Security Directory

M

Mincmistr.cz

mincmistr.cz

57

Mincmistr.cz is a specialized e-commerce platform based in the Czech Republic, focusing on the sale of coins, banknotes, medals, and numismatic supplies. With over 15 years of experience, it serves collectors and investors by offering a wide range of historical and modern numismatic products, investment metals, and educational content including the largest numismatic encyclopedia in the country. The website demonstrates a strong market position within its niche, supported by customer trust signals such as high ratings and product certifications. Technically, the site is built on the Shoptet e-commerce platform, utilizing modern tracking and marketing tools while maintaining good mobile optimization and accessibility. Security posture is solid with HTTPS and consent-based cookie management, though improvements in security headers and library updates are recommended. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Yamaha Motorsports USA operates a professional and well-branded website focused on providing information about Yamaha motorsports products, dealer locations, pricing, and community engagement. The site targets motorsports enthusiasts and Yamaha product owners in the USA, positioning itself as a key player in the transportation sector with a long-established presence since 2001. The business model revolves around retail and brand experience enhancement through racing, training, and community programs. Technically, the website employs modern JavaScript libraries, video embedding, and accessibility tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain management best practices, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is trustworthy and professional, with extensive analytics and advertising integrations.

L

La Fabrique - Orange Business

eolas.fr

66

La Fabrique - Orange Business is a professional digital agency and web hosting provider focused on delivering sustainable, innovative, and high-performance digital solutions tailored to business needs. Positioned under the reputable Orange Business brand, it offers a comprehensive range of services including digital marketing strategy, web and e-commerce development, cloud hosting, and managed services. The website reflects a strong market position with clear branding, certifications, and a focus on trust and security. Technically, the website employs modern JavaScript libraries, a custom CMS, and integrates privacy-conscious analytics via Matomo Tag Manager without setting cookies. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation and professional design. Cookie consent management is implemented using tarteaucitron.js, ensuring GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling including CSRF tokens and CAPTCHA. However, explicit security headers are not evident, and no public security or incident response policies are published. WHOIS data for the subdomain is unavailable, but the domain is a subdomain of orange-business.com, supporting legitimacy. Overall, the website presents low risk with strong trust indicators, good privacy compliance, and professional business presentation. Strategic improvements include adding security headers, publishing a security policy, and providing direct contact information for incident response.

M

Mountain Wilderness France

mountainwilderness.fr

45

Mountain Wilderness France is a well-established non-profit organization dedicated to the protection and preservation of mountain environments. Founded in 1988, it operates primarily through volunteer engagement, advocacy, and educational initiatives to promote sustainable mountain use and conservation. The website reflects a mature digital presence with comprehensive content, clear navigation, and a strong focus on community involvement and environmental stewardship. Technically, the site uses modern web technologies including Craft CMS and Vue.js, with Matomo analytics for privacy-conscious user tracking. Security posture is generally good with HTTPS and CSRF protections, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data is a notable gap that impacts domain trustworthiness, though the organization's legitimacy is supported by its content and social media presence. Overall, the site is professional, trustworthy, and well-suited for its target audience of environmental advocates and volunteers.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that no actual website content is accessible. This page is used by the Chrome browser to display offline or error states and does not represent a real website or business entity. Consequently, there is no business information, contact details, or policies available for analysis. The technical infrastructure is limited to Chromium's internal scripts and styles for rendering the error page. Security posture cannot be evaluated as this is not a live website but a browser-generated page. Overall, this is not a legitimate website but a placeholder error page, and no meaningful security, compliance, or business insights can be derived.

N

Nášup, Spirála Ostrava z.ú.

nasupsidam.cz

42

Nášup, operated by Spirála Ostrava z.ú., is a Czech social enterprise focused on providing catering services in Ostrava while employing people with mental disabilities. The organization combines social impact with hospitality services, offering catering for events, companies, and private celebrations. Their mission emphasizes social inclusion and psychosocial support for disabled individuals, positioning them as a niche local player with a strong community focus. The website reflects this mission clearly with testimonials, partner logos, and detailed service descriptions. Technically, the site uses modern web technologies including Google reCAPTCHA v3 for form security and standard JavaScript libraries for UI enhancements. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and form protection, but lacks advanced security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small social enterprise. Overall, the site is functional, trustworthy, and professionally presented but could improve compliance and security transparency.

E

Patriot Program | Akce - Koncerty - Divadla - Výstavy - Gastronomie - Sport

eprogram.cz

54

Patriot Program is a regional Czech media platform focused on providing a calendar and search engine for cultural, sports, and social events primarily in the Moravskoslezský kraj region. The website offers event listings, articles, and downloadable magazines targeting a broad audience including families, seniors, and general public interested in local happenings. Technically, the site is built using modern web technologies such as React and Next.js, hosted on DigitalOcean Spaces for media content, and optimized for fast performance and mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks important security headers and privacy disclosures. The absence of WHOIS data limits transparency but the website content and social media presence support legitimacy. Overall, the platform serves as a useful regional event and cultural information resource with room for improvement in privacy and security compliance.

