Security Directory

Koszalin360.pl is a regional interactive multimedia portal focused on providing spherical tours, 360° videos, and multimedia content showcasing the beautiful areas of the Pomorze Zachodnie region in Poland. The website is operated by PERSKIMEDIA Szymon Perski, a small media company established in 2016. The business targets a general audience interested in immersive regional content and tourism-related multimedia experiences. The site uses a technology stack centered around HTML5, JavaScript, jQuery, and WebGL to deliver interactive content, although some libraries are outdated. From a technical perspective, the website demonstrates basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The absence of modern security headers and DNSSEC indicates room for improvement in security hardening. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities but also limiting user engagement and contact opportunities. Security posture is moderate with no visible critical vulnerabilities, but the lack of privacy and cookie policies, security headers, and contact information for incident response reduces compliance and trustworthiness. The WHOIS data aligns well with the website content, showing consistent registration details and domain age appropriate for the business history. Overall, the site is functional for its purpose but would benefit from enhanced security practices, privacy compliance, and richer business contact information to improve trust and user confidence.

Budżety JST is a Polish web portal dedicated to presenting local government unit budgets in a transparent and accessible manner. The platform targets both local governments and residents, offering a user-friendly interface with personalized graphical elements and integration with budget management systems. The service includes features such as a built-in salary calculator to help residents understand tax expenditures. The company behind the portal is EuroInnowacje Software Sp. z o.o., a small-sized entity founded in 2018, operating primarily in the government sector within Poland. Technically, the website uses standard web technologies including HTML5, CSS3 with Bootstrap grid, and Google Fonts. The site is moderately optimized for mobile devices and has a clear, professional design. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts, reflecting a minimalistic approach to user data collection. From a security perspective, the site does not implement DNSSEC, security headers, or visible HTTPS enforcement in the provided data, which limits its security posture. No privacy, cookie, or terms of service policies are present, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are found. Overall, the site is safe with no adult or questionable content detected. The overall risk is moderate with recommendations to improve security headers, enable DNSSEC, add privacy and cookie policies, and implement vulnerability disclosure practices to enhance trust and compliance.

ept GmbH is a well-established manufacturer specializing in precision electronic connectors with over 50 years of experience. The company operates internationally with subsidiaries and partner sites in the USA, China, Czech Republic, and Italy, serving primarily the automotive and electronics manufacturing sectors. Their website reflects a professional and comprehensive product catalog, emphasizing quality and customization capabilities backed by multiple ISO certifications. Technically, the website is built on a modern CMS with responsive design and interactive elements such as product finders and multimedia content, indicating a mature digital presence. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust analysis but does not detract significantly from the company's apparent legitimacy based on content and certifications. Overall, the website is a reliable resource for industry professionals seeking high-quality connector solutions.

ept GmbH is a German-based manufacturer specializing in a wide range of industrial connectors including highspeed, miniaturized, rugged, EMC/shielding, power, and automotive connectors. The company offers both standard and customized connector solutions, targeting industrial clients and electronics manufacturers globally. Their website is professionally designed, multilingual, and provides clear contact information, reflecting a mature B2B business model with a medium-sized market presence. Technically, the website is built on the bee.tools® CMS platform, uses modern web standards (HTML5, CSS3, JavaScript), and is secured with HTTPS. The site is mobile-optimized and offers a good user experience with clear navigation. However, there is room for improvement in accessibility and SEO optimization. No analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site benefits from HTTPS and lacks exposed sensitive data. However, it lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration consistency, which should be addressed to enhance trust. Overall, the website presents a professional and trustworthy business front but requires improvements in privacy compliance, security headers, and domain registration transparency to strengthen its security posture and regulatory adherence.

ept GmbH is a German-based manufacturer specializing in a wide range of electronic connectors and connector solutions, serving industrial and manufacturing sectors globally. Their product portfolio includes highspeed, miniaturized, rugged, EMC/shielding, power, automotive, and customized connectors, indicating a strong focus on technical innovation and industry standards. The website supports multiple languages, reflecting an international market presence. Technically, the site is built on the bee.tools® CMS platform, uses modern web technologies including WebP and SVG images, and is mobile optimized. However, there is room for improvement in accessibility and SEO. Security posture is moderate with HTTPS enabled and use of secure image formats, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data for the domain is unavailable, which raises some concerns about domain legitimacy, though the website content and branding are professional and consistent with a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

H

HispaVista

hspvst.com

58

HispaVista operates the domain hspvst.com as a service to place cookies on visitors' computers for its customers, primarily for advertising and session tracking purposes. The website content clearly states that no personally identifiable information is collected and no software is installed on user devices. The domain is well-established since 2014 and registered with a reputable registrar in Spain, consistent with the company's business operations. The site provides basic privacy and cookie policies with opt-out mechanisms, reflecting a commitment to privacy compliance, particularly GDPR. Technically, the website is simple, static, and lacks advanced frameworks or CMS, indicating a lightweight infrastructure focused on informational content rather than interactive services. Security posture is moderate with no HTTPS or security headers information visible in the provided data, and DNSSEC is not enabled, suggesting room for improvement in domain and web security. Overall, the website is safe, professional, and trustworthy but basic in design and technical sophistication.

