Security Directory

O

Office de Tourisme Lens Lievin Henin Carvin

tourisme-lens.fr

55

The website tourisme-lens.fr serves as the official tourism portal for the Lens-Liévin and Hénin-Carvin region in France. It provides comprehensive visitor information, event promotion, interactive maps, and booking services, targeting tourists interested in cultural, historical, and leisure activities. The site is well-branded, professionally designed, and offers multilingual support, enhancing accessibility for international visitors. Technically, it is built on WordPress with modern frameworks and plugins, hosted by OVH, and integrates analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent, though improvements in security headers and explicit security policies are recommended. Overall, the site is trustworthy, user-friendly, and aligned with its business objectives.

O

Office de Tourisme Métropolitain Nice Côte d'Azur

explorenicecotedazur.com

62

The website www.explorenicecotedazur.com serves as the official metropolitan tourism office for the Nice Côte d'Azur region in France. It provides comprehensive tourism information, event listings, itinerary suggestions, and booking services aimed at tourists and visitors. The site is well-branded, professionally designed, and offers multilingual support (French, English, Italian). The presence of structured data and SEO optimizations indicates a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrates multimedia content such as videos and social media feeds. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The WHOIS data is unavailable or indicates the domain may not be registered, which is inconsistent with the active and professional website, suggesting possible privacy protection or WHOIS server issues. Overall, the site is trustworthy and serves as a key information hub for tourism in the region.

S

Sport et neige

sportetneige.com

66

Sport et Neige is a specialized retail business focused on cross-country skiing and Nordic walking equipment, operating both online and through a physical store in Pontarlier, France. Established in 1977, it offers a wide range of products including skis, clothing, and accessories for men, women, and children. The website is well-structured, professionally designed, and targets enthusiasts of endurance sports in the Jura region and beyond. Technically, the site uses modern frameworks such as UIkit and Swiper, with a cookie consent mechanism implemented via tarteaucitron. Security posture is generally good with HTTPS enforced, though some security headers are missing and an outdated jQuery version is used. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy perception. Overall, the site presents a trustworthy and professional front for a niche sports retail business.

Q

Quartier Libre Besançon

quartierlibre-besancon.fr

50

Quartier Libre Besançon is a non-profit association uniting three community centers (MJC Palente, MJC Clairs-Soleils, and Maison de quartier Rosemont St-Ferjeux) in Besançon, France. The organization focuses on promoting cultural, social, and leisure activities for local residents, families, youth, and adults. The website serves as a portal for information on events, activities, and community engagement, reflecting a strong local community presence. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, with integration of Google Analytics and Google reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and uses modern web technologies, though some security headers are missing. Cookie consent and GDPR compliance mechanisms are implemented, indicating attention to privacy regulations. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but the absence of certain security headers and lack of a published security policy or incident response contact are areas for improvement. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, but the website content and contact information support legitimacy. Overall, the website is professional, trustworthy, and serves its community-oriented mission effectively. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to mitigate risks.

M

Megève Mont-Blanc

megeve-montblanc.com

55

Megève Mont-Blanc is a well-established cycling event organizer specializing in a unique mountain cyclosportive held annually in the French Alps. The website promotes the 2025 edition with detailed information on routes, registration, volunteering, and partnerships. The business targets cycling enthusiasts and mountain sports lovers, offering multiple race distances and live tracking features. Technically, the site is built on WordPress with Elementor and several plugins, hosted by OVH, and shows good SEO and mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, including emails, phone, and physical address. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

V

Vixio

vixio.com

69

Vixio is a regulatory intelligence provider specializing in compliance solutions for the financial services and gambling industries. Their platform offers real-time regulatory updates, expert analysis, and workflow automation to help compliance teams manage constant regulatory changes efficiently. The website demonstrates a mature digital presence with professional design, clear navigation, and integration of modern marketing and analytics tools. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and branding suggest a credible business. Overall, Vixio presents as a trusted provider in its niche with room for improvement in transparency and security disclosures.

