Security Directory

F

France Active Nouvelle Aquitaine

franceactive-aquitaine.org

50

France Active Nouvelle Aquitaine is a regional non-profit organization dedicated to supporting and financing small businesses and social economy structures in the Nouvelle-Aquitaine region of France. The website presents a professional and well-structured digital presence, leveraging WordPress with modern plugins such as Elementor and Yoast SEO to deliver content and services effectively. The organization targets entrepreneurs and social economy enterprises, offering accompaniment, financing, and networking opportunities. Technically, the site is hosted by OVH sas, uses HTTPS, and integrates analytics and tracking tools like Google Analytics and Facebook Pixel. Security measures include HTTPS and reCAPTCHA, but additional security headers and published policies could enhance the security posture. Privacy and cookie policies are not explicitly found, indicating an area for compliance improvement. Overall, the website is trustworthy, with consistent domain registration data and a clear business focus.

U

Uniformation

uniformation.fr

61

Uniformation is a well-established French non-profit organization acting as an OPCO (Opérateur de compétences) specializing in the social cohesion sector. The website clearly targets employers, employees, partners, and job seekers, offering services such as professional training financing, pedagogical engineering, HR management support, and alternance recruitment. The site demonstrates a strong market position with a comprehensive catalog of training and consulting services tailored to the social cohesion industry. Technically, the website is built on Drupal 10 with modern JavaScript libraries and analytics tools, providing a responsive and accessible user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly added. The absence of WHOIS data reduces domain trust slightly, but the professional presentation and compliance with GDPR and cookie regulations support legitimacy. Overall, the site is professional, secure, and user-friendly, serving a large audience in France's education and social sectors.

S

salon NATURALLY Paris

salon-naturally.fr

44

Salon NATURALLY Paris is an established event organizer specializing in organic and wellness trade shows held in Paris. The website promotes the 21st edition of the event scheduled for June 6-9, 2025, at Paris Expo Porte de Versailles. The business targets consumers and professionals interested in eco-friendly, organic, and well-being products and services. The site offers exhibitor information, conference programs, and practical visitor details, positioning itself as a key player in the organic event market in France. Technically, the website is built on WordPress using Elementor, with integrations for Google Analytics, Facebook Pixel, and advertising networks like Google Adsense. Hosting is provided by Infomaniak, a reputable French hosting provider. The site demonstrates good SEO practices with structured data and Open Graph metadata, and it is mobile-optimized with a responsive design. From a security perspective, the site enforces HTTPS, includes standard security headers, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a publicly available security policy or incident response contact information. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's business claims, indicating legitimacy. Overall, the website presents a professional and trustworthy online presence for the Salon NATURALLY event, with moderate to good technical and security maturity. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance trust and compliance.

S

SPAS Organisation

salon-vivreautrement.com

48

Salon Vivre Autrement is a well-established French event organizer specializing in ethical and bio trade fairs, with a history dating back to 2007. The website promotes the upcoming 37th edition of their event, targeting consumers interested in sustainable, organic, and eco-friendly products. The business model centers on organizing exhibitions, providing exhibitor services, and offering visitor programming including workshops and conferences. The site demonstrates a solid market position with a large expected visitor and exhibitor base. Technically, the website is built on WordPress with modern plugins and frameworks, hosted on Infomaniak, and optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Salon professionnel Natexpo

natexpo.com

46

Salon professionnel Natexpo operates an established international trade show focused on organic and eco-responsible products, held in Paris. The website serves as an information and engagement platform for exhibitors and visitors, providing event details, exhibitor criteria, and thematic programs. The business is positioned as a key player in the organic product event sector in France, with a medium-sized operation and a history dating back to 2002. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools, indicating a moderate to good digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNSSEC and security headers. Privacy compliance is limited, with no explicit privacy or cookie policies found. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

S

Salon Respire La Vie

respirelavie.fr

45

Salon Respire La Vie is a French event organizer specializing in eco-friendly, organic, wellness, and healthy habitat exhibitions, primarily active in Rennes. The website promotes upcoming events with significant exhibitor and visitor numbers, targeting environmentally conscious consumers. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and advertising tools while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS and no evident vulnerabilities, though additional security headers and policies could enhance protection. The absence of WHOIS data is a concern for domain legitimacy verification but does not currently impact the operational business presence. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

F

FocusOn

focuson.cz

51

FocusOn.cz is a Czech news and media website specializing in new trends in the economy and modern technologies. It offers a variety of content including articles, interviews, and video shows targeting Czech-speaking professionals and the general public interested in economy, technology, ecology, and life topics. The site operates on a WordPress CMS platform with a modern tech stack including jQuery, Swiper.js, and Lightbox, and integrates advertising and analytics tools such as Seznam SSP, Facebook Pixel, and Google Analytics. The website is well-structured, mobile-optimized, and SEO-friendly, providing a good user experience with consistent branding and professional content quality. However, the absence of WHOIS data and explicit privacy or cookie policies reduces trust and compliance confidence.

