrates a mature digital presence with modern technologies and a strong focus on user experience and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the site's legitimacy given its official branding and content. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

E

Explosia a.s.

explosia.cz

54

Explosia a.s. is a well-established Czech manufacturer specializing in explosives, smokeless powders, and specialized products with over a century of tradition. The company serves industrial and military sectors, offering a broad portfolio including ammunition, explosives, large-caliber munitions, and related services such as accredited testing and consulting. Their market position is strong and supported by a long operational history and consistent branding. Technically, the website is built on WordPress with modern libraries like jQuery and Flickity, hosted behind Cloudflare DNS, and demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and obfuscated contact details, though lacking advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

G

Gordon Moody Association

gordonmoody.org.uk

58

Gordon Moody Association is a well-established UK-based charity dedicated to tackling gambling-related harm through residential treatment and support services. The organization positions itself as the leading UK charity in this niche, offering a range of services including counselling, self-assessment tools, professional referrals, and crisis support. Their target audience includes individuals affected by gambling addiction, their families, and healthcare professionals. The website reflects a professional and trustworthy image with consistent branding and comprehensive content focused on their mission. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Google Tag Manager, and Tawk.to live chat. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. The use of structured data enhances search engine visibility and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence, aligning with the charity's history. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture.

B

Beetween

nous-recrutons.fr

58

Beetween is a French technology company specializing in recruitment software (ATS) since 2007, with a presence in Rennes, Paris, and Marseille. The company aims to digitalize recruitment processes and support HR professionals with efficient tools. The website nous-recrutons.fr serves as a recruitment portal and brand presence for Beetween, showcasing job offers, company culture, and testimonials. Technically, the site is built on WordPress with Elementor and Jet plugins, hosted by OVH, and uses modern web technologies including jQuery and FontAwesome. Security posture is adequate with HTTPS and some security plugins, but lacks important security headers and a published privacy policy. The site includes a cookie consent banner indicating some GDPR awareness but lacks comprehensive privacy documentation. Overall, the website is professional, well-branded, and safe for general audiences, but could improve in privacy compliance and security best practices.

M

Moravské hospodářství

moravskehospodarstvi.cz

49

Moravské hospodářství is a Czech regional news media website established in 2008, providing news, economic updates, cultural events, and commentary primarily focused on Moravia and the Czech Republic. The website uses WordPress CMS with modern plugins for GDPR and cookie compliance, and it maintains a moderate to good technical infrastructure including HTTPS and Google Analytics integration. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The site is accessible without WAF or blocking mechanisms, indicating good availability. Overall, the website is professional, trustworthy, and compliant with privacy regulations, targeting Czech-speaking audiences interested in regional news and economy.

Physics World is a well-established scientific media platform operated by IOP Publishing, focusing on delivering world-class physics research and innovation content to a global scientific audience. The website offers a rich portfolio of services including articles, podcasts, videos, webinars, and job listings, positioning itself as a key resource in the physics and broader scientific community. The business model centers on publishing and information dissemination with a strong digital presence supported by a reputable parent company.

I

Instituto Nacional de tecnologías educativas y formación del profesorado

intef.es

57

INTEF (Instituto Nacional de Tecnologías Educativas y Formación del Profesorado) is a Spanish government entity under the Ministry of Education and Vocational Training focused on advancing educational methodologies through digital transformation and teacher training. It offers a broad range of digital educational resources, training programs, and initiatives aimed at improving digital competence in schools across Spain. The website serves as a central hub for these resources and initiatives, targeting educators, students, families, and educational institutions nationwide. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Owl Carousel, enhanced with Google reCAPTCHA and Matomo analytics for security and user behavior insights. The site is well-optimized for SEO and mobile devices, with good accessibility features and professional design. HTTPS is enforced, and basic security best practices are observed, though some security headers could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure mechanisms are not present, which could be enhanced to improve trust and security readiness. Overall, INTEF presents a trustworthy, professional, and well-maintained digital presence consistent with its role as a national educational institution. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and providing clearer contact channels for security incidents to further strengthen its security posture and compliance.

