Security Directory

T

TRIMA NEWS, s.r.o.

budejckadrbna.cz

48

Budějcká Drbna is a regional news media portal operated by TRIMA NEWS, s.r.o., focused on delivering authentic news and stories from České Budějovice and the South Bohemia region. It offers a variety of news categories including society, crime, sports, and culture, targeting local residents and interested audiences. The site supports user engagement through registration, article saving, and subscription to daily news summaries. Technically, the website employs a modern JavaScript stack with integrations for analytics, advertising, and consent management, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable transparency gap but does not detract from the professional presentation and operation of the site. Overall, the site is a trustworthy and well-maintained regional news source.

L

LIFE IN TOWN s.r.o.

jsmez.cz

63

JSMEZ.CZ is a Czech community portal operated by LIFE IN TOWN s.r.o., providing localized news, events, and community information across multiple Czech cities. The website serves as a hub linking to city-specific portals, targeting local residents and community members. The business model focuses on media and community engagement, with key services including event calendars and electronic business cards (E-vizitka). The company appears to be a small-sized media entity based in Olomouc, Czech Republic. Technically, the website is built on ASP.NET Web Forms with a tech stack including jQuery, Bootstrap, Font Awesome, and Google Fonts. It integrates Facebook SDK and Microsoft Application Insights for analytics and tracking. The site is mobile-optimized with moderate performance and good SEO practices. Privacy and cookie policies are implemented with a consent banner, indicating awareness of GDPR compliance. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms but lacks explicit security headers and up-to-date JavaScript libraries, which could pose risks. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, JSMEZ.CZ presents a professional and trustworthy community portal with good content quality and privacy compliance. However, improvements in security posture, domain registration transparency, and incident response readiness are recommended to enhance trust and resilience.

L

LIFE IN TOWN s.r.o.

jsmezprahy.cz

61

JSME Z PRAHY is a Czech community portal operated by LIFE IN TOWN s.r.o., targeting residents and community members of Prague. The website offers local news, event listings, places directory, job offers, photo galleries, and user profiles, positioning itself as a key local media platform within a network of similar portals across multiple Czech cities. The business model focuses on community engagement and local information dissemination, supported by advertising and partnerships. Technically, the website is built on a custom ASP.NET WebForms platform using technologies such as jQuery 1.12.4, Bootstrap, Font Awesome 6, Google Custom Search, and Microsoft Application Insights for analytics. The site is mobile-optimized with good navigation and SEO practices, though it uses an outdated jQuery version which poses potential security risks. Cookie consent and privacy policies are implemented, indicating awareness of GDPR compliance. From a security perspective, the site uses HTTPS and has cookie consent mechanisms but lacks visible security headers and uses an outdated JavaScript library. No WHOIS data is publicly available due to privacy protection, which is common under GDPR but reduces transparency. No critical vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, the website demonstrates a solid community media presence with good technical and privacy compliance but would benefit from updating its technology stack and enhancing security headers to improve its security posture and trustworthiness.

R

Robert Bosch odbytová s.r.o.

bosch.cz

62

Robert Bosch odbytová s.r.o. operates the Czech Republic localized website for Bosch, a global leader in manufacturing and technology solutions. The website targets Czech-speaking audiences with a focus on mobility, household, and industrial products and services. The company is positioned as a large multinational enterprise with a strong local presence, offering a broad portfolio of products and services. The website content is professionally curated, with clear navigation and consistent branding, supporting both B2B and B2C business models. Technically, the website employs modern web technologies including Google Tag Manager for analytics, custom Bosch UI components, and web fonts for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with room for optimization. Privacy compliance is well addressed through comprehensive privacy and cookie policies, including consent management mechanisms. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks explicit security headers and published security policies or incident response information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces trust slightly but does not outweigh the strong legitimacy signals from the website content and social media presence. Overall, the website presents a secure, professional, and user-friendly digital presence for Bosch in the Czech Republic. Strategic improvements in security headers and transparency around security policies would further strengthen trust and compliance.

O

OLÚp Predná Hora

olup-prednahora.sk

40

OLÚP, n. o. Predná Hora is a well-established non-profit specialized psychiatric healthcare institution in Slovakia, founded in 2006. The organization offers a range of services including inpatient and outpatient psychiatric care, family therapy, and aftercare treatments. The website reflects a professional and trustworthy presence with comprehensive information targeted at patients and interested parties. It maintains a consistent brand identity and demonstrates compliance with GDPR and cookie regulations, enhancing user trust. The institution also actively engages users through social media channels and a dedicated mobile application.

