Security Directory

M

Masarykova univerzita

muniss.cz

63

The website muniss.cz represents the Meziuniverzitní studentská soutěž (MUNISS), an inter-university student competition organized by Masaryk University and supported by the statutory city of Brno. It targets students from Masaryk University, Brno University of Technology, and Mendel University to collaborate on innovative projects aimed at city development. The site is professionally designed, mobile-optimized, and uses modern web technologies including Matomo analytics and a cookie consent mechanism. The domain is well-established since 2010 and aligns with the educational and civic mission presented. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. Overall, the site is trustworthy and serves its educational purpose effectively.

The website www.priorita.cz serves as the official informational newsletter for the State Environmental Fund of the Czech Republic (SFŽP ČR). It provides news, reports, and updates on environmental projects, government funding programs, and sustainability initiatives primarily targeted at Czech citizens, government bodies, and environmental stakeholders. The site is positioned as a trusted government communication channel with consistent branding and authoritative content. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, offering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy policies are present and GDPR compliant, reflecting good privacy practices. However, the lack of publicly available WHOIS data limits transparency but is likely due to privacy protection or registry policies. Overall, the site is professional, secure, and trustworthy, serving its government communication purpose effectively.

V

Visit Svalbard

visitsvalbard.com

59

Visit Svalbard operates as the official tourism portal for the Svalbard archipelago, providing comprehensive information and booking services for activities, accommodations, and events. The website targets tourists seeking authentic Arctic experiences and positions itself as a leading resource for travel planning in the region. Technically, the site employs a mature technology stack including jQuery, Google Tag Manager, and Cookiebot for consent management, running on the NewMind CMS platform. The site is well-optimized for SEO, accessibility, and mobile devices, with good performance and modern security practices such as HTTPS and security headers. However, the absence of WHOIS registration data raises concerns about domain transparency, although the website content and branding strongly indicate legitimacy. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates a strong digital presence and marketing maturity but would benefit from improved domain registration transparency and clearer contact information.

M

My Online Schooling

myonlineschooling.co.uk

72

My Online Schooling is a British international online school established in 2016, providing accredited UK education from Key Stage 2 to A-Level. The school offers live virtual lessons, after school clubs, SEND support, and pastoral care to a global community of over 1,000 pupils from more than 80 countries. The website is professionally designed, mobile-optimized, and rich in relevant educational content, targeting parents and students seeking flexible, high-quality online schooling. The business model focuses on delivering British curriculum education through an online platform with subject-specialist teachers and flexible timetables. Technically, the website uses a modern tech stack including Google Analytics, Facebook Pixel, HubSpot forms and chat, and Finalsite CMS. The site performs moderately well with good SEO and accessibility features. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though explicit security headers are not fully verified. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. The website demonstrates strong trust indicators such as accreditations, multiple office locations, and active social media presence. However, the WHOIS lookup for the domain www.myonlineschooling.co.uk failed due to a domain naming rules violation, indicating potential registration issues or that the domain is a subdomain or alias. This discrepancy lowers the domain legitimacy score and suggests caution. Overall, the website is trustworthy and professional, but the domain registration inconsistency should be investigated further. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and resolving domain registration inconsistencies to improve trust and compliance.

I

ITOPF

itopf.org

71

ITOPF is a globally recognized non-profit organization specializing in promoting effective spill response for oil, chemicals, and hazardous substances. The organization serves industry and government entities worldwide, providing expert advice, contingency planning, training, and claims analysis related to accidental ship-source pollution. ITOPF maintains a strong market position as a primary source of technical information and support in the environmental protection sector. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and frameworks such as FancyApps UI Carousel and Google Analytics with Tag Manager for tracking and consent management. The site demonstrates good performance, mobile optimization, and accessibility standards, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and employs consent-based analytics tracking. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, ITOPF's website is professional, trustworthy, and well-maintained, with comprehensive content and clear navigation. The absence of WHOIS data limits domain registration analysis, but the organization's legitimacy is supported by consistent branding, detailed service offerings, and active content updates. Strategic recommendations include implementing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and security.

The website vida.co.uk is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. The domain was registered recently in November 2022 through Stenning Limited t/a Client Domain Management, indicating a relatively new presence. Due to the WAF block, no privacy policies, contact information, or business descriptions are available for analysis. The technical infrastructure includes Cloudflare protection but no visible CMS or analytics tools. Security posture cannot be fully assessed given the lack of accessible content. Overall, the site appears to be in an initial or protected state, limiting the ability to evaluate its business credibility or compliance.

HugeDomains.com operates as a reputable online marketplace specializing in the sale of premium domain names, offering customers options to purchase domains outright or via payment plans. The company has been active since 2005 and positions itself as a trusted intermediary with a focus on secure transactions and customer satisfaction. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive information about domain purchasing and transfer processes. Technically, the site employs modern web technologies including jQuery, Google Analytics, and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS enforced and SSL encryption, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of business credibility and trustworthiness.