BeSMART.ie is an official online platform developed by the Health & Safety Authority of Ireland to assist businesses in creating safety statements and conducting risk assessments. The website targets Irish businesses across multiple sectors including agriculture, construction, and other industries, providing tailored health and safety compliance resources. It holds a strong market position as a government-backed authoritative resource, supporting over 300 business types with sector-specific guidance. Technically, the website employs a modern tech stack including jQuery, Foundation CSS framework, and various JavaScript libraries for UI enhancements and cookie management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent is implemented with granular user controls, reflecting good privacy compliance practices. From a security perspective, the site enforces HTTPS, uses CSRF tokens on login forms, and integrates cookie consent mechanisms. However, it lacks DNSSEC and some advanced security headers, and does not publish a security policy or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, BeSMART.ie presents a trustworthy, professional, and secure platform suitable for its government service role. Strategic improvements in security headers, DNSSEC, and transparency around security policies would further enhance its posture and user trust.

I

IS Produkce

isprodukce.cz

45

IS Produkce is a Czech media production company established in 2008, offering a broad range of services including commercials, films, videos, photography, and visual effects. The company emphasizes integrated production workflows covering preproduction, production, and postproduction under one roof, enabling efficient and seamless project delivery. Their website showcases a professional portfolio with references to notable clients and projects, targeting businesses and professionals seeking high-quality media content. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including jQuery, Swiper.js, and Lightbox.js. It uses Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized and includes analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. However, it lacks visible privacy and cookie policies, and no cookie consent mechanism is implemented, which is a compliance gap. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses Google reCAPTCHA v3 to protect forms. Despite this, it lacks security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a legitimate and stable presence since 2008. Overall, IS Produkce presents a professional and trustworthy online presence with good technical implementation and business credibility. The main areas for improvement include enhancing privacy compliance by publishing policies and implementing cookie consent, adding security headers, and providing clear security and incident response information.

R

Roomvo

roomvo.com

62

Roomvo operates a sophisticated home visualization platform aimed at enhancing shopping experiences for manufacturers, retailers, distributors, and real estate professionals. Their technology enables customers to visualize home decor products in realistic settings, driving engagement and sales. The company has a strong market presence with thousands of retailers using their platform daily and over a billion products visualized since 2017. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Hotjar, and HubSpot. Security posture is good with HTTPS and cookie consent implemented, though explicit security headers and privacy policies are missing. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in privacy and security transparency.

M

Magrano.com

magrano.com

58

Magrano.com is a specialized technology company offering AI-powered intelligent search solutions tailored for online shops and e-commerce platforms. Their service enhances user experience by providing relevant search results, typo correction, synonym completion, and business-prioritized product display. The company targets online retailers seeking to improve conversion rates and customer satisfaction through advanced search capabilities. The website demonstrates a professional and modern digital presence built on WordPress with Oxygen Builder, integrating various technologies such as Google Tag Manager and reCAPTCHA for security and analytics. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect its contact form, indicating a good baseline security posture. However, the absence of explicit security headers and cookie consent mechanisms suggests areas for improvement in compliance and security hardening. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and customer testimonials provide strong trust signals. Overall, Magrano.com presents a mature and professional online presence with solid technical infrastructure and a clear business focus. Addressing privacy compliance gaps and verifying domain registration details would further strengthen their security and trustworthiness profile.

D

Département de la Haute-Savoie

hautesavoie.fr

57

The Département de la Haute-Savoie operates an official government website serving the Haute-Savoie region in France. The site provides comprehensive information about departmental actions, events, employment opportunities, public services, and subsidies. It targets residents and stakeholders within the region, positioning itself as a key public sector information portal. The website is built on a modern WordPress CMS infrastructure, leveraging SEO and caching plugins, and integrates social media channels for broader engagement. Technically, the site is well-optimized for mobile and desktop, with good performance and accessibility standards. Security posture is strong with HTTPS enforcement, CAPTCHA usage, and cookie consent mechanisms, although explicit privacy and security policies are not found in the provided content. Overall, the site demonstrates high professionalism and trustworthiness consistent with a government entity.

O

OIML – BIPM

worldmetrologyday.org

58

The World Metrology Day website is an authoritative resource managed by international metrology organizations BIPM and OIML, focusing on promoting the 2025 event celebrating the 150th anniversary of the Metre Convention. It targets the metrology community and related stakeholders by providing free communication resources and event information. The website is professionally designed with consistent branding and clear navigation, leveraging modern frontend technologies such as Bootstrap and Vue.js. Mobile responsiveness and user experience are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The site does not collect user data via forms and uses minimal tracking through AWStats. WHOIS data confirms the domain's legitimacy with consistent registration details and a long history. Overall, the website is a credible, well-maintained informational platform with moderate technical maturity and some room for improvement in privacy compliance and security hardening. There are no indications of malicious content or vulnerabilities, making it a safe and trustworthy resource for its audience.

