Security Directory

E

EQUESTRIAN MANIAC

equestrianmaniac.cz

53

EQUESTRIAN MANIAC is a Czech-based small retail e-commerce business specializing in equestrian clothing and accessories. The website presents a professional and well-structured online store built on the Shoptet platform, targeting equestrian riders and enthusiasts with quality products and a niche market focus. The business emphasizes quality materials, unique design, and passion for horse riding in its branding and product offerings. Technically, the website uses standard web technologies including jQuery, Google Tag Manager, and Facebook SDK, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with visible cookie consent and a privacy policy consistent with GDPR requirements. Overall, the website is trustworthy and functional with room for security and transparency improvements.

A

ABOUT YOU

aboutyou.sk

61

ABOUT YOU is a large online fashion retail platform operating in Slovakia, offering over 1500 brands with services such as free delivery and a 30-day return policy. The website demonstrates a good level of digital maturity, employing modern technologies including Usercentrics for consent management and Datadog for logging and monitoring. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is solid with HTTPS enabled and integration of logging services, though there is room for improvement in security headers and explicit incident response contacts. Privacy compliance is partially addressed through consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Tech Quest Africa is a newly established Nigerian company specializing in software development and digital skills training. The company positions itself as a strategic partner for businesses seeking custom software solutions and individuals aiming to acquire in-demand tech skills. Their offerings include a training academy, business process automation, and custom software development services. The website demonstrates a modern technical infrastructure using JavaScript frameworks and integrates Google Analytics for user insights. While the site is well-designed and mobile-optimized, it lacks some advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. The domain registration is consistent with the business profile, enhancing credibility. Overall, the company shows promise but should enhance its security and privacy posture to align with best practices.

S

Simplon

simplon.co

65

Simplon is a French educational organization specializing in accessible tech training from beginner to advanced levels, including development, cybersecurity, data, and digital skills. The website demonstrates a strong market position with partnerships from major tech companies like IBM, Meta, and Microsoft, and offers a wide range of training services including alternance and personalized career support. Technically, the site is built on Webflow with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security policies and headers could be improved. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

O

OpenClassrooms

openclassrooms.com

67

OpenClassrooms is a well-established online education platform founded in 2008, offering courses and mentorship programs to a global audience. The platform targets students and professionals seeking to develop skills and advance their careers through accessible online learning. The business model combines free and premium content with personalized mentorship, positioning OpenClassrooms as a significant player in the education sector, particularly in France and internationally. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Datadog RUM, Hotjar, Blueshift, and Satismeter. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site demonstrates good mobile optimization and basic accessibility features, with room for improvement in SEO and security headers. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements a comprehensive cookie consent mechanism via TrustArc. However, it lacks DNSSEC, a published security policy, incident response contacts, and a vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture with opportunities for enhancement. Overall, OpenClassrooms presents a trustworthy and professional online presence with strong business credibility and compliance with privacy regulations. Strategic improvements in security transparency and technical hardening would further strengthen its risk profile and user trust.

The website at impactlab.com is currently inaccessible beyond a bot verification challenge page utilizing Google's invisible reCAPTCHA. This security mechanism prevents direct access to the site's actual content, limiting the ability to analyze business, security, and compliance aspects fully. The domain is long-established, registered since 2000 via GoDaddy.com, LLC, with standard domain locks indicating legitimate ownership. However, no business or contact information is visible in the provided HTML content. The technical infrastructure includes reCAPTCHA scripts and hosting on WPX Hosting, but no other technologies or CMS are detectable. Security headers and privacy policies are absent from the accessible content, and no analytics or advertising scripts are present beyond reCAPTCHA. Overall, the site appears to have a strong security posture in terms of bot protection but lacks visible compliance and business transparency in the accessible content.

Boutique Labess is a French e-commerce website dedicated to selling music albums and merchandise related to the musical group Labess, along with promoting upcoming concerts. The website targets fans and customers interested in music-related products, primarily French-speaking audiences. The business operates on the Shopify platform, leveraging its e-commerce capabilities and payment integrations such as Shopify Payments and Apple Pay. The site demonstrates a modern technical infrastructure with good mobile optimization and accessibility features, using the Dawn Shopify theme and various JavaScript modules for enhanced user experience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. It employs hCaptcha for form protection and integrates Facebook Pixel for marketing analytics. However, it lacks explicit privacy and cookie policies, security headers like CSP, and vulnerability disclosure information, which are areas for improvement. DNSSEC is not enabled, which could enhance DNS security. No direct company contact emails or phone numbers are published, relying instead on contact forms and social media channels. Overall, Boutique Labess presents a professional and trustworthy online presence with a solid technical foundation but requires enhancements in privacy compliance and security transparency to meet higher standards. The domain age and registration details support the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to improve trust and compliance.

