Security Directory

I

IML spol. s r.o.

gimmexin.cz

50

IML spol. s r.o. operates the website gimmexin.cz, promoting and selling Gimmexin, a patented immunity support syrup targeted at both children and adults. The company positions itself within the healthcare supplement market in the Czech Republic, focusing on natural ingredients like turmeric and organic germanium to support immune function. The website serves as an informational and e-commerce platform, linking to pharmacy partners for purchase. Technically, the site is built on the SKY:CMS platform, employs modern web technologies, and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks visible security headers and formal security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security disclosures and domain registration transparency.

C

Chrám živočichů

chram.eu

55

Chrám živočichů is a small, community-oriented informational website focused on animals, providing a space of love and mercy for all beings. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. The website is accessible, mobile-optimized, and uses HTTPS to secure communications. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide contact information, which limits its business credibility and privacy compliance scores. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the site appears legitimate but would benefit from enhanced transparency and compliance documentation.

F

FTV Prima, spol. s r.o.

radio1.cz

43

Radio 1 is a well-established Czech radio station operating since 1998, specializing in alternative music and cultural programming. It serves a general audience in the Czech Republic and positions itself as a unique alternative media outlet. The website supports online streaming and provides rich content related to its radio programs and DJs. Technically, the site is built on WordPress and leverages modern web technologies including Google Tag Manager and Gemius analytics, with a consent management platform (Didomi) ensuring GDPR compliance. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Business credibility is supported by consistent WHOIS data and comprehensive privacy policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Profesní komora Sanátor is a Czech non-profit organization dedicated to the education, certification, and promotion of biotronics and complementary and alternative medicine (CAM) based on the philosophy of Josef Zezulka. The organization actively participates in international conferences and collaborates with European and global CAM associations, positioning itself as a specialized entity within the healthcare and CAM sector in the Czech Republic. The website provides comprehensive educational content, event information, and publications to support its mission. Technically, the site is built on Umbraco CMS, uses modern web technologies, and implements Google Analytics and Tag Manager for traffic analysis. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS in use and cookie consent implemented, but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which impacts domain legitimacy verification. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Transition Leytonstone

transitionleytonstone.org.uk

59

Transition Leytonstone is a community-driven initiative focused on environmental sustainability and improving the local area of Leytonstone. The website serves as an informational platform to engage local residents and environmentally conscious individuals. It operates as a small non-profit entity with a grassroots approach to community involvement. The site is built on the Wix platform, leveraging Wix's hosting and content management capabilities, which provides a moderate level of technical infrastructure suitable for small organizations. The website is accessible and mobile-optimized, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing critical security headers and policies. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user trust mechanisms. WHOIS data is unavailable due to domain naming rule violations, which raises legitimacy concerns but does not necessarily indicate malicious intent. Overall, the site is functional and serves its community purpose but requires improvements in security, compliance, and transparency to enhance trust and professionalism.

T

Terreeveille

terreveille.be

56

Terreeveille is a French-language website hosted on the Wix platform, representing a business or brand named Terreeveille. The site is professionally designed with moderate content quality but lacks detailed business descriptions, contact information, and legal policies such as privacy or terms of service. Technically, it uses Wix's Thunderbolt framework and standard web technologies, with good mobile optimization and basic SEO. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of WHOIS data due to registry restrictions limits trust verification. Overall, the site appears legitimate but would benefit from enhanced transparency and compliance documentation.

Compagnonnage R.E.P.A.S. is a French non-profit association offering a six-month itinerant educational parcours focused on understanding and experimenting with self-managed structures. The website serves as an informational and resource hub for participants and supporters, providing downloadable documents and links to related partner sites. The association operates in a niche educational and social sector, targeting individuals interested in collective action and alternative societal models. Technically, the site is built using modern static site generation technology (Eleventy) and employs MapLibre GL JS for interactive map features, hosted likely via OVH sas. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of cookie consent mechanisms and explicit privacy policy details. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

N

notre-planete.info

notre-planete.info

50

notre-planete.info is an independent French media platform specializing in environment, ecology, nature, and earth sciences. Established since 2001, it provides a wide range of content including news articles, briefs, dossiers, real-time environmental data maps, forums, and photo submissions. The site targets a general audience interested in scientific and ecological topics, positioning itself as a reference media in its niche. The business model relies on memberships, donations, and advertising. Technically, the website uses standard web technologies with modern JavaScript features and integrates Google Identity Services for user authentication, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses consent management scripts but lacks explicit security headers and incident response disclosures. Overall, the site is accessible, content-rich, and trustworthy, with good privacy compliance but could improve in security transparency and technical optimizations.