The website mas-slavkovskebojiste.cz is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain may be for sale, with heavy reliance on advertising scripts and no meaningful user engagement features. The technical infrastructure uses standard HTML and JavaScript with Google Adsense Domains CAF and AdsDeli advertising networks, hosted via Cloudfront CDN. There is no evidence of a CMS or modern web frameworks. Security posture is weak, with no HTTPS or security headers detected, and no forms or inputs to secure. Privacy compliance is minimal, with only a basic privacy policy linked via a popup and no cookie consent mechanism. WHOIS data is suspicious, showing a domain creation date in the future and parking name servers, which undermines trust and legitimacy. Overall, the site lacks business credibility and professional content, resulting in a low trust score.

M

Město Veselí nad Moravou

veseli-nad-moravou.cz

51

The website veseli-nad-moravou.cz serves as the official online presence of the municipal government of Veselí nad Moravou, Czech Republic. It provides comprehensive information about the city, local government, services, cultural and sporting events, and contact details for citizens and visitors. The site is well-positioned as a trusted source of local information and public services, targeting residents and stakeholders in the community. The business model is that of a government information portal, focusing on transparency and citizen engagement. Technically, the website is built on the vismo® CMS platform, hosted by Wedos, a reputable Czech hosting provider. It uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics with a consent mechanism, Google Translate, and social media widgets. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. While no explicit security policy or incident response information is published, the site shows no signs of vulnerabilities or exposed sensitive data. Security headers are partially inferred but not explicitly visible. The domain WHOIS data is consistent with the municipal nature of the site, showing a long-established registration with a known Czech registrar. Overall, the website is a professional, trustworthy, and secure municipal portal with room for improvement in explicit security disclosures and incident response transparency. It poses low risk and serves its public function effectively.

M

Městský úřad Cheb

cheb.cz

51

The website cheb.cz is the official municipal portal for the city of Cheb in the Czech Republic. It provides comprehensive information and services to residents and visitors, including access to official documents, event calendars, online reporting tools, and contact information for city administration. The site is well-positioned as a trusted government resource with a clear focus on citizen engagement and transparency. Technically, the site employs modern web technologies including HTTPS, Google Analytics with consent management, Google reCAPTCHA for form security, and a CMS platform (Vismo) tailored for municipal websites. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with explicit cookie consent and a detailed privacy policy. Overall, the site demonstrates a mature digital presence appropriate for a government entity, with good trust indicators and no suspicious elements.

M

Město Králův Dvůr

kraluv-dvur.cz

47

The website kraluv-dvur.cz serves as the official digital presence for the town of Králův Dvůr in the Czech Republic. It provides residents and visitors with municipal information, including news updates, event calendars, public notices, and contact details for city offices. The site is positioned as a local government portal, focusing on transparency and community engagement. The business model is typical for a municipal government, offering public services and information without commercial intent. Technically, the website is built on the vismo CMS platform and incorporates standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor tracking, with a cookie consent mechanism that respects user privacy by default denying analytics and marketing cookies. The site is mobile-optimized and accessible, with good SEO practices and a clear navigation structure. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration is consistent with the municipal nature of the site, having been established in 2001, indicating a mature and legitimate online presence. Overall, kraluv-dvur.cz is a trustworthy and professionally maintained municipal website with good content quality and privacy compliance. Strategic improvements in security policy transparency and technical security headers would further strengthen its security posture.

M

Městský úřad Krnov

krnov.cz

45

The website krnov.cz serves as the official digital presence of the city of Krnov, Czech Republic. It provides comprehensive municipal information, including news, event calendars, public notices, and online services for residents and visitors. The site is well-positioned as a trusted government portal, offering clear contact details and multiple communication channels including social media. The target audience includes local citizens, tourists, and businesses seeking city-related information and services. Technically, the site uses a modern CMS (vismo), integrates Google Analytics with privacy-conscious consent defaults, and employs Google reCAPTCHA for form security. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is solid with HTTPS and spam protection, though some advanced security headers and policies are absent. Overall, the site demonstrates a mature digital infrastructure suitable for a municipal government entity.

M

Městský úřad Tišnov

tisnov.cz

49

The website www.tisnov.cz serves as the official municipal portal for the town of Tišnov in the Czech Republic. It provides residents and visitors with comprehensive information including news updates, official public notices, job vacancies, event calendars, and contact details for municipal offices. The site targets local citizens and stakeholders seeking government services and community information. The business model is that of a government service portal, focusing on transparency and public communication. Technically, the website employs a modern CMS platform (vismo), uses HTTPS for secure communication, and integrates Google services such as Analytics, reCAPTCHA, and Translate. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Cookie consent mechanisms are implemented in compliance with GDPR, allowing users to manage their preferences. From a security perspective, the site benefits from HTTPS and bot protection via reCAPTCHA. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a concern, reducing trust slightly, but the official nature and content quality support legitimacy. Overall, the website is well-structured, professional, and trustworthy for its intended audience. Strategic improvements include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.

