Security Directory

L

LEOLEO Studio

leoleo.studio

61

LEOLEO Studio is a creative agency specializing in brand design, identity, and custom websites. The company positions itself as a multidisciplinary studio offering a range of services including branding, website design, service design, e-commerce solutions, 3D and motion graphics, and social media content. Their market position targets brands seeking innovative and stylish digital presence to define their time. The website showcases a professional portfolio with multimedia content and client testimonials, indicating a strong creative capability and client satisfaction. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Prismic CMS for content management. The site is mobile optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is limited by the absence of visible security headers and privacy policies, and WHOIS data is unavailable due to privacy protection and malformed queries, which slightly reduces trust. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website welcome.wppmedia.com serves as a minimalistic redirect page for WPP Media, signaling a rebranding or strategic shift towards AI technologies. It lacks substantive content, contact details, or compliance documentation, instead directing users to the main corporate site at www.wppmedia.com. The technical infrastructure is basic, employing standard HTML5 and CSS3 with custom fonts and responsive design elements. No advanced frameworks or CMS platforms are detected. Security posture is weak due to absence of security headers and privacy policies, and no WHOIS data is available for the subdomain, which is typical as subdomains are not separately registered. Overall, the site functions primarily as a transitional landing page rather than a full business presence.

NGI Zero is a coalition of non-profit organizations focused on supporting the development of technology commons for the Next Generation Internet. The website serves as an informational hub directing visitors to partner sites and resources related to grants and support services for open source projects. The initiative is funded by the European Commission and involves multiple reputable partners across Europe. Technically, the website is a static HTML/CSS site with basic mobile optimization and no detected CMS or advanced frameworks. Security posture is limited with no visible security headers or policies, and no forms or data collection mechanisms are present. Privacy and cookie policies are absent, which impacts compliance scoring. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

S

Sphinx developers

sphinx-doc.org

59

Sphinx is an established open source documentation generator widely used by major software projects such as Python, Linux Kernel, and Project Jupyter. It provides a comprehensive set of features including rich text formatting, cross-referencing, multiple output formats, theming, extensibility, and internationalization. The website serves as the central documentation hub for the Sphinx project, targeting developers and technical writers who need to create structured and beautiful documentation efficiently. The project is community-driven with active support and contributions. Technically, the website is well-structured, using modern web standards including HTML5, CSS3, JavaScript, and Font Awesome icons. It is hosted on Read the Docs, a platform specialized for documentation hosting, ensuring good performance and mobile optimization. The site is accessible, SEO-friendly, and provides clear navigation and content organization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and visible privacy or cookie policies, which are areas for improvement. No incident response or security contact information is provided, which could be enhanced to improve trust and compliance. The WHOIS data is unavailable due to a malformed WHOIS response, but the domain appears legitimate given the project's long history and community trust. Overall, the website is professional, trustworthy, and serves its purpose well. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact and security policies to enhance compliance and user trust.

T

Travis CI

travis-ci.org

66

Travis CI is a well-established technology company specializing in continuous integration and continuous delivery (CI/CD) tools aimed at developers and software teams. The website presents a professional and comprehensive overview of their services, emphasizing simplicity, flexibility, and trustworthiness in CI/CD pipelines. The digital infrastructure is built on WordPress with modern web technologies, providing a good user experience, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforced, though explicit security headers and dedicated security policies could be enhanced. Privacy compliance is strong with clear privacy and cookie policies, including GDPR adherence. The absence of WHOIS data transparency slightly impacts trust but is likely due to privacy protection. Overall, the site reflects a mature, credible business with a focus on developer-centric solutions.

D

Přehledné vzdělávání s rozhledem – putování-poznání-prožitek

dalekohled.cz

42

The website dalekohled.cz is an educational platform focused on providing clear and insightful learning experiences, including educational excursions and summer camps primarily targeting school-age children and educators in the Czech Republic. The site is built on WordPress using standard technologies such as Bootstrap and jQuery, offering a responsive and user-friendly interface. However, it lacks advanced SEO and accessibility features and does not implement structured data or Open Graph metadata. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting transparency and trust. No analytics or advertising scripts were detected, indicating minimal user tracking but also a lack of marketing tools. Overall, the website appears legitimate and consistent with its domain age and educational purpose. However, it would benefit from improved security practices, privacy compliance, and clearer contact information to enhance trustworthiness and user confidence.

C

C-energy s.r.o.

c-energy.cz

51

C-energy s.r.o. is a Czech energy company specializing in sustainable and modern energy production, including electricity and heat supply with advanced technologies such as battery storage and cogeneration. The company serves the Tábor region and supports the national transmission system operator, positioning itself as a key regional energy provider within the C-Energy Group holding. The website reflects a professional and modern digital presence with clear business information and user-friendly navigation. Technically, the site uses standard web technologies and includes a cookie consent mechanism, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and contact details appear credible. Overall, the site demonstrates a good security posture with room for improvement in transparency and technical security controls.