S

SYNOT Group

synotgroup.com

67

SYNOT Group is a well-established international gaming technology company with over 26 years of experience, operating in more than 45 countries. The company offers a comprehensive portfolio of gaming products and solutions for both land-based casinos and online gaming platforms, including games, cabinets, jackpots, casino management systems, and omni-channel platforms. Their market position is strong, supported by multiple licenses, certifications, and partnerships with major industry players. Technically, the website is modern, fast, and mobile-optimized, leveraging contemporary JavaScript frameworks and analytics tools. Security posture is solid with HTTPS, cookie consent, and privacy policies in place, though explicit security headers could be better documented. The absence of WHOIS data for the domain is a notable concern, slightly impacting trustworthiness, but the overall business credibility remains high based on website content and transparency. Strategic recommendations include improving WHOIS transparency, publishing incident response contacts, and enhancing security header implementation.

T

TPAG

tpag.eu

48

TPAG is a specialized investment company focusing on Corporate Private Equity, Turnaround and Distressed acquisitions, and Direct Lending in the Central and Eastern Europe (CEE) and DACH regions. With assets under management exceeding €50 million, TPAG targets lower mid-market and mid-market companies, emphasizing value creation, tradition, and partnership culture. The website presents a professional image with detailed information about its strategies, portfolio, team, and media presence. Technically, the site is built on WordPress with modern plugins and custom fonts, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security documentation.

B

bragen s.r.o.

bragen.cz

51

Bragen s.r.o. is a Czech-based company specializing in the manufacturing and installation of custom photovoltaic and agrivoltaic system structures. The company positions itself as a quality-focused manufacturer with in-house production and multiple installation teams, serving a range of projects from small to large-scale solar parks. Their offerings include project design, construction, and installation services, supported by certifications such as ISO 9001, ISO 14001, ISO 45001, and EN 1090. The website reflects a professional and comprehensive business presence with strong compliance to GDPR and cookie regulations. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies including Google Tag Manager and reCAPTCHA for security and analytics. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional image, though the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. The company provides clear contact information and demonstrates transparency through certifications and media references. Privacy compliance is robust with explicit cookie consent mechanisms. Strategically, Bragen s.r.o. appears well-positioned in the renewable energy sector within the Czech Republic, targeting developers and operators of photovoltaic and agrivoltaic projects. The company benefits from a strong technical infrastructure and a clear business model focused on manufacturing and installation services.

S

Solar Global Service a.s.

solarglobal.cz

58

Solar Global Service a.s. is a leading Czech renewable energy company specializing in photovoltaic power plants, battery energy storage systems, hydrogen production, and energy trading. The company operates multiple international subsidiaries and offers comprehensive services from project development to maintenance. The website reflects a mature digital presence with modern technologies and good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The absence of WHOIS data reduces domain trustworthiness, but the professional content and clear contact information mitigate concerns. Overall, the site is well-positioned to serve its target audience in the renewable energy sector.

S

SportFotbal s.r.o.

sportfotbal.cz

46

SportFotbal s.r.o. operates an e-commerce platform specializing in football and futsal equipment, targeting individual players, clubs, and fans primarily in the Czech Republic. The company is an authorized reseller of major sports brands such as adidas, Nike, Puma, and others, positioning itself as a specialist in the football retail market with both online and physical store presence. The website offers a broad product range including footwear, apparel, accessories, and custom printing services, catering to amateur and professional athletes alike. Technically, the website employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Google Analytics, alongside a cookie consent mechanism compliant with GDPR. The site is built on a custom CMS and demonstrates good mobile optimization and SEO practices. Security measures include HTTPS enforcement and use of Google reCAPTCHA, though explicit security headers and incident response policies are not evident. The security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing a formal security policy. The absence of WHOIS data limits domain trust assessment, though the website content and contact information appear professional and transparent. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a trustworthy platform for its target audience. Strategic recommendations include improving domain registration transparency, enhancing security headers, publishing incident response contacts, and maintaining regular audits of third-party scripts to mitigate vulnerabilities.

