Security Directory

The website 'Náš Jih' serves as a digital platform for the Ostrava-Jih municipal district in the Czech Republic, facilitating participatory budgeting where residents can influence the allocation of local government funds. The site provides information about ongoing projects, community engagement opportunities, and a project submission portal. It targets local residents and community members interested in civic participation. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Analytics, and Facebook Pixel for analytics and marketing. The hosting is provided by a Czech hosting provider, aligning with the local focus. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. No security headers were detected in the provided data, suggesting room for improvement in security hardening. Overall, the site is professionally designed with good user experience and mobile optimization, but could enhance privacy and security transparency.

C

Clermont Auvergne Métropole

clermontmetropole.eu

10

Clermont Auvergne Métropole is a public metropolitan government entity serving 21 communes in the Clermont-Ferrand region of France. The website provides comprehensive information on urban planning, waste management, mobility, cultural activities, and ecological transition initiatives. It targets residents and stakeholders within the metropolitan area, offering services and resources relevant to local governance and community development. The site is positioned as a key regional authority with a broad scope of public services.

F

France Active

franceactive.org

50

France Active is a prominent non-profit organization in France dedicated to supporting engaged entrepreneurs through advice, financing, and a broad network of partners. The website presents a professional and consistent brand image, targeting social entrepreneurs and enterprises with a focus on social impact. Technically, the site is built on WordPress with Elementor, leveraging modern tracking and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and LinkedIn Insight Tag. The site is secured with HTTPS and employs reCAPTCHA to protect forms, although explicit security headers are not fully evident. Privacy and cookie policies are not clearly identified in the provided content, indicating room for improvement in compliance transparency. Overall, the website demonstrates a solid security posture and good digital maturity, but the absence of WHOIS data limits full trust verification. Strategic recommendations include enhancing security headers, improving privacy disclosures, and ensuring comprehensive contact and incident response information is available.

C

Collabora Online and Collabora Office

collaboraoffice.com

72

Collabora Online and Collabora Office provide a comprehensive open-source online document editing suite designed for secure, collaborative editing controlled by the user. The company targets businesses and organizations requiring enterprise-grade document collaboration solutions, offering products such as Collabora Online, Collabora Office desktop applications, mobile apps, and large deployment controllers. Their market position is that of an established technology provider in the open-source productivity software space, supported by a strong partner and integration ecosystem. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, and integrates analytics and marketing tools such as Matomo and Mautic. The site is well-optimized for SEO, mobile-friendly, and accessible, reflecting a mature digital infrastructure. However, some security best practices like explicit security headers and published security policies are not evident. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible privacy and cookie policies and incident response information. The absence of WHOIS registration data reduces trust slightly, though the professional presentation and partner ecosystem support legitimacy. No critical vulnerabilities or adult content were detected. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving contact information visibility to strengthen trust and compliance.

W

WEXBO s.r.o.

wexbo.com

65

WEXBO s.r.o. operates a SaaS platform enabling users to create websites and e-shops easily and quickly without programming knowledge. The company targets small to medium businesses and individuals seeking affordable, feature-rich CMS and e-commerce solutions. Their platform includes extensive features such as payment gateway integration, shipping services, multilingual support, and a proprietary CMS named CYBORG. The website is well designed, mobile optimized, and SEO friendly, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, AJAX, and integrates popular analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the business appears credible and trustworthy with consistent WHOIS data and active support channels.

I

Inbound Back Office

inboundbackoffice.com

45

Inbound Back Office is a service provider specializing in white-label virtual assistant and marketing support services tailored for marketing agencies, fractional CMOs, and small businesses. The company positions itself as a scalable and seamless support partner, trusted by hundreds of teams globally to handle marketing execution and administrative tasks without the complexities of hiring. Their website reflects a professional and consistent brand image with clear messaging and client testimonials that reinforce trust. Technically, the website leverages modern front-end technologies including Bootstrap, Tailwind CSS, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. The site is built on Zephyr CMS and demonstrates good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved. Security-wise, HTTPS is properly implemented, but the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and protection. The security posture is moderate with no immediate vulnerabilities detected in the visible content, but the lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. This discrepancy between professional website content and missing domain registration information suggests the need for further verification. Overall, the site is functional and credible from a business perspective but requires improvements in privacy compliance and security best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and resolve WHOIS registration transparency to strengthen trust and compliance. Enhancing accessibility and SEO will also improve user reach and satisfaction.