The website 'DATAPLÁN' serves as a strategic management and sustainable development portal for municipalities and regions within the Czech Republic, operated under the National Network of Healthy Cities (Národní síť Zdravých měst ČR). It provides tools and data to support public administration and community planning, focusing on sectors such as energy and transport. The platform targets local government officials and regional authorities, positioning itself as a national resource for strategic development. Technically, the site employs modern web technologies including jQuery, Font Awesome, and Google Analytics, and is built on the ActionApps TOOLKIT CMS. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enabled and secure login forms, but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policy pages. WHOIS data is unavailable due to privacy restrictions, but the website branding and content indicate legitimacy as a government-affiliated platform. Overall, the site is professional and functional but could improve in privacy compliance and security hardening.

I

ij-t.cz

digitalizujemevas.cz

44

The website www.digitalizujemevas.cz represents a Czech-based company specializing in digital transformation services for businesses. Their offerings include tailored digitalization solutions, corporate systems such as CRM and finance automation, web and online applications, and an interactive marketing platform called Zabavne.online. The company positions itself as experienced with over 18 years in the industry, targeting small to medium enterprises seeking to modernize and improve operational efficiency through technology. The site is professionally designed with clear navigation and relevant content in Czech language, supporting business credibility. Technically, the site employs a traditional tech stack including jQuery 1.12.4, Bootstrap, and various UI libraries. While functional and mobile-optimized, the use of outdated JavaScript libraries and lack of visible security headers indicate moderate technical maturity. No CMS or hosting provider details were identified. Performance is moderate with good mobile responsiveness but basic accessibility features. Security posture is moderate but could be improved. The site uses HTTPS (assumed), has a login form with password fields, but lacks explicit security headers and uses an outdated jQuery version that may expose vulnerabilities. No privacy, cookie, or terms policies are present, and no incident response or security contact information is provided. WHOIS data is unavailable, limiting domain legitimacy verification and reducing trust. Overall, the website is a functional and professional digitalization service platform with room for improvement in security, privacy compliance, and domain transparency. Strategic enhancements in these areas would strengthen trust and reduce risk for clients and visitors.

L

LiveRamp

liveramp.com

75

LiveRamp is a well-established enterprise technology company specializing in data collaboration and identity resolution services for marketers and their partners. The company operates a comprehensive platform that connects people, data, and devices to enable personalized marketing and data monetization. Their market position is strong, supported by a global ecosystem and a broad portfolio of services including identity resolution, data marketplace, enrichment, and clean rooms. The website reflects a mature digital presence with excellent content quality and professional branding. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and GSAP, and integrates advanced SEO tools like Yoast SEO Premium. Hosting and DNS are managed via Cloudflare and AWS, ensuring robust infrastructure. Performance and mobile optimization are excellent, with asynchronous loading of scripts and consent management implemented via Ketch. The site uses Google Tag Manager for analytics and tracking, balanced with user consent mechanisms. From a security perspective, the site enforces HTTPS and employs domain registration protections to prevent unauthorized changes. While explicit security headers are not detailed, the use of consent management and absence of exposed sensitive data indicate a solid security posture. However, enabling DNSSEC and publishing a security.txt file would enhance security transparency and vulnerability management. No critical vulnerabilities or suspicious content were detected. Overall, LiveRamp's website demonstrates high professionalism, strong business credibility, and good privacy compliance. The risk profile is low, with recommendations focusing on incremental security improvements and enhanced incident response transparency.

The Ultomiris Pregnancy Registry Study website serves as a clinical research platform focused on enrolling and informing pregnant or breastfeeding women who have been prescribed ULTOMIRIS for autoimmune conditions. The site is professionally designed and targets both patients and healthcare providers in the United States. It provides detailed information about the study, medication, and participation methods, supported by links to official prescribing information and medication guides. The parent company IQVIA is prominently referenced, lending credibility to the site. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Vue.js, and Google Tag Manager, with Sitecore CMS inferred from cookie names. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a comprehensive cookie consent mechanism. However, explicit security headers are not detected, and no incident response or security policy pages are present. From a security and compliance perspective, the site demonstrates good privacy compliance with clear privacy and cookie policies and user consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly, but the professional content and association with IQVIA mitigate concerns. No vulnerabilities or exposed sensitive data were detected. Overall, the website is a credible and professionally maintained clinical research registry with moderate to good technical and security posture. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance trust and compliance.

