Security Directory

PHOTORAMA is an EU funded innovation project focused on improving photovoltaic panel recycling and raw material recovery, operating from 2021 to 2025 with a consortium of 12 organizations. The website presents comprehensive information about the project objectives, consortium members, and recent news, targeting stakeholders in renewable energy and sustainability sectors. Technically, the site is built on WordPress with common plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy, reflecting a legitimate EU research initiative.

P

Provide Support, LLC

providesupport.com

52

Provide Support, LLC is a technology company specializing in live chat and customer support software solutions for websites. Established in 2004 and based in New York, USA, the company offers a SaaS model with a comprehensive live chat widget, cross-platform agent applications, and integrations with popular platforms such as WordPress, Shopify, and Joomla. Their market position is solid with over 10,000 sites using their service and a reputation for reliable, easy-to-integrate customer service tools. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Tag Manager, ensuring good performance and mobile optimization. The presence of multi-language support and detailed integration options indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS, encrypts chat data, and implements cookie consent mechanisms, although it lacks a dedicated security policy or incident response page. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The business credibility is reinforced by clear contact information, customer testimonials, and a transparent pricing and refund policy. Strategic recommendations include publishing explicit security and incident response policies and enhancing security headers to further strengthen the security posture.

M

Métropole du Grand Paris

metropolegrandparis.fr

69

Métropole du Grand Paris is a French governmental organization responsible for metropolitan governance, urban planning, transportation, and regional development in the Greater Paris area. The website serves as an official portal providing information and services to residents, businesses, and stakeholders within the metropolitan region. It positions itself as a key regional authority with a focus on public service and sustainable development. The technical infrastructure is based on Drupal 10 CMS, leveraging modern web technologies including FontAwesome Pro for iconography and Matomo for analytics, indicating a moderate level of digital maturity and privacy awareness. The site is hosted with DNS managed by Claradns and registered through Gandi, reflecting a stable and consistent hosting environment. Security posture is adequate with HTTPS enforced and domain transfer protections in place. However, the absence of visible security headers, privacy and cookie policies, and incident response contact information indicates areas for improvement in compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, explicit security policies, and improved contact transparency to strengthen user trust and regulatory adherence.

G

GRDF

grdf.fr

70

GRDF is the leading natural gas distribution company in France, operating as a public service entity under the ENGIE group. The website reflects a mature digital presence with comprehensive information targeting individuals, businesses, and public sector clients. The site uses modern web technologies including Liferay CMS, Bootstrap, and integrates Google services for analytics and maps. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, with a named Data Protection Officer contact. WHOIS data is not publicly available due to AFNIC policies for .fr domains, but the domain and website content align with a legitimate and established business. Overall, the site is professional, trustworthy, and well-maintained.

E

Energissime

energissime.fr

56

Energissime is a French informational website dedicated to providing practical guides and advice for successful energy renovation projects. The site targets individual homeowners and those interested in energy efficiency improvements, offering detailed articles on topics such as heating solutions, insulation, facade renovation, and regulatory information. The website positions itself as a niche resource within the energy renovation sector in France, leveraging WordPress as its CMS and employing SEO best practices through the Yoast SEO plugin and structured data markup. Hosting is provided by Hostinger operations UAB, and the site uses Google services for analytics and advertising, alongside a Landbot live chat for user engagement. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. No contact information or incident response details are provided, limiting direct communication channels. Overall, the site is professionally designed with good content quality and moderate technical implementation, but privacy compliance and security best practices require enhancement.

F

federation flame

federation-flame.org

65

The Fédération des Agences Locales de l’Énergie et du Climat (FLAME) is a French non-profit federation coordinating a network of local energy and climate agencies (ALEC) across France. It supports territorial energy transition through expertise in public territorial engineering, training, and resource provision. The website positions FLAME as a key reference in energy transition and climate action in France, targeting local authorities, energy operators, and community organizations. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted likely by WPServeur, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the site is professional, trustworthy, and compliant with GDPR, with moderate user tracking via Matomo analytics.

P

Paris Terres d’Envol

paristerresdenvol.fr

53

Paris Terres d’Envol is an official French regional government website serving the Paris Terres d’Envol territory. It provides residents and businesses with access to public services such as waste management, water and sanitation, urban planning, and local news and events. The site positions itself as a trusted source of regional information and services, targeting local citizens and enterprises. Technically, the website is built on WordPress with modern web technologies including jQuery, Font Awesome, and Google Fonts. It employs a cookie consent mechanism compliant with GDPR and uses Matomo for analytics, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and accessibility compliance is currently below standards. The absence of WHOIS data limits domain trust analysis, but the official branding and content quality support legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its intended audience.

