Security Directory

E

eSports.cz, s.r.o.

fkmb.cz

46

FK Mladá Boleslav operates an official website serving as the primary digital platform for the Czech football club. The site provides comprehensive information about the club's teams, match schedules, youth academy, partners, and multimedia content, targeting fans and the local community. The business model focuses on fan engagement, merchandising through an integrated fanshop, and promoting club partners. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

FC VIKTORIA Plzeň is a Czech football club with an established online presence dating back to at least 2001, as indicated by the domain registration. The website serves primarily as an informational platform for fans and the local community, offering basic content about the club. Technically, the site uses a combination of older web technologies such as jQuery 1.11.3 and Bootstrap 3.3.7, along with modern tracking tools like Google Analytics and Facebook Pixel. The site lacks advanced CMS integration and appears to be custom-built, with moderate performance and basic mobile optimization. From a security perspective, the website uses HTTPS but lacks important security headers and visible privacy or cookie policies, which reduces its compliance posture. There are no visible forms or contact mechanisms, limiting user interaction and data collection. The WHOIS data is consistent with the website's claims, showing a long-standing domain registration without privacy protection, appropriate for a public sports entity. Overall, the website is functional but basic, with room for improvement in privacy compliance, security hardening, and user engagement features. The absence of contact information and policies may impact user trust and regulatory compliance. Strategic enhancements in these areas would improve the site's professionalism and security posture.

F

FC Slovan Liberec

fcslovanliberec.cz

45

FC Slovan Liberec operates an official website serving as the primary digital platform for the Czech football club. The site offers comprehensive content including team news, match schedules, ticketing options, fan merchandise, and multimedia galleries, targeting football fans and local community members. The website demonstrates a consistent brand presence and integrates multiple partner and sponsor domains, reflecting a well-established sports organization. Technically, the site employs modern web technologies such as Bootstrap and jQuery, with performance and mobile optimization rated as good. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers and detailed privacy policies are absent. The lack of WHOIS data is a notable gap, reducing domain trustworthiness despite the legitimate appearance of the site. Overall, the website is professional and user-friendly but would benefit from enhanced transparency in privacy and security policies.

F

FC Hradec Králové, a.s.

fchk.cz

53

FC Hradec Králové, a.s. operates an official website serving as the primary digital platform for the Czech football club FC Hradec Králové. The site provides comprehensive information including match schedules, team rosters, news updates, ticketing services, and a fanshop for merchandise. The club has a strong market presence in Czech football, with a history dating back over 120 years, positioning itself as a well-established sports entity. The website targets football fans, local community members, and sports enthusiasts, offering a user-friendly and content-rich experience. Technically, the website employs modern JavaScript libraries such as GSAP and Swiper.js for animations and interactive elements, alongside Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, hosted under a Czech registrar with consistent domain registration data. Cookie consent mechanisms and GDPR compliance are well implemented, reflecting a mature approach to privacy and user data protection. From a security perspective, the website enforces HTTPS and uses cookie consent categories to manage tracking scripts responsibly. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the website demonstrates a high level of professionalism, content quality, and trustworthiness, with a strong alignment between domain registration and business identity. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen the security posture.

F

FK Dukla Praha

fkduklapraha.cz

51

FK Dukla Praha is a well-established Czech football club with a strong digital presence through its official website. The site offers comprehensive information about the club, including team rosters, match reports, fan engagement activities, and an integrated fan shop. The club targets football fans and the local community, leveraging merchandising and ticket sales as key revenue streams. Technically, the website employs modern web technologies such as Bootstrap and jQuery, and integrates multiple analytics and marketing tools including Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and implements cookie consent mechanisms, but could improve by adding explicit security headers and a vulnerability disclosure policy. The domain registration data is consistent with the club's history and location, supporting the site's legitimacy. Overall, the website demonstrates a mature digital infrastructure suitable for its business model but has room for security and compliance enhancements.

B

Bohemians Praha 1905

bohemians.cz

53

Bohemians Praha 1905 is a well-established Czech football club with a rich history dating back to 1905. The website serves as the official digital platform providing comprehensive information about the club, including news, match schedules, ticket sales, fan engagement, and merchandise. The site targets football fans and the local community, offering a professional and consistent brand experience. Technically, the website employs modern JavaScript libraries such as Swiper.js and Google reCAPTCHA, hosted behind Cloudflare for DNS and CDN services, ensuring moderate performance and good mobile optimization. Security measures include HTTPS enforcement and standard security headers, with a GDPR-compliant cookie consent mechanism and a basic privacy policy in place. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the club's business model and audience.

