Security Directory

A

Advertising Media s.r.o.

advertising-media.cz

51

Advertising Media s.r.o. is a Czech-based digital marketing and web development company specializing in creating functional websites, e-shops, and tailored marketing campaigns. They serve a diverse clientele including small businesses, schools, and public institutions, offering scalable solutions from simple websites to complex e-commerce platforms. Their market position is that of a trusted local provider with a strong emphasis on measurable and profitable marketing services. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent management for tracking scripts but lacks explicit security headers and published privacy or incident response policies, indicating room for improvement in compliance and transparency. The absence of WHOIS data reduces domain trustworthiness, though the professional presentation and clear contact information mitigate some concerns. Overall, the website is well-designed, user-friendly, and business-focused, with moderate risk due to missing WHOIS transparency and privacy documentation.

A

APECITA

apecita.com

51

APECITA is a specialized employment platform focused on agriculture, agro-food, and environmental sectors in France. It offers thousands of job listings annually and serves as a bridge between candidates and employers, providing tailored services and training resources. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, it employs modern JavaScript libraries and integrates cookie consent and tracking tools responsibly. Security posture is good with HTTPS enforced, though improvements in security headers and formal security policies are recommended. WHOIS data is not publicly available, likely due to privacy protection, which is common for such business domains. Overall, the site presents a trustworthy and credible business front with moderate risk due to limited WHOIS transparency.

G

Gravitec.net

gravitec.net

57

Gravitec.net is a technology company specializing in automated web push notification services designed to enhance customer engagement, increase website traffic, and improve user retention. Established in 2016, the company has positioned itself as a market leader with over 40,000 websites and 15,000 companies leveraging its platform. Key services include AI-powered notification content generation, campaign automation, detailed analytics, and seamless integrations with popular platforms such as WooCommerce, Shopify, and WordPress. The technical infrastructure of Gravitec.net is robust, utilizing a modern tech stack with extensive use of JavaScript-based analytics and marketing tools including Google Analytics, Mixpanel, Microsoft Clarity, Hotjar, and Visual Website Optimizer. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Security best practices are observed with HTTPS enforcement, security headers, and CAPTCHA-protected forms, although a dedicated security policy page and incident response contacts are not currently published. From a security perspective, Gravitec.net maintains a strong posture with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. The domain registration data is consistent with the business claims, supporting the legitimacy and trustworthiness of the entity. Overall, Gravitec.net presents a professional, secure, and user-friendly platform with a strong market position in the web push notification space. Strategic recommendations include enhancing transparency with a dedicated security policy, publishing vulnerability disclosure information, and continuous monitoring of third-party scripts to maintain security integrity.

T

TFGpl sp. z o.o.

ebutik.pl

70

eButik.pl is a well-established Polish online boutique specializing in women's fashion, offering a broad range of clothing categories including plus size and seasonal collections. The company, TFGpl sp. z o.o., has been operating since 2003, positioning itself as a trusted retailer with a focus on quality, style, and affordability. The website demonstrates strong digital maturity with a modern e-commerce platform (IdoSell Shop), comprehensive privacy and cookie policies, and integration of advanced marketing and analytics tools such as Google Analytics, Facebook Pixel, and TrustMate reviews. Security posture is robust with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the site provides an excellent user experience with mobile optimization and clear navigation, supported by credible business information and positive customer feedback.

P

PONEC - divadlo pro tanec

divadloponec.cz

49

PONEC - divadlo pro tanec is a well-established cultural institution based in Prague, Czech Republic, specializing in contemporary dance performances, educational programs, and artist residencies. The website reflects a professional and consistent brand presence, targeting a general audience interested in dance and performing arts. The business model revolves around event hosting, ticket sales, and community engagement through workshops and educational offerings. Technically, the site is built on Drupal 7 with modern front-end libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, with clear contact information and partner affiliations, supporting a positive user experience and compliance with privacy regulations.

NerdWallet is a leading personal finance website that provides consumers with comprehensive financial product comparisons and advice. The platform targets individuals seeking guidance on credit cards, loans, mortgages, investing, and money management. It operates primarily in the US market and is recognized for its user-friendly interface and extensive research-backed content. Technically, NerdWallet employs modern web technologies including React and Next.js, supported by robust analytics and marketing tools such as Segment, Google Analytics, and various tracking pixels. The website demonstrates excellent performance, mobile optimization, and SEO practices. From a security perspective, NerdWallet enforces HTTPS, implements key security headers, and maintains secure forms, reflecting a mature security posture. However, the absence of public WHOIS registrant data slightly reduces transparency but is mitigated by the professional presentation and comprehensive policies. Overall, NerdWallet presents a low-risk profile with strong business credibility and technical maturity.

