Security Directory

Ž

Življenjska zavarovalnica Vita

zav-vita.si

64

Življenjska zavarovalnica Vita operates as the largest bank-affiliated life insurance provider in Slovenia, offering health and life insurance products with 24/7 customer support. The company positions itself as a trustworthy insurer with transparent terms and no fine print, targeting a broad Slovenian audience. The website reflects a professional and consistent brand image aligned with its banking parent company, NLB. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and Google reCAPTCHA for bot protection, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and bot protection but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security transparency.

S

STO

slovenia.info

69

The website www.slovenia.info serves as the official travel guide to Slovenia, operated by the Slovenian Tourist Organization (STO). It provides comprehensive information about destinations, activities, culture, and events in Slovenia, targeting tourists and travelers interested in exploring the country. The site is multilingual and well-structured, offering a rich user experience with clear navigation and professional design. The business model focuses on tourism promotion and information dissemination, positioning itself as the authoritative source for travel in Slovenia. From a technical perspective, the website employs modern web technologies including Google Tag Manager for analytics and marketing, Typekit fonts for typography, and AMP Travel scripts for enhanced performance. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. Security posture is generally good with HTTPS enforced and consent defaults set to deny ad and analytics storage, indicating privacy-conscious design. However, the absence of visible security headers and lack of published privacy and cookie policies reduce the overall security maturity. No vulnerabilities or exposed sensitive data were detected. WHOIS data is not publicly available, likely due to privacy protection, which is reasonable for this type of official site. Overall, the website is trustworthy and professional, with a high-quality user experience and solid business credibility. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response and vulnerability disclosure information to enhance trust and compliance.

The website gemeinwohlprojekte.at operates as a crowdfunding platform dedicated to financing projects that promote the common good, including sustainable development, social initiatives, and ecological projects primarily in Austria. It offers services such as project submission, support, and verification, targeting individuals and organizations interested in social impact investments. The platform is built on TYPO3 CMS and integrates Piwik/Matomo analytics with privacy-conscious settings. The site features secure login and registration forms with password encryption and provides clear privacy and cookie policies compliant with GDPR. Social media presence is established on Facebook, YouTube, and Twitter, enhancing community engagement. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency.

D

Display Europe

displayeurope.eu

61

Display Europe is a European media platform that aggregates news and media content from various European sources, targeting media professionals, researchers, and the general public interested in European affairs. The platform offers search and filtering capabilities to access a wide range of media articles from partner sources. Technically, the website is built using modern web technologies including React and Next.js, with Apollo GraphQL for data management and Matomo for analytics. The site demonstrates good digital maturity with responsive design and moderate performance. Security-wise, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website is trustworthy and professionally maintained, with a strong European identity and co-funding from the European Union.

E

European Cultural Foundation

culturalfoundation.eu

57

The European Cultural Foundation website serves as a digital platform for a non-profit organization focused on fostering European cultural initiatives and a sense of belonging. The site presents a professional and consistent brand image, targeting European citizens and cultural stakeholders. The business model revolves around supporting and developing cultural projects that inspire hope and democracy across Europe. Technically, the website is built on WordPress with a modern tech stack including jQuery, Mapbox, and Cookiebot for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit policies are absent. Privacy compliance is partial, with cookie consent but lacking visible privacy and terms of service documents. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

F

fairchat

fairchat.net

67

The website fairchat.net appears to be a technology-focused platform, likely related to chat or messaging services, as indicated by the site title and domain name. The domain was registered in 2017 and is maintained with a reputable registrar, suggesting a stable presence. However, the website content is minimal and lacks detailed business descriptions, contact information, or legal policies, which limits the ability to fully assess the business model or market position. Technically, the site uses the Meteor.js framework and custom JavaScript, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing privacy and cookie policies. No signs of WAF or content blocking were detected, allowing full content access for analysis.

