Security Directory

G

GORILLA CAFÉ

gorilla-cafe.cz

56

Gorilla Café is a small hospitality business based in the Czech Republic, specializing in serving high-quality specialty coffee and tea with an emphasis on exotic blends sourced from Uganda and sustainable fair trade practices. The café positions itself as a calm oasis for customers seeking a relaxing environment and cultural experiences such as travel talks. The business model focuses on onsite café services, event hosting, and promoting sustainability through donations to conservation efforts. Technically, the website is built on the Webnode platform and utilizes AWS Cloudfront CDN for content delivery. The site is moderately optimized for performance and mobile devices, with a clean design and clear navigation. However, it lacks advanced security headers and comprehensive privacy documentation, which are areas for improvement. Google Tag Manager is used for analytics, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, but it lacks visible security headers and a privacy policy, which impacts its compliance posture. The absence of WHOIS data reduces trust in domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website scores moderately well in content quality and business credibility but should address privacy and security gaps to enhance trust and compliance. Verifying domain registration details and adding comprehensive privacy and security policies are recommended to improve the site's security posture and user confidence.

K

Koloběh Říčany, příspěvková organizace

kolobeh-ricany.cz

48

Koloběh Říčany is a small, local non-profit organization affiliated with the city of Říčany, Czech Republic. It operates a charitable shop, intergenerational meeting center, and organizes cultural and volunteer activities primarily targeting seniors and the local community. The website reflects a community-focused mission with clear contact information and social media presence. Technically, the site uses a proprietary CMS (vismo), integrates Google Analytics and reCAPTCHA, and implements cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with HTTPS and form protections, though additional security headers and explicit security policies could enhance it. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

M

Musicus agency s.r.o.

botoxmusic.cz

43

Botoxmusic.cz represents a Czech multi-genre music band named Botox, active since 2018. The website serves as a digital hub for the band’s activities including concert announcements, music streaming links, and merchandise sales via an e-shop. The band targets a general audience interested in music and live performances, maintaining a consistent brand presence across social media platforms and partner collaborations. The business model revolves around live events, digital music distribution, and merchandise sales, positioning the band as a small but active player in the Czech music scene. Technically, the website is built using HTML5, CSS3, JavaScript, and AngularJS framework, with multimedia integration such as YouTube video embeds and a swiper slider for featured content. The site is mobile optimized with good navigation and content relevance, though some modern accessibility features could be improved. No CMS or hosting provider details were detected. Performance is moderate with no critical technical issues observed. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, indicating room for compliance and security posture enhancement. No WHOIS data was found, which reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. No tracking or analytics scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional for its purpose but would benefit from improved privacy compliance, security headers, and domain registration transparency to enhance trust and security posture.

Parkovacilistek.cz is a Czech Republic based website operated by Erika, a.s. and parent company GLOBDATA a.s., providing mobile parking payment solutions across numerous Czech cities. The platform offers services including SMS parking payments, mobile applications ParkSimply and SEJF, and virtual parking tickets, targeting motorists seeking convenient parking payment methods. The website demonstrates a moderate level of digital maturity with ASP.NET backend, jQuery frontend, and basic SEO and accessibility features. Security posture is moderate but could be improved by updating outdated libraries and implementing security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is legitimate, well-established, and trusted within its niche but would benefit from enhanced privacy and security measures.

D

Dominik Martini

dmartini.cz

58

Dominik Martini operates a specialized e-commerce service business focused on the Shoptet platform, offering custom e-shop modifications, add-ons, and performance improvements. The company holds a certified partnership with Shoptet and maintains a strong reputation supported by over 346 verified customer reviews with perfect ratings. The website is professionally designed, mobile-optimized, and provides clear contact information, reinforcing its credibility in the Czech e-commerce market. Technically, the site employs modern web technologies including jQuery, Slick Carousel, AOS animations, and integrates analytics tools such as Microsoft Clarity and Google Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are absent, representing areas for improvement. Overall, the business demonstrates a mature digital presence with a focus on customer satisfaction and technical excellence.

I

InVivo

invivo-group.com

66

InVivo is a major French agricultural cooperative group with a strong European presence, focused on driving the agricultural and food transition towards sustainability and resilience. The company operates across multiple sectors including agriculture, international commodity trading, agro-food production, and retail, serving farmers, cooperatives, and consumers. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization and SEO practices. Social media integration is robust, supporting brand engagement. Security posture is generally good with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the professional website content and branding mitigate some risk. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on privacy and security policies.

