Security Directory

D

DAFilms

dafilms.cz

55

DAFilms.cz is a niche online streaming platform specializing in curated art-house, documentary, festival, and children's films primarily targeting Czech-speaking audiences. Founded in 2012, it offers a subscription-based model with a focus on unique and authorial film content not commonly found on mainstream platforms. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Cookiebot for GDPR compliance, and reCAPTCHA for bot protection. The site is served over HTTPS with a good SSL configuration, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and links to detailed privacy policies. However, explicit contact and security policies are not readily found on the homepage, which could be enhanced for trust and compliance. Overall, the site is secure, compliant, and well-positioned within its niche market.

R

RESPEKT

respekt.cz

60

RESPEKT.cz is a Czech independent weekly news magazine focusing on current domestic and international politics, economy, culture, and social issues. It offers a subscription-based business model with rich multimedia content including articles, podcasts, photo galleries, and newsletters. The website is professionally designed, mobile-optimized, and targets Czech-speaking audiences interested in in-depth news and commentary. Technically, the site uses modern frameworks such as React and Next.js, with good performance and SEO practices. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not clearly found in the content. WHOIS data is unavailable, which slightly impacts trust but the overall presentation and content quality indicate a legitimate media entity. Strategic recommendations include publishing clear privacy and cookie policies, providing contact information for security incidents, and enhancing transparency on data protection.

C

Cecoforma S.A

creative-europe-media.eu

60

Creative Europe MEDIA is a specialized platform providing comprehensive information on training and mentoring courses supported by Creative Europe MEDIA, targeting audiovisual professionals across Europe. The website serves as a central hub for accessing a wide range of educational programs, workshops, and industry networking opportunities, positioning itself as a key resource within the European media training ecosystem. The business operates primarily in the media sector, with a focus on animation, documentary, production, and related audiovisual disciplines, and is based in Belgium under the legal entity Cecoforma S.A. Technically, the website employs modern JavaScript technologies, integrates Google reCAPTCHA for form security, and uses Matomo and Google Analytics for user behavior tracking with privacy compliance mechanisms such as cookie consent banners. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent with opt-in/out capabilities, and protects forms with reCAPTCHA. However, it lacks explicit security headers and a public vulnerability disclosure policy, which are recommended for enhanced security posture. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong compliance to privacy regulations. The domain registration details align with the business claims, supporting legitimacy. Strategic recommendations include implementing additional security headers, publishing a vulnerability disclosure policy, and enhancing incident response transparency.

C

Centrum dokumentárního filmu

c-d-f.cz

10

Centrum dokumentárního filmu (CDF) is a Czech non-profit organization focused on documentary film education, research, and cultural promotion. The website offers courses in film and media education, a videotéka (film library), a documentary book library, and research/production services. It targets educators, students, researchers, and film enthusiasts primarily in the Czech Republic. The organization collaborates with notable partners such as MFDF Ji.hlava and is supported by governmental and EU bodies, indicating a credible cultural institution. Technically, the website uses a modern JavaScript stack including jQuery, Knockout.js, and Owl Carousel, with Google Analytics for tracking. The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are evident, and some security headers appear missing, which could be improved. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic but present, with a privacy policy and cookie consent banner. The absence of WHOIS data limits domain legitimacy verification, but the website content and partnerships strongly suggest a legitimate entity. Overall, the site is professionally designed, content-rich, and trustworthy, though improvements in security headers and transparency policies are recommended to enhance compliance and trust further.

D

DOC.DREAM

dokrevue.cz

42

DOK.REVUE is a specialized Czech media outlet focused on documentary films, offering articles, podcasts, and cultural insights primarily to a Czech-speaking audience. Supported by national cultural institutions, it maintains a niche but reputable position in the documentary film community. The website is professionally designed with consistent branding and offers newsletter subscriptions and social media engagement to its audience. Technically, the site uses modern JavaScript libraries and lazy loading techniques to optimize performance and user experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration for form protection, although some security headers are not evident in the provided data. Privacy compliance is addressed with a cookie consent mechanism and a linked privacy policy hosted on a partner domain. The absence of WHOIS data reduces domain trustworthiness, but the website content and external references support its legitimacy. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in security headers and accessibility.