A

Agency Management Institute

agencymanagementinstitute.com

68

Agency Management Institute (AMI) is a specialized organization serving small to mid-sized advertising and marketing agencies. Their core mission is to help these agencies grow and increase profitability through peer networks, workshops, coaching, consulting, and educational resources such as podcasts and research series. The website reflects a mature and professional business with a clear market niche and a strong focus on agency leadership development. Technically, the site is built on WordPress using the Avada theme and integrates modern marketing and analytics tools including Google Tag Manager, Google Analytics, and Facebook Pixel. The domain is well-established since 2013 and secured with domain lock statuses, though DNSSEC is not enabled. Security posture is good but could be improved with formal security policies and vulnerability disclosure mechanisms. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence with extensive content and good user experience.

A

Agency Mastery

agencymastery360.com

64

Agency Mastery is a private mastermind community targeting 7–8 figure digital marketing agency owners seeking to scale their businesses through expert advice, workshops, and networking. The website is professionally designed using Squarespace, featuring multimedia content such as embedded videos and testimonials that reinforce its market position as a leading agency owner community. The technical infrastructure leverages modern tracking and analytics tools including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Oribi, indicating a mature digital marketing approach. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are absent, representing areas for improvement. The absence of WHOIS registration data raises legitimacy concerns that should be addressed to ensure trust. Overall, the site presents a credible and professional front with good user experience and content relevance.

P

Parakeeto

parakeeto.com

64

Parakeeto is a specialized consultancy focused on improving the profitability of digital and creative marketing agencies. Established in 2015, the company offers profitability measurement and audit services designed to help agencies optimize their financial performance. The website positions Parakeeto as a niche expert with a clear target audience of digital marketing and creative agencies seeking profitability insights. Technically, the website is built on WordPress using the Divi theme, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with a valid SSL certificate and Cloudflare DNS, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could pose regulatory risks. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.

S

Super Streusel

superstreusel.de

69

Super Streusel is a specialized e-commerce retailer based in Germany, focusing on colorful sugar sprinkles and sprinkle mixes for baking decoration. The website is built on the Shopify platform, leveraging various marketing and analytics tools such as Klaviyo, Usercentrics, and Boost Commerce filter and recommendation apps. The business targets consumers interested in baking and cake decoration, positioning itself as a niche market leader in Germany. The site demonstrates good branding consistency and content quality, with a professional design and clear navigation.

T

terre d'Oc

terredoc.com

67

terre d'Oc operates an e-commerce website powered by PrestaShop, offering products under the terre d'Oc brand. The site targets general consumers interested in retail products, providing a professional and well-branded online shopping experience. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Cookiebot for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and visible security policies. The absence of WHOIS data raises concerns about domain legitimacy, which impacts overall trust. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation.

C

Château de la Bourdaisière · Hôtel de charme *** · Val de Loire

labourdaisiere.com

10

Château de la Bourdaisière is a boutique 3-star hotel located in the Loire Valley, France, offering a blend of hospitality, cultural exhibitions, and leisure activities. The website presents a professional and rich user experience with detailed information about accommodations, dining options, events, and unique experiences such as the tomato-themed attractions. The business targets tourists and visitors seeking a charming and culturally immersive stay in the region. Technically, the site is built on WordPress using Elementor and integrates several plugins for event management and booking, supported by Google Analytics and Facebook Pixel for marketing and analytics. Security posture is generally good with HTTPS and secure booking integration, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from verification of domain registration and enhanced security headers.

S

salons ZEN & BIO

salon-zenetbio.com

46

The website salons ZEN & BIO operates as an event organizer specializing in ecological, organic, wellness, and healthy habitat salons primarily in France, with events in Nantes, Lyon, and Angers. The business model focuses on organizing and promoting these niche events, targeting environmentally conscious consumers and exhibitors. The site is supported by SPAS Organisation, indicating a structured parent company backing. The website content is well-structured, professionally designed, and optimized for SEO, with clear event information and calls to action for exhibitors. Social media presence and partner logos enhance credibility. Technically, the site is built on WordPress using Elementor and several plugins for SEO, event management, advertising, and social media integration. It employs modern web technologies and includes consent management for GDPR compliance. Performance is moderate with good mobile optimization. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security headers and detailed security policies. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and ownership transparency. The site lacks direct contact emails and phone numbers, which could impact trust. Privacy and cookie policies are present and integrated with a consent platform, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its business niche but would benefit from improved transparency in domain registration, enhanced security headers, and clearer contact information to strengthen trust and compliance.