E

Eric A. and Kathryn S. Meyer

meyerweb.com

45

meyerweb.com is a well-established personal and professional website belonging to Eric A. Meyer, a recognized expert in CSS and web development, and his wife Kathryn, a doctor of nursing. The site primarily serves as a blog and resource hub for web developers and CSS enthusiasts, featuring detailed technical articles, tools, and personal writings. The business model is centered on content sharing and community engagement, targeting a niche audience of web professionals and learners. The site has a consistent brand identity and a strong reputation within its niche, supported by a domain age of over two decades. Technically, the site uses a combination of hand-authored HTML and WordPress for the blog section, with some static site generation for book content. The technology stack is modern and standards-compliant, with good mobile optimization and accessibility features. However, performance is moderate and could benefit from further optimization. SEO practices are good, with proper meta tags and structured navigation. From a security perspective, the site benefits from a long-standing domain with clientTransferProhibited status, indicating protection against unauthorized transfers. However, there is no evidence of DNSSEC, security headers, or explicit SSL configuration details, which suggests room for improvement. The absence of privacy and cookie policies is a compliance gap, especially for GDPR. No contact or incident response information is provided, limiting transparency in security matters. Overall, meyerweb.com is a trustworthy and authoritative site with excellent content quality and business credibility. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance the site's security posture and user trust. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact and vulnerability disclosure information.

E

Euroleague for Life Sciences (ELLS)

euroleague-study.org

62

The Euroleague for Life Sciences (ELLS) is a well-established European university alliance focused on life sciences and sustainability. It brings together leading academic institutions to collaborate on education, research, and innovation in agri-food systems and environmental sciences. The alliance supports student mobility, joint teaching programs, and scientific conferences, targeting students and researchers in the life sciences domain. The website reflects a professional academic portal with consistent branding and clear contact information, primarily hosted and managed by the Czech University of Life Sciences Prague and Wageningen University & Research.

S

Storck & Merci Shop

storck.shop

68

Storck.shop is an e-commerce platform focused on retailing Storck branded confectionery products primarily to a German-speaking audience. The website offers a broad selection of sweets and emphasizes ease of online ordering and quick delivery. The site integrates modern digital marketing and analytics tools such as Google Tag Manager and Google Analytics, alongside a cookie consent management system powered by Cookiebot, reflecting a moderate level of digital maturity. The technical infrastructure is based on a Shopware CMS platform with standard web technologies and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enforced and basic security best practices observed, though improvements in security headers and explicit privacy and terms documentation are recommended. Overall, the site presents a moderate risk profile with no critical vulnerabilities detected but would benefit from enhanced transparency and contact information to improve trust and compliance.

F

Fundación Bancaria Ibercaja

fundacionibercaja.es

59

Fundación Ibercaja is a well-established non-profit foundation based in Spain, dedicated to fostering social equality, cultural enrichment, educational development, and territorial economic growth. The organization operates multiple centers and offers diverse programs aimed at improving societal welfare and promoting sustainability aligned with the UN Agenda 2030. The website reflects a professional and consistent brand image, supported by comprehensive legal and privacy documentation, and active engagement through social media channels. Technically, the website employs modern web technologies including responsive design frameworks and JavaScript libraries such as Swiper.js and Google Analytics for user tracking and engagement analysis. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured content. However, some security headers are not explicitly detected, and no incident response or vulnerability disclosure information is published, which could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR requirements. No critical vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data limits domain trust evaluation, but the overall digital footprint and certifications support legitimacy. Overall, Fundación Ibercaja presents a strong digital presence with a clear mission and trustworthy operations. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its credibility and resilience.