C

Commissariat à l'Énergie Atomique et aux Énergies Alternatives (CEA)

cea.fr

57

The Commissariat à l'Énergie Atomique et aux Énergies Alternatives (CEA) is a major French governmental research organization focused on scientific and technological innovation in energy, defense, digital technologies, and health. The website reflects a well-established institution with a broad scope of research and innovation activities, targeting government, industry partners, researchers, and the general public. The site is professionally designed using Microsoft SharePoint, featuring multimedia content, clear navigation, and official branding. Technically, the site employs modern web technologies including HTTPS, Matomo analytics for privacy-conscious tracking, and Google reCAPTCHA for bot protection. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. The WHOIS data is unavailable, likely due to AFNIC policies or privacy protection, but the domain and content strongly support legitimacy. Overall, the website is a trustworthy and authoritative source for information about CEA's research and innovation activities.

B

BRGM

brgm.fr

58

BRGM is the French national geological survey and a public institution specializing in geological research and management of soil and subsoil resources and risks. It holds a prominent position as the national reference in its sector, providing scientific and technical expertise to public and private stakeholders. The website reflects a mature digital presence built on Drupal 10, with privacy-conscious analytics via Matomo and a professional design optimized for accessibility and mobile devices. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS data is a limitation but the domain and content align with a legitimate public entity. Overall, the site is trustworthy and serves its audience well.

I

Ifremer

ifremer.fr

60

Ifremer is the French national institute dedicated to oceanographic research, focusing on marine ecosystem protection, sustainable resource management, and marine data sharing. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a government research entity. Technically, the site uses Drupal CMS with modern JavaScript libraries and SVG graphics, optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional, serving a broad audience including scientists, policymakers, and the public.

Kalis Media is a small Poland-based IT company specializing in custom web development services primarily targeting the Norwegian market. They focus on programming advanced WordPress themes and Shopify stores with interactive animations and custom functionalities. Their business model revolves around delivering tailored web solutions, including SaaS applications and website redesigns, emphasizing usability and maintainability. The company has a strong portfolio and positive client testimonials, positioning them as a niche expert in their field. Technically, the website employs a modern technology stack including PHP, JavaScript, GSAP animations, and popular frameworks like Laravel and CodeIgniter. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. They use Google Tag Manager and Elfsight widgets for analytics and social media integration. However, there is room for improvement in security headers and privacy compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of security headers and privacy/cookie policies are notable gaps. No WAF or blocking mechanisms were detected, allowing full content access. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

G

Grill & Golf events z.s.

minigolfporuba.cz

40

Minigolf Poruba is a small hospitality and leisure business located in Ostrava-Poruba, Czech Republic, offering minigolf, beverage sales, equipment rental, and event hosting services. The website is professionally designed with clear navigation and good mobile optimization, targeting students, families, and local residents interested in recreational activities. The business is operated by Grill & Golf events z.s., with clear contact details and partner affiliations enhancing credibility. Technically, the site uses modern tracking tools like Google Tag Manager and Facebook Pixel, with HTTPS properly configured, but lacks some security headers and privacy policies, indicating room for compliance improvement. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and business information appear legitimate. Overall, the site scores well in content quality and business credibility but needs enhancements in privacy compliance and security best practices.

M

MOVE Ostrava

movefest.cz

53

MOVE Fest Ostrava is a cultural festival focused on contemporary dance, new circus, and physical theatre, serving the Moravian-Silesian region of the Czech Republic. The website presents the festival as a regional cultural event with over 10 years of history, targeting a general audience interested in performing arts. The business model centers on event organization and cultural promotion. Technically, the website is built on the Wix platform, utilizing standard Wix technologies and scripts, with moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, contact information, and security headers, which impacts its security posture and privacy compliance. The absence of WHOIS data reduces trust and transparency, though the website content appears legitimate and professional. Overall, the site is functional and well-designed but requires improvements in security, privacy, and business credibility to enhance trust and compliance.

SATON s.r.o. is a medium-sized Czech company founded in 1991, specializing in construction, metal fabrication, and automotive servicing primarily in the Ostrava region. The company offers a range of services including new construction, renovations, steel and stainless steel fabrication, and vehicle servicing. Their website reflects a professional and consistent brand image targeting local businesses and customers needing construction and related services. Technically, the website is built using modern SvelteKit technology with good mobile optimization and moderate performance. However, it lacks some advanced SEO and accessibility features. Security-wise, the site uses HTTPS and integrates Sentry for error tracking but lacks important security headers and formal security policies, which lowers its security posture. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Overall, the domain registration is consistent with the business claims, and the website content is safe and professional.