D

DAGBA.COM

dagba.com

52

DAGBA.COM is a minimalistic business landing page primarily serving as a contact portal for business inquiries. The site offers a simple contact form protected by Google reCAPTCHA to mitigate spam. The website uses modern frontend technologies such as Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, the site lacks detailed business information, privacy policies, or terms of service, which limits its professional and compliance posture. The absence of WHOIS registration data for the domain is a significant concern, suggesting either a recent registration, privacy protection, or a misconfiguration. This discrepancy reduces trust in the domain's legitimacy. Security measures are basic, with no detected security headers, but HTTPS is implied by the use of secure URLs. Overall, the site is functional but lacks depth in business, security, and compliance aspects.

A

Activspaces

activspaces.com

33

Activspaces is a prominent technology incubator based in Cameroon, dedicated to fostering innovation and supporting African entrepreneurs. The organization provides a comprehensive ecosystem including startup support, project management, network development, and business development services. Their market position as Cameroon's leading tech hub is reinforced by a professional website and active social media presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enabled but lacks advanced security headers and formal policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professional and business-focused but would benefit from enhanced security and compliance measures.

B

Bemove

bemove.fr

61

Bemove is a French company specializing in negotiating contracts for electricity, gas, and internet services, as well as facilitating moving and relocation processes. It operates as part of the Groupe Figaro, leveraging a network of 10 specialist websites that collectively attract over 4 million monthly visits. The company targets French households and families seeking to optimize their utility contracts and simplify moving procedures. Key services include contract negotiation, moving assistance, and daily savings on household expenses. The website reflects a professional and consistent brand image with strong partnerships with major energy and telecom providers. Technically, the website uses modern web technologies including Google Tag Manager and HubSpot forms, with good mobile optimization and SEO practices. The site is hosted securely with HTTPS and employs standard analytics and marketing tools. However, some security headers are not explicitly detected, and there is no visible dedicated security or incident response policy. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces transparency and trust slightly, but the affiliation with Groupe Figaro and visible trust indicators mitigate this concern. Overall, the website is professional, secure, and compliant, suitable for its business purpose. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security culture.

L

LIVEKINDLY

livekindly.co

9

LIVEKINDLY is a lifestyle brand focused on promoting sustainable living through plant-based dining, eco-friendly retail, wellness centers, and educational experiences. The website presents a professional and visually appealing platform targeting consumers interested in conscious and sustainable lifestyles. Technically, the site is built on WordPress with modern plugins and technologies, including SEO optimization and Google reCAPTCHA for form security. However, the absence of privacy and cookie policies and the lack of WHOIS domain registration data present compliance and legitimacy concerns. Security posture is generally good with HTTPS and form protections but could be improved with additional security headers and published policies. Overall, the site is functional and trustworthy from a user perspective but requires verification of domain registration and enhanced privacy compliance.

P

Poool

poool.fr

74

Poool is a technology company specializing in SaaS solutions for digital media publishers, focusing on subscription and audience engagement tools. Their platform offers dynamic journey builders, paywalls, registration walls, and engagement widgets to help publishers increase consumer revenue efficiently. The company serves over 150 publishers worldwide, including notable media brands, positioning itself as a trusted partner in the digital publishing ecosystem. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and incorporates advanced consent management and bot protection technologies. Security posture is strong with HTTPS, security headers, and privacy compliance evident, though explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and trustworthy, with no signs of malicious activity or content blocking.

M

Maddyness

maddykeynote.com

10

Maddyness is a prominent French media company specializing in technology and entrepreneurship, with a strong focus on artificial intelligence. The website www.maddykeynote.com promotes MKIA, an event designed to translate AI trends into actionable initiatives for economic leaders. The platform features a rich program, notable speakers, and partnerships with major industry players, positioning Maddyness as a key influencer in the French tech ecosystem. Technically, the website is built on Webflow, leveraging modern web technologies and multimedia integrations such as YouTube embeds and CMS sliders. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site employs HTTPS and standard security headers, with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and dedicated security or incident response policies suggests room for improvement in privacy compliance and security transparency. Overall, the website presents a professional and trustworthy front, though the lack of WHOIS registration data for the domain raises concerns about domain legitimacy. Verification of domain registration is recommended to fully establish trustworthiness.

U

U Logistique

u-logistique.com

9

U Logistique is a large French logistics company serving the Coopérative U retail cooperative. The company specializes in transport logistics, warehouse management, and supply chain expertise, operating 27 sites and managing millions of parcels annually. The website reflects a professional and consistent brand presence with clear business focus and recruitment efforts. Technically, the site is built on WordPress with modern SEO and analytics tools, including Matomo for privacy-conscious tracking. Security posture is good with HTTPS and cookie consent implemented, though additional security headers and explicit policies are recommended. The absence of WHOIS domain registration data is a concern for domain legitimacy and should be investigated. Overall, the site is trustworthy and well-maintained but could improve transparency and security documentation.