E

ECTRIMS Patient Day

ectrimspatientcommunity.eu

62

ECTRIMS Patient Day is a healthcare-focused platform dedicated to providing education and community engagement for people affected by multiple sclerosis and related neurological diseases. The website serves as an information hub for annual patient community events, offering resources, advocacy blogs, and registration capabilities. It targets patients and caregivers, aiming to keep them informed about the latest scientific advancements directly from experts. The platform positions itself as part of the world's largest professional organization dedicated to multiple sclerosis treatment and understanding. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Yoast SEO and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies. No WHOIS registrant data is publicly available due to privacy protection, which is reasonable for this type of healthcare community site. Overall, the site is professional and trustworthy but could improve transparency by publishing privacy and security policies and providing clear contact information.

O

Oxford University Press

oupmediainfo.com

64

Oxford University Press (OUP) operates the Advertising and Corporate Services website as a platform to offer advertising, content sponsorship, licensing, and corporate communication solutions primarily targeting academic and medical professionals. The site reflects OUP's strong market position as a reputable academic publisher with a comprehensive portfolio of services including digital and print advertising, supplements, reprints, and licensing. The target audience includes marketing and medical affairs professionals seeking trusted academic content for advertising and corporate communications. Technically, the website leverages modern web technologies such as jQuery, Google Tag Manager, Google Analytics, and OneTrust for cookie consent, hosted on the Silverchair CMS platform. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and published security policies are absent. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is professional, trustworthy, and well-aligned with OUP's brand identity.

L

Live Arena Sports

livearenasports.com

49

Live Arena Sports is a Sweden-based technology company specializing in sports management and live streaming solutions. They provide a comprehensive suite of products including AI-driven production management, OTT platforms, and analytics tools tailored for sports federations, leagues, athletes, and fans. Positioned as a market leader, they emphasize scalability, automation, and real-time data insights to enhance the sports viewing and management experience. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Google Analytics and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Overall, the site is professional, trustworthy, and compliant with GDPR cookie regulations, but lacks visible privacy and terms of service documentation. Strategic recommendations include adding comprehensive privacy and security policies, incident response contacts, and enhancing DNS security to further strengthen trust and compliance.

A

Agencia Local de Empleo y Formación (ALEF) Getafe

alefgetafe.org

61

ALEF Getafe is a local government agency dedicated to employment and training services in the municipality of Getafe, Spain. The agency provides a range of services including job placement, training courses, virtual campus access, and employer support. The website is professionally designed, well-structured, and targets job seekers and local businesses. It serves as a key resource for employment initiatives in the region, supported by official branding and certifications such as EFQM. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap 5 and jQuery. It uses HTTPS with Google reCAPTCHA v3 for form security and includes cookie consent mechanisms compliant with GDPR. While the site lacks some advanced security headers, it maintains a good security posture overall. The security posture is solid with enforced HTTPS and anti-bot measures, but could be improved by adding additional HTTP security headers and publishing a formal security policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website represents a trustworthy and professional local government service platform with moderate technical sophistication and good privacy and security practices. The lack of WHOIS data limits domain trust analysis but does not detract from the evident legitimacy of the agency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date software to mitigate risks.

Petra P. is a small photography business based in South Moravia, Czech Republic, offering a wide range of photography services including emotive, nature, travel, family, wedding, newborn, and product photography. The website showcases a professional portfolio with good content quality and consistent branding. The technical infrastructure is based on WordPress with common plugins and libraries, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and GDPR-compliant cookie consent, though security headers and explicit security policies are lacking. The absence of WHOIS data due to privacy protection is typical for small businesses and does not detract significantly from trustworthiness. Overall, the website is safe, professional, and suitable for its target audience.