O

Ostravské vodárny a kanalizace a. s.

ovak.cz

57

Ostravské vodárny a kanalizace a. s. is a regional utility company providing water supply and sewage services primarily in the Ostrava region of the Czech Republic. The company offers a range of services including water network management, sewage infrastructure, smart metering, and laboratory testing. Their website reflects a professional and well-structured digital presence with clear navigation and relevant content targeted at residents and businesses in their service area. Technically, the site uses modern JavaScript libraries, Google Analytics with privacy-conscious consent settings, and is mobile optimized. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which limits transparency but the overall site and business information support legitimacy. Strategic improvements in privacy compliance and security best practices are recommended.

D

Data For Good

dataforgood.fr

39

Data For Good is a French non-profit organization established in 2015, dedicated to leveraging technology for social and environmental good. The organization focuses on building citizen-driven tech counterpowers addressing climate change, social justice, and democratic transparency. Their website showcases multiple projects, volunteer engagement opportunities, and donation campaigns, positioning them as a reputable entity in the civic tech and non-profit sector in France. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Scaleway cloud infrastructure, and employs good security practices including HTTPS and security headers. However, the site lacks explicit privacy and cookie policies, which impacts its privacy compliance score. No direct contact emails or phone numbers are provided, with communication primarily via web forms. Overall, the site is professional, trustworthy, and well-structured but could improve in privacy transparency and direct contact availability.

M

Mary's Meals Slovenija

marysmeals.si

59

Mary's Meals Slovenija is a small non-profit organization dedicated to providing nutritious school meals to children in impoverished regions, aiming to improve education and reduce hunger. The website serves as a local chapter platform for fundraising, awareness, and donor engagement, aligned with the global Mary's Meals movement. Technically, the site is built on the Shopify platform, leveraging its e-commerce and content management capabilities, with good mobile optimization and accessibility. Security posture is solid with HTTPS, hCaptcha protection, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned to support its charitable mission.

M

Mary's Meals Portugal

marysmeals.pt

73

Mary's Meals Portugal is a non-profit organization dedicated to providing daily school meals to children in impoverished communities, thereby improving educational attendance and outcomes. The website serves as a platform for awareness, donations, volunteer engagement, and event promotion. Technically, the site is built on the Shopify platform using the Dawn theme, leveraging modern web technologies and ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced, use of hCaptcha for form protection, and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional image aligned with its charitable mission.

M

Mary's Meals Canada

marysmeals.ca

64

Mary's Meals Canada is a non-profit charitable organization dedicated to providing daily nutritious meals to children in impoverished communities to encourage education and break the cycle of poverty. The website serves as a platform for fundraising, volunteer engagement, and awareness, targeting donors and supporters primarily in Canada but linked to a global network of partner sites. The site is professionally designed with clear navigation, rich content, and consistent branding, reflecting a mature digital presence. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, Stripe for payments, and consent management tools, hosted on AWS Cloudfront CDN. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and a public security policy are absent. The absence of WHOIS data limits domain registration transparency, but the presence of charity registration numbers and consistent business information supports legitimacy. No WAF or blocking mechanisms were detected, and the site contains no adult or questionable content, making it safe for general audiences. Overall, the website demonstrates a strong balance of business credibility, technical implementation, and privacy compliance, with room for improvement in explicit security policies and domain registration transparency.

R

renault

renault.dz

74

Renault Algeria operates an official regional website dedicated to showcasing and selling new Renault vehicles, as well as providing after-sales services including maintenance, warranty, and service appointments. The website targets the general Algerian public interested in Renault automobiles and related services. It reflects the brand's strong market position as a major automotive player in Algeria, supported by the global Renault Group. The site offers vehicle configurators, distributor locators, and promotional offers, enhancing customer engagement and service accessibility. Technically, the website employs modern web technologies such as React, integrates Google Analytics and Tag Manager for tracking, and uses OneTrust for cookie consent management. The site is responsive and optimized for mobile devices, with good SEO and accessibility basics. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly visible security policies or incident response information. Privacy compliance is partially addressed through cookie consent, but explicit privacy and terms of service documents are not found. Overall, the website is professional, trustworthy, and well-branded, though it could improve transparency by publishing detailed privacy and security policies and providing clear contact information. The domain registration details align well with the Renault brand, confirming legitimacy and consistency.

R

renault

renault.ma

70

Renault Maroc operates a professional and comprehensive automotive website targeting the Moroccan market, offering new vehicles including electric, hybrid, and utility models. The site provides extensive information on financing, insurance, after-sales services, and vehicle accessories, positioning Renault as a major automotive brand in Morocco. Technically, the website is built on modern frameworks like React, uses optimized media formats, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, which slightly impacts trustworthiness, but the overall site professionalism and branding consistency support legitimacy. Strategic recommendations include publishing security policies and improving transparency on contact information to enhance trust and compliance.

T

Trustia Czech Republic, s.r.o.

festivalevolution.cz

45

Festival Evolution is a Czech Republic-based event organizer focused on promoting healthy lifestyle and personal development through festivals, conferences, and workshops. The website serves as a platform to inform visitors and exhibitors about the festival, its partners, and related events. The business operates in the event organization sector with a regional market position and targets a general audience interested in wellness and personal growth. The company behind the website is Trustia Czech Republic, s.r.o., which is credited as the author in the metadata. The website content is well-structured, informative, and consistent with the festival's theme.