B

Brin de paille

brindepaille.org

54

Brin de paille is a small French blog and community platform focused on ecology, permaculture, and sustainable living. The website provides articles, project sharing, and suggestions aimed at a general audience interested in sustainable practices. The site is built on WordPress and hosted by OVH sas, with a modern technical stack and good mobile optimization. However, it lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Social media presence is established on Facebook, Instagram, and Twitter/X, enhancing community engagement. Overall, the site is professional and trustworthy for its niche but should improve privacy and security practices.

The website andines.fr is currently under construction and provides minimal content, primarily a placeholder message in French indicating the site is being built. The domain is registered through Infomaniak Network SA, a reputable Swiss hosting provider, and the domain age is consistent with a new or small business. The technical infrastructure is basic, utilizing standard HTML5, CSS3, Google Fonts, and Font Awesome icons, with no detected CMS beyond a hosting page builder. There are no forms, contact details, or policies present, limiting user engagement and trust. Security posture is minimal with no visible security headers or privacy compliance mechanisms, and no HTTPS status was explicitly provided in the data. The site does not employ analytics, advertising, or tracking technologies, indicating minimal digital maturity at this stage. Overall, the site is safe with no adult or questionable content but lacks essential business and security features.

G

GoGoCarto - Créez des cartes à GoGo !

gogocarto.fr

59

GoGoCarto is a French technology platform specializing in participatory mapping, enabling users to create and share community-driven map projects. The platform hosts thousands of projects, indicating a vibrant user base and active community engagement. The website is well-branded, consistent, and provides open source code and documentation links, reflecting transparency and openness. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics for privacy-conscious user tracking. The hosting is provided by Colibris outils libres, a known free software hosting provider, which aligns with the platform's open source ethos. Security posture is moderate with HTTPS enforced and sandboxed iframes, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Business credibility is supported by domain age, consistent WHOIS data, and active project hosting. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

Élabore is a French cooperative specializing in the integration and deployment of open-source ERP and CRM solutions, primarily based on Odoo, targeting associations, small and medium enterprises, and organizations within the social, ecological, and cultural sectors. Their business model emphasizes digital transition with open-source tools, offering a suite of software, training modules, and maintenance services. The company holds a Qualiopi certification for its training activities, reinforcing its credibility in the education sector. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Security-wise, the site uses HTTPS with valid SSL certificates and includes CSRF tokens, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. The security posture is adequate but could be improved by implementing DNSSEC, security headers, and publishing formal security policies. Privacy compliance is limited due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Analytics are conducted via Plausible.io, a privacy-focused service, indicating moderate user tracking. Overall, Élabore presents a trustworthy and professional online presence consistent with its cooperative and open-source ethos. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

F

fenopix

fenopix.com

57

Fenopix is a small technology company specializing in providing an HTML5 and JavaScript charting library called CanvasJS. The website positions itself as a niche provider of responsive, high-performance charting solutions suitable for developers and businesses requiring interactive data visualization. The business model revolves around software product offerings, with additional promotion of a Twitter extension called HashPlug. The site demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Bootstrap framework, and integrating Google Analytics and social media for marketing. The technical infrastructure is stable with Cloudflare DNS and GoDaddy domain registration, but lacks advanced security configurations such as DNSSEC and security headers. Security posture is basic with HTTPS enabled but missing explicit security policies or incident response information. Overall, the website is professional and safe, but lacks comprehensive privacy and cookie policies, which impacts compliance. Strategic improvements in security and privacy transparency are recommended to enhance trust and compliance.

D

Divadlo bez zábradlí

bezzabradli.cz

60

Divadlo bez zábradlí is a Czech theatre company with a website that provides information about its theatrical performances and cultural events. The domain is well-established since 2001, indicating a stable presence in the local cultural scene. The website design is professional and user-friendly, optimized for mobile devices, and includes a cookie consent mechanism, reflecting some level of privacy awareness. However, the absence of a privacy policy, terms of service, and explicit contact information limits the site's compliance and user trust. Technically, the site uses modern web standards and Mapbox for map integration but lacks advanced security headers and detailed security policies. Overall, the security posture is moderate but could be improved with better security practices and transparency. The site content is safe for general audiences with no adult or questionable material detected.

K

Kulturní centrum Labuť

kclabut.cz

58

Kulturní centrum Labuť is a local cultural center based in Říčany, Czech Republic, offering a variety of cultural events, courses, and ticket sales. The website serves as an official portal for event information, ticket purchasing, and community engagement. It targets local residents and visitors interested in cultural activities. The business model revolves around event hosting, ticket sales, and community cultural promotion, positioning itself as a key local cultural institution with several partnerships and sponsors.

