Security Directory

M

Miele Australia

miele.com.au

63

Miele Australia operates as a premium retailer of luxury home appliances, targeting domestic customers within Australia. The website showcases the brand's commitment to quality and superior craftsmanship, offering product sales, customer support, and subscription services. The digital presence is professionally maintained with consistent branding and clear navigation, supporting a strong market position in the retail sector. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and LiveChat for customer engagement, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional image aligned with the Miele brand.

M

Miele

miele.ae

63

Miele UAE operates as a premium domestic and commercial appliance provider, representing the German Miele brand in the UAE market. The website serves as a digital storefront and information portal targeting domestic customers, offering product information, events, and an online shop. The brand is positioned as a premium manufacturer and retailer with a strong market presence in the UAE. Technically, the website uses modern JavaScript libraries, Google Tag Manager for analytics, and a third-party cookie consent mechanism, indicating a moderate to good digital maturity. The site is accessible, mobile-optimized to a basic degree, and SEO-friendly. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Overall, the domain registration aligns well with the brand, supporting legitimacy and trustworthiness.

M

Miele Sdn.Bhd.

miele.my

65

Miele Malaysia operates as a premium appliance brand subsidiary of the German-based Miele group, focusing on high-quality home appliances for the Malaysian domestic market. The website presents a professional and consistent brand image with clear navigation and relevant content about products, services, and customer support. The technical infrastructure leverages modern JavaScript libraries and Google Tag Manager for analytics and marketing, hosted on Akamai's CDN network, ensuring moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism, though improvements are recommended in DNSSEC deployment and security header implementation. Privacy compliance is strong with clear policies and GDPR-aligned consent mechanisms. Overall, the website reflects a trustworthy and credible business presence with room for enhanced security transparency and incident response readiness.

M

Miele

miele.kz

65

Miele Kazakhstan operates as the official online presence for the Miele brand in Kazakhstan, focusing on retailing household appliances and providing customer service. The website is professionally designed with clear navigation and content relevant to the local market, primarily in Russian. It offers information about products, store locations, events, and customer support. Technically, the site uses standard web technologies including JavaScript, jQuery, and Flexslider, and implements HTTPS with cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with encrypted connections and no visible vulnerabilities, though some security headers and incident response details are absent. Overall, the site is legitimate and trustworthy, though WHOIS data is unavailable likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving mobile optimization.

M

Miele India Pvt. Ltd.

miele.in

66

Miele India Pvt. Ltd. operates a premium luxury home and kitchen appliances website targeting domestic customers in India. The company is positioned as a high-end brand with a focus on durability and performance, supported by a dealer network and customer service. The website is professionally designed with consistent branding and provides comprehensive information about products, services, and corporate information. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Akamai CDN for performance and analytics. Mobile optimization and accessibility are basic but functional. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and legitimate, with WHOIS data consistent with the business entity. Recommendations include enhancing security headers and publishing a security policy to improve trust and compliance.

M

Miele Electrodomésticos Ltda.

miele.cl

52

Miele Electrodomésticos Ltda. operates the official Chilean website for the premium appliance brand Miele. The site primarily serves as an informational portal, redirecting customer service and support inquiries to the official importer, Casa Vita SpA. The business model focuses on brand representation and customer support facilitation rather than direct sales. The website targets Chilean consumers interested in Miele products, emphasizing quality and service through the local importer. Technically, the website employs standard web technologies including JavaScript, jQuery, Google Tag Manager, and Google Analytics for tracking. The site is accessible over HTTPS, but lacks advanced security headers and comprehensive privacy or cookie policies. Mobile optimization and SEO are basic, with room for improvement in accessibility and metadata. From a security perspective, the site shows a moderate posture with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers and incident response contacts indicates potential gaps. The WHOIS data is unavailable due to query failure, which limits domain legitimacy verification and slightly reduces trust. Overall, the website is functional and moderately professional but would benefit from enhanced privacy compliance, security hardening, and improved technical SEO. The risk level is moderate, with no critical vulnerabilities detected but some compliance and trust issues to address.

