Security Directory

S

Samuel Niums Aminou

niums.com

42

The website niums.com represents a personal freelance portfolio and blog operated by Samuel Niums Aminou, a French web designer and blogger. The site focuses on showcasing web design work, sharing blog content related to web development and music, and linking to a YouTube channel for video content. The business model is that of an individual freelancer targeting French-speaking audiences interested in web design and music genres. The market position is small and personal, with no indication of larger corporate structure or subsidiaries. Technically, the website is built using basic HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The hosting provider is OVH sas, a reputable French hosting company. The site lacks modern CMS or frameworks and shows minimal mobile optimization and accessibility features. SEO practices are basic, with meta tags present but no advanced structured data or Open Graph tags. From a security perspective, the site has a basic posture. The domain is registered since 2003 with no privacy protection, indicating transparency and legitimacy. However, no DNSSEC is enabled, no security headers are detected, and there is no visible HTTPS enforcement or secure forms. Privacy and cookie policies are absent, and no contact information is provided, which reduces compliance with GDPR and best practices. Google Analytics is used without a consent mechanism, indicating privacy compliance gaps. Overall, the website is functional for its purpose as a personal portfolio and blog but lacks professional security, privacy, and compliance features. The risk level is moderate due to missing security controls and privacy policies. Strategic improvements in security headers, HTTPS enforcement, privacy compliance, and contact transparency are recommended to enhance trust and compliance.

The website respectdudroitdauteur.fr serves as an advocacy and informational platform focused on the respect of copyright and intellectual property rights within the context of emerging AI regulations in Europe. It represents a coalition of European cultural and creative organizations, publishing declarations and charters to influence policy and promote responsible AI use respecting creators' rights. The site is relatively new, founded in 2023, and hosted on OVH using WordPress technology. It demonstrates good content quality and professional presentation, targeting stakeholders in the cultural and AI regulatory sectors. Technically, the site is well-structured, mobile-optimized, and accessible, though it lacks advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enforced but could be improved with additional policies and disclosures. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security transparency.

Demokratie leben is a local government-backed initiative based in Herten, Germany, focused on promoting democracy, diversity, and preventing extremism through community projects and funding. The website serves as an information hub and application portal for project funding under the federal program 'Demokratie leben!'. The target audience includes local citizens, civil society actors, and project applicants. The business model is non-profit and government-supported, emphasizing community engagement and democratic participation. Technically, the website uses standard web technologies including JavaScript, jQuery, and Font Awesome, hosted on INWX nameservers. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The CMS is not explicitly identified but appears custom or proprietary. The website is secured with HTTPS and includes a cookie consent mechanism, though lacks advanced security headers and published security policies. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The site does not use analytics or advertising scripts, minimizing privacy risks. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively supports its mission to promote democracy locally. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving mobile optimization and SEO for broader reach.

H

Heineken

heineken.cz

71

Heineken is a globally recognized brewing company specializing in the production and marketing of beer products. The website analyzed serves primarily as an age verification gateway to ensure compliance with legal drinking age regulations before granting access to alcohol-related content. The site demonstrates a mature digital presence with integrated privacy and cookie consent mechanisms, reflecting adherence to GDPR and other privacy standards. The technical infrastructure includes modern JavaScript usage, Google Tag Manager for analytics, and OneTrust for consent management, indicating a well-maintained and compliant digital environment. Security posture is adequate with HTTPS implied and consent mechanisms in place, though explicit security headers were not detected in the provided data. The absence of WHOIS data is unusual but likely due to privacy or registry policies rather than malicious intent. Overall, the website is professional, trustworthy, and targets an adult audience with appropriate content safety measures.

P

PROCIREP

procirep.fr

53

PROCIREP is a French collective management organization representing cinema and television producers, focusing on rights management related to private copying and retransmission rights. Established since 1999, it operates alongside related entities such as ANGOA and the French ISAN agency, providing support and funding for audiovisual production. The website reflects a professional and consistent brand presence targeting French audiovisual producers and stakeholders. Technically, the site uses the SPIP CMS with standard web technologies and integrates Google Analytics with a compliant cookie consent mechanism. Security posture is adequate with HTTPS and consent management but lacks explicit security headers and published security policies. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, though improvements in accessibility and security transparency are recommended.

D

Deutsche Bahn AG

bahnhof.de

63

bahnhof.de is the official platform operated by Deutsche Bahn AG providing comprehensive information about passenger train stations across Germany. It offers live departure and arrival times, station facilities, accessibility information, and local services to travelers. The website is well-positioned as a leading national transportation information portal, serving a broad audience of train passengers and mobility users. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, bahnhof.de demonstrates a mature digital presence with high trustworthiness and professional content.