M

Micro.blog

micro.one

55

Micro.one is a blogging platform that integrates personal domain blogging with the open social web, including Mastodon and the fediverse. Founded by Manton Reece in 2017, it targets bloggers and social web users seeking a quieter, more personal social experience. The platform emphasizes community and indie web principles, offering subscription-based services for hosting and social connectivity. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted via Name.com, with moderate performance and good mobile optimization. Security posture is moderate; while HTTPS is implied, no explicit security headers or DNSSEC are enabled, and no published security or privacy policies are found. The domain is newly registered but consistent with the business identity. Overall, the site is trustworthy and safe, but improvements in privacy compliance and security practices are recommended.

P

publis.de

appimage.org

63

AppImage.org is an established open source project founded in 2010 and registered under the organization publis.de in Germany. The website provides a platform and tools for packaging Linux desktop applications into portable, self-contained AppImage files that run across multiple Linux distributions without installation. The project targets Linux users and application developers seeking a simplified distribution method. The site features community engagement through forums, live chat, and GitHub repositories, supported by testimonials from notable Linux figures, enhancing its credibility and market position within the Linux ecosystem. Technically, the website employs a modern tech stack including Bootstrap, FontAwesome, jQuery, and embedded YouTube videos, delivering a responsive and user-friendly experience optimized for desktop and mobile. Hosting is stable with a reputable registrar, though DNSSEC is not enabled. The site lacks advanced security headers and privacy policies, indicating areas for improvement in compliance and security posture. No forms or tracking scripts are present, reflecting a privacy-conscious design. Security-wise, the site benefits from HTTPS (assumed from URL), absence of exposed sensitive data, and minimal attack surface due to lack of user input forms. However, missing security headers and lack of documented security or incident response policies suggest moderate security maturity. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and organization. Overall, AppImage.org presents a professional, trustworthy, and technically sound platform with room to enhance privacy compliance and security best practices. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

O

OVHcloud US

ovh.us

64

OVHcloud US is a regional portal of OVHcloud, a global cloud service provider offering a wide range of cloud infrastructure solutions including hosted private cloud, public cloud, dedicated servers, VPS, storage, and network security services. The website targets developers, businesses, and enterprises seeking scalable cloud infrastructure. The company is positioned as a significant player in the global cloud market with a large developer base. Technically, the website employs modern web standards, uses a proprietary UI framework, and integrates APIs and social media for enhanced user engagement. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosure mechanisms are not prominently published. Privacy compliance is partially addressed with cookie consent but lacks visible privacy policy links on the homepage. Overall, the site is professional, trustworthy, and well-structured, reflecting OVHcloud's brand and market presence.

A

Alchemy Code Lab

alchemycodelab.com

62

Alchemy Code Lab is a specialized educational institution based in Portland, Oregon, focused on training software developers in advanced Full-Stack JavaScript programming. The company positions itself as a career accelerator, offering bootcamp prep and advanced career tracks with strong industry connections and community partnerships. Their website reflects a professional and consistent brand image targeting aspiring and current developers seeking to advance their careers. Technically, the site is built on modern web technologies including React and hosted on the Strikingly platform with Cloudflare CDN support, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy compliance are recommended.

N

Newsbound, Inc.

newsbound.com

58

Newsbound, Inc. is a small creative studio specializing in visual storytelling focused on social good and educational content. The website showcases a portfolio of multimedia explainer projects created for media outlets and foundations, positioning itself as a niche player in the media industry. The business model revolves around producing high-quality visual narratives that inform and engage audiences on important social issues. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and Embedly for media embedding. The site is mobile optimized and presents a professional design with clear navigation, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance features. The absence of privacy and cookie policies, as well as contact information, limits trust and compliance. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the site. Overall, the website is functional and content-rich but would benefit from enhanced security, privacy compliance, and transparency improvements.

Air France is a leading French airline offering flight booking services to over 230 destinations worldwide. The website serves as the official platform for ticket reservations, travel deals, and customer support, targeting general travelers and business customers. The site reflects Air France's strong market position as part of the Air France-KLM group, with a consistent brand presence and comprehensive service offerings. Technically, the website employs modern web technologies including Angular and Material Design components, ensuring a responsive and accessible user experience. The infrastructure supports good performance and SEO optimization, with mobile-friendly design and accessibility features. Security posture is robust, with HTTPS enforced, strong security headers, and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence and a visible data protection officer contact. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, suitable for an enterprise-level airline service. Strategic recommendations include publishing a public incident response policy and vulnerability disclosure framework to enhance transparency and security readiness.