M

Miele (PTY) Ltd.

miele.co.za

51

Miele (PTY) Ltd. operates a premium home appliance retail website targeting the South African market. The site offers a comprehensive online shop, event information, and store locations, positioning itself as a trusted brand with a focus on quality and longevity of products. The website is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and responsive design elements, though mobile optimization is basic. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks some advanced security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

B

BizBox

bizboxadmin.com

21

BizBox operates a technology platform providing a secure login portal for business administration purposes. The website is primarily a login page with basic form validation and minimal content beyond the login functionality. The platform appears targeted at business users requiring access to administrative services, likely under a SaaS or subscription model. The domain is mature, registered since 2012, and hosted on AWS infrastructure, indicating a stable technical foundation. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Fonts, with DNS hosted on Amazon AWS servers. The site shows basic mobile optimization and accessibility but lacks advanced SEO and security headers. No CMS or frameworks are explicitly detected. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site uses a login form with client-side validation but lacks visible security headers and DNSSEC is not enabled. No privacy policy, terms of service, or incident response information is published, which limits transparency and compliance posture. Cookie usage is disclosed but without a consent mechanism. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional but basic, with moderate trustworthiness based on domain age and hosting. Key improvements include publishing privacy and security policies, enabling DNSSEC, adding security headers, and providing clear contact information to enhance compliance and user trust.

A

AUTOPOLIS

autopolis.sk

60

AUTOPOLIS.sk is a well-established Slovak automotive dealership specializing in Hyundai and Ford vehicles, offering a comprehensive range of services including new and used car sales, authorized servicing, spare parts, vehicle buyback, fleet offers, insurance, and car rental. The website targets consumers and businesses in Slovakia, positioning itself as a regional leader in automotive sales and services. The business has been operational since 2003, supported by a domain age consistent with its market presence. Technically, the website employs modern web technologies such as Bootstrap, Vue.js, and Google Fonts, hosted on Websupport infrastructure with DNSSEC enabled, ensuring a secure and reliable platform. The site is mobile optimized with good SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in speed and technical modernization. From a security perspective, the site enforces HTTPS and DNSSEC, but lacks some advanced security headers and explicit security policies. There is no visible privacy policy or terms of service, which presents compliance gaps, especially regarding GDPR. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, AUTOPOLIS.sk demonstrates a solid business and technical foundation with good security posture but requires enhancements in privacy compliance and security policy transparency to improve trust and regulatory adherence.

N

Nubium Development SE

nubium.cz

52

Nubium Development SE is a Czech-based technology company founded in 2013, specializing in comprehensive web application solutions including cloud storage, CDN, video encoding, cybersecurity, and Linux systems management. The company positions itself as a leader in high-load applications and data distribution networks, targeting businesses across various industries seeking scalable and secure digital infrastructure. The website reflects a professional and consistent brand image with clear service offerings and a focus on sustainability. Technically, the website employs standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with a moderate performance profile and good mobile optimization. However, there is a lack of advanced security headers and no visible CMS or hosting provider information. SEO and accessibility are basic but adequate for the site’s scope. From a security perspective, the site uses HTTPS (assumed from URL), but lacks explicit security headers and published security policies. No vulnerability disclosure or incident response contacts are provided, which could be improved to enhance trust and compliance. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Overall, the website is safe, professional, and business-focused with no adult or questionable content. The domain WHOIS data aligns well with the company’s stated information, supporting legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding incident response information to strengthen security posture and regulatory compliance.

N

NodeSource

nodesource.com

61

NodeSource is a technology company specializing in providing advanced Node.js performance and security solutions for mission-critical applications. Their product suite includes N|Solid, N|Solid Copilot, and N|Solid Runtime, complemented by expert services such as consulting, training, and legacy support. The company targets organizations and developers seeking to optimize and secure their Node.js environments, boasting reputable clients like NASA and Mastercard. The website reflects a mature, professional business with a strong market position in the Node.js ecosystem. Technically, the website is built on modern frameworks including Next.js and React, hosted likely on AWS infrastructure, and integrates various marketing and analytics tools such as Google Tag Manager and HubSpot. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is partially addressed with privacy and cookie policies present, though no active cookie consent mechanism is implemented. Contact information is primarily via web forms, with no direct emails or phone numbers published. Overall, NodeSource demonstrates a strong security posture and business credibility, with minor improvements recommended in DNS security and privacy consent mechanisms to enhance trust and compliance.

K

Kyowa Kirin Co., Ltd.

kyowa-kirin.com

61

Kyowa Kirin Co., Ltd. is a Japan-based global specialty pharmaceutical company focused on developing innovative specialty drugs, particularly antibody-based therapies for cancer, kidney disease, and immune system diseases. The company operates globally with subsidiaries and partners across Asia Pacific, North America, and EMEA regions, emphasizing research and development in life sciences and gene therapy. The website reflects a mature digital presence with comprehensive corporate information, multimedia content, and global network details. Technically, the site uses modern JavaScript libraries, tag management, and cookie consent tools, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy compliance, though explicit security policies and incident response contacts are absent. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the overall legitimacy indicated by the website content and corporate branding. Strategic recommendations include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust.