E

Emscher Lippe Energie GmbH

elecard.de

70

Emscher Lippe Energie GmbH operates the ELE Card platform, a regional loyalty program offering customers discounts and benefits across various sectors such as leisure, retail, and travel. The website is professionally designed, leveraging TYPO3 CMS and modern web technologies to provide a user-friendly experience. The company targets residents and customers in the Emscher Lippe region, positioning itself as a regional energy provider with added customer engagement services. Technically, the site uses reputable analytics and advertising tools including Matomo, Google Ads, and Facebook Pixel, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and session management in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant, and well-structured, supporting the company's business objectives effectively.

M

Mein Mülheim | Heimaturlaub in der Stadt am Fluss

mein-muelheim.de

57

Mein Mülheim is a tourism-focused website promoting the city of Mülheim an der Ruhr, Germany, highlighting local attractions, weekend tips, and outdoor activities. The site targets general visitors and residents interested in exploring the city and its surroundings. The business model centers on local tourism promotion and community engagement. Technically, the website is built on TYPO3 CMS and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and presents good content quality with consistent branding. Security posture is moderate, with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the website is accessible, safe, and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

A

AGITPROP

agitprop.bg

37

AGITPROP is a small Bulgarian media production company specializing in creative documentaries, art, and advertising photography. The website content focuses on explaining the term 'AGITPROP' and showcases categories of their work including film, video, campaigns, photography, and graphic design. The company appears to target a general audience interested in artistic and documentary media. The technical infrastructure is basic, relying on custom JavaScript and CSS with hosting inferred to be StableHost. The website lacks modern CMS or frameworks and shows limited mobile optimization and accessibility features. Security posture is minimal with no visible HTTPS or security headers in the provided data, and privacy compliance is poor due to absence of privacy and cookie policies. No contact information or social media links are provided, which limits business credibility. Overall, the site is functional but basic, with room for improvement in security, privacy, and user engagement.

C

Copa Ca Backum/Copa Oase

copacabackum.de

65

Copa Ca Backum is a regional leisure and wellness center located in Herten, Germany, offering a broad range of services including swimming pools, sauna facilities, wellness massages, gastronomy, and family-oriented events. The website presents a professional and consistent brand image with clear navigation and comprehensive content tailored to families, sports enthusiasts, and wellness seekers. The business model focuses on hospitality and recreational services with a medium-sized market presence in the local region. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Google Analytics, and an accessibility assistant, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response documentation. Overall, the site is trustworthy, GDPR compliant, and provides a good user experience with no adult or explicit content.

T

Treffpunkt Villa (Einrichtung der Kinder- und Jugendförderung des Kreises Unna)

treffpunkt-villa.de

59

Treffpunkt Villa is a public youth and family service institution operated under the Kreis Unna government in Germany. It offers a broad range of community-oriented programs including youth counseling, leisure activities, educational support, and cultural integration initiatives targeting children, adolescents, and families in Holzwickede. The website is built on a modern Angular framework, hosted on official Kreis Unna infrastructure, and demonstrates good digital maturity with responsive design and privacy compliance. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Overall, the site reflects a trustworthy and professional public service entity with clear contact information and comprehensive content.

K

Kino Star

kinostar.sk

55

Kino Star is a local cinema portal website targeting audiences in Slovak towns Zvolen and Lučenec. It provides a simple interface for users to select their preferred cinema location. The website is built using modern web technologies including React and Next.js, indicating a contemporary technical infrastructure. However, the content is minimal and primarily serves as a navigation gateway to subdomains for each cinema location. Security posture is basic with no detected security headers or privacy policies, and no contact information is provided on the main page. The site does not appear to use tracking or analytics services, which reduces privacy concerns but also limits business intelligence capabilities. Overall, the website is functional for its purpose but lacks comprehensive compliance and security features.

The website vitajte.tricklandia.sk serves as a simple introductory landing page for Tricklandia, a local Slovak entity. The page contains minimal content, primarily images and links to partner or related sites, and redirects users to the main Tricklandia website after 10 seconds. The business appears to be small-scale with limited digital presence on this subdomain. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS. There is no evidence of analytics, advertising, or user tracking technologies. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is privacy protected, which is common for small or personal websites but limits transparency. Overall, the site is safe for general audiences but lacks professional security and compliance features.