W

Winning Group a.s.

winninggroup.cz

45

Winning Group a.s. is a Czech investment company focused on advancing its portfolio of firms primarily in manufacturing, construction, real estate, hospitality, and premium food sectors. The company positions itself as a strategic partner ready for long-term growth and acquisitions, targeting investors and industry professionals. The website reflects a mature digital presence with multilingual support and comprehensive corporate content including annual reports and press releases. Technically, the site is built on WordPress with modern JavaScript libraries and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

The website godaddysites.com currently serves a 404 Not Found error page, indicating that the content is inaccessible or missing. The domain is registered to GoDaddy.com, LLC, a well-known and legitimate company specializing in domain registration and website building services. Despite the domain's legitimacy and long registration period, the lack of accessible content severely limits the ability to assess the website's offerings, security posture, and compliance. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the page. Technically, the page uses standard HTML and CSS with Bootstrap framework elements but lacks modern security headers or HTTPS indicators in the provided content. Overall, the website appears to be a placeholder or error page rather than an active service site.

S

Solar Energy Industries Association

seia.org

71

The Solar Energy Industries Association (SEIA) is a well-established national trade association founded in 1974, dedicated to advancing the solar energy industry in the United States. It represents over 1,200 member companies and focuses on policy advocacy, research, education, and industry growth to promote clean energy solutions. The website reflects a professional and authoritative presence with excellent content quality and clear messaging targeted at industry stakeholders, policymakers, and communities interested in solar energy. Technically, the site is built on WordPress, enhanced with performance optimization tools like NitroPack, and integrates modern analytics and marketing technologies including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted via Cloudflare, ensuring robust infrastructure and security.

C

Colossal Shop

colossal.shop

63

Colossal Shop is a small US-based e-commerce retailer specializing in creative products such as art supplies, design objects, homewares, puzzles, and art books. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing tools like Mailerlite and Facebook Pixel. The store targets creative individuals and art enthusiasts, positioning itself as a niche retailer with a curated product selection. Technically, the site is well-structured with good SEO practices and mobile optimization, hosted on Shopify with Cloudflare DNS services. Security posture is solid with HTTPS enforced and domain locks in place, though DNSSEC is not enabled. However, the site lacks visible privacy and cookie policies and does not provide explicit contact information, which impacts privacy compliance and user trust. Overall, the website is professional and trustworthy but could improve compliance and transparency aspects.

T

Tattly Temporary Tattoos & Stickers

tattly.com

68

Tattly Temporary Tattoos & Stickers operates a niche e-commerce platform specializing in high-quality, artistic temporary tattoos and stickers. Founded in 2011, the company has established a consistent brand presence with a well-structured Shopify-based website. The site targets a general audience interested in unique, non-permanent body art, offering a variety of collections and custom designs. The business model is retail-focused, leveraging online sales and subscription services via integrated tools like Recharge. Technically, the website employs modern e-commerce technologies including Shopify's Debut theme, multiple analytics and marketing integrations, and is hosted on reliable infrastructure with Amazon Registrar as the domain registrar. The site demonstrates good performance and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain status protections, but could be enhanced by enabling DNSSEC and implementing additional security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy transparency and security hardening.

T

The Harnisch Foundation

thehf.org

57

The Harnisch Foundation is a well-established private philanthropic organization focused on creative and progressive social impact initiatives since 1998. Their website reflects a niche foundation with a clear mission to support leadership and community projects such as Funny Girls and Awesome Without Borders. The foundation maintains a professional online presence with consistent branding, clear contact information, and active social media channels. Technically, the site is built on WordPress with modern plugins and integrates analytics and tracking tools for marketing insights. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is basic with policies present but lacking advanced GDPR indicators. Overall, the site is trustworthy and serves its audience effectively.

The analyzed URL is a 404 error page hosted on a subdomain of ffm.to, which is associated with feature.fm, a music marketing platform. The page serves as a standard 'Page Not Found' message with minimal content and no business or contact information. The technical infrastructure uses modern JavaScript frameworks such as Vue.js and Nuxt.js, delivered via a Fastly CDN, and includes tracking scripts like Google Tag Manager and AppNexus. However, the page lacks privacy, cookie, and terms of service policies, as well as any security or incident response information, which limits compliance and trustworthiness. The security posture is minimal with no detected security headers or explicit protections. Overall, the page is accessible and not blocked by any WAF or security challenge, but it provides no substantive business or security information.

F

FairPlé Music CLG-Company Limited by Guarantee

fairple.com

59

FairPlé Music CLG is a small non-profit organization dedicated to promoting gender balance in Irish traditional and folk music. The website serves as an advocacy platform providing resources, reports, and policy recommendations to support equal representation and safer environments within the music community. The organization is registered in Ireland with a clear company registration number and physical address, enhancing its credibility. The website is built on Squarespace, leveraging modern web technologies and standard integrations such as Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. WHOIS data is missing or not publicly available, which reduces trust somewhat but does not negate the legitimacy indicated by business information and content quality.

