Security Directory

Zavod Kersnikova is a Slovenian cultural institution dedicated to contemporary research-based art, operating through its gallery Kapelica and laboratories Rampa and BioTehna. The website serves as an information hub for events, news, and artistic activities, targeting artists, researchers, and the cultural community. The institution is well-established with a domain age since 2011, reflecting its ongoing presence in the cultural sector. Technically, the website is built on modern JavaScript frameworks such as Nuxt.js and uses external libraries like FontAwesome and Google Fonts. It incorporates a cookie consent mechanism and complies with GDPR regulations, demonstrating attention to privacy and user rights. However, some mixed content issues and lack of security headers indicate areas for improvement in security posture. Overall, the website is professional, user-friendly, and trustworthy, though it could benefit from enhanced security practices and explicit policy documentation.

N

Nadační fond IOCB Tech

nf-iocbtech.cz

51

Nadační fond IOCB Tech is a Czech non-profit foundation established in 2022 focused on supporting scientific research, popularization of science, and technology transfer. The foundation aims to enhance the development of science and its practical applications, targeting scientists, researchers, students, and the general public interested in science. The website reflects a professional and consistent brand presence with clear communication of its mission and activities. Technically, the website employs modern JavaScript libraries such as Google Analytics, Google Tag Manager, and ScrollMagic, with responsive design elements likely based on Bootstrap. Hosting and domain registration are consistent with the Czech Republic location. The site performs moderately well with good mobile optimization and basic accessibility features, though SEO and accessibility could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Social media integration is present but tracking practices are moderate and could benefit from enhanced transparency. Overall, the website is trustworthy and professionally maintained but would benefit from adding privacy and cookie policies, security headers, and incident response information to improve compliance and security posture. These improvements would enhance user trust and regulatory adherence.

N

Nadace Rosy Luxemburgové

rosalux.cz

52

Nadace Rosy Luxemburgové is a Czech-based non-profit foundation advocating democratic socialism and supporting social criticism rooted in workers' and women's movements, antifascism, and antiracism. The foundation promotes dialogue and connections among political, social, and cultural initiatives aimed at emancipation. The website reflects a well-established organization with a clear mission and active engagement through blogs, publications, and events. The domain age and WHOIS data align with the foundation's history, reinforcing legitimacy. Technically, the website employs modern technologies including Astro framework, Cloudflare for hosting and security, and Plausible Analytics for privacy-conscious user tracking. The site is fast, mobile-optimized, accessible, and SEO-friendly, demonstrating digital maturity. However, it lacks explicit cookie consent mechanisms and visible security or incident response policies, which are areas for improvement. Security posture is strong with HTTPS enforced and Cloudflare protection, but could be enhanced by adding explicit security headers and publishing security policies. No vulnerabilities or suspicious activities were detected. Privacy compliance is generally good, supported by a GDPR-related privacy policy page, but cookie consent is missing. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to further strengthen compliance and trust.

Č

Česká centra

czechcentres.cz

55

Česká centra is the official governmental organization responsible for promoting Czech culture worldwide through a network of cultural centers abroad. The website serves as a comprehensive portal for information about their international branches, cultural events, projects, and media resources. It targets international audiences interested in Czech culture, including partners, media, and the general public. The organization holds a strong market position as the official cultural representation of the Czech Republic abroad. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, Vimeo for video content, and Algolia for search functionality. The CMS appears to be Statamic, and the site is well-optimized for mobile devices with good SEO and accessibility features. Performance is moderate with asynchronous loading of scripts to enhance user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible and could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is notable but likely due to registry policies for government domains. Overall, the site demonstrates a strong security posture with room for minor improvements. The overall risk assessment is low, with the website appearing trustworthy, professional, and compliant with GDPR. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility. The site is a reliable digital asset for the Czech government's cultural diplomacy efforts.

K

Kreativní Evropa

kreativnievropa.cz

52

Kreativní Evropa is an official European support program website focused on culture and audiovisual sectors, providing information, grant opportunities, and partnership facilitation primarily for Czech stakeholders. The site is well-branded, professionally designed, and offers comprehensive content including news, events, and resources. Technically, it is built on WordPress with modern web technologies and includes SEO and accessibility best practices. Security posture is good with HTTPS and cookie consent implemented, though additional security headers could enhance protection. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and external references indicate legitimacy. Overall, the site presents a trustworthy and professional digital presence for its target audience.

The Slovak-Czech Women's Fund is a small non-profit organization dedicated to advancing women's rights and gender equality in Slovakia and the Czech Republic. Their website provides information about their mission, grant programs, projects, and ways to support their cause. The organization maintains a clear presence with contact details, social media links, and a consistent brand identity. The website content is primarily in Slovak with options for Czech and English, targeting women and supporters of women's rights in the region. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery, Slick Carousel, and Underscore.js. It employs Google Fonts and FontAwesome for styling and icons. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Google Analytics is used for visitor tracking, but no explicit cookie consent mechanism is present despite having a cookie policy page. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No forms or input fields were detected on the main pages, reducing attack surface. There is no vulnerability disclosure or incident response information available. The site appears safe with no adult or questionable content. Overall, the website is professional, trustworthy, and fulfills its informational role well. However, improvements in security headers, privacy compliance mechanisms, and transparency around security policies would enhance its security posture and user trust.

