Security Directory

F

Framasoft

framapad.org

55

Framasoft is a French non-profit organization dedicated to promoting digital autonomy and popular education through free and open-source software projects such as Framapad, a collaborative real-time text editor. The organization operates on a donation-based model, emphasizing ethical hosting and user data protection. The website reflects a mature digital presence with multilingual support, clear navigation, and a strong community focus. Technically, the site uses modern frameworks like Vue.js and hosts Etherpad-lite software, ensuring a responsive and performant user experience. Security posture is solid with HTTPS and domain transfer protections, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is good, with clear terms of use and a privacy policy, but lacks a cookie consent mechanism despite minimal tracking. Overall, the site is trustworthy, professional, and aligned with its mission of digital emancipation.

F

Fédération France Greeters

greeters.fr

42

Fédération France Greeters operates a community-driven platform connecting visitors with local volunteers who provide free guided walks across various French cities. The organization is positioned as a niche player in the tourism sector, emphasizing authentic local experiences. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO, reflecting a moderate level of digital maturity. Hosting is provided by OVH, a reputable provider, and the site uses HTTPS with good SSL configuration. However, the absence of explicit privacy and cookie policies, as well as lack of security headers, indicates areas for improvement in compliance and security. Social media integration is strong, enhancing trust and outreach. Overall, the security posture is adequate but could benefit from enhanced headers and formal incident response information.

C

COMPAGNIE DE SERVICES

domainedemarie.com

60

Domaine de Marie is a French wine estate operating a 23-hectare vineyard in the Luberon region, offering wine production, direct-to-consumer sales, hospitality, and oenotourism services. The website is built on the Shopify platform, featuring a professional design, product catalog, and e-commerce capabilities including payment integration and GDPR cookie consent. Social media presence is established on Facebook and Instagram, supporting brand visibility. Technically, the site uses modern web technologies and Shopify's infrastructure, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and hCaptcha protecting forms, but lacks DNSSEC and explicit security headers. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

A

AUMOVIO SE

continental-mobility-services.com

66

AUMOVIO SE is a German-based technology company specializing in advanced automotive and mobility solutions, including software-defined mobility, electric mobility, vehicle electrical/electronic architectures, safety systems, driver assistance, user experience, and cybersecurity. The company targets automotive manufacturers and industry partners, positioning itself as a medium-sized enterprise with a comprehensive portfolio of services and solutions. The website reflects a professional corporate presence with consistent branding and a clear navigation structure, although the accessed page is a 404 error page indicating missing content at the requested URL. Technically, the website leverages modern web technologies such as Adobe Helix CMS, Google Tag Manager, and LinkedIn Insight Tag for analytics and marketing. The site is mobile optimized and uses SVG graphics for logos and icons. Performance is moderate with basic SEO and accessibility features. Security posture is good with HTTPS enforced, but lacks explicit security headers and incident response information on the site. No critical vulnerabilities or security issues were detected in the analyzed content. Privacy and cookie policies are present and appear comprehensive, indicating GDPR compliance. However, no terms of service or vulnerability disclosure policies were found. Social media presence is active on Facebook, LinkedIn, and YouTube, enhancing trust and engagement. Overall, the website demonstrates a solid business credibility and technical foundation, though improvements in security transparency and content completeness are recommended to enhance user trust and compliance.

S

SKP RAPID Plzeň, z. s.

fwcczech.cz

43

The website fwcczech.cz serves as the official online presence for the Footbike World Championship 2024 held in Czechia. It provides comprehensive event information, historical context, results, videos, and partner promotion, targeting footbike sport enthusiasts and participants. The site is bilingual (Czech and English) and emphasizes community engagement through social media links and partner showcases. The business model revolves around event organization and promotion within a niche sports market in the Czech Republic. Technically, the site is built on WordPress using the GeneratePress theme and related plugins, hosted by a Czech hosting provider, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent mechanism or GDPR details. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy for its purpose but could improve in privacy and security practices.

C

COCON-TONERY PRAHA

cocon.cz

58

The website www.cocon.cz is hosted on the Wix platform and uses standard Wix technologies and scripts. The site content is minimal and lacks detailed business descriptions, contact information, and privacy or cookie policies. The absence of WHOIS data suggests privacy protection or domain registration issues, which limits the ability to fully verify the legitimacy and history of the domain. Technically, the site uses HTTPS but lacks advanced security headers and compliance indicators. Overall, the site appears to be a small-scale or early-stage web presence with limited digital maturity and security posture.

Martin Bugner operates a personal portfolio website showcasing expertise in WordPress web development, custom themes, branding, ecommerce, and application design. The business targets individuals and small businesses seeking fast, custom WordPress websites. The website is built on WordPress 6.8.3 using the GeneratePress theme, hosted on cesky-hosting.eu, and optimized for mobile devices with a clean, professional design. The technical infrastructure is modern and stable, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website is a good representation of a small personal web development business with room for improvement in privacy and security practices.