A

Advisio marketing s.r.o.

advisio.cz

56

Advisio marketing s.r.o. is a well-established digital marketing agency based in the Czech Republic, operating since 2006. The company specializes in e-commerce marketing services including PPC advertising, SEO, data analytics, email marketing, consulting, and training. It serves multiple Central European markets and has a strong reputation supported by numerous industry certifications and client testimonials. The website is professionally designed, mobile-optimized, and provides comprehensive information about services and client successes. Technically, the site uses WordPress CMS with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and form protections, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the business presence and certifications. Overall, Advisio presents a credible, professional, and secure digital marketing service provider.

L

La Région Auvergne-Rhône-Alpes

europeenauvergnerhonealpes.fr

61

The website www.europeenauvergnerhonealpes.fr is the official digital presence of the Auvergne-Rhône-Alpes regional government in France, focusing on European funding and project support. It serves as a comprehensive resource for beneficiaries such as local authorities, associations, companies, and research entities seeking information and assistance with European funds and programs. The site is well-branded, professionally designed, and provides clear navigation and relevant content tailored to its target audience. Technically, the site is built on Drupal 10, leveraging modern web technologies including Matomo for analytics and lazy loading for performance optimization. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although the absence of certain security headers suggests room for improvement. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies. However, the WHOIS data is unavailable, which slightly impacts trustworthiness but is mitigated by the official nature of the site and its consistent branding. No vulnerabilities or malicious content were detected. Overall, the website is a trustworthy, professional government portal with strong content quality and user experience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and monitoring third-party scripts for security risks.

C

COGITERRA

emploi-environnement.com

69

Emploi-Environnement is a specialized French job board and recruitment platform focusing on the environmental and sustainable development sectors. It offers job listings, candidate CV registration, recruitment services, and career resources tailored to professionals and organizations in this niche. The platform targets job seekers and recruiters primarily in France and francophone countries, positioning itself as a key player in environmental employment services since 2002 under the company COGITERRA. Technically, the website employs a traditional web stack with jQuery, JavaScript, CSS, and HTML5, complemented by modern analytics tools such as Google Analytics 4 and WebTag Echobox. The site is mobile responsive with good SEO practices and a moderate performance profile. However, no CMS or hosting provider details are explicitly detected. The site implements cookie consent mechanisms and privacy policies consistent with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures are evident in the HTML content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and CNIL registration number suggest a legitimate business operation. Overall, Emploi-Environnement presents a professional and trustworthy platform for environmental job seekers and recruiters, with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain WHOIS information to strengthen trust and compliance.

Actu-Environnement is a well-established French independent media outlet specializing in environmental news, sustainable development, and related technical and legal information. The website offers daily updated content, newsletters, event agendas, and expert blogs targeting professionals and stakeholders in the environmental sector. The business model relies on subscriptions, advertising, and partnerships. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, implements responsive design, and integrates Google Analytics for user tracking. The security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not evident. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust, but the website's content quality and branding strongly indicate legitimacy. Overall, the site provides a professional and trustworthy user experience with room for security enhancements and better transparency in domain registration.

The website webdomus.net currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is long-established, registered since 1999 with Server Plan Srl, which also appears to be the hosting provider. The visible content is minimal and outdated, referencing Joomla 1.5 and WordPress 2.5 CMS versions, both of which are obsolete and pose significant security risks. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business details available on the page. The site includes a security check powered by BitNinja, suggesting some level of security awareness but also indicating potential exposure to threats that require mitigation. Overall, the website's digital maturity is low, with poor content quality and minimal technical sophistication.

C

CyberGhost

cyberghostvpn.com

58

CyberGhost VPN is a well-established VPN service provider offering fast, secure, and private VPN solutions across multiple platforms including desktop, mobile, and smart TVs. The company targets consumers and businesses seeking enhanced online privacy and security. Their business model is subscription-based, with a strong market position supported by a comprehensive privacy policy and a 45-day money-back guarantee. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience. From a technical perspective, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates third-party libraries like Font Awesome and Usercentrics for cookie consent management. The site is mobile-optimized, fast-loading, and SEO-friendly. Security headers and HTTPS enforcement indicate a strong security posture, although explicit security policies and incident response information are not publicly detailed. The security posture is robust with no detected vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data and direct company contact information slightly reduces trustworthiness. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, CyberGhost VPN presents a professional and trustworthy online presence with strong technical and security foundations. Strategic improvements include publishing detailed security policies, incident response contacts, and enhancing transparency around business registration and certifications.