T

TheMarketers.biz

marketeris.sk

55

MARKETER!S is a Slovak digital marketing news and content curation platform operated by TheMarketers.biz. It provides curated articles, insights, and news for digital marketers, agencies, and brands primarily in Slovakia. The website features multiple categories, authors, and partners, positioning itself as a trusted source of marketing knowledge. The platform supports newsletter subscriptions and advertising opportunities, targeting marketing professionals and enthusiasts. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, and reCAPTCHA v3, hosted on mediahost.sk infrastructure. The website is mobile optimized with good SEO practices and clear navigation. Security posture is adequate with HTTPS and form protections but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy with moderate risk due to missing formal privacy and security documentation.

W

webklub

web-klub.cz

42

WEB-KLUB.cz is a small Czech Republic-based technology service provider specializing in web design, internet marketing, programming, and web management services. The company presents itself as an experienced agency with a focus on delivering effective internet applications and websites optimized for search engines and marketing. The website is professionally designed with clear navigation and relevant content targeting businesses seeking digital presence enhancement. Technically, the site uses modern front-end technologies including Bootstrap, jQuery, Google Fonts, and integrates Google reCAPTCHA v3 for form security. Tracking and marketing tools such as Google Analytics and Facebook Pixel are implemented, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and use of reCAPTCHA; however, the absence of security headers and privacy/cookie policies suggests room for improvement. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is functional, professional, and safe but would benefit from enhanced privacy compliance and security best practices.

S

Search Atlas

searchatlas.com

65

Search Atlas is a mature and established SEO software platform founded in 2000, offering AI-powered SEO automation tools primarily targeting agencies and brands. The platform provides comprehensive SEO services including content marketing assistance, site audits, competitor and backlink analysis, and white-label solutions trusted by over 2000 agencies. The website demonstrates a professional digital presence with modern marketing and analytics technologies integrated, including Google Analytics, HubSpot, TikTok Pixel, and Visual Website Optimizer. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, hosted with domain registration secured by Squarespace and DNS managed via Cloudflare. Security posture is good with HTTPS enforced and domain lock statuses, though DNSSEC is not enabled and no explicit security or privacy policies are published on the site. Contact information is clearly provided, enhancing business credibility. Overall, the site is well-positioned in the SEO technology market with a strong brand and digital marketing maturity.

F

Fotbalová asociace České republiky

fotbal.cz

52

Fotbalová asociace České republiky operates as the official governing body for football in the Czech Republic, providing comprehensive football-related content including news, match calendars, team information, and fan engagement. The website serves a broad audience including players, coaches, referees, and football fans, positioning itself as an authoritative source in the Czech football ecosystem. The business model is non-profit and focused on sports governance and promotion. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Smartlook, and Targito marketing tools, alongside frontend libraries like Swiper.js and EasyDropdown. The site is mobile-optimized with good accessibility and SEO practices, although no CMS or hosting provider details were detected. Performance is moderate with a well-structured design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of explicit security headers and privacy policy reduces the overall security and privacy compliance maturity. No critical vulnerabilities were detected, but improvements in security headers and explicit privacy documentation are recommended. Overall, the website is trustworthy and professional, but the lack of WHOIS data and some missing compliance documents suggest areas for improvement in transparency and trust. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and verifying domain registration details to strengthen legitimacy.

S

Svaz kulturistiky a fitness České republiky

skfcr.cz

43

The Svaz kulturistiky a fitness České republiky (SKFČR) is the official national federation for bodybuilding and fitness in the Czech Republic. The website serves as an information portal for athletes, clubs, and enthusiasts, providing event calendars, competition results, regulatory information, and educational content. The federation maintains partnerships with fitness nutrition brands and media outlets, reinforcing its position in the national sports community. The website content is primarily in Czech and targets the local bodybuilding and fitness community. Technically, the site uses standard web technologies with embedded Google Analytics and Facebook Pixel for user tracking. However, the site lacks modern CMS features and advanced mobile optimization.