The website krosovykolobeh.cz is a niche sports event platform focused on organizing and promoting cross-country footbike (krosový koloběh) races and community rides primarily in the Czech Republic. It hosts a series of events under the XC Footbike CUP 2025 brand, providing detailed schedules, registration information, and equipment rental options. The site targets enthusiasts of footbiking and outdoor sports, offering a community hub for this specialized activity. Technically, the site is built using the WEDOS WebSite builder platform, leveraging standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Google Maps API for location services. Hosting is provided by WEDOS, a Czech hosting provider. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features and comprehensive meta-data. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating gaps in compliance and security best practices. No analytics or tracking scripts were detected, suggesting minimal user tracking. The WHOIS data presents a suspicious future domain creation date, which raises questions about registration legitimacy, though the website content appears genuine and detailed. Overall, the site is functional and informative for its niche audience but requires improvements in privacy compliance, security posture, and domain registration transparency to enhance trust and professionalism.

S

SUMMIT TRADE DISTRIBUTION s.r.o.

summit-trade.sk

60

SUMMIT TRADE DISTRIBUTION s.r.o. operates a professional e-commerce platform specializing in premium outdoor equipment and apparel for activities such as skialpinism, climbing, freeride, and trekking. The company holds official distributor status for several renowned outdoor brands, positioning itself as a trusted retailer in Slovakia and the Czech Republic. Their business model combines retail sales with educational content and events under the Summit Academy brand, enhancing customer engagement and brand loyalty. The website is well-branded, content-rich, and targets outdoor enthusiasts seeking quality gear and knowledge. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Typekit fonts, likely built on a custom or proprietary CMS with PHP-based Nette framework elements. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Performance is moderate, with room for optimization. Security is robust with HTTPS enforced, CSRF protection on forms, and cookie consent mechanisms in place, though some security headers could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and user consent management. However, no explicit security policy or incident response contacts are published, which could enhance trust and preparedness. Overall, the domain registration data aligns with the business claims, indicating a legitimate and established company. Strategically, the company should focus on enhancing security headers, publishing a formal security policy, and improving incident response visibility. Continued investment in technical performance and privacy transparency will further solidify their market position and customer trust.

T

TopGis, s.r.o.

gisonline.cz

60

TopGis, s.r.o. operates the GisOnline.cz platform, a sophisticated GIS mapping application tailored for municipalities, cities, investors, and corporate clients in the Czech Republic. The platform offers comprehensive services including digital technical maps, cadastral data visualization, asset inventory management, and smart city IoT sensor integration. The company positions itself as a leading GIS solution provider with a focus on precision mapping and innovative 3D visualization technologies. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and a cookie consent mechanism ensuring basic privacy compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though improvements are recommended in security headers and formal security policies. The absence of WHOIS data is a notable gap, impacting domain trust assessment. Overall, the site is professional, content-rich, and well-structured, serving a specialized technology niche with clear business credibility.

The website regioforum.eu is a regional cooperation platform focused on fostering cross-border partnerships between local governments, NGOs, and other entities in the Euroregion Śląsk Cieszyński area spanning Poland and the Czech Republic. It serves as an information hub for EU co-financed projects and provides resources such as partnership databases and crisis communication models. The site is bilingual and targets local government officials and regional cooperation stakeholders. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, Google Tag Manager for analytics, and CookieScript for consent management. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and security headers. Security posture is adequate with HTTPS and cookie consent but could be improved by adding explicit security policies and incident response contacts. No contact emails, phone numbers, or social media links are present, which limits direct communication channels. Overall, the domain registration is consistent with the website's regional focus and business purpose, enhancing trustworthiness. The site is safe with no adult or questionable content detected.

S

SH ČMS – Sbor dobrovolných hasičů Morávka

sdhmoravka.cz

55

SDH Morávka is a volunteer fire brigade organization based in the Czech Republic, providing firefighting, rescue, and civil protection services to the local community. The website serves as an information hub for community members, other fire brigades, and interested parties, offering news, event details, and safety information. The organization is supported by local government and foundations, reflecting a trusted community role. Technically, the website is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal incident response information. Privacy compliance is limited due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve transparency and compliance aspects.