The website ultomirishcp.com serves as the official healthcare professional (HCP) resource for ULTOMIRIS®, a pharmaceutical product by Alexion Pharmaceuticals, Inc. It provides comprehensive information on the drug's indications, prescribing information, safety warnings including boxed warnings, dosing, administration, and patient support programs. The site targets healthcare professionals with detailed scientific and regulatory content, positioning ULTOMIRIS as a leading long-acting terminal complement inhibitor approved for multiple indications. The business model focuses on education, support, and access facilitation for healthcare providers and patients. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, and Bing Ads for analytics and marketing. Hosting is via Amazon AWS infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional and consistent design. However, explicit privacy and cookie policies are not clearly found, and security headers are not evident in the provided data. From a security perspective, the site uses HTTPS and enforces domain registration protections but lacks DNSSEC and visible security policies or vulnerability disclosure mechanisms. The presence of a REMS program and boxed warnings indicates regulatory compliance and risk management. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the analysis. Overall, the website is a high-quality, professional pharmaceutical resource with strong business credibility and technical implementation. Privacy compliance could be improved by adding explicit policies and cookie consent mechanisms. Security posture is solid but could benefit from enhanced headers and DNSSEC. The site is safe for general audiences and effectively supports its healthcare professional user base.

U

Ultahost

ultahoststatus.com

53

Ultahost Status is a dedicated status monitoring website for Ultahost's server infrastructure, providing real-time updates and historical incident reports to its customers. The site is relatively new, consistent with the domain registration date in 2024, and targets Ultahost users who require transparency about service availability and outages. The business model focuses on enhancing customer communication and trust through timely incident reporting. Technically, the website employs modern web technologies such as Vue.js and is hosted with Cloudflare DNS services. The site is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. The absence of DNSSEC and security headers indicates room for improvement in security hardening. From a security perspective, the site uses HTTPS, ensuring encrypted communications, but lacks explicit security policies, vulnerability disclosures, and contact channels for incident response. No privacy or cookie policies are present, which may affect compliance with data protection regulations. The site does not employ tracking or advertising technologies, minimizing privacy risks. Overall, the website is functional and serves its purpose as a status page but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance. Strategic improvements in security headers, DNSSEC, and policy disclosures are recommended to elevate the site's security posture and regulatory adherence.

A

Admitad

artfut.com

42

Admitad is a German IT company specializing in online advertising and affiliate marketing services, providing a platform for media buying, sales growth, and customer acquisition. The website analyzed is minimalistic, serving primarily as an informational placeholder indicating domain ownership by Admitad. The technical infrastructure is basic, with limited use of modern web technologies and no detected CMS or advanced frameworks. Security posture is moderate but lacks critical elements such as HTTPS verification and security headers. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and contact email for abuse reporting lend some credibility. Overall, the site requires enhancements in security, privacy compliance, and content richness to better serve its audience and establish trust.

C

Webcam Archive - Watch or Download Private and Public Webcam Sex Shows in Recordings

camxraw.com

46

The website camxraw.com operates as an adult webcam video archive platform, offering users the ability to watch or download private and public webcam sex shows. It targets an adults-only audience interested in adult entertainment content, specifically webcam-based pornographic videos. The site is built on WordPress with Yoast SEO plugin, indicating a moderate level of digital maturity and SEO optimization. The technical infrastructure includes jQuery libraries and custom CSS stylesheets, supporting a responsive and user-friendly interface. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. Contact information is limited to a contact form, with no direct emails or phone numbers disclosed. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trustworthiness and regulatory adherence.

F

Femdom Empire - Hardcore Dominatrix video

femdomempire.net

51

Femdom Empire is an adult entertainment website specializing in femdom fetish videos, positioning itself as a market leader in this niche. The platform offers categorized video content with frequent updates and operates a network of partner and affiliate sites. Technically, the site is built on the DataLife Engine CMS, utilizing common web technologies such as jQuery UI, Bootstrap, and Font Awesome, and is hosted behind Cloudflare DNS services. The website demonstrates good content quality and user experience with mobile optimization and clear navigation, although accessibility features are basic. Security posture is moderate; while HTTPS is implied, no advanced security headers or cookie consent mechanisms are present, indicating room for improvement in compliance and security best practices. The domain registration is consistent and legitimate, with no privacy protection or suspicious WHOIS data. Overall, the site serves an adult-only audience with explicit content and lacks explicit privacy and cookie policies, which impacts its compliance score.

A

Admin

pornsnippet.com

53

PornSnippet.com is a niche adult content aggregator website specializing in free OnlyFans snippet porn videos. The site operates on a WordPress platform with Yoast SEO plugin integration, offering a curated collection of adult video snippets targeting an adult-only audience. The business model centers on content aggregation and distribution without direct subscription or sales on the site. Technically, the site uses modern web technologies including HTTPS, jQuery, and structured data for SEO, but lacks advanced security headers and privacy policies. The domain is very recently registered, indicating a new entrant in the adult content market. Security posture is basic with room for improvement in DNSSEC, security headers, and privacy compliance. Overall, the site provides functional adult content services but lacks transparency and formal compliance documentation.