P

Pilsner Urquell

pilsner-urquell.cz

46

Pilsner Urquell is a historic and well-established beer brand originating from the Czech Republic, with a founding year of 1842. The website serves as a marketing and informational platform targeting adult consumers, enforcing strict age verification to comply with legal requirements for alcohol promotion. The brand maintains a consistent and professional online presence with clear branding and user engagement features such as cookie consent and analytics tracking. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel, ensuring effective marketing and user behavior analysis. The website is secured with HTTPS and includes mechanisms to protect underage users from accessing restricted content. However, the absence of WHOIS data and lack of explicit security and incident response policies represent gaps in transparency and security posture. Overall, the site is professionally designed and functional, but could improve in areas of security documentation and contact availability.

V

VERMONT Services Slovakia s. r. o.

vermont.cz

63

Vermont.cz is a professional e-commerce website representing a premium international fashion brand offering clothing and accessories for men, women, and children. The site features multiple well-known trademarks and brands, providing a comprehensive online shopping experience supported by physical stores in the Czech Republic. The business model focuses on retail sales with value-added services such as free shipping over a threshold and gift vouchers. Technically, the website employs modern JavaScript frameworks like Vue.js and Inertia.js, integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel, and maintains good SEO and mobile optimization standards. Security-wise, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data for the domain is a notable gap in trust assessment but does not detract from the professional presentation and operational maturity of the business. Overall, Vermont.cz presents a secure, user-friendly, and content-rich platform suitable for its retail audience.

O

Objective Wealth

objectivewealthfp.com

63

Objective Wealth is a small financial advisory firm specializing in tax-conscious comprehensive financial planning and investment management. The website presents a professional image with clear descriptions of services including financial and retirement planning, investment management, tax planning and preparation, and small business retirement plans. The firm targets individuals and small businesses seeking personalized financial guidance. The website is built on a modern technical stack including jQuery, Bootstrap, FontAwesome, and uses Zephyr CMS. Tracking technologies such as Google Tag Manager and Facebook Pixel are implemented for analytics and marketing purposes. Security posture is moderate with HTTPS usage implied, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trust. No forms or direct contact information were found in the provided content, limiting user engagement options. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and verified domain registration information.

V

Virage Média

liner-communication.fr

47

Virage Média is a French digital marketing agency specializing in web creation, SEO, and SEA campaigns, targeting businesses seeking to enhance their online presence. The company offers tailored digital solutions including website development, search engine optimization, and targeted advertising campaigns to support business growth. The website demonstrates a mature digital infrastructure leveraging WordPress with Elementor, integrated with multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and HubSpot. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website and domain registration data indicate a legitimate, professional small agency with a strong regional presence in France.

F

Fort Wayne Zoo

fwzoo.com

56

Fort Wayne Zoo is a well-established regional zoo located in Indiana, positioning itself as a leading summer family attraction. The website reflects a professional and engaging platform offering detailed information on admissions, events, memberships, education, and conservation efforts. The zoo targets families and local visitors with a focus on animal education and community engagement. Technically, the site is built on WordPress with modern marketing and analytics integrations, including Google Tag Manager, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing strategy. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is basic, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site is trustworthy, well-branded, and provides a positive user experience.

F

Fort Wayne Zoo

kidszoo.org

56

Fort Wayne Zoo is a well-established non-profit zoo attraction located in Indiana, positioning itself as a top summer destination for families and children. The website offers comprehensive information about zoo admissions, memberships, events, educational programs, and volunteer opportunities, reflecting a strong community and family-oriented business model. The organization leverages partnerships for ticketing and seasonal events to enhance visitor engagement. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, TikTok and Facebook pixels, and WPBakery Page Builder, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is basic, lacking explicit cookie consent mechanisms and GDPR indicators. Overall, the site is professional, trustworthy, and safe for general audiences.

I

Ingenico

ingenico.com

71

Ingenico is a global leader in payment solutions, offering a wide range of products and services including smart payment terminals, cloud-based payment platforms, and end-to-end terminal management. The company targets merchants and businesses across multiple sectors such as retail, transportation, hospitality, and energy. As a subsidiary of Worldline, Ingenico benefits from a strong market position and extensive industry expertise. The website reflects a mature digital presence with comprehensive multilingual support and professional content tailored to its B2B audience. Technically, the site is built on Drupal 10, integrates standard analytics and marketing tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and compliance with PCI DSS and ISO 27001 standards. Privacy compliance is robust, featuring detailed privacy and cookie policies with user consent mechanisms. Overall, Ingenico's website and domain registration data indicate a trustworthy, enterprise-grade business with a solid reputation in the payments industry.