D

Destinační management turistické oblasti Beskydy-Valašsko o.p.s

beskydyportal.cz

54

The website www.beskydyportal.cz serves as a comprehensive tourism portal for the Beskydy and Valašsko regions in the Czech Republic. It offers extensive information on local attractions, accommodation options, events, cycling and hiking routes, and multimedia content to support tourism activities. The portal targets families, couples, and individual tourists seeking regional travel experiences. The business operates as a regional destination management organization, supported by Czech Ministry for Regional Development funding, and maintains partnerships with official tourism entities. Technically, the site employs a modern web stack including Bootstrap, jQuery, Google Maps API, Mapy.cz API, and Leaflet.js for interactive maps. It integrates social media SDKs and tracking pixels such as Facebook Pixel and uses Google reCAPTCHA for form security. The site is mobile-optimized with responsive design and includes cookie consent mechanisms, although it lacks explicit privacy and terms of service pages. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish a privacy policy or incident response contacts, which are important for GDPR compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain legitimacy verification, but the presence of official logos and consistent branding supports trustworthiness. Overall, the site is a well-structured, content-rich tourism portal with good technical implementation and moderate security posture. To enhance trust and compliance, it should publish privacy and terms policies, implement security headers, and provide clearer contact information. Domain registration details should be verified to ensure legitimacy and reduce risk.

Z

ZX2C4

wireguard.com

61

WireGuard is a modern, high-performance VPN protocol and software project focused on simplicity, security, and speed. The project is led by Jason A. Donenfeld and hosted under the ZX2C4 organization, with strong emphasis on cryptographic soundness and minimal attack surface. The website provides comprehensive technical information, installation guides, and community resources, positioning WireGuard as a leading VPN solution in the technology sector. The digital infrastructure uses modern web technologies and analytics tools, delivering a fast and accessible user experience. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and privacy compliance documentation. The absence of WHOIS registration data is unusual but does not detract significantly from the overall trustworthiness given the project's transparency and community presence. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and adding a security.txt file to improve vulnerability disclosure processes.

K

KlaukeGear

klaukegear.eu

52

KlaukeGear operates an e-commerce platform specializing in branded merchandise and promotional products, targeting businesses and individuals seeking textile items, giveaways, and accessories under the Klauke brand. The website is built on the Shopware 6 platform, offering a product catalog with shopping cart and user account features. The business appears to be a small retail operation with a consistent brand presentation and moderate market positioning in the promotional merchandise niche. Technically, the site uses modern e-commerce technology but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and CSRF protections but lacks comprehensive security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie policy or GDPR explicit indicators. Overall, the site is functional and professional but could improve in security and compliance maturity.

S

Scramble Ireland

scrambleireland.com

65

Scramble Ireland operates as a specialized e-commerce retailer focused on Brazilian Jiu-Jitsu and grappling apparel and equipment, serving primarily the Irish market. The company offers a range of products including rashguards, shorts, kimonos, belts, and related accessories. Positioned as Ireland's leading BJJ and grappling store, it leverages the Square Online platform for its digital storefront, integrating payment and shipping functionalities seamlessly. The website demonstrates a professional design with good user experience and mobile optimization, supporting both in-store pickup and shipping options. Technically, the site employs modern web technologies including Vue.js and integrates third-party services such as Cookiebot for cookie consent management, Snowplow for analytics, and Sentry for error monitoring. Hosting is managed via Square's CDN infrastructure, ensuring reliable performance. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are absent. From a security and compliance perspective, the site implements GDPR-compliant cookie consent mechanisms but lacks a dedicated privacy policy and terms of service pages, which are critical for full compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional site presence and integration with reputable payment partners mitigate some risk. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Scramble Ireland presents a credible and professionally managed online retail presence with room for improvement in privacy documentation and domain registration transparency. Strategic enhancements in compliance documentation and security disclosures would strengthen trust and regulatory adherence.

S

SCRAMBLE AUSTRALIA

scramblestuff.com.au

63

SCRAMBLE AUSTRALIA operates a professional e-commerce website specializing in high-quality martial arts training apparel, including gis, rashguards, shorts, and casual wear, targeting martial arts practitioners in Australia and New Zealand. The website is built on the Shopify platform, leveraging modern web technologies and providing a responsive, well-structured user experience. The business maintains a consistent brand presence across social media channels and offers clear policies for privacy, refunds, and shipping, indicating a mature e-commerce operation. Technically, the site benefits from Shopify's secure hosting and payment infrastructure, with HTTPS enforced and security headers implemented, contributing to a strong security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration data is privacy-protected but consistent with a legitimate small business. The website content is safe for general audiences and free from adult or explicit material.

