Security Directory

Y

Yoomigo

espacestrail.run

49

Espacestrail.run is a specialized platform dedicated to trail running, offering detailed information on trail running routes across over 40 territories primarily in France and nearby regions. The website serves trail runners and outdoor enthusiasts by providing route maps, event calendars, and mobile app integrations to enhance the trail running experience. The business operates as a niche outdoor sports network with a focus on promoting territories and facilitating trail running activities. Technically, the site uses modern web technologies including Bootstrap, OpenLayers for mapping, FontAwesome icons, and Matomo for analytics, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though privacy compliance could be improved by adding cookie consent and clearer GDPR statements. Overall, the site is professional, trustworthy, and well-positioned in its niche, though it would benefit from enhanced privacy and security policy disclosures.

Myriad Media, Inc. is a small, established multimedia communications agency founded in 1997, specializing in the intersection of design, technology, and strategy. They serve a diverse clientele including private sector companies, government agencies, educational institutions, and nonprofits. Their key services include graphic design, custom application development, content management, responsive websites, branding, UX/UI design, and IoT solutions. The company holds relevant certifications such as 8(a) and Virginia SWaM, positioning them well for government contracting opportunities. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The presence of Sitefinity CMS and ASP.NET C# in portfolio descriptions suggests a robust backend infrastructure. The site is mobile optimized and demonstrates good design and navigation, though accessibility and SEO optimizations are basic. Hosting appears to be supported by AWS DNS services. From a security perspective, the domain is well-established with a long registration history and clientTransferProhibited status, indicating domain transfer protection. However, the site lacks DNSSEC, security headers, and explicit privacy or cookie policies, which are areas for improvement. No incident response or vulnerability disclosure information is provided. The contact information is clearly presented, including a company email and phone number, enhancing business credibility. Overall, the website is professional and trustworthy with good business credibility and technical implementation. Privacy compliance and security posture require enhancement to meet modern standards. There are no indications of adult or questionable content, and no WAF or blocking mechanisms interfere with content accessibility.

A

Alexion

alexion.com

63

Alexion is a well-established pharmaceutical company specializing in rare disease therapies and research, operating as part of AstraZeneca Rare Disease. The website reflects a mature enterprise with a clear focus on delivering innovative treatments and patient support services globally. The content is professionally presented, targeting patients, caregivers, healthcare professionals, and researchers. Technically, the site uses modern web technologies, including Google Tag Manager and AWS DNS infrastructure, and is likely built on the Sitecore CMS platform. The website is mobile-optimized and accessible, with good SEO practices evident. Security posture is solid with HTTPS and domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is weak on the main page, lacking explicit privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

The analyzed website content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. The page primarily contains embedded JavaScript and CSS for the Chrome offline T-Rex game, with no business-related content, contact information, or policies present. Due to the lack of accessible content, no meaningful business description or market positioning can be derived. The technical infrastructure is limited to client-side scripts for the offline game, with no server-side or hosting details available. Security posture cannot be fully assessed due to missing HTTPS and security headers information. Overall, the site is not functional for end users and lacks essential compliance and business credibility elements.

Centre de la Nature Montagnarde is a French non-profit organization established in 2005, specializing in nature education and activities in the Mont-Blanc region. The organization targets schools, the general public, professionals, and groups with children, offering a variety of educational programs, public events, naturalist courses, and professional training. Their business model revolves around membership fees, activity registrations, and partnerships with local entities. The website reflects a consistent and professional brand image with clear contact information and partner logos, supporting its credibility in the regional education and environmental sector. Technically, the website is built using WebAcappellaFx CMS with a modern but straightforward tech stack including HTML5, CSS3, JavaScript, and libraries such as Blueimp Gallery and Animate.css. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, representing a compliance gap with GDPR requirements. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the organization's history. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low, with no signs of malicious content or vulnerabilities. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and conducting regular security audits to maintain compliance and trust. These steps will enhance the site's security posture and regulatory adherence while reinforcing user trust.

The website todofp.es serves as the official Spanish government portal for Formación Profesional (Vocational Training). It provides comprehensive information about educational offerings, how and where to study, accreditation, and related news. The platform targets students, educators, and professionals interested in vocational education in Spain, positioning itself as a trusted and authoritative source backed by the Ministry of Education, Formación Profesional y Deportes. The content is well-structured, professionally presented, and consistent with government branding. Technically, the site uses a traditional web stack with jQuery, Google Custom Search, and Twitter widgets. It is served over HTTPS, includes cookie consent mechanisms, and demonstrates good mobile optimization and accessibility. However, some security best practices such as security headers are not evident, and no advanced frameworks or CMS are detected. Performance is moderate, with room for optimization. From a security perspective, the site shows a basic but adequate posture with HTTPS and cookie consent. No vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of WHOIS data limits domain registration analysis, but the domain's alignment with official government content and branding supports legitimacy. Privacy policies and terms of service are present and GDPR compliant. Overall, todofp.es is a credible, safe, and professionally maintained government educational resource. Strategic improvements could include enhancing security headers, publishing explicit security policies, and improving technical performance to further strengthen trust and compliance.

