Security Directory

Père Dodu is a well-established French brand specializing in poultry and prepared food products, operating since 1965. The website serves as a consumer-facing platform providing product information, recipes, and promotional campaigns, targeting general family audiences. The brand maintains consistent and professional digital branding with a focus on facilitating home cooking. Technically, the site is built on WordPress with modern SEO and performance plugins, including Yoast SEO and WP Rocket, and uses Matomo for analytics. The site is mobile-optimized and provides a good user experience, although some broken images were detected which could impact perception. Security posture is solid with HTTPS and standard security headers, but could be improved with enhanced form protections and fixing broken assets. Privacy and cookie policies are present and GDPR compliant, but no explicit contact emails or phone numbers were found, limiting direct contact options. WHOIS data is not publicly available, typical for AFNIC domains, but the domain appears legitimate given the professional site and brand history. Overall, the site is trustworthy, secure, and well-maintained, suitable for its retail and consumer engagement purposes.

V

Vilmorin & Cie

vilmorincie.com

54

Vilmorin & Cie is a French international seed company affiliated with the Limagrain group, specializing in seed production and genetics. The company recently exited the stock market following a simplified public offer by Limagrain, indicating a strategic consolidation. Their website provides corporate information, financial publications, and press releases targeting agricultural professionals and investors. Technically, the site is built on modern web technologies including the Remix React framework, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is mostly addressed with a comprehensive privacy policy, but cookie consent mechanisms are lacking. Overall, the website reflects a professional and credible business presence with room for enhanced security and privacy features.

S

Studo GmbH

studoflow.com

78

Studo GmbH is a European software company specializing in digital solutions for higher education institutions. Their flagship product, Studo Flow, is a SaaS platform designed to help universities digitize and simplify administrative processes through modular, configurable software components. The company targets small and emerging higher education institutions, offering a user-friendly and integrable platform that supports various administrative needs. Their market position is strong as a pioneer in European higher education SaaS solutions, supported by EU and Austrian funding agencies. Technically, the website is well-constructed with modern web technologies, including Cloudflare DNS and CDN services, and uses Piwik PRO for privacy-conscious analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some security best practices such as DNSSEC and explicit security headers could be improved. From a security perspective, the company demonstrates a solid posture with HTTPS enforcement, GDPR compliance, and support for modern authorization frameworks like OAuth, SAML, and LDAP. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit incident response contacts are areas for enhancement. Overall, the website and company present a trustworthy and professional image with a high level of business credibility and technical maturity. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would further strengthen their security and compliance stance.

I

IZUM – Institute of information science

cobiss.net

63

COBISS.net operates as a cooperative network of library and research information systems primarily serving multiple countries in the Balkan and Central European region. Managed by IZUM – Institute of information science, the platform provides shared bibliographic cataloguing, union catalogues, and current research information systems, supporting libraries and academic institutions. The network is well-established with a domain age of over 20 years and a strong institutional backing. Technically, the website uses a custom-built platform with Java and Oracle backend technologies, supported by modern front-end frameworks like Bootstrap and jQuery. The site is moderately performant and mobile-optimized, with good navigation and content relevance. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with a privacy-related accessibility statement but no explicit cookie or privacy policies on the main site. Overall, the website is professional, trustworthy, and serves a specialized educational and research audience effectively.

D

Dobrá kartářka s.r.o.

dobrakartarka.cz

45

Dobrá kartářka s.r.o. operates a Czech-language website offering esoteric services including tarot and runic card readings, primarily through online content and phone consultations. The company targets a general audience interested in fortune telling and spiritual guidance, positioning itself as a trusted and established provider in the Czech market. The website features a magazine, catalog of card readers, and online tools for free card readings, supported by professional phone services with clear pricing. Technically, the site is built on WordPress with common plugins for SEO, forms, and social sharing, and it demonstrates good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit privacy policy or terms of service pages were found. WHOIS data is privacy protected, which is typical for this business type. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

SVČ Lužánky is a well-established educational and leisure center based in Brno, Czech Republic, offering a wide range of activities including clubs, courses, camps, and events targeted primarily at children, youth, families, and schools. The organization operates as a non-profit entity focused on providing quality extracurricular and educational experiences. The website reflects a professional and modern digital presence, built using Next.js and React technologies, optimized for mobile devices and accessibility. It features comprehensive content, clear navigation, and integration with social media platforms, enhancing user engagement and outreach. Security posture is solid with HTTPS enforced and secure form handling, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, but the overall site professionalism and transparency in contact information support legitimacy. Strategic recommendations include enhancing security headers, adding explicit cookie consent, and publishing incident response policies to strengthen trust and compliance.