A

AUTO JAROV, s.r.o.

autojarov.cz

50

AUTO JAROV, s.r.o. operates a comprehensive automotive dealership and leasing service platform in the Czech Republic, primarily serving Prague and surrounding regions. The company offers a wide range of new and used vehicles from major brands including Volkswagen, Škoda, Audi, SEAT, CUPRA, and Honda, alongside operational leasing options branded as JAROV DRIVE. Their services extend to vehicle buyback, authorized servicing, and motorcycle sales, targeting both individual consumers and corporate clients. The website reflects a well-established business with a strong market presence and brand partnerships. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and the Nette PHP framework, complemented by advanced marketing and analytics tools such as Google Analytics, Microsoft Clarity, Bing Ads, and Cookiebot for consent management. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers could enhance its posture. The use of HTTPS and invisible reCAPTCHA indicates a commitment to secure user interactions. From a security perspective, the site demonstrates good practices with encrypted connections and consent mechanisms but lacks explicit security policies or incident response contacts. The absence of WHOIS data limits domain trust verification, though the professional presentation and comprehensive contact information mitigate concerns. No vulnerabilities or suspicious content were detected, and the site is free from adult or questionable material. Overall, AUTO JAROV's digital presence is robust, supporting its business operations effectively. Strategic enhancements in security transparency and domain registration clarity would further strengthen trust and compliance.

F

FANSHOP BOHEMIANS PRAHA 1905

fanshopbohemians.cz

50

FANSHOP BOHEMIANS PRAHA 1905 operates an e-commerce platform dedicated to selling official merchandise for the Bohemians Praha 1905 football club. The website targets fans and sports enthusiasts primarily in the Czech Republic, offering a range of products including clothing, accessories, and collectibles. The business model is focused on retail e-commerce with a niche market position serving club supporters. Technically, the site uses a K2 e-shop CMS, integrates common web technologies such as jQuery and Swiper.js, and employs Cloudflare DNS services. The site is mobile optimized and provides a good user experience with clear navigation and product categorization. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data is consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security policies, and improving contact information transparency.

S

Stipendia.cz

stipendia.cz

57

Stipendia.cz is a Czech-based consulting service specializing in facilitating educational and sports scholarship opportunities in the USA. The company targets students and athletes seeking to study at top universities and private high schools in the USA, offering tailored service packages including sports camps and flight booking. The website is multilingual, supporting Czech, English, and German languages, reflecting an international outreach. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, hosted on Websupport.cz, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

V

VIP line s.r.o.

vipline.cz

45

VIP line s.r.o. is a Czech Republic-based transportation service provider specializing in passenger transport via buses, minibuses, vans, and limousines. Founded in 2016, the company serves individuals, schools, companies, travel agencies, and sports clubs primarily in Prague and surrounding regions. Their business model focuses on providing professional, safe, and comfortable transport solutions with a modern fleet and experienced drivers. The company maintains partnerships with notable organizations such as Škoda Auto and regional sports clubs, enhancing its market credibility. Technically, the website is built on Joomla CMS using the Astroid Framework, with modern frontend technologies including jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized and uses Google Analytics and Google Tag Manager for user tracking. Hosting is provided by WEDOS, consistent with the domain registration data. The website performance is moderate with good design and navigation clarity. From a security perspective, the site uses HTTPS and modern libraries but lacks visible security headers and published security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no incident response or security contact channels are published. Overall, the security posture is adequate but could be improved with better policy disclosures and security headers. The website content is safe for general audiences, focusing solely on transportation services without any adult or questionable content. The domain registration data is consistent with the business claims, showing no suspicious patterns. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to enhance trust and compliance.