F

fairkom

fairmove.net

70

fairmove.net is a Mastodon instance operated by fairkom, providing a federated social networking platform focused on 'fair moves' and community engagement. The platform is part of the fairapps.net open source cloud portfolio and integrates SingleSignOn capabilities. Hosting is located in the EU, aligning with data protection expectations. The website serves a niche audience interested in decentralized social media and open source technologies. Technically, the site runs Mastodon version 4.4.2 with a modern tech stack including Ruby on Rails and React, delivering a moderate performance experience with good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service found. Business credibility is supported by transparent WHOIS data consistent with the website's claims and a clear administrative contact. Overall, the site is safe, professional, and trustworthy within its niche, but could enhance security and compliance features to improve user trust and regulatory adherence.

F

fairkom

fairkom.net

65

fairkom is a small Austrian technology company specializing in open source based IT solutions, including consulting, cloud hosting, videoconferencing, chat platforms, and identity management. The company emphasizes GDPR compliance, green hosting, and sustainable digital communication. Their market position is supported by over 20 years of experience and partnerships with public institutions and NGOs. The website reflects a mature digital presence with a modern Drupal 10 CMS, privacy-respecting analytics, and a clear focus on open source technologies. Security posture is good with HTTPS and privacy measures, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, fairkom presents a trustworthy and professional business with a strong commitment to privacy and sustainability.

Salon Bien Etre & Bio Strasbourg is a regional event platform focused on wellness, natural health, organic products, and alternative therapies. The website presents a professional and content-rich experience targeting visitors interested in health, ecology, and personal development. The event offers exhibitors, conferences, workshops, and organic food markets, positioning itself as a niche but established player in the Strasbourg wellness event market. Technically, the site is built on the IONOS Website Editor platform, leveraging modern JavaScript libraries and CDNs, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. The WHOIS data is unavailable or indicates the domain may not be registered, which is a concern for domain legitimacy and trust. Overall, the site is trustworthy and safe for general audiences but would benefit from improved transparency on domain registration and enhanced security practices.

A

Association Mieux Vivre

foirebiogorcy.eu

43

The website foirebiogorcy.eu represents the Foire Bio de Gorcy, an annual organic fair held in Gorcy, France, organized by the independent association Mieux Vivre since 1996. The event targets visitors and exhibitors interested in organic products from France and neighboring countries, offering free entry and promoting local producers. The site is built on WordPress using Astra theme and Elementor, with standard plugins for forms, cookie consent, and Google reCAPTCHA. While the site is functional and well-structured, it lacks a formal privacy policy and terms of service pages, and the Google Analytics plugin is present but not configured. Security posture is adequate with HTTPS and reCAPTCHA but could be improved with additional headers and policies. Overall, the site is trustworthy and serves its purpose effectively with room for compliance and security enhancements.

A

ADABio, pour le développement de l'agriculture bio en Auvergne Rhône-Alpes

adabio.com

10

ADABio is a well-established non-profit association dedicated to promoting and supporting organic agriculture in the Auvergne Rhône-Alpes region of France. Founded in 1984, it serves producers, local authorities, and citizens by providing technical support, training, and community engagement to foster sustainable and equitable organic farming practices. The website reflects a professional and regionally focused organization with clear messaging and a consistent brand identity. Technically, the site is built on a modern WordPress platform using popular plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the site is trustworthy and safe for general audiences, with room for improvement in compliance and security transparency.

Bio 46 is a regional non-profit association dedicated to supporting organic farmers in the Lot department of France. The website serves as a resource hub offering information, training access, and community networking for organic agriculture stakeholders including farmers, local businesses, collectives, and consumers interested in organic products. The organization positions itself as a key regional player in promoting organic farming practices and sustainable agriculture. Technically, the website uses a traditional stack including jQuery, Bootstrap 3, and Font Awesome, hosted by OVH. The site is accessible, moderately performant, and has basic mobile optimization. However, it lacks modern CMS indicators and advanced SEO or accessibility features. No analytics or tracking scripts were detected, indicating a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps especially under GDPR. No incident response or security contact information is provided. The domain registration is consistent and transparent, supporting the legitimacy of the site. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better mobile and accessibility optimizations to strengthen trust and user experience.