S

Semperit

semperit.com

64

Semperit is a well-established Austrian tyre brand operating under the Continental group, offering a wide range of tyres for cars, SUVs, vans, trucks, and buses suitable for all weather and road conditions globally. The website demonstrates a professional and consistent brand presence with comprehensive product information, multimedia content, and legal documentation, reflecting a mature digital presence. Technically, the site leverages Adobe Experience Manager CMS, integrates dynamic media, and employs modern tracking and consent management tools, indicating a robust digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and a public security policy suggests room for improvement. The missing WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy given the brand's reputation and content quality. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

G

Global Assistance a.s.

na1220.cz

56

The website www.na1220.cz represents the Klub nebeských andělů, a project initiated in 2010 by Global Assistance a.s., Aeroklub ČR, and Letecká amatérská asociace ČR. The project focuses on integrating sport pilots into a voluntary traffic reporting network, enhancing public perception of amateur pilots, and coordinating safety in air and ground operations. The site targets the Czech aviation community and provides news, event information, and contact details for engagement. Technically, the site uses a modern CMS (Solidpixels), employs HTTPS with valid SSL, and includes cookie consent mechanisms aligned with GDPR. However, WHOIS data for the domain is unavailable, which impacts domain trustworthiness. Security headers are missing, and no explicit security or incident response policies are published on the site. Overall, the site is well-structured, content-rich, and professionally presented, but could improve in transparency and security best practices.

K

Krajská hospodářská komora Zlínského kraje

khkzk.cz

43

Krajská hospodářská komora Zlínského kraje is a regional business chamber representing entrepreneurs and business entities in the Zlín region of the Czech Republic. The organization provides a variety of services including business representation, education, networking events, export support, and certification services. The website is professionally designed with clear navigation and content relevant to its target audience of regional businesses and entrepreneurs. Technically, the site uses modern web technologies including JavaScript, CSS frameworks, and Google Tag Manager for analytics and marketing. The site is mobile optimized and includes GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement. The absence of WHOIS data reduces domain trustworthiness, but the presence of reputable partners and active social media channels supports legitimacy. Overall, the site is a credible regional business resource with good content quality and privacy compliance but could enhance security and transparency.

The website www.enspryng.com represents Genentech's pharmaceutical product ENSPRYNG®, a treatment for Neuromyelitis Optica Spectrum Disorder (NMOSD). The site provides detailed patient-focused information, healthcare professional resources, and access to medication guides and prescribing information. The business is positioned as an established biotechnology company with a specialty drug offering, targeting patients and clinicians. Technically, the site is built on Adobe Experience Manager with modern web technologies, including consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and policies are not fully documented. The absence of WHOIS registration data is a concern for domain legitimacy, but the site content and branding align with a reputable pharmaceutical entity. Overall, the site is professional, secure, and compliant with privacy norms, though improvements in transparency of security and privacy policies are recommended.

D

drivewithvia.com

drivewithvia.com

43

The website apply.drivewithvia.com appears to be a subdomain related to Via, a transportation or driving service. However, the site content is inaccessible, showing only a loading spinner with no actual content loaded. The WHOIS query for the subdomain returned no registration data, indicating the domain is either unregistered or the subdomain is not publicly registered. The technical infrastructure includes Google Tag Manager scripts and Salesforce URLs, suggesting integration with enterprise platforms, but no CMS or hosting details are visible. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. Overall, the site is likely blocked or protected by a WAF or security mechanism, limiting content accessibility and analysis.

C

Citymapper Limited

citymapper.com

47

Citymapper Limited operates a leading urban mobility platform offering a comprehensive transport app available on iPhone, Android, and web. The service integrates multiple transport modes including public transit, cycle hire, ferries, and on-demand cabs, targeting urban commuters seeking efficient multi-modal journey planning. The company is well-established with a domain age of over 19 years and a strong market presence in transportation technology. Technically, the website employs modern web technologies, including JavaScript, Typekit fonts, and a privacy SDK, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic with no explicit privacy or cookie policies found in the provided content. Overall, the site is professional, trustworthy, and safe for general audiences.

The website superbthemes.com is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, including business descriptions, contact information, or policies. The domain is registered with NameCheap since 2018 and uses Cloudflare for DNS and security services. Due to the blocking, no detailed content or business information could be extracted or analyzed. The security posture appears to include Cloudflare's WAF protection, but no further security headers or policies are visible. Overall, the site cannot be fully assessed in its current state, limiting the ability to provide a comprehensive risk or business analysis.

R

Robustel ANZ

robustelanz.com.au

51

Robustel ANZ operates as the master distributor for Robustel Industrial IoT Routers, Gateways, and Modems within the Australia and New Zealand markets. The company focuses on providing industrial-grade IoT connectivity solutions to businesses and enterprises in these regions. The website reflects a professional business presence with a clear focus on technology products related to IoT infrastructure. The market position is that of a specialized distributor serving a niche industrial technology sector. Technically, the website is built on WordPress using the Divi theme and WooCommerce plugin, indicating a modern and flexible digital infrastructure. The site is hosted on Australian servers, aligning with its regional market focus. Security posture is adequate with HTTPS enabled and domain registration protections in place; however, there is room for improvement in security headers and compliance documentation. Privacy and cookie policies are notably absent, which impacts compliance and user trust. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and compliance features to strengthen its risk posture and trustworthiness.