A

ARCHA+

archa-plus.cz

58

ARCHA+ is a multifunctional cultural space operating since 2024 in the premises of the original Divadlo Archa in Prague. The organization offers a diverse program of contemporary arts including music, theater, and dance, targeting a broad audience interested in cultural events. Supported by municipal and governmental bodies, ARCHA+ positions itself as a key cultural institution in Prague with a focus on education and community engagement. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Vue.js, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all implemented with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for users.

C

Culture for Future

cultureforfuture.cz

54

Culture for Future is a recently established non-profit platform based in the Czech Republic, dedicated to supporting artists and creatives in addressing climate change through their work. The website content is primarily in Czech and focuses on ecological and cultural themes, targeting artists and environmentally conscious individuals. The platform appears to be in its early stages, with a domain registered in December 2023. Technically, the website uses modern web technologies including Bootstrap and Google Tag Manager for analytics. However, there is a lack of comprehensive privacy and cookie policies, and no explicit contact information or security policies are present. The security posture is basic, with no detected security headers and limited compliance indicators. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices.

I

International Visegrad Fund

visegradfund.org

65

The International Visegrad Fund is a well-established non-profit organization dedicated to fostering sustainable regional cooperation in Central Europe. It provides funding through grants, scholarships, fellowships, and artist residencies, supporting over 5,000 projects historically. The website reflects a professional and consistent brand image with a clear focus on its mission and services, targeting individuals and organizations involved in regional development, culture, and academia. The organization has a strong market position as a key regional fund with a 25-year history. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Select2, and Owl Carousel. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling. It lacks some security headers and explicit incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy compliance is mostly addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a trustworthy and professional digital presence for the International Visegrad Fund, with minor improvements suggested in privacy compliance and security best practices to further strengthen its posture.

N

Nadace BLÍŽKSOBĚ

blizksobe.cz

48

Nadace BLÍŽKSOBĚ is a Czech non-profit foundation dedicated to supporting organizations and individuals that enhance social quality of life, focusing on education, democracy, and civil society. The website presents a professional and consistent brand image with clear mission statements and support for known social initiatives such as Člověk v tísni. Technically, the site is built on WordPress with Bootstrap and uses modern web technologies including Google Analytics and reCAPTCHA for security. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and anti-bot measures, but lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a compliance gap given GDPR relevance. WHOIS data is unavailable, which limits domain trust verification and reduces overall credibility. No signs of WAF or content blocking were detected, and the site content is safe for general audiences.

F

Friedrich-Ebert-Stiftung

fes.de

62

The Friedrich-Ebert-Stiftung (FES) is a well-established non-profit foundation based in Germany, dedicated to promoting social democracy through political education, international cooperation, scientific research, and scholarship programs. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. The target audience includes individuals interested in social democratic values and political education. Technically, the site is built on TYPO3 CMS and incorporates modern web technologies such as Matomo analytics and Lottie animations, ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

E

ERSTE Foundation

erstestiftung.org

74

ERSTE Foundation is a non-profit organization based in Vienna, Austria, focusing on financial health, democratic values, cultural initiatives, and social finance. The foundation supports a variety of projects including financial education, social finance ventures, cultural collections, and democracy-related policy initiatives. Their market position is that of a well-established regional foundation with a strong presence in Central and Eastern Europe. The website reflects a professional and consistent brand image with clear navigation and comprehensive content tailored to a general audience interested in social impact and education. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. The use of privacy-respecting analytics and a detailed cookie consent mechanism demonstrates a commitment to GDPR compliance and user privacy. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks visible security headers and a dedicated security or incident response policy page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profit organizations, and does not raise suspicion. Overall, ERSTE Foundation's website presents a trustworthy, professional, and privacy-conscious digital presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

Z

zirk.us

zirk.us

65

zirk.us operates as an independent Mastodon social network server focused on the arts and humanities community, providing a platform for readers, writers, and academics to engage in cultural and intellectual discussions. The website leverages the Mastodon open-source platform, utilizing modern web technologies such as React and JavaScript ES modules to deliver a responsive and user-friendly experience. The domain is well-established, registered since 2004, and managed via GoDaddy with protective domain status flags, enhancing trustworthiness. However, the domain predates the Mastodon platform, indicating repurposing of the domain for this service. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the site is functional, trustworthy, and serves a niche community with good content quality and technical implementation.