Z

Zámecké návrší z. ú.

zamecke-navrsi.cz

50

Zámecké návrší z. ú. is a cultural and hospitality organization based in Litomyšl, Czech Republic, managing the Zámecké návrší area, a UNESCO heritage site. The organization offers accommodation, event space rental, cultural activities, and visitor experiences, targeting tourists, families, and event organizers. The website reflects a medium-sized non-profit entity with a strong regional presence and official partnerships with local government and tourism bodies. Technically, the website uses modern web technologies including Google Analytics, Google Tag Manager, and a custom CMS likely based on the Nette Framework. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are missing and no explicit incident response information is provided. Privacy compliance is strong with comprehensive GDPR-aligned policies and a named Data Protection Officer. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and suggesting further verification is needed. Overall, the website is professional, trustworthy, and well-suited for its cultural and hospitality mission.

I

Informační centrum Litomyšl

ticlitomysl.cz

41

Informační centrum Litomyšl operates as a local government-affiliated tourism and cultural information center serving visitors to Litomyšl, Czech Republic. The website provides comprehensive information on city tours, accommodation, dining, cultural events, and ticket sales, supported by an e-shop for related products. The site is built on Joomla CMS with modern UI libraries, offering a good user experience and mobile responsiveness. However, the absence of privacy and cookie policies indicates a gap in GDPR compliance. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is unavailable, limiting domain trust verification, but the website content and external partnerships suggest legitimacy. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

O

Okultura: Eseje o magických aspektech moderních dějin a soudobého umění

okultura.cz

54

Okultura.cz is a small-scale cultural media website focused on publishing essays about magical aspects of modern history and contemporary art. The website appears to be a content publication platform with a niche audience interested in culture and art. The domain is well-established, registered since 2002, which supports the legitimacy of the site. Technically, the site uses WordPress as its CMS and integrates Google Analytics for visitor tracking. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information is provided on the homepage. Security posture is weak with no HTTPS enforcement or security headers detected in the provided HTML snippet. Overall, the site has basic content quality and technical implementation but falls short in privacy compliance and security best practices.

Radio Čas s.r.o. is a well-established regional radio broadcaster in the Czech Republic, founded in 1998 and operating primarily in the Moravia and Silesia regions. The company offers radio broadcasting, online streaming, podcasts, event ticket sales, and promotional competitions. The website reflects a professional and modern digital presence built on WordPress, with a focus on user experience and content delivery. The technical infrastructure includes modern JavaScript libraries and performance optimizations, hosted likely by Active24, a reputable provider. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are needed in security headers and privacy compliance. Contact information is clearly presented, and social media integration is active. Overall, the site is trustworthy and professionally managed, but lacks explicit privacy and cookie policies, which are important for GDPR compliance.

G

Galerie Bijoux Nemesis

bijoux-nemesis.cz

48

Galerie Bijoux Nemesis is a small Czech artisan jewelry business specializing in handmade and original jewelry pieces, including tin jewelry, Swarovski elements, and polymer clay creations. The company also offers jewelry making courses and gift vouchers. Their physical store in Prague is permanently closed, with an emphasis on online sales through their e-shop and social media channels. The website is built on a WebCzech e-shop platform using common JavaScript libraries and Bootstrap for responsive design. While the site is content-rich and user-friendly, it lacks advanced security headers and comprehensive privacy policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the business presence and contact information suggest a legitimate small enterprise.

K

Kvalitní ŽIVOT.com

kvalitnizivot.com

57

Kvalitní ŽIVOT.com is a Czech Republic based e-commerce business specializing in natural health products, primarily focusing on Moringa supplements sourced from Tenerife. The company positions itself as a niche leader offering unique, patented probiotic and telomerase activation products, targeting health-conscious consumers including vegans and vegetarians. The website is professionally designed, with clear navigation, comprehensive product information, and multiple trust indicators such as EU organic certifications and GDPR compliance. Technically, the site runs on the Shoptet e-commerce platform, uses standard analytics and marketing tools, and enforces HTTPS with CSRF protection on forms. However, the WHOIS data for the domain is missing, which raises concerns about domain legitimacy despite the active and professional web presence. Overall, the site demonstrates a good security posture but could improve by updating outdated libraries and adding explicit security headers and incident response contacts.

Pražský Patriot s.r.o. operates an established Czech-language online news portal focused on Prague's local news, politics, culture, transport, and community events. The website serves residents and interested parties in Prague, providing timely news articles, event calendars, and newsletters. It maintains a consistent brand presence and leverages official news agency content, enhancing its credibility in the local media market. Technically, the site employs modern web technologies including JavaScript, Google Analytics, Google Adsense, and Gemius tracking, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though it lacks some advanced security headers and explicit incident response information. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and legitimate. Overall, the site is a reliable local media source with moderate technical and security maturity.