I

Inspirační fórum

inspiracniforum.cz

43

Inspirační fórum is a Czech non-profit platform associated with the International Documentary Film Festival Ji.hlava, focusing on societal, scientific, artistic, and political discourse. It serves as a hub for discussions, workshops, and projects that engage a diverse audience interested in contemporary global issues. The platform is supported by numerous reputable partners, including European institutions and cultural organizations, enhancing its credibility and reach. Technically, the website employs modern JavaScript libraries and is optimized for mobile devices, providing a smooth user experience. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS data and explicit security headers slightly detracts from its overall trustworthiness. No critical security vulnerabilities or adult content were detected, making the site safe for general audiences.

Terre Nourricière is a small French communication agency specializing in ethical and engaged communication services targeted at actors in environmental education, international solidarity, and peasant agriculture sectors. Their key offerings include web and mobile development, graphic design, video production, educational tools, and consulting/training services. The website presents a professional and consistent brand image with clear navigation and relevant content for their niche audience. Technically, the website uses modern front-end libraries such as Bootstrap 4.5.2, jQuery, Slick Carousel, and Typed.js, with Google Analytics for tracking. The site appears mobile-optimized and moderately performant. The CMS is likely SPIP based on URL patterns and form tokens. However, no advanced security headers or explicit privacy/cookie policies are present, and WHOIS data is unavailable, limiting domain transparency. Security posture is moderate with some best practices like honeypot anti-spam fields and CSRF tokens in forms, but lacks HTTP security headers and visible incident response contacts. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is safe and professional but would benefit from enhanced security and privacy measures. Recommendations include implementing security headers, publishing privacy and cookie policies with consent, improving WHOIS transparency, and adding incident response contacts to strengthen trust and compliance.

H

Dr. Heidi Sevestre : Glaciologist, Speaker, Author

heidisevestre.com

62

The website www.heidisevestre.com appears to be a portfolio or personal site built on the Wix platform, likely showcasing photography or art. The site uses standard Wix technologies and scripts, indicating a moderate level of technical infrastructure typical for Wix-hosted sites. However, the site lacks critical business and security information such as privacy policies, cookie consent mechanisms, contact details, and terms of service. The WHOIS data is unavailable or indicates the domain may not be registered, which raises concerns about the legitimacy and trustworthiness of the domain. Security posture is basic with HTTPS enabled but missing important security headers and policies. Overall, the site is accessible without WAF or blocking mechanisms but provides minimal content and business credibility.

ZEDD is a small, French communication agency based in Grenoble specializing in responsible and sustainable communication services. The company positions itself as a pioneer in the Auvergne Rhône-Alpes region, offering consulting, creation, development, and maintenance services with a focus on eco-conception and digital responsibility. The website content is professionally presented in French, targeting organizations seeking sustainable communication solutions. Technically, the website uses modern web technologies including JavaScript, CSS, and SVG graphics, with the SPIP CMS platform. Hosting is local to Grenoble, leveraging a datacenter with a positive carbon footprint, reflecting the company's environmental values. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are present. No privacy or cookie policies are found, indicating gaps in GDPR compliance. Contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are visible. No tracking or advertising scripts were detected, suggesting minimal user tracking. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

The website themepanthers.com currently serves as a minimal landing page promoting 'Steelthemes', which offers pixel perfect WordPress themes targeted at creative professionals. The business appears to be small and relatively new, founded around 2020, with a focus on theme sales and distribution. The site content is very limited, lacking detailed business information, contact details, or user engagement features. Technically, the site is hosted on servers indicated by the nameservers mysecurecloudhost.com and registered via GoDaddy.com, LLC. There is no evidence of modern web technologies, security headers, or HTTPS enforcement, which indicates a low level of digital maturity and security posture. Security-wise, the absence of HTTPS, security headers, and privacy policies presents significant risks and compliance gaps. No incident response or vulnerability disclosure information is available, and no tracking or analytics tools are detected. Overall, the site is low trust and low professionalism, with critical recommendations to improve security, privacy compliance, and content richness.

techka s.r.o. is a small Czech Republic based company specializing in custom web and e-commerce development services, leveraging popular platforms such as WordPress and Shoptet. The company targets businesses and individuals seeking tailored website and online shop solutions. The website content is minimal but relevant, providing basic company information and links to partner projects. Technically, the site uses standard HTML and CSS with Google Fonts, but lacks advanced frameworks or CMS detection. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and company details appear consistent with a legitimate small business. Overall, the site demonstrates basic digital maturity with room for improvement in security, privacy compliance, and technical sophistication.