P

PyCoder’s Weekly

pycoders.com

68

PyCoder’s Weekly is a well-established online newsletter service focused on delivering weekly Python programming news and articles to a large community of over 171,000 subscribers. Founded in 2012, it serves Python developers and enthusiasts with curated content via a free email subscription model. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and strong market positioning within the Python community. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and Google Analytics for tracking, hosted with Cloudflare DNS and registered via NameCheap. The site is mobile optimized and uses HTTPS with CSRF protection on forms, indicating a reasonable level of digital maturity. However, some improvements could be made in accessibility and security headers to enhance protection. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and domain transfer protection. There are no visible vulnerabilities or exposed sensitive data. However, the absence of DNSSEC, security policies, incident response contacts, and cookie consent mechanisms suggests room for improvement in compliance and transparency. Overall, PyCoder’s Weekly presents a trustworthy and professional online presence with a solid foundation but could benefit from enhanced security policies and privacy compliance measures to further strengthen its risk posture.

P

PDX Web Properties, LLC

talkpython.fm

65

Talk Python To Me is a well-established podcast platform focused on Python programming and related technologies, hosted by Michael Kennedy and operated by PDX Web Properties, LLC. The business offers a rich backlog of podcast episodes, online Python training courses, live streams, and branded merchandise, targeting Python developers, data scientists, and hobbyists. The company maintains a strong community presence with active social media channels and a professional, consistent brand image. The domain age and registrant information align well with the business history, supporting legitimacy and trustworthiness. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework, with assets delivered via a CDN (bunny.net) for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with structured data (JSON-LD) implemented for enhanced search engine visibility. Analytics are handled via Umami, a privacy-focused tool, indicating moderate user tracking with basic privacy compliance. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and published security policies or incident response contacts. No cookie consent mechanism or terms of service page was found, which are areas for improvement to enhance compliance and user trust. No vulnerabilities or suspicious content were detected, and the site is free from adult or questionable content. Overall, the website demonstrates a high level of professionalism, content quality, and business credibility, with room for improvement in privacy compliance and security transparency. The risk profile is low, with recommendations focusing on enhancing privacy notices, security disclosures, and DNS security features.

P

PDX Web Properties LLC

pythonbytes.fm

65

Python Bytes is a well-established weekly podcast focused on delivering Python programming news, tools, and tips to developers. Hosted by Michael Kennedy and Brian Okken, the site serves a niche audience of Python enthusiasts and professionals. The business model centers on content creation, educational course promotion, and related podcast marketing, supported by a small but consistent brand presence since 2016. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence.

Y

YouTube / Google

mobileportland.com

72

The analyzed page is a consent management interface hosted on the subdomain consent.youtube.com, which is part of YouTube, owned by Google LLC. The page is designed to manage user consent for cookies and privacy preferences, complying with GDPR and other privacy regulations. It is a minimalistic, functional page that integrates tightly with Google's infrastructure and services. The business behind the page is a global technology leader in online video sharing and advertising, with a strong market position and extensive user base. Technically, the page leverages modern web technologies including JavaScript, Material Design Components, and Google APIs. It is hosted on Google Cloud infrastructure, ensuring fast performance and high availability. The page is mobile-optimized and uses HTTPS to secure communications. While explicit security headers are not visible in the provided data, Google's standards imply strong security practices. From a security perspective, the page shows no signs of vulnerabilities or blocking by WAFs. The domain is legitimate, being a subdomain of youtube.com, a well-established domain owned by Google. Privacy compliance is indicated by the presence of consent management functionality, although explicit privacy and cookie policies were not found on this specific page. No contact information or incident response details are present. Overall, the page represents a secure, trustworthy, and professionally maintained component of YouTube's privacy compliance framework. It poses minimal risk and aligns with industry best practices for consent management.

P

Proxy Protection LLC

donutjs.club

54

Donut.js was a community-driven monthly meetup based in Portland, Oregon, focused on technology, creativity, and community engagement. The organization ran from 2016 to early 2020, hosting 38 events and 125 talks, and contributed financially to local social good organizations. The website serves as an archive and farewell message, reflecting a small, local community group rather than a commercial enterprise. The domain registration aligns well with the business history and location, indicating legitimacy and stable ownership. Technically, the website is a simple static site built with standard HTML, CSS, and JavaScript, hosted on DreamHost. It is mobile-optimized with good design and navigation clarity but lacks advanced frameworks or CMS. No analytics, advertising, or tracking technologies are present, reflecting a privacy-conscious approach or minimal digital footprint. Performance is moderate with basic accessibility features. From a security perspective, the site uses a domain status that prevents unauthorized transfers but lacks DNSSEC and visible security headers. There is no published privacy, cookie, or security policy, and no contact information for incident response or data protection officers. These gaps reduce compliance and security posture scores. However, no critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy for its purpose as a community archive but would benefit from improved privacy and security disclosures if it were to resume active operations or collect user data.

