Security Directory

B

Bundesamt für Kartographie und Geodäsie

geodatenzentrum.de

62

The Bundesamt für Kartographie und Geodäsie operates the Geodatenzentrum website as a central platform for providing official geospatial data, maps, software, and web services primarily for German governmental and professional users. The site serves as a key distribution point for both free and licensed geodata, supporting compliance with national and European data standards such as INSPIRE. Technically, the website is built on a Magento eCommerce framework with legacy JavaScript libraries including Prototype.js and jQuery 1.12.4, alongside geospatial libraries like OpenLayers. While the site uses HTTPS and CAPTCHA protections, some outdated libraries and missing security headers present moderate security risks. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is professionally designed, consistent in branding, and trustworthy as a government resource.

A

AppendAd Ltd. (DBA FirstImpression.io)

firstimpression.io

61

FirstImpression.io is a technology company specializing in tailored ad monetization solutions for large content publishers. Their platform offers a hassle-free integration with a single tag, leveraging big data analytics to identify untapped revenue opportunities and create customized ad products optimized for user experience and yield. The company targets publishers with significant traffic, providing a flexible and scalable solution to increase ad revenue without additional coding or operational overhead. The website reflects a professional and consistent brand image, supported by client testimonials and clear contact information with physical offices in Israel and the USA. Technically, the website is built on WordPress with common industry-standard plugins and frameworks such as Visual Composer, Slider Revolution, and Contact Form 7. It integrates Google services including Analytics, Tag Manager, Maps API, and reCAPTCHA for security and tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, typical for a content-rich WordPress site. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by a comprehensive privacy policy and terms of service, though a cookie consent mechanism is absent. WHOIS data is unavailable due to privacy protection, but the website's contact details and content suggest legitimacy. Overall, FirstImpression.io presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their security posture and compliance standing.

ITASnow.it is a dedicated website offering mandatory ski insurance in Italy, operated by ITAS Mutua, a well-established insurance mutual company. The site targets skiers in Italy, providing an easy and immediate online purchase experience for the required ski insurance. The business model focuses on direct online sales of insurance policies, leveraging ITAS Mutua's brand and market presence. The domain registration and DNSSEC status support the legitimacy of the business, with a domain age consistent with the product launch timeline. Technically, the website employs modern web technologies including React, Google Tag Manager, OneTrust for cookie consent, and Worldline Italy's payment SDK for secure transactions. Accessibility is enhanced via the AccessiWay tool. The site demonstrates good mobile optimization, SEO practices, and a strict Content Security Policy, contributing to a robust technical infrastructure and digital maturity. From a security perspective, the website benefits from HTTPS, DNSSEC, and a strict CSP. However, the use of an outdated jQuery version and the absence of explicit privacy policy and terms of service pages are notable gaps. No security.txt or vulnerability disclosure information is present, and no direct contact information for security incidents is provided. Cookie consent mechanisms are implemented comprehensively, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its insurance product, with strong technical and security foundations. To enhance compliance and trust, publishing clear privacy and terms documents, updating legacy libraries, and providing direct contact channels for security and customer support are recommended.

O

Olsberg Gruppe

koenigshuette-ofen.com

52

Kaminöfen Königshütte is a German heating stove brand operating under the Olsberg Group, specializing in wood-burning and pellet stoves with a focus on quality and elegant design. The website presents a professional and user-friendly interface with product finders, dealer search, and downloadable resources, targeting consumers and retailers interested in heating solutions. Technically, the site is built on WordPress with modern libraries and enforces HTTPS with a robust cookie consent mechanism, reflecting a mature digital presence. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. Security practices are generally good, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, the site is trustworthy and well-maintained but would benefit from enhanced transparency and security hardening.

Przedsiębiorcy@eu is a Polish business media platform serving entrepreneurs, business owners, and managers across small, medium, and large enterprises. The website offers a business magazine, television content, event coverage, and advertising opportunities, positioning itself as a niche media outlet focused on the Polish business community. The platform targets business professionals seeking insights, expert advice, and industry news. Technically, the site is built on WordPress with a variety of plugins including Yoast SEO, MasterSlider, and Contact Form 7, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The site uses Google Analytics for user tracking and implements a cookie consent banner, reflecting basic privacy compliance. Overall, the website is professional and trustworthy with room for improvement in privacy transparency and security hardening.