T

TaniaKsiazka.pl - księgarnia internetowa i zakupy online

taniaksiazka.pl

77

TaniaKsiazka.pl is a Polish e-commerce platform specializing primarily in books, games, toys, movies, music, and various consumer products including food and health items. The website positions itself as a comprehensive online bookstore with a broad product range and fast delivery services. The business model is retail-focused, targeting general consumers in Poland. The website demonstrates a moderate level of digital maturity with the use of multiple analytics and marketing technologies such as Google Analytics, Microsoft Clarity, Facebook Pixel, and marketing tools like Prefixbox and UseInsider. Cookie consent is implemented, reflecting some compliance with GDPR requirements. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header present, though additional security headers could enhance protection. The absence of WHOIS data and privacy policy reduces transparency and trustworthiness, suggesting areas for improvement. Overall, the website is functional, professionally designed, and serves a large retail audience but would benefit from enhanced compliance and security documentation.

R

RocketLinks

rocketlinks.com

67

RocketLinks is a French-based company founded in 2010 that operates a leading platform for buying and selling sponsored articles worldwide. The platform targets advertisers, agencies, bloggers, and media site publishers, offering a comprehensive solution that combines SEO performance and branding. RocketLinks provides services such as campaign centralization, audit support, multi-criteria search, and streamlined billing with secure payment options. The website is built on HubSpot CMS and integrates modern marketing and analytics tools, reflecting a mature digital infrastructure. Security measures include HTTPS, Google reCAPTCHA Enterprise, and GDPR-compliant consent mechanisms, although explicit security headers and incident response policies are not publicly documented. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the professional presentation and trust signals on the site support its credibility. Overall, RocketLinks demonstrates a solid market position with a well-structured online presence and good security hygiene.

D

Dotmarket

dotmarket.eu

59

Dotmarket is a French digital marketplace specializing in the buying and selling of profitable and audited digital businesses, including e-commerce sites, SaaS platforms, and content media. The platform offers expert validation, valuation, and advisory services, positioning itself as a leading structured M&A marketplace in France. The website is professionally designed with rich content and educational resources, targeting investors and entrepreneurs in the digital business sector. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Facebook Pixel, and PostHog analytics, ensuring a robust digital infrastructure. Security posture is good with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and visible privacy policies. Overall, the site demonstrates a high level of professionalism and trustworthiness, though the absence of explicit contact information and privacy disclosures slightly impacts privacy compliance. The domain WHOIS data is unavailable due to EURid privacy policies, which is typical for .eu domains and does not raise immediate concerns.

Aluminerie Alouette Inc. is a well-established Canadian company specializing in the production of primary aluminum with a strong emphasis on efficiency, innovation, and sustainable development. The company positions itself as one of the most efficient primary aluminum producers globally, targeting industry professionals, partners, and community stakeholders. Their business model focuses on manufacturing with a commitment to environmental and social governance principles. Technically, the website employs common web technologies such as jQuery, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The site is accessible, with basic mobile optimization and SEO practices, though there is room for improvement in accessibility and performance optimization. From a security perspective, the website uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy policies and cookie consent mechanisms exist but are basic and could be improved to better align with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, the website presents a professional and trustworthy image with clear contact information and corporate branding. The domain registration data supports the legitimacy and long-standing presence of the business. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance the security posture and trustworthiness further.

T

Truckecopower LTD.

truckecopower.cz

53

Truckecopower LTD. operates a specialized business focused on software tuning and optimization services for heavy vehicles such as trucks and buses, aiming to reduce operational costs and improve engine performance. The company offers a comprehensive suite of services including engine software modifications, GPS-based vehicle monitoring, driver training for economical driving, and particulate filter cleaning. Their market position is that of a niche provider within the transportation sector in the Czech Republic, targeting fleet operators and commercial vehicle owners. Technically, the website is built on a modern stack utilizing HTML5, CSS3, Bootstrap, and jQuery, with integrations for Google Tag Manager, Facebook Pixel, and Pipedrive forms for lead capture. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. Privacy compliance is well addressed with a clear privacy policy, cookie consent banner, and GDPR adherence. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the website content and external partner references support legitimacy. Overall, the website presents a professional and trustworthy front for a small specialized business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and security posture.

A

Agroecopower LIMITED - pobočka

agroecopower.cz

53

Agroecopower LIMITED is a specialized company operating primarily in the Czech Republic since 2004, focusing on software tuning and performance optimization for agricultural and forestry machinery. Their services include ECU remapping and software modifications to increase power and reduce operational costs for tractors, harvesters, sprayers, and other machinery. The company maintains a professional online presence with a well-structured website, multiple country-specific domains, and active social media channels. Technically, the website uses modern web technologies including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support legitimacy. Overall, the company appears credible with a focused business model serving agricultural machinery clients.