P

Price.ro

price.ro

60

Price.ro is a well-established Romanian price comparison website founded in 2001, offering a comprehensive platform for consumers to search and compare prices across millions of products from thousands of stores. The website targets Romanian online shoppers and provides key services such as product search, price comparison, special offers, and user reviews. The platform demonstrates a consistent brand presence with good content quality and a professional design tailored for a general audience. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The website is HTTPS secured, ensuring encrypted communication, but lacks some advanced security headers which could enhance its security posture. Privacy compliance is basic with visible cookie consent and a privacy policy page, indicating awareness of GDPR requirements. However, no explicit contact information or security policies are published, which could be improved to enhance trust and transparency. The domain WHOIS data is privacy protected by ROTLD, which is common for Romanian domains, but the domain age aligns well with the business history, supporting legitimacy. Overall, Price.ro presents a solid e-commerce service with moderate technical maturity and a good security baseline, suitable for its market and audience.

S

ScientiaMobile

scientiamobile.com

48

ScientiaMobile is a technology company specializing in device detection solutions that enable businesses to optimize their digital content for various devices. Founded in 2011, the company offers APIs and databases that help clients improve user experience and analytics by accurately identifying device capabilities. The website reflects a professional but basic digital presence with moderate technical infrastructure, hosted on AWS and registered via GoDaddy. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the business credibility is strong given the domain age and consistent WHOIS data, but the website could improve in transparency and security best practices.

A

Ariadne Network

ariadne-network.eu

44

Ariadne Network is a European non-profit organization serving as a peer-to-peer network for over 600 funders and philanthropists focused on social change and human rights. The organization provides a variety of services including a community hub, grant-making skills development, resource sharing, and networking opportunities both online and offline. The website reflects a mature and professional presence with clear messaging targeted at philanthropic funders in Europe. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data is privacy protected, which is common for non-profits, and no suspicious patterns were detected. Overall, the site demonstrates a trustworthy and credible digital presence.

S

Stadt Witten

witten.de

53

Stadt Witten operates as the official municipal government website for the city of Witten, Germany. It provides a broad range of public services, including administrative information, online citizen services, event calendars, and career opportunities. The site targets residents, local businesses, and visitors, positioning itself as a central hub for local governance and community engagement. The business model is that of a government entity focused on service delivery and public communication. Technically, the website employs a modern but straightforward technology stack with a focus on accessibility and user experience, including compliance with GDPR through cookie consent mechanisms and accessible design features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and well-maintained, reflecting the standards expected of a municipal government portal.

The website mutuelles-axa.fr represents the mutual insurance activities of the AXA group, a major global insurance and financial services company. The site provides corporate information, news, governance details, and CSR initiatives targeted at French-speaking customers interested in mutual insurance products. The business model is focused on mutual insurance services under the AXA brand, positioning itself as a trusted enterprise in the finance sector. Technically, the site is built on Adobe Experience Manager, indicating a mature and enterprise-grade CMS platform. The presence of TagCommander and Piano Analytics scripts shows a modern approach to analytics and tag management, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is professional, trustworthy, and well-aligned with AXA's corporate identity.

A

AXA S.A.

axa-research.org

56

The AXA Research Fund website represents a well-established non-profit research funding initiative under the AXA Group, focusing on advancing scientific research in health, climate & environment, and socio-economy & new technologies. The site effectively communicates its mission, grant programs, and impact, targeting researchers and academic institutions globally. The technical infrastructure is modern, leveraging JavaScript modules, CSS, and cookie consent tools, with evidence of mobile optimization and accessibility considerations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the website reflects a mature digital presence aligned with its business objectives and parent company branding.

A

AXA Prévention

axaprevention.fr

66

AXA Prévention is a well-established prevention platform under the AXA Group umbrella, focusing on climate risk adaptation, health, safety, and cybersecurity awareness for the French public and professionals. The website offers a broad range of free services, guides, and campaigns to educate and protect its audience. Technically, the site is built on modern web technologies including React and Next.js, with good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a mature, trustworthy, and professional digital presence aligned with AXA's corporate standards.

P

Prisme.ai

gogowego.com

61

Prisme.ai is a technology platform offering scalable AI and automation solutions primarily targeting developers and enterprises. The platform provides tools for workspace creation, app development, and API integrations, positioning itself as an innovative player in the AI platform market. The website is professionally designed using modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some technical aspects such as security headers and explicit HTTPS enforcement are not clearly visible in the provided data, suggesting room for improvement in security posture. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are lacking. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security and contact transparency.