M

McRAI s.r.o.

mcrai.eu

54

McRAI s.r.o. is a Czech digital agency specializing in custom web development, e-commerce platforms, digital marketing campaigns, and AI integrations. With over 16 years of experience and more than 500 completed projects, they serve businesses primarily in the Czech Republic, focusing on helping brands grow their online presence. Their services include programming, marketing, and ongoing support, positioning them as a comprehensive digital partner. Technically, the website uses modern JavaScript libraries such as jQuery and Modernizr, integrates live chat via Smartsupp, and employs cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of WHOIS data and security headers suggests areas for improvement in transparency and security posture. Overall, the website is professional and trustworthy, but the lack of domain registration details and explicit security policies introduces some risk. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

The website www.trebicnakole.cz serves as a comprehensive cycling portal for the city of Třebíč, Czech Republic. It provides valuable information for cyclists including transport safety, tourism routes, equipment advice, and local cycling services. The site is supported by regional government and partner organizations, positioning it as a trusted local resource for cycling enthusiasts and commuters. The content is well-structured, professionally designed, and targeted primarily at local cyclists and tourists interested in exploring Třebíč by bike. From a technical perspective, the site employs a traditional web stack with jQuery, Modernizr, and various UI libraries such as Fancybox and Remodal. Google Tag Manager and CookieScript are used for analytics and cookie consent management, indicating a moderate level of digital maturity. The site is mobile optimized and SEO-friendly, though some technologies like jQuery are outdated and could benefit from modernization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. The cookie consent mechanism is robust and GDPR compliant, with detailed cookie categorization and user controls. However, the absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were found, but updating libraries and adding security headers would improve security. Overall, the website is a valuable community resource with good content quality and privacy compliance. The main risk lies in the lack of domain registration transparency and some technical debt. Strategic recommendations include verifying domain registration, upgrading outdated libraries, implementing security headers, and enhancing contact information availability to strengthen trust and security posture.

W

World Media Partners, s.r.o.

unesco-czech.cz

60

The website 'Sedmnáct českých divů světa - České dědictví UNESCO' serves as the official portal for the Czech UNESCO heritage association, providing comprehensive information about UNESCO-listed cultural sites in the Czech Republic. It targets a general audience interested in cultural heritage and tourism, offering multimedia content, event calendars, virtual tours, and an e-shop. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages to reach an international audience. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Leaflet for maps, and Matomo for analytics. It is mobile-optimized and demonstrates good SEO practices. However, some accessibility features could be improved. The site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. From a security perspective, the site shows a moderate posture with secure login forms and no exposed sensitive data. The absence of WHOIS data for the domain reduces trust slightly, though the official branding and government funding mention support legitimacy. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security transparency. Overall, the website is a credible, well-maintained informational portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving accessibility to strengthen trust and compliance.

The website www.trebicsko-moravskavysocina.cz serves as a regional tourism portal for the Třebíčsko area in the Vysočina region of the Czech Republic. It provides comprehensive information on local attractions, events, accommodation, gastronomy, and regional products, targeting tourists and visitors interested in exploring this culturally rich and scenic area. The site is supported by regional government and tourism partners, enhancing its credibility as a destination marketing organization. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.10.2 and Swiper 2.4.1, alongside modern tracking tools like Google Analytics and Facebook Pixel. While the site is accessible and uses HTTPS with proper SSL configuration, it lacks modern security headers and uses outdated libraries, which could pose security risks. Privacy compliance is partially addressed through a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. The absence of WHOIS data for the domain raises concerns about domain legitimacy verification, although the website content and partner affiliations suggest a legitimate regional tourism entity. Overall, the site demonstrates good content quality and user experience but would benefit from enhanced security practices and clearer compliance documentation.

Městské kulturní středisko Třebíč operates as a municipal cultural center providing comprehensive information on cultural events such as cinema, theater, concerts, and exhibitions in the city of Třebíč. The website serves as a centralized platform for residents and visitors to access event schedules, ticket sales, and cultural news, positioning itself as a key local cultural institution. The business model focuses on event promotion and community engagement through digital channels. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Fancybox, alongside Google Analytics and Tag Manager for tracking. Cookie consent is managed via CookieScript, ensuring GDPR compliance. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain legitimacy verification, though the website content and external references suggest a legitimate municipal entity. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

R

renault

renew.auto

71

The website fr.renew.auto/dispatch.html serves as a dispatch landing page for Renault's Renew used car platform, facilitating redirection to country-specific subdomains. Renault, a well-established automotive manufacturer, leverages a modern React-based web infrastructure with integrations such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management. The site demonstrates good technical maturity with HTTPS enforcement, service worker usage for PWA capabilities, and structured data for SEO. Security posture is solid with secure cookies and reCAPTCHA integration, though improvements like CSP headers and explicit security policies could enhance defenses. Privacy compliance is evident through comprehensive legal and cookie policies, aligning with GDPR requirements. Overall, the site is professional, trustworthy, and well-branded, targeting general consumers interested in used Renault vehicles across multiple European countries.