The website browsiprod.com appears to be an API or protected resource rather than a traditional public-facing website. The content is inaccessible without a required HTTP header 'X-API-Key', indicating that the site is likely intended for authorized users or applications only. Due to this restriction, no meaningful content, metadata, or contact information is available for analysis. The domain is registered with Amazon Registrar, Inc. since 2016, which aligns with a plausible business timeline but lacks further public business details. The technical infrastructure appears minimal from the provided data, with no visible security headers or SSL configuration details. The security posture cannot be fully assessed due to lack of accessible content, but the absence of standard security and privacy policies is a concern. Overall, the site presents a low trust profile due to inaccessibility and lack of transparency.

G

GARVIS Solutions s.r.o.

reenio.cz

71

REENIO, operated by GARVIS Solutions s.r.o., is a Czech-based online reservation system offering a cloud-hosted SaaS platform tailored for businesses providing direct customer services such as sports facilities, wellness centers, education, and cultural events. The platform supports free and paid subscription models, integrates secure online payments, and emphasizes ease of use and customer communication. The company holds a strong market position in the Czech Republic with a focus on GDPR compliance and continuous product development.

Eadmin Cloud is a small Czech Republic-based technology company founded in 2021, specializing in delivering modular web components and eCommerce solutions such as product recommendation engines, payment gateways, and process automation tools. Their market position is niche, targeting businesses seeking to enhance or build eCommerce platforms with specialized components. The website content is professional and focused, with clear service offerings and pricing models presented in structured JSON-LD data. Technically, the site uses modern JavaScript ES modules and is hosted with Google Cloud DNS, but lacks visible CMS or frameworks. Performance and mobile optimization are moderate to basic, with room for improvement in accessibility and SEO. Security posture is average; while domain registration practices are sound and domain status flags protect against unauthorized changes, the site lacks DNSSEC, security headers, and published privacy or cookie policies. No forms or analytics scripts are detected, indicating minimal data collection and tracking. Overall, the site is trustworthy but could improve compliance and security transparency.

Centario, s.r.o. is a small Czech Republic-based company specializing in the development of web applications and projects. The website serves as a basic informational portal presenting company contact details, legal identifiers, and a brief description of services. The business appears to target local clients seeking web development services, positioning itself as a small but established player in the technology sector since 2011. The company provides clear contact information and legal registration data, supporting its legitimacy and trustworthiness. Technically, the website employs basic modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses a Google font for styling. Hosting and domain registration are managed by WEDOS, a known Czech hosting provider. The site is simple with minimal content and no interactive forms, which reduces complexity but also limits user engagement. Performance and mobile optimization are basic but functional. SEO and accessibility features are minimal, indicating room for improvement in digital maturity. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance and user trust. The use of Google Analytics is configured to deny ad and analytics storage by default, showing some privacy consideration. No forms or user input fields reduce attack surface, but the absence of incident response contacts or vulnerability disclosure policies indicates limited security maturity. WHOIS data is consistent and transparent, reinforcing the domain's legitimacy. Overall, the website is safe and professional but basic, with moderate risk due to missing compliance documentation and security best practices. Strategic improvements in privacy compliance, security headers, and digital maturity would enhance trust and reduce potential vulnerabilities.

V

VC4A

vc4a.com

62

VC4A is a well-established platform founded in 2010 that supports entrepreneurs, investors, mentors, and organizations primarily in Africa and Latin America. It serves as a comprehensive ecosystem for startup acceleration, offering services such as venture promotion, investor networking, mentorship, and program management. The platform is recognized and trusted by prominent global partners, enhancing its market credibility and reach. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses domain locking mechanisms but lacks DNSSEC and some advanced security headers. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, VC4A presents a professional, trustworthy, and secure online presence aligned with its business objectives.

Datadog is a leading enterprise SaaS provider specializing in cloud infrastructure monitoring, application performance monitoring, log management, and security monitoring. The website analyzed is the login portal for the EU region, reflecting a professional and secure platform designed for developers, IT operations teams, and business users. The platform leverages modern web technologies and CDN hosting to ensure fast and reliable access. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance indicators are limited in the provided content, with no visible privacy or cookie policies. Overall, the domain appears legitimate and consistent with a reputable enterprise SaaS provider, despite WHOIS privacy protection.