F

FUJIFILM Corporation

fujifilm.com

74

FUJIFILM Corporation is a globally recognized enterprise specializing in imaging, healthcare, and industrial products. The company operates a comprehensive global network of subsidiaries and offices, providing a wide range of products including films, digital cameras, medical systems, graphic arts, and life science products. The website reflects a mature, professional digital presence with strong branding consistency and extensive regional localization. Technically, the site employs modern web technologies, including Google Tag Manager and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. Security posture is robust with HTTPS enforcement and standard security headers, though the absence of a public security policy or vulnerability disclosure page suggests room for improvement. Overall, the website is trustworthy, well-maintained, and aligned with the company's global stature.

Sjóvá-Almennar tryggingar hf. is a well-established Icelandic insurance company founded in 1918, offering a comprehensive range of personal and business insurance products. The company holds a leading market position in Iceland, evidenced by its consistent top ranking in customer satisfaction surveys over the past eight years. Their website reflects a professional and customer-focused approach, providing easy access to services such as claims reporting and roadside assistance. The target audience includes Icelandic individuals and businesses seeking reliable insurance solutions. Technically, the website is built on modern frameworks like Next.js and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policy and incident response information are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible digital presence for the company.

Z

ZONER software, a.s.

zoner.sk

59

ZONER software, a.s. operates the website zoner.sk, offering a comprehensive photo and video editing software suite targeted primarily at consumers, businesses, and educational institutions in Slovakia and the Czech Republic. The company holds a strong market position as a leading Czech photo software provider, evidenced by the prestigious EISA PHOTO SOFTWARE 2025-2026 award. Their business model revolves around software sales and subscriptions, supported by a rich content ecosystem including tutorials, user testimonials, and additional photo-related services such as cloud storage and merchandise.

Z

ZONER software, a.s.

zoner.com

65

Zoner Studio is a professional photo and video editing software developed by ZONER software, a.s., a Czech technology company. The website positions itself as an award-winning solution, notably recognized by the EISA Photo Software award for 2025-2026. It targets photographers and content creators ranging from beginners to advanced users, offering a comprehensive suite of editing, organizing, and cloud storage tools. The business model includes software sales and subscription services with a free trial period. The website is well-branded, multilingual, and provides extensive educational content to support users.

A

Avager s.r.o.

pagio.cz

60

Avager s.r.o. is a Czech-based company specializing in B2B and enterprise e-commerce solutions, focusing on digitalizing business processes and accelerating online commerce. Their proprietary Avager Business Platform offers scalable, secure, and fast e-commerce capabilities tailored for demanding enterprise clients. The company targets manufacturing firms, wholesalers, and various industries including automotive, agriculture, and services. With over 15 years of specialization, Avager holds a strong market position supported by a portfolio of top clients and multilingual platform support. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates Matomo and Google Tag Manager for analytics, and uses Statamic CMS. The site is well-optimized for mobile and SEO, with a professional and consistent design. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

S

Singer

husqvarnaviking.com

74

Singer is a well-established brand specializing in sewing and embroidery machines, with a history dating back to 1872. The website serves as an official e-commerce platform for Singer and its related brands such as Husqvarna Viking and PFAFF, targeting consumers and creators interested in sewing products. The site leverages Shopify Plus as its platform, integrating multiple marketing, analytics, and security tools to enhance user experience and operational efficiency. Despite the lack of publicly available WHOIS data, the website demonstrates strong branding and professional design, indicating a mature digital presence. Security measures such as HTTPS and fraud prevention services are in place, though explicit privacy and cookie policies were not detected in the provided content. Overall, the site presents a trustworthy and professional front for the brand.

H

Husqvarna AB

husqvarnaconstruction.com

65

Husqvarna Construction is a division of Husqvarna AB, a well-established Swedish manufacturing company specializing in construction products, machines, and diamond tools. The website targets construction professionals and businesses, offering a broad range of equipment for cutting, drilling, demolishing, and polishing concrete. The site is part of a larger Husqvarna Group ecosystem, linking to related brand domains such as Husqvarna Bicycles and Husqvarna Motorcycles, reinforcing its market presence and brand consistency. Technically, the website employs modern React technology with good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled and some best practices observed, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap for GDPR compliance. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

H

Husqvarna Bicycles

husqvarna-bicycles.com

69

Husqvarna Bicycles operates a professional and well-structured website focused on electric and mountain bicycles, targeting consumers interested in high-quality e-bikes and related apparel. The site demonstrates a mature digital presence with comprehensive product navigation and multilingual support. Technically, the website leverages Adobe Experience Manager CMS, integrates modern JavaScript libraries, and employs Google Tag Manager and OneTrust for analytics and cookie consent management, reflecting a solid digital infrastructure. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through cookie consent mechanisms and a comprehensive privacy policy. However, explicit contact information and security policies such as incident response or vulnerability disclosure are not present, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience.