A

American Heart Association

heart.jobs

11

The American Heart Association operates a comprehensive career portal at heart.jobs, providing employment opportunities within a leading non-profit healthcare organization focused on cardiovascular health and stroke prevention. The website is well-branded, professionally designed, and targets job seekers interested in healthcare, advocacy, fundraising, research, and related fields. The organization holds a strong market position as a trusted non-profit with multiple certifications and awards, including recognition by Forbes and Diversity Inc. The technical infrastructure leverages modern JavaScript frameworks (Nuxt.js), Google Tag Manager for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and clear warnings against fraudulent job offers, though some security headers could be improved. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the site reflects a mature digital presence aligned with the organization's mission and audience.

F

FREE WORK

freeworkenvelopa.cz

42

The website 'FREE WORK' appears to be a small business or personal project hosted on the Wix platform. The site content is minimal and primarily serves as a basic online presence with branding elements but lacks detailed business descriptions, contact information, or comprehensive policies. Technically, the site uses Wix's standard infrastructure, including Google Tag Manager and CookieYes for cookie management, indicating some level of digital maturity. However, the absence of privacy and cookie policies, security headers, and contact details suggests limited compliance and security posture. The site is accessible without any WAF or security challenges, but the lack of WHOIS data and registrant information reduces trustworthiness. Overall, the site is functional but basic, with significant room for improvement in security, compliance, and business credibility.

Banka CREDITAS a.s. is a Czech bank established in 1996, originally as a credit union and licensed as a bank since 2016. It offers a range of financial services including savings accounts, loans, investment products, and corporate financing primarily targeting Czech companies and expanding into Western Europe. The bank is part of the CREDITAS Group, a Czech investment group with interests in financial services, energy, and real estate. The website is professionally designed, mobile-optimized, and provides comprehensive business and contact information. Technically, it uses modern web technologies and a proprietary CMS (Solidpixels). Security posture is good with HTTPS enforced and secure forms, though explicit security headers and published security policies are lacking. Privacy compliance is partial with a cookie consent mechanism but no clear privacy policy page found. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high.

Z

Zlín Film Workshops

zfw.cz

65

Zlín Film Workshops is a small Czech Republic-based business specializing in film education and workshops, including camera, sound, lighting, and photography training. The website is professionally designed using the Wix platform and targets film professionals and enthusiasts seeking practical training. The business operates in a niche media education sector with a regional focus. Technically, the website uses Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structured data indicate legitimacy. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

M

Mayfield Brain & Spine

mayfieldclinic.com

56

Mayfield Brain & Spine is a well-established healthcare provider specializing in neurological and spine care with a history dating back to 1937. The organization operates multiple locations across Cincinnati, Dayton, and Northern Kentucky, offering specialized services including brain tumor care, neurovascular services, spine care, interventional pain management, and physical therapy. Their market position is strong as a regional leader with a comprehensive care team and partnerships with related healthcare organizations. The website reflects a professional and patient-focused business model targeting individuals seeking expert neurological and spine treatment in the region. Technically, the website employs modern web technologies such as Bootstrap and Piwik PRO analytics, providing a responsive and accessible user experience with good SEO practices. However, some improvements in security headers and privacy compliance could enhance their digital maturity. Security posture is solid with HTTPS and domain transfer protections, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy standards, though cookie consent and detailed security policies are absent. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing comprehensive privacy and security policies to improve compliance and user trust.

W

WANET s.r.o.

wanet.cz

55

WANET s.r.o. is a Czech Republic-based IT company specializing in external network management, website creation, SEO optimization, and smart home technology development. The company offers tailored IT services with a focus on individual client needs and provides 24/7 monitoring and security for managed networks. Their product portfolio includes smart IP weather stations and home automation systems, positioning them as a niche technology provider in their regional market. Technically, the website uses a basic but functional stack including jQuery and custom JavaScript, with a cookie consent mechanism implemented for compliance. However, the absence of a privacy policy and terms of service pages, along with missing WHOIS domain registration data, reduces overall trust and compliance posture. Security practices include CAPTCHA on contact forms but lack visible security headers and confirmed HTTPS status. Overall, the website is accessible, professionally presented, and content-rich, but improvements in security and compliance documentation are recommended.