A

Addock

addock.co

49

Addock operates as a specialized B2B SaaS platform focused on the tours and activities sector, providing booking and fulfillment solutions tailored for local experience operators and travel brands. The company positions itself as a next-generation technology provider facilitating real-time connectivity between operators, distributors, and customers. The website content and structure reflect a professional approach targeting industry professionals seeking innovative booking solutions. Technically, the site is built on WordPress with Elementor and integrates modern SEO and analytics tools, indicating a moderate to advanced digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. Overall, the site is accessible, well-structured, and trustworthy with room for improvement in privacy and security disclosures.

I

IZUM – Institut informacijskih znanosti, Maribor

cobiss.si

60

COBISS.SI is a well-established Slovenian national library information system portal managed by IZUM, providing comprehensive access to library catalogs, e-book lending, and user profile services. The platform targets library users, researchers, authors, and librarians, offering a centralized and integrated library experience. The website demonstrates a mature digital infrastructure with modern JavaScript libraries and social media integration, supporting good user experience and mobile responsiveness. Security posture is adequate with HTTPS and secure form handling, though improvements in security headers and explicit security policies are recommended. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR through clear privacy and cookie policies. The domain's WHOIS data confirms legitimacy and institutional backing, supporting a high trust level.

T

Tcsard, s.r.o

vycvikvhale.cz

43

The website www.vycvikvhale.cz represents a small Czech social enterprise named Tcsard, s.r.o, specializing in dog training, particularly for rescue dogs and kynological activities. The business model focuses on social entrepreneurship, employing disadvantaged individuals and reinvesting profits into community and economic development. The site offers services including professional training for rescue dog handlers, dog training for the general public, rental of training facilities, and organization of related events and courses. The company maintains an active presence on Facebook and is supported by regional authorities, enhancing its community credibility. Technically, the website employs a traditional tech stack with jQuery 1.11.2, jQuery UI, Flexslider, Fancybox, Google Fonts, Google Analytics, and Mapy.cz API. While functional and moderately performant, the use of outdated JavaScript libraries introduces security risks. The site is served over HTTPS but lacks visible advanced security headers. Mobile optimization and accessibility are basic but adequate. SEO practices are present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site shows moderate maturity. HTTPS is enabled, and a cookie consent banner is implemented, indicating some privacy awareness. However, the absence of privacy and terms of service pages, outdated libraries, and missing security headers reduce the overall security posture. The WHOIS lookup failed to retrieve domain registration data, which raises concerns about domain legitimacy and transparency. No direct company contact emails or phone numbers are publicly listed, limiting direct communication channels. Overall, the website is a functional and community-oriented platform with good content quality and user experience but requires improvements in security practices, privacy compliance, and domain transparency to enhance trust and resilience against threats.

O

ODĚVY HOTOVÝ

odevyhotovy.cz

33

ODĚVY HOTOVÝ is a Czech manufacturing company specializing in work wear, ready-made clothing, leisure clothing, and specialist clothing for various sectors including gastronomy, healthcare, machine industries, craftsmen, and car industries. Established in 1994, the company has a significant regional presence and supplies products primarily in the Czech Republic, Austria, and Germany. Their business model includes both direct production and hired labor manufacturing, with additional services such as embroidery and sewing pattern construction. The website reflects a medium-sized enterprise with a focus on quality Czech products and traditional crafts. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, hosted by REG-ZONER. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No advanced analytics or advertising tools are detected, indicating a focus on informational content rather than marketing. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not disclose privacy, cookie, or incident response policies, which are areas for improvement. No WAF or security challenge is detected, and the domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website is professional and trustworthy with good content quality and technical implementation but requires enhancements in privacy compliance and security best practices to improve its security posture and regulatory adherence.

A

ABF a.s.

for-pets.cz

57

The website for-pets.cz is a professionally maintained event platform managed by ABF a.s., focusing on the 16th trade fair for pet supplies in the Czech Republic. It serves visitors, exhibitors, media, and partners with comprehensive event information, news updates, and registration forms. The site demonstrates a solid market position as a recurring trade fair organizer with established partnerships and sponsorships. Technically, the site uses a custom CMS with Bootstrap and jQuery, integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Piwik. While the site is mobile-optimized and well-structured, it uses an outdated jQuery version and lacks explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no visible security policy or incident response information is provided. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

PsiTrenink.cz – Robert Zlocha

psitrenink.cz

56

PsiTrenink.cz, led by Robert Zlocha, is a professional dog training service based in Prague, Czech Republic, offering both in-person and online training courses. The business emphasizes modern, ethical training methods without physical punishment, targeting dog owners who want to improve communication and obedience with their pets. The website demonstrates a strong market position supported by extensive experience, media presence, and a comprehensive service offering including individual lessons, puppy training, and dog sports.