M

mobilize

mobilize.es

66

Mobilize is a brand focused on providing electric mobility services in Spain, including 100% electric vehicles, charging solutions, and flexible mobility options such as rentals and subscriptions. The website is professionally designed, mobile-optimized, and leverages modern web technologies including React and CDN hosting by Renault Group. Privacy compliance is strong with integrated cookie consent mechanisms and clear privacy policies. Security posture is good with HTTPS, security headers, and no visible vulnerabilities, though explicit security and incident response policies are not published. WHOIS data for the domain is unavailable due to .es domain query restrictions, limiting full domain trust assessment. Overall, Mobilize presents a credible and professional digital presence aligned with Renault Group's branding.

R

Renault Group

renault.com

75

Renault Group is a major multinational automobile manufacturer headquartered in France, offering a wide range of automotive products and services. The website serves as the official corporate portal, providing information on the group's activities, brands, sustainability efforts, investor relations, and career opportunities. The site targets a broad audience including consumers, investors, job seekers, and industry stakeholders. Technically, the website is built using modern web technologies such as React and Next.js, with integrations for analytics and cookie consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site employs HTTPS and standard security headers, with a cookie consent mechanism indicating compliance with privacy regulations. However, the absence of WHOIS data and explicit security or incident response policies represents a gap in transparency. Overall, the website is professional, trustworthy, and well-maintained, but could improve by publishing detailed security policies and clarifying domain registration details.

Y

Yann Rolland

yannrolland.com

45

Yann Rolland operates as a freelance consultant specializing in digital advice, design, and development, primarily serving clients in the energy transition, environmental, and social sectors. The website presents a professional portfolio showcasing a wide range of projects for reputable organizations, indicating a strong niche market position in France. The business model is focused on freelance digital services with a clear emphasis on sustainable and socially impactful projects. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted on o2switch.net. The site is mobile-optimized with moderate performance and basic accessibility features. SEO is basic but sufficient for the site's purpose. Analytics are implemented via Google Analytics, but no cookie consent mechanism or privacy policies are present, indicating room for compliance improvement. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled and no security headers are detected, which are recommended enhancements. No forms or sensitive data collection points are present, reducing attack surface. The absence of privacy and cookie policies and vulnerability disclosure mechanisms are notable compliance gaps. Overall, the website is professional and trustworthy with a solid business credibility score. The main risks relate to privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and establishing a vulnerability disclosure process to enhance security posture and regulatory compliance.

Thibaut Caroli is a freelance digital designer and front-end developer specializing in website conception, design, and development, primarily serving environmental protection and climate change awareness associations. The website serves as a professional portfolio showcasing projects and providing contact information. The business model is focused on freelance services with a niche market position in non-profit environmental sectors. The technical infrastructure is based on WordPress CMS with custom themes, leveraging standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and FontAwesome. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The website demonstrates good design quality, mobile optimization, and user experience, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy measures.

P

Profesionalni.info

profesionalni.info

60

Profesionalni.info is a Czech Republic based small business specializing in custom web development, digital marketing, and graphic design services. Led by Radek Ahne with over 25 years of experience, the company offers a broad portfolio including website creation, SEO optimization, AI technology integration, and e-commerce solutions. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern web technologies such as Bootstrap, PHP, JavaScript libraries, Google reCAPTCHA, and Google Tag Manager, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and anti-bot measures, though improvements could be made by adding security headers and explicit privacy policies. Overall, the business shows strong credibility with detailed contact information, client references, and social media presence. The WHOIS data is unavailable, likely due to privacy protection, but the website content and structure support legitimacy. Strategic recommendations include enhancing privacy compliance and security headers to further strengthen trust and compliance.