P

Prisme.ai

prisme.ai

61

Prisme.ai is a technology company offering a scalable AI platform designed to empower developers and enterprises with customizable AI and automation workspaces. The platform emphasizes flexibility and user control, positioning itself as an innovative player in the AI SaaS market. The website reflects a modern, professional digital presence built on contemporary web technologies such as Next.js and React, indicating a mature technical infrastructure. However, some aspects like hosting provider details and CMS usage remain undisclosed. Security posture is moderate; while HTTPS is implied, explicit security headers and policies are absent, and no contact information for incident response is provided. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and terms of service are missing. Overall, the website is trustworthy and professional but could improve transparency and security practices to enhance user trust and compliance.

W

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG

weigl.at

49

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG is a well-established Austrian family-owned company specializing in the manufacturing, planning, installation, and servicing of elevators, stairlifts, homelifts, and related mobility solutions. With a history dating back to 1899, it holds a leading market position in Austria as the largest elevator producer and market leader for stairlifts and wheelchair lifts. The company targets both end consumers and businesses seeking high-quality mobility and lift solutions, offering a broad product portfolio and regional presence in Austria, Germany, Slovenia, and Switzerland. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including asynchronous JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. However, some technical improvements could be made, such as implementing security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. There is no visible security policy or incident response information on the site, and no WHOIS data is available for the domain, which slightly reduces trustworthiness. The company demonstrates trust through certifications, state awards, and detailed contact information. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy digital presence for a mature manufacturing business. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, and publishing explicit security and incident response policies to strengthen the security posture and user trust.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations and travel services primarily targeting the German-speaking market. The company offers a wide range of cruise options, detailed travel preparation information, and ship details, positioning itself as a leading cruise operator in Germany. The website is built on Adobe Experience Manager, leveraging modern web technologies and content delivery networks for performance and scalability. User privacy is managed via a Usercentrics consent platform, indicating compliance with GDPR requirements. Security posture is strong with HTTPS and reputable hosting, though explicit security policies and incident response contacts are not publicly visible. Overall, the site demonstrates high professionalism and trustworthiness suitable for a large enterprise in the transportation and hospitality sectors.

Nakladatelství UMÚN s.r.o. is a Czech Republic based publishing company specializing in artwork created by artists with severe physical disabilities who paint using their mouth and feet. Established since 1993, it operates as part of a global association supporting such artists, offering products including calendars, greeting cards, and reproductions. The website reflects a niche cultural and retail business model focused on social inclusion and artistic promotion. Technically, the website uses basic web technologies including JavaScript and CSS, with no modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and SEO features. Security posture is moderate; no HTTPS or security headers were explicitly identified in the provided data, and no incident response or security policies are publicly disclosed. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR principles. The absence of WHOIS data reduces domain trustworthiness, though the business appears legitimate based on content and history. Overall, the website is functional but would benefit from enhanced security, technical modernization, and clearer contact information.

E

elektra Berry

eberry.cz

61

The website www.eberry.cz represents a Czech Republic based online retail platform specializing in electronics and household goods. The site offers a user-friendly e-commerce experience with a professional design and moderate technical sophistication, including modern JavaScript frameworks and analytics integrations. Despite the lack of publicly available WHOIS data due to privacy protection, the website appears legitimate and well-maintained. However, the absence of explicit privacy and cookie policies and contact information limits full compliance and trust transparency. Security posture is generally good with HTTPS and monitoring tools in place, but could be improved by adding security headers and formal policies. Overall, the site serves its retail audience effectively but should enhance privacy compliance and contact transparency to strengthen trust and regulatory adherence.

ESSOX FINANCE, s.r.o. is a Slovak financial services company specializing in vehicle financing for Peugeot and Citroën brands. It operates as a subsidiary of ESSOX, s.r.o., with a history linked to PSA Finance Slovakia. The website presents clear business information, branding consistent with PSA Group, and targets Slovak vehicle buyers. Technically, the site uses standard web technologies with legacy Google Analytics integration and basic cookie consent mechanisms. Security posture is adequate with HTTPS and cookie consent but lacks published security policies or incident response details. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Č

Česká televize

ct24.cz

66

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

The website videoarchiv-nfa.cz serves as a specialized digital archive for experimental film and video art, operated under the auspices of the Národní filmový archiv (National Film Archive) of the Czech Republic. It provides access to curated collections, research databases, and distribution services primarily targeting researchers, academics, and film enthusiasts interested in audiovisual heritage. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technically, it is built on WordPress with a custom theme, hosted likely by Webglobe, and uses HTTPS for secure access. However, it lacks explicit privacy and cookie policies, security headers, and analytics or tracking tools, indicating a minimal data collection approach and some compliance gaps. The domain registration data aligns well with the stated purpose and timeline of the project, enhancing trustworthiness.