E

Effinity

effiliation.com

63

Effinity is a French digital marketing agency specializing in performance marketing with over two decades of experience. Their services include affiliation, influence marketing, social commerce, various advertising channels, and lead generation. The company positions itself as a trusted partner with a medium-sized team of 60 collaborators and strategic partnerships such as with TikTok Shop. The website is professionally designed using WordPress with modern plugins and tracking technologies, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data slightly impacts trust but the overall business credibility remains high. Strategic recommendations include publishing comprehensive privacy and security policies and enhancing security headers.

S

Slovenská produkčná, a.s.

noviny.sk

64

Noviny.sk is a prominent Slovak online news portal operated by Slovenská produkčná, a.s., a media company based in Bratislava, Slovakia. The website offers a wide range of news content including politics, economy, sports, crime, weather, and multimedia such as videos and podcasts. It targets a general audience seeking up-to-date news and information. The business model relies primarily on advertising revenue, supported by multiple ad networks and programmatic bidding technologies integrated into the site. The portal is part of a larger media group including joj.sk and jojgroup.sk, enhancing its market position in the Slovak media landscape. Technically, the website employs modern JavaScript modules, header bidding with Prebid.js, and multiple analytics and advertising platforms such as Google Analytics, Facebook Pixel, Gemius, Smart AdServer, and Teads. Consent management is handled via the Didomi CMP, ensuring GDPR compliance mechanisms are in place. The site is mobile-optimized with good SEO practices and structured data markup to enhance search engine visibility. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and there is no public security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided HTML content. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk assessment is low, with the site appearing legitimate, professionally managed, and compliant with basic privacy regulations. Strategic recommendations include publishing clear privacy and terms of service pages, enhancing security headers, and providing incident response contacts to improve trust and compliance.

S

Studio 9 s.r.o.

studio9.cz

54

Studio 9 s.r.o. is a Czech-based creative digital agency specializing in web design, e-commerce solutions, mobile and web applications, and digital branding services. The company targets businesses seeking tailored digital solutions and has established a reputable market position with a portfolio of notable clients. Their website reflects a professional and modern digital presence with multimedia content and clear service offerings. Technically, the site uses a custom CMS (Studio9 webManager), integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel, and employs modern web technologies including jQuery and SVG graphics. Security-wise, the site enforces HTTPS with a DigiCert SSL certificate and includes a cookie consent mechanism, though it lacks advanced security headers and formal incident response disclosures. The absence of WHOIS data suggests privacy protection, which is typical for small agencies. Overall, the website is trustworthy, well-designed, and compliant with basic privacy regulations.

X

XTUNING LTD. - pobočka

xtuning.cz

50

XTuning is a professional automotive tuning company specializing in chip tuning services for passenger cars, agricultural machinery, and trucks. Established since 1999, the company operates primarily in the Czech Republic and neighboring countries, offering performance optimization and fuel consumption reduction services. The website reflects a mature digital presence with certifications from the Ministry of Transport and TÜV SÜD, enhancing trust and credibility. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with proper consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, XTuning demonstrates a solid market position with clear service offerings and customer engagement channels.

S

Sykora spol. s r.o.

sykora.eu

60

Sykora spol. s r.o. is a Czech-based company specializing in high-quality custom kitchens and interior furniture solutions. Their website showcases a comprehensive product catalog including kitchens, wardrobes, bathrooms, and living room furniture, targeting consumers seeking tailored interior design. The company operates through multiple retail studios and emphasizes professional design and modern technology integration. Technically, the website is built on the Studio9 webManager CMS, uses modern JavaScript libraries such as jQuery, and integrates Google Tag Manager, Google Analytics, Facebook Pixel, and Pinterest tracking for marketing and analytics purposes. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and rich multimedia content. Security-wise, the website enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and does not raise legitimacy concerns. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for customers.

T

TAŠ STAPPA

tas-stappa.cz

47

TAŠ STAPPA is a Czech Republic based company specializing in the supply of concrete and aggregates primarily serving the Zlín region. With over 25 years of experience, it positions itself as a reliable local supplier offering concrete delivery, pumping services, and concrete plant equipment. The website reflects a medium-sized business with a clear focus on construction materials and services. Technically, the site is built on Joomla CMS using modern frameworks and libraries such as Bootstrap, jQuery, and Smart Slider 3, with integrated Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly documented. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and consistent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.