33Across Inc. operates a digital advertising and traffic monetization platform, recently migrating its services to a new platform at platform.33across.com. The website analyzed is a transitional landing page informing users of the move and providing a login link to the new platform. The business targets digital marketers, advertisers, and publishers with services focused on traffic monetization and advertising analytics. The company appears to be a medium-sized technology firm based in the United States with a consistent brand presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Typekit fonts. The page is minimalistic, serving primarily as a redirect notice, with basic mobile optimization and moderate performance. No advanced frameworks or CMS were detected. Security features are minimal with no visible security headers or HTTPS verification in the provided content, indicating room for improvement in security posture. Security evaluation shows a lack of privacy and cookie policies, no incident response contacts, and no security certifications displayed. The absence of security headers and explicit privacy compliance reduces the overall security score. However, no critical vulnerabilities or malicious content were detected. The domain registration aligns well with the company identity, supporting legitimacy. Overall, the website serves a limited purpose as a redirect notice with basic content and security features. Strategic improvements in privacy compliance, security headers, and richer content would enhance trust and user experience.

G

Google LLC

google.co.za

73

Google LLC is a global leader in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, software, and hardware. As a subsidiary of Alphabet Inc., Google holds a dominant market position with a broad target audience ranging from individual users to enterprises worldwide. The company’s business model primarily revolves around advertising revenue and technology services. The website reflects Google's brand consistency and professionalism, offering excellent content quality and user experience.

E

E-commerce + Print on Demand

tpop.com

67

TPOP is a French-based e-commerce platform specializing in print-on-demand services with a strong emphasis on eco-responsibility and local European production. The platform enables entrepreneurs and small to medium-sized businesses to quickly create online stores without upfront inventory costs, integrating seamlessly with popular platforms like Shopify, Etsy, and WooCommerce. The website demonstrates a high level of digital maturity with modern technologies, multilingual support, and a user-friendly design optimized for mobile devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, which slightly impacts trust but is mitigated by strong external trust signals such as customer testimonials and social media presence. Overall, TPOP presents a professional, trustworthy, and well-structured online presence suitable for its target market.

E

E-commerce + Print on Demand

tpop.fr

69

TPOP is a French-based e-commerce platform specializing in print-on-demand services with a strong emphasis on eco-responsibility and no upfront stock costs. The platform enables users to create online stores quickly and easily, offering physical, digital, and print-on-demand products with local European production. The company positions itself as a sustainable and user-friendly alternative in the e-commerce market, integrating with popular platforms like Shopify, Etsy, and WooCommerce. The website demonstrates a high level of digital maturity, employing modern web technologies such as Bootstrap, jQuery, and Weglot for multilingual support, alongside analytics and user feedback tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The lack of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional presentation and trust indicators like Trustpilot reviews and social media presence support credibility. Overall, TPOP presents a trustworthy and technically sound e-commerce solution with room for improvement in transparency and security disclosures.

O

OpenStreetMap

osm.org

11

OpenStreetMap is a globally recognized open source mapping platform that provides free, editable maps created by a community of contributors. It holds a strong market position as a leading provider of open geospatial data and mapping services. The website offers a comprehensive suite of tools including map editing, search, directions, GPS trace uploads, and community engagement features, targeting a broad audience from casual users to professional mappers. Technically, the site employs modern JavaScript frameworks such as Leaflet.js and Turbo (Hotwire), with hosting provided by Fastly, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement, CSRF protection, and use of Content Security Policy nonces, although some standard security headers are missing. Privacy compliance is basic, with a privacy policy and terms of use present but lacking explicit cookie consent mechanisms or GDPR-specific statements. No contact emails or phone numbers are provided on the main page, and no vulnerability disclosure or security.txt files are found. Overall, the site is professional, trustworthy, and safe for general audiences, with a high AI score reflecting strong content quality, technical implementation, and business credibility.

C

CPI Hotels, a.s.

qualityhotelbrnoexhibitioncentre.com

60

Quality Hotel Brno Exhibition Centre is a medium-sized hospitality business located in the Czech Republic, offering hotel accommodation, conference facilities, restaurant services, and wellness amenities. It is part of the CPI Hotels group, which adds to its market credibility and brand strength. The website is professionally designed with excellent content quality and clear navigation, targeting business travelers, event organizers, and tourists. The business model focuses on providing quality services for corporate and leisure guests with a strong emphasis on comfort and regional cuisine. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for Google Tag Manager, cookie consent management, and marketing/analytics tools like Sojern and Zoomletter. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, no CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data for the domain is a notable concern, reducing trust slightly, but the overall security posture is solid. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations. Strategic improvements include publishing a dedicated security policy, enhancing incident response transparency, and adding security headers to further harden the site.