V

Vorwerk

vorwerk-digital.com

64

Vorwerk is a well-established manufacturing company specializing in household appliances, notably the Thermomix and Kobold brands. The website www.vorwerk.com functions primarily as a country selector landing page, directing users to localized versions of Vorwerk and Thermomix websites across multiple countries. This indicates a global market presence and a business model focused on direct sales and regional customer engagement. The website's content is minimal, focusing on navigation rather than detailed product or corporate information. From a technical perspective, the site uses standard web technologies such as HTML5, CSS3, and JavaScript, but lacks advanced frameworks or CMS indicators. The performance and mobile optimization are basic, with no detected analytics or tracking scripts in the provided content. Security features such as HTTPS enforcement, security headers, and privacy policies are not evident in the analyzed content, which suggests room for improvement in digital maturity and compliance. Security posture evaluation reveals a lack of visible security headers and no SSL configuration details, which are critical for protecting user data and ensuring trust. The absence of privacy and cookie policies further highlights compliance gaps, particularly concerning GDPR and other data protection regulations. The WHOIS data for the domain is unavailable or protected, which is common for large enterprises but reduces transparency and trustworthiness from a domain registration perspective. Overall, the website presents a moderate risk profile primarily due to limited security and privacy disclosures. Strategic recommendations include implementing robust HTTPS configurations, adding comprehensive privacy and cookie policies, enhancing security headers, and improving transparency around domain registration. These steps will strengthen trust, compliance, and security posture, aligning the digital presence with the company's global brand stature.

E

Elephant Orchestra, a.s.

pujcky.cz

63

Pujcky.cz is a Czech Republic-based loan comparison platform operated by Elephant Orchestra, a.s. The website aggregates loan offers from various bank and non-bank lenders, providing consumers with an easy way to compare and apply for loans. The platform leverages affiliate partnerships to redirect users to loan providers, facilitating lead generation. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and includes accessibility features, though lacks visible security headers and comprehensive privacy documentation. Security posture is moderate with HTTPS usage but missing advanced headers and incident response contacts. The absence of WHOIS data limits domain trust assessment, but the business appears legitimate based on content and partner links. Strategic improvements include publishing clear privacy and terms policies, enhancing security headers, and adding vulnerability disclosure mechanisms.

V

Vorwerk & Co. KG

cookidoo.de

64

Cookidoo.de is the official Thermomix® recipe portal operated under the Vorwerk & Co. KG brand, targeting German-speaking Thermomix users and cooking enthusiasts. The platform offers extensive recipe collections, meal planning, and shopping list features, supporting a subscription-based business model. The website demonstrates a high level of digital maturity with modern web technologies, responsive design, and integrated search capabilities via Algolia. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

V

Vorwerk & Co. KG

cookidoo.es

66

Cookidoo.es is the official Spanish-language recipe platform for Thermomix®, operated by Vorwerk & Co. KG. It offers a subscription-based service providing thousands of recipes, meal planning, and shopping list management tailored for Thermomix® users. The platform targets cooking enthusiasts in Spain and maintains strong brand consistency with official Thermomix® branding and a professional, user-friendly website. Technically, the site uses modern web technologies including Algolia for search and OneTrust for cookie consent, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy policies and incident response contacts are not found on the analyzed page. Overall, the domain registration aligns well with the business identity, indicating high legitimacy and trustworthiness.

V

Vorwerk

cookidoo.fr

64

Cookidoo.fr is the official French recipe platform for Thermomix®, operated by Vorwerk. It offers a comprehensive digital service including thousands of recipes, meal planning, and shopping list features tailored for Thermomix® users. The platform targets French-speaking consumers interested in cooking with Thermomix® appliances, providing a subscription-based model for access to premium content. The website demonstrates a high level of digital maturity with modern web technologies such as Algolia search and OneTrust cookie consent integration, hosted on professional infrastructure with AWS DNS services. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and policies are not visible in the provided content. Privacy compliance is moderate due to the absence of visible privacy policy and terms of service links on the analyzed page. Overall, the site is professional, trustworthy, and well-branded, with no signs of malicious or adult content.