C

Contours

contours.cz

55

Contours.cz is a specialized fitness network focused exclusively on women, offering circuit training and personal training services. Established in 2007, it is positioned as the largest ladies fitness center network in the Czech Republic, providing a supportive and motivating environment for women to improve their health and confidence. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. Technically, it is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, the site is trustworthy and well-maintained, serving a medium-sized business in the healthcare sector.

O

OSLAVÍN.cz, s.r.o.

oslavin.cz

61

OSLAVÍN.cz, s.r.o. operates a specialized online platform focused on facilitating event planning by connecting users with venues, services, and inspiration for celebrations such as weddings, parties, and corporate events primarily in the Czech Republic. The platform offers a commission-free inquiry system, promoting ease and speed for customers seeking event solutions. The website demonstrates a good level of professionalism with consistent branding and a user-friendly interface. Technically, it leverages modern web technologies including Vue.js, Google Tag Manager, Facebook Pixel, and live chat integration, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although there is room for improvement in publishing comprehensive privacy and security policies. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the site is well-positioned within the hospitality sector niche, serving a small business market with a clear value proposition.

L

LIVENTA s.r.o.

eventfest.cz

55

Event Fest is a leading event marketing festival in the Czech Republic and Slovakia, targeting professionals from agencies, venues, suppliers, and corporate clients. The website presents a well-structured platform showcasing the festival's expo, conference, and networking opportunities, supported by a strong partner ecosystem. The business model revolves around event organization, exhibitor participation, and ticket sales, positioning Event Fest as a key player in the regional event marketing industry. Technically, the site employs modern tracking and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, with a responsive design and multimedia content hosted partly on Microsoft Azure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the professional presentation and contact transparency mitigate concerns. Overall, the site demonstrates a mature digital presence aligned with its business objectives.

Měšťanský pivovar v Kutné Hoře is a small regional brewery with a rich historical heritage dating back over five centuries. The company produces traditional Czech beers using quality local ingredients and modern brewing technology. Their website targets adult beer enthusiasts and local tourists, offering product information, brewery tours, and a retail store. The business maintains a consistent brand presence with active social media channels and partnerships with local organizations. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Google Tag Manager, hosted by a reputable Czech provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and an age verification modal is implemented to comply with alcohol regulations. However, the site lacks explicit security headers, a privacy policy, and terms of service, which are important for compliance and trust. Analytics and advertising tools such as Google Analytics and Facebook Pixel are used, indicating moderate user tracking. Overall, the website is professional and trustworthy but could improve privacy and security compliance.

Francouzský institut v Praze is a well-established cultural and educational institution dedicated to promoting French language and culture in the Czech Republic. The website offers a broad range of services including language courses, certifications, cultural events, and educational cooperation programs. It targets students, professionals, educators, and cultural enthusiasts. The institution maintains an active online presence with multiple social media channels and provides clear contact information and privacy policies, reflecting a commitment to transparency and user privacy. Technically, the website uses a modern technology stack including Angular, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices such as implementing security headers are missing, and the absence of WHOIS data raises questions about domain registration transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but improvements are recommended in security headers and explicit terms of service. Privacy compliance is strong with a comprehensive GDPR policy and cookie management. Overall, the website is professional, trustworthy, and serves its educational and cultural mission effectively. The main risk lies in the lack of WHOIS transparency which slightly impacts trustworthiness. Strategic recommendations include enhancing security headers, publishing terms of service, and verifying domain registration details to improve legitimacy and user trust.

C

Cineville

cineville.fr

51

Cineville is a regional cinema chain operating multiple cinema locations across France, focusing on providing movie screening services and cinema programs to a general audience. The website leverages modern web technologies such as Next.js and React, integrating analytics tools like Microsoft Clarity and Facebook Pixel to monitor user engagement. The site is mobile-optimized and presents a professional design with clear navigation, although it lacks explicit privacy and cookie policies which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and no visible incident response or security policy information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and structure suggest a legitimate business. Strategic improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security.

V

VINIUM a.s.

vinium.cz

49

VINIUM a.s. is a well-established Czech winery based in Velké Pavlovice, specializing in traditional Moravian wines. The company operates a professional website showcasing its product range, including exclusive wine collections and non-alcoholic options. The site targets adult wine consumers and enthusiasts, offering e-commerce capabilities and event information. The business holds recognized certifications such as IFS FOOD, reinforcing its market credibility. Technically, the website is built on WordPress with modern plugins and optimization tools, ensuring good performance and mobile responsiveness. Security measures include HTTPS, age verification for alcohol content, and GDPR-compliant cookie consent mechanisms. While no critical vulnerabilities were detected, the site could benefit from enhanced security policies and incident response disclosures. Overall, VINIUM presents a trustworthy and professional digital presence aligned with its business operations.