V

Vodovody a kanalizace Mladá Boleslav, a.s.

vakmb.cz

58

Vodovody a kanalizace Mladá Boleslav, a.s. is a regional utility company providing water supply and sewage services primarily in the Mladá Boleslav region of the Czech Republic. The company offers a range of services including new water connections, water quality testing, sewage management, emergency water supply, and engineering services. The website is professionally designed, well-structured, and targets local residents and businesses with clear navigation and comprehensive service information. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Select2, Google reCAPTCHA, and Google Analytics. It is mobile-optimized, accessible, and implements GDPR-compliant cookie consent mechanisms. The site uses HTTPS with strong SSL configuration, though security headers are not explicitly detected in the provided data. From a security perspective, the site demonstrates good practices including secure forms with CAPTCHA, no visible sensitive data exposure, and privacy compliance. However, there is room for improvement by adding security headers, publishing a security policy, and providing a vulnerability disclosure mechanism. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, the website presents a trustworthy and professional digital presence for a regional utility provider with moderate to strong security posture and good privacy compliance. Strategic improvements in security transparency and header implementation would further enhance trust and resilience.

J

JOSYMA MB, s.r.o.

josymamb.cz

42

JOSYMA MB, s.r.o. is a Czech Republic-based company specializing in electrical installation and maintenance services, including low and high voltage wiring, fire alarm systems, data cabling, security systems, and ventilation for industrial buildings. Established in 1995, the company employs 32 staff members and offers comprehensive project documentation and electrical inspections. The website reflects a professional business presence with clear service descriptions and contact information. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes security features such as HTTPS and Google reCAPTCHA. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. However, the absence of WHOIS data limits full domain legitimacy verification. Overall, the site demonstrates a solid digital presence suitable for its business domain.

S

Sideline Sports

sidelinesports.com

65

Sideline Sports operates a mature and professional sports analytics platform branded as XPS Network, targeting coaches, clubs, and sports associations. The platform offers comprehensive features including planning, monitoring, communication, tactics, video analysis, and injury management, positioning itself as a trusted solution for a wide range of sports organizations from youth clubs to national teams. The website demonstrates strong branding consistency and high-quality content with multimedia integration and clear navigation. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on AWS infrastructure, and optimized for mobile and SEO. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and policies are not fully implemented. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on privacy and security policies.

N

NÁPOJOVÁ AMBULANCE s.r.o.

n-a.cz

51

NÁPOJOVÁ AMBULANCE s.r.o. is a Czech company specializing in beverage services, including coffee solutions, water filtration, and equipment sales and servicing for businesses, restaurants, and private homes. Established since 1991, the company collaborates with well-known brands and offers a comprehensive range of products and services, including an e-commerce platform. The website is built on Joomla CMS with modern technologies and provides clear navigation, contact information, and GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and secure forms, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness but the website content and contact details appear legitimate.

E

EP Energy Trading, a.s.

epet.cz

54

EP Energy Trading, a.s., operating the website epet.cz, is a well-established energy supplier in the Czech Republic, providing electricity and gas services to both businesses and households. The company positions itself as the largest alternative energy supplier in the country with over 170,000 delivery points and 20 years of market presence. Their offerings include competitive pricing, customer support, and online tools such as price calculators and a customer portal. The website reflects a professional and trustworthy brand with consistent messaging and strong affiliation to the parent company EPH.

ASTON - služby v ekologii, s.r.o. is a Czech Republic based company specializing in ecological services and waste recycling with a history dating back to 1993. The company operates multiple regional offices and serves over 350 customers with a broad portfolio of services including hazardous waste disposal, recycling, legislative support, and environmental remediation. The website reflects a professional and consistent brand presence with detailed service descriptions and contact information. Technically, the site uses modern web technologies such as Google Tag Manager and Google Fonts, and is mobile optimized with good SEO practices. However, the absence of privacy and cookie policies and lack of WHOIS data limit the site's compliance and trustworthiness. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and domain legitimacy verification.