A

AC Sparta Praha

sparta.cz

66

AC Sparta Praha operates an official website serving as the primary digital platform for the football club, providing fans with news, match results, player information, and ticket purchasing options. The site targets football enthusiasts primarily in the Czech Republic and maintains a strong brand presence consistent with its long history since 1893. The domain age and WHOIS data confirm the legitimacy and stability of the online presence. Technically, the site is built on modern frameworks such as Next.js and leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The use of Cookiebot for consent management and integration with major analytics and advertising platforms like Google Analytics, Facebook Pixel, and Gemius demonstrates a mature digital marketing and compliance posture. Security-wise, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data, though explicit security policies and incident response contacts are not published. Overall, the website is professional, secure, and compliant with GDPR, making it a trustworthy platform for its audience.

1

1.FC Slovácko, a. S.

fcslovacko.cz

53

1.FC Slovácko, a. S. is a professional football club based in the Czech Republic, operating an official website that serves as a hub for club information, match results, team rosters, and fan engagement. The website targets football fans and the local community, providing news, multimedia content, and links to social media and a fanshop. The club competes in the top Czech football league, positioning itself as a recognized sports entity in the region. The website infrastructure utilizes modern web technologies including JavaScript, Google Tag Manager, YouTube Player API, and the Nette Framework. It demonstrates good mobile optimization and responsive design, with a moderate performance profile. The site is hosted securely with HTTPS and integrates external content and partner links effectively, though some technical improvements in security headers and privacy disclosures are recommended. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or suspicious content were detected. The absence of WHOIS data limits domain registration insights but the overall digital presence and partner ecosystem support legitimacy. Overall, the website is professional and trustworthy, with room for enhancement in privacy compliance and security best practices. Strategic improvements in these areas will strengthen user confidence and regulatory adherence.

F

FANSHOP

fanshopfcb.cz

57

The website fanshopfcb.cz operates as an e-commerce platform specializing in fan merchandise for FC Baník Ostrava, offering a variety of products including clothing, accessories, and wines. The site targets fans of the football club and general sports merchandise buyers primarily in the Czech Republic. The business model is focused on online retail with a niche market position serving regional fan communities. Technically, the website employs a mix of JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics for tracking, and uses external services like Mapy.cz API and Packeta for shipping. The platform appears to be built on a proprietary or custom CMS (likely K2). The site is mobile optimized with moderate performance and basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks visible security headers and comprehensive privacy or terms of service documentation. No WHOIS data is available, which raises concerns about domain registration transparency. The site includes cookie consent mechanisms but does not provide explicit privacy policy details, impacting privacy compliance. Overall, the website presents a functional and professional e-commerce presence with room for improvement in security best practices, privacy transparency, and domain registration legitimacy. Strategic recommendations include implementing security headers, publishing privacy and terms policies, and verifying domain registration details to enhance trust and compliance.

S

Spolek ALSA

fandimestejne.cz

54

The website 'Fandíme stejně' is a Czech non-profit campaign dedicated to supporting people with Amyotrophic Lateral Sclerosis (ALS) by raising awareness and funds for the ALSA organization. It leverages partnerships with prominent sports clubs and Fortuna, a major Czech betting company, to engage the sports fan community in charitable activities. The site provides information about ALS, the campaign, donation options, and upcoming sports events tied to the initiative. Technically, the website is built on a modern SvelteKit framework, hosted on Cloudflare, and employs best practices such as HTTPS, security headers, and cookie consent management via Usercentrics. However, it lacks explicit privacy and terms of service pages and does not provide direct contact information, which are areas for improvement. The WHOIS data shows an anomalous future domain creation date, likely a data error, but the overall legitimacy is supported by the content and partnerships. The site is safe, professional, and well-optimized for mobile and SEO.

M

Mobildrive.cz

mbenzin.cz

39

mBenzin.cz is a Czech Republic-based online platform providing up-to-date fuel prices for gasoline, diesel, LPG, and CNG across local fuel stations. It targets motorists seeking to find the nearest and cheapest fuel options, offering additional services such as price trend analysis, technical inspection station information, and articles related to motorist advice. The website leverages user-generated content for price updates and monetizes through advertising and affiliate marketing partnerships. Technically, the site is built on ASP.NET WebForms with jQuery and Bootstrap for responsive design, integrating Google Analytics and Adsense for tracking and monetization. While the site is functional and well-structured with good content quality and mobile optimization, it lacks explicit privacy and cookie policies, which may affect GDPR compliance. Security posture is moderate, with HTTPS implied but no visible security headers, and no WHOIS data is available, which limits trust assessment. Overall, the site is professional and relevant for its audience but could improve in privacy compliance and security best practices.