S

S2 STUDIO s.r.o.

s2studio.cz

10

S2 STUDIO s.r.o. is a Czech-based internet studio established in 2003, specializing in web design, online marketing, graphic design, and advertising production. The company offers a comprehensive suite of services including e-shops, custom software development, and strategic online marketing, targeting businesses seeking integrated digital solutions. Their market position is supported by recognized certifications such as Google Partner and ISO 9001, and memberships in professional associations, indicating a reputable and established presence in the Czech Republic. Technically, the website employs a modern tech stack with popular JavaScript libraries and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements in security headers and explicit incident response policies are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, though the absence of WHOIS data limits domain registration trust assessment. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility compliance to further strengthen their security and compliance posture.

G

GoDaddy Operating Company, LLC

cea.tech

11

The website is a domain sales landing page for the domain cea.tech, operated by GoDaddy Operating Company, LLC, a leading global domain registrar and marketplace. The platform offers multiple purchasing options including buy now, lease to own, and making an offer, targeting businesses and individuals seeking premium domain names. The site leverages modern web technologies such as React and Next.js, hosted on GoDaddy infrastructure, providing a fast and responsive user experience. Security is robust with HTTPS enforced, security headers present, and secure payment assurances. Privacy and cookie policies are available through GoDaddy's main site, indicating compliance with GDPR and other regulations. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

F6S Network Limited operates a technology platform focused on supporting startups and entrepreneurs by providing access to funding, acceleration programs, job listings, and networking opportunities. The company holds a registered trademark and appears to be an established player in the startup ecosystem, targeting founders, investors, and accelerators. However, the website content is currently inaccessible due to a bot detection interstitial page, which limits direct content analysis and user experience evaluation. Technically, the site uses JavaScript and minimal inline CSS but lacks visible modern frameworks or CMS indicators in the provided HTML snippet. The absence of metadata such as Open Graph or JSON-LD structured data and no detected analytics or advertising scripts suggests limited digital maturity or that these elements are blocked by the WAF. The site does link to comprehensive privacy, cookie, terms, and data security policies, indicating some level of compliance awareness. From a security perspective, the site is protected by a generic WAF or bot detection mechanism, which blocks automated access and may help mitigate abuse. However, no security headers or SSL configuration details were visible in the provided data, and the WHOIS information is unavailable, reducing transparency. The lack of visible contact phone numbers or physical addresses further limits trust signals. Overall, the site presents moderate business credibility but suffers from accessibility and transparency issues due to security blocking and missing WHOIS data. Strategic recommendations include improving security header implementation, enhancing transparency with WHOIS data or verified registrant info, and ensuring the site is accessible to legitimate users while maintaining robust bot protection.

L

LAKUTOTO

journallactionregionale.com

60

LAKUTOTO operates as an online gambling platform specializing in toto and togel services, offering access to multiple trusted toto sites and Bandar Toto Macau with attractive bonuses. The website targets online lottery players seeking secure and rewarding gambling experiences. Technically, the site is built on the Squarespace CMS platform, leveraging common marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot. The infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and cookie consent mechanisms, which impacts privacy compliance. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and legitimate, supporting the business claims. However, the use of suspicious external domains for login and registration links raises some concerns. Strategic improvements in security policies, privacy compliance, and transparency are recommended to enhance trust and regulatory adherence.

A

Appvizer

appvizer.fr

60

Appvizer is a French-based media and software comparison platform specializing in professional SaaS tools. It leverages AI to recommend suitable software solutions to businesses and professionals, supported by expert content and thousands of user reviews. The platform is well-positioned in the French-speaking market with localized versions in multiple languages, indicating a broad international reach. Technically, the website uses modern frameworks such as React and Astro, integrates analytics tools like Google Tag Manager and Microsoft Clarity, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and policies could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site is professional, trustworthy, and business-focused, with no signs of malicious activity or content blocking.

W

WP Bullet

wp-bullet.com

60

WP Bullet is a specialized WordPress performance optimization company founded in 2016, offering plugins, services, and guides to improve website speed, stability, and search engine rankings. The company targets site owners, agencies, and corporations seeking to enhance their WordPress and WooCommerce sites' performance and revenue. Their market position is supported by detailed case studies and strong client testimonials, reflecting a niche expertise in WordPress optimization. Technically, the website is built on WordPress 6.8.3, uses modern JavaScript libraries like jQuery 3.7.1, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized, fast loading, and well-structured with good SEO practices. Hosting details are not explicit but DNS is managed via Cloudflare. Security posture is moderate with HTTPS enabled and domain transfer/update protections in place. However, the absence of DNSSEC, security headers, and published privacy or cookie policies indicates room for improvement. No incident response or vulnerability disclosure mechanisms are evident. Overall, WP Bullet presents a professional and trustworthy online presence with strong business credibility but should enhance privacy compliance and security best practices to reduce risk and improve user trust.