E

eChalupy.cz

e-chalupy.cz

55

e-Chalupy.cz is an established online platform specializing in the rental of cottages, chalets, apartments, and pensions primarily in the Czech Republic and Slovakia. The platform emphasizes direct contact between renters and property owners, eliminating commission fees and intermediaries. It offers a comprehensive catalog of properties across various regions and thematic categories, targeting families, groups, and individuals seeking vacation rentals. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, it employs common web technologies such as jQuery, FontAwesome, Google Tag Manager, and Facebook Pixel, hosted likely behind Cloudflare for performance and security. Security posture is adequate with HTTPS enforced, though some security headers are missing and cookie consent mechanisms are not implemented, indicating room for improvement in privacy compliance. The absence of WHOIS data reduces domain trustworthiness, but the website's content and partner affiliations suggest a legitimate business. Overall, the site is safe, family-friendly, and well-positioned in the hospitality rental market.

Č

České modelky s.r.o.

feetmodels.eu

57

České modelky s.r.o. operates a specialized website feetmodels.eu offering professional advertising and product photography services focused on feet modeling for e-commerce clients, primarily in the footwear and foot care product sectors. Established since 2006, the company targets e-shops and businesses requiring high-quality visual content to enhance product presentation. The website also supports a community of feet models and offers opportunities for paid modeling work, including remote selfie photography. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, hosted by a reputable Czech provider, ensuring a responsive and user-friendly experience. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, although advanced security headers and incident response policies are not explicitly published. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. The domain registration aligns with the business claims, enhancing trustworthiness. The website content is safe for general audiences, with no adult or explicit material detected.

E

Enel Group

enel.com

72

Enel Group is a large multinational energy company operating in over 30 countries, focusing on sustainable and innovative energy solutions. The company offers a broad range of services including energy production, distribution, and renewable energy technologies. Their market position is strong, supported by a consistent brand and a comprehensive digital presence. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and Adobe Analytics for data insights. The site is well-optimized for SEO, accessibility, and mobile devices, providing a professional user experience. Security posture is good with HTTPS and secure form mechanisms, though some security headers are not explicitly detected and could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website reflects a mature digital infrastructure aligned with the company's business goals and market stature.

P

Power Yoga Akademie

poweryoga.cz

45

Power Yoga Akademie is a Czech Republic-based accredited educational center specializing in yoga instructor training and workshops. The organization holds official accreditations from the Ministry of Education, Youth and Sports (MŠMT) and Yoga Alliance, offering recognized certifications including state exams and international diplomas. Their services cater primarily to individuals seeking professional yoga qualifications and enthusiasts interested in seminars and online courses. The website presents a professional and consistent brand image with clear navigation and relevant content.

E

emocio s.r.o.

jogavirtual.cz

45

Jóga Virtual is a Czech-based online yoga platform offering a comprehensive video library with over 380 yoga videos, including courses, workshops, and DVDs. The business targets a broad audience ranging from beginners to advanced practitioners, including specialized groups such as pregnant women and seniors. The platform operates on a subscription model providing on-demand yoga content accessible anytime. Technically, the website uses common web technologies such as jQuery, Google Tag Manager, and Font Awesome, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers are missing. The absence of WHOIS data reduces domain trustworthiness, but the website content and business presence appear professional and legitimate.

V

Václav Krejčík

vaclavkrejcik.cz

46

Václav Krejčík is a small-scale personal brand focused on yoga, breathwork, and holistic wellness services primarily targeting Czech-speaking audiences. The website offers a variety of services including in-person and online yoga classes, retreats, podcasts, and educational content such as books. The business model revolves around direct service provision and content monetization through courses and product sales. The site is well-branded and professionally presented with consistent messaging and clear navigation. Technically, the website employs a moderately modern tech stack including jQuery, Bootstrap, Font Awesome, and Google Analytics, with a CMS likely Joomla. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms aligned with GDPR requirements. However, some technical improvements are possible, such as updating JavaScript libraries and adding advanced security headers. From a security perspective, the site demonstrates good baseline practices including HTTPS and cookie consent but lacks published security policies or incident response information. The absence of WHOIS data for the domain is a notable concern that impacts domain trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a credible and professional platform for yoga and wellness services with good privacy compliance and user experience. The main risk lies in the lack of domain registration transparency and minor technical security enhancements. Strategic recommendations include verifying domain registration, enhancing security headers, and publishing security policies to improve trust and compliance.