S

Sologne Nature Environnement

sologne-nature.org

57

Sologne Nature Environnement is a well-established non-profit association dedicated to the protection and promotion of nature and the environment in the Sologne region of France. With over 40 years of expertise, the organization offers a variety of services including biodiversity studies, public and school educational programs, environmental consulting, and community engagement through events and advocacy. The website reflects a mature digital presence with clear branding, contact information, and active social media channels. Technically, the site is built on Joomla CMS with modern front-end technologies and includes interactive features such as event calendars and maps. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. The absence of WHOIS data limits domain trust verification, but the overall content and transparency support legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.

C

Château de la Bourdaisière · Hôtel de charme *** · Val de Loire

labourdaisiere.com

10

Château de la Bourdaisière is a boutique 3-star hotel located in the Loire Valley, France, offering a blend of hospitality, cultural exhibitions, and leisure activities. The website presents a professional and rich user experience with detailed information about accommodations, dining options, events, and unique experiences such as the tomato-themed attractions. The business targets tourists and visitors seeking a charming and culturally immersive stay in the region. Technically, the site is built on WordPress using Elementor and integrates several plugins for event management and booking, supported by Google Analytics and Facebook Pixel for marketing and analytics. Security posture is generally good with HTTPS and secure booking integration, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from verification of domain registration and enhanced security headers.

S

salon ARTEMISIA - Marseille

salon-artemisia.com

50

Salon ARTEMISIA is a regional event organizer based in Marseille, France, specializing in bio, well-being, and ecological habitat trade shows. The website presents a professional and well-structured platform showcasing event dates, exhibitor profiles, partner logos, and visitor information. The business targets consumers and exhibitors interested in organic products and sustainable living. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, including Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and domain transfer protection, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is trustworthy and professionally maintained, with room for improvement in compliance and security transparency.

S

salons ZEN & BIO

salon-zenetbio.com

46

The website salons ZEN & BIO operates as an event organizer specializing in ecological, organic, wellness, and healthy habitat salons primarily in France, with events in Nantes, Lyon, and Angers. The business model focuses on organizing and promoting these niche events, targeting environmentally conscious consumers and exhibitors. The site is supported by SPAS Organisation, indicating a structured parent company backing. The website content is well-structured, professionally designed, and optimized for SEO, with clear event information and calls to action for exhibitors. Social media presence and partner logos enhance credibility. Technically, the site is built on WordPress using Elementor and several plugins for SEO, event management, advertising, and social media integration. It employs modern web technologies and includes consent management for GDPR compliance. Performance is moderate with good mobile optimization. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security headers and detailed security policies. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and ownership transparency. The site lacks direct contact emails and phone numbers, which could impact trust. Privacy and cookie policies are present and integrated with a consent platform, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its business niche but would benefit from improved transparency in domain registration, enhanced security headers, and clearer contact information to strengthen trust and compliance.

S

Studio 2 Com

studio2com.net

9

Studio 2 Com is a small French company specializing in organizing well-being and artisan salons primarily in the Maine-et-Loire region and neighboring departments. The website presents a professional and consistent brand image, offering event organization services that highlight local artisans, artists, and innovative small businesses. The company has been active since 2019 and targets visitors and professionals interested in well-being and arts divinatoires. Technically, the website is built on WordPress using Elementor and several popular plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and secure forms, though security headers and explicit policies are lacking. Privacy and cookie policies are present and GDPR compliant. However, the domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and reduces overall trust. Contact information is clearly provided, including a company email and phone number, and social media presence is established on Facebook.

The website salons-bienetre.com represents Agence Plan B, an organizer of wellness fairs in France, targeting individuals interested in health, relaxation, and natural products. The site promotes events in multiple cities with dates and venues, providing a contact form and social media links for engagement. Technically, the site is built on WordPress using the Divi theme, leveraging standard web technologies such as jQuery and Google Fonts. The site is served over HTTPS, ensuring encrypted communication, and includes a captcha-protected contact form to mitigate spam. However, the absence of WHOIS data for the domain raises concerns about transparency and domain legitimacy. No privacy or cookie consent mechanisms were detected, which may impact compliance with privacy regulations. Security headers are not present, indicating room for improvement in security posture. Overall, the website is functional, professionally designed, and provides relevant content for its audience, but lacks some critical compliance and security features.

