Security Directory

M

Maldives Space Research Organisation

msro.mv

59

The Maldives Space Research Organisation (MSRO) is a governmental or non-profit entity focused on advancing space research, technology, and education within the Maldives. The website presents a professional and consistent brand image, targeting a general audience interested in space and science. The organization appears to be small in size and operates primarily in the government and education sectors. Technically, the website is built using Framer, leveraging modern web fonts and JavaScript, with moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, and no contact information is readily available, which impacts user trust and compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response details. Analytics are implemented via Metricool without visible consent mechanisms, indicating privacy compliance gaps. WHOIS data is consistent with the organization's identity, supporting legitimacy. Overall, the website is functional and professional but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

S

Slovak PRO

slovakpro.org

59

Slovak PRO is a small professional organization dedicated to connecting Slovak professionals worldwide through networking events and community initiatives. The website is hosted on Squarespace and features a clean, professional design with good mobile optimization and clear navigation. The organization leverages social media platforms such as LinkedIn, Facebook, and Instagram to engage its audience. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating a good baseline security posture. However, the absence of privacy and cookie policies, as well as lack of visible contact information, represents gaps in privacy compliance and user trust. The WHOIS data is unavailable due to privacy protection, which is common for small organizations but slightly reduces transparency. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security headers.

A

Aspire Themes, LLC

aspirethemes.com

58

Aspire Themes, LLC is a specialized provider of premium Ghost CMS themes targeting publishers, bloggers, and newsletter creators. Established in 2015, the company offers a curated selection of professional, accessible, and customizable themes trusted by notable clients such as Harvard and Quillette, as well as thousands of other customers. Their business model centers on one-time purchases with free support and updates, positioning them as a niche player in the Ghost theme market with a strong reputation for quality and customer satisfaction. Technically, the website is built using modern web standards and tools including Jekyll for static site generation, integrates Google Tag Manager and Microsoft Clarity for analytics, and demonstrates excellent mobile optimization and SEO practices. The site is hosted on a domain registered with NameCheap, with HTTPS enforced and no signs of blocking or WAF interference. Security posture is solid with no exposed vulnerabilities, though improvements could be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website reflects a professional and trustworthy digital presence with room for enhanced security and privacy transparency.

F

Forsvaret

forsvaret.no

70

Forsvaret.no is the official website of the Norwegian Armed Forces, providing comprehensive information about military tasks, training, education, recruitment, veteran affairs, and public communication. The site targets Norwegian citizens interested in military service and the general public seeking authoritative defense information. The website demonstrates a high level of professionalism, with clear navigation, consistent branding, and relevant content tailored to its audience. Technically, the site employs modern web technologies including Vue.js and Google Tag Manager, and appears to be built on the Enonic CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanisms. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data is not publicly available due to Norid privacy policies, but the domain is consistent with an official Norwegian government entity. Overall, Forsvaret.no presents a trustworthy, secure, and well-maintained digital presence for the Norwegian Armed Forces, with recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen its security posture.

B

Bundesschülerrat im Bund der Freien Waldorfschulen e.V.

waldorfsv.de

49

WaldorfSV is a German non-profit organization representing students of Waldorf schools at the federal level. The website serves as an informational and organizational platform, providing details about their activities, events such as the Bundesschüler*innentagung, and sections dedicated to philosophical and educational policy matters. The organization targets students and stakeholders within the Waldorf education community in Germany. Technically, the website is built on WordPress with Elementor and uses common plugins like Events Manager and Slider Revolution. It is hosted on Goneo servers and employs HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is adequate with no critical vulnerabilities detected, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

X

Security Verification

xiaohongshu.com

49

The analyzed URL is a security verification CAPTCHA page for the domain www.xiaohongshu.com, which is a major Chinese social commerce platform. This page is designed to prevent automated access and bot traffic, indicating the presence of a Web Application Firewall or similar security mechanism. The page content is minimal and focused solely on user verification, lacking any business or marketing content. The technical infrastructure uses modern JavaScript frameworks such as Vue.js and loads resources from multiple CDN subdomains, indicating a mature content delivery setup. However, the absence of WHOIS data and registrant information reduces transparency and trustworthiness. No privacy, cookie, or terms of service policies are present on this page, and no contact information is provided, limiting compliance and user trust. Overall, the site is protected by security controls but this specific page is not representative of the full business website.

LEAB is a German-based company specializing in mobile energy solutions, primarily serving manufacturers and converters of emergency, special, and commercial vehicles across sectors such as BOS, service, transport, and leisure. The company is positioned as a specialist within the Micropower Group, offering tailored power supply systems and related services including application engineering, logistics, production, and training. The website reflects a professional and consistent brand image with detailed product highlights and industry focus. Technically, the site employs modern web technologies including Laravel Livewire and integrates privacy-conscious analytics via Plausible. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit privacy and cookie policies. Overall, LEAB demonstrates a credible and trustworthy digital presence aligned with its business objectives.