ept GmbH is a German-based manufacturer specializing in electronic connectors and related solutions, serving primarily industrial and automotive sectors. The company offers a broad product portfolio including highspeed, miniaturized, robust, power, and automotive connectors, alongside customized solutions and competencies in injection molding, galvanizing, and SMT technologies. Their market position is that of an established medium-sized manufacturer with international subsidiaries and multilingual web presence. Technically, the website is built on the bee.tools® CMS platform, with modern HTML5 and JavaScript usage, and hosted likely by Deutsche Telekom. The site is mobile optimized with good navigation and professional design, though SEO and accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal security policies such as privacy, cookie, or vulnerability disclosure pages. No incident response contacts or security.txt files are present, which limits transparency and readiness indicators. No vulnerabilities or exposed sensitive data were found in the content. Overall, the website is professional and trustworthy with strong business credibility but could improve privacy compliance and security posture by adding formal policies and security headers. The risk level is moderate with no critical issues detected.

TSYS is a leading payment solutions provider specializing in scalable issuer solutions and payment processing technology. As part of the Global Payments family, TSYS serves a broad audience including financial institutions, fintech companies, and retailers worldwide. Their cloud-native, API-driven platform supports a wide range of services from digital onboarding to fraud management and loyalty programs. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that highlights their expertise and market leadership. Technically, the site leverages modern web technologies, including Sitecore CMS, advanced analytics tools, and a robust cookie consent mechanism, indicating a commitment to user privacy and data protection. Security posture is solid with HTTPS usage and privacy compliance tools, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which is a minor concern but does not detract significantly from the site's legitimacy given the strong brand presence and content quality. Overall, TSYS presents a trustworthy and professional online presence aligned with its enterprise-scale business model.

HDT impex, s.r.o. is a medium-sized Czech company specializing in wholesale distribution of sound, lighting, stage technology, musical instruments, and artificial flowers. It is the largest supplier of large LED screens in the Czech and Slovak republics, providing installation, servicing, and content management services. The company also develops proprietary software for multimedia display and sports scoreboard management. Their target audience primarily consists of B2B clients in the Czech and Slovak markets. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and the Swiper.js library for UI elements. The site is accessible and moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS likely enabled but missing key security headers and policies. No privacy or cookie policies were found, indicating compliance gaps. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a real business.

W

Windcave

paymentexpress.com

71

Windcave operates as a global payment gateway and EFTPOS solutions provider, delivering omni-channel payment processing services to a diverse range of industries including retail, finance, hospitality, and government. The company positions itself as a trusted platform facilitating seamless payment experiences for thousands of recognizable brands worldwide. Their key offerings include online, in-store, and unattended payments, supported by features such as global acquiring, tokenization, and data insights. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and leverages Cloudflare for performance and security monitoring. The site demonstrates good mobile optimization, clear navigation, and professional design quality. However, some accessibility features could be enhanced, and no CMS or hosting provider beyond Cloudflare is explicitly identified. From a security perspective, the site enforces HTTPS and includes secure login mechanisms. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is supported by a comprehensive privacy policy and terms of use, though the lack of a cookie consent mechanism is a notable gap. Overall, the website presents a professional and trustworthy front for a payment services company, but the missing WHOIS data and limited direct contact information slightly reduce trustworthiness. Strategic improvements in privacy compliance and security transparency would enhance the company's security posture and user confidence.

The website www.skillshare.com is currently inaccessible due to a Cloudflare security challenge page that blocks access to the actual content. This prevents a full analysis of the business, technical infrastructure, and security posture. The WHOIS lookup for the domain failed, returning no registration data, which raises concerns about the availability or legitimacy of the domain registration information. No privacy policies, cookie policies, terms of service, or contact information were found in the provided HTML content. The site appears to be protected by Cloudflare's Turnstile CAPTCHA, indicating a security measure to prevent automated access. Due to these restrictions, the security posture cannot be fully assessed, but the lack of visible security headers and metadata in the challenge page suggests minimal exposure at this stage. Overall, the site is rated low in content quality, technical implementation, security, privacy compliance, and business credibility due to the blocking mechanism.

S

Studio Fresh Net, s.r.o.

freshnet.cz

52

Studio Fresh Net, s.r.o. is a Czech Republic-based small technology company specializing in web design, SEO, digital marketing, and application development. It operates as a division of the parent company Studio Fresh, s.r.o., with a strong local market presence supported by a portfolio of over 650 projects and 26 years of industry experience. The website is professionally designed, content-rich, and targets businesses seeking modern and effective web solutions. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics with a compliant cookie consent mechanism. Mobile optimization and SEO practices are well implemented, though accessibility is basic. Security posture is moderate with room for improvement, particularly in implementing HTTP security headers and publishing security policies. The absence of WHOIS data reduces domain trustworthiness, but the visible business registration and professional presentation mitigate concerns. Overall, the site is trustworthy and functional with a good balance of business credibility and technical maturity.