F

FiremníAkce.cz, s.r.o.

firemniakce.cz

60

FiremníAkce.cz, s.r.o. operates a Czech Republic-focused online platform specializing in corporate event planning. The website offers a comprehensive marketplace for event locations, services, and inspiration, targeting corporate clients and event organizers. It positions itself as a commission-free, easy-to-use solution for finding venues and services for various event types including conferences, team building, and parties. The platform features curated offers, partner collaborations, and interactive search forms to facilitate client inquiries. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook. The presence of cookie consent mechanisms and social media integration reflects a moderate level of digital maturity. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, the website is well-designed, user-friendly, and serves its niche effectively.

S

SMART PARTS, s.r.o.

cyrrtec.cz

53

CYRRTEC, operated by SMART PARTS, s.r.o., is a Czech company specializing in the manufacturing and retail of metalworking machines and accessories targeted at hobbyists and small workshops. The company offers a range of products including lathes, milling machines, welding equipment, plasma cutters, and compressors. Their market position is that of a specialized, quality-focused manufacturer and retailer with a strong emphasis on customer service and product reliability. The website reflects a professional e-commerce platform with comprehensive product listings and detailed business information. Technically, the website is built on the Upgates e-commerce platform, leveraging modern technologies such as Google Analytics 4, Facebook Pixel, Hotjar, and cloud-based CDN services for performance optimization. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. Privacy and cookie policies are clearly presented with consent mechanisms in place, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs best practices such as asynchronous loading of third-party scripts and cookie consent management. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected, and no formal security policy or incident response contact information is provided. The absence of WHOIS data for the domain is a notable gap in transparency but does not currently undermine the apparent legitimacy of the business. Overall, CYRRTEC presents a trustworthy and professional online presence with strong business credibility and technical maturity. The main risk lies in the lack of domain registration transparency and formalized security policies, which should be addressed to enhance trust and compliance further.

P

PKS servis spol. s r. o.

technomist.cz

10

PKS servis spol. s r. o. operates the Technomist brand, specializing in the development, manufacturing, sales, and servicing of high-pressure water misting systems designed for environmental conditioning such as cooling, dust reduction, and humidity control. The company targets industrial clients, hospitality venues, and residential customers within the Czech Republic. Their market position is that of a niche manufacturer with a strong local presence and diversified sister divisions under the PKS servis group. Technomist offers comprehensive technical support and warranty services, supported by certifications like ISO 9001 and EU funding, enhancing their credibility. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates multiple tracking and analytics tools including Google Analytics and Facebook Pixel, and implements a robust cookie consent mechanism with GDPR compliance. The site is mobile-optimized and demonstrates good SEO practices, although some security headers are missing. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-out mode, but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data slightly impacts trust but is mitigated by professional site content and business transparency. Overall, the website presents a professional and trustworthy digital presence with good security and privacy practices. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen their security posture.

S

Socialter

socialter.fr

44

Socialter is a French bimestrial magazine focusing on radical social critique and ecological alternatives. It operates primarily through print magazine sales, subscriptions, and donations, targeting a general audience interested in social justice and ecological issues. The website is professionally designed with excellent content quality and clear navigation, supporting a strong brand presence in the French media niche. Technically, the site uses modern web technologies including Google Tag Manager, Facebook Pixel, and Bootstrap, ensuring good mobile optimization and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the active and updated website with social media presence supports legitimacy. Overall, the site is safe, compliant with GDPR, and trustworthy for its audience.