Haf Bez Obav s.r.o. operates a Czech-language website focused on dog training, boarding, and related pet services. The company targets local dog owners and pet enthusiasts, positioning itself as a niche service provider in the hospitality sector for pets. The website is built on WordPress using the Astra theme and Elementor page builder, hosted by WEDOS Internet, a reputable Czech hosting provider. The technical infrastructure is modern and functional, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no incident response or security policy is published. Privacy compliance is partial, with a GDPR policy linked but no cookie consent mechanism implemented. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

P

První Pomoc Psa

prvnipomocpsa.cz

41

První Pomoc Psa is a Czech-based small business specializing in dog first aid training seminars and related services, including physiotherapy and an e-commerce shop selling dog first aid kits. The company has a solid market position with over 15 years of experience and conducts more than 70 seminars annually, targeting both laypersons and professionals interested in canine emergency care. The website is built on WordPress with WooCommerce integration, leveraging common web technologies such as jQuery, Font Awesome, and Google Analytics for tracking and marketing purposes. The technical infrastructure is moderate in performance and well-optimized for mobile devices, hosted by a reputable Czech provider (WEDOS). Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and visible privacy compliance mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

L

Labvet.cz, s.r.o.

labvet.cz

51

Labvet.cz, s.r.o. operates as a clinical veterinary laboratory and veterinary clinic based in Prague, Czech Republic. The company provides a range of veterinary diagnostic and clinical services including dermatology, reproduction, parasitology stool testing, vaccination, and microchipping. The website targets veterinarians and pet owners, positioning itself as a trusted regional veterinary service provider with a professional team and strong customer testimonials. The business was founded recently in 2022, consistent with the domain registration date. Technically, the website is built on WordPress with common SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and has good content quality and navigation. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. The security posture shows room for improvement, especially in implementing security headers and formal privacy compliance documentation. No WAF or blocking mechanisms were detected, and the site is fully accessible. The domain registration is transparent and consistent with the business profile, enhancing trustworthiness. Overall, Labvet.online is a professional veterinary service website with good business credibility and technical implementation but requires enhancements in privacy compliance and security best practices to improve its security posture and regulatory adherence.

Č

Český kynologický svaz

kynologie.cz

44

Český kynologický svaz (ČKS) is a national Czech organization dedicated to kynology, focusing on dog sports training and breeding. The website serves as an information hub for members and enthusiasts, providing news, event results, organizational details, and resources related to dog training and breeding activities. The site is well-branded with affiliations to recognized bodies such as CMKU and FCI, indicating a strong position in the Czech kynology community. Technically, the site uses a mix of older JavaScript libraries and custom CMS solutions, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks modern security headers and uses outdated libraries, which pose risks. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from technical and compliance improvements.

Českomoravská kynologická unie is a Czech Republic-based organization dedicated to dog breeding, exhibitions, and canine activities. It serves as a national authority providing breed registries, event calendars, official documents, and expert listings for the cynology community. The website is well-structured with clear navigation and relevant content targeting dog breeders and enthusiasts. Technically, the site uses legacy JavaScript libraries like jQuery 2.1.4 and includes custom scripts for galleries and UI elements. Mobile optimization is good, but accessibility and SEO could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is unavailable, limiting domain trust assessment, but the site branding and partner affiliations support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

O

OpenServis

openservis.cz

57

OpenServis is a specialized Czech company providing hosting, module development, training, and consulting services focused exclusively on the PrestaShop e-commerce platform. The company positions itself as a niche expert with official ties to the PrestaShop community, offering tailored hosting solutions optimized for PrestaShop performance and reliability. Their business model revolves around service provision to PrestaShop store owners, including custom module development and training to enhance user experience and operational efficiency. The website reflects a professional and consistent brand image with comprehensive service descriptions and clear contact information. Technically, the website is built on WordPress using the Impreza theme, leveraging modern web technologies such as Google Fonts and jQuery. It is well-optimized for performance and mobile responsiveness, with good SEO and accessibility practices. The site employs HTTPS with excellent SSL configuration and includes a cookie consent mechanism, demonstrating awareness of privacy compliance requirements. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit security headers and incident response information, which could be improved. The absence of WHOIS data limits domain trust analysis, but the website content and business presence indicate legitimacy and professionalism. Overall, OpenServis presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party components to sustain security posture.

