Security Directory

P

PHD Worldwide

phdmedia.com

76

PHD Worldwide is a well-established global media agency founded in London in 1990, specializing in strategic and creative media planning and buying. The company positions itself as a next-generation agency network engineered for intelligence and connectivity, targeting businesses seeking comprehensive media services worldwide. The website reflects a professional and consistent brand image with multi-language support and a clear navigation structure. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager and OneTrust for cookie consent, ensuring GDPR compliance and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, although no explicit security policy or incident response information is published. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness and warrants further investigation. Overall, the website is professional, secure, and privacy-conscious, but the domain registration inconsistency is a risk factor.

I

Inspire Metz

investinmetz.com

57

Invest in Metz is a regional economic development platform focused on promoting the Eurométropole de Metz territory as an attractive investment destination. The website provides comprehensive information and assistance related to strategic sectors, financing, business implantation, and economic observation. The platform targets investors and businesses interested in the region, positioning itself as a key regional economic development agency. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, marketing automation, and caching, delivering a fast, mobile-optimized, and accessible user experience. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response information are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional quality of the website content partially mitigates this risk. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

studierendenWERK BERLIN is a large, well-established public service organization dedicated to supporting students in Berlin's universities with a broad range of services including housing, cafeteria (Mensa), financial aid (BAföG), counseling, cultural programs, childcare, and international student support. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to its target audience of students. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates privacy-conscious analytics (Matomo), and employs a consent management platform (Usercentrics) to comply with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is privacy protected but consistent with a legitimate entity. Overall, the site demonstrates a mature digital infrastructure and trustworthy business model.

E

ExLibris - Library software and management systems

exlibrisgroup.com

74

Ex Libris is an established enterprise specializing in library software and management systems, serving libraries and educational institutions globally. The company is positioned as a key player in the technology sector for library solutions, offering products that enhance education, research, collaboration, and productivity. The website reflects a mature digital presence with professional design, structured data, and SEO optimization. The technical infrastructure is based on WordPress CMS with integration of multiple marketing and analytics tools, indicating a modern and data-driven approach. Security posture is adequate with HTTPS enabled and domain registration protections, though improvements can be made in security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy and terms of service documentation. Overall, the website and domain data indicate a trustworthy and credible business with room for enhanced transparency and security practices.

S

Stanford University

stanford.edu

64

Stanford University is a globally recognized educational institution offering comprehensive academic programs, research initiatives, and community services. The website reflects a mature digital presence with extensive content targeting students, faculty, alumni, and the public. Technically, the site is built on WordPress with modern analytics and tracking tools, ensuring good performance and user experience. Security posture is strong with HTTPS and security headers, though public security policies and incident response information are not prominently published. WHOIS data is unavailable, likely due to .edu domain registry policies, but the website's branding and content strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations.

S

STORMWARE s.r.o.

pohodaplus.cz

59

STORMWARE s.r.o. operates the POHODA plus platform, providing partner solutions and extensions to the POHODA economic and accounting software primarily targeting Czech businesses such as e-shops, hotels, and service providers. The website presents a professional and consistent brand image with clear contact information and a comprehensive cookie consent mechanism, reflecting a mature digital presence. Technically, the site is built on ASP.NET Web Forms with custom JavaScript and CSS bundles, utilizing Google Fonts for typography. While the site is accessible and well-structured, no advanced security headers or incident response policies are evident, and WHOIS data is missing, which impacts domain trustworthiness. Overall, the security posture is moderate with room for improvement in header implementation and transparency. The website is safe for general audiences and complies with GDPR through explicit privacy and cookie policies.