T

tech&fest

tech-fest.fr

65

Tech&Fest is a well-established technology and innovation festival based in Grenoble, France, targeting a broad audience including researchers, entrepreneurs, students, and professionals. The event focuses on themes such as economic and digital sovereignty, sustainability, and technological advancements. The website is professionally designed, mobile-optimized, and provides comprehensive event information, partner details, and multimedia content. Technically, the site leverages modern JavaScript frameworks (React), integrates multiple analytics and marketing tools, and is hosted on a reliable platform with good performance and security configurations. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although a dedicated security policy and incident response information are absent. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

L

Les Echos Le Parisien Événements

go-entrepreneurs.com

55

GO Entrepreneurs is a prominent French event organizer specializing in entrepreneurship-focused conferences and salons, primarily targeting creators, startups, and business leaders. The website reflects a professional and well-branded presence, showcasing upcoming events in Paris and Lyon for 2026. The business is positioned as a leader in the French entrepreneurial event market, operated under the umbrella of Les Echos Le Parisien Événements, a reputable media and events company. The site offers partnership opportunities and multimedia content such as podcasts, enhancing its engagement with the entrepreneurial community. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Didomi for GDPR-compliant consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers are not explicitly detected. From a security and compliance perspective, the site demonstrates good GDPR adherence with clear privacy and cookie policies and a consent mechanism. However, the absence of a published security policy or incident response contact and the lack of WHOIS domain registration data introduce some concerns regarding transparency and domain legitimacy. Despite this, the professional content and strong branding mitigate some risks. Overall, the website is a credible and professional platform for entrepreneurial events in France, with recommendations to enhance security transparency and verify domain registration details to strengthen trust and compliance further.

EBRA Events is a French event agency specializing in organizing impactful physical events that foster engagement and positive societal or environmental impact. The company serves businesses, public entities, and associations, offering tailored event solutions across corporate, editorial, engagement, sport, and culture sectors. It operates multiple agencies across France and is part of the larger EBRA Group, a major French media conglomerate. The website is professionally designed, well-structured, and compliant with GDPR and cookie regulations, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and analytics tools, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are lacking. The domain WHOIS data is missing, which raises some legitimacy concerns, but the overall business credibility and trust signals are strong.

C

CANAL+ Luxembourg S. à r.l.

canalplussport.cz

63

CANAL+ Sport is a media company specializing in broadcasting and streaming live sports events, primarily the English Premier League and WTA tennis tournaments, targeting Czech and Slovak audiences. The company operates subscription packages via Skylink Live TV, offering extensive sports content with Czech and Slovak commentary. The website reflects a professional media service with clear branding and user engagement through social media channels. Technically, the site uses modern web technologies including Google Tag Manager, Cookiebot for consent management, Bootstrap for responsive design, and integrates Twitter widgets for live social media content. The site is mobile optimized and performs well with good SEO practices. Security-wise, HTTPS is enforced and cookie consent is implemented, but the absence of security headers and lack of published privacy and terms policies indicate areas for improvement. WHOIS data is unavailable, which limits domain trust assessment, but the website content and contact information support legitimacy. Overall, the site is a credible sports media platform with moderate to good security posture and privacy compliance, suitable for general audiences.

B

BitWave Consulting s.r.o.

regionivancicko.cz

49

RegionIvančicko.cz is a regional information portal operated by BitWave Consulting s.r.o., serving the Ivančicko region in the Czech Republic. The portal provides comprehensive local news, event calendars, job listings, real estate offers, and a business directory, positioning itself as a key digital resource for residents and businesses in the area. It is part of a broader network of regional portals, enhancing its market presence and reach. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 4.5.3, and various UI libraries such as Fancybox and Lightbox2. It integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on login forms, with a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no formal security or incident response policies are published. The absence of WHOIS data for the domain is a notable concern, limiting full trust verification. Overall, the portal demonstrates a solid digital presence with good content quality and privacy compliance but would benefit from enhanced security practices and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

B

BitWave Consulting s.r.o.

rosicko.cz

49

Rosicko.cz is a regional online portal operated by BitWave Consulting s.r.o., serving the Rosicko region in the Czech Republic. The portal provides a comprehensive range of local services including regional news, event calendars, job listings, classifieds, real estate offers, and a business directory. It targets residents and businesses in the region, positioning itself as a key local information hub and part of a broader network of regional portals. The business model relies on advertising, premium listings, and partnerships with local service providers. The website is professionally designed with consistent branding and good content quality.

Z

Zdař Bůh.cz

zdarbuh.cz

45

Zdař Bůh.cz is a Czech-language informational media website dedicated to the history, past, and present of Czech mining. It serves a niche audience interested in mining heritage and current mining-related news. The website is built on WordPress with a modern theme and several plugins, including GDPR compliance tools. It maintains an active social media presence on Facebook, enhancing community engagement. Technically, the site uses common web technologies and is mobile-optimized with good SEO practices. Security posture is moderate, with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal security policies. WHOIS data is unavailable, which slightly reduces trust but does not negate the site's legitimacy given its content and social presence. Overall, the site is a well-maintained niche media platform with room for security and compliance improvements.