F

forgemedia LLC

forgemedia.io

61

forgemedia LLC is a small US-based digital agency specializing in WordPress plugin development and actionable content creation. Founded in 2016 by two brothers, Brian and Brett Jackson, the company focuses on performance-driven solutions such as the Perfmatters and Novashare plugins. Their market position is niche but well-defined, targeting WordPress users and businesses seeking to improve site performance and content effectiveness. The website reflects a professional and consistent brand image with clear messaging and good user experience. Technically, the site is built on WordPress using the GeneratePress theme and leverages performance optimization plugins. Hosting is provided by Kinsta, a reputable managed WordPress host. The site demonstrates good performance and mobile optimization, with modern technologies and SEO best practices in place. Analytics are handled via Fathom Analytics, indicating a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are publicly available. Privacy compliance is partial, with a privacy policy and terms of service present but lacking cookie consent mechanisms and GDPR explicit indicators. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the website is trustworthy and professional with a solid technical foundation. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance the security posture and regulatory adherence. The business shows credible legitimacy with consistent WHOIS data and a mature domain age.

C

Caisse d'Assurance Vieillesse des Pharmaciens (CAVP)

cavp.fr

61

The CAVP website represents a professional French pension fund dedicated to pharmacists, providing comprehensive retirement and social benefit services. The site is well-structured, content-rich, and targets pharmacists at various career stages, including active, retired, and collaborators. The business operates under the umbrella of CNAVPL, indicating a government-affiliated entity with a clear mission to manage pharmacists' retirement schemes. Technically, the website employs modern frontend technologies such as Vue.js and Webpack, ensuring a responsive and user-friendly experience. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. The site is served over HTTPS with no detected blocking or WAF challenges, indicating good security hygiene. However, some security headers are missing, and explicit security policies are not publicly disclosed. The security posture is solid with encrypted communications and cookie consent mechanisms compliant with GDPR. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and consistent branding support its legitimacy. Contact channels include phone, email, and online forms, enhancing user accessibility. Overall, the website is a reliable and professional platform for its target audience, with recommendations to enhance security headers and publish incident response policies to further strengthen trust and compliance.

Le Biau Germe is a small French collective of organic and traditional seed producers, operating an e-commerce platform focused on selling biological, reproducible, and traditional seeds to both individuals and professionals. The website presents a consistent brand image with good content quality and clear business focus on organic agriculture. Technically, the site uses modern CSS frameworks like Tailwind CSS and is hosted by Infomaniak Network SA, a reputable hosting provider. The site is mobile optimized and SEO friendly with proper metadata and Open Graph tags. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly found, limiting direct communication channels. Overall, the domain registration data supports legitimacy with a long-standing registration since 2002.

S

SAS RESO

captairsolaire.com

39

Capt'air solaire is a specialized importer and exclusive distributor of SolarVenti solar air collectors in France, operating since 2010. The company targets both individual consumers and professional clients, positioning itself as the third largest SolarVenti distributor in the country. Their key services include product sales, installation advice, and customer support, with a strong emphasis on quality Danish manufacturing and European market leadership. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and a GDPR-compliant cookie consent mechanism, although some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

S

Simple et Solaire

simple-et-solaire.com

47

Simple et Solaire is a French company specializing in the sale and support of autonomous solar energy kits and equipment, targeting individuals, professionals, NGOs, and communities both in France and internationally. Established since 2008, the company offers a range of photovoltaic kits, batteries, solar lamps, and related services including technical advice, training, and after-sales support. Their market position is that of a trusted expert in solar autonomy, with a particular focus on solutions for isolated sites and the African market. Technically, the website is built on the PrestaShop CMS platform, utilizing jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, some modern security best practices such as security headers and cookie consent mechanisms are missing, which could impact compliance and security posture. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, as it limits verification of domain legitimacy and registration details. Overall, the website presents a professional and trustworthy front for a small energy sector business, but improvements in security policies, privacy compliance, and domain registration transparency are recommended to enhance trust and reduce risk.

P

Partner & Co

semence-biologique.fr

39

SemBio, operated by Partner & Co, is a French e-commerce business specializing in the sale of certified organic seeds and seed mixtures for agricultural use. The website targets French-speaking agricultural professionals and organic farmers, offering a range of products including pure seeds and specialized blends for various farming sectors. The company positions itself as a niche supplier within the organic agriculture retail market in France. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. It integrates marketing and analytics tools such as Google Analytics, Google Tag Manager, and Sendinblue for newsletter and marketing automation. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers, reflecting a good security posture. However, it lacks a publicly available security policy or incident response contact information. The domain WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

A

Aqua-Techniques

aqua-techniques.fr

59

Aqua-Techniques is a French retailer specializing in ecological water treatment and filtration solutions, distributing exclusive brands such as Doulton, British Berkefeld, and Sprite Showers. The company targets environmentally conscious consumers seeking water purification products for domestic use. Their website is built on the Oxatis e-commerce platform with AngularJS frontend, integrating modern marketing and analytics tools like Google Tag Manager and Google Analytics. The site is well-structured, mobile-optimized, and provides clear contact information including a dedicated phone number and contact page. Security posture is adequate with HTTPS and secure payment indicators, though some security headers and explicit policies could be improved. WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and business presentation appear professional and trustworthy. Overall, Aqua-Techniques demonstrates a solid digital presence with room for enhanced security and compliance transparency.