O

On-the-Move.org AISBL

on-the-move.org

52

On the Move is a well-established non-profit organization founded in 2002, providing comprehensive resources and information on cultural mobility for artists and cultural professionals seeking international opportunities. The website serves as a trusted platform offering funding guides, open calls, mentoring, research, and events, positioning itself as a key player in the cultural mobility sector. The organization's Belgian registration and domain age align with its long-standing presence and mission. Technically, the site is built on Drupal 9, employs modern web technologies, and is optimized for mobile and accessibility, although performance is moderate. Security posture is generally good with HTTPS enabled and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

ffhsh.de

59

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The organization targets filmmakers and producers primarily in Northern Germany, offering funding and industry support from project inception through production and distribution. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, optimized for performance and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

moin-filmfoerderung.de

60

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering excellent performance and mobile optimization. The organization maintains a strong market position in northern Germany's media sector, providing comprehensive funding programs and industry support. Security posture is robust with HTTPS, security headers, and secure form handling, though some improvements in cookie consent and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

C

Czech Society for Mass Spectrometry

czechms.org

44

The Czech Society for Mass Spectrometry is a professional scientific association based in Olomouc, Czech Republic, affiliated with Palacký University. It serves research scientists and professionals in the field of mass spectrometry by organizing events, seminars, and providing informational resources. The website reflects a niche, well-established organization focused on advancing mass spectrometry techniques within the Czech scientific community. The site content is professional and consistent with the organization's mission, featuring event announcements and partner collaborations with reputable scientific and commercial entities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and accessibility but lacks advanced frameworks or CMS detection. Mobile optimization is basic, and SEO practices are adequately implemented through meta tags and structured navigation. However, there is no evidence of modern security headers or comprehensive privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS as indicated by secure links, but no explicit security headers were detected in the provided data. The login form for members lacks visible advanced protections such as CAPTCHA. The absence of privacy, cookie, and terms of service policies, as well as incident response and vulnerability disclosure information, indicates gaps in compliance and security transparency. WHOIS data is unavailable due to a malformed request, limiting domain registration trust verification. Overall, the website presents a professional and trustworthy front for a small scientific association but would benefit from enhanced security practices, privacy compliance, and WHOIS transparency to improve trustworthiness and regulatory adherence.

N

Národní filmový archiv

nfa.cz

65

Národní filmový archiv is a Czech national institution dedicated to the preservation, research, and public access of Czech and Czechoslovak film heritage dating back to the late 19th century. The organization operates a professional website offering extensive information about its collections, services, and educational programs, including a cinema (Kino Ponrepo) and digital resources. The website is well-branded, consistent, and targets a broad audience including film enthusiasts, researchers, and educational institutions. Technically, the site employs modern web technologies, integrates Google Analytics and Tag Manager for performance and usage tracking, and is hosted under a reputable registrar with a domain age consistent with the institution's history. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting GDPR compliance.

P

Plinko

plinkoargentreel.fr

56

Plinkoargentreel.fr is a French-language affiliate website dedicated to the Plinko gambling game, providing detailed information about the game mechanics, strategies, casino recommendations, and responsible gambling. The site targets French-speaking online casino players interested in Plinko and operates primarily as an affiliate marketing platform promoting various online casinos offering Plinko games. Technically, the site uses standard web technologies (HTML5, CSS, JavaScript) and is hosted behind Cloudflare for DNS and CDN services, ensuring good performance and security at the network level. The website is mobile-optimized and well-structured with good SEO practices, although it lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and explicit security policies reduces the overall security maturity. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which is a gap for GDPR compliance. Business credibility is moderate, supported by social media presence and trust signals like DMCA badges and responsible gambling links, but limited contact information and new domain age slightly reduce trust. Overall, the site is functional, informative, and professionally presented but could improve in security and privacy compliance to enhance trust and regulatory adherence.

P

Plinko

plinkocasino.se

54

PlinkoCasino.se is a newly established Swedish affiliate website focused on the Plinko gambling game. It provides comprehensive information about the game mechanics, strategies, demo versions, and lists top Swedish online casinos offering Plinko games. The site targets adult Swedish players interested in online gambling, offering detailed content and casino bonuses to attract users. Technically, the site uses standard web technologies with Cloudflare DNS and CDN services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear contact email and social media presence, though no phone or physical address is provided. Overall, the site is professional and trustworthy for its niche but could improve security and privacy practices.