Autoservis Kobolka is a small, local automotive repair and maintenance service provider based in Kutná Hora, Czech Republic. The company specializes in servicing vehicles from major European brands such as VW, Peugeot, Citroen, Fiat, Ford, Opel, and Alfa Romeo. Established in 1999, the business offers a comprehensive range of services including diagnostics, mechanical repairs, brake and axle work, engine and transmission overhauls, and additional services like tire service and vehicle towing. The website reflects a modest but functional online presence with clear contact information and basic service descriptions.

S

Statutární město Kladno

mestokladno.cz

52

The website mestokladno.cz serves as the official online portal for the statutory city of Kladno in the Czech Republic. It provides residents and visitors with comprehensive municipal information including news, events, administrative services, and contact details. The site is positioned as a trusted government resource with a clear focus on public service delivery and community engagement. The target audience primarily consists of local citizens and stakeholders interested in city governance and services. From a technical perspective, the website employs a proprietary CMS platform (Vismo) and integrates modern web technologies such as HTML5, CSS, JavaScript, and Google Analytics for performance monitoring. The site is mobile-optimized and accessible, with a clear navigation structure and compliance with privacy regulations including GDPR. Cookie consent mechanisms are implemented effectively, enhancing user privacy. Security-wise, the site benefits from HTTPS encryption and does not expose sensitive data or vulnerable libraries. However, it lacks explicit published security policies and incident response contacts, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or suspicious activities were detected. Overall, mestokladno.cz demonstrates a solid security posture and business credibility consistent with an official municipal website. Strategic improvements in security policy publication and incident response readiness would further strengthen its trustworthiness and compliance profile.

V

Vixio Regulatory Intelligence

gamblingcomplianceawards.com

51

The GamblingCompliance Awards website is a professionally maintained platform operated by Vixio Regulatory Intelligence, a UK-based company specializing in regulatory intelligence and compliance within the gambling industry. The site promotes the annual Global Regulatory Awards, which recognize excellence in compliance and responsible gambling. The business is well positioned as a leading organizer of these industry awards, targeting compliance professionals and stakeholders globally. The website provides comprehensive information about the awards, sponsors, history, and booking options, reflecting a mature and stable business model focused on event organization and sponsorship. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap 4 and integrates Google Analytics and Tag Manager for tracking. Hosting appears to be on Amazon AWS infrastructure, supported by AWS DNS servers. The site is mobile optimized, accessible, and SEO friendly, with cookie consent mechanisms in place, indicating good digital maturity and compliance with privacy regulations. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data confirms a consistent and legitimate domain registration aligned with the business claims. Overall, the security posture is good but could be improved by adding formal security policies and enabling DNSSEC. The overall risk assessment is low, with no critical issues found. Strategic recommendations include publishing a security policy, adding incident response and vulnerability disclosure information, enabling DNSSEC, and implementing additional security headers to enhance protection and trust. The website is trustworthy, professional, and compliant with relevant privacy and security standards.

G

Gordon Moody Association

gordonmoody.org.uk

58

Gordon Moody Association is a well-established UK-based charity dedicated to tackling gambling-related harm through residential treatment and support services. The organization positions itself as the leading UK charity in this niche, offering a range of services including counselling, self-assessment tools, professional referrals, and crisis support. Their target audience includes individuals affected by gambling addiction, their families, and healthcare professionals. The website reflects a professional and trustworthy image with consistent branding and comprehensive content focused on their mission. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Google Tag Manager, and Tawk.to live chat. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. The use of structured data enhances search engine visibility and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence, aligning with the charity's history. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture.

C

Clarity Creation

claritycreation.com

47

Clarity Creation is a small, established marketing and communications agency based in Liverpool, UK, specializing in web development, corporate branding, graphic design, advertising campaigns, SEO, and email marketing. The company has been operating since 1999 and serves a diverse client base including public and private sector organizations. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site runs on WordPress with common marketing and analytics tools such as Yoast SEO and Google Analytics. Security posture is moderate with HTTPS enabled but lacks visible security headers and dedicated security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear credible. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site presents a trustworthy business front but would benefit from improved security transparency and domain registration clarity.