C

CanvasJS

canvasjs.com

68

CanvasJS is a specialized technology company providing a high-performance HTML5 JavaScript charting library designed for developers and businesses requiring advanced data visualization solutions. The company offers a broad range of chart types and supports multiple popular frameworks such as React, Angular, and jQuery, positioning itself as a versatile and developer-friendly solution in the data visualization market. The business is a subsidiary of Fenopix and has been operational since 2013, with a domain registration dating back to 2011, indicating a stable and established presence. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is optimized for performance and mobile responsiveness, with good SEO practices implemented via Yoast SEO. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring reliable uptime and performance. From a security perspective, the site enforces HTTPS with strong domain status protections and includes standard security headers. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response contacts are published, suggesting room for enhancement in transparency and security governance. The site does not expose sensitive data and uses asynchronous loading for analytics scripts to minimize performance impact. Overall, CanvasJS presents a professional, trustworthy, and technically sound web presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

Les Petits Débrouillards is a French non-profit association dedicated to promoting scientific culture, education, and civic engagement among children and youth. The organization operates nationally with regional branches, offering educational programs, exhibitions, training, and volunteer opportunities. Their mission emphasizes curiosity, critical thinking, solidarity, and citizenship, positioning them as a key player in the French educational non-profit sector. Technically, the website is built with standard HTML5 and CSS, featuring multimedia content such as videos. While the site is accessible and well-structured, it lacks advanced technical frameworks or CMS indications. Mobile optimization and accessibility are basic but functional. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. The WHOIS data is malformed and incomplete, which reduces domain trustworthiness from a registration standpoint. However, the professional content, official contact information, and external partnerships support the site's legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a trustworthy and professional front for a medium-sized educational non-profit. Strategic improvements in security headers, cookie consent mechanisms, and WHOIS transparency would enhance trust and compliance.

The website osonslesjoursheureux.net is currently a placeholder page indicating that the site is under construction. There is no business information, contact details, or service descriptions available. The site is hosted by Infomaniak, a reputable Swiss hosting provider, and uses basic web technologies such as HTML5, CSS3, Font Awesome, and Google Fonts. The technical infrastructure is minimal and lacks advanced frameworks or CMS beyond the hosting page builder. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy or cookie policies. No forms or data collection mechanisms are present, indicating minimal risk but also limited functionality. Overall, the site is not yet operational as a business or service platform, resulting in low trust and credibility scores.

A

Autour du 1er mai

autourdu1ermai.fr

44

Autour du 1er mai is a French non-profit cultural association dedicated to cinema, popular education, and collective projects aimed at societal improvement. The website serves as a portal for film-related resources, including a cinema and society database, filmographies, and event information. It also coordinates the TESSA project and participates in the CoreDem network, indicating active collaboration within the cultural sector. The target audience is general public interested in cinema and social issues. The organization has a long-standing presence since 2006, supported by a domain age of over 17 years and multiple partner affiliations. Technically, the website is built on the SPIP CMS platform, using standard web technologies such as HTML5, CSS, JavaScript, and jQuery. It employs Matomo analytics, a privacy-respecting tool, and is hosted by OVH, a reputable provider. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and privacy-conscious analytics but lacks explicit security headers and a cookie consent mechanism. There is no visible security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing a legitimate and stable registration. Overall, the website is professional, trustworthy, and serves its niche well. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and improving accessibility to strengthen compliance and security posture.

B

Bordeaux Métropole

bordeaux-metropole.fr

61

Bordeaux Métropole is the official metropolitan government entity serving 28 communes around Bordeaux, France, providing a wide range of public services including urban planning, transport, waste management, water, economic development, and environmental initiatives. The website serves residents, professionals, associations, and visitors with comprehensive information and digital services. Technically, the site is built on Drupal 10 with modern frontend technologies like Swiper.js, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is typical for some ccTLDs or privacy-protected domains and does not detract from the site's legitimacy given its government nature. Overall, the site is professional, trustworthy, and well-maintained, supporting the metropolitan community effectively.

H

Hespul

hespul.org

60

Hespul is a French non-profit association with over 30 years of experience specializing in renewable energy, particularly solar photovoltaic technology, and energy efficiency. The organization focuses on accelerating the energy transition through project development, education, and community engagement. Their website reflects a mature digital presence with a clear mission and professional content targeting professionals and communities interested in sustainable energy solutions. Technically, the site uses modern web technologies including Foundation framework, FontAwesome icons, and Matomo analytics, hosted on a reputable registrar's infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and cookie consent mechanisms. The absence of direct contact emails or phone numbers is a minor limitation, with contact primarily via web forms. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

E

eko & co

discre.to

57

Discre.to is a French-based small technology company offering 'discreto', an open source GDPR-compliant consent management tool focused on user privacy and anonymity. The website provides extensive documentation, configuration options, and integration with popular analytics and advertising services, emphasizing anonymized data collection and user control. The company, eko & co, sponsors the project and offers consulting and donation options. Technically, the site uses modern web technologies including JavaScript, Sass, and Webpack, and is hosted likely on OVH. Security practices include respecting Do Not Track headers and anonymizing IP addresses, though explicit security headers and policies are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with GDPR principles, though it lacks explicit privacy and terms of service pages.