F

FLERET FRUIT s.r.o.

fleret.cz

51

FLERET FRUIT s.r.o. is a small Czech company specializing in the traditional production of fruit distillates and liquors, targeting adult consumers with a focus on quality and attractive design. The website reflects a professional presentation of their products, including limited edition offerings, and enforces age verification to comply with legal requirements for alcohol sales. The company maintains an active social media presence and provides clear contact information including a physical address and phone number. Technically, the website uses modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with good mobile optimization and SEO practices. However, the absence of privacy and cookie policies and missing WHOIS data reduce the overall trust and compliance posture. Security is adequate with HTTPS enforced and no visible vulnerabilities, but security headers are lacking. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

V

Vrtal s.r.o.

vrtal.cz

42

Vrtal s.r.o. operates a well-established wholesale and retail business specializing in alcoholic and non-alcoholic beverages, as well as food products. The company has a strong market presence in the Czech Republic with over 22 years of tradition, multiple warehouses, and specialized stores. Their website reflects a professional e-commerce platform with comprehensive product categories and a user-friendly interface targeting both businesses and consumers interested in beverage wholesale. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Smartlook, and Facebook Pixel, integrated with a cookie consent mechanism that respects user privacy and GDPR compliance. The site is hosted by WEDOS, a reputable provider, and uses HTTPS with good SSL configuration. The CMS appears to be Foxentry, supporting a structured and responsive design optimized for mobile devices. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business claims, enhancing trustworthiness. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional platform. Strategic improvements in security headers and incident response transparency could further enhance its security maturity and user trust.

A

Akinu.cz

akinu.cz

57

Akinu.cz is a Czech Republic-based e-commerce retailer specializing in pet supplies and premium pet food, serving pet owners primarily in the Czech market. The website offers a broad range of products for dogs, cats, rodents, birds, and aquatic pets, supported by a loyalty program and customer support channels. The business positions itself as an experienced player with 30 years in the industry, focusing on quality and customer satisfaction. Technically, the website is built on the Shoptet e-commerce platform, utilizing a variety of modern marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility basics, though some technical debt is noted with the use of an outdated jQuery version. Performance is moderate, with a well-structured navigation system. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. However, explicit security headers are not fully implemented, and some JavaScript libraries are outdated, which could pose risks. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, though the website content and business indicators suggest a legitimate operation. Overall, Akinu.cz presents a professional and trustworthy online retail presence with room for improvement in security hardening and domain registration transparency. Strategic recommendations include updating technical components, enhancing security headers, and publishing clear incident response and vulnerability disclosure policies.

V

vshosting~

vshosting.cz

63

vshosting~ is a Czech-based managed cloud and dedicated server provider established in 2006, offering high-performance enterprise cloud solutions tailored to client needs. They provide a broad range of services including GPU servers, private cloud, managed servers, and CDN, supported by 24/7 senior certified administrators. The company positions itself as a leading European provider with infrastructure supporting over 40,000 projects, emphasizing security, availability, and scalability. Their technical infrastructure leverages modern web technologies such as Next.js and React, with strong SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and technically mature organization with a strong market presence in the technology sector.

L

Le Chainon Manquant, du 16 au 21 sept. 2025 - Laval (53)

lechainon.fr

49

The website 'Le Chainon Manquant' serves as an informational platform for an event scheduled from September 16 to 21, 2025, in Laval, France. It primarily provides event details and related media content, targeting the general public interested in attending or learning about the event. The business model focuses on event promotion without evident e-commerce or transactional features. Technically, the site is built on WordPress and leverages modern web fonts, iconography, and tracking technologies such as Facebook Pixel and Google Tag Manager. However, the site lacks visible advanced frameworks or custom platforms, indicating a basic digital maturity level. Security posture is moderate; HTTPS is implied but security headers and policies are not evident, and no forms or sensitive data handling mechanisms were detected. The absence of WHOIS data and registrant information raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are missing, which impacts compliance with GDPR and other regulations. Overall, the site is functional for its purpose but requires improvements in security, privacy, and business transparency to enhance trust and compliance.