The website casopiskvalitnizivot.cz is currently a parked domain with minimal content, primarily displaying a message that the domain is for sale. There is no active business presence, no contact information, and no privacy or cookie policies. The technical infrastructure is basic, relying on standard JavaScript and XMLHttpRequest calls to third-party ad and tracking domains. No CMS or advanced frameworks are detected. Security posture is weak due to lack of HTTPS information and absence of security headers or policies. Overall, the site lacks professionalism and trust indicators, making it unsuitable for business or user engagement in its current state.

R

Časopis Regenerace – Přirozená cesta ke zdraví a poznání

regenerace.cz

54

Časopis Regenerace is a Czech media publication specializing in natural health, herbal medicine, and holistic wellness. The website offers a variety of articles, special editions, and subscription services targeting Czech-speaking audiences interested in natural healing. The domain is well-established since 1998, supporting the publication's credibility and market presence. Technically, the site is built on WordPress using the GeneratePress theme, with integrations for Google Analytics and advertising via Advanced Ads. The site is HTTPS secured and includes user tracking with opt-out capabilities. However, it lacks visible privacy and cookie policies, security headers, and direct contact information, which are areas for improvement. Overall, the website presents good content quality and user experience but requires enhancements in privacy compliance and security best practices.

The website suenee.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. The domain is registered since 2009 and uses Cloudflare for DNS and security services. Due to the block, no business information, contact details, or policies are available for analysis. The technical infrastructure relies on Cloudflare's security and CDN services, but no CMS or other technologies are detectable from the blocked page. The security posture cannot be fully assessed, but the presence of a WAF indicates some level of protection. However, the lack of accessible content and policies results in a low overall trust and compliance score. Strategic recommendations include resolving the WAF block to allow content access, publishing privacy and cookie policies, and providing clear contact and security information.

A

Arammagnus s.r.o.

arammagnus.cz

59

Arammagnus s.r.o. operates an e-commerce website specializing in magical gifts, spiritual, and esoteric products such as oils, candles, incense, herbs, powders, runes, and ritual statues. The company targets customers interested in spiritual and magical goods primarily in the Czech Republic. The website is well-structured with clear navigation and product categorization, offering a good user experience and professional design. Technically, the site uses a custom e-commerce platform likely provided by ByznysWeb.cz, with modern web technologies including lazy loading and responsive design. Security posture is adequate with HTTPS and some security headers, but lacks advanced protections and published security policies. Privacy compliance is basic with a cookie consent mechanism but no dedicated privacy or terms pages. WHOIS data is missing, which raises concerns about domain registration transparency but does not directly impact the current operational status. Overall, the site is functional, safe, and serves a niche market effectively.

T

Technické služby Tábor s.r.o.

tstabor.cz

44

Technické služby Tábor s.r.o. is a municipal service company based in Tábor, Czech Republic, providing essential public services such as parking management, green area maintenance, public lighting, cemetery management, and animal shelter operations. Established in 1995, the company holds multiple ISO certifications indicating a commitment to quality and environmental standards. The website serves as an informational and contact portal for residents and stakeholders, featuring news updates, service links, and a contact form. The website is built on WordPress with a moderate technical infrastructure including common plugins and scripts such as Contact Form 7 and Google Maps API. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and CAPTCHA on forms, but lacks advanced security headers and cookie consent mechanisms. No WHOIS data is available, which limits domain registration trust analysis. Overall, the security posture is stable but could be improved by implementing security headers, cookie consent, and publishing incident response contacts. The business credibility is strong based on certifications and clear company information. The website content is safe and appropriate for a general audience with no adult or questionable content detected. Strategic recommendations include enhancing security headers, adding cookie consent for GDPR compliance, publishing vulnerability disclosure and incident response information, and improving WHOIS transparency to increase trustworthiness.

T

Technické služby města Litoměřice

tsmlt.cz

60

Technické služby města Litoměřice is a municipal contributory organization established to provide essential technical and communal services to the city of Litoměřice, Czech Republic. Founded in 1995, the organization focuses on maintaining city cleanliness, public green spaces, infrastructure repairs, and other city maintenance tasks. The website reflects a well-established local government service provider with a clear mission and target audience consisting primarily of city residents and local stakeholders. The digital presence is professional, with good content quality and clear navigation, supporting the organization's public service role. From a technical perspective, the website employs a traditional tech stack including jQuery, Google Fonts, and Google Tag Manager for analytics. While the site is mobile-optimized and performs moderately well, the use of an outdated jQuery version suggests some technical debt and potential security risks. The hosting is managed through WEDOS, a Czech hosting provider, consistent with the domain registration data. Security posture is moderate; the site uses HTTPS and has implemented cookie consent mechanisms in compliance with GDPR. However, no explicit security headers or vulnerability disclosure policies are present, and the older JavaScript libraries could expose the site to known vulnerabilities. Contact information and a data protection officer are clearly provided, indicating some compliance with data protection regulations. Overall, the site is trustworthy but could benefit from enhanced security measures and updated technical components. The overall risk assessment is low to moderate, with no critical security issues detected. Strategic recommendations include updating JavaScript libraries, implementing security headers, formalizing security policies, and enhancing privacy documentation to improve compliance and trust. These steps will strengthen the organization's digital security posture and better protect user data while maintaining a professional and accessible web presence.