I

iSmile

blueskysmilesimulation.com

46

iSmile Simulation is a specialized digital healthcare service focused on providing 2D smile design and tele-dentistry solutions. The platform allows users to upload smile images for simulation and offers mobile applications for iOS and Android to extend its services. The business targets dentists and patients interested in dental aesthetics and remote dental consultations. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and an image comparison slider, delivering a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust in healthcare services. The domain uses privacy protection in WHOIS, which is common and justified for healthcare-related businesses. Overall, the website is functional and professional but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

艾迪斯鼎力科技（天津）有限公司是一家专注于消防与救援设备制造的企业，隶属于全球性的IDEX集团。公司提供包括液压破拆工具、消防泵、压缩空气泡沫系统等多种专业救援产品，服务于消防救援市场，拥有30年以上的行业经验和国际认证。网站内容丰富，设计专业，面向消防及救援专业人员，体现了较高的业务成熟度和市场定位。技术架构基于现代前端框架UIkit和jQuery，支持响应式设计，用户体验良好。安全方面，网站启用HTTPS，但缺少部分安全头和隐私合规机制，存在改进空间。整体风险较低，建议加强安全策略和隐私合规以提升信任度和合规性。

E

Evangelischer Kirchenkreis Bad Salzungen Dermbach

dein-tauftag.de

44

Dein-Tauftag.de is a small, non-profit web platform operated under the Evangelischer Kirchenkreis Bad Salzungen Dermbach, affiliated with the Evangelische Kirche in Mitteldeutschland (EKM). The website provides a service to remind users of their baptism day and offers informational content and community engagement tools targeted at parents, godparents, and baptized individuals. It holds a niche position within the religious community in Germany, focusing on spiritual and family-oriented content. Technically, the website employs a modern and common technology stack including Bootstrap, jQuery, and Piwik/Matomo for analytics. It is hosted on Eastlink servers, uses HTTPS with good SSL configuration, and is mobile-optimized with a clear navigation structure. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. There is no evidence of security policy publication or incident response contacts, and no cookie consent mechanism was detected, which could be improved for GDPR compliance. The WHOIS data is consistent with the website's organizational claims, supporting legitimacy. Overall, Dein-Tauftag.de is a trustworthy, well-maintained religious community website with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.

N

NCC

ncc.no

51

NCC is a large Norwegian company specializing in infrastructure, building, and real estate development. Their website reflects a professional corporate presence with a focus on sustainable construction solutions and societal development. The company targets customers and partners in the Norwegian construction and real estate sectors. Technically, the website uses modern web technologies including Google Fonts, Microsoft Application Insights for telemetry, and Cookiebot for cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and explicit privacy or security policies. Overall, the domain appears legitimate despite the absence of WHOIS data, which is common for Norwegian domains. The site integrates multiple third-party services for analytics and marketing, maintaining good advertising transparency. Recommendations include publishing clear privacy and security policies, adding contact information, and enhancing security headers to improve trust and compliance.

C

Coffin & Nails Publishing, LLC

coffinandnailspublishing.com

53

Coffin & Nails Publishing, LLC is a newly founded micro-publisher specializing in assisting debut authors with self-publishing their works, particularly in genres such as horror, thriller, fantasy, and science fiction. The company offers a unique business model that eliminates upfront financial investment by authors, instead providing advances as services. Their a la carte service offerings allow authors to tailor publishing support to their needs, positioning the company as a niche player focused on cost-effective, guided publishing experiences. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, including GSAP for animations. Hosting is provided by DreamHost, LLC, a reputable provider. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for compliance and protection. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security governance. Overall, the website presents a professional and trustworthy front for a small publishing business, with a solid foundation but some gaps in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

D

Dark Veil Society

darkveilsociety.com

59

Dark Veil Society is a collective of independent horror authors focused on promoting and supporting dark fiction. The website serves as a platform for author collaboration, book promotion, and community engagement within the horror genre niche. The site is professionally designed with good content quality and clear navigation, targeting horror readers and writers. Technically, the site uses modern web standards, Google Analytics for tracking, and is hosted by DreamHost with DNS managed by Cloudflare. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows anomalies with a future domain creation date, which may be a data error but reduces trust slightly. Overall, the site is trustworthy and professional but could improve security and privacy practices.