P

PSModuly.cz

psmoduly.cz

55

PSModuly.cz is a specialized e-commerce business focused on developing and selling PrestaShop modules, serving primarily PrestaShop e-shop owners and developers. The company has a strong market position in the Czech Republic with over 170 modules available, backed by long experience since 2012 and official recognition as a member of the PrestaShop Committers team. Their business model revolves around direct sales of modules with support and updates, complemented by partnerships for hosting and newsletter services. Technically, the website is built on the PrestaShop CMS platform, leveraging modern web technologies such as JavaScript libraries, Google Fonts, and analytics tools. The hosting is provided by a known Czech hosting partner, OpenServis, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced, security headers present, and GDPR-compliant cookie consent mechanisms. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for its target audience, with moderate user tracking and good privacy compliance.

P

ProfiBeauty Salon

profibeautysalon.cz

56

ProfiBeauty Salon is a Czech Republic based beauty salon specializing in professional hair extension services, hair systems for men, wigs, and other hair care treatments. The website presents a well-structured and professionally designed platform targeting local customers in Prague and Hradec Králové. Key services include various hair extension techniques, hair system solutions, and training courses. The business maintains an active social media presence on Facebook, Instagram, and YouTube, enhancing its market visibility. Technically, the website is built on WordPress with Elementor and uses modern SEO and analytics tools, reflecting a moderate to good digital maturity level. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though some compliance aspects like cookie consent and detailed privacy policies could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support business legitimacy. Overall, the site is professional and trustworthy with room for enhanced privacy compliance and transparency.

P

ProfiBeauty Kurzy

kurzyprodluzovanivlasu.cz

57

ProfiBeauty Kurzy is a Czech-based professional training provider specializing in hair extension and thickening courses. The company offers a range of educational services, including workshops and seminars, supported by a strong online presence and social media engagement. Their business model integrates education, retail through an e-shop, and salon services, positioning them as a comprehensive player in the beauty education sector. Technically, the website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and social signals suggest legitimacy. Strategic improvements in privacy compliance and security headers would enhance overall trust and compliance.

DonorPerfect is a well-established provider of donor management software solutions tailored for non-profit organizations. The analyzed login portal is a secure and professionally designed entry point for users to access their donor management accounts. The platform leverages modern web technologies including Bootstrap, jQuery, and integrates advanced monitoring and analytics tools such as New Relic and Segment Analytics, indicating a mature digital infrastructure. The website enforces strong password policies and uses HTTPS with CSRF protections, reflecting a solid security posture. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact or incident response information, suggests areas for compliance improvement. Overall, the site is trustworthy, safe, and well-positioned within its niche.

K

KBOO

kboo.com

58

KBOO is a well-established community radio station based in Portland, Oregon, operating since 2002. It provides alternative media content and community engagement through live radio streaming, scheduled programs, and volunteer opportunities. The station operates as a non-profit entity funded primarily through donations, memberships, and underwriting. The website reflects a consistent brand and good content quality aimed at local community members interested in alternative and independent media. Technically, the site runs on Drupal 7 with Bootstrap and integrates analytics tools such as Google Analytics and Matomo. While the site is mobile optimized and has good SEO practices, it lacks some modern security headers and cookie consent mechanisms, which are areas for improvement. The domain registration data is consistent with the business claims, indicating a legitimate and trustworthy entity.

K

KBOO

kboo.org

10

KBOO is a well-established community radio station based in Portland, Oregon, providing alternative media content and community engagement since at least 1998, with roots going back to 1968. The station operates as a non-profit entity, funded primarily through donations, memberships, underwriting, and sponsorships. Its market position is that of a trusted local media outlet serving niche audiences interested in diverse and alternative programming. The website reflects this mission with clear navigation, relevant content, and community-focused services such as volunteer opportunities and program proposals. Technically, the website is built on Drupal 7 with Bootstrap and jQuery, integrating modern analytics tools like Google Analytics and Matomo, alongside marketing and engagement tools such as Olark live chat and ShareThis. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting and domain registration are consistent with the organization's profile, with Gandi SAS as registrar and EasyDNS as name servers. From a security perspective, the site uses HTTPS and employs some best practices like DoNotTrack in Matomo. However, DNSSEC is not enabled, and no explicit security headers were detected, which could expose the site to certain risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. No incident response or vulnerability disclosure policies are evident. Overall, KBOO's website is professional, trustworthy, and aligned with its community radio mission. Security and privacy practices could be enhanced to meet modern standards, particularly regarding DNS security and user consent. The site is safe for general audiences, with no adult or explicit content detected.