A

Ace Hotel

acehotel.com

72

Ace Hotel is an established boutique hotel chain operating in North America, Japan, Australia, and Greece, providing hospitality and lodging services. The website reflects a professional and consistent brand presence targeting travelers and tourists seeking unique hotel experiences. Technically, the site is built on WordPress, hosted on AWS infrastructure, and employs modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized and accessible with good SEO practices. Security posture is generally good with HTTPS enforced and bot protection via reCAPTCHA; however, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the domain registration data supports the legitimacy and maturity of the business, with no suspicious patterns detected.

T

The Moth

themothcontact.org

45

The Moth is a recognized storytelling non-profit organization offering live events, educational workshops, and community engagement programs. Their website focuses on providing a contact form for inquiries related to ticketing, events, donations, and other services. The organization targets a general audience interested in storytelling and cultural events. Technically, the website is built using React.js and integrates Salesforce Web-to-Case for contact management. Hosting is provided via GoDaddy, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data shows suspicious domain creation date in the future, which reduces trustworthiness but does not necessarily indicate malicious intent. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

S

Sailors for the Sea

sailorsforthesea.org

59

Sailors for the Sea is a well-established non-profit organization founded in 2004, dedicated to ocean conservation through community engagement, education, and advocacy. Powered by Oceana, it offers programs such as Clean Regattas, environmental lesson plans for kids, and campaigns addressing plastic pollution and species protection. The website is built on WordPress with modern plugins and technologies, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

The analyzed website autostore.com is a parked domain page managed by GoDaddy, LLC, a well-known domain registrar and parking service provider. The page contains no active business content, products, or services, and is primarily designed to offer the domain for sale. The presence of a Trustpilot widget and TrustArc cookie consent banner indicates some level of trust and privacy compliance, but the overall content is minimal and targeted at domain buyers rather than end consumers. Technically, the site uses standard web technologies including JavaScript, CSS, and third-party widgets for consent management and reviews. It is hosted on GoDaddy's infrastructure and shows basic mobile optimization and accessibility features. However, no advanced CMS or frameworks are detected, and SEO optimization is poor due to lack of meaningful content. From a security perspective, the site lacks visible security headers and detailed security or incident response policies. The domain is registered with Tucows Domains Inc. and managed by GoDaddy, with no suspicious WHOIS patterns. DNSSEC is not enabled, which is a minor security gap. Overall, the security posture is basic but acceptable for a parked domain. The overall risk is low given the lack of active content or user interaction, but the site offers limited business credibility or user engagement. Strategic recommendations include improving security headers, enabling DNSSEC, and providing clearer business or contact information if the domain is to be developed into an active site.

G

Global Sign and Design, Inc.

global-sign.com

47

Global Sign and Design, Inc. is a small business specializing in digital signage and LED display solutions primarily serving the Pennsylvania region. The company acts as a premier distributor and installer for top manufacturers in the visual communication industry, offering products such as outdoor and indoor LED displays, scoreboards, and custom signage. Their market position is regional with a focus on retail and manufacturing sectors requiring digital signage solutions. Technically, the website infrastructure is outdated, relying on deprecated Flash technology and lacking modern security features such as HTTPS enforcement and security headers. The site is hosted by Bluehost Inc. and uses basic JavaScript and CSS without modern frameworks or CMS. Performance and mobile optimization are poor, and accessibility features are minimal. From a security perspective, the website shows significant gaps including absence of privacy and cookie policies, no visible security headers, and no DNSSEC enabled on the domain. The use of Flash presents security and compatibility risks. Contact information is provided but limited, and no incident response or security policies are disclosed. Analytics tools like StatCounter and Google Analytics are used without clear privacy compliance disclosures. Overall, the website presents moderate business credibility but requires urgent technical and security improvements to enhance user experience, compliance, and trustworthiness. Strategic recommendations include modernizing the website technology stack, implementing HTTPS and security headers, adding privacy and cookie policies, and removing deprecated Flash content.

G

Geri Draws Japan

geridrawsjapan.com

56

Geri Draws Japan is a small-scale e-commerce and content creation business focused on illustration and travel blogging centered around Japanese culture. The website is professionally designed and hosted on Squarespace, featuring an online shop for art prints and related products. The business targets general audiences interested in Japanese culture and art. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and Google reCAPTCHA, with a good mobile-optimized design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers such as HSTS and Content-Security-Policy. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy but the active and consistent web presence suggests a legitimate small business. Overall, the site is functional and trustworthy but would benefit from improved security and privacy practices.