P

Plinko

plinko.dk

52

Plinko.dk is a Danish-focused online platform dedicated to the Plinko gambling game, offering players information about the best casinos to play Plinko for real money, including reviews, bonus offers, demo modes, and strategy guides. The business operates primarily as an affiliate marketing site, directing traffic to partner casinos through referral links. The website targets Danish adult players interested in online gambling, providing localized content in Danish and multiple language alternatives for international audiences. Technically, the website uses modern web standards including HTML5, JavaScript, CSS, and JSON-LD structured data for SEO and rich snippets. It leverages Cloudflare Insights for analytics and performance monitoring. The site is mobile optimized with good navigation and SEO metadata, though it lacks some advanced accessibility features. Hosting appears to be via Cloudflare or a similar CDN provider, ensuring moderate performance and security. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks DNSSEC, security headers, and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a single email address, with no phone or physical address provided. The domain registration is recent but consistent with the business launch timeline, and no suspicious WHOIS patterns were found. Overall, Plinko.dk presents a professional and focused gambling affiliate site with good content quality and technical implementation. Security and privacy practices could be improved by adding cookie consent, security headers, and more comprehensive contact and incident response information. The site is suitable for its target audience but should enhance compliance and security posture to build greater trust and resilience.

P

Plinko

plinkodineroreal.es

55

Plinko España operates as an informational and affiliate marketing website focused on the Plinko gambling game, targeting Spanish players interested in online casinos. The site provides detailed content about the game mechanics, variants, strategies, and recommended licensed casinos in Spain. It leverages affiliate links to casino platforms offering Plinko games, promoting bonuses and real money play. The business model centers on driving traffic and conversions to partner casinos. Technically, the website is built with standard modern web technologies including HTML5, JavaScript, and CSS, optimized for both desktop and mobile platforms. The site structure is clear with good SEO metadata and structured data to enhance search engine visibility. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. WHOIS data is unavailable due to Red.es restrictions, common for .es domains, which slightly reduces transparency but is not unusual. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile typical for gambling affiliate sites. Strategic improvements in security headers, privacy compliance, and transparency would enhance trustworthiness and compliance posture.

P

Plinko

plinkogame.co.uk

62

Plinko.co.uk is a specialized online platform dedicated to the Plinko gambling game, targeting UK players interested in online casino gaming. The site provides detailed information about the game mechanics, betting options, strategies, demo modes, mobile app availability, and responsible gambling practices. It operates primarily as an affiliate and informational resource, recommending licensed UK casinos and offering promotional bonuses. The website maintains a consistent brand presence with social media integration and trust signals such as certified RNG mentions and responsible gambling badges. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with Cloudflare Insights for performance monitoring. It is mobile-optimized and SEO-friendly, though it lacks some advanced security headers and cookie consent mechanisms. The domain is recently registered in 2024, consistent with the site's new launch and business focus. HTTPS is enforced, ensuring secure connections. From a security perspective, the site demonstrates good baseline practices with no exposed sensitive data or vulnerable libraries detected. However, improvements are recommended in implementing security headers, cookie consent, and explicit security policies. No incident response or vulnerability disclosure information is present, which could enhance trust and compliance. Overall, Plinko.co.uk presents a professional and trustworthy platform for UK gambling enthusiasts focused on Plinko. Strategic enhancements in privacy compliance and security posture would further strengthen its market position and user confidence.

P

Plinko

plinkoaustralia.com

60

Plinko Australia is a niche affiliate website dedicated to providing comprehensive information about the Plinko gambling game targeted at Australian players. The site offers detailed game mechanics, betting strategies, demo modes, and curated lists of recommended online casinos with bonuses. It serves as an informational and promotional platform, leveraging affiliate marketing to monetize traffic. The website is relatively new, launched in 2024, and focuses on the Australian gambling market with multi-language support for other regions. Technically, the site is built with standard web technologies (HTML5, CSS, JavaScript) and uses Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly with proper meta tags and structured data. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. No forms are present that collect personal data directly, reducing immediate privacy risks. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks published security policies or incident response contacts. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. The site links to multiple social media platforms and trusted gambling support organizations, enhancing trustworthiness. Overall, the website presents a moderate risk profile with good business credibility but could improve privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security and incident response policies.