B

Bio en Grand Est

biograndest.org

9

Bio en Grand Est is a regional non-profit organization dedicated to supporting and promoting organic agriculture in the Grand Est region of France. The website serves as a network hub for organic producers and provides information, news, events, and resources related to organic farming. The organization targets both professionals in the organic sector and consumers interested in organic products. The site is professionally designed using WordPress and integrates modern web technologies and plugins to deliver a good user experience. Social media integration and structured data enhance its digital presence. Security measures such as HTTPS and reCAPTCHA are implemented, but there is room for improvement in DNS security and HTTP headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and serves its business purpose effectively.

The website represents the Festival International du Film Ornithologique de Ménigoute, a well-established non-profit cultural event focused on wildlife and nature documentaries, particularly ornithology. Founded in 1985 and organized by Association MAINATE, it serves a general audience interested in nature and film. The site provides comprehensive information about the festival's program, activities, and participation opportunities, supported by social media and newsletter engagement. Technically, the site is built on the Contao CMS platform with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

S

Spas Organisation

spas-expo.com

10

Spas Organisation is a leading French event organizer specializing in bio, well-being, natural health, and sustainable development sectors. The company operates multiple public and professional salons and events, positioning itself as a market leader in France. Their digital presence is built on a WordPress platform with modern SEO practices and a clear focus on event promotion and partner collaboration. Technically, the website is well-structured, mobile-optimized, and uses recognized technologies such as Elementor and Yoast SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although incident response and vulnerability disclosure mechanisms could be improved. Privacy compliance is adequate with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a professional and trustworthy business with a solid market position.

K

Koop Domeinnaam

cookiebanner.eu

8

Koop Domeinnaam operates as a domain reseller specializing in selling domain names such as cookiebanner.eu. The website is a straightforward landing page offering the domain for sale at a fixed price, targeting individuals or businesses interested in acquiring domain names quickly. The business model is simple and focused on domain sales with immediate invoicing and transfer token delivery. The market position is that of a niche domain reseller within the Netherlands, with a small-scale operation and basic online presence. Technically, the website employs standard HTML5, CSS, and JavaScript, with Cloudflare services used for CDN and security purposes. The site is moderately optimized for performance and mobile devices but lacks advanced frameworks or CMS platforms. SEO and accessibility features are basic, and no analytics or tracking services are detected, indicating minimal data collection. From a security perspective, the site benefits from Cloudflare's protection but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. No forms or sensitive data collection points are present, reducing attack surface. The absence of detailed security policies and incident response information suggests limited security maturity. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the limited scope and content of the site, but improvements in privacy compliance, security headers, and transparency would enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing cookie consent, adding security headers, publishing terms of service, and improving mobile and accessibility features.

S

Svazek obcí Dobříšska a Novoknínska

dobrisskonovokninsko.cz

10

Svazek obcí Dobříšska a Novoknínska is a regional governmental association serving municipalities in the Dobříš and Nový Knín areas of the Czech Republic. The website provides official information, documents, event calendars, and contact services aimed at local government officials and residents. The site is well-structured with clear navigation and comprehensive content relevant to its audience. Technically, it uses a CMS platform (Vismo), integrates Google Analytics with GDPR-compliant consent mechanisms, and employs Google reCAPTCHA for form security. The security posture is solid with HTTPS and form protections, though it lacks some advanced HTTP security headers. Overall, the site demonstrates good privacy compliance and business credibility consistent with a small governmental entity.

B

Brdy a Podbrdsko - dovolená kousek za Prahou

brdyapodbrdsko.cz

10

The website www.brdyapodbrdsko.cz serves as an official regional tourism portal for the Brdy and Podbrdsko area near Prague, Czech Republic. It provides visitors with comprehensive travel information including event calendars, accommodation options, cultural and natural attractions, and travel planning tools. The content is primarily in Czech and targets tourists and visitors interested in exploring this region. The business model focuses on promoting regional tourism through informational content and digital engagement. The site maintains a consistent brand image aligned with regional tourism authorities and governmental partners.