A

Alechko Studio Ltd

asdesigning.com

9

AS Templates operates as a specialized marketplace offering premium Joomla!, WordPress, and HTML templates to web designers and businesses seeking professional website themes. The platform boasts a large active community and a significant volume of downloads and purchases, positioning itself as a reputable player in the web design template market. Their business model focuses on providing both free and premium templates with quick-start installation packages, catering to a broad audience from individual designers to enterprises. Technically, the website employs a classic web stack including Bootstrap for responsive design, jQuery for scripting, and integrates Google Analytics and Google Tag Manager for user behavior tracking. The site is mobile-optimized with good navigation and SEO practices, though the use of an outdated jQuery version presents a potential security risk. The absence of a cookie consent mechanism indicates partial privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No sensitive data exposure was detected, but the outdated JavaScript library and missing WHOIS data reduce trustworthiness. The WHOIS information is incomplete, which raises concerns about domain registration legitimacy despite the professional presentation of the site. Overall, the website is functional, professional, and serves its business purpose well but would benefit from technical and security improvements, including updating libraries, enhancing privacy compliance, and clarifying domain registration details to strengthen trust and security posture.

G

Grand Café

grand-cafe.cz

51

Grand Café operates as a specialized e-commerce retailer focused on coffee products, coffee machines, and related accessories primarily serving the Czech Republic market. The website presents a professional and comprehensive catalog of products including various coffee brands, coffee machines, capsules, syrups, and barista tools. The business targets coffee retailers, cafes, offices, and individual consumers seeking quality coffee products and equipment. The platform also offers customer support and servicing options, enhancing its value proposition. Technically, the website is built on the eshop-rychle.cz platform, utilizing modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized with good navigation and SEO practices. Security posture is solid with HTTPS enforced and consent mechanisms for cookies, although some security headers could be improved. No WAF or blocking mechanisms interfere with content accessibility. From a security and compliance perspective, the site shows good privacy compliance with a visible privacy policy and cookie consent. However, no explicit security policy or incident response contacts were found. The WHOIS data is privacy-protected, which is common for e-commerce businesses, and no suspicious patterns were detected. Contact information is available with clear phone numbers but no public email addresses were found in the HTML. Overall, Grand Café presents a trustworthy and professional online presence with a strong focus on coffee retail and service. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility features to further strengthen trust and compliance.

S

Statutární město Jihlava

jihlava.cz

47

The website jihlava.cz serves as the official digital portal for the city of Jihlava, Czech Republic. It provides comprehensive information and services related to municipal administration, social services, education, transport, tourism, and citizen engagement. The site targets residents, tourists, and local businesses, positioning itself as a trusted source of official city information and services. The business model is that of a government entity providing public services and transparent communication to its constituents. Technically, the website employs a custom CMS platform (vismo®), uses modern web standards including HTML5, CSS3, and JavaScript, and integrates Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices and moderate performance. Hosting and domain registration are consistent with an official municipal entity. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks a publicly visible dedicated security policy or incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could be improved by adding security headers and formalizing incident response disclosures. Overall, jihlava.cz is a professionally maintained government website with high trustworthiness and compliance with privacy regulations. Strategic recommendations include publishing a security policy, providing incident response contacts, and enhancing security headers to further strengthen the site's security and transparency.

The Smithsonian Institution website represents a large, authoritative educational and cultural organization providing extensive museum, research, and educational resources. The site is well-designed, mobile-optimized, and rich in content, targeting a broad audience including the general public, educators, and researchers. Technically, it uses a modern Drupal 10 CMS with various analytics and marketing tools integrated, maintaining good performance and accessibility standards. Security posture is strong with HTTPS and security headers in place, though no explicit vulnerability disclosure or incident response policies were found. WHOIS data is unavailable, likely due to .edu domain registry policies, but the website's legitimacy is supported by consistent branding and official external links. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

A

Apple Inc.

webkit.org

71

WebKit.org is the official website for the WebKit open source web browser engine, primarily developed and maintained by Apple Inc. The site serves as a hub for developers and users interested in WebKit technology, providing downloads, documentation, blog posts, and policies. It holds a strong market position as the engine behind Safari and other Apple applications, targeting web developers and technology professionals. The business model revolves around open source development supported by Apple, emphasizing transparency and community contribution. Technically, the website is built on WordPress CMS with a custom theme, hosted on AWS infrastructure. It employs modern web technologies including SVG graphics, JavaScript, and CSS3, and is optimized for mobile devices with good accessibility and SEO practices. The site uses HTTPS with a valid SSL configuration and DNS hosted on AWS nameservers, though DNSSEC is not enabled. Analytics are performed via Shynet, a privacy-focused tracking service, but no cookie consent mechanism is present. From a security perspective, the site demonstrates good practices such as domain status locks and published security policies. However, it lacks some advanced security headers and explicit incident response contact details. No vulnerabilities or suspicious content were detected. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent banner. Overall, the site is professional, trustworthy, and secure, with room for improvement in privacy and security transparency. The overall risk assessment is low, with recommendations to enable DNSSEC, implement cookie consent, add security headers, and publish a security.txt file to enhance vulnerability disclosure and incident response. These steps would further strengthen the site's security posture and compliance, reinforcing trust among its developer and user community.