Y

Yoga Market

jogamarket.cz

48

Yoga Market is a specialized e-commerce retailer based in the Czech Republic, offering a wide range of yoga and wellness products including mats, clothing, books, meditation accessories, and health supplements. The website targets yoga practitioners and wellness enthusiasts, positioning itself as a niche player in the retail sector with a focus on quality and customer trust. The site is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, ensuring a responsive and interactive user interface. The site is served over HTTPS with cookie consent mechanisms in place, reflecting a good level of digital maturity and privacy compliance. However, some security headers are missing, and there is no visible security.txt or incident response information, indicating room for improvement in security transparency. From a security perspective, the site demonstrates solid practices including secure login forms and GDPR-compliant cookie management. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and clear contact details support a trustworthy business profile. Overall, Yoga Market presents a secure, privacy-conscious, and user-friendly online retail platform with a strong focus on yoga and wellness products. Strategic enhancements in security policy publication and domain transparency could further strengthen its trustworthiness and compliance posture.

V

Václav Krejčík

energyclinic.cz

46

The website www.vaclavkrejcik.cz represents the personal brand of Václav Krejčík, a yoga instructor and wellness expert based in the Czech Republic. The site offers a variety of yoga-related services including in-person and online classes, retreats, workshops, books, and podcasts. The content is well-structured and professionally presented, targeting yoga practitioners and wellness seekers. The business model is service and content-driven, focusing on holistic health and breathing techniques. The site integrates modern web technologies such as jQuery, Bootstrap, Google Analytics, and Tag Manager, and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. WHOIS data is unavailable due to privacy protection, which is typical for personal brand websites. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations.

E

Energy Studio

energystudio.cz

45

Energy Studio is a well-established yoga studio based in Prague, offering a broad spectrum of yoga classes for beginners to advanced practitioners, including online Zoom sessions and a dedicated e-shop for yoga-related products. The website reflects a professional and user-friendly platform with clear navigation, comprehensive content, and active social media engagement. The business targets yoga enthusiasts in Prague and beyond, emphasizing wellness, relaxation, and physical fitness. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of public WHOIS data suggests privacy protection, which is reasonable for this business type. Overall, the site demonstrates good digital maturity and business credibility.

The website womtp.com is currently inaccessible, returning a 403 Forbidden error page served by nginx. This prevents any direct analysis of the site's content, business model, or security posture. The domain is registered since 2012 with CSC Corporate Domains, Inc., indicating a stable registration history but no visible active web presence. The lack of accessible content means no privacy, cookie, or terms of service policies are available, nor any contact or social media information. Technically, the domain uses Amazon AWS DNS services but does not have DNSSEC enabled, and no security headers or HTTPS status could be verified. Overall, the site appears to be either restricted or under maintenance, limiting any meaningful security or business analysis.

Iberdrola is a leading global energy company specializing in electricity generation, renewable energy, and electrification services. The company positions itself as a pioneer in the transition to a sustainable and electrified economy, targeting a broad audience including consumers, investors, and partners. The website reflects a mature enterprise with a professional digital presence, leveraging modern web technologies and compliance frameworks. Technically, the site is built on the Liferay CMS platform, incorporates widely used libraries such as jQuery and Bootstrap, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although no explicit public security or incident response policies were found. Overall, the website is trustworthy, well-structured, and compliant with GDPR and cookie regulations.

T

Trackingplan

trackingplan.com

65

Trackingplan is a SaaS company specializing in automated digital analytics quality assurance and monitoring. Their platform provides real-time detection of issues in analytics implementations, marketing pixels, campaigns, and data privacy compliance. Trusted by over 200 tech leaders, Trackingplan integrates with major analytics and marketing tools to deliver actionable alerts and root cause analysis, helping teams maintain data integrity and optimize marketing ROI. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern frameworks and third-party services, ensuring fast performance and good SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data is missing or unavailable, which slightly impacts trust but does not detract from the overall professional presentation. No WAF or blocking mechanisms were detected, and the site contains no adult or questionable content.

C

Chvalský zámek

chvalskyzamek.cz

47

Chvalský zámek is a cultural and hospitality venue located near Prague, offering event space rentals, including weddings and exhibitions. The website presents a professional and well-structured digital presence built on WordPress with Elementor, featuring good mobile optimization and clear navigation. The site includes GDPR-compliant privacy and cookie policies with an active consent mechanism, reflecting attention to privacy compliance. Security posture is adequate with HTTPS enabled, though security headers are not visibly implemented, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website supports a small hospitality business with a focus on cultural events and venue rentals, maintaining a trustworthy and user-friendly online presence.

D

Danubius Expert Zrt.

booked4.us

64

booked4.us is a Hungarian-developed online appointment booking system operated by Danubius Expert Zrt., established in 2013. The platform offers a customizable, automated booking solution tailored for various industries including fitness, healthcare, coaching, beauty, massage, education, and veterinary services. It supports features such as 24/7 booking management, personalized notifications, online payments, and calendar synchronization. The website demonstrates a mature digital presence with modern technologies, mobile optimization, and comprehensive content including FAQs, customer testimonials, and demo calendars. Security posture is strong with HTTPS, GDPR compliance, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The domain registration data aligns well with the business identity, enhancing trustworthiness.