S

STORMWARE s.r.o.

e-trzby-pohoda.cz

58

The website www.e-trzby-pohoda.cz serves as an informational and promotional platform for electronic sales evidence solutions, primarily centered around the POHODA accounting software and its mobile applications. It targets businesses in the Czech Republic required to comply with electronic sales record-keeping regulations (EET). The site is professionally designed with clear navigation and provides useful resources such as PDF guides and video tutorials. The business behind the site is STORMWARE s.r.o., a recognized software provider in the Czech market. Technically, the website is built on ASP.NET Web Forms with Bootstrap for responsive design and uses Google Analytics for visitor tracking. The site implements a cookie consent mechanism compliant with GDPR, allowing users to control their cookie preferences. While the site loads external scripts securely via HTTPS, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. From a security perspective, the site shows good practices such as no exposed sensitive data and user consent for tracking. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy and transparency. No critical vulnerabilities or security issues are apparent in the content. The site does not display social media links or direct contact emails, which slightly limits direct communication channels. Overall, the website presents a trustworthy and professional front for its business purpose but would benefit from enhanced security headers, verified domain registration data, and more explicit contact information to improve trust and compliance posture.

S

STORMWARE s.r.o.

stormware.sk

67

STORMWARE s.r.o. is a well-established Slovak technology company specializing in economic and accounting software solutions, primarily through its flagship product POHODA. The company targets a broad audience ranging from individual entrepreneurs to large enterprises, offering software, mobile invoicing, business intelligence add-ons, and comprehensive customer support including training and e-commerce services. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to its market segment. Technically, the site is built on ASP.NET with modern JavaScript libraries and integrates major analytics and marketing tools while maintaining GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, CSP headers, and no evident vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent, indicating a legitimate and trustworthy business entity.

S

STORMWARE s.r.o.

pohoda.sk

58

STORMWARE s.r.o. operates the POHODA accounting software website, offering a comprehensive accounting and invoicing solution tailored for small to medium-sized businesses primarily in Slovakia. The company positions itself as a trusted provider with over 20 years of experience, ISO 9001 certification, and Microsoft partnership, emphasizing legislative compliance and customer support. The website reflects a mature digital presence with modern technologies such as ASP.NET, Google Analytics, and Facebook Pixel integrated with a clear cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of a dedicated security policy and incident response details suggests room for improvement. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

M

Mimatik.com

mimatik.com

65

Mimatik.com is a small creative and graphic studio based in Prague, specializing in web development, branding, logo, and poster design. The company serves both international companies and individual clients, positioning itself as a niche player with a professional portfolio showcasing various rebranding and design projects. The website reflects a well-maintained digital presence with a focus on visual design and user experience. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and media player APIs, hosted by Gransy, s.r.o. The site is mobile optimized and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and some security headers are missing. No explicit security or incident response policies are published. Overall, the domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

D

DOMOPLAN a.s.

ardea.hr

52

The website www.ardea.hr represents a new residential real estate development project named Ardea Samobor, operated by DOMOPLAN a.s., a Czech-based company expanding into the Croatian market. The project offers 74 apartments with modern, energy-efficient western European architectural standards, targeting home buyers and investors near Zagreb. The site is professionally designed, mobile-optimized, and includes multimedia content and interactive elements to enhance user engagement. Technically, the site uses a modern JavaScript stack with analytics and marketing integrations such as Google Analytics, Facebook Pixel, and cookie consent management via Orejime. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security policies and incident response information are absent. Privacy compliance is partially addressed through cookie consent but lacks a dedicated privacy policy page. Overall, the domain registration aligns well with the business timeline and origin, indicating legitimacy. The site is safe for general audiences and does not contain adult or questionable content.

D

DOMOPLAN a.s.

rezidencebotanica.cz

54

DOMOPLAN a.s. operates the Botanica Residence website, promoting premium residential apartments in Brno, Czech Republic. The company positions itself as a developer of stylish, comfortable living spaces with a focus on design, location, and quality. The website targets potential home buyers and investors interested in real estate in the region. The business model centers on real estate development and sales, with a medium-sized company profile and a consistent brand presence. Technically, the website employs modern JavaScript libraries such as jQuery, GSAP, and Owl Carousel, alongside Google Tag Manager and Google Analytics for tracking and marketing. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incomplete WHOIS data slightly reduce trustworthiness. Privacy compliance is good, with clear cookie and privacy policies and user consent mechanisms. Overall, the website presents a professional and trustworthy front for the real estate business, though improvements in security headers and WHOIS transparency are recommended to enhance trust and compliance.