S

Seznam.cz, a.s.

post.cz

68

Seznam.cz, a.s. operates a comprehensive Czech internet portal offering a variety of digital services including email, maps, real estate listings, and streaming. The login portal analyzed is a secure gateway to these services, supporting multiple OAuth providers such as Google, Microsoft, Apple, BankID, and MojeID, indicating a mature and user-friendly authentication infrastructure. The website is well-branded and targets general internet users primarily in the Czech Republic and Slovakia. Technically, the site uses modern web technologies with responsive design and password strength indicators, although some accessibility and security header enhancements could be made. Security posture is solid with HTTPS enforced and multi-factor authentication options, but lacks visible security headers and explicit incident response contacts. Privacy compliance is partially addressed with clear privacy and terms of service links, but no cookie consent mechanism is present. Overall, the site is trustworthy and professionally maintained, though improvements in privacy and security transparency are recommended.

V

Vyklízení a bourací práce Kutná Hora, Čáslav

vyklizeni-kutna-hora.cz

55

Vyklízení a bourací práce Kutná Hora, Čáslav is a small local service provider specializing in property clearance and demolition services in the Kutná Hora and Čáslav regions of the Czech Republic. The company offers a comprehensive range of services including clearing residential and commercial properties, ecological waste disposal, and demolition of small to medium-sized structures. Their market position is focused on local customers, including households, businesses, and public institutions, with a strong emphasis on professional and environmentally responsible service delivery. Technically, the website employs standard web technologies such as jQuery, Facebook SDK, and custom JavaScript for form validation. The site is mobile-optimized with good SEO practices and clear navigation, although no CMS or hosting provider details are evident. The website includes GDPR-compliant cookie consent mechanisms and a privacy policy, reflecting a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements client-side form validation and cookie consent. However, there is no evidence of advanced security headers or published security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and server-side validation are recommended. Overall, the website presents a trustworthy and professional image consistent with a legitimate small business. The lack of WHOIS data due to privacy protection is common and does not detract from the site's credibility. Strategic recommendations include enhancing security posture with headers and policies, publishing incident response information, and maintaining up-to-date technical components.

V

Vyklízení Chrudim, bourací práce

vyklizeni-chrudim.cz

54

Vyklízení Chrudim is a small, local business specializing in property clearance and demolition services in Chrudim and surrounding areas. The company offers a range of services including clearing apartments, houses, commercial spaces, and ecological waste disposal. Their market position is focused on local customers seeking reliable and professional clearance and demolition work. The website presents clear business information, including contact details and a customer review, supporting trustworthiness. Technically, the website uses common JavaScript libraries such as jQuery and Facebook SDK for social integration. It implements GDPR-compliant cookie consent mechanisms and basic form validation. The site is mobile-optimized and has good SEO practices, though no CMS or hosting provider details are evident. Performance is moderate with room for improvement in security headers and explicit privacy/security policies. Security posture is adequate with HTTPS usage and GDPR compliance, but lacks advanced security headers and vulnerability disclosure mechanisms. No critical vulnerabilities were detected, but recommendations include adding security headers and a security.txt file. The absence of WHOIS data reduces domain trustworthiness, though website content and contact info appear legitimate. Overall, the website is professional and functional with good privacy compliance but would benefit from enhanced security practices and domain registration verification to improve trust and security posture.

V

Vyklízení nemovitostí Hutla

vyklizeni-hutla.cz

44

Vyklízení nemovitostí Hutla is a small Czech Republic-based company specializing in comprehensive property clearance services including residential, commercial, and industrial spaces. They emphasize affordability, speed, and ecological waste disposal, serving multiple regions such as Pardubice, Prague, and Hradec Králové. The website presents a professional image with clear service offerings and customer testimonials, positioning the company as a reliable local service provider. Technically, the website uses standard web technologies like jQuery and Facebook SDK, with responsive design and good SEO practices. However, there is room for improvement in security headers and privacy compliance. The absence of WHOIS data and privacy policy pages are notable gaps that affect trust and regulatory compliance. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. The site collects user data via a contact form but lacks clear privacy and cookie consent mechanisms. Overall, the risk is moderate with recommendations to enhance security, privacy, and transparency. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, improving WHOIS transparency, and enhancing user trust through certifications or compliance disclosures.