T

TAS Holešov, s.r.o.

tsholesov.cz

60

TAS Holešov, s.r.o. is a municipal services company formed in 2024 by merging two local entities, providing energy, waste management, property management, and recreational services primarily for the Holešov region in the Czech Republic. The website reflects a well-structured local government service portal with clear navigation and relevant content for residents and businesses. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response contact details. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to privacy protection.

G

GLOBDATA a.s.

parksimply.cz

52

ParkSimply is a Czech Republic-based mobile and online parking payment service operated by GLOBDATA a.s. The platform enables users to conveniently pay for parking via smartphone applications, eliminating the need for physical parking meters and tickets. The service is well established with presence in multiple Czech cities and municipalities, supported by official app store listings and a dedicated website. The business targets drivers and vehicle owners seeking a streamlined parking payment experience. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly interface. However, some modernization opportunities exist, such as updating jQuery and enhancing accessibility. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response information. Privacy compliance is partially met with a privacy policy and terms of service present, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and functional with room for security and compliance improvements.

P

Parkování ČB › Parkování ČB

parkovanicb.cz

49

The website www.parkovanicb.cz appears to be related to parking services, as indicated by its title 'Parkování ČB'. However, the site lacks substantive business description, contact information, and privacy or cookie policies. The technical infrastructure is based on an older CMS (InizioCMS) and Bootstrap 3.3.7a framework, with analytics tools such as Google Tag Manager and Hotjar implemented. Security posture is weak due to the absence of HTTPS, security headers, and no visible incident response or security policies. The domain WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is accessible but minimal in content and security features, indicating a need for significant improvements in compliance, security, and business transparency.

E

ENVF - Écoles Nationales Vétérinaires de France

envf.fr

37

ENVF (Écoles Nationales Vétérinaires de France) is a French governmental network of four national veterinary schools, established in 2020 under the Ministry of Agriculture and Food Sovereignty. The website serves as an official portal to present the network's mission, values, and member schools, targeting veterinary students, professionals, and academic communities. The business model is educational and governmental, focusing on veterinary training, research, and coordinated activities such as internships and competitions. The site maintains a consistent and professional brand image aligned with its authoritative position in veterinary education in France. Technically, the website is built on WordPress using the Kadence theme and related plugins, hosted by OVH. It employs modern web technologies including Google Fonts and supports mobile responsiveness with good design quality. Performance is moderate, and accessibility is basic but functional. SEO optimization is basic with proper meta tags but lacks advanced features. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No cookie consent mechanism or comprehensive privacy compliance indicators are present, which may pose compliance risks under GDPR. No contact emails or phone numbers are clearly provided on the homepage, limiting direct communication channels. Overall, the website is trustworthy and professional but could improve privacy compliance and security posture by implementing cookie consent, security headers, and publishing incident response information. The domain registration is consistent with the business history and supports legitimacy. Strategic improvements in privacy and security would enhance user trust and regulatory compliance.

E

ENSV-FVI

ensv-fvi.fr

55

ENSV-FVI is a specialized educational institution focused on training Veterinary Public Health Inspectors and providing continuing education and degree programs in veterinary public health. Affiliated with VetAgro Sup and hosting the One Health Institute, it serves a national and international audience of veterinary and government professionals. The website is built on a modern WordPress platform using Elementor and includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and GDPR compliance, though some security headers and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-branded, supporting the institution's authoritative position in its niche.

T

Tiskárna Posekaný

posekany.cz

40

Tiskárna Posekaný is a professional online printing company based in České Budějovice, Czech Republic, with a domain age dating back to 2002. The company offers a wide range of printing services including business cards, flyers, brochures, stickers, and gift items, supported by an in-house graphic studio. Their business model focuses on online ordering with fast turnaround times and free delivery, targeting both businesses and individual customers. The website demonstrates a consistent brand presence and good content quality, reflecting a well-established local market position. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as Yoast SEO and Kadence theme. It uses modern web technologies including jQuery, Google Analytics, Facebook Pixel, and Google reCAPTCHA for security and analytics. Hosting is provided by WEDOS, a reputable Czech hosting provider, ensuring good performance and mobile optimization. SEO and accessibility are adequately addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent mechanisms comply with GDPR requirements, and privacy policies are clearly published. However, some security headers are not explicitly detected, and no formal security policy or incident response contact is provided. No vulnerabilities or suspicious activities were identified in the content or WHOIS data, which is consistent and supports the legitimacy of the business. Overall, the website presents a trustworthy and professional online printing service with solid technical infrastructure and good privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding incident response information to further strengthen security posture and customer trust.