I

International Workers and Amateurs in Sports Confederation

csit.sport

49

The International Workers and Amateurs in Sports Confederation (CSIT) is a well-established non-profit organization founded in 1913, dedicated to promoting amateur and workers' sports globally. The website reflects a mature digital presence with comprehensive content about their events, social missions, and partnerships with recognized international bodies such as the IOC and SportAccord. Their business model focuses on organizing multi-sport events and fostering social values like sustainability, human rights, and fair play. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including a robust cookie consent mechanism powered by Clickskeks. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. While no CMS or hosting provider is explicitly identified, the performance is moderate with good responsiveness. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. The cookie consent banner and privacy policy indicate good privacy compliance, although formal security policies and vulnerability disclosure mechanisms are absent. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, and enhancing HTTP security headers to further strengthen security posture.

W

worldgames.com

worldgames.com

51

The website ww25.worldgames.com is a domain parking page indicating that the domain worldgames.com may be for sale. There is no substantive business content, services, or company information presented. The site primarily serves advertisements via Google Adsense and Bodis scripts, with minimal user engagement or navigation features. The WHOIS data is unavailable, suggesting the domain is either unregistered or privacy protected, which aligns with the domain parking status. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS and security headers. Privacy compliance is minimal with only basic privacy and legal pages present but no cookie consent mechanism. Overall, the site lacks business credibility and trust indicators.

The website at arisf.sport is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered to ARISF, a Swiss organization established in 2018, with transparent WHOIS data and no privacy protection. Due to the access restriction, no privacy policies, contact information, or business descriptions are available on the site. The technical infrastructure appears minimal with basic HTML and CSS, and no advanced frameworks or analytics detected. Security posture is limited by lack of DNSSEC and security headers, but the domain registration is legitimate and consistent with the organization. Overall, the site is currently non-functional for public users, limiting any meaningful analysis of business or security maturity.

F

fitness-rezervace.cz

fitness-rezervace.cz

47

fitness-rezervace.cz operates a specialized online reservation and information system primarily targeting fitness centers, gyms, yoga studios, and various sports facilities in the Czech Republic. Established in 2011, the company offers a comprehensive software solution that includes user management, payment integration, live streaming capabilities, and advanced features such as turnstiles, vouchers, and REST API for developers. Their market position is that of a niche leader within the Czech fitness and sports reservation software sector, supported by a small but focused business model emphasizing customization and client support. The website reflects a professional and consistent brand image with clear business information and contact details.

X

Xenoplexus Webstudios, LLC

idowebsitestuff.com

56

Xenoplexus Webstudios, LLC is a small freelance web development business operated by Blake Myers, offering custom website design, performance optimization, responsive development, logo creation, and consulting services. The company targets small businesses, non-profits, and schools, emphasizing high-quality, standards-compliant web solutions. The website demonstrates a professional portfolio with multiple client projects and clear contact information including physical addresses in the US and Czech Republic. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and PHP, with a focus on responsive design and performance. Hosting is provided by DreamHost, with Cloudflare nameservers, and the site enforces HTTPS with a clientTransferProhibited domain status, indicating good security practices. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in security hardening. Privacy compliance is addressed with a GDPR privacy policy, but no cookie consent mechanism is present. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is well-structured, trustworthy, and professionally maintained, with a solid security posture but some opportunities for enhancement.

Č

Česká asociace cheerleaders

cheerleadingjesport.cz

45

The website 'Cheerleading je sport!' serves as the official online presence for the Czech Association of Cheerleaders (ČACH), a national sports authority representing cheerleading clubs and athletes in the Czech Republic. It provides educational content about cheerleading, club directories, national team information, and historical context. The site targets cheerleading enthusiasts, athletes, and the general public interested in the sport within the Czech Republic. The business model is non-profit and focused on sport promotion and community building. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and FontAwesome icons, with a responsive design framework (Skel) to support mobile devices. The site loads moderately fast and offers a good user experience with clear navigation and relevant content. However, there is no detected CMS or advanced analytics, indicating a relatively simple technical infrastructure. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. No forms or sensitive data collection mechanisms are present, reducing immediate privacy risks. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small non-commercial organizations. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a legitimate, well-structured resource for cheerleading in the Czech Republic but would benefit from enhanced privacy compliance, improved security headers, and more transparent business contact information to strengthen trust and compliance.

The website smartteplomery.cz represents a small technology business focused on providing smart thermometers and meteorological stations with remote administration capabilities. The business appears to be newly established in 2024, targeting consumers and small businesses interested in temperature monitoring solutions. The website offers an e-shop and user account management features, emphasizing data visualization and remote device control. Technically, the website is built with standard HTML, CSS, and JavaScript without reliance on major frameworks or CMS platforms. Hosting is provided by WEDOS, a Czech hosting provider. The site demonstrates good mobile optimization and user experience with a clean, consistent design. However, SEO and accessibility features are basic, and no advanced analytics or marketing tools are detected. From a security perspective, the site uses HTTPS (assumed from domain and modern standards, though not explicitly confirmed in the HTML). There is a lack of security headers and no visible privacy or cookie policies, which impacts GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and regulatory adherence.