U

UnArtel s.r.o.

unartel.cz

56

UnArtel s.r.o. is a Czech-based internet service provider specializing in high-speed optical and wireless internet, IPTV services including Skylink Live TV and SledovaniTV, and VoIP telephony solutions. The company targets residential and business customers primarily in the Slavičín region and surrounding areas, positioning itself as a reliable regional ISP with competitive pricing and a range of communication services. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and Google Analytics for tracking. The site is hosted behind Cloudflare infrastructure, ensuring good SSL/TLS security and performance. Mobile optimization and user experience are good, though accessibility features could be improved. The site includes a cookie consent mechanism, indicating awareness of privacy compliance requirements. From a security perspective, the website enforces HTTPS and uses standard tracking and analytics scripts. However, it lacks explicit security headers and a published privacy policy or terms of service, which are important for GDPR compliance and user trust. No WHOIS data is publicly available for the domain, which slightly reduces trust but does not necessarily indicate malicious intent. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a trustworthy and professional front for a small regional ISP, but improvements in privacy documentation, security headers, and WHOIS transparency would enhance its security posture and compliance standing.

L

LUHAČOVICKO.info – Informační portál pro Luhačovice a okolí

luhacovicko.info

44

LUHAČOVICKO.info is a local information portal serving Luhačovice and its surrounding areas in the Czech Republic. The website provides news, event invitations, accommodation and dining guides, and other useful local information targeting residents and visitors. It operates as a small media outlet focused on regional content with a business model based on advertising and local service promotion. Technically, the site is built on WordPress 6.8.3 with common plugins such as Contact Form 7 and Google Analytics integration via MonsterInsights. The site is mobile-optimized and has a good user experience with clear navigation and regularly updated content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and formal privacy and cookie policies, which are compliance gaps. WHOIS data is unavailable due to privacy protection, which is typical for small websites and does not raise immediate concerns. Overall, the website is legitimate and trustworthy for its purpose but could improve privacy compliance and security transparency.

P

Puma Logistics

puma.do

47

Puma Logistics is a Dominican Republic-based integrated logistics service provider specializing in air, maritime, customs management, terrestrial transport, warehousing, value-added services, local distribution, and project cargo. The company positions itself as a local leader with international partnerships, notably representing DB Schenker in the Dominican Republic. Their website demonstrates a professional digital presence built on WordPress with Oxygen Builder, incorporating modern technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is well-structured, mobile-optimized, and provides clear contact channels, though it lacks explicit privacy and cookie policies, which are important for compliance. Security posture is strong with HTTPS, security headers, and secure form handling. However, the absence of WHOIS data transparency slightly reduces trustworthiness. Overall, Puma Logistics presents a credible and professional business front with room for improvement in privacy compliance and domain transparency.

D

Duell

duell.no

54

Duell is a Norwegian company specializing in point-of-sale (POS) systems and related software solutions tailored for various industries such as retail, hospitality, logistics, museums, restaurants, workshops, and beauty salons. The company offers extensive integrations with popular accounting and business management software, enhancing operational efficiency for its clients. The website demonstrates a professional and modern digital presence built on WordPress with Elementor, indicating a mature technical infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of privacy and cookie policies suggests room for improvement in compliance. Overall, Duell presents as a credible and established business in its sector, with a solid market position in Norway.

I

IVF Zlín Czech Republic, s.r.o.

ivf-zlin.cz

51

IVF Zlín Czech Republic, s.r.o. operates a specialized reproductive medicine and gynecology clinic based in Zlín, Czech Republic. The clinic offers a comprehensive range of services including IVF treatments, egg and sperm donation, fertility preservation, and gynecological care. With a history dating back to 2000 and over 7000 children born through their assisted reproduction techniques, the clinic holds a strong regional market position. Their business model integrates medical services with hospitality offerings such as an on-site hotel and pharmacy, enhancing patient comfort and convenience. Technically, the website employs modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. From a security and compliance perspective, the site demonstrates GDPR awareness with a comprehensive privacy policy and cookie consent mechanism. However, no explicit incident response or vulnerability disclosure policies were found. WHOIS data is unavailable due to privacy protection, which is typical for healthcare providers. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and implementing a vulnerability disclosure program to further strengthen trust and compliance.

T

Technologické inovační centrum s.r.o.

ticzlin.cz

48

Technologické inovační centrum s.r.o. (TIC) is a regional innovation and business development center based in Zlín, Czech Republic. The company focuses on supporting entrepreneurs, schools, and regional development through various programs including education, business incubation, financing facilitation, and smart regional initiatives. TIC positions itself as a key innovation hub in the Zlín region, leveraging partnerships with local government and educational institutions. The website is professionally designed, multilingual, and provides comprehensive information about services, events, and projects. Technically, the site runs on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the overall digital presence and business information support legitimacy. Strategic recommendations include enhancing security policies, publishing incident response information, and verifying domain registration details.