R

REScoop.eu

rescoop.eu

42

REScoop.eu is a well-established European federation representing over 2,500 energy communities and 2 million citizens engaged in the energy transition. The organization operates primarily in the energy sector, focusing on cooperative principles and community-driven renewable energy projects. Their services include project support, networking, training, advocacy, financing, and coaching, positioning them as a key player in the European community energy landscape. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their audience. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Mailchimp for newsletter management and Google Tag Manager for analytics. The site demonstrates good performance and accessibility standards, though explicit CMS or hosting details are not disclosed. Privacy compliance is robust with clear privacy and cookie policies and an active consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to privacy protection, which is common and justified for a non-profit federation in Europe. Overall, the site presents a low risk profile with a strong trustworthiness rating. Strategically, REScoop.eu should consider enhancing their security posture by publishing security policies, implementing security headers, and providing vulnerability disclosure information to further build trust and compliance. Continued focus on privacy and transparent data practices will support their community-oriented mission and regulatory adherence.

The Fondation Charles Léopold Mayer pour le Progrès humain (FPH) is a Swiss non-profit foundation established in 1982, dedicated to supporting civil society organizations advocating for social and ecological transition. Funded by the estate of Charles Léopold Mayer, the foundation operates with a long-term vision to promote participatory, fair, and sustainable societal development. The website presents clear information about the foundation's history, aims, and governance, targeting philanthropic partners and civil society actors. Technically, the website is built using the SPIP CMS with custom CSS and JavaScript, including Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no explicit security headers or incident response policies are visible, and cookie consent mechanisms are absent, which could be improved for better GDPR compliance. Overall, the security posture is moderate with room for enhancement. The domain WHOIS data aligns well with the website content, showing a consistent and legitimate registration for a Swiss foundation. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

V

Vorwerk

recipecommunity.co.uk

64

Cookidoo® is the official Thermomix® recipe platform operated under the Vorwerk brand, offering a comprehensive digital service for Thermomix® users in the UK. The platform provides thousands of recipes, meal planning tools, shopping list management, and cooking tutorials, positioning itself as a leading culinary resource for its target audience. The business model is subscription-based, focusing on delivering value through curated and user-friendly content. Technically, the website employs modern web technologies including custom web components, Algolia search, and a cookie consent mechanism via OneTrust, ensuring a good user experience across devices with solid SEO and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and policies are not prominently published. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation on the analyzed page. The domain registration is consistent and legitimate, supporting the platform's credibility. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

M

Městská část Praha 18

praha18.cz

45

The website praha18.cz serves as the official digital portal for the municipal district Praha 18 (Letňany) in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, social support, public notices, events, and contact details. The site also promotes a mobile application to enhance citizen engagement and accessibility. The business model is that of a government service portal focused on transparency and community interaction. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google Analytics and Google reCAPTCHA for analytics and form security, respectively. The site is hosted on reputable Czech providers and employs HTTPS with strong SSL configuration. The design is responsive and accessible, with good SEO practices and clear navigation. From a security perspective, the site demonstrates good practices including HTTPS enforcement, GDPR-compliant cookie consent with granular options, and use of reCAPTCHA to prevent spam. However, it lacks explicit security policies, incident response contacts, and security headers which could enhance its security posture. No vulnerabilities or suspicious content were detected. Overall, praha18.cz is a trustworthy and professionally maintained municipal website with a strong focus on user accessibility and compliance. Strategic improvements in security policy transparency and header implementation could further strengthen its security and trustworthiness.

V

Vorwerk & Co. KG

cookidoo.cz

67

Cookidoo.cz is the official Czech platform for Thermomix® recipes, operated by Vorwerk & Co. KG. It offers a comprehensive digital subscription service providing thousands of recipes, meal planning, and shopping list features tailored for Thermomix® users. The platform is well-established since 2014 and serves the Czech market with localized content and language support. Technically, the website leverages modern web technologies including Algolia for search, OneTrust for cookie consent, and Snowplow for analytics, hosted on AWS infrastructure, ensuring good performance and scalability. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security contact and incident response information are not publicly disclosed. Privacy compliance is robust with clear policies and consent mechanisms aligned with GDPR. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.

E

ESPRIT BOHEMIA s.r.o.

perfectwoman.cz

58

The website perfectwoman.cz represents the Czech lifestyle magazine PERFECT WOMAN, published by ESPRIT BOHEMIA s.r.o. The magazine targets active and confident women, offering content on fashion, beauty, health, relationships, family, career, and travel. The business model revolves around magazine publication with subscription and advertising revenue streams. The company has a stable market presence of approximately 19 years, indicating a well-established brand in the Czech media sector. Technically, the site is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for content delivery. The site uses modern web technologies including JavaScript and CSS3, and is optimized for mobile devices with good SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating basic privacy compliance. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for enhancement. The absence of WHOIS data limits domain trust verification, though the website content and business information appear professional and legitimate. Overall, the site is a good-quality, professional media platform with moderate technical and security maturity. Strategic improvements in privacy documentation, security headers, and domain transparency would enhance trust and compliance.