Mateřská škola Chvojenec is a small, local preschool institution located in the Pardubice region of the Czech Republic. The website provides detailed information about the school's educational philosophy, programs, and community engagement, targeting parents of preschool-aged children. The business operates as a public contributory organization, emphasizing child development through experiential learning and Czech cultural heritage. Technically, the website is built with standard HTML and CSS, includes basic forms for login and search, and embeds Google Maps for location reference. The site uses Google Fonts and has a cookie consent mechanism, but lacks advanced CMS or modern frameworks. Security posture is basic with no visible HTTPS enforcement or security headers, and no privacy or terms of service policies are published. Contact information is clearly presented, supporting business credibility. Overall, the site is functional and informative but would benefit from improved security and privacy compliance measures.

F

Facta Pro Futura

factaprofutura.com

58

Facta Pro Futura is a specialized strategic foresight platform focusing on understanding future trends and challenges, particularly in the energy sector and Central Europe. The website offers horizon scanning, data analysis, reports, and a geocalendar to support decision-makers in anticipating risks and opportunities. The platform collaborates with recognized partners such as the Adapt Institute, enhancing its credibility in the foresight domain. Technically, the website is built on the Webnode CMS, leveraging AWS Cloudfront CDN for content delivery, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism but lacks visible security headers and formal privacy or terms of service pages. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional nature of the site partially offsets this risk. Overall, the site presents a moderate security posture with room for improvement in compliance and transparency.

MI-MA is a small Czech graphic design business specializing in the creation of internet websites, e-shops, banners, flyers, posters, and video production. The website serves as a portfolio showcasing various projects and design works. The business appears to be well-established with a domain registered since 2007, indicating stability and longevity in the market. The target audience is general, likely local businesses or individuals seeking graphic design services. Technically, the website is built on the MyPortfolio platform, uses modern web standards including HTTPS and Typekit fonts, and is moderately optimized for mobile devices. However, it lacks comprehensive privacy and cookie policies, contact information, and security headers, which are important for trust and compliance. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user engagement. Security posture is adequate with HTTPS but could be improved with additional headers and policies. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

LUVENEX is a small Czech digital agency specializing in creative graphic work, website development, and internet marketing services. The company presents itself as a team of experienced professionals offering comprehensive digital solutions including web design, SEO, PPC advertising, and social media management. The website is professionally designed with clear service descriptions and client testimonials, indicating a stable market position within its niche. Technically, the site uses standard web technologies such as HTML5, CSS3, and Google Fonts, with moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS platforms. Security posture is limited due to lack of HTTPS verification, missing security headers, and absence of privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the website is functional and professional but requires improvements in security, compliance, and trust signals to enhance its credibility and risk profile.

The website 'Slovak Industry Vision Day' appears to be a business event platform aimed at connecting industry professionals and partners in Slovakia. The site promotes networking and matchmaking opportunities but lacks detailed business information, contact details, and formal policies. The technical infrastructure is based on the SITE123 CMS platform, utilizing standard web fonts and CDN-hosted resources. The site is accessible without any WAF or security blocking mechanisms, but it lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site presents basic content with moderate technical implementation but requires significant improvements in security posture and business credibility to enhance trust and compliance.

T

TRL SPACE

trlspace.cz

43

TRL SPACE is a Czech Republic-based mission integrator specializing in small satellites, probes, and space technology solutions. Founded in 2021, the company focuses on providing affordable and customized satellite solutions for sovereign satellite systems, Earth Observation, Communications, and lunar missions. Their business model centers on mission integration services and delivering bespoke satellite products and services to a diverse client base including commercial customers and space sector entities. The company maintains a strong partnership ecosystem with numerous research and space organizations, enhancing its market position as a premier mission integrator in the region. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. However, SEO and accessibility features are basic, and performance is moderate. The hosting provider is not explicitly identified, but external scripts are served via Amazon CloudFront. From a security perspective, the website uses HTTPS but lacks visible security headers and published security policies such as privacy, cookie, or incident response policies. No forms collecting sensitive data are present on the homepage, reducing immediate risk exposure. The WHOIS data is consistent with the business profile, showing domain registration in 2021 with no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could be improved by implementing security headers, privacy policies, and incident response information. The overall risk assessment indicates a trustworthy and professional business with minor compliance gaps primarily in privacy and security policy disclosures. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing incident response contacts to improve compliance and trust.