I

Igalia, S.L.

igalia.com

10

Igalia, S.L. is a Spain-based open source consultancy specializing in innovative software development projects across multiple technology domains including browsers, multimedia, embedded Linux, and compilers. The company holds a strong market position with recognized expertise in WebKit, Chromium/Blink, Firefox, and GNU/Linux solutions, serving a global clientele. Their business model focuses on consultancy and software development services with a medium-sized organizational footprint. Technically, the website employs modern AMP HTML technology, ensuring fast performance and excellent mobile optimization. The site integrates analytics tools such as Piwik and Ahrefs, and demonstrates good SEO and accessibility practices. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. The absence of WHOIS data is a concern for domain legitimacy but is mitigated by the professional and consistent website content and active community engagement. No forms collecting sensitive data were found, reducing privacy risks. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security policies, cookie consent, and domain registration transparency would enhance trust and compliance.

Brian Kardell's website serves as a personal professional platform highlighting his role as a Developer Advocate at Igalia and his contributions to web standards and extensibility. The site features his writings, talks, and art, targeting web developers and technology enthusiasts interested in web standards and innovation. The business model is centered on personal branding, thought leadership, and community engagement rather than commercial transactions. Technically, the website employs modern web technologies including custom web components and CSS, hosted with DNS services via Cloudflare and domain registration through Squarespace. The site is moderately performant, mobile-optimized, and accessible, though it lacks some advanced SEO and security headers. There are no forms or data collection mechanisms, minimizing privacy risks. From a security perspective, the site uses HTTPS (implied by Cloudflare usage), but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, which limits GDPR compliance. No contact information or incident response channels are provided, which could hinder security communication. The domain registration is consistent and stable, supporting the site's legitimacy. Overall, the website is a well-maintained personal professional site with good content quality and business credibility but has room for improvement in privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing contact information for security incidents.

D

Design for Real Life

dfrlbook.com

9

Design for Real Life is a professionally presented website dedicated to a book authored by Eric Meyer and Sara Wachter-Boettcher, focusing on compassionate and inclusive design principles. The site targets UX professionals and designers, offering free reading sections and book purchase options. The technical infrastructure is modern, leveraging Netlify hosting and JavaScript enhancements, with good mobile optimization and accessibility. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is trustworthy and well-designed but would benefit from enhanced security and privacy measures.

S

Storck Canada

toffifee.ca

63

The website www.toffifee.ca represents the Canadian online presence of the Toffifee confectionery brand, owned by Storck. It provides product information, brand history, and consumer engagement content targeted at Canadian customers. The site is built on TYPO3 CMS and uses modern JavaScript libraries and Piwik PRO for analytics. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content. Privacy and cookie policies are present and GDPR compliant, with a cookie consent mechanism implemented. However, no direct company contact emails or phone numbers are found on the homepage, only a contact form. The WHOIS data for the domain is unavailable, which limits the ability to verify domain registration legitimacy and age, but the website content aligns with the known brand, mitigating some concerns. Security posture is good with HTTPS enforced and no exposed sensitive data, though additional security headers and explicit security policies could improve the security maturity.

S

Storck Canada

merci.ca

35

The merci.ca website represents the Canadian presence of the merci brand, a well-known European chocolate confectionery owned by Storck. The site offers product information, personalization options, crafting ideas, and links to social media and partner brands. The business model focuses on retail sales of chocolates as gifts, targeting a general consumer audience in Canada. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and uses Piwik PRO for analytics with user consent mechanisms, indicating a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices. However, some performance optimizations could be considered to improve loading speed. From a security perspective, the site enforces HTTPS and includes cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain reduces trust assessment confidence, though the website content aligns with a legitimate brand. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security transparency and WHOIS data availability would enhance trust and security posture.

T

Timac Agro Nederland BV

timac-agro.nl

59

Timac Agro Nederland BV is a specialized company operating in the agricultural sector, focusing on plant nutrition and animal hygiene and nutrition products. The company is positioned as a specialist within the Dutch agricultural market and is a subsidiary of Groupe Roullier. Their website reflects a professional and consistent brand presence, targeting agricultural professionals and businesses in the Netherlands. The business model is primarily B2B, offering specialized products and expert advice to the agricultural industry. Technically, the website is built on WordPress CMS with modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution. It integrates marketing automation tools like SharpSpring and uses Google Analytics for visitor tracking. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the website enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The domain registration data is consistent with the business claims, showing a domain age appropriate for the company's history and no use of privacy protection, which supports legitimacy. Overall, the website demonstrates a good security posture, solid privacy compliance, and credible business information. Recommendations include enhancing security headers, enabling DNSSEC, and publishing a formal security policy to further strengthen trust and compliance.