W

WANET s.r.o.

warioweather.com

57

WarioWeather, operated by WANET s.r.o., provides IP weather stations designed for smart homes, precision agriculture, and intelligent building management. Their product offers integrated weather data collection, forecasting, and device control capabilities accessible via web interfaces. The company targets niche markets requiring precise environmental monitoring and automation. Technically, the website uses standard web technologies including jQuery and Google Analytics, with basic mobile optimization and cookie consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in security headers, contact transparency, and domain registration verification are recommended to enhance credibility and compliance.

Storybuilt is a small design and development collective specializing in modern architecture and spatial storytelling. The company focuses on creating sustainable, modern structures that merge form and function, targeting clients interested in contemporary architectural solutions. The website reflects a professional and consistent brand image with a modern design and clear navigation, although it lacks explicit contact details beyond a contact form. Technically, the site uses standard web technologies with Cloudflare DNS and CDN services but lacks advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain status protections in place, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security practices.

C

CZ.NIC

jakfungujedns.cz

52

The website jakfungujedns.cz is an official educational platform operated by CZ.NIC, the Czech Republic's domain registry association responsible for managing the .CZ domain and DNS infrastructure. It provides clear, step-by-step educational content about how DNS works, targeting general internet users and those interested in internet technology. The site is well-branded with CZ.NIC logos and consistent messaging, reinforcing its authoritative position in the Czech internet ecosystem. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery 1.11.0, along with Piwik analytics for user tracking. It is hosted likely on CZ.NIC infrastructure, ensuring reliability and performance. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are possible, such as updating JavaScript libraries and enhancing accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, demonstrating awareness of privacy regulations. However, it lacks visible security headers and a published privacy policy, which are important for compliance and user trust. No forms or sensitive data collection are present, reducing attack surface. The WHOIS data confirms the domain is legitimately registered to CZ.NIC, consistent with the website's purpose and content. Overall, the website is trustworthy, professionally maintained, and serves its educational purpose well. Strategic improvements in privacy documentation, security headers, and technical modernization would enhance its security posture and compliance standing.

N

noBrother

nobrother.cz

46

noBrother is a small Czech Republic-based design and development studio specializing in UI/UX, graphic design, frontend and backend development, CMS, and 3D modeling. Their portfolio includes reputable clients such as CASIO and OMG Research, positioning them as a niche player in the technology and creative services market. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, PHP with the Nette framework, and JavaScript libraries like Swiper.js. Google Tag Manager is implemented for analytics and tracking, though privacy and cookie policies are absent, indicating compliance gaps. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosures. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

The website allegro.sk currently presents a security challenge page that blocks access to its main content, likely due to bot protection mechanisms. As a result, no meaningful business, contact, or policy information is accessible for analysis. The site appears to be an e-commerce storefront related to the Slovak market, but the lack of accessible content prevents a full assessment of its market position or services. Technically, the site uses JavaScript and includes an iframe from captcha-delivery.com for security verification, indicating a WAF or bot mitigation solution is active. Security posture cannot be fully evaluated due to the blocking, but the absence of visible security headers or SSL details is a concern. Overall, the site’s risk assessment is limited by the lack of accessible data, and strategic recommendations focus on improving transparency, security policies, and accessibility once the blocking is resolved.

M

mypage.cz

mypage.cz

51

mypage.cz is a Czech language media and news website launched in 2024, focusing on films, series, games, and general lifestyle topics. It provides news articles, reviews, and guides targeting a general audience interested in entertainment and related subjects. The site operates primarily on advertising revenue, leveraging Google Adsense and Matomo analytics for monetization and user insights. The website is professionally designed with consistent branding and good content quality, offering a clear navigation structure and mobile optimization. Technically, it uses standard web technologies including Google Fonts, JavaScript, and CSS, hosted on infrastructure associated with REG-GRANSY and vas-hosting name servers. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. No critical vulnerabilities or suspicious WHOIS data were found, and the domain registration is consistent with the site's new business age. Overall, the site is safe, compliant with GDPR, and suitable for general audiences.

L

Live Arena Sports AB

hockeyfrance.tv

49

HockeyFrance.TV is a niche sports media streaming platform operated by Live Arena Sports AB, focusing on delivering hockey-related content to fans interested in French hockey. The platform leverages modern web technologies such as the Ionic Framework and service workers to provide a mobile-optimized user experience. However, the website content is relatively basic with limited visible content and no forms or interactive elements detected in the provided HTML. The absence of privacy, cookie, and terms of service policies indicates a gap in compliance and user transparency. Security posture is weak due to lack of visible security headers and no WHOIS data available to verify domain legitimacy. Overall, the site appears functional but lacks critical security and compliance features, which could impact user trust and regulatory adherence.

P

Pinterest

pinterest.fr

75

Pinterest is a globally recognized visual discovery and social media platform that enables users to explore and save ideas related to recipes, home decor, fashion, and lifestyle. The French localized site targets French-speaking users with tailored content and services. The platform operates a large-scale advertising and e-commerce ecosystem, connecting users with brands and products. Technically, the site employs modern web technologies including React, WebAssembly, and robust security measures such as HTTPS, Content Security Policy, and bot mitigation tools like Google reCAPTCHA and Arkose Labs. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the site demonstrates high professionalism, excellent user experience, and trustworthy branding consistent with a large enterprise technology company.