B

BRNO SPACE CLUSTER z.s.

brnospacecluster.cz

42

Brno Space Cluster z.s. is a technology-focused business entity formed by multiple companies and institutions from the Brno region, specializing in engineering services and cooperation on space projects. Leveraging experience from major aerospace players such as ESA, ArianeGroup, OHB, Avio, and Leonardo, the cluster operates in the commercial space market, providing services including satellite development exemplified by the Mise Drak project. The website reflects a professional and consistent brand presence with clear contact information and a strong partner ecosystem. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google Analytics for user tracking and is hosted on servers associated with the Ignum nameservers. The site is mobile-optimized with good SEO practices but lacks some accessibility features and security headers which could enhance its technical robustness. From a security perspective, the website uses HTTPS with excellent SSL configuration, but it lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. No forms or direct data collection mechanisms are present, reducing immediate data exposure risks. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the organization's founding date and no suspicious registration patterns. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

A

Affino

affino.com

69

Affino is a technology company specializing in AI-enhanced customer experience solutions delivered via a unified SaaS platform. Their offerings include personalization, automation, AI-powered search, adaptive analytics, and conversion funnel optimization. The company positions itself as a leader providing hands-on services to help clients outperform competitors. Technically, the website employs modern front-end technologies such as HTML5, CSS3, JavaScript, jQuery, and SVG graphics, with a proprietary CMS platform. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate with HTTPS implied and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is limited with no visible privacy or terms of service pages, though a cookie policy with consent mechanism is present. WHOIS data is unavailable, which reduces trustworthiness but the professional presentation and contact information support business credibility. Overall, the site is suitable for business audiences seeking AI-driven customer experience platforms.

L

Les Ateliers de maîtrise d’œuvre urbaine de Cergy Pontoise

ateliers.org

52

Les Ateliers de maîtrise d’œuvre urbaine de Cergy Pontoise is a well-established non-profit organization based in France, specializing in organizing international workshops focused on urban planning and design. With over 30 years of experience, they engage students, young professionals, and local stakeholders to collaboratively address urban challenges. Their website reflects a professional and content-rich platform that supports their mission and outreach. Technically, the website uses modern web technologies including Google Analytics and Tag Manager for tracking, hosted by OVH sas. The site is mobile-optimized and has a moderate performance profile. However, there are gaps in security best practices such as missing DNSSEC, lack of security headers, and absence of published privacy and cookie policies, which impact compliance and security posture. From a security perspective, the site uses HTTPS and includes CSRF protection in forms, but lacks explicit incident response and vulnerability disclosure information. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, enhancing trustworthiness. Overall, the site is credible but would benefit from improved security and privacy compliance measures.

H

HELCZA - High Energy Load Czech Assembly

helcza.cz

54

The website www.helcza.cz represents HELCZA (High Energy Load Czech Assembly), a specialized experimental facility dedicated to cyclic thermal testing of components for future fusion energy devices. The site targets the scientific and engineering community involved in fusion technology development. The business model is focused on research and development within the energy sector, specifically fusion energy. The website presents a professional and consistent branding with good content quality, though it lacks visible contact information and privacy policies. Technically, the site uses modern web technologies including the Brz framework and Bunny Fonts, with moderate performance and good mobile optimization. Security posture is moderate due to lack of visible security headers and unknown SSL configuration. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and clearer contact channels.

E

Energy Well - small modular nuclear reactor

energywell.cz

57

The website www.energywell.cz presents a business focused on the development of a fourth generation small modular nuclear reactor characterized by high passive safety and innovative technologies. The site content is professionally designed and targeted at a general audience interested in advanced energy technologies. However, the absence of WHOIS registration data and lack of contact or policy information limits the ability to fully verify the business legitimacy and compliance. Technically, the site uses modern web fonts and standard web technologies but lacks visible security headers and privacy compliance mechanisms. The security posture is weak due to missing security best practices and absence of HTTPS verification in the provided data. Overall, the site is accessible and content-rich but requires improvements in transparency, security, and compliance to enhance trust and reduce risk.

C

CICRR Czech International Centre of Research Reactors

cicrr.cz

58

The Czech International Centre of Research Reactors (CICRR) operates as a significant national research infrastructure focusing on nuclear research reactors and supporting scientific facilities. The website presents detailed information about its reactors LVR-15, LR-0, and JHR-CZ, along with associated laboratories and analytical facilities, targeting the scientific and energy research community. The organization appears to hold an important position within the Czech Republic's energy and research sectors. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with fonts served via Bunny Fonts and content delivered through Bunny CDN. The site is mobile-optimized with good SEO practices but lacks advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or incident response policies, which are critical for compliance and trust. No WHOIS data is available, suggesting privacy protection or domain registration issues, but the website content aligns with a legitimate research entity. No WAF or blocking mechanisms were detected, and no tracking or advertising scripts are present, indicating minimal user tracking. Overall, the site is professional and content-rich but would benefit from enhanced security practices, clear privacy and contact information, and WHOIS transparency to improve trust and compliance.