Y

Yuba Gals Independent Media

peakmoment.tv

45

Peak Moment Television is a niche media organization focused on providing educational content related to sustainable living, community resilience, and personal growth. The website offers a variety of media including online videos, newsletters, and DVDs, targeting individuals interested in environmental and social sustainability. The business operates as a small media and educational entity based in the US, with a domain registration dating back to 2006, indicating a well-established presence. Technically, the website is built on WordPress using the Genesis Framework and hosted by DreamHost. The site employs modern web technologies such as jQuery and CSS3, with moderate performance and basic mobile optimization. SEO practices are adequate, but accessibility features are basic. The site uses HTTPS with a valid SSL certificate, but lacks DNSSEC and important security headers, which could be improved to enhance security posture. From a security perspective, the site shows good basic practices such as HTTPS and domain transfer protection but lacks advanced security measures like DNSSEC and security headers. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure policies are present, which could be a risk in case of security incidents. Overall, the website is functional, content-rich, and trustworthy for its niche audience but would benefit from improved privacy compliance and enhanced security measures. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing incident response contacts to strengthen trust and compliance.

The website sacredlight.to is a recently registered domain currently used as a domain parking page managed via Sedo and registered through Namecheap. It provides no original business content or services, instead displaying generic advertising and search widgets. The site targets a general audience with Finnish language content but lacks any identifiable business entity or contact information. Technically, the site uses standard HTML5 and JavaScript with Google Ads and Sedo domain parking scripts, but lacks advanced frameworks or CMS. Security posture is minimal with no visible security headers or policies, and privacy compliance is basic with a generic privacy policy and cookie consent mechanism. Overall, the site has low business credibility and limited technical sophistication.

T

Tapovan

tapovanfrance.com

55

Tapovan is a small healthcare and education entity based in France, specializing in Ayurveda and yoga. The website presents a professional and consistent brand image, offering Ayurvedic retreats, massages, yoga classes, and educational seminars. The business is positioned as an authentic and established center in Europe for these wellness services. Technically, the site is built on the Wix platform, leveraging Wix Thunderbolt technology, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and some security hardening scripts, but lacks visible security headers and formal policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and trustworthy for its niche but requires improvements in privacy compliance, contact transparency, and security best practices.

P

PLATFORMA 2020 PRAHA - NOVÁ WIKI TCIM

platforma2020praha.cz

46

The website platforma2020praha.cz serves as an informational resource dedicated to traditional, complementary, and integrative medicine (TCIM) aligned with resolutions from WHO, WHA, the European Parliament, and the Council of Europe. It targets a general audience interested in TCIM, providing public access, member registration, and login portals. The business operates as a small-scale informational platform founded in 2020, primarily serving the Czech Republic. Technically, the site uses standard HTML5 and CSS3 with Google Fonts, hosted by WEDOS, and features a responsive design with a background video. However, it lacks advanced frameworks or CMS indications and has moderate performance and accessibility levels. Security posture is minimal with no visible security headers or published policies, and no HTTPS status was provided in the data. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact or incident response information is available, limiting trust and transparency. Overall, the site is functional and professionally designed but requires improvements in security, privacy, and contact transparency to enhance credibility and compliance.

The website publicdomainregistry.com is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks access to its actual content. The domain is registered with PDR Ltd. d/b/a PublicDomainRegistry.com since 2003, indicating a long-standing presence. However, due to the WAF challenge, no business content, policies, or contact information is accessible for analysis. The technical infrastructure includes Cloudflare security services, but DNSSEC is not enabled, representing a minor security gap. The website lacks visible privacy, cookie, or terms of service policies, and no forms or data collection mechanisms are present beyond the captcha challenge. Overall, the site’s security posture is moderate due to HTTPS and domain transfer protection, but content quality and privacy compliance cannot be assessed due to blocking.

S

Střední pedagogická škola da Vinci

pedagogickaskoladavinci.cz

58

Střední pedagogická škola da Vinci is a small educational institution based in the Czech Republic specializing in preschool and extracurricular pedagogy. The website presents the school’s educational offerings, admission process, team information, and inspirational events, targeting students and educators interested in pedagogical studies. The business model is focused on providing secondary education with a niche focus on pedagogical training. The website is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for content delivery, indicating a modern but modest technical infrastructure. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structure suggest a legitimate educational entity. Overall, the site is safe, professional, and functional with room for enhancements in privacy compliance and security best practices.