G

GTS ALIVE s.r.o.

isic.cz

70

GTS ALIVE s.r.o. operates the ISIC.cz website, providing internationally recognized student and youth discount cards in the Czech Republic. The company has a strong market position with a history dating back to 2000, offering various card types including ISIC Scholar and teacher cards. The website is well-structured, targeting students and young people, and provides comprehensive information about its services and benefits. Technically, the site employs modern JavaScript libraries and is hosted on Amazon AWS, ensuring reliable performance and scalability. Privacy compliance is robust, with clear cookie consent mechanisms managed by Cookiebot and detailed privacy policies in Czech. Security posture is good, with HTTPS enforced and no critical vulnerabilities detected, although some security headers could be improved. Overall, the site demonstrates professionalism and trustworthiness, with transparent advertising and tracking practices. No contact emails or phone numbers were explicitly found in the analyzed content, and no terms of service or explicit security policies were detected.

N

NEJLEPŠÍ ADRESA a.s.

olomouc.cz

55

The website www.olomouc.cz serves as a commercial information portal dedicated to the Olomouc region in the Czech Republic. Operated by NEJLEPŠÍ ADRESA a.s., it provides local news, business directories, event calendars, weather updates, and advertising services. The portal targets residents and visitors seeking regional information and commercial offers. Established since 1997, it holds a solid position as a regional media outlet with consistent branding and a good content quality level. Technically, the site employs a range of JavaScript libraries including jQuery, SlidesJS, and Fancybox, alongside marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is served over HTTPS, ensuring encrypted communication, and includes a cookie consent mechanism compliant with GDPR principles. Mobile optimization and SEO practices are good, though accessibility features are basic. No CMS or hosting provider details were explicitly detected. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers like CSP or HSTS, which could enhance protection. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data for the domain is a concern, as it limits verification of domain legitimacy and registrant information, impacting trustworthiness. Overall, the website is a professionally maintained regional media portal with moderate technical maturity and a reasonable security posture. The main risk lies in the lack of transparent domain registration data, which should be addressed to improve trust and compliance. Strategic recommendations include implementing security headers, publishing clear security and privacy policies, and providing direct contact information for incident response.

E

European Committee for Treatment and Research in Multiple Sclerosis

ectrims.eu

65

The European Committee for Treatment and Research in Multiple Sclerosis (ECTRIMS) operates as the world’s largest professional organization dedicated to the understanding and treatment of multiple sclerosis. The website serves healthcare professionals, researchers, and patient communities by providing educational resources, fellowship programs, and community engagement opportunities. It holds a strong market position within the healthcare sector focused on neurological diseases. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, good privacy compliance, and trustworthy business credibility, with recommendations to enhance security transparency and incident readiness.

P

Peters Surgical India

peters-surgical.in

10

Peters Surgical India is a subsidiary of a French medical device company specializing in the design, manufacture, and distribution of surgical products such as sutures, titanium clips, and surgical glue. The company targets healthcare professionals and partners, positioning itself as a recognized international player with a strong French heritage. The website is built on WordPress using modern themes and plugins, offering a professional and content-rich experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers in place, though cookie consent mechanisms and formal security policies are absent. The domain registration aligns well with the business claims, enhancing trustworthiness. Overall, the site reflects a mature digital presence suitable for its industry and audience.

I

Idealab

archizoom.cz

59

ARCHIZOOM.CZ is a Czech online magazine specializing in architecture, interiors, and design, publishing daily content including articles, podcasts, and newsletters. The site is operated by Idealab, a Czech media and publishing company, and maintains a strong market position within the Czech architectural media niche. The website features a modern WordPress infrastructure with Elementor and Yoast SEO, ensuring good technical maturity and SEO optimization. Hosting is provided by a Czech hosting provider with valid SSL certificates, contributing to a secure browsing experience. However, the site lacks explicit privacy policy and terms of service pages, which are important for full GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms but could be improved by adding security headers and incident response information. Overall, the website is professional, trustworthy, and well-maintained, targeting Czech-speaking architecture and design enthusiasts.