Č

Česká asociace cheerleaders

cach.cz

49

Česká asociace cheerleaders (ČACH) is a Czech non-profit organization dedicated to the promotion and development of cheerleading in the Czech Republic. The association organizes competitions, training camps, workshops, and certifies coaches and judges. It also manages national team representation and membership services. The website reflects a well-structured organization with a clear focus on cheerleading sports and community engagement. The association maintains partnerships with various sports and commercial entities and has an active presence on multiple social media platforms. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with a CMS likely based on Perch. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

L

Locaweb Serviços de Internet S/A

locaweb.com.br

70

Locaweb Serviços de Internet S/A is a leading Brazilian technology company specializing in web hosting, domain registration, email, cloud, and VPS services. Established in 1998, it holds a strong market position as a trusted provider with a comprehensive portfolio targeting businesses and individuals seeking reliable internet infrastructure solutions. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site employs modern web standards, uses HTTPS with strong SSL configuration, and integrates Google Analytics for user insights. Security posture is robust with appropriate headers and no evident vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the domain registration data aligns perfectly with the business claims, reinforcing legitimacy and credibility.

Č

Česká pošta, s.p.

pohledniceonline.cz

53

PohledniceOnline.cz is an official online postcard creation and delivery service operated by Česká pošta, the Czech Republic's national postal service. The platform enables users to upload personal photos, customize postcards, and send them physically via postal delivery both domestically and internationally. The service is accessible via web and mobile applications, supporting multiple payment methods including prepaid vouchers and secure online payments through ComGate. The website is well-branded, professionally designed, and targets a broad audience seeking convenient postcard sending solutions. Technical infrastructure includes modern web technologies and integration with trusted payment gateways, hosted on Websupport servers. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Overall, the website demonstrates a strong business credibility and trustworthy presence aligned with its parent postal organization.

C

Concrete Pump Repair South

concretepumpssouth.com

62

Concrete Pump Repair South is a specialized service provider focused on concrete pump repair and parts distribution, particularly Schwing OEM parts. The company operates as a Small Line Dealer and satellite CPR Repair center in the Southeastern United States, emphasizing quality and customer support. The website is professionally designed using the Squarespace platform, featuring clear navigation and responsive design, though it lacks explicit contact details and privacy-related policies. Technically, the site benefits from HTTPS and HSTS, ensuring secure connections, but could improve by adding additional security headers and privacy compliance features. The absence of WHOIS data reduces domain trustworthiness, suggesting recent registration or privacy protection, which should be monitored. Overall, the site presents a credible business front but requires enhancements in privacy, contact transparency, and security best practices to strengthen trust and compliance.

V

Vonovia SE

vonovia.com

70

Vonovia SE is a large enterprise operating in the real estate sector primarily in Germany. The company manages residential properties and offers related services to tenants and partners. The website serves as a corporate portal providing information about the company, its subsidiaries, and services. The site is professionally designed with consistent branding and targets a broad audience including tenants, investors, and partners. Technically, the website employs modern web technologies including JavaScript, CSS3, and uses Cookiebot for GDPR-compliant cookie consent management. Analytics tools such as econda and Google services are used for traffic analysis and marketing optimization. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces domain trust slightly, but the overall security posture is good. Overall, the website is a professional and trustworthy corporate site with moderate technical maturity and good privacy compliance. Strategic improvements include publishing privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

M

Ministerstvo financí České republiky

statnipokladna.cz

73

The website statnipokladna.cz serves as the official portal for the Ministry of Finance of the Czech Republic, specifically focusing on the State Treasury functions. It provides centralized financial management services including revenue centralization, expenditure control, asset management, liquidity and debt management, financial planning, payment processing, and reporting. The site targets government entities and public sector organizations, positioning itself as a critical government service platform. The content is professionally presented, with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations of Cookiebot for cookie consent management and analytics tools such as Google Analytics and Matomo. The site uses HTTPS and shows good security practices, although explicit security headers are not visible in the HTML source. The performance is moderate, and accessibility features are adequately implemented. From a security standpoint, the site benefits from HTTPS encryption and a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website demonstrates a strong business credibility as a government portal with high trustworthiness. The risk profile is low, but strategic enhancements in security policy publication and contact information disclosure would further strengthen its posture.

Z

ZŠ A MŠ DOBŘÍKOV

zsdobrikov.cz

59

The website www.zsdobrikov.cz represents a small local educational institution, ZŠ a MŠ Dobříkov, offering basic and kindergarten education with a focus on a family-like atmosphere and innovative teaching methods. The school emphasizes individual attention, project-based learning, and digital competence development. The site is built on the Webnode platform and hosted via AWS Cloudfront, reflecting a moderate level of technical maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a public privacy policy, which are areas for improvement. The absence of public WHOIS data suggests privacy protection, common for small entities, but limits transparency. Overall, the site is trustworthy and safe for general audiences, with room to enhance compliance and security practices.