W

waterlutions

waterlutions.com

68

Waterlutions is a small French business specializing in artisanal water filtration solutions, particularly gravity-based filtration systems. The company operates primarily through its website, offering products via an integrated Ecwid ecommerce platform. The website is built on WordPress using the Gutenberg editor, hosted with AWS Cloudfront CDN, and presents a professional and consistent brand image targeting environmentally conscious consumers interested in water purification. The business appears niche with a local focus in Grisolles, France. Technically, the site uses modern web technologies but lacks some advanced security headers and cookie consent mechanisms, which could impact GDPR compliance. The security posture is moderate with HTTPS enabled but could be improved with additional headers and policies. The absence of WHOIS data raises concerns about domain legitimacy, although the website content and contact information suggest a genuine business presence. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

D

devisocom

devisocom.com

50

Devisocom is a small communication agency based in Avignon, France, founded in 2008 by Odile Devise. The company offers a range of creative services including graphic design, communication strategy, digital and web solutions, and custom games. The website is professionally designed using WordPress with the Divi theme and includes a portfolio and client testimonials, indicating a credible and established presence in its niche market. Technically, the site is well-structured with SEO optimizations and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified. Overall, the website presents a trustworthy and professional image suitable for its target audience.

A

Amasty

amasty.com

76

Amasty is a well-established Magento 2 extension developer and ecommerce service provider with over a decade of market presence. The company offers a broad portfolio of Magento 2 Hyva-compatible plugins and professional development services aimed at improving ecommerce store performance and functionality. Their market position is strong within the Magento ecosystem, targeting ecommerce businesses and developers seeking reliable Magento solutions. Technically, the website demonstrates modern frontend technologies including Alpine.js and Hyvä UI, with Cloudflare DNS and CDN services ensuring performance and security. The site is mobile-optimized, SEO-friendly, and provides a smooth user experience. Security posture is solid with HTTPS, domain transfer protection, and no visible vulnerabilities, although DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. Recommendations include enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure page to enhance transparency and security readiness.

A

ADweby.com

adweby.com

61

ADweby.com is a Czech Republic-based small technology company specializing in custom web development, e-commerce solutions, and graphic design services primarily targeting businesses and individuals in the Ostrava and Moravskoslezský kraj region. The company emphasizes unique graphic design and offers a proprietary content management system (AD-RS) and e-commerce platform (AD-Shop). The website demonstrates a professional digital presence with good content quality and SEO optimization, although some technical aspects such as outdated JavaScript libraries and lack of visible security headers suggest room for improvement. The security posture is moderate with HTTPS enforced and cookie consent implemented, but the absence of a clear privacy policy and missing WHOIS domain registration data raise concerns about compliance and legitimacy. Overall, the site is accessible and business-focused with no adult or questionable content detected.

F

Festival de Sevilla

festivalcinesevilla.eu

57

Festival de Sevilla is a well-established European film festival based in Sevilla, Spain, with a strong cultural and media focus. The website serves as a comprehensive platform for festival information, programming, news, and educational initiatives, targeting film enthusiasts, professionals, and the general public. The festival enjoys solid institutional support from government and cultural organizations, enhancing its credibility and market position. Technically, the website is built on Drupal 8, leveraging modern web technologies such as Google Analytics for tracking, AddToAny for social sharing, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site implements basic privacy compliance with cookie consent and IP anonymization in analytics. However, it lacks advanced security headers, a published security policy, and vulnerability disclosure mechanisms. No blocking or WAF challenges were detected, and no suspicious content was found, indicating a generally secure posture but with room for improvement. Overall, the website is professional, trustworthy, and well-maintained, supporting the festival's mission and audience engagement effectively.

Φ

Φεστιβάλ Κινηματογράφου Θεσσαλονίκης

filmfestival.gr

72

The website www.filmfestival.gr is the official digital presence of the Thessaloniki International Film Festival, a prominent cultural institution in Greece. It provides comprehensive information about the festival's organization, film screenings, professional activities, museum, archives, and an e-shop. The site targets film enthusiasts, industry professionals, and the general public interested in cinema and cultural events. The business model is non-profit, focusing on cultural promotion and film industry support. The website is well-branded, consistent, and rich in relevant content, reflecting a medium-sized organization with a strong market position in the media sector in Greece. Technically, the site is built on Joomla CMS with Bootstrap 3 and uses modern JavaScript libraries like Swiper.js and jQuery. It integrates Google Analytics, Facebook SDK, and Google Adsense for analytics and advertising. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance, including GDPR-aligned privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. The WHOIS data aligns with the website's claims, supporting legitimacy. No adult or questionable content is present, making it safe for general audiences. Strategic recommendations include enhancing security headers, adding a vulnerability disclosure policy, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