M

MYJO, s.r.o. - REZEO

rezeo.cz

44

REZEO is a Czech Republic based SaaS company specializing in an online reservation system tailored for small accommodation providers. The platform aims to simplify online booking processes, enhance guest comfort, and improve rental efficiency. The company operates under MYJO, s.r.o., founded in 2021, positioning itself as a niche player in the hospitality sector. The website reflects a professional and consistent brand image with a clear focus on its target audience. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and consent management tools, hosted by Active24. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, security headers and formal policies like privacy and terms of service are missing, representing areas for improvement. Overall, the website is trustworthy and functional, with moderate user tracking and marketing integration.

G

Guía de la Industria Química

guiaquimica.mx

48

Guía de la Industria Química is a specialized online platform focused on providing comprehensive information, business directories, and advertising opportunities for the chemical industry and related sectors in Mexico. Established in 2011, it serves industry professionals and companies by offering detailed articles, supplier listings, and sector-specific insights. The website positions itself as an important resource within the Mexican chemical manufacturing sector, supporting business decision-making and networking. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, Google Fonts, and interactive libraries such as Swiper and AOS for animations. It integrates Google Analytics, Google Tag Manager, and Mouseflow for user behavior tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Hosting details are limited but the domain registrar is consistent with the business location. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms to mitigate spam. However, it lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could enhance protection against common web attacks. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen trust. Overall, the website is professional, content-rich, and trustworthy for its target audience but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing clear incident response contacts to improve compliance and security posture.

G

Gothamist

gothamist.com

63

Gothamist is a well-established non-profit local news organization focused on New York City, providing news coverage on local events, food, and arts. The website is powered by WNYC and has been operational since 2003, indicating a mature presence in the local media market. The business model centers on non-profit journalism with a target audience of NYC residents and local news consumers. Technically, the site uses a modern JavaScript stack with multiple third-party advertising and analytics services integrated, including Google Tag Manager, Amazon Ads, Facebook Pixel, and others. The site is hosted with domain registration via Amazon Registrar and DNS managed by Cloudflare, but DNSSEC is not enabled. Security posture is generally good with HTTPS enforced and domain status protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but could improve privacy transparency and security best practices.

A

AstraZeneca

astrazeneca-us.com

71

AstraZeneca US operates as a major biopharmaceutical company focusing on delivering innovative medicines primarily in oncology and biopharmaceuticals. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare providers, and other stakeholders. The technical infrastructure leverages modern web technologies, including Adobe Experience Manager CMS, AWS hosting, and advanced analytics tools such as Adobe Analytics and Tealium. The site is well-optimized for mobile and accessibility, with clear navigation and professional branding. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. While explicit security headers were not fully confirmed, the use of reputable third-party services and absence of exposed sensitive data suggest a strong security posture. The lack of WHOIS data limits domain registration verification, but the overall trust signals and branding consistency support legitimacy. Overall, AstraZeneca US demonstrates a robust digital and security posture suitable for a large healthcare enterprise. Strategic improvements could focus on enhancing transparency around security policies and incident response, as well as verifying and publishing vulnerability disclosure information.

A

Alexion Pharmaceuticals, Inc.

alexionaccessnavigator.com

63

Alexion Access Navigator is a specialized online platform dedicated to providing US healthcare professionals with access and reimbursement resources for Alexion pharmaceutical products. The website serves as a centralized hub for brand-specific information, prescribing details, and connection to field reimbursement managers, supporting healthcare providers in navigating medication access. The platform is positioned as a trusted resource within the healthcare sector, backed by Alexion Pharmaceuticals, Inc., a large and established pharmaceutical company. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Feather Icons for UI elements, and multiple analytics tools such as Google Analytics, Segment, Mouseflow, and Evergage for user behavior tracking. Hosting is inferred to be on Amazon AWS infrastructure, supported by AWS DNS servers. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and has domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. The absence of a cookie consent mechanism despite the use of tracking scripts indicates a privacy compliance gap. No incident response or security policy information is publicly available on the site. Overall, the security posture is solid but could be improved with enhanced headers, DNSSEC, and explicit privacy controls. The website content is professional, safe, and targeted exclusively at healthcare professionals in the US, with no adult or inappropriate content. The domain registration is consistent and legitimate, with no privacy protection masking ownership, and an appropriate domain age for the business. Strategic recommendations include implementing cookie consent, adding security headers, enabling DNSSEC, and publishing security policies to enhance trust and compliance.

S

Státní fond životního prostředí ČR

modernizacni-fond.cz

67

The website represents the official portal of the State Environmental Fund of the Czech Republic (SFŽP ČR), focusing on the Modernization Fund which supports energy and environmental projects. It serves a broad audience including businesses, municipalities, and households, providing detailed information about funding programs, project successes, and future plans. The site is well-branded, consistent, and linked to trusted government and EU resources. Technically, it is built on WordPress with modern plugins and frameworks, offering good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and some security plugins in use, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves as a critical government resource for environmental funding in the Czech Republic.