The domain regiotv.cz is currently expired and parked, showing no active business content or services. The website primarily serves as a placeholder with advertising iframes and links to domain sale contact pages. There is no evidence of an operational company or digital services under this domain. The technical infrastructure is minimal, relying on basic HTML and JavaScript with external ad and tracking scripts. No CMS or modern frameworks are detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and expired domain status. Privacy and compliance policies are missing, indicating non-compliance with GDPR and related regulations. Overall, the site presents a low trust profile and minimal business credibility.

V

Virtual Visit

virtualvisit.cz

10

Virtual Visit is a Czech Republic-based digital agency specializing in innovative digital presentations including custom web design, virtual tours, accessibility audits, branding, and video production. The company targets a diverse audience including businesses, schools, healthcare, tourism, hospitality, and real estate sectors. Their market position is that of an established small agency with a professional portfolio and strong client references. Technically, the website employs modern web technologies such as jQuery, Nette Framework, Flatpickr, and integrates Google reCAPTCHA v3 for security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages are found. Overall, the website is professional and trustworthy, but the absence of WHOIS data reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security readiness.

D

DialogShift

dialogshift.com

10

DialogShift is a specialized AI technology company focused on providing automated communication solutions for the hospitality industry. Their platform integrates chatbot AI, phone AI, email AI, and guest messaging AI to streamline guest interactions and improve operational efficiency for hotels. The company positions itself as a market leader with a strong customer base of over 1200 hotels and multiple industry partnerships. Technically, the website is built on modern web technologies including Webflow CMS and integrates analytics and compliance tools such as Google Analytics and Iubenda. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly disclosed. The WHOIS data for the domain is missing, which is unusual and warrants further verification, but the website content and business presence appear legitimate and professional.

H

HashBang

hashbang.coop

9

HashBang is a Lyon-based cooperative specializing in bespoke web engineering services. They provide comprehensive project management, technical expertise, and responsible digital solutions primarily targeting businesses seeking tailored web and ERP development. Their cooperative model emphasizes collective decision-making and employee ownership, positioning them as a socially responsible player in the local technology sector. Technically, the website leverages modern frameworks such as Django and Wagtail CMS, with a clean, mobile-optimized design and good accessibility. However, the site lacks visible cookie consent mechanisms and detailed privacy or security policies, which impacts compliance and security posture. Security-wise, no explicit security headers or incident response information are published, though no obvious vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

T

TwentyThree

twentythree.com

10

TwentyThree is a European leader in video software, offering a comprehensive video marketing platform that includes webinars, video libraries, and personal video tools. The company targets businesses and marketing teams seeking to enhance their video marketing capabilities. The website is professionally designed, mobile-optimized, and provides rich multimedia content to engage visitors. Technically, the site uses modern frameworks like Alpine.js, HubSpot for marketing and forms, and Amazon Cloudfront CDN for performance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the website content and infrastructure appear trustworthy and professional.

Mailjet operates a cloud-based email delivery platform serving thousands of customers with transactional and marketing email services. The subdomain mj.am is specifically used for link redirection and static content hosting, supporting Mailjet's core email services. The website content is minimal but professional, emphasizing strict anti-spam policies and abuse reporting mechanisms, reflecting a strong commitment to responsible email practices. The domain is well-established since 2014, consistent with the company's operational history. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. There are no forms or tracking scripts, indicating a low footprint in terms of data collection and user interaction. The site lacks cookie consent mechanisms and security headers, suggesting areas for technical improvement. Performance and mobile optimization are basic but adequate for the site's limited scope. From a security perspective, the site enforces strict anti-spam policies and provides clear abuse contact information, which are positive indicators. However, the absence of security headers and vulnerability disclosure mechanisms limits the overall security posture. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. Overall, the website is legitimate and trustworthy within its scope but could benefit from enhanced technical and security implementations to improve compliance and user trust.

Mailocator is a Czech Republic based technology company operating a premium display marketing platform focused on increasing conversions and collecting valuable marketing data. Founded in 2016, the company offers a SaaS solution with a wide range of campaign types including lead generation, gamification, countdowns, and product recommendations. The platform integrates with over 55 popular email marketing and CRM tools, positioning Mailocator as a versatile marketing technology provider for ecommerce, content websites, agencies, and developers. The website demonstrates a professional design with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript, Google Tag Manager, and asynchronous script loading, ensuring moderate performance and SEO optimization. Security posture is good with HTTPS enforced and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited by the absence of a visible privacy policy page, despite a cookie consent mechanism being implemented. Overall, Mailocator presents a trustworthy and credible business with clear contact information and social media presence, though it should enhance privacy transparency and security policies to strengthen compliance and user trust.