D

DOMOPLAN a.s.

b80.cz

54

The website www.b80.cz represents a real estate development project named B80, managed by DOMOPLAN a.s., a medium-sized real estate developer based in Brno, Czech Republic. The project focuses on modern residential apartments blending industrial and contemporary architectural styles, targeting buyers interested in urban living with access to exclusive amenities and proximity to the city center. The site provides comprehensive information about the project, including services, location, interiors, architecture, and news updates, supported by multimedia content and a professional design. Technically, the website employs a modern JavaScript stack including jQuery, Swiper.js, GSAP, and Foundation framework, ensuring a smooth user experience with responsive design and interactive elements. Cookie consent and privacy mechanisms are implemented via Orejime, indicating GDPR compliance. Analytics are handled through Google Analytics and Google Tag Manager, with moderate user tracking. From a security perspective, the site uses HTTPS and has implemented cookie consent but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the professional presentation and contact transparency support legitimacy. Overall, the website is well-designed, content-rich, and professionally maintained, with good privacy compliance and moderate security posture. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and continuous monitoring of third-party scripts to maintain security and compliance.

N

Na Mariánské cestě

namarianskeceste.cz

54

Na Mariánské cestě is a real estate development project offering residential apartments near Prague, specifically in Brandýs nad Labem. The website presents a professional image with detailed descriptions of the residential complex, emphasizing quality architecture and community amenities. The project has received recognition as the Real Estate Project of the Year 2023 Overall Winner, indicating a strong market position. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics, Google Tag Manager, and Smartlook, and implements a cookie consent mechanism compliant with GDPR principles. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy policy documentation. WHOIS data is unavailable, which reduces domain trustworthiness and warrants further verification. Overall, the website is well-designed and functional, targeting potential home buyers interested in quality residential living near Prague.

D

DOMOPLAN a.s.

zizkovarezidence.cz

55

DOMOPLAN a.s. operates a premium real estate development project named Žižkova Residence located in the Veveří area of Brno, Czech Republic. The project emphasizes exquisite design, award-winning architecture, and high-end technologies targeting affluent buyers and investors seeking luxury apartments. The company maintains a professional online presence with comprehensive multimedia content, clear contact information, and active social media engagement. Technically, the website employs modern JavaScript libraries such as jQuery, GSAP, and Owl Carousel, and integrates analytics and marketing tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is secured with HTTPS and features a robust cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data and security headers slightly reduces the trust score. Overall, the website reflects a mature digital infrastructure suitable for its business domain.

P

PI North America

io-link.us

59

IO-Link North America operates as a specialized information and community platform focused on IO-Link industrial automation technology within the North American region. The website serves as a hub for technology information, event announcements, news updates, and member directories, targeting professionals and organizations involved in industrial automation. The business model centers on community engagement and knowledge dissemination, positioning itself as a regional authority in the IO-Link space. The domain is registered under PI North America with consistent registration details and a stable history since 2017. Technically, the website is built on WordPress using the OceanWP theme and integrates several modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided via Cloudflare, ensuring good SSL configuration and performance. The site demonstrates good mobile optimization and accessibility, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS and has domain transfer protections in place but lacks DNSSEC and security headers such as Content-Security-Policy. No direct contact emails or phone numbers are published, and no explicit security or incident response policies are found. Tracking and analytics tools are used extensively without visible user consent mechanisms, indicating partial privacy compliance. Overall, the website is professional, trustworthy, and well-maintained with a moderate security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

Lausuntopalvelu.fi is an official Finnish government digital platform maintained by the Ministry of Justice (Oikeusministeriö). It facilitates electronic submission and management of public consultation requests, allowing all public authorities to publish consultation requests and enabling organizations and citizens to provide statements. The service is well-positioned as a trusted government resource with a clear target audience of public sector entities and the general public. The website content is professionally presented, bilingual (Finnish and Swedish), and includes user support contact information.