D

Demo verze stránek

mravenci.cz

57

Mravenci.cz is a Czech marketing agency specializing in online advertising, website development, and e-commerce solutions tailored for small businesses and entrepreneurs. The company positions itself as a strategic yet affordable partner for smaller firms, including restaurants and manufacturers, with a focus on delivering measurable marketing results. The website reflects a professional and consistent brand image, supported by client references and transparent consultation offers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data slightly impacts trust but does not detract significantly from the overall credibility. Strategic recommendations include improving security headers and adding incident response contacts to strengthen security readiness.

České modelky s.r.o. operates a well-established modeling and hostess agency website primarily serving Slovakia and the Czech Republic. The company offers a wide range of services including hostesses, photo modeling, fashion shows, casting organization, and advertising services. The website targets models, event organizers, and advertisers, positioning itself as a regional leader with a large database of models and extensive service offerings. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Fresco.js, and Google Analytics for tracking. Hosting is provided by Wedos, a reputable provider. Security posture is moderate with HTTPS enabled but lacking several important security headers. Privacy compliance is limited due to missing explicit privacy and terms of service pages, though a cookie consent mechanism is present. Contact information is clearly provided, and social media presence is active on Facebook, LinkedIn, and YouTube. Overall, the website is professional and functional but could improve in security and compliance areas.

Č

České modelky s.r.o.

modelingovekurzy.eu

56

The website modelingovekurzy.eu is operated by České modelky s.r.o., a Czech company specializing in modeling courses and workshops for aspiring and experienced models. The company has been active since 2006 and offers a variety of services including modeling walk training, professional photo shoots, TV camera moderation courses, and individual coaching sessions with pageant judges. The site targets women and girls interested in pursuing a modeling career and positions itself as a trusted, long-standing provider in the Czech modeling education market. Technically, the website uses modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google reCAPTCHA for bot protection, and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected in the provided data, which is a potential area for improvement. The WHOIS data is privacy protected by EURid, which is common for .eu domains, limiting transparency but not raising immediate concerns. Overall, the site is professional, content-rich, and well-structured, with clear contact information and social media presence.

České modelky s.r.o. operates the website ceskehostesky.cz, a professional agency providing hostesses and promotional staff for business, social, and cultural events across the Czech Republic and Slovakia. With a large database of over 22,000 hostesses and more than 20 years of experience, the company positions itself as a market leader in event staffing services. Their offerings include product presentations, conferences, road shows, market research, and additional event-related services such as costume rental and photography. The target audience primarily consists of businesses and event organizers in the Czech and Slovak markets. Technically, the website uses a custom PHP backend with a frontend built on Bootstrap and jQuery, integrating Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and includes cookie consent mechanisms, reflecting GDPR compliance awareness. Security posture is moderate, with HTTPS usage and reCAPTCHA implemented, but the presence of outdated jQuery and lack of explicit security headers present areas for improvement. Overall, the website is professional, trustworthy, and well-structured, though it could benefit from enhanced security practices and more comprehensive policy disclosures.

V

Více než agentura, s.r.o.

vicenez.com

73

Více než agentura, s.r.o. is a Czech Republic based small marketing agency specializing in online marketing, web development, consulting, and education services. The company positions itself as more than a typical agency, emphasizing professional expertise and comprehensive digital marketing solutions. Their website is built on WordPress using Elementor and related plugins, reflecting a modern and professional digital presence. The site includes GDPR-compliant privacy and cookie policies with a consent mechanism, indicating attention to privacy regulations. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. Overall, the website is well-structured, user-friendly, and trustworthy, targeting businesses and professionals in the Czech market seeking marketing and web services.

H

Historic Hotels of Europe

historichotelsofeurope.com

60

Historic Hotels of Europe operates a niche hospitality website focused on promoting and facilitating bookings for historic hotels across Europe. The business targets culturally interested travelers seeking unique accommodations in historic houses. The website is built on WordPress using the Elementor page builder, hosted by a reputable Irish hosting provider, and has been operational since 2003, indicating a mature digital presence. Technically, the site employs modern web technologies and includes cookie consent mechanisms via Cookiebot, reflecting basic privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information limits full compliance and user trust. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response details. Overall, the site is professionally designed with good SEO and mobile optimization but would benefit from enhanced transparency and security practices.