H

Husqvarna Group

husqvarnagroup.com

76

Husqvarna Group is a global leader in manufacturing products and services that shape green spaces and urban environments. The company emphasizes user-centered and sustainable solutions, targeting customers worldwide in landscaping, gardening, and construction sectors. Their website reflects a mature digital presence built on Drupal CMS, with modern design, good mobile optimization, and comprehensive corporate content including investor relations and sustainability initiatives. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. The absence of WHOIS domain registration data is a notable concern, requiring further verification to confirm domain legitimacy. Overall, the website is professional, trustworthy, and well-structured, supporting Husqvarna Group's market position as an established manufacturing enterprise.

J

JURA Elektroapparate AG

juragastroworld.de

58

JURA Deutschland Gastro is a professional division of JURA Elektroapparate AG, specializing in the sale and support of professional coffee machines and accessories for the hospitality sector in Germany. The website provides detailed product information, support resources, and partner network access tailored to professional customers. The company is positioned as a premium brand with a strong market presence in Germany's hospitality industry. Technically, the site is built on ASP.NET WebForms with jQuery and integrates Google Tag Manager for analytics. The site is mobile optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and secure forms, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. No direct contact emails or phone numbers are exposed on the site, with contact facilitated via support pages. Overall, the site is trustworthy, professional, and safe for general audiences.

R

REFRESHER Media, s.r.o.

refresher.cz

66

REFRESHER.cz is a well-established Czech lifestyle and news media platform operated by REFRESHER Media, s.r.o., founded in 2013. It targets the modern generation with diverse content including lifestyle, culture, tech, sports, and news. The platform offers premium subscription services, e-commerce, and multimedia content, positioning itself as a leading media brand in the Czech and Slovak markets. Technically, the website employs modern web technologies, including JavaScript frameworks, AMP components, and Cloudflare for hosting and DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, consent management, and reputable ad and tracking networks, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, good privacy compliance, and a trustworthy domain registration history, making it a reliable and mature online media presence.

F

Fastmail

fastmailstatus.com

60

Fastmailstatus.com is a dedicated status page for Fastmail, an established email service provider founded in 2014. The website provides real-time operational status updates for various Fastmail services including general availability, web client and mobile app, login and sessions, mail delivery, mail access (IMAP/POP), and calendar (CalDAV). The site is designed with modern web technologies such as Next.js and React, ensuring good performance and mobile optimization. The domain is registered with a reputable registrar, Gandi SAS, and shows no signs of suspicious activity or privacy protection, indicating a legitimate and trustworthy service. Technically, the website is well-implemented with fast loading times and good accessibility features. However, it lacks some important security headers and DNSSEC is not enabled, which could be improved to enhance security. The site uses HTTPS, ensuring encrypted communication. Privacy compliance is minimal on this status page, with no visible privacy or cookie policies, which is a gap in regulatory adherence. From a security perspective, the site demonstrates a solid baseline with HTTPS and domain transfer protection but lacks published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the site is safe, professional, and trustworthy, but could benefit from enhanced privacy and security disclosures. Strategically, Fastmailstatus.com serves as a transparent communication channel for Fastmail customers, reinforcing trust through operational transparency. To further improve, the site should implement privacy and cookie policies, add security headers, enable DNSSEC, and provide clear contact information for security incidents.

A

Association for Diagnostics & Laboratory Medicine

aacc.org

10

The Association for Diagnostics & Laboratory Medicine (ADLM) is a professional organization focused on laboratory medicine and clinical chemistry. Founded in 2023, it serves a global audience of clinical laboratorians, researchers, and healthcare professionals by providing educational resources, advocacy, networking opportunities, and scientific publications. The website reflects a well-structured membership-based model emphasizing knowledge exchange and professional development. ADLM holds a strong market position as a recognized leader in laboratory medicine with a medium-sized organizational footprint based in the United States. Technically, the website is built on a modern stack including Sitecore CMS, Cloudflare DNS, and integrates advanced search capabilities via Coveo. It uses multiple third-party marketing and analytics tools such as HubSpot and Google Tag Manager. The site is mobile optimized, accessible, and SEO-friendly, with good performance metrics. However, DNSSEC is not enabled, and no explicit cookie consent mechanism is present, which are areas for improvement. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain changes. No critical vulnerabilities or exposed sensitive data were found. The absence of explicit security policies and incident response information, as well as missing security headers, suggest room for enhancing transparency and security posture. The WHOIS data is consistent with the organization's profile, showing no privacy protection and a domain age appropriate for the business history. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic recommendations include enabling DNSSEC, implementing cookie consent for privacy compliance, publishing security and incident response policies, and auditing third-party scripts to maintain security hygiene.