Pretekaj.sk is a Slovak sports registration and results platform operated by Matj.sk. It serves organizers and athletes by simplifying event registration and providing easy access to sports performance data. The platform targets a niche market within Slovakia, focusing on regional sports events and races. The website is well-structured, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it employs modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook SDK, hosted likely behind Cloudflare for performance and security. Security posture is good with HTTPS enforced and secure payment logos displayed, though some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site is trustworthy, functional, and well-positioned within its market niche.

F

FiremníAkce.cz, s.r.o.

firemniakce.cz

60

FiremníAkce.cz, s.r.o. operates a Czech Republic-focused online platform specializing in corporate event planning. The website offers a comprehensive marketplace for event locations, services, and inspiration, targeting corporate clients and event organizers. It positions itself as a commission-free, easy-to-use solution for finding venues and services for various event types including conferences, team building, and parties. The platform features curated offers, partner collaborations, and interactive search forms to facilitate client inquiries. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Smartlook. The presence of cookie consent mechanisms and social media integration reflects a moderate level of digital maturity. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, the website is well-designed, user-friendly, and serves its niche effectively.

S

Shopper Park Plus PLC

shop-land.eu

58

Shopland is a professional website representing a regional real estate business focused on managing shopping centers and retail parks across the Central and Eastern Europe region. The company, Shopper Park Plus PLC, offers retail space leasing and property management services, targeting retail customers and investors. The website reflects a medium-sized business with consistent branding and a clear market position in the real estate sector. Technically, the website uses modern front-end technologies including Bootstrap, jQuery, LightGallery, Splide.js, and Google Maps API for interactive features. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks explicit security headers and does not provide a privacy policy or incident response information, which are important for compliance and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional but would benefit from adding comprehensive privacy and security policies, improving accessibility, and implementing security headers to enhance its security posture and compliance standing.

M

MARVIO agency s.r.o.

marvio.cz

9

MARVIO agency s.r.o. is a creative marketing agency based in Ostrava, Czech Republic, specializing in comprehensive marketing services including online marketing, website development, graphic design, printing, and vehicle wrapping. The company targets businesses and organizations seeking to enhance their marketing presence through both digital and offline channels. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Czech language. Technical infrastructure is based on WordPress CMS with modern JavaScript libraries and frameworks, although some components like jQuery are outdated. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the website presents a trustworthy and professional marketing agency with room for improvement in security and domain registration transparency.

M

ME-METAL

me-metal.cz

47

ME-METAL is a Czech manufacturing company specializing in precision milling and turning of parts primarily from aluminum alloys, steel, and plastics. Founded in 1994 and operating from a large facility near Chomutov, the company focuses on small batch and custom production, serving both domestic and international clients. Their business model includes full production services with in-house transport for delivery. The website reflects a stable and established market position with over 30 years of experience and a consistent brand presence. Technically, the website is built using Nicepage site builder with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. Hosting is likely provided by WEDOS, consistent with the registrar and nameservers. The site is mobile optimized and SEO friendly, though accessibility features are basic. No advanced analytics or advertising tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (inferred though not explicitly confirmed), includes GDPR and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Security posture is moderate with room for improvement in security headers and incident response transparency. The risk level is low, but strategic enhancements in security documentation and technical hardening are recommended.

