Security Directory

W

webDOMU s.r.o.

webdomu.cz

55

webDOMU.cz is a Czech Republic based SaaS platform specializing in providing web solutions for housing cooperatives (bytová družstva) and homeowners associations (SVJ). Founded in 2014, the company offers a comprehensive portal that enables easy creation and management of websites tailored to the needs of these communities. Their services include online voting, document sharing, automated notifications via email and SMS, and additional financial and insurance services. The platform targets a niche market with a strong local presence and a loyal customer base of over 20,000 users. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, integrates multiple analytics tools including Google Analytics and Matomo, and uses HTTPS to secure data transmission. However, the backend CMS appears custom-built with no explicit mention of security frameworks or certifications. Security posture is solid with encrypted data transmission and secure login forms, but lacks published security policies or incident response contacts. Privacy compliance is basic with cookie consent mechanisms and terms of service available, but no dedicated privacy policy or GDPR compliance statements were found. Overall, the website is professional, trustworthy, and well-positioned in its market segment, though improvements in security transparency and accessibility could enhance its maturity.

I

International Fiscal Association

ifa.nl

57

The International Fiscal Association (IFA) is a well-established non-governmental and non-sectoral international organization focused on the study and advancement of international and comparative fiscal law. Founded in 1938 and based in the Netherlands, IFA serves a global audience of tax professionals, academics, government officials, and judiciary members. The website reflects a professional and authoritative presence with comprehensive content about its congresses, research, awards, and membership services. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, and it is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations.

I

ImperialMedia s.r.o.

imperialmedia.cz

58

ImperialMedia s.r.o. is a Czech advertising and digital agency offering comprehensive services including graphic design, web development, online marketing, photography, and advertising production. The company targets businesses across the Czech Republic, positioning itself as a professional and certified agency with national reach. Their website demonstrates a high level of digital maturity, utilizing WordPress CMS with modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is well optimized for SEO, mobile responsiveness, and accessibility, providing a positive user experience. Security posture is solid with HTTPS and secure forms, though some HTTP security headers are missing and no explicit security policy or incident response information is published. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a trustworthy and professional small business agency, though the absence of WHOIS data slightly reduces domain trustworthiness.

A

AUMOVIO Aftermarket GmbH

galfer-frenos.es

49

GALFER is a medium-sized manufacturing company specializing in high-end braking systems for the automotive aftermarket, operating primarily in Spain with international partner sites. The website reflects a professional business presence with good content quality and clear navigation, targeting automotive commercial partners and customers. Technically, the site uses Umbraco CMS, integrates Google Tag Manager and reCAPTCHA for analytics and security, and implements cookie consent mechanisms aligned with GDPR. However, a visible server-side error message indicates backend issues that could expose sensitive information. Security posture is moderate with some best practices observed but lacks explicit security policies and incident response information. Overall, the website is functional and trustworthy but would benefit from backend fixes and enhanced security transparency.

A

AUMOVIO Aftermarket GmbH

galfer-hamulce.pl

62

GALFER is a specialized supplier of high-quality brake components, targeting both B2B and B2C customers primarily in Poland and supported by an international partner network. The website presents a professional and consistent brand image with clear navigation and relevant content focused on brake pads and dealer services. The technical infrastructure leverages modern tools such as Google Tag Manager and reCAPTCHA Enterprise, and is built on Umbraco CMS, indicating a mature digital presence. Security measures include HTTPS usage and CSRF protection, though explicit security headers are not detected, suggesting room for improvement. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, supporting GDPR adherence. Overall, the site is trustworthy and well-positioned in its market segment.

A

AUMOVIO Aftermarket GmbH

galfer-aftermarket.it

6

The website galfer-aftermarket.com is operated by AUMOVIO Aftermarket GmbH, focusing on automotive aftermarket products such as brake pads and dealer support. The site targets a global audience with multiple localized versions. However, the current page content is a 404 error page, limiting the available business information. The technical infrastructure includes Google Tag Manager and Google reCAPTCHA Enterprise, indicating some level of digital maturity and bot protection. Privacy compliance is partially addressed with a cookie consent modal and a privacy policy link. Security posture is moderate but lacks visible security headers and explicit SSL configuration details. The absence of WHOIS registration data for the domain is a significant concern, reducing trustworthiness and suggesting the need for further verification. Overall, the website presents basic content quality and moderate technical implementation but is hindered by domain registration inconsistencies and minimal content availability.

R

Raketsport

raketsport.cz

45

Raketsport.cz is a specialized retailer and distributor of racket sports equipment, operating primarily in the Czech and Slovak markets. The company positions itself as an exclusive distributor for several well-known brands such as Tecnifibre, Victor, and Pro Kennex. The website reflects a professional and consistent brand image with clear business contact information and a focus on serving players of all ages and skill levels. The business model centers on B2B and retail distribution of sports equipment, supported by a dedicated team of representatives. Technically, the website employs a modern frontend stack including Bootstrap 4 and jQuery, hosted on Czech hosting infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced SEO and accessibility features, and no CMS or backend platform is explicitly detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable inputs. However, it lacks published privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. No tracking or analytics scripts were detected, indicating minimal user tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user trust.