A

Affilae

affilae.com

69

Affilae is a well-established French technology company founded in 2011, specializing in affiliate marketing software and services. The company provides a SaaS platform that enables advertisers and marketers to create, track, and manage affiliate and influencer partnerships with multiple commission models. Their market position is strong within the affiliate marketing sector, supported by a network of partners and a portfolio of medium to large clients. The website reflects a professional and modern digital presence with multilingual support and comprehensive content including case studies and customer testimonials. Technically, the site is built on WordPress, hosted by OVH sas, and employs modern analytics and marketing tools such as Google Tag Manager, Matomo, and LinkedIn Insight. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and headers. Overall, the website is trustworthy, well-optimized for SEO and mobile, and compliant with GDPR requirements.

I

ILUNION Hotels

ilunionhotels.co.uk

65

ILUNION Hotels operates as a hospitality chain offering accessible 3, 4, and 5-star accommodations primarily in Spain. The website serves as the official booking platform, providing multi-language support and a loyalty program to enhance customer engagement. The business targets a broad audience seeking accessible and quality hotel services. Technically, the site is built on Adobe Experience Manager, integrating modern analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and vulnerability disclosures. The absence of WHOIS data for the .co.uk domain suggests the domain may be a subdomain or alias rather than a registered domain, which warrants further verification. Overall, the website is professional, secure, and compliant with privacy norms, suitable for general audiences.

I

ILUNION Hotels

ilunionhotels.de

63

ILUNION Hotels operates a professional, accessible hotel chain website targeting German-speaking customers interested in accessible and family-friendly accommodations in Spain. The site is built on Adobe Experience Manager with integrated Adobe Analytics and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. The domain registration is consistent with the business claims, and the website content is comprehensive and professionally presented. Overall, the site demonstrates good business credibility and technical implementation with room for improvement in privacy policy transparency and security header implementation.

B

Boondooa Créations

boondooa.com

67

Boondooa Créations is a well-established digital agency based in Annecy, France, specializing in website creation, digital strategy, SEO, and web marketing services. With over 15 years of experience, the company serves a regional clientele including Annecy and Geneva, offering tailored digital solutions such as custom CMS development, mobile applications, and comprehensive marketing campaigns. The website reflects a professional and creative brand image with strong content quality and user experience. Technically, the site uses modern JavaScript libraries and a custom CMS platform, ensuring good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. The absence of WHOIS domain registration data raises concerns about domain legitimacy, though the business content and contact information appear credible. Overall, the website is professional and trustworthy, but domain registration inconsistencies should be investigated further.

G

Google

google.lu

74

Google is a leading global technology company primarily known for its search engine and extensive internet-related services including advertising, cloud computing, and software products. The website reflects a highly professional and well-branded digital presence consistent with its market leadership. Technically, the site employs modern web technologies, optimized performance, and strong security measures including HTTPS and security headers. No blocking or WAF challenges were detected, allowing full content accessibility. The WHOIS data is not publicly available, likely due to privacy protection or registry restrictions, which is common for major brands. Overall, the site demonstrates a mature digital infrastructure and a strong security posture with minimal vulnerabilities detected.

G

Google LLC

google.nl

74

Google LLC is a global leader in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, and software solutions. As a subsidiary of Alphabet Inc., Google maintains a dominant market position with a broad portfolio of key services targeting a general audience worldwide. The website reflects Google's strong brand identity and commitment to user experience, offering localized content and comprehensive privacy and cookie policies aligned with GDPR requirements. Technically, the site leverages proprietary Google technologies and is hosted on Google Cloud infrastructure, ensuring fast performance, mobile optimization, and accessibility. Security is robust with enforced HTTPS, modern security headers, and no detected vulnerabilities. Overall, Google.com demonstrates a mature digital presence with high trustworthiness and compliance standards.

D

Dausinger Digital EURL

refiner.io

80

Refiner.io is a specialized SaaS company providing in-app survey software tailored for web and mobile applications. Founded in 2014 and based in France, the company targets SaaS businesses and product teams seeking advanced user feedback solutions. Their platform emphasizes customizable microsurveys with precise user targeting and seamless integrations with popular analytics and marketing tools, positioning them as a niche player in the customer feedback and product research market. The website reflects a professional and consistent brand image with strong trust indicators such as client logos and testimonials. Technically, the site uses modern JavaScript technologies, integrates with Google Tag Manager, LinkedIn Insight, and Fathom Analytics, and is hosted on AWS infrastructure. Performance and mobile optimization are excellent, with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy, but a cookie consent mechanism is missing despite tracking scripts. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, Refiner.io demonstrates a mature digital presence with a strong focus on user feedback solutions for SaaS companies.