Line25.com is a niche media website focused on web and graphic design resources, operating since 2009 under Venture Upwards Enterprises, LLC. The site provides articles, free design templates, fonts, and inspiration targeted at designers and creative professionals. The business model appears to be content publishing supplemented by affiliate marketing, particularly evident from recent gambling-related articles. Technically, the site is built on WordPress using popular themes and plugins such as GeneratePress, Elementor, and Yoast SEO Premium, with analytics integrations including Google Analytics, Microsoft Clarity, and GetResponse. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features and cookie consent mechanisms. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. No explicit security or incident response policies are published. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

W

WebAppers

webappers.com

46

WebAppers is a niche content website dedicated to providing high-quality open source web development resources, including articles on tools, WordPress themes, and plugins. The site targets web developers and designers seeking curated information to enhance their projects. It operates primarily through content publishing combined with affiliate marketing and advertising revenue streams. Technically, the site is built on WordPress with common plugins such as Yoast SEO and integrates multiple third-party scripts for analytics and advertising. The website demonstrates good SEO and mobile optimization but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing key security headers and no visible vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises some concerns about registration legitimacy, although the website content and structure appear professional and trustworthy. Overall, the site is functional and serves its audience well but could improve in privacy compliance and security best practices.

H

Hongkiat.com

hongkiat.com

58

Hongkiat.com is a well-established online platform providing technology, design, and inspiration content primarily targeting web designers, developers, freelancers, and novice users. The site offers a wide range of tutorials, tips, and resources, positioning itself as a valuable knowledge hub in the technology and design space. Its business model relies on content publishing monetized through advertising and affiliate marketing, supported by a professional and consistent brand presence. Technically, the website is built on WordPress CMS with modern SEO practices implemented via Yoast SEO and integrates Google Analytics and Adsense for analytics and monetization. The site demonstrates good mobile optimization, accessibility, and SEO, contributing to a positive user experience. Security-wise, the site enforces HTTPS and uses standard security plugins but lacks explicit security headers and vulnerability disclosure mechanisms, which could be improved. The absence of WHOIS data reduces trust slightly, but the overall content quality and professionalism mitigate this concern. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms are missing. Overall, Hongkiat.com presents a mature digital presence with room for security and privacy enhancements.

W

WPlook Web Agency

wplook.ca

42

WPlook Web Agency is a Montreal-based digital creative agency specializing in WordPress website design and development for enterprise-level clients primarily in Canada and the USA. Founded in 2014, the agency offers a comprehensive suite of services including strategy, design, engineering, and marketing, positioning itself as a trusted partner for large-scale WordPress projects. The website reflects a professional and consistent brand image with clear navigation and multilingual support, targeting business clients seeking expert WordPress solutions. Technically, the website is built on WordPress CMS with modern tools such as Yoast SEO, Contact Form 7, Google reCAPTCHA, and Google Tag Manager. The use of the Foundation framework and jQuery indicates a mature but somewhat traditional tech stack. Performance and mobile optimization are good, though accessibility features are basic. The hosting provider is not explicitly identified, but domain registration is managed by eNom Canada Corp. From a security perspective, the site employs HTTPS and reCAPTCHA to protect forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data shows privacy protection for the registrant, which is justified for this business type, and the domain age aligns with the company's founding date, supporting legitimacy. Overall, WPlook Web Agency presents a credible and professional online presence with room for improvement in privacy compliance and security hardening. Addressing these areas will strengthen trust and regulatory adherence, supporting continued growth in the competitive digital agency market.

L

Lemon

lemon.fr

10

Lemon.fr is a French online platform specializing in the comparison of telecom offers including internet boxes, mobile plans, and VPN services. Founded in 2013, it serves French consumers seeking to optimize their telecom subscriptions by providing comprehensive comparison tools and subscription management applications. The website is well-positioned in the niche telecom comparison market in France, offering a user-friendly experience with good SEO and structured data integration. Technically, the site is built on WordPress CMS, leveraging modern web technologies such as jQuery, Google Analytics 4, Google Tag Manager, and a GDPR-compliant consent management platform (Didomi). Hosting and DNS services are provided by reputable providers OVH and Cloudflare, ensuring reliable performance and security. The site demonstrates moderate to good performance and mobile optimization. From a security perspective, Lemon.fr enforces HTTPS and uses a consent management platform to comply with privacy regulations. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with a cookie consent mechanism, though no explicit privacy policy or terms of service pages were detected in the analyzed content. Overall, Lemon.fr presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing direct contact information to improve user trust and compliance transparency.