GEOSAN GROUP a. s. is a well-established Czech construction company specializing in general contracting for residential, civil, industrial, environmental remediation, water management, and transportation projects. The company positions itself as a financially stable and reputable player with nationwide operations. Their website reflects a professional digital presence with clear navigation, good mobile optimization, and detailed information about their certifications and references. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and the Nette framework for form handling. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and published incident response policies. Privacy compliance is demonstrated through a cookie consent mechanism and a privacy policy page. Overall, the website is trustworthy and business-focused, though WHOIS data is unavailable, which slightly impacts domain trust evaluation.

G

GLOBAL ASSISTANCE a.s.

globalassistance.cz

59

GLOBAL ASSISTANCE a.s. is a Czech-based company specializing in comprehensive assistance services including car, medical, home, legal, and concierge assistance. Founded in 2004 and part of the Vienna Insurance Group since 2014, it serves motorists and business clients primarily in Europe. The website reflects a professional and consistent brand presence with clear service offerings and contact channels. Technically, the site uses modern web technologies including Google Fonts, YouTube API, Facebook Pixel, Google Analytics, and is built on the Solidpixels CMS platform. It is well-optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data is a minor concern but does not significantly detract from the overall trustworthiness given the company's certifications and parent company affiliation.

B

BAK stavební společnost, a.s.

bak.cz

45

BAK stavební společnost, a.s. is a major construction company in the Czech Republic specializing in comprehensive building projects including residential, industrial, administrative, and water management constructions. The company positions itself as one of the largest general contractors in the region, serving clients such as municipalities and private investors. Their website reflects a professional business model focused on delivering high-quality construction services with a strong emphasis on reliability and expertise. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user experience. The site is mobile-optimized and uses modern web technologies like Swiper for sliders and Google Fonts for typography. Performance is moderate with no critical technical issues detected. Accessibility features are basic but present. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and business presence appear legitimate. Overall, the website presents a trustworthy and professional image suitable for its business sector. Strategic improvements in security headers and domain transparency would enhance its security posture and credibility.

W

W3 Eden, Inc.

wpattire.com

45

W3 Eden, Inc. operates the website wpattire.com, offering the Attire WordPress theme, which is designed for speed, SEO friendliness, and responsiveness. The company targets WordPress users and developers seeking high-quality themes and blocks. The website demonstrates a solid technical infrastructure built on WordPress 6.8.2, utilizing modern technologies such as Yoast SEO, jQuery, and FontAwesome, hosted via GoDaddy and Cloudfront CDN. The site is well-optimized for mobile and SEO, with good design and user experience. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and formal privacy or cookie policies. No signs of adult or questionable content were found, and the domain registration is consistent and transparent, supporting legitimacy.

W

W3 Eden, Inc.

wpliveforms.com

10

WPLiveForms.com is the official website for LiveForms, a WordPress plugin developed by W3 Eden, Inc. The company offers a drag and drop form builder plugin designed to simplify the creation and management of complex forms on WordPress websites. Positioned as a flexible and powerful solution, LiveForms targets WordPress users and developers seeking efficient form-building tools with extensive features and add-ons. The website provides detailed product descriptions, testimonials, and blog resources to support user engagement and education. Technically, the site is built on WordPress with Bootstrap and jQuery, leveraging CDN services for content delivery and Google Analytics for user tracking. While the site employs HTTPS and standard domain security locks, it lacks DNSSEC and security headers, indicating room for security enhancements. Privacy compliance is basic, with terms and conditions present but no explicit cookie or privacy policies detected. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility, though improvements in security and privacy transparency are recommended.