A

Association for Diagnostics & Laboratory Medicine

myadlm.org

64

The Association for Diagnostics & Laboratory Medicine (ADLM) is a professional organization focused on laboratory medicine and clinical chemistry. Founded recently in 2023, it serves a global community of clinical laboratorians, researchers, and healthcare professionals by providing educational resources, advocacy, networking opportunities, and scientific publications. The website reflects a mature and professional association with a strong emphasis on community engagement, education, and scientific advancement. ADLM positions itself as a key player in laboratory medicine with a comprehensive portfolio of services including conferences, journals, and certification programs. Technically, the website is built on a modern stack including Sitecore CMS, HubSpot marketing tools, Coveo search integration, and Cloudflare DNS services. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. The domain is registered with GoDaddy and protected with multiple EPP statuses, indicating a stable and legitimate registration. However, DNSSEC is not enabled, and security headers are not visibly configured, which are areas for improvement. From a security perspective, the site uses HTTPS and has protections against domain hijacking. Tracking and marketing scripts are present, but no explicit cookie consent mechanism was found, which may impact GDPR compliance. No incident response or security policy information is publicly available. Overall, the security posture is good but could be enhanced by adding security headers, enabling DNSSEC, and implementing privacy compliance features. The overall risk assessment is low with high trustworthiness and professionalism. Strategic recommendations include improving privacy compliance, enhancing security headers, and publishing security policies to increase transparency and user trust.

C

Coalition for Seamless Access

seamlessaccess.org

60

SeamlessAccess is a non-profit service governed by a coalition of major organizations in the research and scholarly publishing sectors, providing a federated Single Sign-On solution to streamline access to scholarly collaboration tools and research infrastructure. The service targets institutions, libraries, identity providers, and researchers, enabling seamless authentication across multiple platforms. The website is professionally designed using the Hugo static site generator, with good mobile optimization and clear navigation, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC, security headers, and incident response transparency. Privacy compliance is generally good with a comprehensive privacy policy, but cookie consent mechanisms and terms of service are lacking. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

K

KRONUS Inc.

kronus.com

55

KRONUS Inc. is a specialized healthcare company focused on providing immunoassay and autoimmune diagnostic test kits to medical professionals and laboratory facilities worldwide. With over 35 years of experience and an ISO 13485:2016 quality management certification, KRONUS positions itself as a trusted supplier in the niche market of endocrine and metabolic autoimmune disorder diagnostics. The website content clearly targets medical professionals and laboratories, emphasizing product quality and specialized services. Technically, the website employs a simple technology stack including jQuery 2.2.3 and custom CSS/JavaScript. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured navigation. However, the use of an outdated jQuery version and lack of modern security headers indicate areas for technical improvement. The hosting and domain registration are managed by reputable providers, supporting operational stability. From a security perspective, the website shows moderate maturity. The domain is secured with clientTransferProhibited status, but DNSSEC is not enabled, and no security headers were detected. There is no evidence of privacy or cookie policies, which presents compliance risks especially under GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, supporting user trust and communication. Overall, KRONUS.com is a professional and trustworthy website with solid business credibility but with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen the company’s digital trustworthiness and regulatory posture.

P

Perficient Inc

smedix.com

70

Perficient Inc is a global enterprise specializing in AI-first digital consulting and technology services. The company focuses on helping innovative brands leverage AI and digital transformation to drive business growth and customer engagement. Their market position is strong, serving large enterprises across multiple industries including technology, healthcare, financial services, manufacturing, and energy. The website reflects a mature digital presence with comprehensive content, case studies, and thought leadership. Technically, the site uses modern technologies such as Sitecore CMS, Google Tag Manager, OneTrust for cookie consent, and various analytics and marketing tools, indicating a high level of digital maturity. Security posture is robust with HTTPS, security headers, and privacy compliance mechanisms in place, though the absence of WHOIS data reduces transparency. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

T

Takara Bio USA, Inc.

takarabio.com

71

Takara Bio USA, Inc. is a prominent biotechnology company specializing in providing kits, reagents, instruments, and services to researchers focused on gene discovery, regulation, and function. As part of the Takara Bio Group, the company holds a strong market position with a commitment to advancing biotechnology and improving human health. Their offerings include custom enzyme services, OEM manufacturing, and gene and cell therapy manufacturing, targeting the scientific research community globally. The website infrastructure leverages modern web technologies including JavaScript frameworks, third-party marketing and analytics tools such as Marketo, Qualtrics, and Google Tag Manager, and video content delivery via Brightcove. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing additional security headers and enhancing incident response visibility. Privacy compliance is well addressed with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for Takara Bio USA, Inc., though the absence of publicly available WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, auditing third-party scripts, and improving incident response contact information to further strengthen security and compliance.