N

Numerama

numerama.com

67

Numerama is a French media outlet specializing in digital society and technological innovation news and analysis. It offers comprehensive content including dossiers, analyses, and current affairs, targeting a general audience interested in technology and societal impacts. The website supports a premium subscription model (Numerama+) to provide additional content. Technically, the site is built on WordPress and integrates multiple modern analytics and advertising technologies such as Google Analytics, Piano Analytics, Amazon Ads, and Didomi for consent management. The site is well-optimized for mobile and SEO, with good accessibility features and structured data markup. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and branding appear professional and trustworthy. Overall, Numerama demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

C

CRnet, s.r.o.

ecanis.cz

44

eCanis.cz is a Czech online kynology magazine operated by CRnet, s.r.o., providing a rich array of expert articles, interviews, podcasts, and real-life stories focused on dogs and dog training. The site maintains a consistent publishing schedule with at least one new article daily and serves as an official media partner of the Czech-Moravian Cynological Union (ČMKU). The business model combines media publishing with e-commerce offerings and advertising partnerships, targeting dog enthusiasts and kynology professionals primarily in the Czech Republic. Technically, the website employs a traditional web stack with jQuery, jQuery UI, Flexslider, and Fancybox, alongside Google Fonts and Google Analytics for tracking. The site uses HTTPS and includes a cookie consent banner, but some JavaScript libraries are outdated, which may pose security risks. Mobile optimization and accessibility are basic but functional, and SEO practices are moderate. From a security perspective, the site benefits from HTTPS and secure login forms but lacks visible security headers and uses older JavaScript libraries. No explicit privacy policy or terms of service pages were found, which impacts privacy compliance. WHOIS data is unavailable, limiting domain registration trust analysis, but the website's partnerships and content suggest legitimacy. Overall, eCanis.cz presents a professional and trustworthy online presence within its niche, though improvements in security practices, privacy transparency, and technical modernization are recommended to enhance its risk posture and compliance standing.

M

motoTrasy.com - cestování na motorce

mototrasy.com

40

motoTrasy.com is a niche web platform dedicated to motorcycle enthusiasts primarily in the Czech Republic region. It provides a community-driven environment where users can share motorcycle routes, interesting places, and multi-day trips. The website offers user registration and login features to personalize content sharing. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.11.2, jQuery UI, and plugins like Nivo Slider and Fancybox, alongside modern mapping libraries like OpenLayers. Google Analytics is employed for user tracking, but no visible cookie consent or privacy policies are present, indicating limited privacy compliance. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated libraries with known vulnerabilities. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and partner links suggest a legitimate community platform. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

T

treninksepsem, s.r.o.

treninksepsem.cz

40

The website treninksepsem.cz represents a small Czech company, treninksepsem, s.r.o., specializing in dog training services including individual lessons, puppy training, and rescue dog training. The business is positioned as a specialized provider with over 25 years of experience, targeting dog owners seeking professional training and behavioral improvement for their pets. The site content is well-structured, professionally presented, and focused on its niche audience. Technically, the website uses a traditional tech stack with jQuery 1.11.2, jQuery UI, Flexslider, and Fancybox, along with Google Fonts and Font Awesome. While the site is served over HTTPS with a good SSL configuration, it uses an outdated jQuery version that may expose it to security vulnerabilities. The site lacks modern security headers and does not appear to have a CMS or advanced frameworks. Performance and mobile optimization are moderate to basic. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating some privacy awareness. However, the absence of a privacy policy, terms of service, and security headers reduces its compliance posture. The WHOIS data is unavailable, which raises concerns about domain legitimacy and registration transparency. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is functional and professional but requires improvements in security practices, privacy compliance, and domain registration transparency to enhance trustworthiness and reduce risk.

T

Tričkař.cz - nejenom ručně kreslená trička

trickar.cz

43

Tričkař.cz is a small Czech Republic based e-commerce retailer specializing in original hand-drawn designs and digital textile printing, primarily on T-shirts and related apparel. The website showcases a niche market focus with custom and personalized products, targeting customers interested in unique, artistic clothing. The technical infrastructure uses a mix of legacy and modern JavaScript libraries, with integration of external services such as Mapy.cz for mapping and Google Fonts for typography. The site is accessible, uses HTTPS, and includes cookie consent mechanisms, but lacks explicit privacy and terms of service documentation. Security posture is moderate with secure forms and HTTPS but missing security headers and vulnerability disclosures. Overall, the website is functional and professional but could improve compliance and security transparency.

C

CRnet, s.r.o.

engravia.cz

42

Engravia.cz is a specialized small business based in České Budějovice, Czech Republic, offering laser engraving and cutting services primarily focused on wood, stainless steel, leather, and plastic materials. The company provides personalized gifts and custom manufacturing solutions with a business model combining service and e-commerce. Their market position is that of a local niche specialist with a consistent brand presence and a professional website showcasing detailed product offerings and customer engagement features such as login and registration. Technically, the website employs a moderately modern tech stack including jQuery, jQuery UI, Google Analytics, and Mapy.cz API for mapping. While the site is accessible and well-structured with good SEO and content quality, some technical improvements are recommended, such as updating JavaScript libraries and enhancing mobile optimization and accessibility. From a security perspective, the site uses HTTPS and has secure login forms, but lacks visible security headers and explicit privacy or terms of service pages. The cookie consent banner is present, indicating some level of privacy compliance. No critical vulnerabilities or exposed sensitive data were detected, but updating security practices and adding formal policies would strengthen the security posture. Overall, the website is trustworthy and professional with moderate risk due to missing WHOIS data and some security best practices. Strategic recommendations include implementing security headers, publishing privacy and terms policies, updating libraries, and improving mobile and accessibility features to enhance user trust and compliance.