B

BSSHOP s.r.o.

bsshop.cz

60

BSSHOP s.r.o. is a Czech technology company specializing in the development of e-commerce platforms tightly integrated with the economic system POHODA. With over 20 years of experience and more than 650 active e-shops, the company holds a strong market position in the Czech and Slovak e-commerce sector. Their key services include e-shop creation, process automation, supplier integration, and marketing tools tailored for business clients. The website reflects a professional and business-oriented approach, targeting companies seeking robust e-commerce solutions integrated with POHODA. Technically, the website employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of a privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and business information appear legitimate and consistent. Overall, the site is safe, professional, and trustworthy for its intended business audience. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, adding incident response contacts, and improving accessibility to strengthen compliance and user trust.

L

LABE TRI CLUB Hradec Králové z.s.

skolnitriatlon.cz

41

The website skolnitriatlon.cz represents the LABE TRI CLUB Hradec Králové z.s., a small Czech sports organization focused on organizing school and public triathlon events. The site provides event schedules, contact information, and photo galleries to engage its target audience of athletes ranging from school children to general sports enthusiasts. The business model centers on event organization in collaboration with a sports equipment rental partner, Topsports Centrum. The website is modest but functional, with a clear focus on local sports community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, supplemented by Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting and domain registration are managed by Wedos, a Czech provider, consistent with the business location. The site is mobile-optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and modern tracking tools but lacks visible security headers and formal privacy or cookie policies, which impacts its privacy compliance score. No active forms or incident response contacts are present, and no vulnerability disclosure mechanisms are found. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small local sports event organizer with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

The website www.zaragoza.es/sede/ is the official electronic headquarters of the Ayuntamiento de Zaragoza, serving as a comprehensive digital platform for municipal services, citizen information, and electronic administration. It offers a wide range of services including public employment offers, cultural agendas, citizen participation, and access to various municipal resources. The site targets residents and visitors of Zaragoza, providing a government-backed, authoritative source of information and services. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, jQuery, Bootstrap, and FontAwesome, with integrations for Google Tag Manager and Google Analytics, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and shows good security practices, though explicit security headers and a cookie consent mechanism could be improved. The WHOIS data is unavailable due to access restrictions, but the domain is a recognized official government domain, lending high legitimacy. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical digital interface for Zaragoza's municipal government.

Mobility City is a technologically advanced cultural and innovation center located in Zaragoza, Spain, operated under the auspices of Fundación Ibercaja. It serves as the first 21st century Technological Mobility Museum, showcasing future urban mobility innovations and sustainable transportation solutions. The website reflects a professional and well-structured digital presence with comprehensive content aimed at a broad audience including professionals and the general public interested in mobility and technology. The site integrates multimedia, interactive maps, and event information to engage visitors effectively. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized libraries for animations and interactive maps. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, explicit security headers are not evident in the HTML source, and no detailed security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration analysis, but the strong association with Fundación Ibercaja and consistent branding provide trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance. Strategically, Mobility City should enhance its security posture by publishing explicit security policies, implementing recommended HTTP security headers, and maintaining regular audits of third-party libraries. These steps will strengthen trust and compliance, supporting its role as a leading innovation hub in mobility.

T

Trophée Industrie Grand Ouest

trophees-industrie-grand-ouest.com

61

The website 'Trophées Industrie Grand Ouest' serves as a regional award platform recognizing top-performing industrial companies in Brittany, Normandy, and Pays de la Loire regions of France. It is positioned as a small-sized business focused on manufacturing sector awards and recognition. The site is built on the Wix platform, leveraging Wix Thunderbolt framework, and hosted by Wix, providing a moderate level of technical maturity with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and structure appear professional and business-oriented. Contact information is limited to a phone number and postal address embedded in structured data, with no email or contact forms present. Overall, the site is functional and relevant to its target audience but requires improvements in privacy, security, and domain legitimacy verification.

The website nami.org is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, preventing access to any substantive content. The domain is long-established, registered since 1996 with Network Solutions, LLC, and uses Cloudflare for DNS and security services. Due to the blocking mechanism, no business, contact, or policy information is available for analysis. The technical infrastructure indicates use of modern security tools like Cloudflare's WAF and CAPTCHA to protect the site from automated threats. However, this also limits the ability to assess the website's content quality, security posture, and compliance status. Overall, the site appears legitimate based on domain age and registrar data, but the lack of accessible content restricts further evaluation.