F

FOND SIDUS

fondsidus.cz

46

Fond Sidus is a Czech non-profit organization dedicated to supporting children through educational projects, entertainment, and promoting healthy nutrition including fermentation and homemade fermented vegetables. The website presents a well-structured archive of projects spanning many years, indicating a sustained presence in the educational and social sector. The target audience primarily includes children, educational institutions, and individuals interested in healthy lifestyles. Technically, the website uses a proprietary or custom CMS platform (eshop-rychle.cz) and integrates Matomo analytics with user consent, reflecting a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, and no contact information is explicitly provided, which limits transparency and user trust. Security-wise, HTTPS is enabled but the absence of security headers and WHOIS data opacity are notable weaknesses. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and security hardening.

M

MND

mnd.cz

78

MND is a Czech energy supplier offering gas and electricity services primarily to households (B2C). The website provides an online price calculator and facilitates switching to MND as a supplier, positioning itself as a stable and fair energy provider in the Czech market. The digital infrastructure is built on Kentico CMS with integrated Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and uses modern web technologies, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, standard security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear cookie consent mechanisms and a comprehensive cookie policy. However, WHOIS data is unavailable, likely due to privacy protection, which is common for commercial entities. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations, though it lacks explicit contact information and some policy pages such as terms of service and security policy. Strategic recommendations include publishing incident response contacts, adding a security policy page, and improving accessibility features.

E

Exalto

exalto.fr

40

Exalto is a French retail e-commerce company specializing in men's eyewear, offering a curated selection of glasses emphasizing elegance, technical quality, and comfort. The website is built on the PrestaShop platform, utilizing modern JavaScript libraries for enhanced user experience and lazy loading for performance optimization. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of visible privacy, cookie policies, and contact information suggests areas for compliance and trust improvement. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response contacts. Overall, the website presents a professional retail presence but would benefit from enhanced transparency and security best practices.

W

World Leagues Association

worldleaguesforum.com

10

The World Leagues Association website serves as a professional platform representing global professional football leagues. It provides information about the association's mission, media updates, event calendars, and member access. The site targets sports organizations and political bodies involved in football governance. The business model is that of a non-profit association fostering cooperation among leagues worldwide. The website is well-branded, consistent, and offers clear navigation and relevant content for its audience. Technically, the site is built on Kirby CMS with modern web technologies including JavaScript and CSS. It is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Performance is moderate with room for improvement in accessibility and security headers. Google Tag Manager is used for analytics and tracking, with a functional cookie consent mechanism in place. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The domain uses privacy protection for WHOIS data, which is justified for this type of organization. Overall, the security posture is adequate but could be enhanced with additional measures. The overall risk is low given the professional nature of the site and absence of suspicious indicators. Strategic recommendations include publishing privacy and terms of service policies, implementing security headers, and establishing a vulnerability disclosure process to improve trust and compliance.

O

Origos Group, s. r. o.

origos.eu

54

Origos Group, s. r. o. operates a professional e-commerce platform focused on bicycles, e-bikes, and cycling accessories targeting family and individual consumers primarily in Slovakia. The company maintains a physical store in Trenčín and offers additional services such as bicycle servicing and e-bike rentals, positioning itself as a comprehensive cycling retailer with over 10 years of market presence. The website is well-structured, mobile-optimized, and integrates multiple marketing and analytics tools with GDPR-compliant consent mechanisms. Technically, the site uses modern JavaScript libraries and tracking services, though it lacks some advanced security headers. Overall, the security posture is good with HTTPS enforced and reCAPTCHA protecting forms. No critical vulnerabilities or suspicious activities were detected. The domain registration is consistent with the business claims, registered through a reputable registrar without privacy protection, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen trust and compliance.

I

ipapi

ipapi.com

65

IPapi is a mature and reputable technology company specializing in IP geolocation and reverse IP lookup services via a REST API. The company offers scalable solutions trusted by over 30,000 businesses worldwide, providing accurate geolocation data, fraud prevention, currency detection, and time zone lookup. Their business model includes free API access with tiered paid plans, targeting developers and enterprises requiring reliable IP intelligence. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a strong market position under the parent company APILayer. Technically, the website employs modern JavaScript technologies, integrates Stripe for payments, and uses Google Tag Manager and reCAPTCHA v3 for analytics and security. Hosting and DNS are managed via Cloudflare, ensuring fast performance and robust SSL/TLS encryption. The site demonstrates good SEO practices and accessibility, with structured data enhancing search engine visibility. From a security perspective, IPapi enforces HTTPS, uses reCAPTCHA to protect forms, and avoids exposing sensitive data. However, DNSSEC is not enabled, and explicit security headers are not clearly present. The site lacks a dedicated security policy or incident response page, which could improve transparency and trust. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit cookie consent mechanism is observed. Overall, IPapi presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security policy transparency, DNS security, and privacy consent mechanisms would further enhance their security posture and compliance standing.