Z

ZM - TECH s.r.o.

hotel-tomasov.cz

53

Hotel Tomášov is a premium 4-star hospitality business located in Zlín, Czech Republic, offering luxury accommodation, wellness, restaurant services, and event hosting. The hotel leverages its historical connection to the Baťa brand and regional tourism partnerships to position itself as a boutique destination for both leisure and business travelers. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving incident response visibility to strengthen trust and compliance.

L

Lázně Luhačovice, a.s.

lazneluhacovice.cz

49

Lázně Luhačovice, a.s. is a well-established spa and wellness company based in the Czech Republic, offering a broad range of medical spa treatments, wellness stays, and leisure activities. The company targets health-conscious individuals, families, and patients seeking both insurance-covered and self-paid services. Their market position is strong within the Moravian spa sector, supported by multiple certifications and positive customer reviews. Technically, the website is built on a custom CMS by Emersion Software, utilizing modern JavaScript libraries like jQuery and Splide for UI components, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, but lacks some recommended security headers and a public security policy. WHOIS data is unavailable, which slightly reduces domain trust but the overall business credibility remains high due to transparent contact information and external trust signals. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust and compliance.

K

Kenyan Nurses Association of America

kenyannursesusa.org

62

The Kenyan Nurses Association of America (KNAA) is a small non-profit organization established in 2022, dedicated to supporting Kenyan nurses in the United States through advocacy, education, mentorship, entrepreneurship, and networking. The organization positions itself as a niche community leader, providing professional development opportunities and hosting annual conferences to foster growth and collaboration within the Kenyan nursing diaspora. The website reflects a professional and consistent brand image with clear mission and service offerings, targeting Kenyan nurses and healthcare professionals in the US. Technically, the website is built on WordPress 6.8.3 with a modern theme and uses jQuery libraries. It is hosted likely on Hostinger infrastructure and uses Squarespace Domains as the registrar. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, there is room for improvement in technical SEO and accessibility compliance. From a security perspective, the site benefits from HTTPS and domain registrar protections but lacks DNSSEC and important security headers. There are no published security policies or incident response contacts, which limits transparency and preparedness. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a significant gap for user trust and regulatory adherence. Overall, the website is functional and credible for its business purpose but should prioritize enhancing privacy compliance, security posture, and transparency to improve trust and regulatory alignment.

SCOPAY is an online platform designed to facilitate payments and communication between parents and schools, focusing on services such as lunch payments, school trip payments, and booking parents' evenings. The website presents a professional and user-friendly interface with mobile app availability on major app stores, targeting parents and school staff. Technically, the site uses common web technologies including jQuery, Bootstrap, Font Awesome, and Google reCAPTCHA for form security. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. The site lacks direct contact emails or phone numbers, relying solely on a contact form with CAPTCHA for enquiries. Overall, the website is functional and serves its business purpose but requires improvements in transparency, security headers, and compliance documentation to enhance trust and security.

E

enel-med

enelsklep.pl

63

Enel-med operates a comprehensive e-commerce platform focused on healthcare services in Poland, offering a wide range of medical consultations, diagnostic tests, rehabilitation, dental care, and aesthetic medicine. The website is built on WordPress and integrates modern tracking and consent management tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot, indicating a mature digital infrastructure. Security posture is solid with HTTPS and DNSSEC enabled, though the absence of explicit privacy and terms of service pages suggests room for compliance improvement. Overall, the platform presents a professional and trustworthy front for healthcare consumers, with a clear market position in medical service e-commerce.

C

Centre de design de l'UQAM

centrededesign.com

46

Centre de design de l'UQAM is a well-established educational and cultural institution affiliated with the Université du Québec à Montréal, specializing in design exhibitions and public programming. The website serves as a portal for upcoming exhibitions, events, and archival content, targeting students, design professionals, and the general public interested in design culture. The business model is non-profit and educational, with a strong local presence in Montreal, Canada. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google Analytics integration. The site is mobile-optimized and uses responsive design principles. Hosting is managed via GoDaddy, and the domain is long-standing and consistent with the institution's history. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. No privacy policy or terms of service pages were found, though a cookie consent mechanism is implemented. Contact information is clearly presented, enhancing business credibility. No signs of WAF or content blocking were detected. Overall, the website is professional, trustworthy, and functional but could improve privacy compliance and security hardening to align with best practices.