A

Asociace kosmetických a kadeřnických oborů ČR

akocr.cz

9

The website represents the Asociace kosmetických a kadeřnických oborů ČR, an association supporting entrepreneurs and professionals in the cosmetics and hairdressing industry in the Czech Republic. It aims to enhance the prestige of the industry and promote education and expertise among its members. The site is built using modern web technologies such as Nuxt.js and FontAwesome, hosted via a Czech registrar Wedos, and presents a professional and consistent brand image. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks explicit security headers and detailed security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy, although a cookie consent mechanism is present. Overall, the site is trustworthy and serves its niche audience effectively.

K

KPMG Legal s.r.o.

kpmglegal.cz

61

KPMG Legal s.r.o. is a professional legal services firm based in the Czech Republic, specializing in corporate law, transactions, regulatory matters, labor law, litigation, and technology law. The firm is part of the global KPMG network, which provides it with international reach and multidisciplinary expertise. The website reflects a strong market position with a comprehensive range of legal services targeted at corporate clients and businesses. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and cookie consent management, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the site is professional, trustworthy, and well-structured, supporting the firm's credibility and business objectives.

K

KPMG Česká republika, s.r.o.

danovky.cz

65

The website danovky.cz serves as a professional information portal providing tax, legal, and accounting updates primarily for Czech Republic businesses and professionals. It is operated by KPMG Česká republika, a subsidiary of the global KPMG network, reflecting a strong market position in the finance and consulting sector. The site offers regularly updated articles, podcasts, newsletters, and event invitations, supporting KPMG's advisory services and thought leadership. Technically, the website employs modern JavaScript frameworks, consent management tools, and analytics services such as Google Analytics and Google Tag Manager. It is hosted by REG-ZONER, with a custom or proprietary CMS. The site is mobile-optimized with good SEO and basic accessibility features, delivering moderate performance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with comprehensive policies and GDPR-aligned consent management. Overall, the website presents a low-risk profile with professional content and infrastructure. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen trust and resilience.

K

KERAIN, a.s.

kerain.cz

56

KERAIN, a.s. is a Czech company specializing in real estate rental services including residential and commercial properties, alongside production, trade, and other services outside the scope of standard trade licensing annexes. The company maintains strategic partnerships with KERAMOST and KERACLAY, key players in the mining and processing of mineral raw materials in the Czech Republic and abroad, combining traditional manufacturing with modern technological innovations. The website presents a professional and business-focused image with clear contact details and links to official Czech business registries, supporting its market credibility. Technically, the website employs a basic but functional technology stack including jQuery 1.11.3 and Swiper.js for UI elements. The site is mobile-optimized with good design quality and navigation clarity, though some accessibility features could be improved. No advanced CMS or hosting provider details were detected. Performance is moderate, with no evident analytics or tracking scripts, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance. The use of an outdated jQuery version poses potential security risks. No forms collecting sensitive data were found, reducing immediate exposure risks. WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional site content. Overall, the website is safe, business-oriented, and trustworthy for general audiences. However, improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security posture.

E

Enel Cuore Onlus

enelcuore.it

74

Enel Cuore Onlus is a non-profit organization affiliated with the Enel Group, dedicated to supporting social welfare initiatives across Italy. The website clearly communicates its mission to promote social well-being through funding and supporting non-profit projects focused on education, social inclusion, health, and autonomy. The organization leverages its strong brand association with Enel, enhancing its credibility and market position within the energy and non-profit sectors. Technically, the website is built on Adobe Experience Manager, utilizing modern web technologies including Adobe DTM for tag management and AblePlayer for accessible media playback. The site demonstrates good performance, mobile optimization, and accessibility compliance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard security best practices, although some HTTP security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence that effectively supports the organization's mission. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining compliance documentation to further strengthen security and trust.

E

e Penziony CZ

e-penziony.cz

53

e-penziony.cz is a Czech hospitality platform offering a comprehensive database of over 4,000 pensions and private apartments primarily in the Czech Republic. The site targets travelers seeking affordable, commission-free accommodation directly from owners, as well as property owners wishing to register their listings. Technically, the website uses a custom-built infrastructure with standard web technologies including jQuery, Google Analytics, and MapLibre for mapping. It is hosted behind Cloudflare DNS, ensuring reliable performance and security. However, the use of an outdated jQuery version and absence of privacy and cookie policies indicate areas for improvement in security and compliance. The site is accessible without WAF blocking and shows consistent WHOIS data supporting its legitimacy. Overall, the platform is a well-established niche player in Czech hospitality with moderate digital maturity and some compliance gaps.