FixPro, z.s. is a Czech legal entity operating as an association of companies primarily in the telecommunications and media sectors, offering cable television, internet, and voice services. The organization focuses on enhancing the competitiveness of its members and providing quality, affordable products to end users. The website is built on WordPress, hosted likely by Wedos, and employs standard web technologies including jQuery and Google Analytics. While the site is accessible and functional with basic mobile optimization and navigation clarity, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with HTTPS enabled but missing key security headers and explicit incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

T

Téčko

tka.cz

60

Téčko is a cultural organization based in Rožnov pod Radhoštěm, Czech Republic, providing a wide range of cultural events including concerts, exhibitions, workshops, and cinema programs. The organization targets local citizens and visitors interested in cultural and educational activities. The website presents a professional and well-structured platform with event calendars, ticket sales, and multimedia galleries, supporting its role as a community cultural hub. Technically, the site uses established JavaScript libraries and cookie consent tools, with HTTPS enabled ensuring secure communication. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and social media presence suggest a legitimate entity. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is moderate, with room for improvement in security headers and incident response transparency. Overall, the site is functional, user-friendly, and trustworthy from a content perspective but would benefit from enhanced security practices and domain registration clarity.

M

Mlékárny Kunín a.s.

mlekarna-kunin.cz

49

Mlékárny Kunín a.s. is a Czech dairy manufacturing company specializing in a variety of dairy products including creams, milk desserts, yogurts, and lactose-free milk. The website positions the company as an established player in the dairy sector with a focus on consumer products. The digital infrastructure is built on WordPress with Elementor, integrating modern marketing and analytics tools such as Google Analytics and Facebook Pixel. The site demonstrates good content quality, mobile optimization, and SEO practices, supporting a positive user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data limits domain registration insights, but the overall legitimacy is supported by certifications and social media presence. The site is accessible without WAF or blocking mechanisms, indicating no immediate access restrictions.

O

Obec Malá Bystřice

malabystrice.cz

42

Malá Bystřice is a small municipal government entity in the Czech Republic, providing official information and services to its residents and visitors. The website serves as the official digital presence of the municipality, offering access to public documents, waste collection schedules, local news, and contact information. It targets local citizens and stakeholders interested in community updates and municipal services. The business model is typical for local government websites, focusing on transparency and public service rather than commercial activities. Technically, the website is built on WordPress CMS with a modern plugin ecosystem including SEO tools, contact forms, and analytics that respect user privacy by avoiding cookies. The site is hosted likely by Wedos, a Czech hosting provider, and uses HTTPS with good SSL configuration. The site is mobile-optimized and accessible, with structured data enhancing SEO and content discoverability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are recommended for compliance and enhanced security posture. No WAF or blocking mechanisms are detected, and the site appears fully accessible. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security policies would further strengthen its risk posture and user trust.

O

Obec Pržno

prznouvsetina.cz

17

Obec Pržno operates an official municipal website serving the local community of Pržno in the Czech Republic. The site provides comprehensive information about local government services, news, events, and community organizations. It targets residents and visitors seeking official information and services such as contact details, electronic filing, event calendars, and reservation systems. The business model is public service with a focus on transparency and community engagement. The website is well-branded and consistent with trust indicators such as official contact information and EU co-financed project disclosures. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Nette Framework components. It uses Cloudflare for DNS and hosting infrastructure, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy and cookie policies, GDPR compliance indicators, and incident response contacts, which are areas for improvement. The domain WHOIS data is consistent and indicates a legitimate, long-standing municipal presence. Overall, the website is a trustworthy, well-maintained municipal portal with good technical and security foundations but could enhance privacy compliance and security transparency to better align with modern standards.

O

Obec Jablůnka

jablunka.cz

44

Obec Jablůnka operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about the municipality, local governance, community events, and public services. It targets residents, visitors, and local businesses, offering tools such as an electronic filing system and reservation services. The website is well-established with a domain age since 2003, reflecting a stable online presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper, and Leaflet for interactive maps, supported by a Nette PHP framework backend. The site is mobile-optimized and features good navigation and content quality. However, performance is moderate, and accessibility features are basic. From a security perspective, the website uses HTTPS and includes reCAPTCHA for form protection. Security headers are minimal, and there is no visible security incident response or vulnerability disclosure information. Privacy and cookie policies are absent, representing compliance gaps. Analytics usage includes Google Analytics and Google Tag Manager, with moderate user tracking. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, improved security headers, and explicit incident response information. These improvements would strengthen user trust and regulatory adherence.