C

Czech Soles Production

czechsoles.com

40

CzechSoles.com operates as a niche adult entertainment website specializing in foot fetish content, offering a large catalog of videos, photo galleries, custom clips, and live webcams. The site targets an adults-only audience with explicit disclaimers and age verification statements. The business model is subscription-based with additional custom content sales, positioning itself as a specialized media provider within the adult entertainment industry. The website demonstrates consistent branding and a professional presentation with a focus on quality multimedia content. Technically, the site uses common JavaScript libraries and integrates Google reCAPTCHA Enterprise for bot protection, but lacks advanced security headers and explicit privacy consent mechanisms. Payment processing is handled by a reputable third party, CCBill, enhancing transactional trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency.

A

Andomark, LLC

brattyfootgirls.com

29

XBrats Femdom Videos operates as a niche adult entertainment platform specializing in femdom fetish video content. Founded in 2021, the company offers subscription-based and pay-per-view access to original HD videos, targeting an adult-only audience. The business leverages a third-party payment processor, Segpay.com, ensuring secure transactions and compliance with industry standards. The website presents a consistent brand image with clear navigation and mobile optimization, catering to its specialized market segment.

Madame Marissa is an adult content website requiring users to confirm their age before accessing sexually explicit material. The site targets consenting adults and offers adult entertainment content with an emphasis on BDSM and femdom themes. The business model appears to be content access gated by age verification, but no detailed business or contact information is provided on the site. Technically, the site uses Bootstrap and jQuery for frontend styling and functionality, and Google Analytics for user tracking. The site is mobile optimized and has a basic cookie consent mechanism. However, there is no evidence of advanced security headers or HTTPS enforcement visible in the provided data. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Privacy compliance is basic with a privacy policy and cookie banner but lacks GDPR explicit statements or data retention policies. Overall, the site has moderate technical quality but low business credibility and security posture, resulting in a moderate risk profile.

Subby Hubby is an adult entertainment website specializing in niche fetish content including cuckold, sissy maids, and fem dom themes. The site offers over 1200 videos and photo sets through a subscription-based model, targeting an adults-only audience. The business appears to be operated by Clubdom.com, with a domain registered since 2011, indicating an established presence in the adult media market. The website features multimedia content with integrated video players and photo galleries, supported by a custom CMS and various JavaScript libraries for enhanced user experience. Technically, the site uses modern web technologies such as jQuery, OneSignal for push notifications, and media players, but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with HTTPS implied but no DNSSEC or explicit security policies detected. Privacy compliance is basic with a privacy policy present but no cookie policy or GDPR compliance indicators. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the site is functional and professionally designed but could improve in security and privacy compliance.

S

SADO-LADIES.com

sado-ladies.com

9

SADO-LADIES.com is a specialized adult entertainment website focusing on classic femdom movie content. Established in 2007, it offers a subscription-based model with over 200 hours of downloadable clips and photo galleries, targeting an adult audience interested in BDSM and fetish themes. The site maintains a consistent brand presence and updates content regularly, positioning itself as a niche leader in its market segment. Technically, the site runs on Joomla CMS with a moderate performance profile and integrates multiple analytics platforms including Google Analytics, Matomo, and Microsoft Clarity. While HTTPS is enforced and the domain is well maintained, there are gaps in security best practices such as missing security headers and lack of DNSSEC. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the site is functional and professional but could benefit from enhanced security and privacy measures.

C

ClubDom.com

clubdom.com

45

ClubDom.com is a niche adult entertainment platform specializing in FemDom, BDSM, and fetish video and photo content. Established in 1997, it offers a subscription-based business model with exclusive content including thousands of videos and photo sets. The website targets an adult audience with explicit content and includes legal disclaimers and age verification mechanisms. Technically, the site uses a custom CMS with common JavaScript libraries such as jQuery, OneSignal for push notifications, and Jssor Slider for media display. Hosting is provided by mojohost.com, and the domain registration is consistent and longstanding, indicating legitimacy. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with a basic privacy policy but no cookie consent or GDPR mechanisms. Contact information is limited to forms without explicit emails or phone numbers. Overall, the site is functional and professionally presented but could improve security and privacy compliance.