F

Forum départemental des Sciences

forumdepartementaldessciences.fr

54

The Forum départemental des Sciences is a public cultural and educational institution managed by the Département du Nord in France. It serves as a regional center for scientific, technical, and industrial culture, offering exhibitions, a planetarium, educational activities, and resources for professionals and educators. The website reflects a well-established organization with a domain registered since 2007, consistent with its public service mission. Technically, the website is built on WordPress with a modern tech stack including jQuery, Swiper.js, GSAP, and lazy loading technologies. It is hosted behind Cloudflare, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with structured data and meta tags properly implemented. From a security perspective, the site uses HTTPS with a good SSL configuration, employs Google reCAPTCHA for form protection, and manages cookie consent via tarteaucitron.js. However, explicit security headers and a dedicated security policy or incident response contact are not found, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It provides clear contact information and maintains a transparent presence through social media channels. The content is safe for general audiences, focusing on educational and cultural topics without any adult or explicit material.

Tremagi S.r.l. is a family-owned Italian holding company operating in the energy sector, aiming to be a major player in the Italian electricity and gas market. The company operates through multiple subsidiaries including Illumia, Wekiwi, E-wide, and EnergyUp, serving over one million customers. The website presents a professional corporate image with detailed company history, team members, and subsidiary information, targeting private and business energy consumers in Italy. Technically, the site is built on WordPress using common JavaScript libraries and is moderately optimized for mobile and performance. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. No forms or direct contact emails are visible, limiting direct user engagement. Overall, the site is trustworthy and professional but should enhance privacy compliance and security practices.

В

Вокс Попули ООД

selectra.bg

41

Selectra Bulgaria, operating under the legal entity Вокс Попули ООД, is a prominent Bulgarian branch of the European Selectra group, specializing in providing comparison portals for utilities, telecommunications, and financial services. Since its establishment in 2013, it has positioned itself as a market leader in Bulgaria by offering free, user-friendly platforms that empower consumers to make informed decisions. The company operates multiple niche websites covering internet, mobile, electricity, loans, forex brokers, security services, and legal assistance, reflecting a diversified portfolio tailored to Bulgarian consumers. Technically, the website is built on WordPress CMS with a Bootstrap framework and integrates common web technologies such as jQuery and Google Analytics. Hosting is provided by a reputable Bulgarian hosting provider, SuperHosting.BG, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, although accessibility and SEO could be improved. The presence of Google Analytics and Tag Manager indicates moderate user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. No vulnerability disclosures or incident response information are provided, indicating potential gaps in security transparency. The WHOIS data is redacted due to GDPR, which is standard and justified for this business type. Overall, the domain appears legitimate and consistent with the business claims. The overall risk assessment suggests a stable and credible business with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and maintaining up-to-date software to mitigate vulnerabilities.

E

ECOLEX

ecolex.org

67

ECOLEX is a joint initiative by FAO, IUCN, and UNEP providing a comprehensive global environmental law information service. It offers searchable access to treaties, legislation, judicial decisions, and literature in multiple languages, targeting governments, NGOs, academia, and the public. The website is professionally designed with consistent branding and a strong trust foundation based on its reputable partners. Technically, the site uses a classic web stack including jQuery and Bootstrap, with Google Analytics for user tracking. While the site is mobile-optimized and performs moderately well, it uses an outdated jQuery version and lacks some security headers, which could pose risks. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance could be improved. WHOIS data is incomplete, limiting domain trust verification, but the website's content and affiliations strongly support legitimacy.

S

swaraOwa

swaraowa.org

58

swaraOwa is a small non-profit organization dedicated to the conservation of Indonesian gibbons and their habitats. The website serves as an educational and community engagement platform, featuring detailed blog posts, field stories, and conservation updates. It targets conservationists, researchers, local communities, and donors interested in biodiversity preservation. Technically, the site is built on WordPress and hosted via Cloudflare, using standard web technologies and Google Analytics for tracking. While the site is accessible and content-rich, it lacks formal privacy and cookie policies, and runs an outdated WordPress version, which poses security risks. The security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from improved privacy compliance and security hardening.

Stolen Wildlife is a Czech Republic based non-profit campaign focused on raising awareness about the illegal trade in wild animals and their body parts. The campaign is supported by the Ostrava Zoo and The Kukang Rescue Program, leveraging expertise from Czech environmental authorities and zoological experts. The website serves as an educational platform highlighting endangered species, trafficking issues, and related news. Technically, the site is built on the WebStarts CMS platform, using legacy jQuery and several JavaScript libraries for UI components. It is hosted on a secure platform with HTTPS enabled, but lacks advanced security headers and privacy policies. The WHOIS data is unavailable, which slightly reduces trust but the website content and affiliations support legitimacy. Overall, the site is well-designed, mobile-optimized, and provides valuable content for a general audience interested in wildlife conservation.