The website www.filmrenaissance.cz is currently inaccessible, serving an HTTP 429 Too Many Requests error page generated by nginx. This indicates that the site is either under heavy traffic load or protected by rate limiting or a web application firewall (WAF) that is blocking access. Due to the lack of accessible content, no metadata, business information, or technical details could be extracted. The WHOIS query returned no registration data, suggesting the domain may not be properly registered or is protected by privacy mechanisms that prevent data disclosure. This severely limits the ability to assess the business, technical infrastructure, or security posture of the website. From a technical perspective, the absence of accessible content and metadata means no analysis of technology stack, frameworks, or hosting provider is possible. The website performance, SEO, and accessibility cannot be evaluated. Security headers and SSL configuration are unknown. The site’s security posture is considered very low due to the inability to verify any security best practices or policies. The overall risk assessment is high due to the lack of transparency and accessibility. The domain’s legitimacy is questionable given the missing WHOIS data and the blocking of access. Strategic recommendations include resolving the rate limiting issues to restore access, verifying domain registration status, and implementing clear security and privacy policies to build trust with users and stakeholders.

F

Film at Lincoln Center

filmlinc.org

63

Film at Lincoln Center (FLC) is a well-established nonprofit organization founded in 1969 dedicated to celebrating cinema as an essential art form and fostering a vibrant film culture. The organization operates a professional website that provides detailed information about film screenings, festivals such as the New York Film Festival (NYFF), membership programs, and cultural events. The site targets cinema enthusiasts and the broader film community, offering ticket sales and membership benefits to sustain its nonprofit mission. Technically, the website leverages modern web technologies including React and Next.js frameworks, hosted likely on Vercel with Cloudflare CDN for performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing discoverability. Security best practices are observed with HTTPS enforcement and multiple security headers, and privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is unavailable due to a malformed response, which limits domain registration insights. Despite this, the website's professional presentation, consistent branding, and presence of trust indicators support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, FLC's website represents a mature digital presence for a nonprofit cultural institution with strong security and privacy practices. Strategic recommendations include publishing a vulnerability disclosure policy and incident response contacts to further enhance trust and security transparency.

F

Filmfestival Oostende

filmfestivaloostende.be

61

Filmfestival Oostende is a well-established cultural media organization focused on hosting an annual film festival and promoting arthouse cinema in Oostende, Belgium. The website serves as a comprehensive portal for festival information, news, partner engagement, and ticketing. It targets film enthusiasts, industry professionals, and the general cultural audience. The organization maintains a strong regional presence with partnerships and sponsorships from notable cultural and commercial entities. Technically, the website is built on Drupal 9, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms, but could improve by implementing additional security headers and publishing explicit security policies. The absence of WHOIS data limits domain trust analysis, but the overall professionalism and transparency of the site support its legitimacy. Strategic recommendations include enhancing security headers, increasing transparency on incident response, and continuous monitoring of third-party scripts.

goEast Filmfestival is a well-established cultural event organizer specializing in Central and Eastern European cinema. The website provides comprehensive information about the festival, including event dates, program details, and opportunities such as internships and film submissions. The organization targets film enthusiasts and cultural audiences interested in this niche. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, hosted on a professional DNS provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Social media integration is strong, enhancing community engagement and trust. Overall, the website is professional, trustworthy, and serves its audience effectively.

F

FIDMarseille — Festival International de Cinéma de Marseille

fidmarseille.org

59

FIDMarseille is a well-established international film festival based in Marseille, France, with a history dating back to 2000. The festival showcases a diverse program of fiction, documentary, and artist films, attracting a culturally engaged audience and international cinema professionals. The website reflects a professional and consistent brand image, providing detailed event information, schedules, and social media engagement. Technically, the site is built using modern frameworks like Astro, optimized for mobile devices, and delivers fast performance with responsive images. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is currently weak, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy and security practices.

I

Institut français de Prague

festivalff.cz

40

The website www.festivalff.cz represents the 28th Festival francouzského filmu (French Film Festival) organized by the Institut français de Prague. It serves as a cultural platform promoting French cinema in the Czech Republic, featuring film screenings, premieres, tributes, and regional events. The site targets film enthusiasts and the general public interested in French culture. Technically, the site uses a traditional web stack with jQuery and integrates multiple third-party tracking tools such as Google Tag Manager and Facebook Pixel. The website is mobile-optimized and offers good user experience with clear navigation and professional content presentation. Security-wise, the site enforces HTTPS and uses asynchronous loading for tracking scripts but lacks advanced security headers and privacy/cookie policies, which are compliance gaps. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, though the affiliation with a reputable cultural institute mitigates trust issues. Overall, the site is functional, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