The website festivalinovaci.cz is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and minimal textual content. There is no identifiable company information, contact details, or business description. Technically, the site uses basic HTML, CSS, and JavaScript with third-party ad networks such as Google Adsense Domains CAF and AdsDeli. The site is served via Cloudfront CDN but lacks visible HTTPS enforcement and security headers, indicating a low security posture. Privacy compliance is minimal with only a basic privacy policy accessible via popup and no cookie consent mechanism. Overall, the site has poor design quality, low trustworthiness, and limited technical sophistication.

M

Ministerie van Visuele Zaken

ministerievanvisuelezaken.nl

42

Ministerie van Visuele Zaken is a creative marketing and communication agency based in the Netherlands, founded in 2005. The company specializes in graphic design, interactive presentations, audiovisual production, and creative artworks, targeting businesses and organizations seeking visual marketing solutions. The website reflects a professional and consistent brand image with a focus on showcasing their portfolio and services. Technically, the website is built on WordPress using the Yootheme theme and UIkit framework, indicating a modern and flexible infrastructure. The site is mobile-optimized with moderate performance and basic accessibility features. Hosting is provided by Hosting Secure, and HTTPS is properly enabled, ensuring secure communications. From a security perspective, the site lacks several best practices such as DNSSEC, security headers, and privacy or cookie policies, which are critical for GDPR compliance and overall security posture. No incident response or vulnerability disclosure information is provided, which limits transparency. However, no obvious vulnerabilities or malicious content were detected, and the domain registration is consistent and longstanding, supporting legitimacy. Overall, the website presents a trustworthy and professional business presence but requires improvements in privacy compliance and security hardening to enhance trust and regulatory adherence.

S

Superfiliate

superfiliate.com

21

Superfiliate is a SaaS platform specializing in scaling end-to-end influencer, affiliate, and referral marketing programs. The company offers a suite of tools including influencer hubs, referral and loyalty hubs, and integrations with popular e-commerce and marketing platforms such as Shopify, Recharge, Klaviyo, and TikTok Shop. Positioned as a scalable solution for businesses seeking to empower customers and creators, Superfiliate targets companies looking to enhance their marketing reach through ambassador and affiliate programs. The website content is professional, well-branded, and clearly communicates the business value proposition.

The website 211counts.org is currently inaccessible due to a Cloudflare security challenge page that requires human verification before access. This prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2014 with privacy protection via Domains By Proxy, indicating an intent to keep registrant details private. The lack of accessible content and absence of privacy, cookie, or contact information limits the ability to assess the business model, services, or compliance posture. Technically, the site uses Cloudflare's security services including Turnstile captcha, but no other technologies or CMS platforms are detectable. Security posture is difficult to evaluate fully due to the blocked content, but the use of Cloudflare indicates some baseline protection. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information.

J

jeffbrodsky

jeffbrodsky-memorial.com

61

The website www.jeffbrodsky-memorial.com serves as a memorial and archival platform dedicated to Jeffrey Brodsky, a journalist and historian who lived from 1974 to 2023. It provides access to his oral history collection published by Columbia University, along with biographical information, photos, videos, and related articles. The site targets researchers, historians, and those interested in Brodsky's work and legacy. The business model is non-commercial, focusing on information sharing and memorialization. Technically, the site is built on the Wix platform using Wix Thunderbolt framework, hosted on Wix's Ireland data center. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. It uses HTTPS with excellent SSL configuration but lacks advanced security headers and privacy compliance mechanisms. From a security perspective, the site enforces HTTPS but does not implement common security headers or provide privacy and cookie policies. No contact emails or phone numbers are provided for incident response or security reporting. The WHOIS data is unavailable due to privacy protection, which is justified given the personal nature of the site. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the site is trustworthy and professionally presented for its purpose but would benefit from enhanced security headers, privacy compliance, and clearer contact information to improve its security posture and user trust.

Tomahawk Tourism Marketing is a New Zealand-based digital marketing agency specializing in tourism sector services including bespoke website design, digital marketing, branding, and consulting. The company targets tourism businesses primarily in New Zealand and Australia, positioning itself as a leading provider with strong industry expertise and a comprehensive service offering. The website demonstrates a high level of professionalism, with excellent content quality, clear navigation, and consistent branding. Technically, the site uses modern web technologies and integrates multiple marketing and analytics platforms such as HubSpot, Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the business credibility is high, supported by partner badges and awards, though direct contact emails and phone numbers are not publicly listed, relying on contact forms and social media channels.

K

Krajowa Izba Rozliczeniowa S.A.

centralnainformacja.pl

61

Krajowa Izba Rozliczeniowa S.A. (KIR) operates as a key national provider of banking infrastructure and digital financial services in Poland. The website showcases a broad portfolio of services targeting banks, corporations, public sector entities, and individual customers, including electronic signatures, interbank payment systems, and centralized information exchange platforms. The company holds a strong market position as a trusted intermediary facilitating secure and efficient banking operations. Technically, the website is built on modern web standards with responsive design, accessibility features, and integration of Google Tag Manager and reCAPTCHA for analytics and security. Security posture is robust with HTTPS enforcement, security headers, and CSRF protections, although explicit incident response and vulnerability disclosure policies are not publicly found. The absence of WHOIS data limits domain registration trust analysis, but the professional presentation and official partnerships mitigate concerns. Overall, the site reflects a mature digital presence aligned with industry standards and regulatory compliance.