C

Coinmate s.r.o

ushop.cz

66

Coinmate s.r.o operates a well-established European cryptocurrency exchange platform, primarily targeting customers in Czechia and Slovakia, with a focus on trading cryptocurrencies against the euro and Czech koruna. The company has been in operation since 2013, positioning itself as a trusted and local player in the crypto finance sector. Their services include quick buy options, automated recurring purchases, a professional trading platform integrated with TradingView, and API access for automated trading bots. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience.

L

LivePerson

liveperson.com

75

LivePerson operates a leading Conversational AI platform designed to help businesses engage customers through personalized, scalable digital experiences. The website presents a professional and modern interface built with React and Gatsby, hosted partially on Amazon S3, indicating a mature technical infrastructure. However, the absence of WHOIS data and lack of visible security headers or privacy policies suggest areas for improvement in transparency and security posture. Overall, the site is business-focused, safe, and credible, but could enhance trust by publishing clear privacy and security documentation.

SGS is a globally recognized enterprise specializing in testing, inspection, and certification services across multiple industries including energy, transportation, manufacturing, and government sectors. Established in 1878 and headquartered in Switzerland, SGS holds a leading market position with a comprehensive portfolio of services that ensure quality, safety, and compliance for its clients worldwide. The website reflects this stature with professional branding, clear messaging, and a focus on business clients seeking trusted verification and certification solutions. Technically, the site employs modern frameworks such as Next.js and React, combined with Tailwind CSS for styling, ensuring a fast, responsive, and accessible user experience. The presence of advanced analytics and marketing tools like Google Tag Manager and LinkedIn Insight Tag indicates a mature digital marketing strategy with moderate user tracking balanced by privacy compliance mechanisms including cookie consent and GDPR-aligned policies. Security-wise, the site enforces HTTPS with strong security headers and no visible vulnerabilities, reflecting a robust security posture appropriate for an enterprise of its scale. However, the absence of WHOIS data limits domain registration trust analysis, though the overall professionalism and trust signals mitigate concerns. Strategic recommendations include enhancing incident response visibility, establishing a formal vulnerability disclosure program, and maintaining rigorous security audits to sustain trust and compliance.

V

Vilgain

vilgain.ch

72

Vilgain is a Swiss-based e-commerce company specializing in sports nutrition, functional foods, supplements, cosmetics, and related wellness products. The website targets health-conscious consumers primarily in the DACH region and Switzerland, offering a broad product catalog with multiple localized domains to serve various European markets. The business model focuses on direct online retail with value-added content such as expert articles and recipes, supported by strong customer trust signals including a Trusted Shops certification and a 100% money-back guarantee. Technically, the website employs modern JavaScript frameworks, lazy loading, responsive design, and integrates error monitoring via Sentry and analytics through Google Tag Manager. The site is well-optimized for mobile devices and SEO, though some accessibility features are basic. Security posture is solid with HTTPS enforced and nonce attributes for scripts, but lacks explicit security headers and published security policies. From a security and compliance perspective, the site does not expose sensitive data or vulnerable libraries in the analyzed content. However, it lacks visible privacy and cookie policies, consent mechanisms, and incident response or vulnerability disclosure information, which are critical for GDPR compliance and user trust. No contact emails or phone numbers were found in the provided HTML, limiting direct communication channels. Overall, Vilgain presents a professional and trustworthy e-commerce platform with good technical infrastructure and strong business credibility. To enhance security and compliance, it should publish comprehensive privacy and cookie policies, implement consent mechanisms, and provide clear contact information and security incident procedures.

V

Vilgain

vilgain.co.uk

73

Vilgain is a UK-based e-commerce business specializing in sports nutrition, functional foods, sportswear, and fitness equipment. The company targets athletes and health-conscious consumers, offering a range of products designed to improve athletic performance and overall health. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. The business has a moderate market position with a focus on quality and customer satisfaction, as evidenced by trust signals such as a money-back guarantee and positive reviews on Trustpilot. Technically, the website employs modern web technologies including JavaScript, Sentry for error tracking, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and uses HTTPS with a good SSL configuration, though it lacks some advanced security headers. Performance is moderate, and SEO practices are adequately implemented. Privacy compliance is weak due to the absence of explicit privacy and cookie policies and consent mechanisms. From a security perspective, the site benefits from HTTPS and nonce attributes on scripts, reducing risks of injection attacks. However, the lack of security headers and formal incident response or vulnerability disclosure policies indicates room for improvement. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent and appropriate for the business age and scope. Overall, Vilgain presents a trustworthy and professional e-commerce platform with good technical and security foundations but requires enhancements in privacy compliance and security best practices to further strengthen its posture.