O

Obec Lhota u Vsetína

lhotauvsetina.cz

46

The website lhotauvsetina.cz serves as the official online presence for the municipality of Lhota u Vsetína in the Czech Republic. It provides residents and visitors with local news, official announcements, event calendars, waste collection schedules, and contact information for municipal offices. The site is designed to support community engagement and transparency in local governance. The business model is that of a governmental municipal service portal, targeting local residents and stakeholders. The domain is well-established since 2007, reinforcing its legitimacy and trustworthiness. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor analytics, with a clear cookie consent mechanism in place to comply with GDPR requirements. The site is mobile-optimized and provides basic accessibility features, although there is room for improvement in security headers and SEO. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers like CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's purpose and geographic location, indicating a trustworthy domain registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a professional and trustworthy digital presence for the municipality, with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.

S

Stackopera

stackopera.com

59

Stackopera.com is a Czech-based online platform providing the largest overview of Czech business software solutions, targeting companies seeking software products and advisory services. Founded in 2021, it offers a searchable directory with over 800 products and discount offers, aiming to simplify software selection for businesses. The website is built on the Bubble.io platform, leveraging modern JavaScript libraries and includes integrations with analytics and tracking tools such as Hotjar and Microsoft Clarity. The site is well-structured, mobile-optimized, and provides clear contact information and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no explicit security or incident response policies are published. Overall, the platform presents a professional and trustworthy business presence with room for improvement in security and compliance documentation.

C

Continental

continental-partner.com

60

Continental Aftermarket is a division of Continental AG, a global leader in automotive parts and services. The website offers a comprehensive catalog of automotive spare parts, tires, workshop equipment, and related services, targeting both B2B and B2C customers worldwide. The site features a partner finder tool to locate authorized distributors and partners. Technically, the website employs modern tracking and analytics tools including Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a consent management platform to comply with cookie regulations. Security is robust with HTTPS enforced and a Content Security Policy in place, though additional security headers could enhance protection. The absence of WHOIS data is unusual and warrants further investigation, but the website's branding and content strongly indicate a legitimate enterprise presence. Privacy policy and terms of service pages are not explicitly found on this URL, which may impact compliance perception. Overall, the site is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content.

Pharmacy Times is a well-established healthcare media platform providing pharmacy professionals with news, expert insights, and practical solutions impacting pharmacy practice. The website is professionally designed with consistent branding and targets pharmacy professionals primarily in the United States. It operates under the parent company MJH Life Sciences, founded in 1997, indicating a mature business presence. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Segment, HubSpot, and OneTrust for consent management, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contact, which could be improved. The WHOIS data is unavailable or protected, which slightly reduces domain trustworthiness, but the overall business credibility and content quality remain high. Strategic recommendations include publishing explicit security and incident response policies and verifying domain registration details to enhance trust.

P

Propagon

propagon.cz

47

Propagon is a small, specialized web development company based in Brno, Czech Republic, focusing on custom website creation with an emphasis on mobile optimization and individual client service. The company positions itself as a professional local agency offering quality web solutions tailored to client needs. The website demonstrates a good level of digital maturity, utilizing WordPress CMS with the Divi Builder framework, and integrates modern technologies such as Google Tag Manager and reCAPTCHA for enhanced user experience and security. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies. The absence of WHOIS data reduces domain transparency and trustworthiness, but the website content and structured data support the legitimacy of the business. Overall, Propagon presents a professional and trustworthy online presence suitable for its market segment.