N

Nota AI

nota.ai

67

Nota AI is a technology company specializing in hardware-aware AI model optimization and on-device AI solutions tailored for various industries such as industrial safety, surveillance, intelligent transportation systems, and driver monitoring. The company positions itself as a provider of seamless AI optimization platforms and AI solutions, including the NetsPresso® LLM Optimization Service for foundation models at the edge. The website is professionally designed using Squarespace, featuring modern technologies and good mobile optimization. It integrates Google Analytics and Tag Manager for tracking and Weglot for multilingual support. Security posture is strong with HTTPS and HSTS enabled, though the absence of explicit privacy policies and terms of service pages slightly reduces privacy compliance. The WHOIS data is unavailable due to privacy protection, which is typical for tech companies but limits transparency. Overall, the site is trustworthy and business credible, with a moderate to good security and privacy posture.

The website promobay.com appears to be a minimal content portal primarily serving embedded advertisements via Google Adsense and related Google ad services. The site lacks meaningful business information, contact details, or user engagement features. The domain WHOIS data is unavailable, indicating either privacy protection or an unregistered domain, which raises concerns about legitimacy. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes for ads but lacks modern CMS or frameworks. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible incident response or data protection policies. Overall, the site presents a low trust profile with limited business credibility and minimal privacy compliance.

P

PaRELI s.r.o.

pareli.sk

43

PaRELI s.r.o. is a Slovak company founded in 2013 specializing in digitization and project documentation services for the construction sector, focusing on electrical installations, lighting, and security systems. The company serves construction professionals and developers primarily in Slovakia, with a portfolio of multifunctional complex projects. The website is built using modern technologies such as Vue.js and integrates Google Maps API for enhanced user experience. The site is professionally designed with good navigation and mobile optimization, though it lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with no evident security headers or vulnerability disclosures, and no analytics or tracking scripts detected, indicating minimal user tracking. Contact information is clearly presented, supporting business credibility. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy and security practices.

A

Asociace regionálních značek, z.s.

pokladyzregionu.cz

51

The website 'Poklady z regionů' is operated by Asociace regionálních značek, z.s., a non-profit association promoting certified regional quality products from the Czech Republic. It serves as an e-commerce platform offering original, locally produced gifts and products that have passed regional certification. The site targets consumers interested in authentic regional goods and provides options for custom orders and corporate branding. The business has been active since 2005, positioning itself as a niche leader in the Czech regional product market. Technically, the website is built on the Upgates e-commerce platform using modern web technologies including HTML5, CSS3, JavaScript, jQuery, Bootstrap, and the Nette framework. It features responsive design, good SEO practices, and moderate performance. The site includes cookie consent mechanisms and form validation to enhance user privacy and security. From a security perspective, the site enforces HTTPS and employs cookie consent with granular options. However, explicit security headers and a published security policy or incident response plan are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain reduces trustworthiness somewhat, though the website content and contact information appear professional and legitimate. Overall, the website presents a trustworthy and professional front for a small non-profit e-commerce business focused on regional products. Strategic improvements in security transparency and WHOIS data availability would enhance credibility and security posture.

pg-webstudio is a small German web design and development service provider specializing in custom websites using popular CMS platforms such as Wordpress, Drupal, Grav, Contao, and Joomla. The company targets local businesses and individuals in Göttingen and surrounding areas, offering a comprehensive range of services including SEO, responsive design, interactive maps, and ongoing website maintenance. The website showcases a strong portfolio of client projects across various industries, demonstrating technical versatility and design expertise. Technically, the site uses modern web standards and frameworks like Bootstrap 4 and jQuery, hosted on Alfahosting servers. Mobile optimization and user experience are excellent, with clear navigation and professional content. Security posture is moderate with cookie consent implemented and form nonce tokens present, but lacks visible HTTP security headers and explicit security policies. No active analytics tracking or advertising is detected, enhancing privacy compliance. WHOIS data aligns with the website's business focus, indicating legitimacy. Overall, the site is professional, trustworthy, and well-structured.

O

OEMUS MEDIA AG

welovewhatwedo.org

56

OEMUS MEDIA AG is a well-established German media company specializing in dental publishing, online media, and event management. The website analyzed is a dedicated anniversary campaign site celebrating 30 years of OEMUS, showcasing employee testimonials and company milestones. The company holds a strong market position as a key player in the dental media sector with a medium-sized operation based in Leipzig, Germany. Technically, the site uses modern frontend technologies including jQuery and Owl Carousel, hosted likely on AWS infrastructure. The site is mobile-optimized and professionally designed, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is transparent and consistent, though the domain age is relatively new compared to the company's long history, indicating a possible new campaign domain. No suspicious or malicious content was found, and the site is safe for general audiences.