M

Město Borovany

borovany-cb.cz

49

Město Borovany operates an official municipal website serving the residents and visitors of Borovany, Czech Republic. The site provides comprehensive local government information including news, official notices, contact details, event calendars, and public services. The target audience is primarily local citizens and stakeholders interested in municipal affairs. The business model is a government service portal with no commercial intent. The website maintains a consistent brand identity and good content quality, supporting its role as a trusted local government resource. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It is built on the Ocelot CMS platform and demonstrates good mobile optimization and accessibility compliance, including an accessibility certification. Performance is moderate, with no major technical issues detected. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks a published privacy policy and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the official nature of the content and contact information supports legitimacy. Overall, the website is a well-maintained municipal portal with good usability and security posture, though improvements in privacy compliance and domain transparency are recommended to enhance trust and regulatory adherence.

I

Informační portál Kaplice a Kaplicko

ikaplice.cz

44

The website ikaplice.cz serves as an information portal dedicated to the town of Kaplice and its surrounding region in the Czech Republic. It provides comprehensive local cultural, tourist, and community event information, targeting residents and visitors interested in the area. The portal features event calendars, news articles, and service directories, positioning itself as a key regional resource for cultural engagement and tourism promotion. The site is supported by partnerships with local government and tourism organizations, enhancing its credibility and reach. Technically, the website employs a custom CMS with a technology stack including jQuery 1.11.2, jQuery UI, Fancybox, Google Fonts, Google Analytics, and Mapy.cz API for mapping services. While the site is functional and well-structured with good navigation and content relevance, it uses outdated JavaScript libraries that may pose security risks. Mobile optimization and accessibility are basic, and SEO practices are moderate. The site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit privacy or terms of service policies. From a security perspective, the portal demonstrates moderate maturity. The use of outdated libraries and absence of security headers are notable vulnerabilities. No direct contact emails or phone numbers are provided, limiting transparency. The cookie consent banner indicates some GDPR awareness, but the lack of a privacy policy and security incident response information suggests compliance gaps. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website's regional focus, supporting legitimacy. Overall, ikaplice.cz is a valuable regional information resource with good content quality and business credibility but requires improvements in technical security, privacy compliance, and modernization of its technology stack to enhance trust and resilience against threats.

P

ProDarce.cz

prodarce.cz

42

ProDarce.cz is a Czech Republic-based online platform dedicated to providing benefits, discounts, and rewards for voluntary blood and bone marrow donors. It positions itself as the largest database of such benefits in the country, targeting donors and related communities. The website offers regularly updated content about partner offers, insurance contributions, and events supporting blood donation. Technically, the site is built on WordPress with common plugins such as Yoast SEO and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a user-friendly experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy policies. WHOIS data is unavailable, which limits full trust verification of the domain registration. Overall, the site is safe, professional, and serves a niche non-profit community effectively.

M

Mary's Meals Česká republika z.s.

marysmeals.cz

65

Mary's Meals Česká republika z.s. is a Czech affiliate of the international non-profit organization Mary's Meals, dedicated to providing nutritious school meals to children in impoverished communities worldwide. The website clearly communicates its mission, programs, and ways to get involved, targeting donors, volunteers, and schools within the Czech Republic. The organization maintains a strong market position as a reputable charity with a consistent brand and transparent communication. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager for analytics and CookieFirst for consent management. The site is mobile-optimized, accessible, and performs moderately well, with good SEO practices and structured content. Security measures such as HTTPS and security headers are properly implemented, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trustworthiness. Overall, the site is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing transparency by publishing a security policy and vulnerability disclosure, improving incident response visibility, and maintaining regular audits of third-party scripts to mitigate risks. These steps will strengthen the organization's security posture and stakeholder trust.