A

Académie royale de Belgique

lacademie.tv

9

lacademie.tv is a French-language academic video platform affiliated with the Académie royale de Belgique, providing access to lectures, conferences, and scholarly content primarily targeting academics, students, and the interested public. The platform is supported by multiple reputable academic and cultural partners, positioning it as a niche educational media provider in Belgium. Technically, the website uses modern web standards with responsive design and JavaScript libraries such as Swiper.js for UI components. The hosting is via OVH sas, a known registrar and hosting provider. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. The domain is currently expired, posing a risk to service continuity. Privacy compliance is weak, with no cookie consent mechanism and limited GDPR indicators. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is professional and trustworthy but requires domain renewal and enhanced privacy and security measures.

L

Les Trésors de l'Académie Royale de Belgique - Bibliothèque & Archives

tresorsdelacademie.be

10

Les Trésors de l'Académie Royale de Belgique is a cultural and educational institution representing the library and archives of the Royal Academy of Belgium. The website provides access to extensive collections of books, archives, artistic heritage, and historical documents, targeting researchers, academics, and the general public interested in Belgian heritage. It maintains a professional online presence with clear navigation and institutional partnerships, reflecting its role as a specialized academic resource. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and Swiper.js for interactive content. Hosted by OVH, it employs HTTPS with valid SSL certificates ensuring secure communication. However, it lacks visible security headers and advanced accessibility features, and no CMS or analytics tools are explicitly detected, indicating a relatively simple but functional technical infrastructure. From a security perspective, the site enforces HTTPS but lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for GDPR compliance and user trust. No forms or sensitive data collection points are present on the homepage, reducing immediate risk exposure. The absence of incident response contacts and data protection officer information suggests room for improvement in security governance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to align with best practices and regulatory requirements.

K

Kambojabet

yoanderoeck.com

7

Kambojabet operates as an online gaming and betting platform primarily targeting the Indonesian market, offering various gambling services including live casino, sports betting, slots, and poker. The website positions itself as a leading and legally recognized service in Indonesia, with a focus on small-stake betting. Technically, the site uses standard web technologies with Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. The site is mobile-optimized and includes structured data for SEO and social media integration. Security posture is weak due to missing policies, lack of security headers, and suspicious WHOIS data. Overall, the site presents moderate risk due to gambling content and questionable domain legitimacy.

I

ISTI MIRANT STELLA

isti-mirant-stella.com

9

ISTI MIRANT STELLA is a small French publishing house specializing in the publication of poetry collections, essays, and documents related to music and correspondence. The website presents a professional and artistic image, targeting a niche audience interested in literary and musical works. The business model revolves around direct online sales through a Squarespace-powered boutique. Technically, the website is built on the Squarespace platform, leveraging standard web technologies and fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced headers like HSTS and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and presentation suggest a genuine small publisher. Overall, the site is functional and trustworthy from a user perspective but would benefit from improved compliance and domain registration transparency.

A

Alice Savoie

frenchtype.com

54

Alice Savoie operates a professional portfolio website showcasing her work as an independent French type designer. The site presents a curated collection of type design projects and research, targeting design professionals and typography enthusiasts. The business model centers on personal branding and promotion of design services. The website is hosted on OVH sas and built using the Cargo Collective platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and policies. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is trustworthy and legitimate, with consistent domain registration data and no suspicious indicators.

P

Philippe Tytgat

philippetytgat.fr

42

Philippe Tytgat's website serves as a personal portfolio showcasing graphic design services including identity, event, illustration, edition, signage, and typography. The site targets a general audience interested in creative design work, positioning itself as a niche individual designer portfolio. The business appears to be a small-scale operation founded in 2020, with a consistent and professional branding approach. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Slick Carousel, hosted by OVH. The site is moderately optimized for mobile devices and has a good user experience with clear navigation and relevant content. Security posture is basic, with no advanced security headers or policies detected, and no privacy or cookie policies present, indicating room for improvement in compliance and security best practices. No contact information or social media links are explicitly provided, which may limit user engagement and trust. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and clearer contact channels.