U

userstack

userstack.com

66

userstack is a technology company specializing in providing a real-time User-Agent lookup and device detection API service. Established in 2011, it offers scalable and accurate user-agent parsing solutions trusted by thousands of customers worldwide, including major brands such as Amazon, Apple, and Zendesk. The company operates a freemium business model with free API access and tiered paid plans, targeting developers and businesses requiring device and browser detection capabilities. The website demonstrates strong branding consistency and professional content quality, with extensive code examples and clear calls to action.

A

apilayer

weatherstack.com

66

weatherstack.com is a well-established weather data API provider offering real-time, historical, and forecast weather information globally. The company operates under the parent brand apilayer and serves a broad developer and business audience with a freemium API model. The website demonstrates a high level of professionalism, with clear service descriptions, client logos, and comprehensive documentation. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Mixpanel analytics, and Stripe for payments, hosted behind Cloudflare DNS. Security posture is strong with HTTPS enforced and domain status locks, though DNSSEC is not enabled and explicit security policies are not publicly published. Privacy compliance is good with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, performant, and well-optimized for mobile and SEO.

A

apilayer

aviationstack.com

66

Aviationstack is a technology company specializing in providing real-time and historical aviation data through a scalable REST API. The company targets developers and businesses requiring accurate flight tracking and aviation information globally. With a solid market position supported by over 5,000 customers and a robust cloud infrastructure, Aviationstack offers a comprehensive suite of aviation data services including flight status, airline routes, airport information, and aircraft details. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and clear navigation. Security posture is strong with HTTPS enforcement, domain registration locks, and secure form implementations, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and well-positioned in the aviation data API market.

C

CZ.NIC, z. s. p. o.

dnssec.cz

57

The website www.dnssec.cz is operated by CZ.NIC, the official Czech domain registry association responsible for managing the .CZ top-level domain and promoting DNS security technologies such as DNSSEC. The site provides educational content about DNSSEC, tools to test DNSSEC protection on user connections and domains, and contact information for support. It targets Czech internet users, domain owners, and ISPs, positioning itself as an authoritative source on DNS security in the Czech Republic. Technically, the site uses a straightforward technology stack including jQuery and custom JavaScript, with CSS for styling. The site is accessible, uses HTTPS, and embeds multimedia content such as YouTube videos. However, it lacks advanced security headers and comprehensive privacy or cookie policies. Mobile optimization and accessibility are basic but functional. From a security perspective, the site demonstrates good practices by using HTTPS and avoiding exposed sensitive data. However, the absence of security headers and incident response information limits its security maturity. The missing WHOIS data for the domain reduces transparency and trustworthiness from a registration standpoint, although the CZ.NIC branding and contact details support legitimacy. Overall, the site is a reliable educational resource on DNSSEC with moderate technical sophistication and a good business credibility profile. Improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture.

W

WDF

wdf.cz

68

WDF is a small technology-focused digital agency specializing in the development of cutting-edge digital products including mobile and web applications. The company positions itself as a provider of innovative software solutions aimed at businesses and users seeking modern digital experiences. The website reflects a professional and modern design, leveraging contemporary JavaScript frameworks such as Vue.js and Nuxt.js, and integrates analytics and marketing tools like Google Tag Manager and LinkedIn Insight. Security measures include HTTPS enforcement and the use of Google reCAPTCHA to protect forms. However, the absence of explicit privacy policies, terms of service, and contact information limits transparency and user trust. The domain WHOIS data is not publicly available, indicating privacy protection, which is typical for small agencies. Overall, the website demonstrates a good technical foundation and business presentation but would benefit from enhanced privacy and security disclosures.

S

Sigma Pumpy Hranice

sigmapumpy.com

58

Sigma Pumpy Hranice operates a website built on the Wix platform, targeting Czech-speaking customers likely interested in pumps or related equipment. The site presents basic business information but lacks detailed company data, contact information, and compliance policies. Technically, the site uses Wix's standard technology stack with polyfills and scripts to support modern browsers and mobile devices. However, SEO is limited due to a 'noindex' directive, and the site lacks advanced security headers or privacy mechanisms. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy and trustworthiness. Overall, the website appears functional but minimal, with significant gaps in security, privacy compliance, and business transparency.