B

Babalác

babalac.sk

58

Babalác is a Slovak e-commerce retailer specializing in high-quality children's toys including Montessori, wooden toys, and magnetic building sets. The website targets parents and caregivers seeking educational and safe toys for young children. It maintains a niche market position with a focus on quality and customer satisfaction, supported by product reviews and bestseller indicators. The business model is primarily online retail with additional content such as a blog to engage customers. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries and integrations with Google Analytics, Facebook Pixel, Hotjar, and other marketing tools. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate with CDN usage and asynchronous script loading. Security posture is strong with HTTPS enforced, standard security headers, CSRF protection on forms, and no exposed sensitive data. Cookie consent mechanisms comply with GDPR, and privacy policies are comprehensive and accessible. However, the site lacks a dedicated security policy or incident response contact information, which could enhance trust and compliance. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing incident response contacts, enhancing accessibility, and maintaining up-to-date third-party libraries to mitigate potential vulnerabilities.

P

PlenkyLevně.cz

plenkylevne.cz

58

PlenkyLevně.cz is a Czech Republic-based e-commerce retailer specializing in baby diapers, particularly the Dada brand, along with related baby care products such as wet wipes and monthly diaper packs. The website targets parents and caregivers seeking affordable and convenient baby care solutions. The business operates a niche online retail model with a clear focus on product variety by size and type, supported by a professional and user-friendly website. The site demonstrates compliance with GDPR and includes standard e-commerce features such as customer support contacts and cookie consent mechanisms. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries, Google Analytics, Facebook SDK, and other marketing and tracking tools. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and CSRF protections on forms, but could benefit from additional HTTP security headers. Overall, the website presents a trustworthy and professional online retail presence with no signs of blocking or WAF interference. The lack of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy. Strategic recommendations include improving security headers and accessibility compliance to further strengthen the site's security and user experience.

Š

Šperky Olivie.cz

olivie.cz

56

Olivie.cz is a Czech-based e-commerce retailer specializing in silver and gold jewelry, offering a wide range of products including rings, earrings, bracelets, necklaces, and pendants. The website targets general consumers interested in quality jewelry for various occasions, supported by a loyalty program and affiliate marketing. The company maintains a professional online presence with clear contact information and comprehensive privacy and cookie policies, indicating compliance with GDPR regulations. Technically, the site is built on the Shoptet platform, leveraging modern analytics and marketing tools such as Google Analytics, Facebook SDK, TikTok Pixel, and Klaviyo, reflecting a mature digital marketing strategy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The lack of WHOIS data reduces domain trustworthiness slightly, but the overall business and technical indicators suggest a legitimate and professionally managed online retailer.

S

Shen Yun Tickets

shenyuntickets.com

46

Shen Yun Tickets operates as a specialized ticketing platform dedicated to facilitating the purchase of tickets for Shen Yun Performing Arts shows worldwide. The platform emphasizes ease of use, security, and a streamlined user experience without requiring account registration. The website is professionally designed with clear navigation and multilingual support via Google Translate, targeting patrons globally interested in Shen Yun performances. Technically, the site uses modern web technologies including HTTPS, Google Fonts, and Google Tag Manager for analytics, hosted likely via GoDaddy infrastructure. Security posture is adequate with HTTPS and domain locks but lacks advanced security headers and DNSSEC. Privacy compliance is basic with presence of privacy and cookie policies but no active consent mechanisms. Business credibility is supported by consistent domain registration data and clear business focus. Overall, the site is functional, trustworthy, and safe for general audiences.

C

Callendar | anticiper les conséquences du changement climatique

callendar.tech

60

The website www.callendar.tech is a small-scale technology-oriented site built on the Wix platform. It appears to be in an early or minimal content stage, with no explicit business description, contact information, or policy documents visible. The technical infrastructure relies on Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a modern but basic digital maturity. Security posture shows some JavaScript hardening practices but lacks explicit security headers and formal policies, which limits compliance and trust. Overall, the site presents a low to moderate risk profile but requires significant improvements in transparency, privacy compliance, and security best practices to enhance credibility and user trust.

S

Spinfest Entertainment Ltd

spinfest.ch

64

Spinfest Casino is an online gambling platform launched in 2023, targeting players primarily in the Czech Republic. It offers a wide variety of casino games including slots, live casino, and jackpots, supported by a Curacao gaming license. The platform emphasizes fast transactions, including cryptocurrency payments, and provides a user-friendly interface with clear bonus offers. The website is professionally designed with good SEO and mobile optimization, leveraging Cloudflare for performance and security. However, contact options are limited to email, and no phone or physical address is provided. Security posture is solid with HTTPS and Cloudflare protection, but could benefit from enhanced security headers and a formal security policy. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit consent mechanisms. Overall, the site is legitimate and trustworthy within the online gambling sector but should improve transparency and security practices to enhance user trust and regulatory compliance.