B

bokyo.net

bokyo.net

66

bokyo.net is a small e-commerce business specializing in contemporary art, offering limited edition artworks, posters, and prints primarily targeting art enthusiasts and collectors. The website is professionally designed using the Shopify platform with a Retina theme, providing a good user experience and mobile optimization. The technical infrastructure leverages Shopify's hosting and CDN services, ensuring moderate performance and modern web standards. Security posture is generally good with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and some security headers are not explicitly present. Privacy compliance is limited as no explicit privacy or cookie policies were found, which should be addressed to improve trust and regulatory adherence. Overall, the website is legitimate, consistent with its domain registration data, and presents a trustworthy online storefront for niche art products.

V

Veřejné zakázky přímo z Vašeho oboru

verejna-soutez.cz

61

The website www.verejna-soutez.cz provides specialized services focused on public procurement tenders primarily for businesses in the Czech Republic. It offers subscription-based notifications of new tenders, smart analysis of tenders, telephone consultations, and detailed reports to help clients gain competitive advantages in public contracts. The site is part of the Tender Service group, with multiple regional and language variants, indicating a broad market presence in Central Europe. Technically, the site is built on a modern Angular framework with PrimeNG components, integrating analytics tools such as Google Analytics and Microsoft Clarity. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security policies. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

S

SimpleShop – Chytrý prodejní formulář pro váš web

simpleshop.cz

47

SimpleShop is a Czech-based e-commerce platform specializing in providing smart sales forms for websites to sell digital products such as online courses, e-books, videos, memberships, and tickets. The platform targets small to medium-sized businesses and individual sellers seeking automated online sales solutions without the need for programming expertise. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with Elementor and several plugins for performance, multilingual support, and GDPR compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. WHOIS data is privacy protected, which is typical for commercial websites, and no suspicious patterns were detected. Overall, the site presents a trustworthy and professional business offering in the Czech e-commerce market.

A

ALISCHEM – Průmyslová chemie s.r.o.

alischem.cz

37

ALISCHEM – Průmyslová chemie s.r.o. is a Czech Republic based small industrial chemical company founded in 2016, specializing in fireproof coatings for wood, powder coatings, industrial paints, and comprehensive corrosion protection services. The company benefits from the support of its parent company ALUMONT BUILDING a.s., which provides essential business infrastructure. The website is professionally designed using WordPress and common plugins, presenting clear business information and contact details. However, the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Technically, the site uses HTTPS but lacks important security headers, which could be improved to enhance security posture.

R

REKTIMONT s.r.o.

rektimont.cz

40

REKTIMONT s.r.o. is a Czech manufacturing company specializing in designated lifting equipment, steel constructions, fire-resistant doors, and inspection services. Founded in 1990 and part of the Alumont group since 2016, it serves industrial clients with certified expertise and a broad product range including steel containers. The website is professionally designed using WordPress with common plugins and provides clear contact information but lacks privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure policies. WHOIS data is unavailable, which impacts domain trust verification. Overall, the site is functional and business-focused but could improve compliance and security transparency.

A

Associazione Marchi Storici d'Italia

marchistorici.com

57

Associazione Marchi Storici d'Italia is a non-profit organization founded in 2021 to represent and protect the interests of historic Italian companies and trademarks. The website serves as a platform to promote the heritage and active memory of Made in Italy brands, targeting historic brand owners, stakeholders, and the general public interested in Italian industrial heritage. The association organizes events, publishes reports, and advocates for the protection and valorization of historic trademarks. Technically, the website is built on WordPress with multilingual support via WPML, uses reputable plugins for GDPR compliance and SEO, and hosts images on Cloudinary. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and DNSSEC. There is no visible security policy or incident response information, and no vulnerability disclosure mechanism is present. Overall, the site is trustworthy and professional, with good privacy compliance and business credibility, but could improve security posture and transparency around security policies.

N

Nová spirála

novaspirala.cz

48

Nová Spirála is a multi-genre cultural venue located at Výstaviště Praha, offering a modern event space with a rotating circular stage and advanced technology. The website presents a professional and comprehensive digital presence, targeting a general audience interested in cultural events, ticketing, and venue rental. The business model focuses on event programming, ticket sales, venue rental, and gift vouchers, positioning itself as a significant cultural hub in the Czech Republic. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and CookieHub, ensuring good SEO, privacy compliance, and user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and integrates well with partner ecosystems. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining privacy compliance.

JellyPot is a Czech-based content-first CMS platform built on the .NET framework, designed to provide flexible content modeling and management capabilities. It targets developers, designers, and content editors who require a customizable and headless CMS solution. The website showcases a professional design with detailed product descriptions, client testimonials, and references to reputable clients, indicating a solid market presence in the technology sector. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google Tag Manager and Google Analytics for tracking. The platform emphasizes flexibility in design and coding, supporting multiple output formats including HTML, XML, and JSON. Security-wise, the site lacks visible security headers and a published privacy policy, but it does implement a cookie consent mechanism. The absence of WHOIS registration data is a notable concern, potentially indicating domain privacy or data unavailability, which slightly impacts trustworthiness. Overall, the site is well-structured and professional but would benefit from enhanced transparency and security practices.