A

Anaïs Guégan

spectre-visible.com

55

Spectre visible is a personal portfolio website for the artist Anaïs Guégan, showcasing photographic or artistic works themed around visible spectrums and colors. The site targets a general audience interested in art and photography, operating as a small-scale personal branding platform. The website is built on WordPress, hosted by OVH sas, and uses modern web technologies including jQuery and FontAwesome. It features a clean design with good navigation and mobile optimization, although accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is legitimate and professionally presented but would benefit from enhanced privacy compliance and security hardening.

The website territoires-emplois.org represents a collaborative initiative by ADEME and Réseau Action Climat France to provide a specialized tool (TETE) for estimating job creation through ecological transition policies at various territorial levels in France. The site offers the tool as a downloadable Excel file accompanied by guides and training resources, targeting local authorities, associations, and other stakeholders involved in climate-energy planning. The business model is primarily non-commercial, focusing on free tool distribution with optional paid training. Technically, the site is built on WordPress, using standard web technologies and hosted by OVH. While the site is accessible and professionally designed with good content relevance and navigation, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Tracking is implemented via Google Analytics and Tag Manager with moderate user tracking. Overall, the domain registration is consistent and legitimate, supporting the site's credibility.

R

Réseau TEPOS (animated by réseau Cler)

tepos.fr

54

The website tepos.fr represents the TEPOS network, a French energy transition network animated by the larger association réseau Cler. It serves over 150 local actors including municipalities and project leaders engaged in positive energy transition initiatives. The site provides news, events, resources, and a newsletter subscription to support and coordinate these actors. The business model focuses on network facilitation and knowledge sharing within the energy sector in France. Technically, the site is built on WordPress, uses modern JavaScript libraries like Vue.js and Axios, and is hosted by OVH, a reputable provider. The site is well-structured, mobile-optimized, and includes SEO best practices. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though it lacks explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its target audience.

E

Eolise

eolise.fr

52

Eolise is a French independent company specializing in the development of local wind and photovoltaic energy projects primarily in the Poitou region. Founded in 2016, it operates with a small team of 12 employees possessing complementary skills in energy, environment, agriculture, and communication. The company emphasizes local partnerships and sustainable development, positioning itself as a regional leader in renewable energy project development. The website reflects a professional and consistent brand image with clear information about projects, team, and local engagement. Technically, the website is built on WordPress and hosted by OVH, utilizing modern web technologies including HTML5, CSS3, JavaScript, and libraries such as Modernizr and Axios. It incorporates Google Analytics for visitor tracking with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility basics, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and includes cookie consent for privacy compliance. However, it lacks published formal security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection masking, indicating legitimacy. Overall, the website presents a trustworthy and professional digital presence with moderate to good technical and security posture. Strategic improvements could include publishing detailed security and incident response policies, enhancing accessibility, and adding terms of service to strengthen compliance and user trust.

D

DYGI - Social Media Agency, s.r.o.

dygi.cz

37

DYGI: is a small digital marketing agency based in Prague, Czech Republic, specializing in social media marketing, influencer campaigns, crisis communication, political lobbying, and training workshops. Founded in 2019, the company targets businesses seeking to enhance their social media presence and digital communication strategies. The website presents a professional image with clear branding, contact information, and social media integration, positioning DYGI as a niche player in the Czech digital marketing sector. Technically, the website uses standard web technologies including HTML5, CSS animations, and JavaScript with jQuery. Hosting appears to be provided by Active24, a regional hosting provider consistent with the company's location. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and secure form submission but lacks visible security headers and published privacy or cookie policies, indicating compliance gaps with GDPR and general data protection best practices. No incident response or security contact information is provided. The WHOIS data is transparent and consistent with the business claims, supporting legitimacy. No suspicious or malicious indicators were found. Overall, DYGI presents a credible and professional digital marketing agency website with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

C

COGITERRA

emploi-environnement.com

69

Emploi-Environnement is a specialized French job board and recruitment platform focusing on the environmental and sustainable development sectors. It offers job listings, candidate CV registration, recruitment services, and career resources tailored to professionals and organizations in this niche. The platform targets job seekers and recruiters primarily in France and francophone countries, positioning itself as a key player in environmental employment services since 2002 under the company COGITERRA. Technically, the website employs a traditional web stack with jQuery, JavaScript, CSS, and HTML5, complemented by modern analytics tools such as Google Analytics 4 and WebTag Echobox. The site is mobile responsive with good SEO practices and a moderate performance profile. However, no CMS or hosting provider details are explicitly detected. The site implements cookie consent mechanisms and privacy policies consistent with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or sensitive data exposures are evident in the HTML content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and CNIL registration number suggest a legitimate business operation. Overall, Emploi-Environnement presents a professional and trustworthy platform for environmental job seekers and recruiters, with room for improvement in security transparency and domain registration verification. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain WHOIS information to strengthen trust and compliance.