H

Hotel Mazanka

hotel-mazanka.cz

44

Hotel Mazanka is a hospitality business operating a hotel near the center of Prague, offering accommodation and conference facilities. The hotel has historical significance as it was originally built in 1968 for foreign scientists and guests of the Czech Academy of Sciences. The website reflects a small-sized, niche hospitality provider with a clear focus on comfort and accessibility. The business is affiliated with the Academy of Sciences of the Czech Republic, enhancing its credibility and trustworthiness. Technically, the website is built on OpenCms and uses a combination of legacy and modern web technologies including jQuery 1.11.0, Slick Carousel, and Google Analytics. The site is mobile optimized with good navigation and content quality, though some technical improvements could be made such as updating JavaScript libraries and enhancing accessibility features. The website is fully accessible with no blocking or WAF challenges detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. The WHOIS data is unavailable or privacy protected, which is common but limits domain registration transparency. The contact information is clear and professional, supporting business credibility. Overall, the website presents a trustworthy and professional hospitality business with moderate technical maturity and some room for security and privacy improvements. Strategic recommendations include implementing security headers, adding cookie consent, updating libraries, and publishing explicit security policies to enhance trust and compliance.

S

Středisko společných činností AV ČR, v. v. i.

zamek-liblice.cz

55

Zámek Liblice operates as a historic hospitality and conference center affiliated with the Academy of Sciences of the Czech Republic (Akademie věd ČR). It offers accommodation, conference facilities, wellness services, restaurant dining, and event hosting including weddings. The venue leverages its cultural heritage and baroque architecture to attract visitors seeking a unique experience. The business targets general audiences including tourists, corporate clients, and event organizers. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized operation with a niche market position in the hospitality sector.

S

Středisko společných činností AV ČR, v. v. i.

bistro-narodni.cz

54

Bistro Národní operates as a hospitality and catering service located within the main building of the Academy of Sciences of the Czech Republic in Prague. It provides daily lunch menus, coffee, snacks, catering for events, and conference room rentals. The website is professionally designed, targeting institutional clients and visitors to the Academy. The business model focuses on serving a niche market within a government/non-profit research environment, leveraging its association with the Academy for trust and credibility. Technically, the website uses OpenCms CMS with modern JavaScript libraries such as jQuery and Slick Carousel. It employs Google Fonts and Font Awesome for styling and icons. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Analytics are implemented via Plausible, indicating a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for compliance with EU regulations. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the website's content and institutional affiliation strongly indicate legitimacy. Overall, the website presents a trustworthy and professional digital presence for Bistro Národní, with room for improvement in security headers and privacy compliance to enhance user trust and regulatory adherence.

S

Středisko společných činností AV ČR, v. v. i.

zamek-trest.cz

52

Zámek Třešť is a historic castle hotel and conference center operated under the auspices of the Czech Academy of Sciences. The website presents a well-structured hospitality business offering accommodation, dining, wellness, weddings, conferences, and an e-commerce shop. The business targets tourists, corporate clients, and wellness seekers, positioning itself as a niche cultural and historic venue with institutional backing. Technically, the site uses a modern CMS (OpenCms) and integrates popular JavaScript libraries and analytics tools, with good mobile optimization and user experience. Security posture is moderate with cookie consent and privacy policies implemented, but lacks visible advanced security headers. WHOIS data is unavailable, which slightly reduces trust but the institutional affiliation and professional presentation mitigate concerns. Overall, the site is professional, compliant with GDPR, and trustworthy for its audience.

P

Profitroom

profitroom.net

74

Profitroom is a hospitality technology company specializing in direct booking solutions for hotels, resorts, and hotel groups. Their website presents a professional and consistent brand image, targeting hospitality businesses seeking to enhance direct booking capabilities. The site is built on HubSpot CMS and integrates modern marketing and analytics tools such as Google Analytics 4, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and mobile-optimized, providing a good user experience and SEO optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, explicit security headers and incident response information are lacking. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and technology usage suggest a legitimate business presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to improve security headers, provide contact and legal information, and verify domain registration.

S

Storck

toffifee.cz

61

The website www.toffifee.cz represents the Toffifee confectionery brand, a product line under the larger Storck company. It targets a general audience with family-friendly content promoting its unique chocolate and caramel treats. The site is built on TYPO3 CMS and uses modern JavaScript libraries to deliver a responsive and visually appealing user experience. Privacy compliance is addressed with a cookie consent banner and a linked privacy policy in Czech. However, the absence of WHOIS data limits transparency and trust assessment. Security posture is moderate with no detected security headers and unknown SSL configuration. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is professional and trustworthy but could improve transparency and security practices.