P

PURLIVE

purlive.cz

47

PURLIVE is a Czech-based certified manufacturer and supplier specializing in prefabricated construction systems primarily for family houses, modular wooden buildings, and container components. The company positions itself as a leading provider of energy-efficient and cost-effective building solutions in the Czech market. Their website reflects a professional digital presence with clear business offerings targeted at construction firms, architects, and private customers interested in modern prefabricated housing solutions. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Smart Slider 3, ensuring a responsive and user-friendly experience. The site integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data for the domain is a notable gap in trust verification, though the website content and structured data suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

F

FaniMani

fanimani.pl

72

FaniMani.pl is a well-established Polish platform founded in 2014 that enables users to support social organizations through their online shopping activities. The website acts as an affiliate donation platform, partnering with over 1800 online stores and more than 12,500 charitable organizations. It offers browser extensions and mobile applications to facilitate user participation seamlessly. The platform enjoys a strong market position in Poland's charitable e-commerce niche, supported by a professional, well-designed website and extensive partner network. Technically, the site leverages a modern technology stack including Django backend, WordPress CMS, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Facebook Pixel. Cookie consent is managed via CookieYes, ensuring GDPR compliance with granular user consent options. Hosting is provided by OVH SAS, a reputable provider, and the site uses HTTPS with good SSL configuration. From a security perspective, the platform demonstrates good practices including CSRF protection, secure cookies, and use of reCAPTCHA. However, some security headers are not explicitly detected and DNSSEC is not enabled, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent mechanisms. Overall, FaniMani.pl presents a low-risk profile with a high level of professionalism, compliance, and technical maturity. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and resilience.

F

Fundacja FaniMani

fanipay.pl

35

FaniPay.pl is a specialized online payment platform tailored for foundations and associations in Poland, enabling them to collect donations securely and efficiently. Operated by Fundacja FaniMani since 2016, it integrates with the FaniMani platform and offers features such as simple registration, transparent fees, daily payouts, and donor data access. The platform enjoys trust from over 12,500 NGOs and partners with reputable payment processors like Autopay and Tpay. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are needed in DNSSEC and security headers. Privacy compliance is partial due to the absence of a privacy policy page, but cookie consent is implemented. Overall, the site demonstrates a mature business model with strong credibility in the non-profit sector.

K

Krajowy Integrator Płatności S.A.

tpay.com

70

Tpay is a well-established Polish payment service provider specializing in online payments and fast bank transfers, serving primarily e-commerce businesses in Poland. The company is legally registered as Krajowy Integrator Płatności S.A., founded in 2009, and operates with a strong market position supported by a partnership with Bank Pekao and PCI DSS level 1 certification. Their website reflects a mature digital presence with comprehensive service offerings including payment gateways, marketplace settlements, and integration modules for popular e-commerce platforms. Technically, the site uses modern analytics, tracking, and accessibility tools, hosted on OVH with Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS, cookie consent, and bank-grade standards, though DNSSEC is not enabled and explicit security headers are not evident. Privacy compliance is basic but includes a cookie policy with consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

M

MARKETING MALÝCH FIREM | Ing. Andrea Frodlová

andreafrodlova.cz

42

MARKETING MALÝCH FIREM | Ing. Andrea Frodlová is a small Czech Republic based business specializing in creating simple WordPress websites and providing marketing consulting services tailored for small businesses and local entrepreneurs. The website presents a professional image with clear contact details and a focus on helping clients improve their online presence and marketing communications. The business appears to be active since at least 2019 and emphasizes personalized service and affordability. Technically, the website is built on WordPress with standard marketing and analytics tools such as Google Analytics and Facebook Pixel, and it includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business registration details support legitimacy. Overall, the site is well-structured, mobile-optimized, and provides a good user experience with clear business focus.

L

La C'ART

lacart.fr

44

La C'ART is a cultural subscription service offering access to 15 museums and art centers in the Lille metropolitan area, targeting residents and visitors interested in arts and culture. The website is well-branded, professionally designed, and provides comprehensive information about the pass, events, and partner institutions. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics tools like Matomo and Facebook Pixel. It is mobile-optimized and includes accessibility features, although some security headers could be improved. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosure information. WHOIS data is missing, which reduces domain trust from a registration perspective, but the website content and external references indicate legitimacy. Overall, the site is a reliable and professional platform for cultural engagement in Lille.