SCR group is a Slovak-based technology company specializing in digital ecosystems, software development, digital marketing, and UX/UI design services. The company serves a broad range of industries with a medium-sized team and maintains a strong market presence supported by reputable client partnerships and industry awards. Their business model focuses on delivering comprehensive digital solutions including teamsourcing, custom software engineering, and performance marketing. Technically, the website is built on a modern stack including PHP, Laravel, JavaScript frameworks, and mobile platforms, hosted on WordPress CMS with good mobile optimization and SEO practices. Security posture is solid with HTTPS and claims of ISO 27001 and OWASP Top 10 compliance, though explicit security headers and privacy policies are missing. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the professional website content and client references support business credibility. Overall, the site is well-designed and functional but would benefit from improved transparency in privacy and security disclosures.

Q

Quorum

quorum.us

11

Quorum is a technology company specializing in AI-powered public affairs software designed to help government affairs professionals, advocacy groups, and public sector organizations efficiently track legislation, manage stakeholders, and execute advocacy strategies. The company positions itself as a market leader with a comprehensive suite of tools covering federal, state, local, and international policy landscapes. Their platform integrates AI capabilities to provide actionable intelligence and streamline public affairs workflows. Technically, Quorum's website is built on WordPress and leverages a modern technology stack including Google Tag Manager, Microsoft Clarity, Marketo, and Osano for consent management. The site demonstrates good performance, mobile optimization, and accessibility, with strong SEO practices. The use of multiple analytics and marketing tools indicates a mature digital marketing infrastructure. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. While some security headers are not explicitly detected, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is mitigated by the professional and consistent website content, strong trust signals, and legitimate business presence. Overall, Quorum presents a low-risk profile with a well-maintained digital presence, strong business credibility, and adherence to privacy and security best practices. Strategic recommendations include enhancing security headers and continuing regular audits of third-party scripts to maintain security and compliance.

C

Club des Sports de Megève

csmegeve.com

45

The Club des Sports de Megève is a well-established sports club based in Megève, France, with a rich history dating back to 1931. The organization offers a variety of sports activities and community events throughout the year, targeting both youth and adults. Their website reflects a strong community focus and provides detailed information about their sports sections, events, and partnerships. Technically, the website is built on WordPress using the Divi theme, hosted by o2switch, and incorporates common web technologies such as jQuery and Swiper.js. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security-wise, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is a notable gap, as no privacy or cookie policies were found, which could expose the organization to regulatory risks. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

Agorastore is a French online auction platform specializing in the sale of second-hand equipment, vehicles, professional materials, furniture, and real estate assets primarily from public entities and companies. The platform targets professionals and public organizations seeking to liquidate assets through auctions, positioning itself as a niche market leader in France. The website demonstrates a good level of digital maturity, employing modern web technologies such as React, Google Tag Manager, and a comprehensive consent management platform (Didomi) to ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though the use of an outdated jQuery version and lack of explicit security headers suggest room for improvement. The absence of WHOIS data is a notable concern, reducing domain trustworthiness from a registration perspective. Overall, the website is functional, compliant, and trustworthy for its intended audience, but should address technical and security enhancements to strengthen its posture.

Siclade Informatique is a French software company specializing in custom IT solutions with over 30 years of experience. Their key offerings include AxiGap, a financial and commercial management solution for parking services, and Avitax, a product management system for aviation fuel at French airports. The company targets professional clients in transportation and energy sectors, providing tailored software to optimize administrative and operational tasks. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Bootstrap and jQuery. Telemetry is implemented via Microsoft Application Insights, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The domain registration is consistent and transparent, registered with a reputable registrar OVH sas, and the domain age aligns reasonably with the business history. Overall, the security posture is moderate with room for enhancement in policy transparency and technical security controls.

L

Le Palais Megève

lepalaismegeve.com

57

Le Palais Megève operates the largest sports and leisure complex in the French Alps, offering a wide range of activities including aquatic facilities, ice rink, spa, fitness, climbing, tennis, and event spaces. The website targets families, sports enthusiasts, and general visitors seeking multisport and wellness experiences. The business is positioned as a key regional leisure destination with a medium-sized operation founded in 2017. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Slider, and various UI libraries, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance is well addressed with GDPR-consistent policies and cookie management. Overall, the website is professional, trustworthy, and well-aligned with the business objectives.