T

Toerisme Oostende

visitoostende.be

58

The website www.visitoostende.be is the official tourism portal for the city of Oostende, Belgium. It provides comprehensive information on local attractions, events, dining, shopping, accommodation, and cultural experiences. The site targets tourists and visitors seeking to explore Oostende and offers multilingual support in Dutch, French, German, and English. The business model focuses on promoting tourism and local businesses through curated content and event listings. Technically, the site is built on Drupal 9, employs modern web technologies, and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Ortto. Security measures include HTTPS, reCAPTCHA, and standard security headers, although some headers could be enhanced. The WHOIS data is restricted by DNS Belgium policy, limiting transparency but not detracting significantly from the site's legitimacy given its official nature. Overall, the site is professional, user-friendly, and secure, with room for improvement in privacy policy visibility and explicit security headers.

T

.týždeň - iný pohľad na spoločnosť

tyzden.sk

58

The website tyzden.sk is a well-established Slovak media outlet founded in 2004, offering a broad range of content including news, opinion articles, podcasts, videos, and subscription services. It targets a general audience interested in Slovak and international societal topics. The business model relies on advertising and subscriptions, supported by a professional and consistent brand presence. Technically, the site uses modern web technologies such as Google Fonts, Google Tag Manager, Google Analytics, Facebook Pixel, and OneSignal for push notifications, alongside ad networks like Adocean and Protag CDN. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and consent mechanisms for cookies, but lacks explicit security headers and published security policies. No critical vulnerabilities or WAF blocking were detected. The domain WHOIS data confirms legitimacy with consistent registration details and appropriate domain age. Overall, the site is professional and trustworthy but could improve privacy disclosures and security best practices.

S

Silné reči

silnereci.sk

61

Silné reči is a Slovak entertainment company specializing in stand-up comedy and theatrical performances, operating since 2009. The website showcases their events, formats, and corporate offerings, targeting a general audience interested in comedy and live shows. The company maintains a strong brand presence with active social media channels and a ticketing partner domain. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent, hosted by Websupport with DNSSEC and HTTPS enabled, indicating a mature digital infrastructure. Security posture is solid with Google reCAPTCHA and error tracking via Sentry, though some security headers are missing. Privacy compliance is partially addressed through a detailed cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the site is professional, user-friendly, and trustworthy with no critical vulnerabilities detected.

A

Aj Ty v IT o.z.

ajtyvit.sk

40

Aj Ty v IT is a Slovak non-profit organization dedicated to empowering girls and women by providing education, motivation, and community support in the field of information technology. The organization offers workshops, courses, motivational events, and mentorship programs targeting various age groups including school girls, adult women, and educators. Their market position is strong within Slovakia as a recognized entity promoting women in IT. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and tracking tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

P

Pricemania s.r.o.

pricemania.cz

46

Pricemania.cz is a well-established Czech price comparison platform operated by Pricemania s.r.o., providing consumers with access to millions of product offers from hundreds of online stores. The website offers services including price comparison, e-shop quality verification, and advertising programs, positioning itself as a trusted intermediary in the Czech e-commerce market. The platform targets general consumers seeking to find the best prices and reliable sellers. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, and Bootstrap, with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is basic with visible cookie and privacy policies, but no explicit security or incident response policies are found. WHOIS data is privacy protected, which is common but reduces transparency. Overall, the site is professional, trustworthy, and safe for general audiences.

V

vshosting~

vshosting.sk

63

vshosting~ is a Czech-based managed cloud and dedicated server provider established in 2006, offering high-performance cloud solutions tailored for enterprise clients. They provide a broad portfolio of services including GPU dedicated servers, private cloud, managed Kubernetes, and managed AWS, targeting B2B customers requiring scalable, secure, and reliable IT infrastructure. The company operates under the Contabo Group umbrella, leveraging a global network of datacenters to ensure high availability and low latency. Their website reflects a mature digital presence with modern technologies and strong branding. Security posture is solid with HTTPS, CAPTCHA protections, and certified administrators, though public security policies are not explicitly published. Privacy compliance is robust with GDPR-aligned policies and consent mechanisms. Overall, vshosting~ demonstrates a strong market position in the European managed cloud sector with a professional and trustworthy online presence.