S

Syndicat des énergies renouvelables

syndicat-energies-renouvelables.fr

10

The Syndicat des énergies renouvelables is a professional trade association focused on the renewable energy sector in France. It serves as a key industry actor providing information, organizing events, publishing reports, and offering professional training to its members, which number over 530 companies including many SMEs and ETIs. The website reflects a well-established organization with a clear market position as a leading voice in the energy transition. The target audience includes energy professionals, companies, and stakeholders interested in renewable energy developments. Technically, the website is built on WordPress with a modern tech stack including Bootstrap 4, jQuery, and various plugins for SEO, sliders, and cookie consent management. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured data. Performance is moderate, and accessibility is basic but adequate for the audience. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. The login form for members uses secure POST methods with nonce tokens. However, additional security headers are not detected, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of WHOIS data reduces some trust but is mitigated by the site's content quality and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to improve security posture and trust further.

N

NOVELCAST

novelcast.com

54

NOVELCAST is a French audio production company specializing in the executive production of audiobooks, audio series, and transmedia projects. Established in 2005, the company operates a professionally designed WordPress-based website showcasing its audio productions and services. The website targets French-speaking audiences interested in audio fiction and literary content. NOVELCAST maintains an active social media presence across Instagram, LinkedIn, YouTube, and Facebook, enhancing its market visibility. The business model focuses on content creation and production services within the media sector.

I

Interventions Numériques

interventions-numeriques.fr

46

Interventions Numériques is a French-based small educational and mediation service focused on digital autonomy, offering a variety of training courses and mediation services to individuals and organizations. The business operates under the cooperative Oxalis, which is Qualiopi certified, indicating recognized quality in training services. The website is professionally designed using WordPress with a modern tech stack and SEO optimizations, providing good user experience and mobile responsiveness. Security posture is solid with HTTPS and no evident vulnerabilities, though some improvements in privacy compliance and security policy transparency are recommended. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive legitimacy assessment.

E

E2L - Ecole du Logiciel Libre

e2li.org

59

E2L - Ecole du Logiciel Libre is a French non-profit association dedicated to educating the public about free software through courses, conferences, and community events. Founded in 2015, it operates primarily in Ivry-sur-Seine and offers a range of educational activities including install parties, publications, and online resources. The organization targets individuals interested in free software, from beginners to IT professionals, emphasizing community involvement and open knowledge sharing. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Leaflet for maps, hosted via Gandi SAS. While the site is content-rich and professionally presented, it lacks formal privacy and cookie policies and does not show advanced security headers or DNSSEC, indicating room for improvement in security and compliance. Contact information is clearly provided, enhancing trust and credibility.

F

Friends Of OpenPGP

foopgp.org

49

Friends Of OpenPGP is a small non-profit association founded in 2020 focused on promoting OpenPGP technologies among businesses and citizens. The organization facilitates adoption through events, training, workshops, and community support. Their website reflects a niche market position with a clear mission to educate and support OpenPGP users and developers. Technically, the site is built with modern static site generator Hugo and uses popular frontend libraries such as Bootstrap and jQuery, hosted by OVH sas. The website is mobile responsive and well-structured, though it lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but DNSSEC is not enabled and security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security transparency.

F

FFmpeg Project

ffmpeg.org

10

FFmpeg is a well-established open-source multimedia software project founded in 2002, providing a comprehensive cross-platform solution for recording, converting, and streaming audio and video. It holds a leading position in the multimedia technology sector, supported by a strong developer community and regular major releases. The website reflects a mature project with detailed documentation, changelogs, and community engagement channels, targeting developers, multimedia professionals, and system integrators worldwide. The business model is donation and sponsorship-based, with no commercial advertising evident on the site. Technically, the website is built on a modern, lightweight stack using Bootstrap, Font Awesome, and jQuery, hosted by a reputable data center (Telepoint). The site is fast, mobile-optimized, and accessible, though accessibility features are basic. SEO practices are good, with proper meta tags and structured navigation. No CMS is detected, indicating a custom or static site approach. From a security perspective, the domain is long-standing and registered with a reputable registrar, with domain status flags enhancing security. However, DNSSEC is not enabled, and no explicit security headers or security.txt file are detected, representing areas for improvement. The project maintains a dedicated security page and issues regular security updates, demonstrating a proactive security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific compliance indicators. Overall, FFmpeg.org is a trustworthy, professional, and content-rich website representing a critical open-source multimedia project. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security.txt file, and adding cookie consent mechanisms to enhance privacy compliance and security posture.