G

GORILLA CAFÉ

gorilla-cafe.cz

56

Gorilla Café is a small hospitality business based in the Czech Republic, specializing in serving high-quality specialty coffee and tea with an emphasis on exotic blends sourced from Uganda and sustainable fair trade practices. The café positions itself as a calm oasis for customers seeking a relaxing environment and cultural experiences such as travel talks. The business model focuses on onsite café services, event hosting, and promoting sustainability through donations to conservation efforts. Technically, the website is built on the Webnode platform and utilizes AWS Cloudfront CDN for content delivery. The site is moderately optimized for performance and mobile devices, with a clean design and clear navigation. However, it lacks advanced security headers and comprehensive privacy documentation, which are areas for improvement. Google Tag Manager is used for analytics, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, but it lacks visible security headers and a privacy policy, which impacts its compliance posture. The absence of WHOIS data reduces trust in domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website scores moderately well in content quality and business credibility but should address privacy and security gaps to enhance trust and compliance. Verifying domain registration details and adding comprehensive privacy and security policies are recommended to improve the site's security posture and user confidence.

C

CRnet, s.r.o.

crnet.cz

44

CRnet, s.r.o. is a Czech Republic based small technology company specializing in custom web development, e-commerce solutions, internet marketing, and graphic design services. Established since 1999, the company has a solid local market presence with a portfolio of satisfied clients and a range of partner sites offering complementary services. Their website is professionally designed, content-rich, and targets businesses and individuals seeking digital marketing and web solutions. Technically, the site uses a custom CMS with a legacy JavaScript stack including jQuery 1.11.2 and integrates Google Analytics and Mapy.cz APIs. Security posture is moderate with HTTPS enabled and cookie consent implemented, but the use of outdated libraries and lack of advanced security headers are areas for improvement. Privacy compliance is basic with clear privacy and cookie policies but no visible terms of service or incident response information. Overall, the website is trustworthy, safe, and well-positioned for its market segment.

R

Réseau Canopé

reseau-canope.fr

52

Réseau Canopé is a French public operator under the Ministry of National Education, Higher Education and Research, dedicated to the training of teachers and educational staff. It holds a strong market position as the national network for teacher training, offering a wide range of services including online courses, workshops, and digital educational resources. The website reflects a mature digital infrastructure using TYPO3 CMS and integrates advanced analytics tools such as Matomo and Piwik PRO for user engagement tracking. The site is well-designed, accessible, and optimized for mobile devices, providing a professional user experience. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit security policies and vulnerability disclosure. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility with official government affiliation, certifications, and active social media presence.

L

La Rochelle Université

univ-larochelle.fr

58

La Rochelle Université is a public higher education institution based in France, offering a broad range of academic programs, research initiatives, and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. The institution emphasizes personalized student support and sustainable development in its strategic vision. Technically, the website is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security measures include HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit incident response policies are absent. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and social media presence. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency of contact information.

P

Padlet

padlet.com

70

Padlet is a well-established SaaS company founded in 2004, specializing in visual collaboration tools for creative work and education. The platform serves a large global user base of 40 million, targeting educators, students, and creative professionals. Their business model is freemium with tiered subscription plans for individuals, teams, classrooms, and schools. The website reflects a mature market position with strong branding and user engagement through social media and positive reviews on multiple platforms. Technically, Padlet employs modern web technologies including Vue.js and Cloudflare services for DNS and CDN. The site is well optimized for performance, mobile responsiveness, and accessibility. Analytics are implemented via RudderStack, indicating a moderate level of user tracking. The website is professionally designed with clear navigation and comprehensive content. From a security perspective, Padlet enforces HTTPS, uses security headers, and maintains a clientTransferProhibited domain status, indicating good domain security practices. However, DNSSEC is not enabled, and there is no visible vulnerability disclosure or security.txt file. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks an explicit cookie consent mechanism. Contact information for security incidents or data protection officers is not publicly available. Overall, Padlet presents a high level of business credibility and technical maturity with minor gaps in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing vulnerability disclosure information, and providing clearer contact channels for security and privacy matters.

K

Kwantic

kwantic.fr

49

Kwantic is a French web development agency founded in 2020, specializing in custom web solutions including ERP, CRM, application development, and e-commerce platforms. The company operates multiple offices across major French cities, indicating a regional presence and a focus on serving businesses seeking digital transformation. The website is professionally designed using WordPress with modern technologies such as jQuery, Bootstrap, and various analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks published privacy policies and security headers, which are important for compliance and protection. Overall, the website presents a credible business with room for improvement in privacy and security transparency.

G

Groupe Caisse des Dépôts

caissedesdepots.fr

65

The Groupe Caisse des Dépôts is a major French public financial institution dedicated to serving the public interest through investment and management of public funds. The website reflects a well-established entity with a clear mission to support social, territorial, and economic development in France. The site is built on a modern Drupal 10 CMS platform, incorporating accessibility features, GDPR-compliant consent management, and Matomo analytics for user tracking. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional and trustworthy digital presence aligned with its public institution status.