I

IQS Group a.s.

iqsgroup.cz

58

IQS Group a.s. is a Czech Republic-based technology company specializing in nanotechnology, optical security, and 3D printing solutions. The company operates internationally, providing innovative products and technologies primarily for counterfeit protection, nanostructured optics, and medical applications. Their market position is that of an innovative leader with a medium-sized business model focused on B2B clients such as luminaire manufacturers and security document producers. The website reflects a professional and consistent brand image with clear communication of their subsidiaries and services. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins for enhanced user experience and GDPR compliance. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are consistent with the company's location and business age. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and the company holds multiple ISO certifications including ISO 27001 for information security. No critical vulnerabilities or exposed sensitive data were detected. However, some security headers could be improved, and incident response contact details are not explicitly provided. Overall, the website and business demonstrate a strong security posture, good privacy compliance, and high business credibility. The risk level is low, but recommendations include enhancing security headers and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

P

Peecho B.V.

peecho.com

67

Peecho B.V. operates a professional print on demand platform specializing in custom photo books, magazines, wall art, and business stationery. The company targets creatives, self-publishers, enterprises, and app/platform developers, offering API integration and a global print network to enable fast, sustainable, and localized printing and drop shipping. Peecho is positioned as a trusted player with over 1 million users and 1,000+ companies, and is part of the Prodigi Group, enhancing its market credibility. Technically, the website is built on Webflow CMS with modern technologies including Google Tag Manager, reCAPTCHA, Weglot for translations, and Cloudflare for hosting and CDN services. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. Security best practices are observed with HTTPS, CAPTCHA protection on forms, and cookie consent mechanisms, though explicit security headers and policies could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR compliance indicators. However, the absence of WHOIS data and domain registration details introduces some uncertainty about domain legitimacy, though the professional web presence and business information mitigate this concern. Overall, Peecho presents a low-risk, credible business with a mature digital infrastructure and good privacy and security practices. Strategic improvements in publishing security policies and enhancing WHOIS transparency would further strengthen trust and compliance.

Design by Ewa is a specialized small business focused on providing custom web design and graphic design services tailored to dog and cat breeders, kennels, catteries, and the equestrian industry. The company has a long-standing presence since 2001 and offers a range of services including website packages, logo design, magazine publication, and advert design. Their market position is that of a niche specialist with a professional and artistically driven approach. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing security headers and unknown SSL configuration, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

A

Acro Jarmila Podzemská

acro-farm.cz

52

ACRO FARM is a small family-operated breeder specializing in colorful miniature horses and Irish cobs, emphasizing healthy animals with excellent character and active participation in driving, jumping, and therapy activities. The website showcases champion horses and provides detailed descriptions of their breeding goals and achievements. Technically, the site is built on the Webnode CMS platform, uses Cloudfront CDN, and integrates Google Analytics for visitor tracking. The site is accessible without WAF or blocking mechanisms but lacks advanced security headers and privacy compliance features. No WHOIS data is available, limiting domain legitimacy verification. Overall, the site serves a niche equestrian audience with basic but functional digital infrastructure.

A

a-net group a.s.

cavalletto.cz

49

Cavalletto.cz is an established Czech e-commerce retailer specializing in equestrian products, including horse carts, riding equipment, apparel, stable supplies, and related services. The business targets horse owners, riders, and stable operators primarily within the Czech Republic. The website presents a comprehensive product catalog with clear navigation and a professional design, supporting a good user experience. Technically, the site uses jQuery and video.js libraries and appears to be built on a custom or Nette-based e-commerce platform hosted on Czechland.net servers. Mobile optimization is good, and basic accessibility features are present. Security measures include HTTPS usage, CSRF tokens in forms, and a cookie consent mechanism with opt-in for analytics and advertising cookies. However, explicit security headers and privacy policies are missing, representing areas for improvement. WHOIS data confirms the domain's legitimacy and long-standing presence since 2009. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance documentation.