K

Kury spol. s.r.o.

kury.cz

42

Kury spol. s.r.o. is a small Czech manufacturing company specializing in the development and production of mechanical wheelchairs and related accessories for physically disabled individuals. Established in 2002, the company has a long-standing presence in the Czech market, offering a range of products including mechanical and electric wheelchairs, specialized seating systems, and accessories. The website reflects a niche business model focused on manufacturing and direct sales, with additional services such as rentals and dealer sections. The target audience includes users, partners, and dealers within the Czech Republic and potentially neighboring regions. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks advanced SEO, mobile optimization, and accessibility features, indicating room for digital maturity improvement. Security posture is weak due to the apparent absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present, which raises compliance concerns. The site does not expose sensitive data and uses minimal tracking, but the lack of contact information and incident response details limits trust. Overall, the website is functional but basic, with moderate trustworthiness supported by a long domain age and consistent WHOIS data. Strategic improvements in security, privacy compliance, and technical modernization are recommended.

П

Плинко - игра на деньги 1win

mostbetaze.com

60

Mostbetaze.com is a regional Azerbaijani online gambling and sports betting platform operated under the international Mostbet brand. The business offers a wide range of betting services including sports, esports, live casino, slots, and fantasy sports. It operates under a Curacao license and targets Azerbaijani users with localized language and payment options. The website is professionally designed with good content quality and mobile optimization, supporting Android and iOS apps. Technical infrastructure includes HTTPS and Cloudflare DNS, but lacks DNSSEC and some security headers. Contact information and business registration details are provided, enhancing credibility. However, privacy and cookie policies are missing, representing compliance gaps.

Z

All news - the latest and fresh topics of the day in 2025 - Znaki FM

znaki.fm

56

Znaki FM is an online multilingual news and media platform founded in 2016, providing up-to-date news on politics, economy, sports, culture, music, and more. The website targets a general global audience interested in diverse topical news coverage. Technically, the site uses Cloudflare for DNS and hosting, and Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and a consistent branding approach. Security-wise, the site enforces HTTPS and has domain transfer protection enabled, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is accessible and safe for general audiences, but improvements in privacy and security transparency are recommended.

S

SUDOP GROUP a.s.

sudop-group.cz

65

SUDOP GROUP a.s. is a large, well-established company based in the Czech Republic specializing in design, consulting, and IT services primarily for the construction, transportation, energy, and water management sectors. The company positions itself as the largest group of such companies in Central Europe, offering services including Construction and BIM, Consulting & IT, and Research & Development. Their business model focuses on digitalizing construction processes and providing engineering preparation for infrastructure projects. The website content is professional and targeted at business clients in relevant industries. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google Maps API. It is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Performance is moderate with efficient use of scripts and stylesheets. The site uses HTTPS with an excellent SSL configuration but lacks explicit security headers such as CSP or HSTS. From a security perspective, the site demonstrates good practices including HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No exposed sensitive data or vulnerable libraries were detected. However, the absence of WHOIS data and security.txt or incident response contacts slightly reduces trust. There are no visible forms collecting user data on the homepage, reducing attack surface. Overall, the security posture is solid but could be enhanced with additional headers and published incident response policies. The domain WHOIS data is unavailable, which is a concern for trust but may be due to privacy protection or registry issues. The website content and business information appear legitimate and professional, mitigating some concerns. The overall risk is moderate with recommendations to improve transparency and security headers to enhance trust and compliance.

L

Liechtensteinische Landesverwaltung

opendata.li

59

The website www.opendata.li is the official open data portal of the Liechtenstein National Administration, providing public access to various government data sets. It serves private individuals, businesses, and national administration entities, positioning itself as a trusted government data provider. The portal offers multilingual support and clear navigation, reflecting a professional and consistent brand image aligned with government standards. Technically, the site employs modern web technologies including HTTPS, Matomo analytics with opt-out capabilities, and security headers, indicating a mature digital infrastructure. However, it lacks explicit cookie consent mechanisms and a dedicated security policy page, which are areas for improvement. Security posture is strong with no detected vulnerabilities or exposed sensitive data. Overall, the site is trustworthy, well-maintained, and compliant with GDPR principles, though enhancements in privacy transparency and incident response readiness are recommended.