M

M. G. C. Trade, s. r. o.

mountain-gorilla.cz

53

Mountain Gorilla Coffee is a Czech-based specialty coffee and chocolate e-commerce retailer focused on high-quality products sourced from East Africa, particularly Uganda. The company integrates social responsibility by contributing a portion of sales to mountain gorilla conservation efforts. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and comprehensive product information. The business targets coffee enthusiasts who value quality and social impact. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and integrates multiple analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility compliance.

Ú

Úklid J+J

uklidjj.cz

57

Úklid J+J is a professional cleaning company operating primarily in the Czech Republic, offering a wide range of cleaning services including upholstery, carpets, sofas, windows, blinds, and vehicle interiors. The company targets both residential and commercial customers across multiple cities such as Hradec Králové, Trutnov, and Prague. Their market position is that of a regional service provider with a focus on quality and customer satisfaction, supported by testimonials and detailed service pricing. Technically, the website is built on the Webnode CMS platform, hosted via Cloudfront CDN, and employs modern web technologies with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and has a cookie consent mechanism but lacks some advanced security headers and explicit GDPR compliance details. The absence of WHOIS data reduces domain trust, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a moderate to good digital maturity with room for security and privacy improvements.

M

Město Kaplice

mestokaplice.cz

48

Město Kaplice operates an official municipal website serving the residents and stakeholders of Kaplice, Czech Republic. The site provides comprehensive information about city governance, public services, news updates, and community engagement initiatives. It targets local citizens and visitors seeking municipal information and services. The business model is that of a public sector entity providing transparent access to city administration and resources. The website is well-branded, consistent, and includes trust signals such as official contact details and social media presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and integrates third-party services like Munipolis for municipal news and Chetty chatbot for user interaction. The site is mobile-optimized, accessible, and uses HTTPS with Google Analytics for traffic monitoring. Cookie consent and privacy policies are implemented, reflecting good privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces trust assessment confidence but the website content and official contact information support legitimacy. Overall, the website is a reliable and professional municipal portal with good content quality and technical implementation. Strategic improvements include adding security headers, incident response information, and obtaining transparent WHOIS data to enhance trust and security posture.

V

VÝSTAVIŠTĚ KROMĚŘÍŽ, a.s.

hobbyvystaviste.cz

51

The website hobbyvystaviste.cz represents a small Czech company, VÝSTAVIŠTĚ KROMĚŘÍŽ, a.s., specializing in organizing unique sales exhibitions across various sectors such as crafts, health, and collectibles. The company operates multiple venues including Kroměříž, Olomouc, and Prague, targeting hobby enthusiasts and the general public interested in creative and handmade products. The site provides event calendars, exhibitor registration, and contact information, positioning itself as a regional event organizer with a clear business focus. Technically, the website is built on the inPage CMS platform, utilizing modern JavaScript libraries such as jQuery, Bootstrap 5.1, Photoswipe, and Magic Grid for UI and image handling. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with a cookie consent mechanism that complies with GDPR requirements, although no explicit privacy policy page was found. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses cookie consent with granular user controls. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable or privacy protected, which is common for small businesses but limits domain registration transparency. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic improvements include publishing a privacy policy, implementing security headers, and adding incident response contact information to enhance security posture and compliance.

G

GALERIE RENSTEIN

galerierenstein.cz

9

Galerie RENSTEIN is a small art gallery based in Jinočany, Czech Republic, offering a curated selection of artworks, catalogs, and scarves through an online e-shop. The website serves as a digital storefront and informational platform for the gallery's exhibitions and sales. The business targets art enthusiasts and collectors interested in unique and decorative art pieces. The gallery operates primarily on a local scale with an online presence to extend its reach. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and Amazon Cloudfront CDN for content delivery. The site is mobile-optimized and includes basic SEO and accessibility features. Performance is moderate, with a clean design and clear navigation, although some advanced security headers are missing. From a security perspective, the site uses HTTPS with a valid SSL certificate, ensuring encrypted communication. A cookie consent banner is implemented, indicating some level of privacy compliance. However, the absence of a privacy policy, terms of service, and WHOIS registrant data reduces transparency and trust. No explicit security headers were detected, and no contact emails or phone numbers were found, limiting direct communication channels. Overall, the website presents a professional and safe platform for its intended audience but lacks some critical compliance and security elements. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance trust and compliance posture.