Z

Zoho

maillist-manage.com

62

Zoho Campaigns provides online email and social marketing software aimed at businesses and marketers seeking to run compliant and effective campaigns. The website content focuses on explaining the email sending domains used by Zoho Campaigns and emphasizes compliance with anti-spam laws. The technical infrastructure relies on Zoho's proprietary scripts and content delivery networks, with moderate performance and basic mobile optimization. Security posture is moderate with some best practices like abuse contact emails but lacks visible security headers and formal policies. The absence of WHOIS data limits domain trust verification but the overall business credibility remains high due to brand recognition and consistent messaging. Strategic recommendations include enhancing privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure information to improve trust and compliance.

T

Three Commas™

threecommas.com

69

Three Commas™ is an e-commerce apparel company co-founded by billionaire Mark Cuban, targeting entrepreneurs and fashion consumers. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing tools such as Facebook Pixel and Shopify Analytics. The site presents a professional and consistent brand image with a focus on apparel sales. Technically, the site is well-structured with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and security practices.

B

Built by Buffalo Limited

builtbybuffalo.com

60

Built by Buffalo Limited is a boutique web design and branding agency based in Brighton, UK, established in 2006. The company specializes in creating visually appealing and user-friendly websites and brands for clients worldwide. Their market position is that of a reputable small agency known for quality and client satisfaction, offering services including web design, development, e-commerce solutions, and content management systems. The website reflects a professional and consistent brand image with strong client testimonials and partner endorsements from Shopify and Mailchimp. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript with MooTools and Raphaël.js, and integrates Google Analytics and Tag Manager for tracking. Hosting and DNS services are provided via Cloudflare, although DNSSEC is not enabled. The site is mobile optimized with good SEO and accessibility basics. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and DNSSEC is absent. Privacy compliance is basic with a privacy policy page but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve security and privacy practices.

S

Smile Inc.

smile.io

67

Smile.io is a well-established SaaS company founded in 2013, specializing in loyalty program solutions tailored for Shopify brands. The company positions itself as a leading loyalty platform, offering scalable and Shopify Plus certified services to e-commerce businesses. The website reflects a professional and modern design, leveraging technologies such as Framer for CMS and PostHog for analytics, hosted on AWS infrastructure. The technical implementation is solid with good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

R

Région Nouvelle-Aquitaine

nouvelle-aquitaine.fr

61

Région Nouvelle-Aquitaine is the official regional government entity responsible for managing and supporting various public services and initiatives in the Nouvelle-Aquitaine region of France. The website serves as a comprehensive portal for citizens, providing information on economic development, employment, youth programs, territorial planning, and ecological transition. It maintains a strong market position as a government authority with a large audience base. Technically, the site is built on Drupal CMS, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable, likely due to registry server response issues rather than malicious intent.

C

CBS Nakladatelství s. r. o.

malovanemapy.cz

45

The website www.malovanemapy.cz represents CBS Nakladatelství s. r. o., a Czech company specializing in the creation and sale of hand-painted artistic maps. These maps are detailed, cartographically accurate, and serve both practical and decorative purposes for tourists, municipalities, schools, and other institutions. The company offers a variety of map types including city maps, area maps, cycling maps, panoramic maps, thematic maps, and orientation plans, catering to diverse customer needs. The business model focuses on bespoke map production and outdoor map solutions, positioning the company as a niche provider in the cartographic and artistic map market within the Czech Republic.

The website at salomon.com is currently inaccessible due to a security challenge page that blocks content access. This prevents extraction of business, contact, or compliance information. The domain is long-established since 1995, registered via Nameshield SAS, and shows legitimate domain status locks, indicating a trustworthy registration. However, the inability to access actual website content limits the ability to assess the company's business model, services, or security posture in detail. The technical infrastructure includes JavaScript-based captcha protection from a third-party provider, indicating a focus on bot mitigation. Due to the content block, no privacy, cookie, or terms policies are detectable, and no contact or security policy information is available. Overall, the site is protected by a generic WAF or security mechanism, resulting in a low AI score and incomplete analysis.