A

AnFas, spol. s r.o.

anfas.cz

52

AnFas, spol. s r.o. is a Czech-based branding, communication, and marketing agency focused on crafting clear, attractive, and beloved brands. Their services include naming, visual identity, brand messaging, web development, publications, presentations, marketing campaigns, and creative specialties. The company targets businesses seeking to strengthen their market position through effective communication and branding strategies. The website demonstrates a professional and consistent brand presence with comprehensive case studies and client testimonials, including endorsement from branding guru Marty Neumeier. Technically, the website employs modern JavaScript libraries such as jQuery and fullPage.js, integrates multiple analytics and marketing tools including Google Analytics 4, Smartlook, Microsoft Clarity, and Facebook Pixel, all managed via Google Tag Manager. The site uses HTTPS with good SSL configuration and implements a robust cookie consent mechanism compliant with GDPR. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the site follows best practices with HTTPS and consent-based tracking but lacks explicit security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable publicly due to CZ.NIC policies, but the domain and website content indicate a legitimate and established business. Overall, the website is professional, secure, and privacy-conscious, with minor recommendations to enhance security headers, accessibility, and transparency around security policies. The business shows strong credibility and a clear market niche in branding and marketing services.

E

ergo.cz

ergo.cz

50

Ergo.cz is a Czech online magazine focused on lifestyle, health, productivity, technology, and related topics. The website offers a variety of articles targeting a general Czech-speaking audience interested in ergonomic living, work efficiency, and health trends. The business model centers on content publishing supported by advertising revenue, primarily through Google Adsense. The site is relatively new, with domain registration in late 2024, and presents itself as a niche media outlet with consistent branding and good content quality. Technically, the website employs standard web technologies including JavaScript, CSS, and uses Matomo for analytics alongside Google Adsense for monetization. Hosting is provided by vas-hosting.com, and the site is served over HTTPS with a moderate performance profile. Mobile optimization and SEO practices are good, though accessibility features are basic. No CMS is explicitly detected. From a security perspective, the site benefits from HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism despite the use of tracking and advertising scripts, which may pose GDPR compliance risks. No incident response or security policy information is published, and no vulnerability disclosure or security.txt files are found. Overall, the security posture is moderate but could be improved. The website content is safe for general audiences with no adult or explicit material detected. Contact information is limited to a contact form with no direct emails or phone numbers publicly listed. WHOIS data is consistent and legitimate, showing recent registration aligned with the website's launch. No suspicious domains or patterns are detected. Strategic recommendations include implementing a cookie consent banner, adding security headers, publishing security and incident response policies, and enhancing GDPR compliance measures to improve trust and legal standing.

U

Ubytování Kytín

ubytovanikytin.cz

55

Ubytování Kytín is a small hospitality business offering four new rooms with private bathrooms located next to a local brewery in Kytín, Czech Republic. The website targets tourists, cyclists, and visitors interested in craft beer and local tourism. The business model focuses on accommodation rental with a local appeal. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and some script-based hardening, but lacks explicit security headers and privacy policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust. Overall, the site is functional and professional but would benefit from improved privacy compliance and contact transparency.

I

I love Hummus s.r.o.

ilovekimchi.eu

51

The website www.ilovekimchi.eu represents a small Czech-based company, I love Hummus s.r.o., specializing in the production and B2B sale of fermented BIO food products, primarily Kimchi. The business operates an e-commerce platform targeting wholesale and private label customers, positioning itself as a reliable partner in the niche fermented foods market. The site is professionally designed with multilingual support and clear product offerings, reflecting a focused business model in the food retail and manufacturing sector. Technically, the website leverages modern web technologies including Google Tag Manager, Google Analytics 4, Facebook Pixel, and the Upgates e-commerce platform. The infrastructure supports responsive design and basic accessibility, with moderate performance. The presence of cookie consent and GDPR compliance mechanisms indicates a mature approach to privacy and regulatory adherence. From a security perspective, the site enforces HTTPS and employs secure forms with validation. However, explicit security headers are not detected, suggesting room for improvement in hardening the web server configuration. No vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data due to EURid privacy policies limits domain registration transparency but is justified for this business type. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen the security posture and user trust.

The website compromisoreal.com represents Aqualia, a large water management company focused on sustainability and corporate social responsibility aligned with the United Nations Sustainable Development Goals. The site serves as a platform to communicate Aqualia's commitments to social, environmental, and innovation goals, targeting a general audience interested in sustainability. Technically, the site uses a standard stack including jQuery, Bootstrap, FontAwesome, and Google Analytics, hosted by Dinahosting s.l. The website is accessible, mobile-optimized, and professionally designed, though it lacks some advanced SEO and accessibility features. Security posture is moderate with domain protection flags but lacks DNSSEC and security headers. Privacy compliance is incomplete due to missing privacy policy and cookie consent mechanisms. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy but could improve compliance and security transparency.