Le Mouvement Associatif operates a French-language website focused on promoting inclusivity within associations through an evaluation tool called Inclusiscore. The site targets associations and their stakeholders, providing educational resources and a questionnaire to assess inclusiveness in project scope, openness, and governance. The organization positions itself as a niche non-profit resource provider within the French associative sector. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with Matomo analytics integrated and configured to require cookie consent. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No CMS or hosting provider details are evident. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS (assumed from canonical URLs), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented inline with GDPR principles, but no formal privacy policy or terms of service pages were found. WHOIS data is privacy protected or unavailable, which is common for non-profits but limits registrant transparency. No contact emails or phone numbers are provided, which could impact user trust and support. Overall, the website is professional, trustworthy, and safe with no adult or questionable content. The main risks relate to limited transparency in registrant data and absence of explicit privacy and security policies. Strategic improvements in these areas would enhance compliance and user trust.

A

Site not installed - OVHcloud

assojadorejadhere.fr

3

The domain assojadorejadhere.fr is registered with OVH since August 2021 and currently hosts only a placeholder page indicating that the site is not installed. There is no active business content, contact information, or policies available on the site. The hosting provider is OVH, a reputable French cloud and hosting company. The technical infrastructure is minimal, consisting of basic HTML and CSS with no advanced frameworks or CMS detected. Security posture cannot be fully assessed due to lack of content and absence of security headers or HTTPS status information. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site appears to be inactive or under development, limiting the ability to evaluate business credibility or security maturity.

S

Storck Polska

merci.pl

70

Merci.pl is the official Polish website for the merci chocolate brand, operated under the parent company Storck Polska. The site serves as a marketing and brand engagement platform, showcasing product ranges, limited editions, and interactive features for consumers in Poland. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response information are absent. WHOIS data is unavailable, limiting domain trust assessment, but the website's professional presentation and brand consistency support legitimacy. Overall, merci.pl is a well-maintained retail brand site with moderate technical maturity and good privacy compliance.

G

Grenoble INP - UGA

grenoble-inp.fr

52

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

S

Square, Inc.

squareup.com

69

Square, Inc. is a leading fintech company specializing in payment processing, point of sale software, and business management tools for merchants ranging from small businesses to enterprises. The company operates under the parent company Block, Inc., with subsidiaries including Weebly and Afterpay, enhancing its market reach and service offerings. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and comprehensive service information. Technically, the site leverages modern web technologies such as React and is hosted on AWS, ensuring scalability and performance. Security is robust, with HTTPS enforced, multiple security headers, and compliance with PCI DSS standards. Privacy policies and cookie consent mechanisms are clearly presented, indicating good GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

The website garden-gourmet.com is currently a parked domain with no active business content or services. The domain is registered since 2019 with InterNetX GmbH and is set to expire in 2026. The site primarily serves as a landing page advertising the domain for sale, containing no privacy policies, contact information, or business details. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes pointing to third-party ad and tracking domains. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. The site lacks GDPR compliance indicators and does not provide cookie consent mechanisms. Overall, the site has low trustworthiness and poor content quality, reflecting its status as a parked domain rather than an active business website.

S

Somfy Digital

somfydigital.com

66

Somfy Digital operates a specialized B2B product catalog platform focused on Somfy products, primarily targeting the Polish market. The website provides a structured catalog with product categories and filtering options, supporting business customers in discovering and ordering Somfy smart home and automation products. The platform demonstrates moderate digital maturity with a modern tech stack including Google Tag Manager and Elastic Behavioral Analytics for user tracking and analytics. The website is mobile-optimized and offers a good user experience with clear navigation and consistent branding. Security posture is adequate with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information and incident response details are not publicly available, limiting transparency and trust. Overall, the site is safe and professional but would benefit from enhanced privacy compliance and security best practices.

Visionscarto is a niche website dedicated to cartographic sketches and reflections, offering a collection of articles and reports primarily in French. The site targets an audience interested in cartography, mapping, and related academic or reflective content. The business model appears to be content publishing without evident commercial transactions or e-commerce. Technically, the site is built on the SPIP CMS platform and uses modern JavaScript libraries such as Photoswipe and Lity for media display, providing a good user experience with mobile optimization and decent SEO practices. However, the site lacks visible privacy, cookie, or terms of service policies, which impacts compliance and user trust. Security posture is moderate with no explicit security headers detected and unclear SSL configuration. The WHOIS data is missing or the domain is not registered according to the raw WHOIS output, which raises concerns about domain legitimacy despite the professional content. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.