R

Ready for Boarding - travel not only by plane

readyforboardingblog.com

47

Ready for Boarding is a multilingual travel blog primarily targeting travel enthusiasts interested in experiences beyond air travel. Established around 2013, it offers travel stories, tips, and guides with a focus on Poland and Central Europe. The website is built on WordPress and integrates multiple third-party services including WooCommerce for e-commerce, Google Analytics for traffic analysis, and Facebook Pixel for advertising effectiveness. It employs a comprehensive cookie consent mechanism and privacy policy compliant with GDPR, reflecting a mature approach to privacy and user consent. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks visible security headers and formal security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and consistent with a small professional travel blog. Overall, the site demonstrates good technical and content quality with room for improvement in security transparency and domain registration clarity.

C

Centrálnílékárna.cz

centralnilekarna.cz

46

Centrálnílékárna.cz is a Czech Republic-based online pharmacy offering a wide range of pharmaceutical products, cosmetics, health supplements, and veterinary items. The website targets Czech-speaking consumers seeking convenient online access to health and wellness products. The business model is e-commerce retail with a focus on health and beauty sectors. The site demonstrates consistent branding and good content quality, supported by trust indicators such as the SÚKL compliance logo and presence on Heureka.cz and Facebook. Technically, the site uses a custom CMS with legacy JavaScript libraries and integrates common marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks modern security headers and uses outdated JavaScript libraries, which may pose risks. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site is professional and trustworthy but could improve technical and security aspects.

L

Lékárna Srdcovka

lekarnasrdcovka.cz

45

Lékárna Srdcovka operates as a local and online pharmacy based in Prostějov, Czech Republic, offering a wide range of health-related products including over-the-counter medicines, supplements, and cosmetics. The business targets Czech-speaking customers seeking convenient access to pharmaceutical products both online and in physical stores. The website supports e-commerce transactions and provides services such as e-prescription reservations, positioning itself as a trusted regional healthcare retailer. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and jQuery, with integration of Facebook Pixel for marketing and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit incident response or security policies. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and contact information suggest a legitimate business. Overall, the site maintains a moderate security posture with recommendations to improve privacy and security practices. The overall risk assessment is moderate with a score of 74 out of 100, reflecting good content quality and business credibility but some technical and compliance gaps. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and investigating the missing WHOIS data to improve domain trustworthiness.

H

Hawaj.cz • ověřený český e-shop • 17 let s vámi | Hawaj.cz

hawaj.cz

49

Hawaj.cz is a Czech e-commerce retailer specializing in garden furniture, pools, whirlpools, solar showers, toys, pet supplies, and related leisure products. The website positions itself as an established player with 17 years of market presence, targeting Czech consumers seeking home and garden products. The site features a professional design with clear navigation and a broad product catalog. Technically, the site uses modern JavaScript libraries, Bootstrap 4, and integrates multiple marketing and analytics tools such as Facebook Pixel, Google Tag Manager, Hotjar, and Biano Pixel. HTTPS is enforced, and cookie consent mechanisms are in place, indicating a baseline of security and privacy awareness. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registrant data, reduce overall trust and compliance posture. No WAF or content blocking was detected, and the content is safe for general audiences.

V

Vinofol, s.r.o.

vinofol.cz

52

Vinofol, s.r.o. is a well-established family winery based in the Czech Republic, operating since 1992. The company specializes in producing and selling high-quality wines from the Mikulov and Novosedly regions, leveraging modern technology and traditional winemaking methods. Their market position is strong within the Czech wine retail sector, supported by a broad product range, including award-winning wines, and a multi-channel sales approach via e-shop and physical vinoték stores. The website reflects a mature digital presence with integrated marketing and analytics tools, providing a professional user experience and clear business information. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a notable gap in domain transparency but does not detract significantly from the overall legitimacy based on website content. The site targets adult consumers, implementing age verification due to alcohol sales regulations.

F

FOTBALservis.cz

fotbalservis.cz

54

FOTBALservis.cz is a Czech Republic-based e-commerce retailer specializing in football equipment including balls, boots, clothing, and accessories. The website targets football players, teams, referees, and coaches, offering a comprehensive product catalog and club-specific e-shop services. The business operates on the Shoptet platform, leveraging modern web technologies and marketing tools such as Facebook Pixel and Google Tag Manager. The site demonstrates good content quality, clear navigation, and GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Technically, the site uses HTTPS and secure login forms but lacks explicit security headers and a published security policy or vulnerability disclosure mechanism.