M

Manufacture Mercier

mercier.cc

71

Manufacture Mercier is a heritage French brand specializing in premium cycling apparel, leveraging a century-old legacy dating back to 1919. The company operates an e-commerce platform built on Shopify, targeting discerning cyclists seeking high-quality textiles designed in France and manufactured in Europe. The website reflects a strong brand identity with rich multimedia content and a professional design that enhances user experience and trust. Technically, the site employs modern web technologies and integrates multiple marketing and analytics tools, ensuring robust performance and customer engagement. Security posture is solid with HTTPS enforcement and privacy compliance, although explicit security policies and incident response details are absent. The domain WHOIS data is unavailable, which introduces some uncertainty regarding domain registration legitimacy, but the overall digital presence and branding suggest a credible business. Strategic recommendations include publishing security policies, improving transparency on incident response, and addressing WHOIS data gaps to enhance trust.

P

PNE AG

pne-ag.com

54

PNE AG is a German renewable energy company specializing in project development and services related to wind energy (onshore and offshore), photovoltaics, green hydrogen, and other sustainable energy solutions. The company targets investors, landowners, and energy sector stakeholders with a professional and well-structured website that highlights its key services and projects. The website is built on TYPO3 CMS and integrates modern technologies such as Cookiebot for cookie consent management and Google Tag Manager for analytics and marketing. Technically, the website demonstrates a moderate to good performance with mobile optimization and SEO best practices in place. The security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and explicit security policies are missing. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner that aligns with GDPR requirements. The WHOIS data for the domain www.pnegroup.com is missing, which is unusual for a commercial entity and introduces some uncertainty regarding domain registration legitimacy. However, the professional website and privacy compliance mechanisms suggest the business is legitimate. No critical security vulnerabilities or suspicious content were detected. Overall, the website presents a trustworthy and professional digital presence for PNE AG, with room for improvement in transparency around security policies and contact information.

B

BayWa r.e.

baywa-re.com

70

BayWa r.e. is a globally recognized renewable energy company specializing in the development, trading, and servicing of sustainable energy projects including solar, wind, and bioenergy. The company operates under the parent company BayWa AG and maintains a strong market position in the energy sector with a focus on innovation and sustainability. Their website reflects a professional and comprehensive digital presence, targeting investors, industry professionals, and commercial clients. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and employs standard security headers, though it lacks a publicly available security policy or incident response details. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not overshadow the overall professionalism of the site. Strategic recommendations include publishing detailed security and vulnerability disclosure policies and improving transparency around incident response.

V

Viessmann Technologies GmbH

viessmann-vitec.com

65

Viessmann Technologies GmbH operates as a specialized provider of cleanroom and controlled air solutions targeting industries such as healthcare, life sciences, high-tech manufacturing, and indoor growing. The company positions itself as a competent partner for industry-specific cleanroom technology applications, supported by a professional website that highlights their solutions, project management expertise, and references. The website reflects a medium-sized business with a clear affiliation to the Viessmann Group, enhancing its market credibility. Technically, the website is built on the Scrivito CMS platform and integrates modern analytics and marketing tools such as Microsoft Clarity and Pardot. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly detected, and the WHOIS data for the domain is missing, which raises concerns about domain registration transparency. From a security perspective, the site enforces HTTPS and employs cookie consent tools, but lacks visible security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data and security headers suggests areas for improvement to enhance trust and compliance. Overall, the website is professional and trustworthy in appearance but would benefit from improved transparency in domain registration and enhanced security header implementation. Strategic recommendations include adding explicit security policies, incident response contacts, and regular third-party script audits to strengthen security posture and compliance.

H

Top Porn Videos Free - Full HD and 4K Porn XXX Tube

hitporntube.com

56

The website www.hitporntube.com operates as an adult entertainment platform offering free streaming and downloadable pornographic videos in HD and 4K quality. It targets an adult audience exclusively, providing a wide range of explicit content categorized by various adult genres. The business model appears to rely primarily on advertising revenue through third-party ad networks and tracking services. The site lacks visible corporate or contact information, privacy policies, or terms of service, which limits transparency and user trust. Technically, the site uses standard web technologies including jQuery and JavaScript, with a basic but functional design optimized for mobile devices. HTTPS is enabled, ensuring encrypted connections; however, the absence of advanced security headers such as Content-Security-Policy and HSTS reduces the overall security posture. The site loads moderately fast but could benefit from performance and accessibility improvements. From a security perspective, the site does not expose sensitive data but lacks comprehensive security best practices. The missing WHOIS data and domain registration details raise concerns about legitimacy and transparency, common in adult content domains but detrimental to trustworthiness. No privacy or cookie policies were found, indicating poor compliance with data protection regulations such as GDPR. Overall, the website presents moderate risks related to privacy, security, and business credibility. Strategic improvements in transparency, security headers, and compliance documentation are recommended to enhance trust and reduce potential legal and security risks.