S

follow.it | The Ultimate News Platform

specificfeeds.com

66

follow.it is a technology-driven news aggregation platform founded in 2006, offering personalized news delivery and subscription services to readers and publishers. The website presents a professional design with a modern frontend framework (Vue.js) and integrates advertising through Google Adsense. The domain is well-established with DNSSEC enabled and a valid registration status, indicating a legitimate business presence. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as contact information, which are important for user trust and regulatory compliance. Security posture is generally good with HTTPS and DNSSEC, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website wp-content.org is a domain parking page registered in December 2021 via Name.com, Inc. It does not represent an active business or service but serves as a placeholder with advertising links and search functionality powered by Sedo and Google Adsense. The site content is minimal, primarily in Finnish, and lacks any original business information, contact details, or security policies. Technically, the site uses standard HTML, CSS, and JavaScript with third-party ad and tracking scripts but does not enforce HTTPS or implement security headers. Privacy compliance is basic, with a privacy policy linked to Sedo's domain parking service and a cookie banner without explicit consent mechanisms. Overall, the site has a low trustworthiness and business credibility score due to its parking status and lack of substantive content or policies.

O

One Army

projectkamp.com

56

Project Kamp is a small community-driven initiative based in Portugal focused on researching and prototyping sustainable living methods. The project emphasizes open source sharing of knowledge and community collaboration, positioning itself as a niche player in sustainability research. The website is built on modern web technologies using Webflow and integrates Google Analytics for user tracking. While the site is well-designed and content-rich, it lacks formal privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain registration is consistent and stable, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

F

Ferme de Cagnolle

fermedecagnolle.fr

42

Ferme de Cagnolle is a small organic farm based in Dordogne, France, specializing in living soil market gardening and the production of organic vegetables, seeds, and legal CBD/CBG products. The farm also offers training programs and creates media content to share agroecological knowledge. Their business model combines direct product sales through an online boutique with educational services and participatory agricultural projects, targeting environmentally conscious consumers and learners in France and nearby European cities. The website is well-designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern web technologies including Google Analytics and cookie consent tools, but lacks some advanced security headers. The security posture is good with HTTPS enforced and no visible vulnerabilities. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which should be addressed to improve trust. Overall, the site is professional and trustworthy, with good privacy compliance and clear contact information.

E

Ecodev

ecodev.ch

66

Ecodev is a Swiss-based web agency specializing in custom web and application development as well as IT infrastructure services, with a strong ethical and sustainable approach. The company has a solid market position in the Suisse romande region, backed by 20 years of experience. Their website showcases key projects and team members, reflecting a professional and human-centered business model. Technically, the site is built on a modern Angular framework, optimized for performance and mobile devices, with good SEO and accessibility practices. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professional, supporting the company's credibility in the technology sector.

G

Groupe INP

groupe-inp.fr

53

Groupe INP is a consortium of public engineering and management schools in France, offering high-quality education and research opportunities across multiple regions including Brittany, Bordeaux, Clermont-Ferrand, Grenoble, Nancy, and Toulouse. The group emphasizes professional training, scientific excellence, and strong ties with industry and international partners. The website reflects a well-structured educational institution with clear branding and a focus on student engagement and admissions. Technically, the site uses a custom CMS (K-Sup), modern web technologies, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but the site content and branding strongly indicate legitimacy. Overall, the site is professional, accessible, and trustworthy for its target audience.

AST Partner Connect is a professional platform operated by the American Society of Transplantation, providing transplant healthcare professionals with access to educational content, clinical trials, career opportunities, and partner resources. The platform serves as a bridge between healthcare professionals and industry partners, facilitating knowledge sharing and professional development in transplantation. The website is well-branded, consistent, and targets a specialized audience in the healthcare sector. Technically, the site uses common web technologies such as jQuery, Vimeo API, and Select2, hosted likely on AWS infrastructure. The design is professional and mobile-optimized, though accessibility and SEO could be improved. Security posture is moderate with no evident critical vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. WHOIS data is transparent and consistent with the organization's profile, enhancing trustworthiness. Overall, the site is a credible and useful resource for its target audience.