A

ABOUT YOU

aboutyou.com

68

ABOUT YOU is a large online fashion retail platform operating in Finland, offering over 1500 brands with fast delivery and a 30-day return policy. The website demonstrates a professional design with good content quality and consistent branding, targeting general consumers interested in fashion e-commerce. Technically, the site uses modern JavaScript libraries, asynchronous script loading, and integrates Usercentrics for consent management and Datadog for logging, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and logging mechanisms in place, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partially addressed via cookie consent mechanisms, but lacks visible privacy and terms of service documentation. Overall, the site is trustworthy and safe for general audiences, with a moderate to good AI-assessed quality and security score.

A

AVISIA

avisia.fr

74

AVISIA is a French consulting firm specializing in data, artificial intelligence, and digital marketing solutions. Established since 2007, the company supports projects combining data and AI technologies to deliver decision-making solutions. The website reflects a professional and consistent brand presence targeting businesses seeking expert consulting in these domains. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit privacy or security policies. WHOIS data is not publicly available, indicating privacy protection, which is common and justified for this business type. Overall, the site is trustworthy and professional but could improve transparency regarding privacy and contact information.

The website joinjfd.com is currently inaccessible to visitors, returning a 403 Forbidden error page. This indicates that access to the site or page is blocked or restricted, preventing any meaningful content or business information from being displayed. The domain is registered since 2020 with EuroDNS S.A. and uses SiteGround nameservers for hosting. However, the lack of accessible content, absence of privacy or cookie policies, and no contact information severely limit the ability to assess the business or security posture. Technically, the site shows no evidence of modern web technologies, analytics, or security headers, and the user experience is poor due to the access restriction. Overall, the site is not currently suitable for public or customer interaction and requires remediation to restore access and provide essential business and compliance information.

S

SNCF Group

groupe-sncf.com

58

SNCF Group is a leading global player in low-carbon mobility, specializing in passenger transport and freight logistics. The company operates internationally with a large workforce and a diversified portfolio of subsidiaries including SNCF SA, Keolis, and GEODIS. Their business model focuses on sustainable transportation solutions and mass transit services, positioning them as a world leader in their sector. The website reflects a mature digital presence with comprehensive content targeting various stakeholders such as job seekers, investors, journalists, suppliers, and travelers. Technically, the site leverages modern frameworks like Next.js and React, integrates advanced consent management and bot protection, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS and bot mitigation, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and branding. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability for trust enhancement.

E

ENGIE

engie.fr

63

ENGIE France is a major energy company focused on accelerating the transition to a carbon-neutral world through renewable electricity and gas production, distribution, and infrastructure services. The website reflects a strong market position as a leader in solar, wind, and biomethane production in France, targeting individuals, professionals, enterprises, and public entities. The digital infrastructure uses modern technologies such as Tailwind CSS, GSAP, and Matomo analytics, with a custom ENGIE design system ensuring consistent branding and good user experience. Security posture is moderate with cookie consent implemented and no obvious vulnerabilities detected, though explicit security policies and headers are not evident. WHOIS data is unavailable likely due to privacy protection, but the website's professional presentation and linkage to official ENGIE domains support legitimacy. Overall, the site is well-designed, compliant with privacy regulations, and trustworthy, though improvements in security transparency and contact information availability are recommended.

V

VC4A

vc4africa.com

62

VC4A is a well-established technology platform founded in 2010 that supports startups, investors, mentors, and organizations primarily in Africa and Latin America. It offers a comprehensive ecosystem including startup acceleration, investor deal flow, mentorship, and program management services. The platform is recognized and trusted by reputable global partners, enhancing its market position as a leading startup support platform in emerging markets. Technically, the website is built on WordPress with modern JavaScript libraries and uses Cloudflare for DNS and CDN services. It implements HTTPS with a good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. However, DNSSEC is not enabled, and no explicit security policy or incident response contact information is published, which are areas for improvement. Overall, the site is professional, secure, and privacy-conscious, with a high trustworthiness rating.

B

Broker Vision

brokervision.cz

30

Broker Vision is a professional insurance brokerage company based in the Czech Republic, specializing in industrial and commercial risk insurance with over 20 years of experience. The website presents a clear business focus on providing advantageous insurance contracts and comprehensive claims handling services. The company targets industrial and commercial clients seeking reliable insurance solutions. Technically, the website uses standard web technologies including jQuery, Owl Carousel, Google Fonts, and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and publicly available security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and security practices.

M

Mister Mix Dog

mistermixdog.sk

57

Mister Mix Dog is a well-established family business specializing in premium cold-pressed dog food produced in Tuscany, Italy. With over 30 years of tradition and 40 years of experience in zootechnics, the company targets dog owners, breeders, and sports dog handlers primarily in Slovakia and neighboring countries. Their product range includes specialized dog foods tailored to various life stages and health needs, complemented by natural vitamins and supplements. The website is professionally designed, leveraging the Shoptet e-commerce platform, and provides clear contact information and social media presence.