A

APM | Associazione Nazionale Piccoli Musei

piccolimusei.com

50

The Associazione Nazionale Piccoli Musei is a cultural non-profit organization dedicated to promoting and supporting small museums in Italy. Founded by Prof. Giancarlo Dall’Ara, it focuses on enhancing the unique characteristics of small museums, emphasizing their close ties to local communities and territories. The website serves as a hub for information, events, publications, and networking for small museums, positioning itself as a niche cultural association within Italy. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Slider Revolution, providing a good user experience and mobile optimization. Security measures include HTTPS and reCAPTCHA, though some security headers are missing and no explicit privacy or terms of service pages were found. The WHOIS data is unavailable, which raises questions about domain registration legitimacy, though the website content and social media presence suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

I

iJoomla

ijoomla.com

65

iJoomla is a specialized technology company focused on developing professional Joomla extensions, including learning management systems, community software, advertising tools, publishing platforms, and SEO enhancements. With over 15 years of experience and a customer base exceeding 40,000, iJoomla holds a respected position in the Joomla ecosystem. Their product suite targets Joomla website owners and developers seeking to enhance their sites with robust, feature-rich extensions. The website demonstrates a mature digital presence with clear navigation, multimedia content, and integration of modern web technologies such as Joomla CMS, PHP 8.2 compatibility, and Google Analytics for performance insights. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS registration data is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, iJoomla presents a professional and trustworthy business front with good technical infrastructure and compliance practices.

I

iJoomla.com Inc

jomsocial.com

64

JomSocial is a leading community software solution designed to transform Joomla CMS into a full-featured social networking platform. The company behind it, iJoomla.com Inc, offers a mature product with a strong market presence, serving over 180,000 websites globally. Their offerings include a rich set of features, add-ons, templates, and customization services, supported by a professional team and an active user community. The website reflects a well-structured, modern design optimized for mobile and desktop users, leveraging Joomla CMS and popular web technologies such as Bootstrap, UIkit, and Google Analytics. From a technical perspective, the site demonstrates good digital maturity with responsive design, SEO optimization, and integration of security features like HTTPS and Google reCAPTCHA. However, there is room for improvement in security headers and explicit incident response disclosures. The absence of WHOIS data for the domain www.jomsocial.com is a notable gap, impacting trust and legitimacy assessments. Despite this, the website content and external references to iJoomla.com Inc provide reasonable confidence in the business's authenticity. Security posture is solid with encrypted communications and no visible vulnerabilities, but the lack of detailed security policies and incident response contacts suggests an opportunity to enhance transparency and compliance. Privacy compliance is addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned in its niche, though verifying domain registration details is recommended to strengthen credibility.

GavickPro is a specialized provider of Joomla templates and WordPress themes, targeting web developers, businesses, and bloggers seeking professional and responsive website designs. The company operates as part of the JoomlArt.com network, offering a broad portfolio of themes, plugins, and support services. Their market position is solid with a history of over eight years and a large user base. Technically, the website employs modern web technologies including jQuery, Google Analytics, and Joomla Framework, hosted with DDoS protection by Evolution Host. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enabled and secure forms, but lacks visible HTTP security headers and explicit security policies. Privacy and cookie policies are comprehensive and GDPR compliant. WHOIS data is unavailable or privacy protected, which slightly reduces transparency but does not undermine overall legitimacy. No adult or questionable content is present, making the site safe for general audiences.

S

Studdio

studdio.com

52

Studdio is a French communication agency specializing in comprehensive marketing services including website creation, SEO, social media management, graphic design, logo creation, printing, and signage. The company offers subscription-based communication solutions with monthly fees over 24 to 48 months, targeting businesses seeking efficient and budget-controlled marketing support. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions, positioning Studdio as a small but operationally focused agency in the French market. Technically, the website employs modern web technologies such as Google Tag Manager for analytics, Google Fonts for typography, and SVG icons for graphics. The site is served over HTTPS with good SSL configuration, though no explicit security headers were detected. Performance is moderate, with good mobile optimization and basic accessibility features. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit incident response or security policy pages were found. From a security perspective, the website shows a solid baseline with HTTPS and no exposed sensitive data. However, the absence of WHOIS registration data for the domain www.studdio.com is a notable concern, as it raises questions about domain legitimacy and registration consistency. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the HTML content. The site lacks explicit security best practices such as security headers and incident response contacts. Overall, Studdio presents a professional and trustworthy front for its communication services, but the missing WHOIS data and limited security disclosures suggest areas for improvement in transparency and security posture. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

L

Lissen

agence-lissen.com

52

Lissen is a French communication agency specializing in global communication services focused on territorial transition projects. Founded in 2023, it operates as a small agency under the Copylot group, serving clients primarily in transportation and energy sectors. The agency offers key services including communication for large projects, citizen participation and consultation, and 3D visualization and immersion. The website is professionally designed, mobile-optimized, and provides clear contact and team information, enhancing its market credibility. Technically, the website is built on WordPress with modern libraries such as Bootstrap 5 and jQuery, hosted by OVH sas. Performance is fast, and SEO and accessibility are well implemented. The site uses GDPR-compliant cookie consent via Tarteaucitron. However, DNSSEC is not enabled and security headers are not detected, indicating room for security improvements. Security posture is good with HTTPS enforced and domain status protections in place, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to further enhance trust and compliance.