M

Made In Luxembourg

made-in-luxembourg.lu

47

Made In Luxembourg is a certification and promotional platform established in 1984 to identify and promote products and services originating from Luxembourg. It operates under the auspices of the Luxembourg Ministry of Foreign Affairs, the Chamber of Commerce, and the Chamber of Trades. The website serves as a directory and informational resource for over 1,800 labelled companies, providing news, company portraits, and guidance on obtaining the label. The target audience includes Luxembourg-based businesses and consumers seeking locally certified products and services. Technically, the site is built on WordPress with modern SEO practices and uses Google Analytics for visitor insights. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and explicit policies are absent. The WHOIS data is unavailable due to malformed domain queries, which limits domain registration trust analysis. Overall, the site is professional, trustworthy, and well-structured, supporting its role as a local certification authority.

P

Pan Commonwealth Forum on Open Learning

pcf11.org

62

The website pcf11.org serves as the official platform for the Eleventh Pan-Commonwealth Forum on Open Learning (PCF11 2025), an educational event organized by the Commonwealth of Learning in partnership with Botswana's Ministry of Higher Education and Botswana Open University. It targets educators, policymakers, researchers, and stakeholders across Commonwealth countries, focusing on open and distance learning to foster inclusive and sustainable education. The site provides detailed event information, speaker profiles, and partner acknowledgments, reflecting a well-structured and professional presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and CoBlocks, ensuring good SEO and user experience. Hosting is managed by GoDaddy, with HTTPS enabled and basic performance optimizations. However, DNSSEC is not enabled, and security headers are absent, indicating room for security enhancements. Privacy compliance is partial, with privacy and terms policies linked from the parent organization but lacking a cookie consent mechanism. Security posture is moderate; the domain is protected with registrar locks, and SSL is properly configured. No forms or sensitive data collection points are present on the homepage, reducing attack surface. However, the absence of explicit security policies and incident response contacts limits transparency. Overall, the site is trustworthy and professional but would benefit from improved security and privacy practices. Strategically, the site supports a significant educational event with a clear mission and reputable partnerships. It effectively communicates its purpose and maintains consistent branding. The lack of direct contact information and cookie consent are minor drawbacks that can be addressed to enhance user trust and compliance.

M

MarkUp Inc.

markup.io

70

MarkUp.io is a SaaS platform specializing in digital content collaboration, enabling teams to leave feedback on over 30 file types including websites, images, PDFs, and videos. The company offers a Chrome extension to enhance browser-based markup and supports team collaboration with guest access. The website is professionally designed, well-branded, and targets teams and professionals seeking streamlined review workflows. The parent company is Ceros, indicating a solid backing and integration within a broader digital content ecosystem. Technically, the site runs on WordPress with modern JavaScript libraries and analytics tools, ensuring a good user experience and SEO optimization. Security posture is strong with HTTPS enforced, though some security headers and explicit cookie consent mechanisms are missing. WHOIS data is privacy protected, which is typical for SaaS businesses, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained.

E

EliteMedical s.r.o.

elitemedical.eu

60

EliteMedical s.r.o. operates a specialized healthcare clinic in Prague focusing on preventive medicine, deep diagnostics, and cancer prevention. The website presents a professional and consistent brand image, offering a wide range of medical services including cardiology, dermatology, urology, neurology, psychiatry, esthetic medicine, nutritional counseling, and DNA testing. The target audience primarily consists of patients seeking comprehensive preventive healthcare services. The business model is service-oriented, leveraging online forms for appointment and service bookings, supported by modern marketing and analytics tools. Technically, the website is built on WordPress 6.5.7 with a modern tech stack including jQuery, Contact Form 7, Google Tag Manager, Google Analytics, Facebook Pixel, and Smartlook for user behavior analytics. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. Security headers appear to be in place, and no exposed sensitive data or vulnerabilities were detected in the HTML content. However, there is no explicit security policy or incident response information published. The WHOIS data aligns well with the business claims, showing consistent registration details without privacy protection, which is appropriate for a healthcare provider. Overall, the website demonstrates a solid security posture and privacy compliance, with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing incident response contacts to further strengthen trust and compliance.