C

CyberGhost

cyberghostvpn.com

58

CyberGhost VPN is a well-established VPN service provider offering fast, secure, and private VPN solutions across multiple platforms including desktop, mobile, and smart TVs. The company targets consumers and businesses seeking enhanced online privacy and security. Their business model is subscription-based, with a strong market position supported by a comprehensive privacy policy and a 45-day money-back guarantee. The website is professionally designed with excellent content quality and clear navigation, supporting a positive user experience. From a technical perspective, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates third-party libraries like Font Awesome and Usercentrics for cookie consent management. The site is mobile-optimized, fast-loading, and SEO-friendly. Security headers and HTTPS enforcement indicate a strong security posture, although explicit security policies and incident response information are not publicly detailed. The security posture is robust with no detected vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data and direct company contact information slightly reduces trustworthiness. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, CyberGhost VPN presents a professional and trustworthy online presence with strong technical and security foundations. Strategic improvements include publishing detailed security policies, incident response contacts, and enhancing transparency around business registration and certifications.

Y

Yann Rolland

yannrolland.com

45

Yann Rolland operates as a freelance consultant specializing in digital advice, design, and development, primarily serving clients in the energy transition, environmental, and social sectors. The website presents a professional portfolio showcasing a wide range of projects for reputable organizations, indicating a strong niche market position in France. The business model is focused on freelance digital services with a clear emphasis on sustainable and socially impactful projects. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted on o2switch.net. The site is mobile-optimized with moderate performance and basic accessibility features. SEO is basic but sufficient for the site's purpose. Analytics are implemented via Google Analytics, but no cookie consent mechanism or privacy policies are present, indicating room for compliance improvement. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled and no security headers are detected, which are recommended enhancements. No forms or sensitive data collection points are present, reducing attack surface. The absence of privacy and cookie policies and vulnerability disclosure mechanisms are notable compliance gaps. Overall, the website is professional and trustworthy with a solid business credibility score. The main risks relate to privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and establishing a vulnerability disclosure process to enhance security posture and regulatory compliance.

Thibaut Caroli is a freelance digital designer and front-end developer specializing in website conception, design, and development, primarily serving environmental protection and climate change awareness associations. The website serves as a professional portfolio showcasing projects and providing contact information. The business model is focused on freelance services with a niche market position in non-profit environmental sectors. The technical infrastructure is based on WordPress CMS with custom themes, leveraging standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and FontAwesome. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The website demonstrates good design quality, mobile optimization, and user experience, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy measures.

P

Profesionalni.info

profesionalni.info

60

Profesionalni.info is a Czech Republic based small business specializing in custom web development, digital marketing, and graphic design services. Led by Radek Ahne with over 25 years of experience, the company offers a broad portfolio including website creation, SEO optimization, AI technology integration, and e-commerce solutions. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses modern web technologies such as Bootstrap, PHP, JavaScript libraries, Google reCAPTCHA, and Google Tag Manager, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and anti-bot measures, though improvements could be made by adding security headers and explicit privacy policies. Overall, the business shows strong credibility with detailed contact information, client references, and social media presence. The WHOIS data is unavailable, likely due to privacy protection, but the website content and structure support legitimacy. Strategic recommendations include enhancing privacy compliance and security headers to further strengthen trust and compliance.

Č

České modelky s.r.o.

feetmodels.eu

57

České modelky s.r.o. operates a specialized website feetmodels.eu offering professional advertising and product photography services focused on feet modeling for e-commerce clients, primarily in the footwear and foot care product sectors. Established since 2006, the company targets e-shops and businesses requiring high-quality visual content to enhance product presentation. The website also supports a community of feet models and offers opportunities for paid modeling work, including remote selfie photography. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, hosted by a reputable Czech provider, ensuring a responsive and user-friendly experience. Security measures include HTTPS, Google reCAPTCHA, and a comprehensive cookie consent mechanism, although advanced security headers and incident response policies are not explicitly published. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. The domain registration aligns with the business claims, enhancing trustworthiness. The website content is safe for general audiences, with no adult or explicit material detected.