É

Éloïsa Pérez

eloisaperez.fr

52

Éloïsa Pérez is a graphic designer and researcher specializing in book design, typography, and educational tools, with a focus on pedagogy and learning processes. The website serves as a portfolio and research platform showcasing projects, workshops, and publications primarily targeting educational institutions and design communities in France. The business operates as a small entity with a niche market position emphasizing academic and practical design research. Technically, the website uses standard HTML, CSS, and JavaScript with jQuery and Google Analytics integration, hosted by OVH. While the site is content-rich and professionally presented, it lacks privacy and cookie policies, and security headers are not detected, indicating areas for compliance and security improvement. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website demonstrates good professionalism and trustworthiness but should enhance privacy compliance and security posture.

R

Rafael Ribas

rafaelribas.com

52

Rafael Ribas is a Paris-based professional specializing in art direction and graphic design, with a focus on type design, branding, and editorial projects. The website serves as a portfolio showcasing collaborations with notable clients such as Louis Vuitton and Musée d’Orsay, positioning the business as a niche creative service provider in the design industry. The target audience includes design professionals and clients seeking high-quality art direction and custom typography services. The business model is primarily service and portfolio-based, emphasizing creative output and client engagement. Technically, the website employs modern frontend technologies including Bootstrap 4 and jQuery, hosted by OVH sas. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No CMS or advanced platforms are detected, indicating a custom or static site approach. External links to collaborators and partners in the design field enrich the ecosystem. From a security perspective, the site uses HTTPS and has domain locking enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No forms or user input fields reduce attack vectors, and no analytics or tracking scripts indicate minimal user tracking. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Overall, the website is professional and trustworthy with good business credibility and content quality. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence, supporting long-term trust and risk mitigation.

R

Randi Nygård

randinygard.com

57

The website www.randinygard.com serves as an online portfolio for the artist Randi Nygård, showcasing a variety of contemporary art installations, sculptures, and mixed media works. The site is professionally designed using the Squarespace platform, featuring galleries, exhibitions, and descriptive texts aimed at art enthusiasts and cultural institutions. The technical infrastructure is based on Squarespace with modern JavaScript libraries and Typekit fonts, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content itself is professional and consistent with an artist's portfolio. Overall, the site presents a moderate risk profile with recommendations to improve security headers, privacy policies, and domain registration transparency.

S

Sandrine Nugue Studio

sandrinenugue.com

48

Sandrine Nugue Studio is a small independent design studio specializing in type design, lettering, and graphic design services. The website serves primarily as a portfolio showcasing various projects including publications, signage, pictograms, and performance scores. The target audience includes design professionals, artists, and clients interested in typography and graphic design. The business model is focused on creative services and portfolio presentation, with a market position as a niche player in the typography and graphic design space. Technically, the website is built with standard HTML5, CSS3, and JavaScript, hosted by OVH sas. It features responsive images and a clean, well-structured design optimized for mobile devices. However, it lacks advanced frameworks or CMS platforms and does not use analytics or marketing tools. Performance is moderate with good mobile optimization and basic accessibility. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, appropriate for the business type. Overall, the website is professional and trustworthy but has gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's credibility and reduce risk.

F

Fanette Mellier

fanettemellier.com

61

Fanette Mellier's website serves as a professional portfolio showcasing graphic design and printed matter projects, including exhibitions, books, and objects. The business appears to be a small creative entity based in France, with a domain registered since 2006, indicating a well-established presence. The site content is rich in artistic projects and external references to partner sites and social media, targeting a general audience interested in graphic arts. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on alwaysdata.com with HTTPS enabled, ensuring secure access. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy and compliance features are lacking, with no visible privacy or cookie policies, GDPR compliance statements, or contact information, which could pose compliance risks. Overall, the site is professionally designed with good user experience but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance.

B

Bureau Mia

bureaumia.ch

40

The website 'Bureau Mia' at bureaumia.ch currently presents minimal content with no visible business information, contact details, or policies. The site loads JavaScript assets but lacks metadata, structured data, or any user-facing text content. This suggests the site may be under development or a placeholder. The technical infrastructure appears basic with no detected CMS or frameworks. Security posture cannot be assessed due to lack of data on HTTPS or headers. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site lacks essential elements for trust and usability.