J

Jezdecké centrum Královický dvůr

kralovickydvur.cz

46

Jezdecké centrum Královický dvůr is a hospitality and equestrian service provider located near Prague, Czech Republic. The business offers a restaurant, accommodation in a historic building, corporate event hosting, and a comprehensive equestrian center. Their target audience includes horse enthusiasts, tourists, families, and corporate clients seeking unique event venues. The website reflects a well-structured and professionally designed platform with clear navigation and relevant content. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and Typekit fonts, with a CMS likely based on Nette framework. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy compliance documentation. Contact information is clearly presented with phone numbers and a contact form, but no privacy or cookie policies were found, indicating compliance gaps. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

E

ESC Olomouc

escolomouc.cz

46

ESC Olomouc operates as a modern equestrian center in the Czech Republic, specializing in hosting show jumping and dressage competitions. The website positions the center as the most exclusive equestrian venue in the country, targeting equestrian sports enthusiasts and competitors. Key services include event hosting, live streaming, and hospitality offerings such as a restaurant. The business is small-sized, founded in 2012, and maintains partnerships with local financial institutions and sports organizations. Technically, the website uses modern frontend technologies like Alpine.js and Swiper.js, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. No forms or direct contact details are visible, which may impact user engagement and trust. Overall, the site is professional and content-rich but could enhance privacy compliance and security transparency.

JS Equitana Martinice is a small equestrian society based in the Czech Republic focused on organizing horse riding competitions, training camps, and related equestrian activities. The website serves as an information hub for event calendars, online results, galleries, and partner information. The business operates regionally with a clear target audience of equestrian sports enthusiasts and competitors. The parent company is RUBILIS, s.r.o., indicating a formal business structure. Technically, the website uses a mix of older and modern JavaScript libraries, a custom CMS (IPO), and integrates Matomo analytics for user tracking. The site is mobile responsive and provides a cookie consent mechanism, but lacks a dedicated privacy policy or terms of service pages. Security posture is moderate with HTTPS enforced and use of Google reCAPTCHA, but missing security headers and no published security or incident response policies. WHOIS data is unavailable, which slightly reduces trust but the website content and partner ecosystem support legitimacy. Overall, the site is functional, moderately secure, and serves its niche audience effectively.

N

Národní hřebčín Kladruby nad Labem, s.p.o.

nhkladruby.cz

56

Národní hřebčín Kladruby nad Labem, s.p.o. is a historic government-owned stud farm in the Czech Republic, specializing in the breeding and preservation of the Old Kladruber horse, the oldest original Czech horse breed. The website serves as an informational and promotional platform targeting visitors interested in cultural heritage, horse breeding, and tourism. It offers visitor tours, horse breeding services, events, publications, and online ticket sales. The company maintains an active presence on major social media platforms and provides clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website is built on a custom CMS with modern web technologies including HTML5, CSS3, JavaScript, and libraries such as RoyalSlider and Vanilla LazyLoad. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some broken lazyload images and missing explicit security headers were noted, which could be improved. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected in the provided content. The absence of WHOIS data limits domain trust analysis, but the website's content and official contact details support its legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could enhance its security posture and domain transparency to improve trust and resilience.

Dostihový spolek a.s. operates as a prominent horse racing organization based in Pardubice, Czech Republic, managing events such as the renowned Velká pardubická race. The company targets horse racing enthusiasts and visitors, providing event calendars, ticketing, and visitor information. The website reflects a medium-sized regional business with a focus on hospitality and transportation services related to horse racing events. Technically, the website is built on WordPress using modern plugins and themes, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Chuchle Arena Praha, s.r.o. operates a historic and prominent horse racing and equestrian sports venue located in Prague, Czech Republic. The company offers a multifaceted business model including horse racing events, show jumping competitions, event space rental, accommodation services, and a riding academy. The website reflects a well-established business with a strong market position in the Czech equestrian and sports hospitality sector. The target audience includes horse sports enthusiasts, families, tourists, and event organizers. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Google Tag Manager, Google Analytics, Matomo, and Google reCAPTCHA. The site is built on the IPO CMS platform and demonstrates good mobile optimization and SEO practices. However, some technical debt is noted with the use of older JavaScript libraries and missing security headers. From a security perspective, the site enforces HTTPS and implements user consent mechanisms for cookies and tracking, aligning with GDPR requirements. The absence of WHOIS data reduces domain trustworthiness, and the lack of security headers and outdated libraries present moderate security risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, content-rich, and compliant with privacy regulations, but improvements in security headers, updated libraries, and domain registration transparency are recommended to enhance trust and security posture.

E

EQS magazín

eqsmagazin.cz

42

EQS magazín is a Czech-language online media platform dedicated to equestrian topics including horse care, nutrition, health, equipment, and interviews with riders and trainers. The website targets horse enthusiasts and riders primarily in the Czech Republic. It operates on a WordPress CMS infrastructure with common plugins and technologies such as Smart Slider 3, jQuery, Google Fonts, and Font Awesome. The site is well-structured with good content quality and consistent branding. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is professional and safe for general audiences, with moderate tracking via Google Analytics.