Johns Hopkins Medicine is a leading healthcare and academic institution in the United States, offering comprehensive patient care, cutting-edge medical research, and top-ranked medical education. The website reflects its market position with professional design, clear navigation, and rich content targeting patients, medical professionals, and students. The institution is highly reputable and recognized nationally and internationally. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Piwik PRO for analytics and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and performance. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious elements were detected in the content or linked domains, supporting a strong security posture. Overall, the website demonstrates high business credibility, privacy compliance, and technical quality, with minor recommendations to enhance security headers and publish security policies. The domain WHOIS data is unavailable but the domain is globally recognized and trusted, consistent with the institution's reputation.

C

CitySys - SmartCity

oms-is.eu

57

CitySys - SmartCity operates as a specialized community platform dedicated to Smart City solutions, offering a comprehensive range of resources including forums, presentations, videos, and tutorials. The platform targets consultants, city representatives, partners, technicians, and enthusiasts interested in urban innovation and sustainable city development. Founded in 2022, it positions itself as a niche knowledge hub within the technology sector focused on urban transformation. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO optimization and mobile responsiveness. The use of HTTPS and standard security practices is evident, though some security headers are missing and no explicit privacy or cookie policies are published, indicating room for compliance improvement. The security posture is moderate with no visible vulnerabilities or exposed sensitive data. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

I

INOVATO

inova.to

65

INOVATO is an innovation network based in Slovakia, focused on connecting successful entrepreneurs, experts, and young talents to share knowledge and resources in innovation. The company offers services including trend analysis, prototyping, business modeling, marketing development, project financing, and networking. The website reflects a mature digital presence built on WordPress with modern SEO and security practices. Security posture is strong with HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, supporting INOVATO's position as a medium-sized innovation network in the technology sector.

E

ETA a.s.

eta.cz

69

ETA a.s. is a well-established Czech brand specializing in household appliances, serving the domestic market with a strong e-commerce presence. The website showcases a broad product range, including kitchen robots, vacuum cleaners, and large appliances, supported by services such as extended warranties and customer support. The brand emphasizes tradition and quality, positioning itself as a trusted market leader in the Czech Republic. Technically, the website employs modern JavaScript libraries and tracking tools, with a responsive design optimized for mobile users. Security measures include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site is professional, trustworthy, and user-friendly, with no signs of blocking or WAF interference.

K

Karlovarský kraj

lekarikarlovarskehokraje.cz

47

The website lekarikarlovarskehokraje.cz serves as an official informational portal supported by the Karlovarský kraj regional government, providing a comprehensive catalog of benefits for medical students and doctors in the region. It offers clear, structured content including benefit listings, news articles, job vacancies, and contact information, targeting healthcare professionals and students within the Czech Republic. The site is professionally branded with consistent government logos and messaging, reflecting its authoritative position in the regional healthcare sector. Technically, the website is built on WordPress using the Avada theme, integrating modern web technologies such as jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. Hosting and domain registration are managed by WEDOS, a reputable provider. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some improvements in accessibility and security headers could enhance its technical maturity. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improved transparency and trust. No critical vulnerabilities or exposed sensitive data were detected, and no WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a formal security policy, and establishing a vulnerability disclosure channel to further strengthen trust and security culture.

I

International Bureau for Epilepsy

ibe-epilepsy.org

61

The International Bureau for Epilepsy (IBE) is a non-profit organization dedicated to epilepsy awareness, education, and support for both laypersons and professionals. The website presents a professional and consistent brand image, with a focus on non-medical aspects of epilepsy. The organization appears to have a medium-sized presence with a history dating back to at least 2016. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and GiveWP for donations, integrating Stripe for payment processing. The site is secured with HTTPS and includes cookie consent mechanisms, although a privacy policy page is not detected. Security posture is generally good, but the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is safe, well-structured, and serves its target audience effectively.

F

Fórum dárců

darujspravne.cz

51

Darujspravne.cz is a leading charitable crowdfunding platform in the Czech Republic, operated by Fórum dárců, a reputable donor association established in 1997. The platform facilitates transparent and direct donations to verified non-profit organizations, ensuring funds reach intended recipients. It offers services such as individual donor registration, organizational verification, and matching funds in partnership with ČSOB bank. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to individual donors and non-profits. Technically, it employs modern web technologies including the Nette PHP framework, UIkit CSS, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security posture is strong with HTTPS enforced and secure forms, though it lacks some advanced security headers and a published security policy. Privacy compliance is well addressed with visible cookie consent and privacy terms. WHOIS data is unavailable, which slightly impacts trust but the strong brand presence and partner ecosystem mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves an essential role in the Czech non-profit sector.