I

IndieLogin.com

indielogin.com

47

IndieLogin.com is a specialized technology service that enables users to sign in to applications using their own domain names, leveraging the IndieAuth protocol and fallback authentication methods such as Twitter, GitHub, email, or PGP keys. The service targets developers and website owners seeking decentralized and domain-based authentication solutions. The website is well-structured, with clear navigation and professional design, and it openly links to its GitHub repository, indicating transparency and open source development. Technically, the site uses a modern frontend stack including Bootstrap 4.1.0, jQuery 3.3.1, and FontAwesome 5.0.8, hosted on Linode with domain registration via NameCheap. The site is mobile-optimized and performs moderately well, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. No cookie consent or detailed privacy compliance mechanisms are present. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. The domain age and registration details align well with the business history, supporting legitimacy. Overall, IndieLogin.com presents a trustworthy, niche authentication service with good technical implementation and moderate security maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and user trust.

O

OVH sas

kivy.org

48

Kivy.org represents the official website for Kivy, an open source Python framework designed for rapid development of cross-platform GUI applications. The project is mature, founded in 2010, and hosted by OVH sas in France. It targets developers and businesses seeking to build multi-touch and innovative user interfaces across Windows, Linux, macOS, iOS, and Android platforms. The business model is community-driven, supported by contributors and backers, with sponsorship options available. The website demonstrates a consistent brand and a strong community presence via GitHub and social media channels. Technically, the site uses modern web technologies including Vue.js and Axios, with good mobile optimization and fast performance. Hosting is provided by OVH sas, a reputable provider. SEO and accessibility are basic to good, though no CMS is detected. The site lacks explicit privacy and cookie policies, which is a compliance gap. No security headers were detected in the provided data, and DNSSEC is not enabled, indicating room for security improvements. From a security perspective, the site uses HTTPS and has domain registration protections like clientDeleteProhibited and clientTransferProhibited statuses. However, the absence of security headers, privacy policies, and vulnerability disclosure mechanisms reduces the overall security posture. No critical vulnerabilities or suspicious patterns were found. The WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, Kivy.org is a professional, trustworthy, and technically sound website supporting a well-established open source project. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security and compliance standing.

O

OpenStack

openstack.org

66

OpenStack is a prominent open source cloud computing infrastructure project, recognized as one of the most active open source initiatives globally. The website serves as a hub for developers, IT professionals, and enterprises interested in cloud infrastructure solutions. It offers information about the project, community, and enterprise support options. The business model revolves around open source software development and community collaboration, positioning OpenStack as a key player in the cloud technology sector. Technically, the website is built using modern web technologies such as Gatsby (React-based static site generator) and Font Awesome for icons. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features could be improved. Performance is moderate, with no evident blocking or WAF interference. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies in the provided content. WHOIS data is unavailable due to query failure or privacy protection, which is common for open source projects but limits direct verification of registrant details. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices and compliance documentation are recommended. Overall, OpenStack's website is trustworthy and professional, reflecting its status in the technology industry. Strategic recommendations include enhancing security headers, publishing clear privacy and cookie policies, and providing incident response and vulnerability disclosure information to strengthen user trust and compliance posture.

Libre.fm is a niche music listening and tracking platform that positions itself as a privacy-focused alternative to mainstream music services. It emphasizes a strong anti-AI stance and protection of creative works, appealing to users who value creative freedom and privacy. The website content is minimal but focused on this mission, with a user base of over 381,000 listeners and hundreds of millions of songs tracked. Technically, the site uses basic HTML and CSS with Cloudflare DNS services, but lacks advanced frameworks or CMS indications. The site is mobile optimized and moderately performant but lacks comprehensive SEO and accessibility features. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. No privacy, cookie, or terms policies are present, nor are contact or incident response details, which limits compliance and trust. Overall, the domain registration data supports legitimacy with a consistent history since 2009. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.

Webmention Rocks! is a niche technical website providing a validator and test suite for the Webmention protocol, primarily targeting developers and implementers within the IndieWeb and web standards communities. The site offers a variety of tests for endpoint discovery, updates, deletes, and receiver functionality, and encourages users to submit implementation reports to the W3C. It is open source and hosted on Linode, with a domain registered in 2016 and privacy protection enabled. From a technical perspective, the website uses a classic web stack including jQuery 1.11.3 and Semantic UI for styling and interactivity. The site is moderately performant, mobile optimized, and has a clear navigation structure. However, accessibility and SEO optimizations are basic. No CMS is detected, indicating a custom or static site. Security posture is moderate; the domain uses clientTransferProhibited status to prevent unauthorized transfers but lacks DNSSEC and visible security headers. No privacy or cookie policies are present, and no contact information is provided for security incidents or general inquiries. There are no signs of vulnerabilities or malicious content, and the site content is safe for general audiences. Overall, the website is a credible and useful tool within its niche but would benefit from improved security practices, privacy compliance, and contact transparency to enhance trust and compliance.