R

Ruby Tree Software, Inc.

advancementform.com

64

Advancement Form, operated by Ruby Tree Software, Inc., is a specialized SaaS provider offering an online giving and event registration platform tailored for non-profit organizations. The website positions itself as a solution to maximize participation and fundraising success for non-profits, featuring a professional design, clear messaging, and client testimonials that reinforce its market niche. The platform emphasizes ease of use and customization to empower advancement professionals in their fundraising efforts. Technically, the website employs modern frontend technologies including Tailwind CSS, DaisyUI, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS and maintains privacy and security policy pages, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. The absence of WHOIS data is a notable anomaly that impacts trust, though the website content and business presentation remain professional and credible. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

Shen Yun Performing Arts is a globally recognized performing arts company specializing in classical Chinese dance and music, established in New York in 2006. The company focuses on reviving and presenting traditional Chinese culture through breathtaking performances that include classical dance, ethnic and folk dance, and orchestral music. Their market position is strong as a premier classical Chinese dance company with a broad international audience. The website reflects a professional and consistent brand image with multilingual support, targeting a general audience interested in cultural and performing arts experiences. Technically, the website employs modern JavaScript libraries, analytics tools, and accessibility features, indicating a mature digital infrastructure. However, some areas such as explicit privacy and cookie policies and WHOIS transparency could be improved. Security posture is good with HTTPS and no visible vulnerabilities, but security headers and incident response information are lacking. Overall, the site is trustworthy and well-maintained but would benefit from enhanced privacy compliance and domain registration transparency.

ArtMoment is a newly launched business in Slovakia focused on offering creative workshops. The website serves primarily as a landing page to announce the upcoming launch and collect newsletter subscriptions, incentivizing sign-ups with a promotional 1+1 voucher. The business appears to be a small-scale operation targeting general consumers interested in creative activities. Technically, the website uses standard modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting is inferred to be with Wedos based on nameservers. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies published, indicating room for compliance improvements. The domain registration is recent but consistent with the business launch timeline, supporting legitimacy. Overall, the site is safe, professional at a basic level, and suitable for general audiences.

L

LUI

lui.cz

9

LUI.cz is a Czech lifestyle magazine focused on modern men and the LGBT+ community, offering editorial content, interviews, and an e-commerce platform. The website demonstrates a mature digital presence with modern tracking and advertising technologies, including Google Analytics, Facebook Pixel, and Seznam SSP. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy policies, security headers, and vulnerability disclosure mechanisms. WHOIS data is unavailable, which impacts transparency and trustworthiness. Overall, the site is legitimate and professional but would benefit from enhanced privacy and security disclosures.

D

DK Akord Ostrava

dkakord.cz

48

DK Akord Ostrava operates as a cultural and social center located in Ostrava-Zábřeh, Czech Republic, offering a wide range of cultural events including concerts, theater performances, and educational courses. The organization also provides venue rental services and operates a restaurant, positioning itself as a regional hub for cultural and social activities. The website reflects a medium-sized enterprise with a professional digital presence, integrating modern web technologies and multiple analytics and marketing tools to engage its audience effectively. The business model focuses on event hosting, ticket sales, and community engagement through educational and cultural programming. Technically, the site is built on WordPress with Bootstrap and jQuery, supported by reputable third-party services for analytics and marketing, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, well-maintained, and compliant with relevant privacy regulations, serving its target audience effectively.

T

TIMAC AGRO Canada

timacagro.ca

56

TIMAC AGRO Canada is a well-established agricultural company specializing in soil, plant, and animal nutrition solutions. With over 60 years of experience and a strong connection to its parent company Groupe Roullier, it serves farmers and agronomists with personalized agronomic products and expertise. The website reflects a mature digital presence with comprehensive product offerings, news updates, and multiple language support, targeting the Canadian agricultural market. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a publicly available security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is privacy protected, limiting domain age verification. Strategic recommendations include publishing security policies and incident response contacts to enhance trust and compliance.