I

INPROMA, spol. s r.o.

inproma.cz

57

INPROMA, spol. s r.o. is a Czech manufacturing company specializing in precise machining of metal castings and profiles, as well as ventilation products under the RENSON brand. The company targets industrial and business clients requiring high-quality engineering production services. The website reflects a medium-sized enterprise with a professional online presence, including certifications such as TUV and IATF, which enhance its market credibility. The site is well-structured, mobile-optimized, and provides clear contact information, supporting effective client engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Web Fonts. It employs a slider for visual content and has implemented a cookie consent mechanism compliant with GDPR. However, the security headers are minimal, with an empty Content-Security-Policy and absence of other common security headers, indicating room for improvement in security hardening. The site uses HTTPS, ensuring encrypted communications. From a security perspective, the site shows moderate maturity with HTTPS and cookie consent but lacks comprehensive security headers and visible incident response or vulnerability disclosure policies. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and certifications suggest legitimacy. No signs of malware or phishing were detected, and the content is safe for general audiences. Overall, the website presents a professional and trustworthy business front with moderate technical and security maturity. Strategic improvements in security headers, WHOIS transparency, and incident response documentation would enhance its security posture and trustworthiness.

D

Divio AG

django-cms.org

10

django CMS is an established open-source enterprise content management system built on the Django framework, supported by the django CMS Association and backed by Divio AG. It targets enterprise marketers, digital agencies, developers, and educational institutions, offering a scalable, secure, and flexible CMS solution with extensive community and expert support. The platform holds a strong market position, evidenced by multiple industry awards and adoption by notable organizations such as NASA and National Geographic. Technically, the website employs a modern technology stack including Python, Django, jQuery, and integrates analytics tools like Google Analytics, Hotjar, and Segment. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which is justified for this type of open-source project. Overall, django CMS.org presents a trustworthy, professional, and technically sound web presence with strong community and business credibility. Strategic improvements in security transparency and policy publication would further enhance its security posture and user trust.

C

Crowdin

crowdin.com

75

Crowdin is a well-established localization and translation management platform founded in 2008 and headquartered in Estonia. It serves teams and businesses by providing a comprehensive SaaS solution that integrates AI-powered translation, automated workflows, and extensive integrations with development and marketing tools. The platform is positioned as a leader in the localization technology market, offering services tailored for engineering, marketing, support, design, and translation teams. Crowdin's website reflects a mature digital infrastructure with fast performance, mobile optimization, and strong SEO practices. The use of modern analytics and monitoring tools such as Google Analytics, PostHog, and Sentry indicates a high level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, CSRF protections, and Cloudflare bot management, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, Crowdin presents a trustworthy and professional online presence with strong business credibility and technical implementation.

S

SMART PARTS, s.r.o.

cyrrtec.cz

53

CYRRTEC, operated by SMART PARTS, s.r.o., is a Czech company specializing in the manufacturing and retail of metalworking machines and accessories targeted at hobbyists and small workshops. The company offers a range of products including lathes, milling machines, welding equipment, plasma cutters, and compressors. Their market position is that of a specialized, quality-focused manufacturer and retailer with a strong emphasis on customer service and product reliability. The website reflects a professional e-commerce platform with comprehensive product listings and detailed business information. Technically, the website is built on the Upgates e-commerce platform, leveraging modern technologies such as Google Analytics 4, Facebook Pixel, Hotjar, and cloud-based CDN services for performance optimization. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility features. Privacy and cookie policies are clearly presented with consent mechanisms in place, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs best practices such as asynchronous loading of third-party scripts and cookie consent management. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected, and no formal security policy or incident response contact information is provided. The absence of WHOIS data for the domain is a notable gap in transparency but does not currently undermine the apparent legitimacy of the business. Overall, CYRRTEC presents a trustworthy and professional online presence with strong business credibility and technical maturity. The main risk lies in the lack of domain registration transparency and formalized security policies, which should be addressed to enhance trust and compliance further.

S

secondfoundation

second-foundation.eu

7

The website 'secondfoundation' presents a professional and modern design with a focus on business-related content. However, the lack of publicly available WHOIS data due to privacy protection limits the ability to verify domain ownership and legitimacy. The site uses modern CSS frameworks and animation libraries, indicating a moderate level of technical maturity. Security posture is weak due to absence of HTTPS verification and security headers, and no privacy or cookie policies are present, which impacts compliance and user trust. Overall, the site is safe for general audiences but lacks transparency and security best practices, which should be addressed to improve credibility and compliance.