H

Hirose Electric Co., Ltd.

hirose.com

53

Hirose Electric Co., Ltd. is presented as a leading global supplier of electrical and electronic connectors, focusing on innovative interconnect solutions and worldwide manufacturing capabilities. However, the website content is minimal, lacking detailed information, contact details, or policies, which limits the ability to fully assess the company's digital maturity. The technical infrastructure appears basic with standard HTML, CSS, and a single analytics script, but no advanced frameworks or CMS detected. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance indicators. The WHOIS data is missing or inaccessible, raising concerns about domain legitimacy despite the presence of website content. Overall, the site appears to be a minimal or placeholder page rather than a fully developed corporate website.

K

Krinolína Art - Nikola Tylšová

krinolinaart.cz

41

Krinolína Art - Nikola Tylšová is a small artisan business specializing in hand-embroidered jewelry based in the Czech Republic. The website serves as an informational and branding platform with links to social media and contact details. The e-commerce shop is under preparation, indicating a startup phase. The business targets general consumers interested in unique handmade jewelry. Technically, the website is built on WordPress, hosted by Wedos, and uses modern web fonts and responsive design techniques. However, it lacks advanced security headers and privacy policies, which are important for compliance and trust. The security posture is moderate with HTTPS usage but no visible security enhancements. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

B

Biskupství ostravsko-opavské

varhanyproostravu.cz

57

The website 'VARHANY PRO OSTRAVU' is a dedicated non-profit project aimed at supporting the installation of new cathedral organs in the Ostrava Cathedral of the Divine Savior. It is operated under the auspices of the Biskupství ostravsko-opavské (Ostrava-Opava Diocese), targeting donors, cultural enthusiasts, and the local community. The site provides detailed information about the project, donation mechanisms including online adoption of organ pipes, and updates on progress. The business model is donation-based, focusing on cultural heritage preservation and community engagement. Technically, the website is built on WordPress using Elementor, with integrations for GDPR compliance (Complianz plugin), Google Analytics for visitor tracking, and Google Translate for multilingual support. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site demonstrates good SEO practices, mobile responsiveness, and moderate performance. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism aligned with GDPR. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The domain registration is recent but consistent with the project's timeline, and no suspicious WHOIS patterns were identified. Overall, the security posture is good but could be improved with additional headers and a vulnerability disclosure policy. The overall risk assessment is low, with the site presenting a trustworthy and professional front for a cultural non-profit initiative. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving accessibility features to further strengthen compliance and user trust.

S

Sdružení vlastníků obecních a soukromých lesů v ČR

kouzlolesa.cz

57

The website 'Kouzlolesa-cz' serves as an educational and informational platform focused on forestry, forest care, and related environmental topics primarily targeting forest owners and nature enthusiasts in the Czech Republic. It is operated by the Sdružení vlastníků obecních a soukromých lesů v ČR and supported by the Czech Ministry of Agriculture. The site offers blog articles, practical advice, and opportunities for advertising relevant to the forestry sector. Technically, the site is built on the Webnode CMS platform, leveraging modern web technologies including Amazon Cloudfront CDN, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security-wise, the site uses HTTPS and some basic security headers but lacks advanced security headers and visible security policies. The absence of WHOIS data reduces domain trustworthiness, although the site content and branding suggest legitimacy. Privacy compliance is minimal, with no explicit privacy or terms of service pages found. Overall, the site is a functional, niche informational resource with moderate security and privacy posture.

A

Alexion

alexion.us

66

Alexion, a part of AstraZeneca Pharmaceuticals LP, operates a dedicated US website focused on delivering therapies for rare diseases. The company is positioned as a leader in rare disease research and patient support, targeting US audiences including patients, caregivers, and healthcare professionals. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its parent company. Technically, the site uses modern web technologies including Sitecore CMS, AWS hosting, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with no signs of malicious activity or content safety concerns.

W

WPDreams

ajaxsearchpro.com

65

Ajax Search Pro is a specialized WordPress plugin developed by WPDreams, offering a customizable and efficient live search engine replacement for WordPress websites. The company positions itself as a niche leader in the WordPress plugin market, targeting website developers and administrators seeking enhanced search functionality. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Smart Slider 3, and is hosted behind Cloudflare DNS services, indicating a modern and scalable technical infrastructure. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. Security-wise, the site uses HTTPS with a good SSL configuration and domain status protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

S

Slovenská biblická spoločnosť

bibliaprenepocujucich.sk

53

The website 'Biblia pre nepočujúcich' is a non-profit project managed by the Slovenská biblická spoločnosť, providing biblical stories in Slovak sign language targeted at the deaf community in Slovakia. The project is educational and religious in nature, relying on donations for continuation. The site features video content, a sign language dictionary, and is designed with accessibility in mind, though some accessibility features could be improved. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, JW Player for video playback, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for tracking and analytics. The site is mobile optimized and has good SEO practices, but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and includes a CSRF token, but does not expose security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. No contact information for security incidents or data protection officers is provided. The domain uses privacy protection in WHOIS, which is justified for this non-profit. No vulnerabilities or suspicious patterns were detected. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and security posture.