A

Ateliér Zlín

atelierzlin.cz

54

Ateliér Zlín operates a professional photography and film studio rental business located in Zlín, Czech Republic. The website presents a clear business offering of studio space and equipment rental, targeting creative professionals in photography and filmmaking. The business appears to be a small local entity with a focused service portfolio. Technically, the website is built on the Wix platform, leveraging Wix Thunderbolt framework and modern web technologies such as AVIF images and SVG graphics. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enforced, but the absence of security headers and privacy policies indicates room for improvement. The missing WHOIS data reduces domain trustworthiness, though the professional presentation and contact information support legitimacy. Overall, the website is functional and professional but should enhance compliance and security practices to improve trust and user confidence.

F

Frontio NET s.r.o.

frontio.net

50

Frontio NET s.r.o. is a Czech Republic-based small technology company specializing in custom web development, front-end coding, and e-commerce solutions primarily using WordPress CMS. The company targets businesses and agencies seeking tailored web solutions and has a professional web presence with client references and contact information clearly displayed. Technically, the website is built on a modern WordPress stack with JavaScript libraries such as jQuery and Swiper.js, and it integrates Google Analytics and Yoast SEO for performance and search optimization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and security headers, and it does not publish a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

C

Modern Consent Banners | CookieChimp

cookiechimp.com

73

CookieChimp is a modern SaaS platform specializing in AI-powered consent management solutions designed to help websites comply with global privacy regulations such as GDPR, CCPA, and Google Consent Mode. The platform offers customizable consent banners, automated cookie and vendor scanning, and real-time dashboards to optimize user consent rates. Positioned as both enterprise-grade and startup-friendly, CookieChimp targets website owners and developers seeking efficient privacy compliance tools. The website demonstrates strong branding, client testimonials, and integration with popular platforms, indicating a solid market presence. Technically, the website employs a modern tech stack including JavaScript, FontAwesome, Tailwind CSS, and Turbo Frames, hosted behind Cloudflare DNS and CDN services. It integrates analytics and user engagement tools like Google Tag Manager and Intercom, ensuring good performance, mobile optimization, and accessibility. The domain is registered with NameCheap since 2020, consistent with the company's startup profile. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and publicly available security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial due to the absence of explicit privacy and cookie policy pages in the analyzed content. Overall, CookieChimp presents a professional, trustworthy, and technically sound platform with room for improvement in transparency around privacy policies and security disclosures.

H

HubSpot

hubs.la

76

HubSpot is a leading enterprise in the technology sector providing CRM, marketing automation, and customer service software solutions. The analyzed subdomain focuses on abuse prevention policies, reflecting the company's commitment to security and compliance. The website content is professional and targeted towards businesses and marketers, consistent with HubSpot's SaaS business model and market position. The technical infrastructure leverages HubSpot's CMS platform with modern web technologies, offering good mobile optimization and accessibility. However, explicit privacy and cookie policies were not found on this specific page, which may be located elsewhere on the main domain. Security posture assessment indicates a lack of visible security headers and explicit security policies in the provided content, suggesting room for improvement in security best practices. Overall, the domain and content align with a reputable enterprise, with no signs of blocking or WAF interference, and the site is safe for general audiences.

R

Rannsóknamiðstöð Íslands

rannis.is

70

Rannís, the Icelandic Centre for Research, is a government-affiliated institution dedicated to supporting research, innovation, education, and culture in Iceland. It acts as a central funding and coordination body, providing grants and facilitating international cooperation. The website reflects a well-established organization with a clear mission and target audience including researchers, educational institutions, and cultural entities. The site is professionally designed, well-structured, and provides comprehensive information about its services and activities. Technically, the website uses the Eplica CMS platform, integrates modern JavaScript libraries, and employs Google Analytics and Tag Manager for user tracking with privacy considerations such as IP anonymization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Contact information is clearly provided, including official emails, phone numbers, and physical address, along with social media presence on major platforms. Overall, the site demonstrates a mature digital presence suitable for a government research institution.

Б

Битрикс24

bitrix24.team

65

Bitrix24.team is a login portal for the Bitrix24 collaboration and CRM platform, primarily targeting Russian-speaking business users. The platform offers tools to help businesses work more efficiently through communication, CRM, and business process automation. The website is built on the Bitrix CMS and framework, utilizing modern web technologies such as JavaScript, WebGL, and WebSockets to provide interactive and real-time features including QR code login. The site is mobile-optimized and supports multiple languages, enhancing accessibility for a diverse user base. From a security perspective, the site uses HTTPS and provides secure login mechanisms including password and QR code authentication. However, the absence of security headers and public privacy or cookie policies indicates room for improvement in security best practices and compliance. No contact or incident response information is publicly available, which may impact user trust and support responsiveness. The WHOIS data is not publicly accessible due to TLD restrictions and privacy protections, but the domain appears consistent with the brand and business purpose. Overall, the website demonstrates a moderate level of technical maturity and business credibility but lacks comprehensive privacy and security disclosures. Strategic enhancements in security headers, privacy policies, and public contact information would strengthen the platform's trustworthiness and compliance posture.