K

Krajowa Izba Rozliczeniowa S.A.

mojeid.pl

63

Krajowa Izba Rozliczeniowa S.A. (KIR) is a prominent Polish company specializing in electronic identification, e-signature services, and banking payment systems. Their website highlights the mojeID service, which enables users to verify their identity online using electronic banking credentials. The company serves a broad audience including individual clients, banks, corporations, and public sector entities, positioning itself as a key player in Poland's digital finance infrastructure. The website content is professionally presented, with clear navigation and comprehensive service descriptions.

K

Krajowa Izba Rozliczeniowa S.A.

expresselixir.pl

61

Krajowa Izba Rozliczeniowa S.A. (KIR) operates as a key technology hub and provider of digital payment and identification solutions in Poland. The company serves a broad audience including banks, corporations, public sector entities, and individual clients. It holds a leading position in the Polish financial infrastructure market, notably operating the Express Elixir instant payment system, which is the first in Poland and second in Europe to implement such technology. KIR's services encompass instant payments, interbank settlements, electronic signatures, electronic identification, and open banking interfaces, reflecting a comprehensive digital financial ecosystem.

S

Szafir

elektronicznypodpis.pl

68

The website www.elektronicznypodpis.pl represents a specialized Polish business focused on providing electronic signature solutions, including qualified and non-qualified signatures, hardware sets, and renewal services. The site targets businesses and individuals in Poland requiring compliant and secure digital signing capabilities. The business operates an e-commerce model with a clear product catalog and service offerings. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, Cookiebot for consent management, and IBM Watson Assistant for chat support, indicating a moderate level of digital maturity. The site is mobile-optimized, accessible, and uses HTTPS to secure communications. Security posture is solid with cookie consent mechanisms and CSRF token implementation, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie declaration aligned with GDPR requirements. Overall, the website presents a professional and trustworthy front for its niche market, though the lack of publicly available WHOIS data limits domain trust verification. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and providing clearer contact information to improve business credibility and user trust.

K

Krajowa Izba Rozliczeniowa Spółka Akcyjna (KIR)

mszafir.pl

64

The mSzafir website is a professionally designed platform operated by Krajowa Izba Rozliczeniowa Spółka Akcyjna (KIR), a reputable Polish financial infrastructure entity. It offers qualified electronic signature and seal services compliant with the eIDAS regulation, targeting businesses and individuals requiring secure digital signing solutions. The platform supports both one-time and long-term certificates accessible via a web portal and mobile applications for iOS and Android. The site includes comprehensive user guides, FAQs, and activation instructions, enhancing user experience and trust. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Google reCAPTCHA for security. The site is mobile-optimized and uses a custom CMS likely provided by Ideo/edito. Security best practices such as HTTPS, CSRF tokens, and cookie consent mechanisms are implemented, though some security headers could be improved. Analytics and marketing tools are used responsibly with clear privacy policies and GDPR compliance. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. The lack of public WHOIS data is typical for .pl domains and is justified given the nature of the business. Overall, the domain and website present a trustworthy and professional digital presence suitable for handling sensitive electronic signature services. Strategically, the company should continue to enhance security headers and accessibility features while maintaining transparency in privacy and data protection. The integration with official KIR resources and partner domains strengthens its market position and credibility.

N

Nackey S. Loeb School of Communications, Inc.

thebrodskyprize.org

57

The Brodsky Prize website represents a focused non-profit scholarship program dedicated to encouraging excellence and innovation in student journalism among New Hampshire high school students. The site provides detailed information about eligibility, award criteria, past winners, and the legacy of Jeffrey Brodsky. The program is supported by the Nackey S. Loeb School of Communications and features credible judges and media coverage references. Technically, the site is built on Squarespace, leveraging modern web technologies and delivering a good user experience with mobile optimization and clear navigation. However, the site lacks privacy and cookie policies, which are important for compliance, and does not implement advanced security headers, although HTTPS is enforced. The domain registration is recent but consistent with the program's timeline, using privacy protection services typical for small non-profits. Overall, the website is professional, trustworthy, and serves its educational mission effectively.

C

Cleanfeed LLP

cleanfeed.net

57

Cleanfeed LLP operates a professional audio software platform specializing in long-distance, high-definition live audio streaming and recording. The company targets audio professionals such as podcasters, broadcasters, voice actors, and film and commercial production teams. Their Emmy award-winning technology positions them as a trusted leader in remote audio collaboration, supported by endorsements from major media brands and industry professionals. The website reflects a mature SaaS business model with free and paid tiers, emphasizing ease of use and professional quality. Technically, the site is well-structured with modern HTML, CSS, and JavaScript, hosted on Mythic Beasts infrastructure, and optimized for performance and mobile devices. Security posture is moderate with domain registration protections but lacks DNSSEC and explicit security headers. Privacy compliance is partially met with privacy and terms pages but no cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, with minor gaps in security and privacy transparency.