S

Snídaňuj tour

snidanujtour.cz

45

Snídaňuj tour is a small Czech travel agency specializing in organized tours to destinations such as Slovenia, Poland, and other locations. Their offerings include thermal spa trips, skiing holidays, cycling tours, and hiking excursions. The website is professionally designed using WordPress and Elementor, featuring clear navigation and good mobile optimization. Contact details including phone and email are prominently displayed, alongside active social media profiles on Facebook, Instagram, and YouTube. Technically, the site uses modern web technologies and enforces HTTPS, but lacks security headers and privacy-related policies. No forms or tracking scripts were detected on the main page, indicating minimal data collection. The domain registration is recent but consistent with the business launch timeline, with transparent WHOIS data. Overall, the site presents a trustworthy and professional image but would benefit from enhanced privacy and security practices.

R

Regiontourist.cz

regiontourist.cz

50

Regiontourist.cz is a Czech Republic-based online tourism platform established in 2009, offering curated accommodation listings, travel experiences, and regional travel tips. The platform targets tourists and service providers in the hospitality sector, providing a marketplace and content hub for travel planning within the Czech Republic. The website demonstrates a good level of content quality, with clear navigation, structured data for SEO, and active social media integration. Technically, it uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Google Tag Manager, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which impacts trust and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

O

ORGREZ Group, a.s.

orgrezgroup.cz

59

ORGREZ Group, a.s. is a well-established private holding company specializing in the energy sector and environmental protection, operating since 1957. The company unites multiple subsidiaries focused on diagnostics, energy optimization, flue gas cleaning, heat production, and consulting services related to energy planning and decarbonization. Their market position is solid within Central and Eastern Europe, targeting businesses and organizations seeking sustainable energy solutions. The website reflects a professional corporate presence with clear branding and comprehensive service descriptions. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could enhance the technical posture. Performance is moderate, consistent with Webflow-hosted sites. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security policies, incident response information, and vulnerability disclosure reduces transparency. The WHOIS data is unavailable, limiting domain trust analysis, but the website content and business information appear legitimate and professional. Overall, the website presents a trustworthy and professional image with good privacy compliance and moderate technical maturity. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility to strengthen compliance and trust.

L

Le Relais des Fermes

relais-desfermes.com

59

Le Relais des Fermes is a specialized mountain restaurant located at 1300 meters altitude in Megève, France, offering authentic Alpine cuisine and a warm, family-friendly atmosphere. The business operates primarily during the winter season and offers event privatization services for groups up to 100 people. The website is professionally designed, multilingual, and integrates modern web technologies including Google Tag Manager and Weglot for translation. Security measures such as HTTPS and Google reCAPTCHA are implemented, and privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data raises some concerns about domain transparency, although the website content and branding strongly indicate a legitimate hospitality business affiliated with Maison & Hotels Sibuet.

P

Palais de Tokyo

palaisdetokyo.com

60

Palais de Tokyo is a prominent cultural institution based in Paris, France, dedicated to contemporary art. It is recognized as the largest center for contemporary art in Europe, offering exhibitions, performances, educational workshops, and a retail boutique. The website reflects a mature digital presence with a modern tech stack including Nuxt.js and Vue.js, and incorporates privacy compliance tools such as tarteaucitron for cookie consent and Sibforms for newsletter subscriptions. The site is well-designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and publishing a security policy could enhance trust further. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, serving a general audience interested in art and culture.

C

Calligraphers Guild

calligraphersguild.org

59

The Washington DC Calligraphers Guild is a non-profit organization established in 1976 that promotes the appreciation and practice of calligraphy. The website serves as an informational portal for beginners, skilled calligraphers, and those interested in hiring calligraphy services. The organization targets a niche audience passionate about calligraphy and related arts. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the site is professionally designed and mobile-optimized, it lacks visible privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security headers and incident response information are not evident, indicating room for improvement in security posture. The absence of WHOIS data limits the ability to fully assess domain legitimacy, but the website content and branding suggest a legitimate entity. Overall, the site provides good content quality and user experience but requires enhancements in privacy, security, and transparency to improve trust and compliance.

H

Hitzerot Shop

hitzerot.com

72

Hitzerot Shop is a niche e-commerce business based in Berlin specializing in print publications related to graffiti and urban culture. The website offers a curated selection of books, zines, exhibition catalogues, and prints, targeting collectors and enthusiasts of this art form. The business has been active since 2015, aligning with the domain registration date, and maintains a focused market position within the retail and media sectors. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience.

A

Apaperbook

apaperbook.com

43

A Paper Book (apaperbook.com) is a niche publishing project focused on cataloging artistic paintings on red-brown steel freight wagons. The website presents a single product with descriptive content and a link to an external shop. The business operates in a specialized art publishing market with a small scale and limited digital footprint. Technically, the site is built with basic HTML, CSS, and JavaScript, hosted on a provider associated with the registrar NameWeb BVBA. The site lacks advanced CMS or frameworks and shows basic mobile optimization and SEO. Security posture is minimal with no detected security headers or privacy policies, and no forms or data collection mechanisms are present. The domain is well-registered and consistent with the business timeline, indicating legitimacy. Overall, the site is functional but lacks comprehensive compliance and security features.

The website www.pau.fr serves as the official digital portal for Pau Agglomération, a French municipal government entity. It provides comprehensive information and services related to daily life, urban planning, culture, social services, and community engagement for residents and visitors. The site is built on Drupal 10 and integrates Matomo analytics for privacy-conscious user tracking. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence for a government organization. Security posture is good with HTTPS and some security best practices observed, though explicit security policies and incident response information are not publicly visible. The absence of WHOIS data is a notable anomaly that warrants further verification but does not detract from the site's apparent legitimacy based on content and branding.