The website giftlegacy.com is currently inaccessible beyond a Cloudflare security challenge page employing Turnstile captcha, which prevents direct content access and analysis. The domain is long-established, registered since 1999 via GoDaddy.com, LLC, with no privacy protection enabled. Due to the WAF challenge, no business, contact, or policy information is visible, limiting the ability to assess the company's market position, services, or compliance posture. The technical infrastructure includes Cloudflare as a security and performance provider, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to blocked content, but domain registration data suggests a stable and legitimate domain. Overall, the site requires removal or adjustment of WAF restrictions to enable proper content delivery and compliance transparency.

M

Ministerstvo pro místní rozvoj ČR

projektovezamery.cz

62

The website projektovezamery.cz serves as an official information system for project intents managed by the Czech Republic's Ministry of Regional Development (Ministerstvo pro místní rozvoj ČR). It provides authenticated access to project data via national identity systems such as JIP, NIA, and ISDS, targeting government officials and stakeholders involved in regional project planning. The platform is positioned as an authoritative government resource with a focus on transparency and centralized project management. Technically, the site is built using modern web technologies including React and Webpack, delivering a moderate performance experience with basic mobile optimization and accessibility features. The site lacks advanced SEO and comprehensive metadata but maintains a consistent and professional government branding. Hosting and SSL details are not explicitly provided but HTTPS usage is implied. From a security perspective, the website employs national authentication mechanisms but lacks visible security headers and published security or privacy policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of privacy and cookie policies, as well as contact information, reduces privacy compliance scores. The WHOIS data is consistent with the website's government affiliation, showing no suspicious patterns and a domain age appropriate for the service. Overall, the site is trustworthy and serves its government function adequately but would benefit from enhanced privacy compliance, security header implementation, and improved user contact options to strengthen its security posture and user trust.

S

Státní fond životního prostředí ČR

opst.cz

63

The website represents the official online presence of the Operační program Spravedlivá transformace, a Czech government-backed funding program focused on supporting regions affected by the transition away from coal energy. Managed by the State Environmental Fund of the Czech Republic, the program offers substantial financial resources to regional projects in energy, research, innovation, and social development. The site serves as a comprehensive portal for information, application submission, and updates related to the program. Technically, the site is built on WordPress with modern design and responsive features, integrating Google Analytics for minimal user tracking and employing cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The domain registration is consistent with the program's timeline and official nature, hosted by reputable Czech providers. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

The website newton.tv is currently a minimal placeholder site with no substantive content or business information. It appears to be a parked domain primarily serving advertising scripts from third-party domains. The domain is registered through a privacy protection service, Super Privacy Service LTD c/o Dynadot, which obscures registrant details and reduces transparency. There is no visible privacy policy, cookie policy, terms of service, or contact information on the site. Technically, the site uses basic JavaScript and external ad/tracking scripts but lacks modern security headers and HTTPS information. The overall security posture is weak, with potential privacy and tracking concerns due to unknown third-party scripts. The site does not appear to be blocked by any WAF or security challenge but is functionally minimal and not professionally developed. The domain age is relatively recent (2020), and the use of privacy protection is not justified by any visible business presence. Overall, the site scores low on content quality, security, privacy compliance, and business credibility.

Look Cycle is a specialized manufacturer and retailer of carbon bicycles and automatic pedals, targeting cycling enthusiasts and professionals across road, track, gravel, and e-bike segments. The company positions itself as a leader in automatic pedal technology with a comprehensive product catalog and a professional online presence. The website demonstrates a mature digital infrastructure with modern analytics and marketing tools integrated, including Google Tag Manager, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is well-optimized for mobile and accessibility, with clear navigation and rich content. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not detract significantly from the overall trustworthiness given the professional site and compliance with privacy regulations. Strategic recommendations include enhancing transparency around security and incident response, verifying domain registration details, and expanding direct contact information to improve business credibility and user trust.

T

Tadao

tadao.fr

61

Tadao operates as a regional public transportation network serving the Artois and Gohelle sectors in France, providing bus schedules, route planning, traffic updates, and on-demand transport services. The website reflects a medium-sized organization with a clear focus on user accessibility and service information, supported by a parent company, Transdev, a known global transport operator. The digital infrastructure is modern, leveraging JavaScript frameworks, cookie consent management, and analytics tools, with a CMS platform (ActiPAGE) generating the site content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security best practices like explicit security headers and incident response information could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies in French, aligned with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned in its market niche.