Micropub.net serves as an informational website dedicated to the Micropub open API standard, which enables users to create posts on their own domains using third-party clients. The site primarily targets developers and members of the IndieWeb community interested in decentralized social web publishing. It provides links to the official specification, test suites, and implementation reports, positioning itself as a niche resource within the technology standards space. The website is simple and content-focused, reflecting its role as a documentation and community resource rather than a commercial entity. From a technical perspective, the site is hosted on Linode with domain registration through NameCheap, Inc. The technology stack is minimal, consisting of static HTML and CSS without advanced frameworks or CMS platforms. Performance and mobile optimization are basic but adequate for the site's purpose. SEO and accessibility features are minimal but sufficient given the limited scope of content. Security posture is moderate but could be improved. The site lacks DNSSEC, security headers, and privacy or cookie policies, which are important for compliance and user trust. No contact or incident response information is provided, limiting transparency in security matters. The domain is well aged and registered without privacy protection, which aligns with the open and community-driven nature of the project, supporting legitimacy. Overall, micropub.net is a trustworthy and safe resource for its intended audience but would benefit from enhanced security practices and compliance documentation to improve user trust and meet modern web standards.

Aaron Parecki operates a personal brand website focused on livestreaming tutorials, gear reviews, and consulting services. The site targets livestreaming enthusiasts and professionals seeking expert advice and educational content. The business model combines content creation with paid consulting and affiliate marketing, positioning Aaron Parecki as a niche expert in the media space. The website is well-branded, content-rich, and supported by active social media channels, enhancing its market presence. Technically, the website is built using standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted on Linode infrastructure. The design is responsive and user-friendly, with embedded video content and calendar integration. Analytics are handled via privacy-focused Fathom Analytics, indicating a moderate level of digital maturity. However, the site lacks CMS usage and some modern security headers, which could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The domain is privacy protected but consistent with a personal brand site. No security or incident response policies are published, and no cookie or privacy policies are present, representing compliance gaps. DNSSEC is not enabled, and security headers are missing, suggesting room for security posture enhancement. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and formal policies would strengthen its security and regulatory posture, supporting long-term business credibility and user trust.

E

Evangelisch-reformierte Kirche Basel-Landschaft

ref-bl.ch

67

The Evangelisch-reformierte Kirche Basel-Landschaft operates a professional and well-structured website serving its community in Basel-Landschaft, Switzerland. The site provides comprehensive information about church services, community engagement, and social support, targeting members and prospective members of the regional church. The organization positions itself as a key religious and non-profit entity in the region, with clear branding and consistent messaging. Technically, the website employs modern web technologies including UIkit, jQuery, and FontAwesome, supported by a CloudTec CMS platform. It integrates privacy-conscious analytics via Matomo and implements a robust cookie consent mechanism through Cookiebot, reflecting a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility improvements could be made. From a security perspective, the website enforces HTTPS and uses a Content-Security-Policy header, ensuring a good baseline security posture. However, additional security headers and explicit incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a detailed GDPR-compliant privacy policy and user consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's mission. Strategic enhancements in security headers, incident response transparency, and accessibility would further strengthen its posture.

C

cloudtec AG

cloudtec.ch

74

cloudtec AG is a Swiss-based technology company specializing in the development of custom online platforms, web applications, and enterprise websites. Positioned as a specialized partner for businesses seeking tailored digital solutions, cloudtec offers a comprehensive suite of services including API integrations, e-commerce solutions, and cloud architecture consulting. Their market presence is focused on the Swiss business sector, emphasizing quality and efficiency over volume. Technically, the website demonstrates a mature digital infrastructure utilizing modern web technologies, structured data, and compliance tools such as Cookiebot for GDPR adherence. Security posture is solid with HTTPS enforcement, security headers, and error monitoring via Sentry, although explicit security policies and incident response contacts are not publicly disclosed. Overall, cloudtec presents a professional and trustworthy digital presence with good privacy compliance and moderate user tracking. Strategic recommendations include enhancing transparency around security policies and incident response, and improving accessibility features to further strengthen their digital maturity.

S

SAP Concur

concur.fr

62

SAP Concur is a leading enterprise software provider specializing in business travel and expense management solutions. The website offers comprehensive information about their products, including expense management, travel management, and budget control, targeting businesses and professionals. The site is well-branded, consistent with SAP's corporate identity, and provides localized content for multiple regions. The technical infrastructure leverages modern web technologies, including Drupal CMS, JavaScript frameworks, and advanced monitoring tools like New Relic and TrustArc for privacy compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. The absence of WHOIS data suggests privacy protection, which is justified for this enterprise-level business. Overall, the website demonstrates a mature digital presence with good user experience and compliance adherence.

S

SAP Concur

concur.ca

69

SAP Concur Canada operates a professional and comprehensive website focused on travel, expense, and invoice management software solutions. As a subsidiary of SAP, it holds a strong market position in the enterprise software sector, providing a broad suite of products tailored for business spend management. The website demonstrates a mature digital presence with rich multimedia content, clear navigation, and extensive product information targeting Canadian businesses. The technical infrastructure leverages Drupal CMS, modern JavaScript libraries, and performance monitoring tools such as New Relic and Akamai mPulse, indicating a robust and scalable platform. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security headers and public security policies could be improved. Overall, the site reflects a trustworthy and enterprise-grade digital asset aligned with SAP's global brand standards.