The website masteos.com is currently inaccessible due to an SSL handshake failure between Cloudflare and the origin server, resulting in a Cloudflare error 525 page being displayed. This indicates a misconfiguration or incompatibility in the SSL/TLS setup on the origin server side. The domain is registered since 2018 with Gandi SAS and uses Cloudflare nameservers, but no further business or contact information is publicly available on the site. The lack of accessible content, privacy policies, cookie consent mechanisms, or terms of service severely limits the ability to assess the business or compliance posture. Technically, the site relies on Cloudflare for DNS and CDN services but fails to establish a secure connection to the backend server, which is a critical security and availability issue.

Artistes de la Vie is a French non-profit media and campaign platform centered around a motivational film and an online ecosystem to encourage social and environmental action. The website offers film viewing options via VOD and DVD, organizes cine-action events, and promotes a participative platform for community-driven positive impact projects. The target audience is the general public interested in social change and sustainability. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by Infomaniak Network SA. It employs Google Analytics and Tag Manager for user tracking. The site is mobile optimized and well-structured, though some technical debt exists such as an outdated jQuery version and missing security headers. Security posture is moderate with HTTPS enforced and captcha on forms, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

P

Průvodce Koloběhem

pruvodce-kolobehem.cz

53

Průvodce Koloběhem operates as a specialized content platform providing the largest database of scooter routes primarily focused on the Czech Republic and Europe. The website offers detailed trip descriptions and navigation aids for mobile users, targeting outdoor enthusiasts and scooter riders. The business model centers on content provision and partnerships with related companies such as Kostka Koloběžky and Kudyznudy.cz, enhancing its market position as a leading resource in its niche. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is managed via Webflow's CDN and Amazon S3 for static assets, ensuring moderate performance and good mobile optimization. However, accessibility features are basic and there is room for improvement in security headers and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. It integrates common tracking and retargeting services but lacks explicit cookie consent banners and security policies. The WHOIS data is privacy protected, which is reasonable for this business type, though it reduces transparency. No critical vulnerabilities or security incidents are evident from the analysis. Overall, the website presents a professional and trustworthy front with good content quality and business credibility. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance its security posture and user trust.

N

New Target, inc.

newtarget.com

70

New Target, Inc. is a professional digital agency specializing in creative, marketing campaigns, and website design, primarily serving brands and nonprofits in Southern California and Washington D.C. The company offers a comprehensive suite of services including marketing, website development, branding, and creative production. Their market position is strong within the nonprofit and brand sectors, supported by award-winning campaigns and a well-structured digital presence. The website reflects a mature digital infrastructure leveraging WordPress and Elementor, with extensive use of modern analytics and marketing technologies. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in publicly disclosing privacy and security policies. Overall, the business demonstrates credibility and professionalism, but the absence of WHOIS data raises questions about domain registration legitimacy that should be addressed.

U

UNOS

unos.org

50

UNOS (United Network for Organ Sharing) is a well-established nonprofit organization dedicated to managing the organ transplantation system in the United States. The organization provides critical services including organ donor registration, organ matching, data analytics, advocacy, and education. Their website reflects a mature digital presence with comprehensive content targeting donors, patients, healthcare professionals, and advocates. The site is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is solid with HTTPS enforcement and clientTransferProhibited domain status, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

H

Health Resources & Services Administration

organdonor.gov

77

The website organdonor.gov is an official U.S. government platform managed by the Health Resources & Services Administration (HRSA) under the Department of Health & Human Services. It serves as a comprehensive resource for organ, eye, and tissue donation information, targeting both the general public and healthcare professionals. The site provides educational content, registration guidance, statistics, and professional outreach materials, positioning itself as a trusted authority in the organ donation space. Technically, the site is built on Drupal 10 and leverages modern web technologies including the US Web Design System, Google Analytics, and YouTube integration. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The hosting environment is consistent with government infrastructure, ensuring reliability and security. From a security perspective, the site enforces HTTPS and employs several best practices, though explicit security headers like X-Frame-Options were not confirmed. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy linked from the site, though a cookie consent mechanism is not evident. The WHOIS data is unavailable due to privacy typical for .gov domains, but the domain's legitimacy is supported by consistent branding and authoritative content. Overall, organdonor.gov presents a professional, secure, and trustworthy online presence with minor areas for improvement in cookie consent and explicit security header implementation. It effectively fulfills its mission as a government resource for organ donation awareness and education.