D

Divadlo Kalich

divadlokalich.cz

60

Divadlo Kalich is a cultural venue based in Prague, Czech Republic, offering a variety of theatrical performances including comedies, musicals, concerts, and children's shows. The website serves as a platform for event listings and ticket sales, targeting a broad audience interested in live theater and cultural events. The site demonstrates a moderate level of digital maturity with the use of modern tracking technologies such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The technical infrastructure supports HTTPS and responsive design, ensuring accessibility and a good user experience across devices. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy and registrant information. Security posture is adequate with HTTPS and cookie consent, but could be improved by implementing security headers and publishing clear privacy and security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

M

Městská divadla pražská

mestskadivadlaprazska.cz

79

Městská divadla pražská is a prominent cultural institution operating the largest single ensemble drama theatre across three stages in the center of Prague. The organization offers theatrical performances, ticket sales, educational programs, and media content such as blogs and podcasts, targeting a general audience interested in theatre and culture. The website reflects a mature digital presence with a professional design, clear navigation, and mobile responsiveness. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and analytics tools like Matomo and Facebook Pixel, ensuring a robust user experience. Security posture is solid with HTTPS enforced and secure form handling, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website demonstrates high professionalism and trustworthiness, supporting the institution's mission effectively.

D

Dramox s.r.o.

dramox.cz

55

Dramox s.r.o. operates a leading online streaming platform specializing in theater performances, offering access to hundreds of shows from over 250 theaters. The service targets theater enthusiasts, families, and educational institutions, providing a subscription-based model with a free trial period. The platform supports cultural preservation by channeling a significant portion of subscription fees back to theaters and artists. Technically, Dramox employs a modern web stack including Next.js, React, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook. The website is optimized for various platforms including smart TVs and mobile devices, ensuring a seamless user experience. Security posture is strong with HTTPS enforcement and modern security headers, though the absence of WHOIS data introduces some trust concerns. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, Dramox presents a professional, secure, and user-friendly service with a clear cultural mission.

C

CustomGPT.ai

customgpt.ai

65

CustomGPT.ai is a technology startup founded in 2023 specializing in creating custom GPT models tailored from user content for business applications. The company targets businesses and professionals seeking AI-powered solutions to enhance their operations. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and CookieYes for cookie consent management. Hosting is provided via Amazon AWS infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, though it lacks visible contact information and formal privacy or terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and published security policies. The domain is privacy protected, consistent with a small tech startup, and shows no suspicious registration patterns.

The website www.shoptak.cz represents a small Czech company, techka s.r.o. & Tomáš Hlad, specializing in custom design and modification of Shoptet e-commerce templates. They hold a strong market position as a gold partner of Shoptet, serving thousands of e-shops primarily in the Czech and Slovak markets. Their key services include bespoke template creation, template customization, and Shoptet add-ons, targeting e-shop owners seeking tailored UX/UI solutions. The website content is professionally presented with clear navigation and positive client testimonials, reinforcing their credibility. Technically, the site employs modern JavaScript libraries such as jQuery, Slick Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and uses Google Fonts for typography. However, no explicit CMS or hosting provider information is discernible. Performance is moderate with good SEO practices but basic accessibility features. From a security perspective, HTTPS is implied but no security headers were detected in the provided data. The site includes a cookie consent banner indicating some privacy compliance, but lacks explicit privacy, terms of service, or security policies. No WHOIS data was retrievable, which raises concerns about domain registration legitimacy. No vulnerability disclosure or incident response information is present. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from enhanced security practices, explicit privacy documentation, and verification of domain registration details to improve trust and compliance.

D

DOC.DREAM services s. r. o.

ji-hlava.cz

47

MFDF Ji.hlava is a prominent international documentary film festival based in the Czech Republic, operated by DOC.DREAM services s. r. o. The organization focuses on promoting creative documentary cinema through annual festivals, industry events, and year-round activities including publications and forums. The website reflects a mature digital presence with extensive content, multimedia integration, and clear navigation targeting documentary film enthusiasts and industry professionals. Technically, the site employs a modern JavaScript stack with popular libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data is a notable gap, slightly impacting trust assessment, but the presence of reputable partners and GDPR compliance supports legitimacy. Overall, the site is professional, content-rich, and well-positioned within its cultural niche.

C

CHARM-EU

charm-eu.eu

61

CHARM-EU is a European university alliance focused on delivering challenge-driven, accessible, research-based, and mobile education primarily in sustainability and global challenges. The website presents a well-structured educational platform offering master's programs, micro-credentials, mobility opportunities, and research hubs. The technical infrastructure is built on a modern WordPress CMS with Elementor, enhanced by SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit cookie consent and security policies are not prominently published. The site demonstrates good design quality, navigation, and content relevance, targeting learners, academics, researchers, and institutional partners. Overall, the domain registration and WHOIS data align with the website's educational mission, indicating legitimacy and trustworthiness.