P

PKS servis spol. s r. o.

duratest.cz

10

PKS servis spol. s r. o. is a Czech-based company specializing in the development, manufacturing, sale, and servicing of custom-made special testing devices, particularly hydraulic test stands for durability and destructive testing. With over 20 years of experience, the company serves industrial manufacturers and product developers requiring precise and reliable testing equipment. The website reflects a professional and consistent brand image, supported by certifications such as ISO 9001 and EU funding logos. Technically, the site uses modern frameworks like Bootstrap and jQuery, with good mobile optimization and privacy compliance through a detailed cookie consent mechanism. Security posture is solid with HTTPS and secure forms, though additional security headers and explicit policies could enhance trust. The absence of WHOIS data is a notable gap, reducing domain trustworthiness despite strong business indicators. Overall, the site is well-structured, informative, and trustworthy for its target B2B audience.

P

PKS servis spol. s r. o.

technomist.cz

10

PKS servis spol. s r. o. operates the Technomist brand, specializing in the development, manufacturing, sales, and servicing of high-pressure water misting systems designed for environmental conditioning such as cooling, dust reduction, and humidity control. The company targets industrial clients, hospitality venues, and residential customers within the Czech Republic. Their market position is that of a niche manufacturer with a strong local presence and diversified sister divisions under the PKS servis group. Technomist offers comprehensive technical support and warranty services, supported by certifications like ISO 9001 and EU funding, enhancing their credibility. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates multiple tracking and analytics tools including Google Analytics and Facebook Pixel, and implements a robust cookie consent mechanism with GDPR compliance. The site is mobile-optimized and demonstrates good SEO practices, although some security headers are missing. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-out mode, but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data slightly impacts trust but is mitigated by professional site content and business transparency. Overall, the website presents a professional and trustworthy digital presence with good security and privacy practices. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen their security posture.

P

PKS servis spol. s r. o.

dynaset.cz

50

PKS servis spol. s r. o. operates the Dynaset Czech Republic website, representing a collaboration with the Finnish company DYNASET Oy, a leading global manufacturer of hydraulic units for mobile machinery. The company offers a range of hydraulic products including generators, compressors, and pressure washers, targeting industrial and machinery sectors. The website is professionally designed, multilingual, and provides comprehensive product and company information, reflecting a medium-sized manufacturing business with a strong market position in the Czech Republic and internationally. Technically, the website uses modern web technologies such as Bootstrap 5 and jQuery, with CDN-hosted libraries and a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and includes SEO best practices. However, no explicit security headers were detected, and WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-out settings, but lacks visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data and security headers suggests areas for improvement to enhance trust and compliance. Overall, the website presents a credible and professional business front with good content quality and technical implementation. Strategic recommendations include improving domain registration transparency, adding security headers, and publishing security policies to strengthen the security posture and trustworthiness.

P

PKS servis spol. s r. o.

pks-elektro.cz

58

PKS servis spol. s r. o. is a Czech-based company specializing in the design, manufacturing, installation, and servicing of low-voltage electrical equipment. Their expertise includes PLC programming primarily for Siemens systems, electrical panel production, and comprehensive maintenance services. The company operates multiple divisions and partner brands, indicating a medium-sized enterprise with a solid market presence in the energy and manufacturing sectors. The website is professionally designed, mobile-optimized, and provides clear contact and service information, supporting a business model focused on direct client engagement and e-commerce through an associated eshop. Technically, the website employs modern web technologies including Bootstrap, jQuery, and cookie consent management tools, ensuring a responsive and user-friendly experience. Analytics and tracking are implemented via Google Tag Manager and Leady, with a strong emphasis on user privacy through an opt-out cookie consent mechanism. However, some security best practices such as explicit security headers and detailed incident response policies are not evident. From a security perspective, the site benefits from HTTPS encryption and no visible vulnerabilities or exposed sensitive data. The cookie consent implementation aligns with GDPR requirements, and contact information is clearly presented. The absence of WHOIS data for the domain is a notable concern, reducing the trustworthiness of the domain registration and requiring further verification to confirm legitimacy. Overall, the website presents a trustworthy and professional front for PKS servis spol. s r. o., with good technical and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration verification would enhance the security posture and business credibility further.