U

UNOS

transplantliving.org

55

UNOS (United Network for Organ Sharing) operates a comprehensive website providing patient resources related to organ transplantation. The organization is a well-established non-profit entity in the healthcare sector, with a domain registered since 1993, reflecting its longstanding presence. The website targets patients, transplant candidates, and their families, offering educational brochures and transplant-related information. Technically, the site is built on WordPress with the Divi theme, leveraging modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Bing Ads. The site is mobile-optimized and uses HTTPS, ensuring secure data transmission. However, explicit privacy and cookie policies are not found on the analyzed page, which impacts privacy compliance scoring. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks visible security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

B

Bioracer Official Store

bioracer.com

60

Bioracer is a premium sportswear company specializing in custom bike clothing and accessories, targeting cyclists, triathletes, and athletes across multiple sports disciplines including skating and skiing. The company emphasizes performance, aerodynamics, and comfort, leveraging real-world racing data and wind tunnel testing. Their market position is strong within the niche of high-performance sports apparel, supported by endorsements and medals from professional athletes. The website is multilingual, professionally designed, and integrates e-commerce capabilities with a dedicated webshop and design-your-own apparel service. Technically, the website is built on WordPress using modern themes and plugins, with integrations for marketing and analytics tools such as HubSpot, Mailchimp, Google Tag Manager, and Facebook Pixel. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence with comprehensive content and strong branding. The lack of WHOIS data for the subdomain is expected and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

V

Vendée U Pays de la Loire

vendee-u.com

55

Vendée U Pays de la Loire is a regional French cycling team competing in Division Nationale 1, focusing on sports promotion and fan engagement. The website is professionally designed using the Wix platform, featuring modern JavaScript technologies and polyfills to ensure compatibility across browsers. The site provides relevant content about the team, news, and programs, targeting cycling enthusiasts and regional supporters. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the site itself appears legitimate and consistent with the business identity. Security posture is moderate with HTTPS implied and use of Sentry for error monitoring, but lacks explicit security headers and privacy policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

A

AGConsult

agconsult.com

63

AGConsult is a well-established usability, CRO, and UX design agency operating primarily in Belgium and the Netherlands. With over 20 years of experience since 2001, the company specializes in user research, AB testing, UX design, conversion optimization, and training/coaching services. The agency serves businesses, governments, and non-profits, positioning itself as an independent and internationally recognized expert in its field. The website reflects a professional and consistent brand image, showcasing notable clients and testimonials that reinforce its market credibility. Technically, the site is built on WordPress with WooCommerce and leverages modern tools such as Google Tag Manager and GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. The absence of WHOIS data limits domain registration trust verification but does not detract significantly from the overall legitimacy given the professional content and client references. Overall, AGConsult presents a strong business and technical profile with good privacy compliance and user experience.

Č

Česká lékařská akupunkturistická společnost (ČLAS ČLS JEP)

akupunktura.cz

44

The website akupunktura.cz represents the Czech Medical Acupuncture Society (ČLAS ČLS JEP), a professional association focused on acupuncture and related techniques in the Czech Republic. The site provides educational resources, event information, bulletins, and membership details targeted at medical professionals and acupuncture practitioners. The domain has been active since 1999, indicating a well-established presence in its niche healthcare sector. Technically, the site is built on WordPress with the Fusion Builder theme, incorporating modern web technologies such as HTTPS and Google reCAPTCHA for security. The cookie consent mechanism is robust, offering granular user control, though a formal privacy policy and terms of service pages are absent. Security posture is good with HTTPS and anti-bot measures, but could be improved with additional security headers and published policies. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Boiron

boiron.cz

66

Boiron is a French pharmaceutical company specializing in homeopathic medicinal products, positioning itself as a world leader in homeopathy since its founding in 1932. The website targets a general audience interested in gentle and natural health treatments, offering product information, health articles, and educational content. The company emphasizes quality and respect in its business philosophy. Technically, the website is built using modern frameworks such as Next.js and Tailwind CSS, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enforced and some tracking scripts present, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and consistent branding support legitimacy. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

The website oriem.cz represents a small healthcare provider specializing in integrated medicine, combining acupuncture, homeopathy, and canistherapy. The business is positioned as a niche provider offering holistic health services with a personal approach, targeting patients seeking alternative and complementary medical treatments. The site is professionally designed using WordPress, with moderate performance and good mobile optimization. It integrates third-party booking services and contact forms for client interaction. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No direct contact emails or phone numbers are provided, which may impact user trust and compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

A

Addonify

addonify.com

63

Addonify is a specialized provider of WooCommerce addons designed to enhance e-commerce store performance and sales conversion. Founded in 2020, the company offers a suite of plugins including Quick View, Wishlist, Floating Cart, and Compare Products, targeting WooCommerce store owners seeking to improve user experience and sales efficiency. The website is built on WordPress using Elementor and Astra theme, leveraging modern web technologies and integrating analytics tools such as Google Analytics and Microsoft Clarity. Security posture is solid with HTTPS and Cloudflare DNS, though DNSSEC is not enabled and security headers are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a professional and trustworthy image with good content quality and user experience but requires improvements in privacy and security transparency.