P

Près de chez nous

presdecheznous.fr

55

Près de chez nous is a French collaborative platform focused on ecological and solidarity initiatives, providing a map-based directory to connect users with local sustainable resources. The website is designed with a consistent and professional aesthetic, optimized for mobile devices, and includes SEO-friendly metadata. The technical infrastructure relies on standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted by OVH, a reputable provider. User analytics are tracked via Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security practices.

M

Mission H

mission-h.org

56

Mission H is a French educational non-profit project focused on promoting social cohesion, anti-racism education, and cultural diversity awareness among youth. It operates through interactive exhibitions, thematic educational toolkits, and international collaborations such as the Erasmus+ program. The website content is rich, well-structured, and targeted primarily at educational institutions and youth audiences. Technically, the site uses basic web technologies hosted on Infomaniak servers, with moderate performance and basic mobile optimization. Security posture is average, with domain transfer protections but lacking DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited but includes a valid organizational email. Overall, the site is trustworthy and professional but could improve in security and compliance aspects.

F

Faire Autrement

faire-autrement.fr

55

Faire Autrement is a French cultural festival and biennale focused on citizen and innovative ecological experiences, aiming to promote harmonious and sustainable living. The website is built on the Wix platform, leveraging Wix's hosting and standard JavaScript and CSS technologies. The site presents a professional design with good mobile optimization and basic SEO features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data suggests privacy protection for the domain registration, which is common for event-based websites. Overall, the site is legitimate and safe but would benefit from enhanced privacy and security policies to improve trust and compliance.

S

SPECTRUM

spectrumstore.com

74

SPECTRUM is an established Italian e-commerce retailer specializing in graffiti art supplies including spray paints, markers, and accessories. The website positions itself as a community supporter with over 20 years of experience, targeting graffiti artists and enthusiasts. The business operates on the Shopify platform, leveraging modern e-commerce technologies and Cloudflare DNS services. The website demonstrates good design quality, clear navigation, and mobile optimization, providing a professional user experience. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic with a cookie consent mechanism but lacks a published privacy policy or terms of service. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

České modelky s.r.o. is a Czech Republic based modeling and promotional services agency operating since 2006. The company specializes in providing hostesses, models, plus size models, live mannequins, and promotional staff for events and advertising campaigns. Their website reflects a well-established local business with a strong database of over 22,000 women and girls aged 16-40. The business targets companies and event organizers in the Czech Republic and Slovakia seeking professional promotional personnel. Technically, the website uses modern frontend technologies including Bootstrap and jQuery, with a responsive design and basic SEO optimizations. Security posture is moderate with HTTPS implied and a cookie consent mechanism implemented, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are directly provided on the main page, which slightly impacts user trust and contactability. Overall, the website is professional and trustworthy with room for improvement in security and privacy transparency.

Č

České modelky s.r.o.

hosteskyslovensko.sk

54

České modelky s.r.o. operates a professional event staffing service specializing in hostesses, promoters, and models primarily in Slovakia and neighboring countries. With 25 years of experience and a large database of over 30,000 staff, the company targets businesses and event organizers seeking reliable promotional personnel. The website reflects a mature business with clear service offerings, client references, and contact information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates Google reCAPTCHA and Smartsupp live chat for user interaction and security. Security posture is adequate with HTTPS and spam protection but lacks advanced security headers and published policies. Privacy compliance is partial with cookie consent but no visible privacy policy. Overall, the site is professional, accessible, and trustworthy with room for improvement in security and compliance documentation.

K

Kalmoya.com

kalmoya.com

10

Kalmoya.com is a specialized service provider focused on Concrete5 CMS development and support, targeting entrepreneurs and small to medium businesses. The website presents a professional and consistent brand image, offering retainers, custom development, and support services tailored to business growth and website management. The technical infrastructure leverages modern web technologies including Concrete CMS, JavaScript APIs, and Google Analytics for performance and user insights. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet regulatory standards. The domain's WHOIS data is missing, raising concerns about registration legitimacy, but the website's professional appearance and client testimonials support its credibility. Overall, the site is well-designed and functional but would benefit from enhanced transparency and security practices.