G

GSG Berlin GmbH

gsg.de

46

GSG Berlin GmbH is a well-established real estate company specializing in leasing office, commercial, and warehouse spaces primarily in Berlin. With over 60 years of experience and a portfolio exceeding 1 million square meters, it serves a diverse clientele including startups, craftsmen, and SMEs. The company emphasizes flexibility in space usage and offers value-added services such as highspeed fiber internet and electric vehicle charging stations. The website reflects a strong market position with multiple locations and a broad tenant network. Technically, the website is built on WordPress using modern plugins and frameworks, optimized for performance and mobile responsiveness. It integrates analytics and marketing tools like Google Tag Manager and HubSpot, and employs a cookie consent mechanism compliant with GDPR. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and professional content. The domain registration data is minimal but consistent with the business claims. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance. Regular security audits of third-party scripts and further accessibility improvements would strengthen the security posture and user experience.

CPI Hungary Kft. is a prominent real estate investor, developer, and operator in Hungary, managing a substantial portfolio exceeding 600,000 square meters with a valuation over €1.3 billion. The company operates primarily in office, hotel, and retail sectors and is a member of the CPI Property Group. The website reflects a mature digital presence with comprehensive investor materials, clear contact information, and active social media engagement. Technically, the site employs modern web technologies, including Google Tag Manager and responsive design, ensuring good performance and user experience. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. Overall, the domain registration and WHOIS data align well with the company's profile, indicating legitimacy and trustworthiness.

C

CPI Property Group (CPIPG) Polska

cpipg.pl

53

CPI Property Group (CPIPG) Polska operates as a leading commercial real estate owner and manager in Poland, specializing in office and retail space leasing, property management, and ESG-compliant building modernization. The company manages a portfolio valued at approximately 2 billion euros, with over 800,000 square meters of commercial space, including office buildings in Warsaw and retail centers nationwide. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern frameworks such as Alpine.js and Laravel Livewire, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The absence of WHOIS data for the domain introduces some uncertainty in domain legitimacy, but the overall business credibility and website professionalism mitigate this concern. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a vulnerability disclosure mechanism.

K

Kestria ry

kestria.com

68

Kestria ry operates as the world’s largest executive search alliance, connecting boutique executive search firms globally to provide leadership recruitment services across multiple industries and functions. Founded in 2020, the organization has established a strong market position with offices spanning 6 continents, 40+ countries, and 90+ cities, targeting companies seeking executive talent and search firms wishing to join the alliance. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, jQuery, and Google Maps API, likely running on a Django backend. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Privacy and cookie policies are well implemented with explicit consent mechanisms, indicating good compliance with GDPR. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers. There is no public security policy or incident response information, nor a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, Kestria’s website presents a trustworthy and professional digital presence with strong business credibility and privacy compliance. Strategic enhancements in security policies and technical security controls would further strengthen its posture.

M

Přírodní vonné svíčky od Ewy Farne | Mmntshop.cz

mmntshop.cz

40

The website mmntshop.cz is a small e-commerce platform specializing in natural scented candles, notably associated with the celebrity Ewa Farna. It targets general consumers interested in natural home fragrance products within the Czech Republic. The site is built on WordPress using WooCommerce and Elementor, indicating a standard modern e-commerce infrastructure. Hosting appears to be provided by exon.io based on DNS information. The website demonstrates good design quality, mobile optimization, and SEO practices but lacks explicit privacy and terms of service documentation. Security posture is moderate with no advanced security headers detected and no visible vulnerability disclosure or incident response policies. Cookie consent is implemented, indicating some level of privacy compliance. Overall, the domain registration data is consistent and appropriate for the business age and type, supporting legitimacy.

C

CBS spol, s.r.o.

malovanemapy.sk

43

CBS spol, s.r.o. operates the website malovanemapy.sk, specializing in the creation and sale of hand-painted maps tailored for municipalities, microregions, sports centers, hotels, and resorts primarily in Slovakia. Their unique business model combines traditional artistic craftsmanship with modern technology to produce accurate and visually appealing maps that serve both tourists and local residents. The company leverages sponsorship and advertising partnerships to support the costly production process, enhancing community involvement by including local children in the artwork. The website reflects a niche market position with a strong local cultural focus and trust signals such as testimonials and FSC certification.

A

AFM Productions

afmproductions.fr

49

AFM Productions is a specialized audiovisual production company founded in 1997 by the AFM-Téléthon association, focusing on creating documentaries and educational content about rare genetic diseases and medical research. The company targets a general audience interested in health, science, and social issues, leveraging storytelling to raise awareness and inform the public. The website reflects a professional and consistent brand identity aligned with its mission. Technically, the website is built on Drupal 10 with Bootstrap and uses modern libraries such as Swiper.js for UI components. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism via CookieYes, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and has implemented cookie consent but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy entity. Overall, the site presents a low-risk profile with good compliance and technical standards, though improvements in security headers and transparency policies are recommended.