T

Tourisme Bretagne

tourismebretagne.bzh

63

Tourisme Bretagne operates as a regional tourism professional portal focused on the Brittany region of France. The website provides news, resources, and subscription-based services tailored to tourism professionals. It is positioned as an important regional authority or resource hub, likely supported by government or regional tourism bodies. The site is built on WordPress with WooCommerce and integrates modern tracking and consent management tools, reflecting a moderate level of digital maturity. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

DESTINATION NANCY

destination-nancy.com

39

DESTINATION NANCY is a public local company primarily focused on promoting tourism and organizing events in the Grand Nancy metropolitan area. It operates key event venues such as Centre Prouvé and Parc Expo, provides free advisory services through its Convention Bureau, and collaborates closely with the local government and tourism office. The website is professionally designed, multilingual (French and English), and regularly updated with event and news content. Technically, it is built on WordPress with modern plugins and analytics tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent, though there is room for improvement in security headers and explicit security policies. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

C

Communauté de Communes Pyrénées Cerdagne

pyrenees-cerdagne.fr

58

The website www.pyrenees-cerdagne.fr represents the Communauté de Communes Pyrénées Cerdagne, a local government entity serving the Pyrénées Cerdagne region in France. It provides public services including urban planning, waste management, cultural activities, and cross-border cooperation. The site targets residents and visitors of the region, offering information and access to community resources. The business model is typical of a public sector organization funded by government budgets. Technically, the site is built on Drupal 7 with Angular integration, leveraging modern mapping libraries such as Leaflet and Google Maps API. It uses Matomo for analytics and Sirdata's consent framework for cookie management, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized and has a clear navigation structure. From a security perspective, HTTPS is enforced, and cookie consent mechanisms are in place. However, no explicit security headers were detected in the HTML content, and no public security or incident response policies are published. The absence of WHOIS data is unusual for a .fr domain but does not appear to impact the legitimacy of the site based on content and branding. Overall, the website is professional, trustworthy, and serves its public sector purpose well. Strategic recommendations include enhancing security headers, publishing privacy and security policies explicitly, and improving WHOIS transparency if possible.

O

Office national des forêts

onf.fr

60

The Office national des forêts (ONF) is a major French government-related organization focused on sustainable forest management, environmental protection, and public engagement. The website reflects a well-established entity with a domain registered since 1996, consistent with its long-standing public service role. The site offers a variety of services including forest management, risk management, and services for local authorities and businesses. It targets a broad audience including public officials, enterprises, forest professionals, and the general public. Technically, the website employs modern JavaScript frameworks such as Vue.js, uses analytics tools like Matomo and Facebook Pixel, and integrates Google Tag Manager for marketing and tracking purposes. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the website is trustworthy, professional, and aligns well with the organization's mission and public service nature.

L

La Rochelle Congrès

larochelle-evenements.fr

53

La Rochelle Congrès operates as a regional event space manager and event organizer based in La Rochelle, France. The company offers rental of iconic venues such as the Espace Encan and the Centre de Congrès Georges-Pernoud, providing tailored event planning services for corporate and professional clients. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding targeting event organizers and businesses. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforcement and use of CAPTCHA, though some security headers are missing and no explicit security policies are published. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional appearance and content quality. Overall, the site is well-positioned in its market niche but would benefit from improved transparency and security documentation.

O

Operator

membershipoperator.com

51

Operator is a newly established subscription-based newsletter and resource platform focused on helping individuals build and operate membership businesses with purpose and excellence. The website positions itself as a trusted resource for subscription business operators, offering curated content and insights to its target audience. The business model revolves around subscription and content delivery, with a clear focus on media and business sectors. Technically, the website employs modern JavaScript frameworks, including React, and integrates third-party services such as Stripe for payments and Sentry for error monitoring. Hosting and DNS services appear to be managed via Google Cloud and Squarespace Domains, respectively. The site demonstrates good mobile optimization and a professional design, though some accessibility features are basic. Security posture is solid with HTTPS enabled and domain status protections in place; however, DNSSEC is not enabled, and no explicit security policies or incident response information are published. Privacy compliance is limited due to the absence of privacy and cookie policies, which is a notable gap for a subscription-based service. Overall, the website is accessible without WAF or blocking mechanisms, and content is safe and business-focused.