V

VINO-KLUB

vino-klub.cz

73

Vino-klub.cz is a Czech Republic based luxury online wine retailer specializing in wines from Czechia, Moravia, and international sources. Established in 2006, the company operates a Magento-based e-commerce platform offering thematic wine collections targeting mature wine consumers. The website demonstrates a good level of digital maturity with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for cookie consent management. SEO is enhanced by structured data (JSON-LD) and proper meta tags. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy or terms of service found in the provided content. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

T

Tamda Foods

tamda.eu

53

Tamda Foods is a subsidiary of the TAMDA Group, operating primarily in the retail and e-commerce sectors focused on food products for Vietnamese-speaking consumers in Europe. The website presents a professional and consistent brand image with clear navigation, membership programs, and promotional campaigns. The business model revolves around retail sales, promotions, and customer engagement through membership and store locator services. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Hosting is provided by OVH SAS, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enabled but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible GDPR consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

S

Shen Yun Performing Arts

shenyunsymphony.com

57

Shen Yun Symphony Orchestra is a cultural performing arts organization based in New York, specializing in blending traditional Chinese music with Western symphony orchestra elements. The website promotes upcoming performances and highlights the orchestra's unique artistic mission inspired by 5,000 years of Chinese civilization. The company positions itself as a niche cultural entity with a focus on live event ticket sales and cultural preservation. Technically, the website uses modern web technologies including React, Google Fonts, and multiple third-party analytics and advertising scripts. The site is mobile-optimized and well-structured but lacks visible privacy and cookie policies, which is a compliance concern. Security posture is moderate with HTTPS enabled and domain protections in place, but DNSSEC is not enabled and security headers are missing. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

Digiformag is a French online magazine specializing in professional training, targeting training organizations and professionals in the education sector. It offers news, articles, and a community platform called OF Connect, positioning itself as a reference source in its niche. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and uses modern tools such as Yoast SEO, WP Rocket, and various analytics and tracking services including Google Analytics, Hotjar, and Facebook Pixel. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and branding suggest a legitimate business. Overall, Digiformag demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity.

P

PushOwl

pushowl.com

67

PushOwl is a SaaS company providing an omnichannel marketing platform for Shopify merchants, integrating email, SMS, and push notifications to help e-commerce stores increase sales and customer engagement. The website is professionally designed using Webflow and integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The technical infrastructure reflects a mature digital presence with good mobile optimization and accessibility. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS usage but missing explicit security headers and vulnerability disclosure information. Overall, the website is trustworthy and well-positioned in the e-commerce marketing sector but would benefit from enhanced compliance and security disclosures.

S

SOARE SEKT a.s.

muchasekt.cz

49

Mucha Sekt is a Czech-based producer and retailer of premium sparkling wines inspired by the art of Alfons Mucha. The company operates a well-designed, modern website built on Nuxt.js, showcasing a diverse product portfolio including Brut, Demi Sec, Rosé, Ice variants, and Prosecco. Their market presence is supported by distribution through major Czech retail chains and online platforms. The website demonstrates a mature digital infrastructure with mobile optimization, modern JavaScript frameworks, and integrated marketing tools such as Google Tag Manager and Facebook Pixel. Security measures include HTTPS enforcement and an age verification popup to restrict underage access, reflecting compliance with alcohol sales regulations. However, the absence of explicit privacy policy and terms of service pages indicates areas for compliance improvement. Overall, the website and domain registration data reflect a legitimate, stable business with a strong brand identity and good technical implementation.

Č

Česká centra

czechcentres.cz

55

Česká centra is the official governmental organization responsible for promoting Czech culture worldwide through a network of cultural centers abroad. The website serves as a comprehensive portal for information about their international branches, cultural events, projects, and media resources. It targets international audiences interested in Czech culture, including partners, media, and the general public. The organization holds a strong market position as the official cultural representation of the Czech Republic abroad. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, Vimeo for video content, and Algolia for search functionality. The CMS appears to be Statamic, and the site is well-optimized for mobile devices with good SEO and accessibility features. Performance is moderate with asynchronous loading of scripts to enhance user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible and could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is notable but likely due to registry policies for government domains. Overall, the site demonstrates a strong security posture with room for minor improvements. The overall risk assessment is low, with the website appearing trustworthy, professional, and compliant with GDPR. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility. The site is a reliable digital asset for the Czech government's cultural diplomacy efforts.

A

ARCHA+

archa-plus.cz

58

ARCHA+ is a multifunctional cultural space operating since 2024 in the premises of the original Divadlo Archa in Prague. The organization offers a diverse program of contemporary arts including music, theater, and dance, targeting a broad audience interested in cultural events. Supported by municipal and governmental bodies, ARCHA+ positions itself as a key cultural institution in Prague with a focus on education and community engagement. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Vue.js, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all implemented with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for users.