Ukradená divočina is a Czech Republic based non-profit campaign focused on raising awareness about illegal wildlife trade and its impact on endangered species. The initiative is supported by recognized organizations such as Zoo Ostrava and the Kukang Rescue Program, providing credibility and domain expertise. The website serves as an educational platform with detailed content on endangered species, illegal trade issues, and related exhibitions. Technically, the site is built on the WebStarts platform using older but functional technologies like jQuery 1.12.4 and MasterSlider. It is hosted securely with HTTPS and includes multimedia content such as videos and image galleries. However, the site lacks modern security headers and privacy compliance features such as cookie consent and privacy policies, which are important for GDPR compliance. No forms or sensitive data collection mechanisms are present, reducing immediate security risks. Overall, the website is trustworthy and professional but could improve its privacy and security posture.

The Inštitút pre dobre spravovanú spoločnosť is a Slovak non-profit organization dedicated to promoting good governance, public sector quality, and civic engagement. Their website serves as a platform for news, reports, awards, and collaborations with fact-checking and media organizations, targeting Slovak citizens, local governments, and policy makers. The organization holds a recognized position within Slovakia's governance and public sector landscape. Technically, the website is built on WordPress 4.9.3 with jQuery and uses common web fonts and icon libraries. While the site is accessible and uses HTTPS, it relies on outdated software versions which may pose security risks. The site shows basic mobile optimization and SEO practices but lacks advanced accessibility and modern performance optimizations. From a security perspective, the site enforces HTTPS and uses Wordfence security scripts, but lacks modern security headers and runs outdated components. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. Contact information is clearly provided, but no incident response or security contact channels are published. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements in security patching, privacy compliance, and technical modernization are recommended to enhance the organization's digital maturity and risk posture.

V

Vertigo Pole Fitness - kurzy pole dance Praha

vertigopolefitness.cz

42

Vertigo Pole Fitness is a small fitness studio based in Prague, Czech Republic, specializing in pole dance courses for beginners, advanced students, and children. Established since 2011, it offers a community-oriented environment with certified instructors and a variety of fitness and workout classes. The website provides detailed course information, instructor profiles, and contact details, positioning itself as a trusted local fitness provider. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, with moderate performance and good mobile responsiveness. However, the use of an outdated jQuery version and lack of security headers indicate room for improvement in security posture. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration transparency. Overall, the website is professional and content-rich but would benefit from enhanced security and compliance measures.

U

UDES

udes.fr

46

UDES is a prominent French non-profit organization representing employers in the social and solidarity economy sector. It aggregates 22 employer groups across 17 professional branches, representing over 200,000 enterprises and nearly 2.7 million employees. The website reflects a professional and consistent brand presence, targeting employers and stakeholders in the ESS sector with services including representation, social dialogue, publications, and events. Technically, the site is built on Drupal 7 with a modern front-end stack including Bootstrap and jQuery, delivering a responsive and accessible user experience. While performance is moderate, the site benefits from HTTPS and integration with Google Tag Manager and Analytics, though some libraries like jQuery are outdated. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is missing, which slightly impacts trust but the overall site professionalism mitigates concerns. Overall, UDES presents a credible and authoritative online presence for its sector, with recommendations to improve security headers, update libraries, and enhance privacy compliance to strengthen trust and resilience.

I

i-divadlo.cz | činohra - alternativa - muzikál | Divadelní databáze

i-divadlo.cz

63

The website i-divadlo.cz serves as a comprehensive Czech-language portal dedicated to theater information, including news, reviews, program calendars, user and editorial ratings, blogs, and podcasts. It targets theater enthusiasts and professionals within the Czech Republic, offering a rich database of theaters and performances. The site demonstrates a solid market position as a well-established media platform in the cultural sector, supported by partnerships with recognized theaters and cultural institutions. Technically, the site employs legacy JavaScript libraries such as jQuery 1.12.4 and jQuery UI, alongside Google Analytics and Tag Manager for tracking. While the site is mobile-optimized and well-structured, some technical debt is evident due to outdated libraries and lack of modern security headers. Security posture is moderate, with HTTPS implied but no explicit security headers detected. The site implements a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service, which impacts privacy compliance. No WHOIS data is available, limiting domain legitimacy verification, but the professional content and active user engagement suggest a legitimate operation. Overall, the site is safe, culturally focused, and provides valuable services to its audience, though improvements in security and compliance documentation are recommended.

N

Next mind s.r.o.

nextmind.cz

44

Next mind s.r.o. is a Czech technology company specializing in artificial intelligence implementation, consulting, and training services for businesses, cities, and institutions. The company positions itself as a practical AI partner, offering tailored solutions from analysis to deployment and change communication. The website is bilingual (Czech and English), professionally designed, and provides detailed service and career information, reflecting a focused business model in the AI technology sector.