N

Not explicitly stated

pombilitiopfolda.com

64

The website provides detailed information about POMBILITI® (cipaglucosidase alfa-atga) + OPFOLDA® (miglustat), an FDA-approved two-component therapy for adults with Pompe disease. It serves as an educational and support platform targeting patients and healthcare providers, offering clinical trial results and resources. The site is built using modern web technologies including React and Gatsby, with a focus on accessibility and mobile responsiveness. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is professional, trustworthy, and aligned with healthcare industry standards.

C

CHRYSALIDE

cae29.coop

52

CAE 29 is a French cooperative organization under the legal entity CHRYSALIDE, founded in 2014, providing shared enterprise and employment cooperative services primarily in the Finistère region. The website serves as an informational and engagement platform for entrepreneurs and project holders seeking cooperative business support, administrative delegation, and training. The business model focuses on collective entrepreneurship and professional autonomy within a cooperative framework, positioning CAE 29 as a regional leader in this niche. Technically, the website is built on the SPIP CMS platform, hosted by Gandi SAS, and uses standard web technologies including JavaScript and CSS. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. However, there is room for improvement in accessibility and modern security practices. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no cookie consent mechanism or detailed privacy policy, which may pose compliance risks under GDPR. No incident response or security policy information is published, and no analytics or tracking services are detected, indicating minimal user tracking. Overall, CAE 29 presents a trustworthy and professional online presence with a solid business foundation. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.

I

Interpole

mon-parcours-collaboratif.fr

51

Interpole is a small, community-driven educational platform based in France, focusing on collaborative work, digital tools, and commons creation. It integrates content from the 'Mon Parcours Collaboratif' project, providing resources and guides for collaborative project management and digital tool usage. The website uses YesWiki CMS with Bootstrap and FontAwesome, hosted by OVH, and presents good content quality and user experience. However, it lacks formal privacy, cookie, and security policies, and does not provide explicit contact information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain registration is consistent and legitimate, supporting trust in the platform. Overall, the website is safe, professional, and targeted at general audiences interested in collaborative digital work.

R

Renault

renew.ma

46

Renew Maroc operates as an official online platform for certified used Renault vehicles in Morocco, offering a comprehensive range of services including vehicle sales, financing, trade-in, assistance, and insurance. The website is professionally designed with clear navigation and targets Moroccan consumers interested in purchasing certified used Renault cars. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and domain registration transparency, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the platform presents a trustworthy and professional presence in the Moroccan automotive market.

M

Mobilize Financial Services

mobilize-fs.ma

47

Mobilize Financial Services Maroc is a specialized financial services provider operating since 2005, focusing on automotive financing, insurance, and related services for Renault Group vehicles in Morocco. The company positions itself as a trusted partner offering innovative and comprehensive mobility solutions to both individual and professional customers. The website reflects a mature digital presence with professional branding, clear service offerings, and customer testimonials that reinforce trust. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized and includes SEO best practices, although performance is moderate. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but could be improved by adding explicit security headers and formal incident response contacts. Overall, the site is accessible without WAF or blocking mechanisms, and privacy compliance is well addressed with clear policies and cookie consent. The lack of WHOIS data reduces domain trust slightly, but the strong brand association and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and improving transparency on contact details.

O

Ostravské vodárny a kanalizace a. s.

hledejpramenvody.cz

55

The website www.hledejpramenvody.cz represents Ostravské vodárny a kanalizace a.s., a regional company focused on water supply and ecological education in Ostrava, Czech Republic. The site promotes an educational ecological project targeting 4th and 5th grade students in local schools, emphasizing environmental awareness and water knowledge. The project is supported by the city of Ostrava and offers awards and recognition to participants. Technically, the website uses modern web technologies including HTML5, CSS, JavaScript, and Swiper.js for interactive content. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is limited, with no dedicated privacy or terms pages and minimal cookie consent mechanisms. WHOIS data is unavailable, which reduces trustworthiness but the website content and contact information indicate a legitimate educational initiative. Overall, the site is professional and trustworthy for its target audience but could improve in privacy and security transparency.