I

International Visegrad Fund

visegradfund.org

65

The International Visegrad Fund is a well-established non-profit organization dedicated to fostering sustainable regional cooperation in Central Europe. It provides funding through grants, scholarships, fellowships, and artist residencies, supporting over 5,000 projects historically. The website reflects a professional and consistent brand image with a clear focus on its mission and services, targeting individuals and organizations involved in regional development, culture, and academia. The organization has a strong market position as a key regional fund with a 25-year history. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Select2, and Owl Carousel. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling. It lacks some security headers and explicit incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy compliance is mostly addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a trustworthy and professional digital presence for the International Visegrad Fund, with minor improvements suggested in privacy compliance and security best practices to further strengthen its posture.

S

S2 STUDIO s.r.o.

s2studio.cz

10

S2 STUDIO s.r.o. is a Czech-based internet studio established in 2003, specializing in web design, online marketing, graphic design, and advertising production. The company offers a comprehensive suite of services including e-shops, custom software development, and strategic online marketing, targeting businesses seeking integrated digital solutions. Their market position is supported by recognized certifications such as Google Partner and ISO 9001, and memberships in professional associations, indicating a reputable and established presence in the Czech Republic. Technically, the website employs a modern tech stack with popular JavaScript libraries and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements in security headers and explicit incident response policies are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, though the absence of WHOIS data limits domain registration trust assessment. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility compliance to further strengthen their security and compliance posture.

L

LAKUTOTO

journallactionregionale.com

60

LAKUTOTO operates as an online gambling platform specializing in toto and togel services, offering access to multiple trusted toto sites and Bandar Toto Macau with attractive bonuses. The website targets online lottery players seeking secure and rewarding gambling experiences. Technically, the site is built on the Squarespace CMS platform, leveraging common marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot. The infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and cookie consent mechanisms, which impacts privacy compliance. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and legitimate, supporting the business claims. However, the use of suspicious external domains for login and registration links raises some concerns. Strategic improvements in security policies, privacy compliance, and transparency are recommended to enhance trust and regulatory adherence.

F

Film at Lincoln Center

filmlinc.org

63

Film at Lincoln Center (FLC) is a well-established nonprofit organization founded in 1969 dedicated to celebrating cinema as an essential art form and fostering a vibrant film culture. The organization operates a professional website that provides detailed information about film screenings, festivals such as the New York Film Festival (NYFF), membership programs, and cultural events. The site targets cinema enthusiasts and the broader film community, offering ticket sales and membership benefits to sustain its nonprofit mission. Technically, the website leverages modern web technologies including React and Next.js frameworks, hosted likely on Vercel with Cloudflare CDN for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing discoverability. Security best practices are observed with HTTPS enforcement and multiple security headers, and privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is unavailable due to a malformed response, which limits domain registration insights. Despite this, the website's professional presentation, consistent branding, and presence of trust indicators support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, FLC's website represents a mature digital presence for a nonprofit cultural institution with strong security and privacy practices. Strategic recommendations include publishing a vulnerability disclosure policy and incident response contacts to further enhance trust and security transparency.

F

Filmfestival Oostende

filmfestivaloostende.be

61

Filmfestival Oostende is a well-established cultural media organization focused on hosting an annual film festival and promoting arthouse cinema in Oostende, Belgium. The website serves as a comprehensive portal for festival information, news, partner engagement, and ticketing. It targets film enthusiasts, industry professionals, and the general cultural audience. The organization maintains a strong regional presence with partnerships and sponsorships from notable cultural and commercial entities. Technically, the website is built on Drupal 9, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms, but could improve by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data limits domain trust analysis, but the overall professionalism and transparency of the site support its legitimacy. Strategic recommendations include enhancing security headers, increasing transparency on incident response, and continuous monitoring of third-party scripts.

I

Institut français de Prague

festivalff.cz

40

The website www.festivalff.cz represents the 28th Festival francouzského filmu (French Film Festival) organized by the Institut français de Prague. It serves as a cultural platform promoting French cinema in the Czech Republic, featuring film screenings, premieres, tributes, and regional events. The site targets film enthusiasts and the general public interested in French culture. Technically, the site uses a traditional web stack with jQuery and integrates multiple third-party tracking tools such as Google Tag Manager and Facebook Pixel. The website is mobile-optimized and offers good user experience with clear navigation and professional content presentation. Security-wise, the site enforces HTTPS and uses asynchronous loading for tracking scripts but lacks advanced security headers and privacy/cookie policies, which are compliance gaps. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, though the affiliation with a reputable cultural institute mitigates trust issues. Overall, the site is functional, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

Z

Zámek Zruč nad Sázavou

zamek-zruc.cz

56

Zámek Zruč nad Sázavou is a cultural and historical site located in the Czech Republic, offering castle tours, exhibitions, cultural events, and visitor experiences primarily targeting tourists, families, and school groups. The website presents a professional and well-structured digital presence with good content quality and clear navigation. The technical infrastructure includes modern web technologies such as HTTPS, Google Analytics, Facebook Pixel, and a CMS platform called Solidpixels, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement by adding security headers and formal security policies. The absence of WHOIS data limits domain trust verification, but the website's content and external references support its legitimacy as a cultural institution. Overall, the site is safe, family-friendly, and compliant with privacy regulations.