I

Institut des cellules Souches pour le Traitement et l'Étude des maladies Monogéniques

istem.eu

47

I-Stem is a French research institute specializing in stem cell therapy and the study of rare and ultra-rare monogenic diseases. It operates as a medium-sized organization with approximately 80 staff members, including scientists and support personnel. The institute is well-positioned in the European healthcare research sector, collaborating with notable partners such as AFM-Telethon and Genethon. Their key services include fundamental and clinical research, clinical trial sponsorship, and providing advanced technological platforms to support their scientific endeavors. Technically, the website is built on WordPress with modern plugins for SEO, search, and form management. It employs Google reCAPTCHA for security and Tarteaucitron for cookie consent management, reflecting a mature digital infrastructure. The site is optimized for mobile and accessibility, with good SEO practices and moderate performance. From a security perspective, the site uses HTTPS with strong SSL configuration and includes security headers. It integrates anti-bot measures and cookie consent mechanisms, but lacks a dedicated security policy or incident response contact details. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of direct contact emails or phone numbers suggests a preference for controlled communication via contact forms. Strategic recommendations include publishing explicit security and incident response policies and considering a vulnerability disclosure program to enhance transparency and trust.

A

AFM-Téléthon

telethon.fr

66

AFM-Téléthon is a prominent French non-profit organization dedicated to funding research and supporting patients affected by neuromuscular and rare diseases. The website serves as a secure platform for online donations, offering multiple payment options and clear information about the impact of donations. The organization maintains a strong market position in the charitable sector with transparent financial reporting and recognized certifications such as Bureau Veritas. Technically, the website is built on a modern stack with Drupal CMS, integrates advanced analytics and consent management tools, and is optimized for mobile and accessibility. Security practices include TLS 1.2 encryption and consent frameworks, though explicit security headers should be verified. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR regulations.

M

Muséum de Bordeaux - sciences et nature

museum-bordeaux.fr

57

The Muséum de Bordeaux - sciences et nature is a well-established public museum located in Bordeaux, France, focusing on natural history and cultural exhibitions. It serves a broad audience including families, schools, leisure professionals, journalists, and patrons. The museum offers permanent and temporary exhibitions, educational workshops, events, and virtual tours, positioning itself as a key cultural institution in the region. Technically, the website is built on Drupal 10 with modern libraries such as jQuery UI, Slick Carousel, Leaflet.js for maps, and FontAwesome for icons. It demonstrates good mobile optimization, accessibility, and SEO practices. The site includes a cookie consent mechanism and privacy policies aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The WHOIS data is unavailable, which limits domain registration insights but does not detract from the site's legitimacy given its professional content and official nature. Overall, the website is secure, compliant, and professionally maintained, with no signs of blocking or malicious activity. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

M

Musée des Arts décoratifs et du Design de Bordeaux

madd-bordeaux.fr

57

The Musée des Arts décoratifs et du Design de Bordeaux is a French cultural institution dedicated to decorative arts and design, located in Bordeaux. The museum showcases collections from the 18th and 19th centuries, emphasizing regional and national heritage. The website serves as an information portal for visitors, offering details on exhibitions, events, and educational content. It targets a general audience including local residents, tourists, and cultural enthusiasts. The museum operates as a non-profit entity under the auspices of the city of Bordeaux. Technically, the website is built on Drupal CMS with Bootstrap and Font Awesome for styling and icons. It employs modern web standards, is mobile-optimized, and includes a cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO and accessibility basics. The site integrates social media channels and external cultural partners, enhancing its digital presence. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent management. However, explicit security headers like CSP and X-Frame-Options are not detected, and no formal security policy or incident response contacts are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the museum's identity. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve security posture by adding formal policies and security headers. The risk level is low, with recommendations focused on enhancing security transparency and technical hardening.

M

Musée des Beaux-Arts de Bordeaux

musba-bordeaux.fr

57

The Musée des Beaux-Arts de Bordeaux is a well-established cultural institution showcasing European art from the 15th to the 20th century. It offers permanent collections, temporary exhibitions, educational programs, and public events, serving a broad general audience including families, students, and art enthusiasts. The museum is positioned as a key cultural entity within Bordeaux, supported by official city partnerships and a strong online presence. Technically, the website is built on Drupal 11, leveraging modern web technologies such as jQuery and Bootstrap for responsive design. It incorporates privacy and cookie consent management via Tarteaucitron and uses Piano Analytics for visitor tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks explicit security headers and a published security policy or incident response information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of WHOIS data slightly reduces trust but does not detract from the legitimacy indicated by the content and official affiliations. Strategic improvements in security transparency and header implementation would further strengthen the site’s security and compliance stance.