A

ABF a.s.

for-pets.cz

57

The website for-pets.cz is a professionally maintained event platform managed by ABF a.s., focusing on the 16th trade fair for pet supplies in the Czech Republic. It serves visitors, exhibitors, media, and partners with comprehensive event information, news updates, and registration forms. The site demonstrates a solid market position as a recurring trade fair organizer with established partnerships and sponsorships. Technically, the site uses a custom CMS with Bootstrap and jQuery, integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Piwik. While the site is mobile-optimized and well-structured, it uses an outdated jQuery version and lacks explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no visible security policy or incident response information is provided. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

GEMINI oční klinika a.s.

gemioptal.cz

52

Gemioptal.cz is an e-commerce website offering specialized eye health supplements developed by the Czech company GEMINI oční klinika a.s. The company leverages its expertise in ophthalmology to market products such as Gemioptal HERBAL, FORTE, and TOP Q, targeting consumers seeking to maintain or improve eye health. The website is professionally designed with clear navigation, customer testimonials, and a bonus program to enhance customer engagement. Technically, the site uses established technologies including jQuery, Google Tag Manager, and cookie consent scripts, ensuring compliance with GDPR and providing a good user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and use of an outdated jQuery version present moderate risks. The lack of WHOIS data transparency slightly reduces domain trustworthiness, though the business information and contact details are clearly presented and verifiable. Overall, the site is a credible and professional platform for health supplement sales in the Czech market.

G

GLOBDATA a.s.

parksimply.cz

52

ParkSimply is a Czech Republic-based mobile and online parking payment service operated by GLOBDATA a.s. The platform enables users to conveniently pay for parking via smartphone applications, eliminating the need for physical parking meters and tickets. The service is well established with presence in multiple Czech cities and municipalities, supported by official app store listings and a dedicated website. The business targets drivers and vehicle owners seeking a streamlined parking payment experience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly interface. However, some modernization opportunities exist, such as updating jQuery and enhancing accessibility. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy and terms of service present, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and functional with room for security and compliance improvements.

Artistes de la Vie is a French non-profit media and campaign platform centered around a motivational film and an online ecosystem to encourage social and environmental action. The website offers film viewing options via VOD and DVD, organizes cine-action events, and promotes a participative platform for community-driven positive impact projects. The target audience is the general public interested in social change and sustainability. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by Infomaniak Network SA. It employs Google Analytics and Tag Manager for user tracking. The site is mobile optimized and well-structured, though some technical debt exists such as an outdated jQuery version and missing security headers. Security posture is moderate with HTTPS enforced and captcha on forms, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

M

McM promotion

pragueidiots.cz

41

Green Day revival Prague is a tribute band project established in 2012 by experienced musicians from various Czech bands. The website serves as a platform to promote their live performances, share news, and provide booking contact information. The site is built on WordPress with common plugins and scripts, offering a moderate level of technical sophistication and basic mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data limits domain legitimacy verification, but the presence of detailed contact information and active social media profiles supports business credibility. Overall, the site is functional and serves its niche audience effectively but would benefit from enhanced security and compliance measures.

P

PERSKIMEDIA Szymon Perski

epochtimes.pl

59

Epoch Times Polska is a Polish-language independent news media outlet, part of the international Epoch Times network published in 23 languages across 35 countries. The website provides news, analyses, opinions, and cultural content with a focus on China, human rights, and Polish affairs. The business operates on a digital publishing model with advertising revenue and targets Polish-speaking audiences interested in independent journalism. Technically, the site is built on WordPress, using common libraries such as jQuery, Bootstrap, and FontAwesome, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements in security headers and DNSSEC are recommended. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. No direct contact emails or phone numbers are publicly listed, which may limit direct user engagement. Overall, the site is professional, trustworthy, and content-rich, serving a medium-sized media business in Poland.

E

e Penziony CZ

e-penziony.cz

53

e-penziony.cz is a Czech hospitality platform offering a comprehensive database of over 4,000 pensions and private apartments primarily in the Czech Republic. The site targets travelers seeking affordable, commission-free accommodation directly from owners, as well as property owners wishing to register their listings. Technically, the website uses a custom-built infrastructure with standard web technologies including jQuery, Google Analytics, and MapLibre for mapping. It is hosted behind Cloudflare DNS, ensuring reliable performance and security. However, the use of an outdated jQuery version and absence of privacy and cookie policies indicate areas for improvement in security and compliance. The site is accessible without WAF blocking and shows consistent WHOIS data supporting its legitimacy. Overall, the platform is a well-established niche player in Czech hospitality with moderate digital maturity and some compliance gaps.