G

Grill & Golf events z.s.

minigolfporuba.cz

40

Minigolf Poruba is a small hospitality and leisure business located in Ostrava-Poruba, Czech Republic, offering minigolf, beverage sales, equipment rental, and event hosting services. The website is professionally designed with clear navigation and good mobile optimization, targeting students, families, and local residents interested in recreational activities. The business is operated by Grill & Golf events z.s., with clear contact details and partner affiliations enhancing credibility. Technically, the site uses modern tracking tools like Google Tag Manager and Facebook Pixel, with HTTPS properly configured, but lacks some security headers and privacy policies, indicating room for compliance improvement. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the site scores well in content quality and business credibility but needs enhancements in privacy compliance and security best practices.

A

admin1

porg.cz

56

PORG is a reputable educational institution operating gymnasium and primary schools in Prague, Ostrava, and Brno, Czech Republic. The website reflects a well-established brand focused on delivering high-quality education with a unique curriculum and strong university counseling services. The digital infrastructure is modern, leveraging WordPress with Elementor, Google Tag Manager, and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment but the website content and structure indicate legitimacy. Overall, PORG presents a professional and trustworthy online presence aligned with its educational mission.

P

PKS servis spol. s r. o.

pks-servis.cz

59

PKS servis spol. s r. o. is a Czech-based company specializing in the development, production, sale, and servicing of hydraulic and electro systems, including custom-built special purpose machines and reconstruction of hydraulic devices. With approximately 28 years of market presence, the company serves primarily the Czech Republic, Poland, and Slovakia, targeting industrial clients requiring tailored hydraulic solutions. The website reflects a well-structured and professional digital presence, leveraging modern web technologies such as Bootstrap and jQuery, and integrating analytics and marketing tools like Google Tag Manager and Facebook Pixel. Privacy and cookie policies are clearly implemented with user consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data limits domain registration transparency but does not detract from the overall legitimacy indicated by certifications and contact information.

P

Potten & Pannen - Staněk

vasekuchyne.cz

9

Potten & Pannen - Staněk operates a professional e-commerce platform specializing in premium kitchenware, cooking utensils, and kitchen accessories, targeting consumers in the Czech Republic. The website presents a well-structured catalog of products with clear navigation and a consistent brand identity. The business positions itself as a trusted retailer with a high customer recommendation rate, focusing on quality and premium brands. Technically, the website leverages Kentico CMS and integrates multiple modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The site is served over HTTPS, ensuring secure communications, and includes some accessibility and mobile optimization features. However, explicit security headers are not evident in the provided content, suggesting room for improvement in security hardening. From a security and compliance perspective, the site implements cookie consent and uses reCAPTCHA to protect forms, but lacks visible privacy policy and terms of service pages in the analyzed content. WHOIS data is unavailable, which limits domain registration trust verification. No critical vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in transparency, security headers, and WHOIS data availability would enhance trust and compliance.

T

Trustia Czech Republic, s.r.o.

festivalevolution.cz

45

Festival Evolution is a Czech Republic-based event organizer focused on promoting healthy lifestyle and personal development through festivals, conferences, and workshops. The website serves as a platform to inform visitors and exhibitors about the festival, its partners, and related events. The business operates in the event organization sector with a regional market position and targets a general audience interested in wellness and personal growth. The company behind the website is Trustia Czech Republic, s.r.o., which is credited as the author in the metadata. The website content is well-structured, informative, and consistent with the festival's theme.

The Smithsonian Institution website represents a large, authoritative educational and cultural organization providing extensive museum, research, and educational resources. The site is well-designed, mobile-optimized, and rich in content, targeting a broad audience including the general public, educators, and researchers. Technically, it uses a modern Drupal 10 CMS with various analytics and marketing tools integrated, maintaining good performance and accessibility standards. Security posture is strong with HTTPS and security headers in place, though no explicit vulnerability disclosure or incident response policies were found. WHOIS data is unavailable, likely due to .edu domain registry policies, but the website's legitimacy is supported by consistent branding and official external links. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

D

DK Akord Ostrava

dk-akord.cz

48

DK Akord Ostrava is a cultural and community center located in Ostrava-Zábřeh, Czech Republic, offering a wide range of cultural events including concerts, theater performances, and educational courses. The organization serves the general public interested in cultural and educational activities and operates a venue rental service, restaurant, and ticket sales platform. The website reflects a medium-sized regional cultural hub with consistent branding and good content quality. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Yandex Metrika, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience.