A

Alcalie

alcalie.fr

45

Alcalie is a French editorial communication agency specializing in bespoke content creation and editorial strategy services. The company offers a comprehensive range of services including editorial strategy, content creation, magazines, annual reports, and corporate brochures. The website is professionally designed using WordPress with modern plugins and SEO optimizations, targeting businesses and organizations seeking high-quality editorial communication. The technical infrastructure is solid with good mobile optimization and performance, though some security best practices such as security headers and privacy policies could be improved. The security posture is generally good with HTTPS enforced, but lacks explicit incident response and vulnerability disclosure information. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy compliance and domain registration transparency.

F

Frennly

frennly.com

54

Frennly is a French digital transformation consultancy focused on connecting digital technology with human-centric solutions. Founded in 2019 and operating as a small-sized company under the parent group Copylot, Frennly offers services including digital transformation consulting, agile project management, UX design, and custom web and mobile development. The website is professionally designed, primarily in French, targeting organizations seeking bespoke digital solutions that enhance user experience and operational efficiency. Technically, the site is built on WordPress with standard plugins such as Gravity Forms and Google reCAPTCHA for form security, and it leverages Google Fonts and Yoast SEO for performance and search optimization. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies with consent mechanisms. Security posture is good with HTTPS enforced and spam protection on forms, but lacks explicit security headers and incident response information. WHOIS data is missing, which raises some concerns about domain registration legitimacy, though the business presence and content quality mitigate risk. Overall, the site scores well on content quality and technical implementation but should improve transparency on domain registration and security policies.

E

Evidens

evidens.fr

52

Evidens is a French marketing research institute specializing in exploratory, strategic, operational, and evaluation studies to help businesses understand their markets and customers. The company positions itself as a trusted partner for enterprises seeking data-driven decision-making support, with a focus on innovation and brand image analysis. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Google Tag Manager, and a cookie consent solution (axeptio). Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with cookie consent implemented but no dedicated privacy policy or terms of service pages found. Contact is primarily via a web form, with no explicit emails or phone numbers displayed. WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, the site is trustworthy and functional but could improve transparency and security practices.

O

Odiens

odiens.com

61

Odiens is a French webmarketing and media agency with offices in Nantes, Paris, and Lille. The company offers a comprehensive range of digital marketing services including SEO, SEA, social media management, media planning, programmatic advertising, web analytics, and AI-driven automation solutions. Positioned as a hybrid agency combining digital and traditional media expertise, Odiens targets businesses seeking to enhance their online visibility and conversion performance. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and performance optimizations, including Gravity Forms for data collection and Matomo for analytics. Security measures include HTTPS, Google reCAPTCHA on forms, and GDPR-compliant consent mechanisms. However, some security headers are missing, and WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust. Overall, the site demonstrates a strong security posture and compliance with privacy regulations, supporting its credibility as a professional agency.

M

Mediapilote

mediapilote.com

57

Mediapilote is a French communication and advertising agency with multiple regional offices across France. The company offers a broad range of services including brand strategy, communication strategy, digital strategy, creative campaigns, social media management, employer branding, and CSR communication. They also provide certified training programs under the Qualiopi label. The website presents a professional and consistent brand image with comprehensive service descriptions and client references, positioning Mediapilote as a reputable regional player in the media and communication sector. Technically, the website uses a mix of legacy and modern JavaScript libraries, integrates Google Tag Manager for analytics, and employs Axeptio for cookie consent management, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, though some improvements in security headers and library updates are recommended. The absence of WHOIS data reduces domain trustworthiness, but the professional content and branding mitigate concerns. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

S

Résolu

soyezresolu.org

56

Résolu is a French non-profit project focused on promoting ethical and free digital tools for organizations within the Social and Solidarity Economy sector. The website serves as an educational manual providing guides and fiches to help collectives adopt libre software aligned with their values of solidarity and sharing. Supported by reputable organizations such as Framasoft and Fondation Free, the project is positioned as a niche resource advocating for digital sovereignty and ethical collaboration. Technically, the website is a static site generated with MkDocs and the Material theme, delivering good design quality and mobile optimization. The site uses modern web standards but lacks advanced security headers and DNSSEC, which could enhance its security posture. Analytics are implemented via Matomo, but no cookie consent mechanism or privacy policy is present, indicating gaps in privacy compliance. From a security perspective, the site benefits from HTTPS and domain transfer protection but would benefit from enabling DNSSEC and adding security headers. No forms or user data collection reduce attack surface, but the absence of privacy and cookie policies is a compliance risk. The domain registration is consistent and legitimate, matching the project timeline and content. Overall, the website is a well-structured, trustworthy resource with good content quality and moderate technical maturity. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.