The website territoires-emplois.org represents a collaborative initiative by ADEME and Réseau Action Climat France to provide a specialized tool (TETE) for estimating job creation through ecological transition policies at various territorial levels in France. The site offers the tool as a downloadable Excel file accompanied by guides and training resources, targeting local authorities, associations, and other stakeholders involved in climate-energy planning. The business model is primarily non-commercial, focusing on free tool distribution with optional paid training. Technically, the site is built on WordPress, using standard web technologies and hosted by OVH. While the site is accessible and professionally designed with good content relevance and navigation, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Tracking is implemented via Google Analytics and Tag Manager with moderate user tracking. Overall, the domain registration is consistent and legitimate, supporting the site's credibility.

M

Modio.sk | Módne inšpirácie, novinky aj zľavy na jednom mieste

modio.sk

53

Modio.sk is a Slovak e-commerce platform specializing in fashion and sports equipment aggregation and inspiration. It offers users a comprehensive search engine for products from various e-shops and physical stores, featuring extensive brand and category listings. The website targets consumers interested in fashion and sports products within Slovakia, providing curated content such as fashion inspirations and news. Technically, the site uses a traditional web stack including jQuery, Google Tag Manager, and lazy loading for images, delivering a moderate performance with good mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and uses rel="nofollow" on external links but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices.

K

Kine-MAX, Erawan s.r.o.

kine-max.cz

45

Kine-MAX, operated by Erawan s.r.o., is a specialized healthcare and sports product company based in the Czech Republic. The company focuses on manufacturing and retailing kinesiology tapes, bandages, massage tools, and related physiotherapy products. Their market position is niche, targeting healthcare professionals, sportsmen, and physiotherapists, supported by an e-commerce platform and partnerships with sports clubs. The website is professionally designed using WordPress CMS with modern plugins and integrates Google Maps for location display. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is missing, which impacts domain trustworthiness. Overall, the website is functional and trustworthy but could improve privacy compliance and security transparency.

R

Radůzy Recepty.com

raduzyrecepty.com

37

Radůzy Recepty.com is a Czech-language culinary website offering over 3600 recipes, cooking ideas, inspirations, contests, and step-by-step cake decoration guides. It targets cooking enthusiasts primarily in the Czech Republic, providing a niche content platform with community discussion features and user-generated content sections. The business model appears to be content-driven with monetization through advertising and affiliate partnerships. Technically, the site is built on the Estranky.cz CMS platform, utilizing legacy JavaScript libraries such as jQuery 1.12.4 and Google services for analytics and advertising. While the site is accessible and content-rich, it lacks modern technical optimizations and comprehensive privacy or security policies. Security posture is moderate with outdated libraries and missing security headers, and WHOIS data is unavailable, raising some legitimacy concerns. Overall, the site provides valuable culinary content but would benefit from technical and security improvements.

C

CS GROUP

csgroup.eu

58

CS GROUP is a medium-sized European technology company specializing in the design, integration, and operation of intelligent, secure, and interconnected information and communication systems. The company serves critical sectors including defense, space, aeronautics, transport, energy, and finance. Their business model focuses on delivering operationally oriented ICT solutions with a strong emphasis on cybersecurity, data intelligence, and industrial digitalization. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Revolution Slider, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms, indicating a mature digital infrastructure. Analytics tools like Google Analytics and Golden Bees are used for user tracking and marketing. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registration data is a concern and reduces overall trustworthiness. Overall, CS GROUP's website is professional, secure, and compliant with privacy regulations, serving a specialized and critical market segment. Strategic improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.

F

Fondation SOMFY

fondation-somfy.com

66

Fondation SOMFY is a corporate foundation linked to Groupe SOMFY, dedicated to supporting social and environmental initiatives primarily in France and internationally. The foundation focuses on promoting healthy and sustainable housing, social integration, and environmental preservation through financial and human sponsorship. The website reflects a well-established non-profit entity with consistent branding and a clear mission. Technically, the site uses a mix of JavaScript libraries including jQuery and TagCommander for analytics and tracking, and it is hosted securely with HTTPS and cookie consent mechanisms in place. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and external links strongly indicate legitimacy. Security posture is good with no visible vulnerabilities, but the site lacks explicit security policies or incident response information. Overall, the website is professional, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

E

ESSENS Restaurant

essensrestaurant.cz

41

ESSENS Restaurant is a fine dining establishment located in South Moravia, Czech Republic, offering Michelin-quality gastronomic experiences focused on regional and seasonal ingredients. The website presents a professional and visually appealing interface with clear navigation and multilingual support, targeting discerning clients seeking high-end culinary experiences. The technical infrastructure leverages popular front-end libraries such as Bootstrap, jQuery, and Flexslider, alongside tracking and marketing tools including Google Tag Manager, Facebook Pixel, and Adform. While the site is mobile optimized and performs moderately well, some libraries are outdated and security headers are not evident, indicating room for improvement in security posture. The absence of privacy and cookie policies and missing WHOIS data represent compliance and trust concerns. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