R

Revolware

revolware.com

49

Revolware is a Slovakia-based technology company specializing in rational software and AI development services tailored for modern businesses and startups. Founded in 2015, the company offers a broad range of services including web and mobile app development, augmented and virtual reality solutions, design and branding, and consulting focused on business process digitization. Their portfolio showcases diverse projects and multiple awards, positioning them as an innovative and trusted software solutions provider in their market segment. Technically, Revolware employs a modern technology stack including Java, C#, Python, C++, PHP, and JavaScript frameworks such as React-native and Laravel. The website is hosted on DigitalOcean and uses Bootstrap for responsive design. While the site demonstrates good design quality, mobile optimization, and SEO practices, some technical improvements are recommended, such as enabling DNSSEC and implementing security headers. From a security perspective, the website uses HTTPS and anonymizes IP addresses in Google Analytics, but lacks visible security headers and published security or privacy policies. No incident response or vulnerability disclosure information is provided. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, Revolware presents a professional and credible online presence with strong business credibility and technical maturity. However, to enhance security posture and regulatory compliance, the company should publish comprehensive privacy and cookie policies, implement security headers, enable DNSSEC, and provide incident response contacts. These steps will improve trust and reduce potential risks associated with data protection and security.

G

Gábor Szilvia

aszodiuzletek.hu

48

Aszodiuzletek.hu is a Hungarian e-commerce price comparison and product recommendation platform launched in 2023. It aggregates product offers from multiple partner webshops, providing users with a centralized place to find competitive prices and product information. The website targets general consumers interested in shopping across various categories including electronics, fashion, home goods, and adult products. The platform emphasizes ease of use, quick price comparison, and access to special offers. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google reCAPTCHA v3 for bot protection. The site is mobile optimized and features a structured navigation system with extensive product categories and partner listings. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. The domain registration is recent and consistent with the business profile, indicating legitimacy. Overall, the site presents a professional and functional e-commerce aggregator with room for improvement in security and privacy compliance.

D

DAAD (Deutscher Akademischer Austauschdienst)

alumniportal-deutschland.org

69

Alumniportal Deutschland is a digital networking platform primarily serving alumni, universities, and organizations to facilitate international exchange, events, and career development. It is affiliated with the DAAD, a reputable German academic exchange service, which strengthens its market position and trustworthiness. The platform offers a variety of services including community engagement, job boards, and learning resources, targeting international alumni and academic professionals. Technically, the website uses modern frontend frameworks such as Vue.js and Nuxt.js, delivering a responsive and accessible user experience with good SEO practices. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and follows best practices in form handling and data privacy, although explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a strong focus on privacy compliance and user engagement.

F

Förderverein Moritzkirche Naumburg (Saale) e.V.

moritzkirche-naumburg.de

49

The website represents the Förderverein Moritzkirche Naumburg (Saale) e.V., a non-profit organization dedicated to preserving and promoting the cultural and religious heritage of the St. Moritz church in Naumburg, Germany. It offers information about church services, exhibitions, concerts, and historical lectures, targeting local visitors and cultural enthusiasts. The site is well-branded and provides clear contact and donation information, reflecting a trustworthy community institution. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and slick carousel, delivering a good user experience with mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is used, but no security headers or vulnerability disclosures are present, indicating room for improvement in security posture. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security measures.

T

Domain Default page

tribune-group.com

41

The website tribune-group.com currently hosts a default placeholder page generated by Plesk, indicating that the domain is registered but no active business website or content is published. The page primarily promotes Plesk hosting control panel features and related tools such as Sitejet Builder and WP Guardian, targeting web professionals and site owners interested in hosting management. There is no direct business information, contact details, or service offerings presented on the site. From a technical perspective, the site uses standard HTML5 and CSS3 with Plesk default assets and fonts. The site is mobile responsive and has basic accessibility features but lacks SEO optimization and advanced technical frameworks. No CMS or hosting provider details are explicitly identified beyond the Plesk environment. Performance is moderate with no evident errors or broken elements. Security posture is minimal; the domain is registered with a reputable registrar and has a clientTransferProhibited status, which is positive. However, the site lacks DNSSEC, security headers, and visible HTTPS enforcement in the provided data. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is not operational as a business site and scores low on content quality, privacy compliance, and business credibility. The domain registration is legitimate but the lack of active content and security best practices suggests the site is either under development or abandoned. Strategic recommendations include developing a proper business website with clear contact and policy pages, implementing security headers and HTTPS, enabling DNSSEC, and adding privacy and cookie compliance mechanisms.