H

Hellowork

hellowork.com

65

Hellowork operates as a leading online job board and recruitment platform in France, offering a wide range of employment opportunities, CV management, job alerts, and recruitment services. The website targets job seekers and recruiters, positioning itself as a premier resource in the French employment market. The platform is well-branded and maintains a consistent professional image with strong social media integration and mobile app availability. Technically, the website employs modern web technologies including Turbo Frames, Tailwind CSS, and integrates multiple analytics and marketing tools such as Google Tag Manager, Piano Analytics, and Microsoft Clarity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are missing. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and lack of published security policies or incident response information indicate areas for improvement. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not necessarily indicate illegitimacy given the site's professional presence. Overall, Hellowork presents a mature digital presence with strong business credibility and user engagement, though it would benefit from enhanced security transparency and domain registration clarity.

L

La Théorie du Boxeur

latheorieduboxeur.fr

51

La Théorie du Boxeur is a French documentary film project focusing on the impact of climate change on agriculture, particularly in the Drôme valley. The website serves as a platform to present the film and its investigative content about agricultural resilience and adaptation. The project appears to be a small-scale media initiative with a clear thematic focus on environmental and agricultural issues. The site is professionally designed using WordPress and the Divi theme, with good content relevance and user experience. However, the absence of WHOIS registrant data and lack of visible privacy or cookie policies limit the overall trust and compliance posture. Technically, the site uses modern web fonts and caching plugins but lacks visible security headers and detailed security configurations. No forms or direct contact information are present, which may hinder user engagement and trust. Overall, the site is safe for general audiences and provides valuable documentary content but would benefit from enhanced security and compliance features.

C

CustomGPT.ai

customgpt.ai

65

CustomGPT.ai is a technology startup founded in 2023 specializing in creating custom GPT models tailored from user content for business applications. The company targets businesses and professionals seeking AI-powered solutions to enhance their operations. The website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and CookieYes for cookie consent management. Hosting is provided via Amazon AWS infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, though it lacks visible contact information and formal privacy or terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and published security policies. The domain is privacy protected, consistent with a small tech startup, and shows no suspicious registration patterns.

C

CYMEDICA – partner pro veterinární profesionály

cymedica.cz

62

CYMEDICA is a well-established veterinary partner operating since 1995, serving the Czech Republic and Central and Eastern Europe markets. The company specializes in veterinary product distribution, professional education, and expert consulting, positioning itself as a market leader with a strong regional presence. Their website reflects a mature digital infrastructure with multilingual support, e-commerce capabilities, and active engagement through social media and newsletters. Technically, the site is built on WordPress with WooCommerce and employs modern libraries and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. The absence of WHOIS data is a transparency concern but does not detract from the overall legitimacy indicated by certifications and professional content. Strategic recommendations include improving security headers, publishing vulnerability disclosure information, and enhancing incident response contacts.

The website www.shoptak.cz represents a small Czech company, techka s.r.o. & Tomáš Hlad, specializing in custom design and modification of Shoptet e-commerce templates. They hold a strong market position as a gold partner of Shoptet, serving thousands of e-shops primarily in the Czech and Slovak markets. Their key services include bespoke template creation, template customization, and Shoptet add-ons, targeting e-shop owners seeking tailored UX/UI solutions. The website content is professionally presented with clear navigation and positive client testimonials, reinforcing their credibility. Technically, the site employs modern JavaScript libraries such as jQuery, Slick Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and uses Google Fonts for typography. However, no explicit CMS or hosting provider information is discernible. Performance is moderate with good SEO practices but basic accessibility features. From a security perspective, HTTPS is implied but no security headers were detected in the provided data. The site includes a cookie consent banner indicating some privacy compliance, but lacks explicit privacy, terms of service, or security policies. No WHOIS data was retrievable, which raises concerns about domain registration legitimacy. No vulnerability disclosure or incident response information is present. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from enhanced security practices, explicit privacy documentation, and verification of domain registration details to improve trust and compliance.

R

RUSCONA Česko

ruscona.cz

48

RUSCONA.cz is a professional e-commerce platform specializing in gel nail modeling products and accessories, targeting both professional nail technicians and consumers in the Czech Republic. The website offers a wide range of UV gels, gel polishes, polygels, and related tools, supported by educational courses and a strong brand presence. The site is built on the Shoptet e-commerce platform and integrates modern analytics and marketing technologies such as Google Analytics, TikTok Pixel, Facebook SDK, and Hotjar, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain trust assessment, but the professional presentation and comprehensive content suggest a legitimate and established business. Overall, the site demonstrates good technical implementation, privacy compliance, and business credibility.