A

Alliance Qualité Photovoltaïque (AQPV)

aqpv.fr

49

The AQPV website represents a professional certification body focused on photovoltaic solar energy companies in France. It provides detailed information about the AQPV certification, its requirements, and lists certified companies with verifiable certificates. The website is built on WordPress with standard technologies and is well-structured for its target audience of project owners and photovoltaic operators. The technical infrastructure is modern but could benefit from enhanced security headers and explicit privacy compliance documentation. Security posture is moderate with HTTPS and reCAPTCHA usage but lacks visible security policies or incident response information. Overall, the site is trustworthy and serves as a credible resource for photovoltaic certification in France.

GROUPE MAURY IMPRIMEUR is a French printing group specializing in providing printing services to press editors, public and institutional sectors, commerce and distribution, book editors, and technical documentation. The website presents a professional but basic digital presence built on WordPress with common plugins such as WPBakery Page Builder and Slider Revolution. The technical infrastructure is moderate with some outdated libraries like jQuery 1.12.4, and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks visible security headers and updated libraries, which could pose risks. Privacy and cookie policies are not found, indicating compliance gaps. The absence of WHOIS data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is functional and safe for general audiences but requires improvements in security, privacy compliance, and domain registration transparency.

Redenge solutions s.r.o. is a small Czech technology company specializing in custom web and e-commerce solutions integrated with Helios Inuvio, Orange, and Green information systems. Their offerings include scalable B2C/B2B e-shop platforms, SaaS e-shop services, and tailored web applications for medium-sized businesses. The company positions itself as an experienced and agile partner with over 14 years of domain expertise. Technically, the website is built on WordPress with common plugins such as LayerSlider and Slider Revolution, indicating a mature but standard digital infrastructure. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used, but no explicit security headers were detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation.

I

ITALEST GROUP, s.r.o.

vergnanocaffe.cz

56

Vergnano caffe is a specialized distributor of premium Vergnano coffee products and Electra coffee machines in the Czech Republic. The company operates as an authorized distributor since 2001, offering a wide range of coffee beans, capsules, grinders, bar equipment, and accessories targeting both professional and home users. Their market position is supported by certified distributor status and a portfolio of partner clients. Technically, the website is built on WordPress with common libraries such as jQuery and Owl Carousel, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, and no security headers are detected, indicating room for improvement in security and compliance. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and contact transparency on the site. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

K

Kofi Kofi

kofikofi.cz

48

Kofi Kofi is a Czech Republic-based coffee business operating multiple mobile coffee trucks across various cities, complemented by a roasting facility and an e-commerce platform. The company targets general coffee consumers and emphasizes convenience and quality through its mobile retail model. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site is built on WordPress with common plugins and integrates Google Analytics, Facebook Pixel, and Mapy.cz for mapping services. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, though some security headers are missing. Privacy compliance is well addressed with GDPR-aligned policies and user consent options. Overall, the website is trustworthy, well-structured, and provides a good user experience without any detected malicious or adult content.

E

Euroregion Těšínské Slezsko – Śląsk Cieszyński

euregio-teschinensis.eu

36

The Euregio-Teschinensis website serves as an informational platform for the Euroregion Těšínské Slezsko – Śląsk Cieszyński, a cross-border cooperation initiative between Poland and the Czech Republic. It focuses on regional development, cultural events, and cooperation projects, targeting local governments, residents, and tourists. The site is multilingual and provides links to partner organizations and social media channels to enhance regional engagement. Technically, the website is built on WordPress using the Twenty Seventeen theme and includes plugins for video galleries and cookie consent management. The site employs HTTPS and a cookie consent mechanism that restricts ad and analytics storage by default, reflecting a good privacy posture. However, it lacks explicit privacy policy and terms of service pages, and no contact emails or phone numbers are directly provided on the main page. From a security perspective, the site benefits from HTTPS and cookie consent but lacks advanced security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration without privacy protection, appropriate for a regional governmental/non-profit entity. Overall, the website is professional and trustworthy for its niche audience but could improve by adding comprehensive privacy and security policies, explicit contact information, and enhanced security headers to strengthen compliance and user trust.

V

Visit Svalbard

visitsvalbard.com

59

Visit Svalbard operates as the official tourism portal for the Svalbard archipelago, providing comprehensive information and booking services for activities, accommodations, and events. The website targets tourists seeking authentic Arctic experiences and positions itself as a leading resource for travel planning in the region. Technically, the site employs a mature technology stack including jQuery, Google Tag Manager, and Cookiebot for consent management, running on the NewMind CMS platform. The site is well-optimized for SEO, accessibility, and mobile devices, with good performance and modern security practices such as HTTPS and security headers. However, the absence of WHOIS registration data raises concerns about domain transparency, although the website content and branding strongly indicate legitimacy. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates a strong digital presence and marketing maturity but would benefit from improved domain registration transparency and clearer contact information.