Podcast Taxi is a specialized podcast production studio serving consultants, coaches, and executives primarily in the USA and UK. The company operates under Johns & Taylor, LLC, established in 2019, and offers services including podcast production, audiobooks, training seminars, and internal podcasts. The website presents a professional image with clear business focus and a portfolio of client projects. Technically, the site uses modern web standards, Google Fonts, and Fathom Analytics for lightweight tracking, hosted likely on Google Cloud infrastructure with DNS managed via Google Domains. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Contact is facilitated via a scheduling tool for discovery interviews, with no direct email or phone contacts visible. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

E

Evergreen Podcasts

evergreenpodcasts.com

68

Evergreen Podcasts operates as a specialized podcast production and distribution network, offering a diverse range of original, branded, and partner podcasts. The company targets podcast listeners and creators, positioning itself as a niche media entity with a strong community focus. The website reflects a professional and content-rich platform with multiple podcast channels and a consistent brand presence. Technically, the site uses modern web technologies including Craft CMS, Cloudflare DNS, and integrates marketing tools such as HubSpot and Termly. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS enabled and domain status protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

The website jccsanantonio.org is currently inaccessible due to a Cloudflare security challenge page that requires human verification before granting access. This prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2000 with privacy protection enabled, indicating a long-standing presence but limited public registrant data. The technical infrastructure includes Cloudflare's security services, but no CMS or additional technologies are identifiable from the challenge page. Due to the blocking, no privacy, cookie, or terms of service policies are detectable, nor are any contact details or business descriptions. The security posture cannot be fully assessed beyond the presence of Cloudflare's WAF protection. Overall, the site appears legitimate based on domain age and registrar, but the lack of accessible content limits the ability to provide a comprehensive evaluation.

The website MeineDiagnoseKrebs.at is currently in maintenance mode and serves as a placeholder page branded by Merck & Co., Inc., a major global healthcare company. The site appears intended to provide cancer diagnosis-related information or services, targeting patients and healthcare professionals in Austria or German-speaking regions. However, the current content is minimal, offering no direct services or detailed information. From a technical perspective, the website uses basic HTML5 and CSS3 with no detected CMS or advanced frameworks. The hosting and DNS are managed through reputable providers, including MarkMonitor Inc. as registrar and NS1 DNS services. The site is mobile-optimized to a basic degree but lacks SEO optimization and accessibility features. No analytics or tracking technologies are present, indicating minimal digital maturity at this time. Security posture is limited due to the absence of visible security headers and lack of published privacy or cookie policies. HTTPS status is unknown from the provided data but is recommended. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement. The WHOIS data aligns well with the business entity, showing consistent registration through a trusted registrar. Overall, the website is low risk but also low functionality in its current maintenance state. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, improving SEO and accessibility, and providing clear contact and incident response information to build trust and compliance.

7

7divs.cz

7divs.cz

43

7divs.cz is a Czech-based small technology company specializing in providing web development tools, custom software applications such as CMS and CRM, e-commerce solutions, and digital marketing services. The company targets local businesses seeking to establish or enhance their online presence with easy-to-use website creation tools and professional marketing support. The website is professionally designed, mobile-optimized, and offers clear navigation and service descriptions. Technically, the site uses modern web standards with JavaScript libraries like Swiper.js and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enforced and GDPR consent mechanisms on forms, though security headers are not evident and DNSSEC is not enabled. WHOIS data confirms the domain is registered to a Czech company with consistent information and a domain age of over 9 years, supporting legitimacy. Overall, the site is safe, business-focused, and compliant with basic privacy regulations.

K

Knot Resolver

knot-resolver.cz

53

Knot Resolver is an open-source caching DNS resolver designed for scalability and flexibility, targeting a broad audience from large resolver farms to home network routers. The website positions the project as a modern, modular DNS solution trusted by notable industry players such as CETIN, Cloudflare, and Whalebone. The business model revolves around free software distribution with optional professional support services. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and integrates Matomo analytics with privacy-conscious settings. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate; while no forms or sensitive data exposure is evident, the absence of security headers and explicit privacy or cookie policies indicates room for improvement. WHOIS data is unavailable due to CZ.NIC registry privacy policies, but the domain and website content appear legitimate and consistent with the business claims. Overall, the site scores well on business credibility and content quality but should enhance privacy compliance and security best practices.

K

Knot DNS

knot-dns.cz

52

Knot DNS is an open-source, high-performance authoritative DNS server project targeting network administrators and organizations requiring robust DNS infrastructure. The website presents detailed technical information about the software's features, emphasizing performance, security, and modern DNS capabilities such as DNSSEC and dynamic updates. The project is community-driven and hosted under the CZ.NIC association umbrella, indicating a credible and specialized technology offering. Technically, the website is well-structured, uses modern web technologies, and is optimized for performance and mobile devices. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement. The security posture is moderate, with no obvious vulnerabilities but missing some best practices. Overall, the domain appears legitimate despite the absence of public WHOIS data, likely due to registry privacy policies. The site is safe, professional, and focused on a niche technical audience.