T

Tantek Çelik

tantek.com

60

Tantek.com is the personal website and professional blog of Tantek Çelik, a prominent figure in web standards, IndieWeb, and Mozilla. The site serves as a platform for sharing insights on web technologies, cybersecurity, and community events, targeting web professionals and enthusiasts. The website is well-maintained, with a clean, responsive design and rich content that reflects Tantek's expertise and ongoing contributions to the web community. Technically, the site uses modern web standards including HTML5, CSS3, and microformats, and is hosted with Cloudflare DNS services, ensuring good performance and availability. Security posture is solid with HTTPS and domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy, professional, and safe for general audiences, with strong business credibility tied to Tantek's recognized industry roles.

A

Aaron Parecki

aaronparecki.com

54

Aaron Parecki's website serves as a comprehensive professional portfolio highlighting his leadership in identity standards, OAuth, and OpenID communities. The site targets developers and security professionals interested in identity protocols and related technologies. It features extensive content including articles, presentations, and personal projects, establishing a strong market position as a thought leader in technology standards. The business model is primarily personal branding and consulting with a focus on education and community engagement. Technically, the website is well-constructed using modern web technologies such as Semantic UI, jQuery, and JSON-LD structured data. It is hosted on Linode, ensuring reliable performance and fast loading times. The site is mobile-optimized and accessible, with good SEO practices and minimal user tracking, leveraging privacy-respecting analytics. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and explicit security headers. There is no published security policy or incident response contact, and privacy and cookie policies are absent, which may impact compliance with regulations like GDPR. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the website's claims, indicating legitimacy. Overall, the website demonstrates high professionalism and trustworthiness with excellent content quality and technical implementation. Strategic improvements include adding privacy and cookie policies, enabling DNSSEC, publishing security policies, and implementing security headers to enhance compliance and security posture.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the requested website content is not accessible or blocked. There is no actual website content, business information, or metadata available for analysis. The page is a technical offline or error page embedded within the browser, not a public-facing website. Consequently, no privacy, cookie, or terms of service policies are present, and no contact or security information is available. The technical infrastructure is limited to Chromium internal scripts and canvas-based game code for the offline dinosaur game. Security posture is minimal due to the nature of the page, and no external links or business credibility indicators exist. Overall, this is a non-functional placeholder page with no business or compliance relevance.

T

Tasty Group AG

tasty-group.ch

55

Tasty Group AG is a Swiss syndicate of digital agencies specializing in digital design, video production, web development, and online marketing. The company consolidates multiple Swiss agencies under its umbrella, positioning itself as an established player in the Swiss digital services market. The website presents a professional image with clear branding and links to its subsidiary agencies, targeting businesses seeking comprehensive digital agency services in Switzerland. Technically, the website is built with standard HTML5, CSS3, and JavaScript, without reliance on advanced frameworks or CMS platforms. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation. However, there is no evidence of advanced analytics, marketing tools, or tracking technologies, indicating a minimal data collection approach. From a security perspective, the site lacks published privacy and cookie policies, security headers, and incident response information, which are critical for compliance and trust. SSL status is unknown from the provided data, and no vulnerability disclosures or security.txt files are present. These gaps suggest room for improvement in security posture and regulatory compliance. Overall, the website is safe and professional but would benefit from enhanced privacy compliance, security best practices, and transparency measures to strengthen trust and reduce risk.

O

Optio CZ s.r.o.

optiocz.com

63

Optio CZ s.r.o. is a professional DTP and media production studio based in the Czech Republic, offering a broad range of services including graphic design, digital publishing, photography, video production, and book production. The company targets businesses and clients requiring high-quality media and design solutions, boasting a portfolio with hundreds of satisfied clients and a long operational history. The website reflects a medium-sized enterprise with consistent branding and good content quality. Technically, the site is built on the Portfoliobox CMS platform, uses modern web technologies, and is hosted on AWS Cloudfront CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data for the domain is a concern, suggesting either a very recent registration or privacy protection, which slightly reduces trust. Contact information is clearly presented with company domain emails and phone numbers, supporting business credibility. Overall, the website is professional and safe for general audiences but would benefit from enhanced security and privacy compliance measures.

R

Reformiert GL

reformiert-gl.ch

60

Reformiert GL operates as a regional media platform delivering news and information related to the Evangelical Reformed Church in the Canton of Glarus, Switzerland. The website targets church members and the local community, providing thematic articles, event agendas, and e-paper services. The business model is non-profit media focused on religious and cultural content, with a consistent and professional brand presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent. Overall, the website is trustworthy, well-maintained, and serves its niche audience effectively.