I

ij-t.cz

digitalizujemevas.cz

44

The website www.digitalizujemevas.cz represents a Czech-based company specializing in digital transformation services for businesses. Their offerings include tailored digitalization solutions, corporate systems such as CRM and finance automation, web and online applications, and an interactive marketing platform called Zabavne.online. The company positions itself as experienced with over 18 years in the industry, targeting small to medium enterprises seeking to modernize and improve operational efficiency through technology. The site is professionally designed with clear navigation and relevant content in Czech language, supporting business credibility. Technically, the site employs a traditional tech stack including jQuery 1.12.4, Bootstrap, and various UI libraries. While functional and mobile-optimized, the use of outdated JavaScript libraries and lack of visible security headers indicate moderate technical maturity. No CMS or hosting provider details were identified. Performance is moderate with good mobile responsiveness but basic accessibility features. Security posture is moderate but could be improved. The site uses HTTPS (assumed), has a login form with password fields, but lacks explicit security headers and uses an outdated jQuery version that may expose vulnerabilities. No privacy, cookie, or terms policies are present, and no incident response or security contact information is provided. WHOIS data is unavailable, limiting domain legitimacy verification and reducing trust. Overall, the website is a functional and professional digitalization service platform with room for improvement in security, privacy compliance, and domain transparency. Strategic enhancements in these areas would strengthen trust and reduce risk for clients and visitors.

A

ALISCHEM – Průmyslová chemie s.r.o.

alischem.cz

37

ALISCHEM – Průmyslová chemie s.r.o. is a Czech Republic based small industrial chemical company founded in 2016, specializing in fireproof coatings for wood, powder coatings, industrial paints, and comprehensive corrosion protection services. The company benefits from the support of its parent company ALUMONT BUILDING a.s., which provides essential business infrastructure. The website is professionally designed using WordPress and common plugins, presenting clear business information and contact details. However, the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Technically, the site uses HTTPS but lacks important security headers, which could be improved to enhance security posture.

A

APM | Associazione Nazionale Piccoli Musei

piccolimusei.com

50

The Associazione Nazionale Piccoli Musei is a cultural non-profit organization dedicated to promoting and supporting small museums in Italy. Founded by Prof. Giancarlo Dall’Ara, it focuses on enhancing the unique characteristics of small museums, emphasizing their close ties to local communities and territories. The website serves as a hub for information, events, publications, and networking for small museums, positioning itself as a niche cultural association within Italy. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Slider Revolution, providing a good user experience and mobile optimization. Security measures include HTTPS and reCAPTCHA, though some security headers are missing and no explicit privacy or terms of service pages were found. The WHOIS data is unavailable, which raises questions about domain registration legitimacy, though the website content and social media presence suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

BENEFIT plus CZ, s.r.o. is a Czech-based tax, accounting, and consulting firm established in 1997, serving a diverse client base from small entrepreneurs to larger companies and non-profit organizations. The company emphasizes professional insurance coverage and is led by a certified tax advisor who is a member of relevant professional bodies. The website reflects a modest but functional digital presence built on WordPress, with basic navigation and content relevant to its business domain. However, the technical stack is outdated, posing potential security risks. The absence of privacy and cookie policies indicates a gap in compliance with modern data protection standards. Security posture is moderate with HTTPS enabled but lacking advanced security headers and updated software versions. The domain WHOIS data is missing, which reduces trustworthiness from a domain registration perspective but the website content and contact details appear consistent with a legitimate small business. Strategic improvements in security, compliance, and technical modernization are recommended to enhance trust and reduce risk.

O

Obec Krásná

obec-krasna.cz

47

Obec Krásná operates as the official municipal government website for the mountain municipality of Krásná in the Moravian-Silesian region of the Czech Republic. The website provides comprehensive information about the municipality, including local news, events, administrative contacts, and community services. It serves residents and visitors by offering access to reservation systems for sports facilities, event calendars, and official documents. The site is positioned as a trusted local government portal with a focus on community engagement and transparency. Technically, the website is built on WordPress using Elementor and several plugins such as Modern Events Calendar Lite, providing a modern and responsive user experience. The site employs HTTPS and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of a visible privacy policy and terms of service pages suggests room for improvement in compliance documentation. From a security perspective, the site uses HTTPS and secure contact forms but lacks advanced security headers and explicit vulnerability disclosure information. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the content. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the official nature and content quality support trustworthiness. Overall, Obec Krásná's website is a well-structured, informative municipal portal with good technical implementation and a solid security baseline. Enhancements in privacy policy visibility, security headers, and domain registration transparency would further strengthen its security posture and compliance standing.