L

Lecturio

lecturio.com

63

Lecturio is a large, established online education platform specializing in medical and nursing education. It offers a comprehensive suite of services including online courses, question banks, and smart quizzes designed to help healthcare students and professionals master complex concepts. The platform is AI-powered and integrates curriculum tracking to enhance learning outcomes. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and hosting likely via WP Engine. It demonstrates good SEO practices, mobile optimization, and uses Google Tag Manager and CookiePro for analytics and privacy compliance. Security-wise, the site enforces HTTPS, implements security headers, and has a cookie consent mechanism, though it lacks a public security policy or vulnerability disclosure page. The WHOIS data is unavailable, which limits domain registration insights, but the professional presentation and linked subdomains support legitimacy. Overall, Lecturio presents a strong digital presence with a good security posture and compliance maturity.

N

Naturamed services s.r.o.

naturamed-services.cz

54

NaturaMed Services is a Czech-based call center company specializing in customer satisfaction services for NaturaMed Pharmaceuticals s.r.o., a Czech company with Norwegian roots selling premium dietary supplements. The company has a stable market presence with 19 years of experience and over 2.7 million customers served. Their business model focuses on customer service and sales support through a call center located in České Budějovice. The website targets job seekers interested in customer service roles and provides detailed job postings and benefits. Technically, the website employs modern JavaScript technologies and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized with good SEO practices and clear navigation. However, no CMS or hosting provider information is explicitly detected. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain is a concern, reducing trustworthiness, although the website content and business information appear legitimate. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for the business, but improvements in security transparency and domain registration information are recommended to enhance trust and compliance.

B

BPA sport marketing a.s.

nhl.cz

44

NHL.cz is a well-established Czech sports media website focused on hockey, providing comprehensive news, statistics, live scores, and video content related to NHL and other hockey leagues. Operated by BPA sport marketing a.s., the site holds a strong market position within the Czech hockey community and maintains official NHL branding and partnerships. The website demonstrates a mature digital infrastructure with modern tracking and consent management tools, good mobile optimization, and a professional content presentation. Security posture is solid with HTTPS and basic security headers, though there is room for improvement in advanced security policies and incident response transparency. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, NHL.cz presents a trustworthy and professional platform for hockey fans and stakeholders.

I

IT-Slovnik.cz team

it-slovnik.cz

44

IT-Slovnik.cz is a Czech language online dictionary specializing in foreign words and technical terms, originally focused on IT but expanded to other fields. The website serves a niche audience interested in technology and related terminology, providing a searchable database with user contributions. It has been operational since 2008, indicating a mature presence in its market segment. The business model is informational and community-driven, with no evident commercial transactions on the homepage. Technically, the site uses standard web technologies including JavaScript and Google Tag Manager for analytics. The site is served over HTTPS, ensuring secure communication. However, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security best practices. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured data. From a security perspective, the site demonstrates basic good practices such as HTTPS usage and no visible sensitive data exposure. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, IT-Slovnik.cz is a trustworthy, well-established informational resource with good content quality and professional presentation. Strategic improvements in security headers, privacy compliance (cookie consent), and security policy transparency would strengthen its security posture and regulatory compliance.

B

BiznisWeb s.r.o.

flox.sk

62

BiznisWeb s.r.o. operates a mature and well-established e-commerce platform primarily targeting small and medium-sized businesses in Slovakia and the Czech Republic. The company offers a SaaS model enabling users to quickly create and manage their own online stores with customizable templates, multi-language support, and integrated payment and shipping options. The website reflects a professional and user-friendly design with strong customer testimonials and comprehensive service offerings. Technically, the site employs modern JavaScript frameworks, tracking tools with consent management, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trust.

Fler.cz is an established Czech e-commerce marketplace specializing in handmade and craft products, hosting over two million items from tens of thousands of creators. The platform targets a general audience interested in unique, original products. The website uses modern JavaScript technologies including custom web components but lacks visible CMS or hosting details. The provided HTML content is minimal, showing basic metadata and a human detection script, but no visible contact or policy pages. Security posture is weak due to missing security headers, no visible HTTPS confirmation, and absent privacy or cookie policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site appears functional but lacks critical compliance and security disclosures, leading to a moderate risk profile.

P

Pražská vydavatelská společnost

casopisyprovas.cz

50

Casopisyprovas.cz is an e-commerce website specializing in the sale and subscription of various magazines primarily targeting Czech and Slovak customers. The business offers a wide range of magazine titles, including Pes přítel člověka, Praktik, Méďa Pusík, and others, with options for purchasing individual issues or subscriptions. The site also provides pre-orders for calendars and emphasizes customer support through multiple contact channels. Technically, the website is built on the Eshop-rychle.cz platform, uses HTTPS, and integrates Matomo analytics for visitor tracking. The site is mobile-optimized and provides cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS and secure forms, though the absence of visible security headers and missing WHOIS data are notable gaps. Overall, the website presents a professional and trustworthy front for magazine retail, but domain registration transparency should be improved to enhance trust.