D

Divadlo X10

divadlox10.cz

62

Divadlo X10 is a small cultural theatre organization based in Prague, Czech Republic, specializing in contemporary dramaturgy and provocative theatrical performances. The website presents a professional and well-structured digital presence with clear navigation, event listings, and social media integration. The technical infrastructure includes modern JavaScript libraries such as jQuery and Modernizr, with analytics tools like Google Analytics and Facebook Pixel implemented with privacy considerations such as IP anonymization and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and cookie consent in place, but lacks some advanced security headers and explicit privacy policy documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and partnerships with official cultural institutions support legitimacy. Overall, the website is suitable for its audience and business purpose but would benefit from improved transparency and security enhancements.

Divadlo v Celetné is a cultural and theatrical venue based in Prague, Czech Republic, offering a variety of theatrical performances and cultural events. The website serves as an information and ticketing portal for visitors and theatre enthusiasts, showcasing upcoming programs, news, and partner collaborations. The business operates primarily as a local cultural institution with a focus on community engagement and arts promotion. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery and FontAwesome. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and content quality, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks visible security headers and publicly available privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data limits domain legitimacy verification, though the presence of official partner logos and active social media accounts supports its authenticity. Overall, the website presents a professional and trustworthy front for a small cultural institution but would benefit from enhanced privacy compliance, improved security headers, and transparency in domain registration to strengthen its security posture and user trust.

X

Xcruiter

xcruiter.no

49

Xcruiter is a Norwegian-based technology company founded in 2023 that provides an AI-powered recruitment platform designed to streamline and enhance the hiring process for businesses. Their solution focuses on lead generation, smart advertising, and automation to connect companies with quality candidates efficiently. The company targets businesses looking to improve recruitment outcomes and job seekers interested in new opportunities. The website demonstrates a professional and consistent brand presence with clear messaging and calls to action. Technically, the site is built on WordPress using the Themway theme and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, and Microsoft Clarity, indicating a mature digital marketing strategy. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting awareness of GDPR requirements. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response policies are absent. The domain registration aligns well with the company's founding date and business claims, supporting legitimacy. Overall, the website is well-constructed, secure, and business-focused, suitable for its target audience.

Le Pot Commun is a French fintech platform operated by Unty, specializing in online collective money pooling for occasions such as birthdays, departures, and solidarity causes. The platform offers a user-friendly, secure, and free-to-use service with optional fees on certain payment methods. It holds regulatory registration as an Intermédiaire en Financement Participatif (IFP) under ORIAS, enhancing its legitimacy. Technically, the website leverages modern frameworks like React and Next.js, integrates multiple analytics and marketing tools, and enforces strong security practices including HTTPS and 3D Secure payments. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. No blocking or WAF challenges were detected, and the site demonstrates excellent design, navigation, and trust indicators. However, no public vulnerability disclosure or incident response contacts were found, which could be improved for transparency and security readiness.

T

The Shift Project

theshiftproject.org

62

The Shift Project is a French non-profit think tank established in 2010, dedicated to advancing the decarbonization of the economy through rigorous scientific research and policy influence. It targets professionals, leaders, and stakeholders across sectors such as energy, transport, agriculture, industry, and public administration. The organization operates with a strong volunteer network and produces publications, reports, and events to inform and engage its audience. Technically, the website is built on WordPress with a modern Flynt theme, leveraging analytics tools like Matomo, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted by OVH sas, uses HTTPS, and demonstrates good mobile optimization and accessibility. While no explicit security headers were detected, the site follows good security practices with secure forms and domain registration protections. From a security perspective, the site maintains a good posture with HTTPS and domain status protections but could improve by enabling DNSSEC and implementing security headers such as CSP and HSTS. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. No incident response or vulnerability disclosure policies were found publicly. Overall, the website is professional, trustworthy, and well-positioned in its niche. It exhibits strong content quality and business credibility, with moderate technical and security scores. Strategic improvements in security headers and public security policies would enhance its posture further.