M

MEDIA MARKETING SERVICES a.s.

hitradiocity.cz

54

Hitrádio City 93,7 FM is a well-established regional radio station based in Prague, Czech Republic, operating since 2005. The website offers multiple live internet radio streams, podcasts, program schedules, contests, and a listener club, targeting a broad audience in the Prague region. The business model centers on media broadcasting and advertising, supported by a professional online presence and active social media channels. The company behind the site is MEDIA MARKETING SERVICES a.s., indicating a medium-sized media entity with a stable market position. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, jQuery, and CSS frameworks like Foundation. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility could be made. Hosting is managed via Dial Telecom, with secure HTTPS enforced and CSRF protection tokens present, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for enhancement. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and accessible, supporting regulatory compliance. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content. The domain registration data aligns well with the business history and operations, reinforcing legitimacy. Strategic recommendations include enhancing security headers, improving accessibility, and publishing a formal security policy and incident response information to further strengthen trust and compliance.

F

Fotbalová asociace České republiky

gol.cz

56

The website www.fotbal.cz is the official online presence of the Football Association of the Czech Republic (Fotbalová asociace České republiky). It serves as a comprehensive platform for football-related news, official publications such as the Časopis Gól magazine, match calendars, and information about clubs and competitions. The site targets football fans, players, clubs, and stakeholders within the Czech football ecosystem, positioning itself as the authoritative source for football governance and media in the country. The business model is non-profit and government-affiliated, focusing on sports governance and media dissemination. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, Facebook Pixel, Smartlook, and various JavaScript libraries for UI and cookie consent management. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. Performance is moderate, with asynchronous loading of analytics and tracking scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Cookie consent mechanisms are implemented, indicating awareness of privacy regulations. However, the site lacks a publicly accessible privacy policy and terms of service pages, which are important for full GDPR compliance and user trust. No security incident response or vulnerability disclosure information is published, which could be improved. Overall, the website is professional, trustworthy, and content-rich, with strong branding and partner endorsements. The absence of WHOIS data is consistent with CZ NIC policies and does not detract from the site's legitimacy. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and formalizing incident response disclosures to improve compliance and security posture.

U

Université Bourgogne-Franche-Comté

ubfc.fr

43

Université Bourgogne-Franche-Comté (UBFC) is a prominent French higher education and research consortium offering a broad range of academic programs, research initiatives, and graduate schools. The institution targets students, researchers, academic staff, and enterprises, positioning itself as a key player in national education and research. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Matomo and Facebook Pixel. Security posture is strong with HTTPS and reCAPTCHA, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting trust and regulatory adherence. Overall, UBFC's website demonstrates professionalism, credibility, and a solid digital infrastructure.

G

Galio marketing s.r.o.

galio.cz

30

Galio marketing s.r.o. is a Czech Republic based small marketing and advertising agency established in 1999. The company offers services including graphic design, advertising, website development, e-commerce solutions, printing, and marketing. The website is professionally designed using WordPress with the Divi theme and integrates common marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The content is primarily in Czech, targeting local businesses and individuals seeking marketing services. The domain registration data aligns well with the business information, indicating legitimacy and a long-standing presence in the market. However, the website lacks explicit privacy and terms of service pages, which are important for compliance and user trust.

V

Ville de Lille

lille.fr

58

The website www.lille.fr is the official digital presence of the Ville de Lille, the municipal government of Lille, France. It serves as a comprehensive portal for residents, visitors, and professionals to access city news, cultural events, administrative services, and citizen participation resources. The site is well-branded with consistent official imagery and provides extensive content relevant to its audience. Technically, the site uses standard web technologies including jQuery 1.11.0, Matomo analytics, and Facebook Pixel for tracking. While the site is mobile-optimized and offers good user experience, the use of an outdated jQuery version presents a security risk that should be addressed. Security headers are not visibly implemented, and WHOIS data is not publicly available due to AFNIC policies for .fr domains, which is typical but reduces transparency. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and professional, serving its public sector role effectively.

L

Les Restos du Cœur

restosducoeur.org

68

Les Restos du Cœur is a well-established French non-profit organization founded in 1985, dedicated to fighting poverty and social exclusion through a variety of social aid programs including food assistance, housing support, employment help, and cultural access. The organization maintains a strong digital presence with a professionally designed and content-rich website, supported by multiple social media channels and donation platforms. Technically, the website is built on WordPress and leverages modern analytics and marketing tools, ensuring good SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although public security policies and incident response information are not explicitly published. The domain WHOIS data is privacy protected, which is common for non-profits, and no suspicious indicators were found. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

M

Maison du Lac de Grand-Lieu

maisondulacdegrandlieu.com

53

Maison du Lac de Grand-Lieu operates as a non-profit environmental education center focused on the wetlands and lake of Grand-Lieu in Loire-Atlantique, France. The website provides comprehensive information about educational visits, workshops, exhibitions, and sound walks designed to raise awareness about local biodiversity and natural heritage. The organization targets educators, professionals, groups, and the general public interested in environmental conservation and education. Technically, the website is built on WordPress using Elementor and WooCommerce for ticketing, with modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Sendinblue. The site is well-optimized for SEO, accessibility, and mobile devices, reflecting a mature digital presence for a small non-profit entity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