B

BASU RESTAURANT

basu.cz

55

BASU RESTAURANT is a small hospitality business specializing in authentic Sichuan cuisine and hotpot dining experiences located in Prague, Czech Republic. The website presents a professional and visually appealing interface built on WordPress with the Flatsome theme, targeting general audiences interested in Asian culinary experiences. The business offers two main branches: BASU Sichuan Cuisine & Sushi and BASU Hotpot, both located at the same physical address in central Prague. Contact details including phone, email, and social media are clearly provided, enhancing customer accessibility. Technically, the website leverages modern web technologies including WordPress CMS, Google Fonts, and responsive design techniques ensuring good mobile optimization and user experience. However, the site lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS registration data from the CZ.NIC registry introduces some uncertainty regarding domain legitimacy, although the website content and contact information appear consistent with a legitimate local business. From a security perspective, HTTPS is properly implemented, but the lack of security headers and vulnerability disclosure mechanisms suggests room for improvement. No signs of malware, phishing, or adult content were detected, and the site maintains a safe content rating suitable for general audiences. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

E

Empire Hall

empire-hall.cz

9

Empire Hall is a historic event venue located in the Slovanský dům building in Prague, offering elegant Art Deco style spaces for corporate conferences, concerts, weddings, and private parties. The venue caters to a diverse audience including corporate clients and event organizers, with a capacity of up to 900 guests. The website is professionally designed using the Tilda CMS platform, featuring responsive design, client-side form validation, and integration with social media and 3D virtual tours. However, the absence of publicly available WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site presents a trustworthy and professional image suitable for its hospitality industry niche.

C

Classic Barber Shop

classicbarbershop.cz

44

Classic Barber Shop is a small, established barbershop located in the center of Prague, specializing in professional hair and beard grooming services. The business emphasizes quality customer care, premium and classic cosmetic products, and offers additional services such as workshops and gift vouchers. The website supports online booking through a third-party platform and maintains active social media profiles. Technically, the site uses modern tracking and analytics tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers. Overall, the site is professional and trustworthy but could improve privacy transparency and security hardening.

T

Hrot24.cz

tydenikhrot.cz

48

Hrot24.cz is a Czech news media website focusing on economy, politics, business, technology, and society. It offers news articles, commentaries, podcasts, and a monthly magazine subscription, targeting Czech-speaking audiences interested in these sectors. The website is professionally designed with consistent branding and provides content from reputable sources and authors. Technically, it uses modern web technologies such as Next.js and React, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and privacy SDK integration, but lacks explicit security headers and published privacy policies. No WHOIS data is available, which reduces trustworthiness from a domain registration perspective. Overall, the site is a legitimate media outlet with room for improvement in privacy and security transparency.

M

Mondo Spa

mondoworldwide.com

62

Mondo Spa operates a professional website focused on sport flooring systems and artificial turf, targeting sports facilities and athletes globally. The company positions itself as a leading provider of high-quality sport surfaces, supporting athletes in achieving outstanding results. The website demonstrates a moderate to advanced digital maturity with modern JavaScript technologies, CDN hosting, and integration of marketing and analytics tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to improve trust. Overall, the website is well-designed and functional but would benefit from enhanced privacy, security, and compliance disclosures.

The Gates Foundation website represents a globally recognized philanthropic organization dedicated to fighting poverty, disease, and inequity worldwide. The site targets a broad audience including donors, partners, and stakeholders in global health and development. It offers comprehensive information about its initiatives and programs, reflecting its position as a leading non-profit entity. The website's content is professionally presented with clear navigation and consistent branding, reinforcing its credibility and trustworthiness. From a technical perspective, the site employs modern web technologies including Google Tag Manager, Google reCAPTCHA for bot protection, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced and multiple security headers present. The use of reCAPTCHA and cookie consent mechanisms further enhance security and privacy compliance. However, the absence of a publicly available security policy or incident response information is a gap that could be addressed to improve transparency. No vulnerabilities or exposed sensitive data were detected. Overall, the website is a secure, professional, and privacy-conscious platform that effectively supports the Gates Foundation's mission. The lack of WHOIS data limits domain registration trust analysis, but the site's content and branding strongly support its legitimacy. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure information, and maintaining regular audits of third-party scripts to sustain security and compliance.