C

CZ.NIC

datovka.cz

53

Datovka is a Czech Republic-based open source desktop application developed and maintained by CZ.NIC, providing secure access to government data mailboxes (ISDS) and local storage of data messages. The software targets users requiring reliable electronic communication with public authorities, offering features such as message sending, receiving, verification, and long-term archiving. The project is positioned as a niche government-related tool with a medium-sized user base and is supported by a reputable national internet infrastructure organization. Technically, the website employs modern web standards with JavaScript and CSS, uses Matomo for privacy-conscious analytics, and supports multiple desktop platforms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the affiliation with CZ.NIC mitigates concerns. Overall, the website and project demonstrate good professionalism, content quality, and user trustworthiness.

C

CZ.NIC z.s.p.o

test-ipv6.cz

52

The website test-ipv6.cz is a specialized technical service operated by CZ.NIC z.s.p.o, a Czech domain registry organization. It provides IPv6 connectivity testing tools that help users and network administrators verify their IPv6 readiness and diagnose potential issues. The site is positioned as a niche technical resource with a focus on IPv6 adoption and network diagnostics. The business model appears to be a free service supported by CZ.NIC and community contributions, targeting technically savvy users and ISPs. From a technical perspective, the website uses standard web technologies including JavaScript, jQuery, and Piwik analytics. The hosting provider is identified as HETZNER-AS based on IP and ISP data. The site performs moderately in performance and mobile optimization, with basic accessibility and SEO features. The technical infrastructure is functional but could benefit from modern security headers and enhanced mobile responsiveness. Security posture is moderate; the site uses HTTPS for test URLs and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, and does not publish privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided. The WHOIS data confirms domain legitimacy with consistent registration by CZ.NIC since 2011. Overall, the website is a trustworthy and useful technical resource with good business credibility but has room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing vulnerability disclosure and incident response details to enhance trust and compliance.

Taco Bell Saipan is a local fast food restaurant website representing the Taco Bell brand in the Saipan region of the Marianas. The website is minimalistic, primarily providing a logo and a link to their Facebook page, with no detailed business descriptions or contact information. The business appears to be small and focused on local hospitality services. Technically, the site uses basic HTML and CSS with Google Fonts and is hosted behind Cloudflare, providing some level of CDN and DNS security. However, the site lacks advanced technical features such as CMS, structured data, or SEO optimizations. Security posture is moderate; HTTPS is implied via Cloudflare, and domain transfer is restricted, but no security headers or privacy policies are present. Overall, the site is safe for general audiences but lacks comprehensive privacy and security compliance. The domain registration is consistent and appropriate for the business age, but registrant details are minimal. Strategic improvements in privacy, security headers, and business information transparency are recommended.

G

Guam Power Authority

paygpa.com

58

Guam Power Authority operates the PayGPA website as a secure online portal for customers to manage their power utility accounts and make payments. The site targets residential and commercial customers in Guam, offering services such as quick pay, account login, and customer support. The business is well-established with a domain age since 2005, reflecting its long-standing presence in the energy sector of Guam. The website integrates modern technologies including React and Oracle Digital Assistant for chatbot support, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and secure login forms; however, DNSSEC is not enabled and security headers are not explicitly present, representing areas for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and functional, serving its utility customer base effectively.

GuamTax.com serves as the official online portal for the Guam Department of Revenue and Taxation, providing a comprehensive suite of tax-related services including business and individual e-filing, online payments, public notices, and regulatory information. The site targets residents and businesses in Guam, positioning itself as the authoritative government resource for tax compliance and revenue collection. Key services include business privilege tax returns, real property tax inquiries, vehicle registration, and passport office information. Technically, the website employs standard web technologies such as JavaScript, Google Tag Manager for analytics, and Google Fonts for typography. The site demonstrates moderate performance and basic mobile optimization, with a structured navigation system and consistent branding. However, there is room for improvement in accessibility and SEO optimization. The absence of a detected CMS or hosting provider details suggests a custom or government-managed infrastructure. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers such as Content-Security-Policy or Strict-Transport-Security in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is notably missing, raising concerns about domain registration legitimacy, although the official government branding and content strongly indicate authenticity. Overall, GuamTax.com is a functional and trustworthy government website with solid content and service offerings. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and security posture, supporting the site's critical role in Guam's tax administration.

MyGuamTax.com serves as the official online portal for the Guam Department of Revenue and Taxation, providing essential tax filing, payment, vehicle registration, and passport-related services to residents and businesses in Guam. The website is positioned as the primary government platform for these services, offering a range of e-filing and payment options tailored to individuals and businesses. The portal integrates with related Guam government services and payment gateways, reinforcing its role as a centralized tax and revenue service hub. From a technical perspective, the website employs standard web technologies including JavaScript, CSS, and Google Tag Manager for analytics. While the site is functional and moderately optimized for mobile devices, there is room for improvement in accessibility and SEO. The absence of a CMS or advanced frameworks suggests a relatively straightforward technical infrastructure. Performance is moderate, with no critical errors detected. Security-wise, the site benefits from HTTPS encryption and secure login forms, but lacks visible security headers such as Content-Security-Policy and HSTS, which are recommended for enhanced protection. The absence of published security policies or incident response information indicates a gap in transparency and preparedness. Additionally, no cookie consent mechanism is present, which may impact privacy compliance. Overall, the website is trustworthy and professional, reflecting its government affiliation. However, the missing WHOIS data for the domain is a notable anomaly that reduces the trust score. Strategic improvements in security headers, privacy compliance, and technical modernization would strengthen the site's security posture and user trust.