M

Megève Tourisme

megeve.com

69

Megève Tourisme operates a comprehensive and professionally designed tourism website promoting the alpine resort of Megève in France. The site targets tourists interested in skiing, outdoor activities, gastronomy, and cultural experiences. It serves as an official or semi-official portal with extensive content, event calendars, and accommodation booking links. The technical infrastructure is based on WordPress with modern plugins and analytics tools, ensuring good SEO, accessibility, and mobile responsiveness. Security posture is strong with HTTPS and security headers, though no explicit security policy or incident response contacts are published. WHOIS data is privacy-protected but the domain is active and well-maintained, supporting legitimacy. Overall, the website is a trustworthy and valuable resource for visitors planning a stay in Megève.

K

Koredge

koredge.fr

49

Koredge is a well-established French digital agency and ESN with over 25 years of experience, specializing in custom web development, digital marketing, and proprietary software tools tailored for sectors such as transport, tourism, sport, healthcare, and public administration. The company operates primarily in Besançon, Paris, and Lyon, offering a comprehensive suite of services including website creation, application development, e-commerce solutions, and cybersecurity. Their market position is strengthened by a strong portfolio of client testimonials and sector-specific expertise. Technically, the website is built on WordPress with modern frameworks like Symfony, Angular, and Ionic mentioned in their service offerings. The site employs SEO best practices, Google Tag Manager, and social media tracking pixels, indicating a mature digital infrastructure. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of privacy and cookie policies and missing WHOIS data slightly reduce the overall trustworthiness. Overall, Koredge presents a professional and credible digital presence with strong business and technical foundations. Strategic improvements in privacy compliance and security transparency would further enhance their risk posture and client trust.

B

Beetween

nous-recrutons.fr

58

Beetween is a French technology company specializing in recruitment software (ATS) since 2007, with a presence in Rennes, Paris, and Marseille. The company aims to digitalize recruitment processes and support HR professionals with efficient tools. The website nous-recrutons.fr serves as a recruitment portal and brand presence for Beetween, showcasing job offers, company culture, and testimonials. Technically, the site is built on WordPress with Elementor and Jet plugins, hosted by OVH, and uses modern web technologies including jQuery and FontAwesome. Security posture is adequate with HTTPS and some security plugins, but lacks important security headers and a published privacy policy. The site includes a cookie consent banner indicating some GDPR awareness but lacks comprehensive privacy documentation. Overall, the website is professional, well-branded, and safe for general audiences, but could improve in privacy compliance and security best practices.

The website lisio-solution.com currently returns a 404 Not Found error page, indicating that the site content is inaccessible or not deployed. There is no metadata, structured data, or business information available on the site. The domain is registered with OVH sas in February 2023 and is set to expire in 2026, showing a recent but legitimate registration. The hosting environment uses Apache 2.4.65 on Debian. Due to the lack of accessible content, no privacy, cookie, or security policies are present, and no contact information or business details can be extracted. This severely limits the ability to assess the company's market position or services. The website's technical infrastructure is basic, with no advanced security headers or DNSSEC enabled. Overall, the site appears to be either under development or abandoned.

WEST MEDIA, s.r.o. is a small media company based in the Czech Republic, primarily focused on producing and operating the DinoPark project. The website serves as a simple informational portal linking to the DinoPark site and providing basic contact details. The technical infrastructure is built on Mobirise CMS with Bootstrap 4 and common JavaScript libraries, offering a moderate level of performance and good mobile responsiveness. However, the site lacks advanced SEO and accessibility features. Security posture is basic with no evident HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional and professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

Moravské hospodářství

moravskehospodarstvi.cz

49

Moravské hospodářství is a Czech regional news media website established in 2008, providing news, economic updates, cultural events, and commentary primarily focused on Moravia and the Czech Republic. The website uses WordPress CMS with modern plugins for GDPR and cookie compliance, and it maintains a moderate to good technical infrastructure including HTTPS and Google Analytics integration. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The site is accessible without WAF or blocking mechanisms, indicating good availability. Overall, the website is professional, trustworthy, and compliant with privacy regulations, targeting Czech-speaking audiences interested in regional news and economy.