B

Babalác

babalac.sk

58

Babalác is a Slovak e-commerce retailer specializing in high-quality children's toys including Montessori, wooden toys, and magnetic building sets. The website targets parents and caregivers seeking educational and safe toys for young children. It maintains a niche market position with a focus on quality and customer satisfaction, supported by product reviews and bestseller indicators. The business model is primarily online retail with additional content such as a blog to engage customers. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries and integrations with Google Analytics, Facebook Pixel, Hotjar, and other marketing tools. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate with CDN usage and asynchronous script loading. Security posture is strong with HTTPS enforced, standard security headers, CSRF protection on forms, and no exposed sensitive data. Cookie consent mechanisms comply with GDPR, and privacy policies are comprehensive and accessible. However, the site lacks a dedicated security policy or incident response contact information, which could enhance trust and compliance. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing incident response contacts, enhancing accessibility, and maintaining up-to-date third-party libraries to mitigate potential vulnerabilities.

A

ArtMoment Events s.r.o.

artmoment.cz

59

ArtMoment Events s.r.o. operates a professional experiential art workshop platform in the Czech Republic, offering creative painting events, gift vouchers, and corporate event services. The company targets a broad audience interested in leisure and creative activities, with multiple city locations enhancing market reach. The website is built on the Shoptet e-commerce platform, integrating modern tracking and marketing technologies such as Google Analytics GA4, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, with a strong emphasis on user consent and privacy compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's professional design, content quality, and business transparency support a high trust level. Overall, the site provides a seamless user experience with clear navigation, rich content, and effective marketing integration.

B

Bandzone.cz

bandzone.cz

50

Bandzone.cz is a well-established Czech online community platform dedicated to music bands, DJs, MCs, and their fans. Founded in 2005, it hosts profiles for over 35,000 groups and 180,000 fans, offering music streaming, downloads, concert listings, videos, and promotional services. The platform integrates ticket sales via SMS Ticket and promotes music education partners, positioning itself as the largest Czech music community online. Technically, the site uses a custom CMS with a mix of legacy and modern technologies including jQuery, Firebase, Google Analytics, and Facebook Pixel. While the site is functional and professionally designed, it uses an outdated jQuery version which poses security risks. Security posture is moderate with HTTPS enabled and basic privacy compliance via cookie consent, but lacks explicit security headers and published security policies. Overall, the website is credible and trustworthy for its audience but would benefit from technical and security updates.

K

KASPER KOVO s.r.o.

kasperkovo.cz

67

KASPER KOVO s.r.o. is a Czech Republic-based manufacturing company specializing in sheet metal processing and production of pressure vessels with over 30 years of experience. The company offers comprehensive metalworking services including design, sampling, and production of components and assembled machines, serving a global customer base. The website reflects a professional and modern digital presence built on the Solidpixels CMS platform, integrating multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. Security posture is solid with HTTPS enabled and cookie consent implemented, though the absence of security headers and privacy policy pages indicates room for improvement. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the business information and online presence suggest legitimacy. Overall, the site is well-structured, mobile-optimized, and provides clear business information and social media links, supporting a medium-sized manufacturing enterprise within the KASPER GROUP.

J

Jak déle žít

jakdelezit.cz

58

Jakdelezit.cz is a Czech e-commerce website operated by inPHARM spol. s r.o., specializing in premium dietary supplements and health products, including their flagship lipozomal vitamin C. The site targets health-conscious consumers seeking scientifically validated supplements to support longevity and wellness. The business model focuses on direct online sales with a professional and consistent brand presence. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Bootstrap, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some improvements like updated libraries and security headers are recommended. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, the site presents a trustworthy and user-friendly platform for its niche market.