D

Domstocks

domstocks.fr

34

Domstocks is a specialized online marketplace focused on providing quality expired domain names tailored for SEO and branding purposes. The platform targets SEO professionals, marketers, and domain investors seeking domains with strong metrics and Google indexing. The business model emphasizes fixed pricing and ease of acquisition, avoiding auction complexities. Technically, the website employs modern frontend frameworks such as Bootstrap and Material Design Bootstrap, integrates marketing and analytics tools like Facebook Pixel and Statcounter, and uses Brevo (Sendinblue) for form handling. The site is mobile-optimized and presents a professional user experience. Security posture is adequate with HTTPS enforced and secure form submissions; however, the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data raises concerns about domain legitimacy, impacting trust from a registration standpoint. Overall, Domstocks presents a credible business front with moderate technical maturity and some compliance gaps.

A

AmCham Slovenija

prvimentor.si

55

The website 'Prvi mentor | AmCham Slovenija' represents a youth mentorship program targeting individuals aged 15 to 25 in Slovenia. The program is positioned as a non-profit initiative aimed at supporting young people through mentorship. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and includes standard tracking technologies such as Google Analytics and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, providing a good user experience with moderate performance. Security posture is adequate with HTTPS enabled and some script-level security hardening, but lacks explicit security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact information is provided for incident response or general inquiries. Overall, the website is safe, professional, and focused on its educational mission but would benefit from enhanced privacy and security disclosures.

F

Accueil - Festival Salamandre

festival-salamandre.org

60

The Festival Salamandre website represents a nature festival event held in Switzerland, targeting a general audience interested in environmental and outdoor activities. The site is built on WordPress and uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, with tracking via Facebook Pixel and Plausible Analytics. The website is well-designed, mobile-optimized, and provides a good user experience with clear event information. However, the absence of visible contact information, privacy policy, and terms of service pages limits its compliance and trustworthiness. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and incident response contacts. WHOIS data is unavailable due to a malformed request, which reduces domain trust and legitimacy assessment. Overall, the site is functional and professional but could improve in compliance and security transparency.

C

Chambres de Métiers et de l'artisanat - Île-de-France

cma-idf.fr

51

The website www.cma-idf.fr represents the Chambre de Métiers et de l'Artisanat of Île-de-France, a regional public entity focused on artisan training, apprenticeship, business creation, and management support. It serves a broad audience including entrepreneurs, apprentices, and business owners in the Île-de-France region. The site is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Facebook Pixel, with appropriate cookie consent mechanisms in place. Security posture is strong with HTTPS enforced and relevant security headers present, though no explicit security policy or incident response information is published. The domain WHOIS data is not publicly available, consistent with AFNIC policies for .fr domains, and does not raise legitimacy concerns. Overall, the website is professional, content-rich, and trustworthy, providing comprehensive services and information to its target audience.

L

LJ Studio, s.r.o.

lj.studio

59

LJ Studio, s.r.o. is a professional digital agency specializing in web design, branding, app development, ecommerce solutions, and AI-driven innovations. The company positions itself as a full-service creative and development studio powered by strategy and technology, targeting brands and companies seeking to enhance their digital presence. Their market position is supported by a portfolio of notable clients, case studies, and official partnerships such as with Shopify. Technically, the website is built on WordPress with modern plugins like Yoast SEO, Google Analytics, Facebook Pixel, and Smartsupp Live Chat, indicating a mature digital infrastructure. The site is well-optimized for mobile devices, uses HTTPS, and implements cookie consent mechanisms, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with cookie consent present but no explicit privacy policy page found in the provided content. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in security headers and privacy disclosures. The domain WHOIS data is limited due to privacy protection but shows no suspicious patterns. The risk level is low, and the site is suitable for business use with recommended enhancements in compliance and security transparency.

Swiftask is a technology company providing a unified AI workspace platform designed to empower modern businesses with over 80 AI models and tools accessible via a single subscription. The platform emphasizes ease of use, enabling users to create and deploy AI agents without technical expertise, and focuses on security and governance to protect enterprise data. The company positions itself as a cost-effective alternative to larger AI platforms, targeting small to medium businesses and enterprises primarily in France. Technically, the website is built on modern frameworks such as React and Next.js, with integrations for analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and security headers, though some improvements are recommended in cookie consent and incident response transparency. Overall, the website is professional, well-branded, and trustworthy, with clear business credibility and good user experience.