R

RISJK

risjk.cz

47

RISJK is a regional innovation strategy platform focused on supporting the development of innovation in the South Bohemian Region of the Czech Republic. It serves as a foundational concept for regional economic competitiveness and value creation through innovation adoption. The website provides access to strategic documents, information about innovation ecosystems, and support programs such as Smart Accelerator initiatives. The target audience includes regional stakeholders, research organizations, startups, and government entities. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Tag Manager for analytics. It is mobile-optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces domain trust verification, but the website content and partner affiliations strongly indicate legitimacy. Overall, the site is a credible regional government-related resource with moderate technical maturity and good content quality.

K

Kirchenbote Online

kirchenbote-online.ch

64

Kirchenbote Online is a regional Swiss media platform focused on church-related news and cultural topics across several cantons including Baselland, Basel-Stadt, Luzern, Schaffhausen, Schwyz, Solothurn, Uri, and Zug. The website offers news articles, event agendas, book recommendations, and digital e-paper services targeting residents and church community members interested in religious and societal issues. The platform maintains partnerships with other cantonal church news providers, enhancing its regional presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA for bot protection. It features a cookie consent mechanism compliant with GDPR standards, ensuring user privacy choices are respected. The site is mobile-optimized with good navigation and professional design, though some accessibility and SEO aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business focus, indicating legitimacy and trustworthiness. Overall, Kirchenbote Online presents a professional, trustworthy, and GDPR-compliant media platform with moderate technical sophistication and a solid security posture. Opportunities exist to enhance security headers, publish terms of service, and improve accessibility and SEO for better user experience and compliance.

E

Evangelisch-reformierte Kirche des Kantons Basel-Landschaft

refbl.ch

69

The Evangelisch-reformierte Kirche des Kantons Basel-Landschaft operates as a regional religious institution serving the Basel-Landschaft canton in Switzerland. The organization provides a broad range of community and spiritual services including church communities, pastoral care, social services, and educational programs. Their website is professionally designed, content-rich, and targets members and interested individuals within the local community. The institution maintains an active social media presence and complies with GDPR and cookie consent regulations, reflecting a mature digital presence. Technically, the website leverages modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Uikit framework, hosted on a CloudTec CMS platform. It employs Matomo for analytics and Cookiebot for cookie consent management, indicating a focus on privacy compliance. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. From a security perspective, the website enforces HTTPS and implements a Content-Security-Policy header, but lacks additional security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance its security posture and trustworthiness.

A

ALDI SUISSE TOURS

aldi-suisse-tours.ch

72

ALDI SUISSE TOURS is a travel service provider operating under the ALDI SUISSE brand, offering affordable travel packages including hotels, beach holidays, round trips, and cruises primarily targeting the Swiss market. The website is professionally designed with consistent branding and provides a comprehensive cookie consent mechanism ensuring GDPR compliance. Technically, the site uses modern web technologies including Cookiebot for consent management, Google Tag Manager for analytics, and Kameleoon for marketing optimization, hosted on AWS Cloudfront CDN. Security posture is strong with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is publicly available. Overall, the site is trustworthy and well-positioned in the retail travel sector with good privacy compliance and user experience.

K

Kablo Vrchlabí s.r.o.

kablovrchlabi.cz

46

Kablo Vrchlabí s.r.o. is a traditional Czech manufacturer specializing in cables for the automotive industry, flexible cables, and special cables tailored to customer specifications. The company offers a diverse product range including automotive cables with high temperature resistance, harmonized flexible cables, and special cables compliant with American UL standards. Their market position is that of an established medium-sized manufacturing business serving industrial and automotive sectors primarily in the Czech Republic. The website is professionally designed, multilingual, and provides comprehensive business and contact information, supporting a B2B business model focused on manufacturing and sales. From a technical perspective, the website is built on WordPress and employs modern web standards including HTTPS, Google Fonts, and responsive design. The site performs moderately well with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and structured data. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site benefits from HTTPS encryption and does not expose sensitive data or vulnerable libraries. Nonetheless, the absence of explicit security headers and incident response information suggests a moderate security maturity level. The lack of WHOIS data is a notable concern, reducing trust in domain legitimacy. No signs of malware, phishing, or other critical vulnerabilities were detected. Overall, the website presents a trustworthy and professional front for Kablo Vrchlabí s.r.o., but improvements in domain registration transparency, security policies, and privacy compliance mechanisms are recommended to strengthen its security posture and regulatory adherence.