Shopťák.cz, operated by techka s.r.o. and Tomáš Hlad, is a specialized service provider focused on creating and customizing Shoptet e-commerce templates tailored for the Czech and Slovak markets. The company positions itself as a gold partner of Shoptet, boasting a significant client base utilizing their designs and add-ons. Their services emphasize UX/UI improvements and bespoke solutions beyond standard Shoptet offerings. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and formal privacy documentation. Security posture is moderate with room for improvement in headers and policy transparency. The absence of WHOIS data reduces domain trust, though the business information and client testimonials strongly support legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security disclosures.

O

Outdoor Access Initiative

yamahaoai.com

61

The Outdoor Access Initiative (OAI) website serves as a platform supporting grassroots efforts to protect and improve access to public lands for motorized and outdoor recreation. The organization operates as a small non-profit focused on advocacy, education, and grant funding to promote responsible use of off-highway vehicles and conservation goals. The website is built on WordPress with standard plugins for SEO and analytics, including Yoast SEO, Slider Revolution, Google Analytics, and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and trustworthy within its niche but would benefit from improved privacy disclosures and security enhancements.

H

HORSE Spirit

horsespirit.store

65

HORSE Spirit is a niche luxury equestrian apparel brand founded in 2019, specializing in stylish, comfortable, and functional riding clothing. The company operates an e-commerce platform powered by PrestaShop, targeting equestrian enthusiasts and riders who value premium fashion. The website demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager, Google Analytics 4, and Facebook Pixel integrated for marketing and analytics purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and DNSSEC could be improved. Privacy compliance is addressed with accessible privacy and cookie policies, and contact information is clearly provided. Overall, the website is professional, trustworthy, and aligned with its business goals.

Boutique Labess is a French e-commerce website dedicated to selling music albums and merchandise related to the musical group Labess, along with promoting upcoming concerts. The website targets fans and customers interested in music-related products, primarily French-speaking audiences. The business operates on the Shopify platform, leveraging its e-commerce capabilities and payment integrations such as Shopify Payments and Apple Pay. The site demonstrates a modern technical infrastructure with good mobile optimization and accessibility features, using the Dawn Shopify theme and various JavaScript modules for enhanced user experience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. It employs hCaptcha for form protection and integrates Facebook Pixel for marketing analytics. However, it lacks explicit privacy and cookie policies, security headers like CSP, and vulnerability disclosure information, which are areas for improvement. DNSSEC is not enabled, which could enhance DNS security. No direct company contact emails or phone numbers are published, relying instead on contact forms and social media channels. Overall, Boutique Labess presents a professional and trustworthy online presence with a solid technical foundation but requires enhancements in privacy compliance and security transparency to meet higher standards. The domain age and registration details support the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to improve trust and compliance.

A

ABF a.s.

for-pets.cz

57

The website for-pets.cz is a professionally maintained event platform managed by ABF a.s., focusing on the 16th trade fair for pet supplies in the Czech Republic. It serves visitors, exhibitors, media, and partners with comprehensive event information, news updates, and registration forms. The site demonstrates a solid market position as a recurring trade fair organizer with established partnerships and sponsorships. Technically, the site uses a custom CMS with Bootstrap and jQuery, integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Piwik. While the site is mobile-optimized and well-structured, it uses an outdated jQuery version and lacks explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no visible security policy or incident response information is provided. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

PsiTrenink.cz – Robert Zlocha

psitrenink.cz

56

PsiTrenink.cz, led by Robert Zlocha, is a professional dog training service based in Prague, Czech Republic, offering both in-person and online training courses. The business emphasizes modern, ethical training methods without physical punishment, targeting dog owners who want to improve communication and obedience with their pets. The website demonstrates a strong market position supported by extensive experience, media presence, and a comprehensive service offering including individual lessons, puppy training, and dog sports.

P

První Pomoc Psa

prvnipomocpsa.cz

41

První Pomoc Psa is a Czech-based small business specializing in dog first aid training seminars and related services, including physiotherapy and an e-commerce shop selling dog first aid kits. The company has a solid market position with over 15 years of experience and conducts more than 70 seminars annually, targeting both laypersons and professionals interested in canine emergency care. The website is built on WordPress with WooCommerce integration, leveraging common web technologies such as jQuery, Font Awesome, and Google Analytics for tracking and marketing purposes. The technical infrastructure is moderate in performance and well-optimized for mobile devices, hosted by a reputable Czech provider (WEDOS). Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and visible privacy compliance mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.