L

Liechtenstein National Administration

llv.li

70

The website www.llv.li serves as the official digital portal for the Liechtenstein National Administration, providing extensive information and services to private individuals, businesses, and government entities. It is positioned as the authoritative source for national administrative matters in Liechtenstein, offering a broad range of public service content including legal, educational, tax, and mobility information. The site targets residents, businesses, and officials within Liechtenstein, facilitating access to government resources and digital identity services such as eID.li. Technically, the website employs modern web technologies including JavaScript and CSS, with Matomo analytics integrated for user tracking and privacy-conscious opt-out options. The content is well-structured and optimized for mobile devices, indicating a mature digital infrastructure likely managed via a CMS such as Pimcore. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site uses HTTPS and includes some privacy-aware analytics. However, explicit privacy and cookie policies are not detected in the provided content, and security headers are not evident, suggesting room for improvement in security hardening. No vulnerability disclosure or incident response contacts are published, which could be enhanced to improve trust and compliance. Overall, the website is a trustworthy and professional government portal with excellent content quality and business credibility. Strategic improvements in privacy transparency, security headers, and incident response information would further strengthen its security posture and compliance standing.

S

Sherwin-Williams Paints, Stains, Supplies and Coating Solutions

sherwin.com

71

Sherwin-Williams is a leading enterprise in the paint and coatings industry, offering a wide range of products including paints, stains, supplies, and coating solutions. The company targets homeowners, professionals, architects, and designers, providing both retail and professional-grade products. Their market position is strong in the United States with a broad portfolio of subsidiary brands enhancing their market reach. The website reflects a mature digital presence with comprehensive product information, color tools, and educational resources. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as service workers, tag management, and performance monitoring tools. The infrastructure appears robust, hosted likely on Akamai CDN, ensuring good performance and scalability. The site is mobile optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS and employs several security best practices, although explicit security headers could be more visible or enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, there is no public security policy or incident response contact information, which could be improved. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data limits domain registration trust verification, but the strong brand presence and technical maturity support legitimacy. Strategic recommendations include enhancing security header visibility, publishing a security policy, and establishing a vulnerability disclosure program.

Labe Aréna Ústeckého kraje is a regional national Olympic center for water sports in the Czech Republic, focusing on rowing and related aquatic sports. The website serves as an information portal for sports events, projects like 'Česko vesluje', and regional sports development initiatives. It targets athletes, sports clubs, schools, and the general public interested in water sports. The business model revolves around managing sports facilities, organizing competitions, and promoting rowing activities regionally. Technically, the website uses an older jQuery version and is built on the Fonio CMS platform. While the site is functional and provides relevant content, it lacks modern security headers and advanced privacy compliance features. The site is moderately optimized for mobile and accessibility but could benefit from performance and SEO improvements. From a security perspective, the absence of WHOIS data and missing privacy/cookie policies are notable gaps. The site does not show signs of advanced security measures or incident response readiness. No critical vulnerabilities were detected, but outdated libraries and lack of security headers pose potential risks. Overall, the website is moderately trustworthy and serves its informational purpose well but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and resilience against threats.

Bushman company a. s. operates a regional retail business specializing in outdoor and leisure wear for men and women who appreciate nature and quality clothing. The website bushman.eu serves as a multilingual landing page directing users to localized country-specific sites, indicating a structured regional market presence across several European countries. The business model focuses on retail sales of outdoor apparel, targeting consumers interested in comfort and nature-oriented lifestyles. The company appears to be medium-sized with consistent branding and a clear market niche in retail clothing. Technically, the website uses the Shopsys framework and standard web technologies such as HTML5, CSS, and JavaScript. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers or published policies, and no HTTPS enforcement details were found in the provided content. Privacy and cookie policies are absent, which impacts compliance and user trust. No contact information or forms are present on this landing page, limiting direct user engagement. Overall, the website is functional but minimalistic, with room for improvement in security, privacy, and user experience.

M

MORAVSKÁ VODÁRENSKÁ, a.s.

smv.cz

50

MORAVSKÁ VODÁRENSKÁ, a.s. is a regional water utility company operating primarily in the Moravian region of the Czech Republic. The company provides essential water supply and wastewater management services, supported by a customer portal and accredited laboratory testing for water quality. It is part of the larger Veolia group, indicating a strong market position within the energy and utilities sector. The website reflects a professional and consistent brand image with relevant content targeted at residential and commercial customers. Technically, the website is built on the Vizus CMS platform and employs modern web technologies including JavaScript, CSS, and HTML5. It integrates analytics tools such as Google Analytics and Matomo for traffic and user behavior tracking. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found in the provided content. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and affiliation with Veolia support its credibility. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in transparency around privacy policies, security headers, and domain registration information are recommended to enhance trust and compliance.