I

ICS INDUSTRIAL CABLES SLOVAKIA, spol. s r.o.

ics-cables.sk

66

ICS INDUSTRIAL CABLES SLOVAKIA, spol. s r.o. is a medium-sized manufacturing company specializing in highly flexible energy cables and customized cable solutions. As part of the SKB-GROUP family business, ICS benefits from a long-standing market presence and a strong reputation for quality and innovation. Their website reflects a professional and modern digital presence, leveraging Vue.js and Inertia.js technologies, hosted likely on DigitalOcean with Cloudflare DNS for performance and security. The company demonstrates commitment to sustainability, evidenced by their EcoVadis Bronze Medal certification. Security posture is strong with HTTPS, security headers, and CSRF protections, although incident response and vulnerability disclosure information are not publicly available. Overall, ICS presents a trustworthy and credible business with a well-structured online presence.

H

HC Milevsko 1934

hcmilevsko1934.cz

45

HC Milevsko 1934 is a Czech ice hockey club with a digital presence focused on providing club information, team rosters, match schedules, news, and partner promotion. The website targets local and regional ice hockey fans and community members. The domain was registered in 2021, supporting a relatively recent online presence for a club with historical roots dating back to 1934. The site is well-branded and consistent, with active social media integration and regular content updates. Technically, the site uses common JavaScript libraries such as jQuery, Slick Carousel, and LightGallery, and appears to be hosted by REG-ZONER, a Czech hosting provider. The site is mobile-optimized and has good navigation and content relevance. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact emails or phone numbers are directly visible, which may impact user trust and compliance. Overall, the site is functional and professional but could improve in security and privacy transparency.

I

isekacka.cz

isekacka.cz

58

isekacka.cz is a specialized retailer and service provider focused on robotic lawn mowers, primarily representing brands such as Husqvarna Automower, Segway, Mammotion, Stiga, and Ecovacs. The company offers comprehensive services including expert consultation, professional installation, servicing, and sales of accessories and spare parts. Their market position is strengthened by official certifications and dealer badges, indicating a trusted presence in the Czech Republic's retail sector for robotic garden equipment. The website is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience with clear navigation and relevant content tailored to residential and commercial customers seeking automated lawn care solutions. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Facebook SDK and Google Fonts. It is built on the JZShop.cz e-commerce platform, which supports AJAX-based forms and dynamic content loading. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and there is no dedicated security policy or incident response contact information available. The absence of WHOIS data for the domain reduces trust from a domain registration standpoint, though the website content and certifications suggest legitimate business operations. No vulnerabilities or exposed sensitive data were identified in the analyzed content. Overall, isekacka.cz presents a credible and professional online presence for a niche retail and service business in robotic lawn mowers. Strategic improvements in security headers, domain registration transparency, and incident response readiness would enhance their security posture and trustworthiness.

C

Coop Pronto AG

coop-pronto.ch

56

Coop Pronto AG operates a large network of over 300 convenience retail shops with or without fuel stations across Switzerland. The company focuses on providing quick and fresh products from early morning to late night, targeting general consumers seeking convenience and fuel services. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding aligned with the Coop group. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, Facebook Pixel, and other marketing tools, indicating a well-integrated marketing and analytics infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie banners and privacy policies, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.

P

PCI Proxy

docvault.app

62

DocVault, operated by PCI Proxy, offers a specialized PCI compliant document vault solution enabling businesses to securely collect and validate sensitive customer documents without direct handling. Positioned as a niche leader, the company targets businesses requiring stringent PCI compliance in document processing. The website reflects a professional and consistent brand image with clear messaging and a focus on security and compliance. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted on Webflow's platform with good performance and mobile optimization. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and detailed security or incident response policies, which could enhance trust and compliance. Overall, the site demonstrates a mature digital presence suitable for its business model and audience.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) that serves as an offline error page with embedded JavaScript for the Chrome dinosaur game. There is no actual website content, business information, or external links present. The page is not a public-facing website but a browser-generated error page. The technical infrastructure is limited to Chromium internal scripts and canvas-based game rendering. Security posture is minimal due to the nature of the page, with no HTTPS or security headers applicable. Privacy and compliance policies are absent as this is not a commercial or informational website. Overall, this content does not represent a business or service and thus cannot be evaluated for typical website security, compliance, or business credibility metrics.

The website alcmosnov.cz serves as the official information portal for the Armádní logistické centrum Mošnov, a government project in the Czech Republic focused on establishing a military logistics center near the Leoš Janáček Airport Ostrava. The site provides project updates, news, and contact information primarily targeting local communities, government stakeholders, and interested public. The domain is newly registered in 2023, consistent with the project's timeline, and hosted by Webglobe, a reputable provider. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and a cookie consent mechanism supporting multiple languages. The site is mobile optimized and offers good navigation and content relevance. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. From a security perspective, the site uses HTTPS and enforces cookie consent with opt-in for analytics, but does not publish security policies or incident response contacts. No critical vulnerabilities or WAF blocking were detected. The analytics usage is minimal and privacy compliance is basic but could be improved with formal policies. Overall, alcmosnov.cz is a credible government project site with good content and technical implementation but would benefit from enhanced privacy, security, and compliance documentation to strengthen trust and regulatory adherence.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.