B

BAK stavební společnost, a.s.

bak.cz

45

BAK stavební společnost, a.s. is a major construction company in the Czech Republic specializing in comprehensive building projects including residential, industrial, administrative, and water management constructions. The company positions itself as one of the largest general contractors in the region, serving clients such as municipalities and private investors. Their website reflects a professional business model focused on delivering high-quality construction services with a strong emphasis on reliability and expertise. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user experience. The site is mobile-optimized and uses modern web technologies like Swiper for sliders and Google Fonts for typography. Performance is moderate with no critical technical issues detected. Accessibility features are basic but present. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and business presence appear legitimate. Overall, the website presents a trustworthy and professional image suitable for its business sector. Strategic improvements in security headers and domain transparency would enhance its security posture and credibility.

M

Mighty Shake

mighty-shake.com

45

Mighty Shake is a well-established dance group and educational organization based in the Czech Republic, with a history dating back to 1995. The organization focuses on street dance and offers training and choreography services to a broad age range, from children to adults. Their market position is that of a respected local community group with a strong cultural presence and partnerships with local authorities and sports agencies. Technically, the website is built on WordPress with a variety of plugins and external libraries, providing a moderate performance and good mobile optimization. However, the site lacks modern security headers and privacy compliance documentation, which are areas for improvement. The security posture is adequate with HTTPS enforced but could be enhanced with additional headers and incident response information. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and business information appear genuine. Overall, the website is functional and informative but requires improvements in privacy, security, and domain transparency to increase trust and compliance.

C

Church & Dwight Co., Inc.

zicam.com

59

Zicam.com is the official website for Zicam, a brand specializing in homeopathic cold remedies and allergy relief products. The site is owned by Church & Dwight Co., Inc., a large healthcare company. The website offers a range of products targeting consumers seeking relief from cold symptoms, nasal congestion, sinus issues, allergies, and immune support. It positions itself as a trusted brand with a focus on homeopathic solutions and transparent communication, including a voluntary product recall notice. Technically, the site is built on WordPress with a legacy jQuery version and uses Google Tag Manager and OneTrust for analytics and cookie consent, respectively. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response policies. WHOIS data for the domain is missing, which reduces trust slightly but is mitigated by the strong brand association and professional site content. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though updating technical components and improving security headers is recommended.

P

Polanský s.r.o.

polansky-sro.cz

48

Polanský s.r.o. is a Czech construction company specializing in demolition, earthworks, height work, transport, and recycling services. The company emphasizes high quality, flexibility, and comprehensive delivery, supported by ISO certifications and recognized as the Construction Company of the Year 2020. Their website is professionally designed, multilingual, and provides detailed service descriptions and project references, targeting industrial and construction sector clients. Technically, the site runs on WordPress with standard plugins and Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is missing, which limits full legitimacy verification. Overall, the company presents a credible business with room for improvement in privacy compliance and security best practices.

M

MYJO s.r.o.

apartmanvtichu.cz

46

Apartmanvtichu.cz is a hospitality website offering accommodation services in the Broumovsko region of the Czech Republic. The business provides a small apartment suitable for four guests, featuring amenities such as a fully equipped kitchen, washing machine, a unique tent sauna, and a garden terrace. The website targets tourists and cyclists seeking a tranquil and active rest in a protected landscape area. The business appears to be a small, local operator founded recently in 2024, with clear contact details and an online reservation system powered by a partner platform, REZEO. The website is professionally designed with good navigation and mobile optimization, although some technical aspects could be modernized.

M

Mateřská školka Kometka

mskometka.cz

40

Mateřská školka Kometka is a small, sports-focused kindergarten based in Brno, Czech Republic, established in 2013. The website presents a professional and well-structured digital presence emphasizing their unique selling proposition as the most sports-oriented preschool in Moravia. Key services include various specialized classes such as sports, creative, and preparatory groups, supported by health care and nutrition offerings. The site integrates community partnerships with local sports organizations, enhancing its market position. Technically, the website is built on WordPress with Elementor and uses common plugins like Contact Form 7 and Complianz for GDPR compliance. The infrastructure is hosted by REG-ZONER, with modern web technologies and moderate performance. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of explicit security headers and incident response policies suggests room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear cookie policies and GDPR adherence, but no dedicated privacy policy or data protection officer information was found. Overall, the website is trustworthy and professional, with a low risk profile. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility to further strengthen compliance and user trust.