The website www.filmfestivalacademy.net currently serves only a 404 error page indicating that the requested document was not found. The domain appears to be unregistered or inactive as per WHOIS data, which returned no match for the domain. There is no business content, metadata, or structured data available to analyze. The site lacks any privacy, cookie, or terms of service policies, and no contact information beyond a default administrative email is present. Technically, the site does not use HTTPS and lacks security headers or modern web technologies. Overall, the website is non-functional and does not represent an active business presence. From a technical infrastructure perspective, the site is minimal and does not employ any detectable CMS, frameworks, or analytics tools. The absence of HTTPS and security best practices indicates a very low digital maturity level. The lack of content and metadata also negatively impacts SEO and user experience. Security posture is weak due to missing HTTPS, no security headers, and no visible incident response or data protection policies. The domain's WHOIS status further undermines trustworthiness, as it appears unregistered or inactive. There are no indications of vulnerabilities or malicious content, but the overall risk is high due to lack of legitimate presence and security controls. Given these findings, the overall risk assessment is critical. The domain should be monitored for potential misuse or cybersquatting. Strategic recommendations include registering the domain properly if intended for use, implementing HTTPS, adding comprehensive privacy and security policies, and developing legitimate website content to establish trust and compliance.

C

Czech Film Center

filmcenter.cz

53

Czech Film Center is a government-affiliated organization dedicated to promoting Czech audiovisual production globally. It serves as a key resource for film industry professionals, providing information on films, filmmakers, festivals, and industry news. The website is professionally designed with consistent branding and clear navigation, targeting the international film community and industry stakeholders. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and Google services, ensuring a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit security policies. Privacy compliance is strong, featuring a comprehensive privacy policy and a granular cookie consent mechanism. The absence of WHOIS data reduces domain trust assessment, but the official affiliations and content quality support legitimacy. Overall, the site is a reliable and professional platform for Czech film promotion.

Č

Česká filmová a televizní akademie, z.s.

filmovaakademie.cz

51

Česká filmová a televizní akademie (ČFTA) is a prominent Czech non-profit organization dedicated to promoting Czech film and television culture. It organizes the prestigious Český lev awards and provides online access to awarded and nominated films, targeting film professionals, students, and enthusiasts. The website reflects a well-structured and professionally maintained platform with consistent branding and relevant content. Technically, the site employs established JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for visitor tracking. While the site is mobile-optimized and SEO-friendly, some technologies like jQuery are outdated, which could pose security risks. Security posture is moderate with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and published incident response policies. The absence of WHOIS data limits domain trust assessment, though the website content and business information appear legitimate and professional. Overall, the site is safe for general audiences and maintains good privacy compliance with comprehensive policies.

Cecoforma is a Belgium-based event and communication business with over 30 years of experience, offering expert services in event organization and communication management. The company targets a general audience including corporate clients and organizations seeking professional event support. Their market position is solid within the regional Belgian market, supported by certifications such as ISO 9001 and ISO 20121, and memberships in recognized industry bodies. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including Google Analytics and a Craft CMS-based SEO plugin, with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious content were detected. Overall, the website and domain registration data align well, indicating a trustworthy and credible business presence online.

C

Cecoforma S.A

media-stands.eu

51

Media-stands.eu is a specialized service provider organizing umbrella stands for European independent audiovisual and film market participants at major international events such as MIPTV, Marché du Film, MIFA, MIPCOM, Series Mania Festival, and the European Film Market. The website represents the interests of the Creative Europe MEDIA Programme and the European Education and Culture Executive Agency, positioning itself as an official and trusted partner in the European media sector. The business operates primarily from Belgium and targets audiovisual professionals seeking exhibition opportunities at key industry markets. Technically, the website employs modern front-end technologies including Font Awesome, Bootstrap, and Swiper.js, with a responsive design optimized for mobile devices. Cookie consent mechanisms are implemented to comply with GDPR requirements, and analytics scripts are present but commented out, reflecting a privacy-conscious approach. The site demonstrates good SEO and accessibility basics but lacks advanced security headers and explicit security policy documentation. From a security perspective, the site uses HTTPS (implied by the URL), has no visible vulnerabilities or exposed sensitive data, and implements cookie consent. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and the WHOIS data is consistent with a legitimate domain registration. Overall, the security posture is moderate with room for improvement in formal security documentation and headers. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enhancing HTTP security headers, publishing a security policy and vulnerability disclosure, and verifying SSL/TLS configurations to strengthen security and compliance posture.