A

association Autour du 1er mai

base-tessa.net

37

The website base-tessa.net represents a small non-profit project launched in 2021 by the association Autour du 1er mai, focused on cataloging and promoting films related to the social and solidarity economy (ESS) and ecological transition. The platform serves a niche audience interested in social innovation and sustainability through cinema. Technically, the site is built on the SPIP CMS, hosted by OVH sas, and uses Matomo for analytics. The site is accessible, with a good content structure and moderate performance, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing security headers and no DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the credibility of the project.

T

theprotocol.it

theprotocol.it

67

theprotocol.it is a specialized online job portal focused on the IT sector in Poland, providing daily updated job offers and resources for both candidates and employers. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and user-friendly experience. It maintains a strong security posture with HTTPS, DNSSEC, and security headers, ensuring safe browsing for users. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance, and does not provide explicit contact information, which may affect user trust and compliance. Overall, the site is professionally designed and well-positioned in its niche market but should enhance its privacy compliance and transparency to improve trust and legal adherence.

U

U Mistra Mydláře

umistramydlare.cz

55

U Mistra Mydláře is a small family-owned business based in the Czech Republic specializing in handmade soaps, shampoos, shaving foams, and scented gifts. Established in 2012, the company emphasizes natural ingredients without chemical preservatives or dyes, targeting customers who value artisanal and natural skincare products. Their market position is that of a niche regional player with a loyal customer base, supported by certifications such as the regional product certificate and registration in the European Cosmetic Products Notification Portal (CPNP). Technically, the website is built on the Webnode CMS platform and utilizes modern web technologies including JavaScript, CSS, and HTML5. It leverages AWS Cloudfront CDN for hosting static assets and integrates Google Tag Manager for analytics and Smartsupp for live chat support. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. From a security perspective, the website enforces HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, although the website content and business information appear legitimate and consistent. Overall, the website presents a professional and trustworthy front for a small artisanal business but would benefit from enhanced security headers, improved privacy compliance mechanisms, and transparency in domain registration details to strengthen its security posture and trust signals.

V

Vojtěch Nedvěd

vn1.cz

47

Vojtěch Nedvěd operates a professional web development service primarily focused on creating websites and e-shops for a variety of clients. The business is positioned as a small independent developer based in the Czech Republic, with a portfolio showcasing diverse projects including programming, coding, design, and copywriting services. The website is well-structured, visually consistent, and targets local Czech businesses and individuals seeking custom web solutions. Technically, the site employs modern web standards including HTML5, CSS3, JavaScript, and integrates Google Fonts and Font Awesome for styling. It uses Google Analytics and Tag Manager for visitor tracking, hosted on Wedos, a reputable Czech hosting provider. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no formal security or privacy policies are published. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but would benefit from improved privacy compliance and security best practices.

S

SKY Media s.r.o.

skymedia.cz

50

SKY Media s.r.o. is a Czech Republic-based internet agency specializing in web development, e-commerce solutions, SEO, and online marketing services. The company targets businesses and individuals seeking professional digital presence and marketing support. Their website demonstrates a professional design with clear navigation and a portfolio of client references, indicating a stable market position as a small but established technology service provider. Technically, the website uses a custom CMS (SKY:CMS) and integrates modern web technologies including Google Analytics, Google reCAPTCHA, and Microsoft Clarity for analytics and security. The site is HTTPS secured with valid SSL certificates and shows good mobile optimization and SEO practices. However, some security headers are missing, and no explicit privacy or cookie policies are found, which could be improved. From a security perspective, the site employs standard protections such as HTTPS and CAPTCHA on forms, but lacks published security policies or incident response contacts. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly reduces trustworthiness. Overall, the security posture is good but could benefit from enhanced transparency and header implementation. The overall risk is moderate with no critical vulnerabilities detected. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or security policy to improve compliance and trust. The business appears credible and professional, with a solid technical foundation and clear contact information.

V

VITESTIN přímo od výrobce

vitestin.cz

50

The website vitestin.cz appears to be a small-scale business site hosted on the Wix platform, likely related to health or supplements given the domain name and branding. The site is accessible without any WAF or security challenge, but lacks critical business and security information such as WHOIS registrant data, privacy policies, cookie consent mechanisms, and contact details. Technically, it uses Wix's Thunderbolt framework and standard web technologies, with moderate mobile optimization and basic SEO features. Security posture is minimal with no advanced headers or policies detected. Overall, the site presents a basic online presence but lacks transparency and compliance features expected for trust and regulatory adherence.