P

Paysafecard

casinopaysafecard.cz

58

The website casinopaysafecard.cz operates as an affiliate marketing platform focused on promoting online casinos that accept Paysafecard as a payment method, targeting Czech players. It provides informational content about casino bonuses, games, and payment safety, positioning itself as a niche player in the Czech online gambling market. The site uses modern web technologies and Cloudflare for hosting and security, ensuring good performance and HTTPS encryption. However, it lacks direct company contact information, terms of service, and cookie consent mechanisms, which impacts its compliance and trustworthiness. The affiliate links all redirect to a single external domain, indicating a focused but limited business model. Security posture is adequate with HTTPS and Cloudflare protection but could be improved with additional security headers and policies.

P

Plinko

plinkohra.cz

57

Plinkohra.cz is a newly established Czech-language website dedicated to the Plinko gambling game, providing detailed information, game mechanics, strategies, and links to online casinos offering Plinko. The site targets Czech players interested in online gambling and offers both demo and real-money play options. It maintains a consistent brand presence with social media channels and includes basic trust signals such as privacy policy, terms of service, and RNG certification. Technically, the site uses modern web standards, Cloudflare for DNS and CDN, and structured data for SEO. Security posture is generally good with HTTPS and Cloudflare protection, though minor concerns exist around the use of eval() in inline scripts and lack of explicit security policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site scores moderately well in content quality, technical implementation, security, privacy, and business credibility, but improvements are recommended in security best practices and privacy compliance.

R

Orlické hory - ubytování | výlety | zážitky v Orlických horách

region-orlickehory.cz

58

The website www.region-orlickehory.cz serves as a regional tourism portal focused on the Orlické hory mountain area in the Czech Republic. It provides visitors with comprehensive tourist information, accommodation options, and tips for outdoor activities such as hiking, cycling, and skiing. The site facilitates online accommodation reservations, targeting tourists and visitors interested in this region. The business model centers on tourism promotion and accommodation booking services, positioning itself within the hospitality industry. The content is primarily in Czech and is well structured for its audience, though no explicit business registration or contact details are provided in the accessible content. Technically, the website is built on the Webnode CMS platform and employs a variety of third-party scripts including Google Analytics, Google Tag Manager, SumoMe, ShareThis, and Mailchimp for marketing and analytics purposes. The site uses Amazon CloudFront as a CDN for static assets. Performance is moderate with basic mobile optimization and accessibility features. SEO is adequately addressed with proper meta tags and keywords. From a security perspective, the site lacks visible security headers and does not present privacy or cookie policies, which are critical for GDPR compliance and user trust. The WHOIS lookup failed to retrieve domain registration details, which raises concerns about domain legitimacy and transparency. No WAF or blocking mechanisms were detected, and the site content is accessible without restrictions. The absence of contact information and security policies limits the site's trustworthiness from a security and compliance standpoint. Overall, the website is functional and relevant for its tourism purpose but requires improvements in security posture, privacy compliance, and transparency to enhance trust and meet regulatory standards.

R

Region Krkonoše – Ubytování | Výlety | Zážitky

region-krkonose.cz

51

The website www.region-krkonose.cz serves as a regional tourism information portal focused on the Krkonoše National Park area in the Czech Republic. It provides visitors with essential information for planning trips, including accommodation options, excursions, active leisure activities, and local experiences. The site targets tourists and visitors interested in exploring the Krkonoše region, positioning itself as a local resource for travel planning and leisure activities. Technically, the website is built on the Webnode CMS platform and utilizes various third-party services such as Google Analytics, Google Tag Manager, SumoMe, and Mailchimp for analytics and marketing purposes. The site is delivered via AWS Cloudfront CDN, ensuring moderate performance and availability. Security-wise, the website employs HTTPS with IP anonymization in Google Analytics, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS registrant data suggests privacy protection or non-public registration, which is common for small regional sites but reduces transparency. Overall, the site is functional and provides relevant content for its audience but would benefit from enhanced security practices and privacy compliance to improve trust and regulatory adherence.

R

Region-Tour.cz, s.r.o.

region-ceskesvycarsko.cz

53

Region-ceskesvycarsko.cz is a tourism information portal dedicated to the České Švýcarsko region in the Czech Republic. It provides comprehensive details on accommodation options, tourist attractions, activities, and travel tips, targeting tourists and visitors interested in exploring this natural and cultural region. The site is operated by Region-Tour.cz, s.r.o., a small hospitality-focused business with a regional market position. Technically, the website is built on the Webnode CMS platform, leveraging modern JavaScript libraries and third-party services such as Google Analytics, Mailchimp, and Sumo for marketing and analytics. The site is served over HTTPS with Cloudfront CDN, ensuring secure and performant content delivery. However, the absence of WHOIS data and lack of privacy and terms of service pages indicate gaps in transparency and compliance. Security posture is moderate with HTTPS and cookie consent implemented but lacking security headers and incident response information. Overall, the website is functional, content-rich, and safe for general audiences but would benefit from enhanced security and compliance measures.