T

Ticketware SE

cinemaware.eu

39

Ticketware SE operates a specialized ticket sales software platform targeting cultural institutions such as cinemas, theaters, museums, and cultural centers primarily in Slovakia and the Czech Republic. The company offers an integrated solution for online ticket sales, seat reservations, ticket printing, and entry control, serving over 450 clients with monthly sales exceeding one million tickets. The website reflects a professional business presence with clear branding and relevant content tailored to its target audience. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, Google Tag Manager, Facebook SDK, and Google reCAPTCHA v3 for bot protection. The site is mobile optimized and uses HTTPS with a good SSL configuration. However, it lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration but misses formal security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the website’s business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

N

Nipos

mistnikultura.cz

62

Pro kulturu is a well-established Czech cultural news portal published by the National Institute for Culture (NIK), a government-affiliated organization. The website provides extensive articles, podcasts, and editorial cycles focused on cultural events and personalities across the Czech Republic. It targets the cultural community and general public interested in cultural affairs. The site demonstrates strong digital maturity with a modern WordPress CMS, Bootstrap framework, and SEO best practices including structured data and Open Graph metadata. Privacy compliance is robust, featuring GDPR-aligned policies and cookie consent management via Complianz. Security posture is good with HTTPS enforced and Matomo analytics configured to require consent, though the absence of security headers suggests room for improvement. The lack of WHOIS data is a notable anomaly that slightly reduces trustworthiness but does not detract from the site's professional presentation and government affiliation. Overall, Pro kulturu is a credible and authoritative source for cultural information in the Czech Republic.

O

oldstarsontheroad

oldstarsontheroad.cz

57

The website oldstarsontheroad.cz serves as an online news and information platform for the Festival Studenských divadel v Celetné a Solné věži 2025, a student theater festival in Prague. It provides festival news, interviews, backstage insights, and interactive content aimed at students and theater enthusiasts. The site is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring moderate performance and good mobile optimization. The content is well-structured, relevant, and professionally presented, though some accessibility and SEO improvements are possible. Security posture is basic with HTTPS enabled and a cookie consent banner present, but lacks advanced security headers and privacy policy documentation. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust assessment but is reasonable for a small cultural event site. Overall, the site is functional and serves its niche audience effectively.

L

LEPOR s.r.o.

lepor.cz

41

LEPOR s.r.o. is a well-established Czech advertising agency founded in 2000, providing a range of services including copyshop, signmaking, graphic design, printing, and promotional product sales. The company targets local businesses and consumers primarily in the Czech Republic, leveraging partnerships with specialized online catalogs and product providers. The website reflects a solid local market presence with clear contact information and a focus on customer service. Technically, the site uses a combination of popular JavaScript libraries and frameworks such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA Enterprise integration on the contact form, but lack visible advanced security headers or published security policies. Privacy compliance is basic, with a cookie consent banner but no privacy policy or terms of service pages. Overall, the site is functional and professional but could improve in security and compliance transparency.

K

Kutnohorsko Kolínsko Turistická Oblast

kutnohorskokolinsko.cz

43

The website www.kutnohorskokolinsko.cz serves as an informational portal promoting the Kutnohorsko and Kolínsko tourist regions in the Czech Republic. It targets tourists and visitors interested in exploring these areas, providing regional information and event announcements. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. However, the absence of contact details, privacy policies, and WHOIS registrant data limits the business credibility and transparency. Security posture is basic with HTTPS enabled but lacking advanced security headers and vulnerability disclosures. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and clearer business information to improve trust and security.

W

Werich Villa

werichovavila.cz

41

Werichova vila is a cultural and historical center located in the heart of Prague, dedicated to preserving and promoting the legacy of notable Czech personalities such as Jan Werich and Vladimír Holan. The website serves as an official portal offering information about permanent exhibitions, cultural programs, theatrical performances, concerts, and workshops aimed at a broad audience including families, schools, and the general public. The organization positions itself as a small but significant cultural institution with a focus on arts and heritage preservation. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under a Czech registrar and uses SSL encryption, ensuring secure communications. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site employs HTTPS and reCAPTCHA but lacks explicit security headers and a published security or incident response policy. Privacy compliance is partially addressed with a GDPR information page, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's claims and location, supporting its legitimacy. Overall, Werichova vila's website is a well-maintained cultural portal with good content quality and technical implementation. Enhancements in privacy compliance, security policy transparency, and security headers would further strengthen its security posture and user trust.

M

Městys Jince

jince.cz

48

Městys Jince operates an official municipal website serving the local community of Jince, Czech Republic. The site provides comprehensive information including news, public notices, event calendars, and contact details for municipal offices. It targets residents and visitors seeking local government services and updates. The business model is a governmental service portal with a focus on transparency and community engagement. Technically, the website uses a custom CMS platform likely provided by Galileo Corporation, leveraging technologies such as jQuery, Bootstrap, Swiper, and Highslide for UI components. The site is mobile optimized and accessible, with a clean navigation structure and good SEO practices. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, and cookie consent mechanisms are in place. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which reduces domain registration trustworthiness, but the website content and contact information strongly indicate legitimacy as a municipal government site. Overall, the site is well-structured and serves its purpose effectively, but improvements in security headers and public security policies are recommended to enhance trust and compliance.