The website liberationguam.com is currently a parked domain with no active business content or services. It displays a placeholder page indicating the domain is for sale, with no company information, contact details, or meaningful content. The technical infrastructure relies on basic HTML and JavaScript with multiple advertising and tracking scripts from Google and third-party providers. There is no evidence of HTTPS enforcement or security headers, and privacy compliance is minimal with only a basic privacy policy accessible via a popup. The security posture is weak due to lack of HTTPS and security best practices. Overall, the site presents a low trust profile and limited business credibility.

G

Guam Preservation Trust

guampreservationtrust.org

45

The Guam Preservation Trust is a small, established non-profit organization dedicated to preserving Guam's historic sites and cultural heritage. Founded in 1990, it operates with a board of directors representing key expertise areas and provides services including restoration, funding for cultural projects, and public education. The website reflects a professional and consistent brand presence targeting residents and stakeholders interested in Guam's heritage. Technically, the site is built on WordPress using Bootstrap and common plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and uses outdated JavaScript libraries, which could pose risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is privacy protected but consistent with the organization's history and legitimacy. Strategic improvements in security and privacy compliance would enhance trust and reduce risk.

J

Judiciary of Guam

guamcourts.org

55

The Judiciary of Guam website serves as the official online presence for Guam's judicial system, providing comprehensive information and services related to the Supreme and Superior Courts, judicial council, probation services, and public notices. The site targets a broad audience including legal professionals, residents, probationers, jurors, media, and students. It offers key services such as eCourt filing, court calendars, legal resources, and access to court opinions. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, Google Fonts, and integrates third-party services like Tawk.to live chat and Facebook SDK for social media. The site appears to be custom-built without a common CMS and is hosted with DNS managed by UberNS and registered via Network Solutions. Security posture shows room for improvement with no DNSSEC, no visible security headers, and absence of privacy and cookie policies, which are critical for compliance and user trust. The domain WHOIS data is consistent with a legitimate government entity, with a long registration history and appropriate domain status settings. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website 'Palau Entry Form' serves as an online portal for travelers to Palau to submit their entry forms up to 72 hours before departure. It generates a QR code required for check-in and arrival verification, indicating a niche government or travel-related service. The site targets travelers and provides basic but relevant content focused on facilitating travel compliance. Technically, the site uses standard HTML, CSS, and JavaScript with integration of Google Translate for multilingual support. Hosting is provided by Go Daddy, and the domain is relatively new, created in 2023. Security posture is limited with no visible HTTPS or security headers in the provided data, and no privacy or cookie policies are present, which impacts compliance and trust. Overall, the site is functional but basic in design and security, with moderate trustworthiness given the domain age and purpose.

P

PIT-RADWAR S.A.

pitradwar.com

53

PIT-RADWAR S.A. is a Polish company specializing in professional electronics solutions primarily for the Polish Armed Forces. The company positions itself as a leading supplier in defense-related electronic systems, including radar reconnaissance, command and fire control systems, and firepower means. The website reflects a B2G business model targeting military and government clients, suppliers, shareholders, and media. The company appears to be part of the larger Grupa PGZ, a known defense group in Poland. Technically, the website employs modern web technologies such as HTML5, CSS3, and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and content quality. However, no CMS or hosting provider details are evident. Security headers and advanced security policies are not explicitly detected, though HTTPS usage is implied. From a security perspective, the site implements cookie consent mechanisms and privacy policies consistent with GDPR requirements. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status. No explicit incident response or vulnerability disclosure information is published, which could be improved to enhance trust and compliance. Overall, the website is professional and trustworthy in appearance but requires verification of domain registration and enhancement of security and compliance disclosures to strengthen its risk posture and business credibility.

D

Daniel Sitek

danielsitek.cz

37

DanielSitek.cz is a personal portfolio website for Daniel Sitek, a freelance graphic designer and webdesigner based in the Czech Republic. The site showcases his graphic design, web design, UI/UX design skills, and photography interests. The business model is focused on personal branding and attracting clients for freelance projects. The website targets potential clients and social media followers interested in creative design services. Technically, the site uses modern web standards including HTML5, CSS3, PHP, and JavaScript with jQuery, and integrates analytics tools such as Google Analytics and Hotjar. Hosting is provided by Wedos, a Czech hosting provider, and the domain is registered since 2010, consistent with the business history. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms such as privacy and cookie policies. No forms or direct data collection mechanisms are present on the main page. Social media presence is strong, linking to multiple platforms. Overall, the site is professional and trustworthy but could improve compliance and security practices.