C

Collabora Limited

apertis.org

56

Apertis is an open source GNU/Linux distribution and infrastructure platform primarily targeting automotive and embedded device markets. It is developed and maintained by Collabora Limited, a reputable company in the open source ecosystem. Apertis emphasizes security, modularity, and production readiness, offering extensive software management, testing frameworks, and resilient upgrade capabilities. The platform also provides tools and cloud services to optimize development and reliability. The website reflects a mature and professional project with frequent releases and commercial support options. Technically, the website is built using modern web technologies including Hugo static site generator, Bootstrap, jQuery, and FontAwesome. It is well-structured, mobile-optimized, and SEO-friendly. The site uses HTTPS exclusively, indicating good baseline security. However, some security best practices such as explicit security headers and cookie consent mechanisms are not evident. The WHOIS data is unavailable due to privacy protection, but the domain appears legitimate and consistent with the business identity. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or vulnerability disclosure page is a minor gap. Contact information is limited to an email address, with no phone numbers or incident response contacts. Privacy compliance is good with a comprehensive privacy policy and terms of use clearly linked. No advertising or tracking beyond minimal service monitoring is present, supporting user privacy. Overall, Apertis presents a trustworthy and professional open source platform with strong technical foundations and a clear focus on security and modularity. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.

N

National Infusion Center Association

infusioncenteraccreditation.org

57

The National Infusion Center Association (NICA) operates the NICA Accreditation Program, a nonprofit initiative focused on establishing quality and safety standards for ambulatory infusion centers across the United States. The program offers ANSI-accredited standards and a comprehensive accreditation process designed to improve care consistency, safety, and cost-effectiveness in infusion services. The website targets infusion centers and healthcare providers seeking accreditation and quality improvement. The organization positions itself as a leader in infusion care accreditation with strategic partnerships enhancing its service offerings. Technically, the website is built on WordPress using the Betheme theme, integrated with HubSpot for forms and analytics, and optimized with Yoast SEO and WP Rocket caching. The site demonstrates good mobile responsiveness, SEO optimization, and moderate performance. However, it lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. The use of third-party scripts like HubSpot and Google Tag Manager introduces moderate tracking but no obvious vulnerabilities. The WHOIS data shows consistent domain registration aligned with the organization's founding date and no privacy protection, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

L

L’Association de Surveillance Calédonienne de la Qualité de l’Air

scalair.nc

58

L’Association de Surveillance Calédonienne de la Qualité de l’Air operates as a regional non-profit organization dedicated to monitoring and reporting air quality in New Caledonia. The website serves as a comprehensive platform providing real-time air quality data, periodic reports, educational content, and public bulletins to residents and stakeholders concerned with environmental health. The association holds a key position as the authoritative source for air quality information in the region, targeting a general audience including the public, government entities, and environmental professionals. Technically, the website is built on the Joomla CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, and OpenLayers for interactive maps and data visualization. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. Privacy compliance is well addressed through a comprehensive privacy policy and an active cookie consent mechanism, reflecting GDPR adherence. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers that could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's organizational claims, supporting its legitimacy. Overall, the site presents a trustworthy and professional digital presence with room for security enhancements. Strategically, the association should focus on implementing additional security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen its security posture and public trust.

N

Nadace Preciosa

nadacepreciosa.cz

51

Nadace Preciosa is a well-established non-profit foundation affiliated with the Preciosa company, focusing on charitable activities primarily in the Liberec region of the Czech Republic. The foundation supports social, cultural, educational, health, and sports initiatives and has donated over 250 million CZK in its 27 years of operation. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at donors, volunteers, and beneficiaries. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit security policies are published. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness, but external media references and the association with Preciosa company support legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving its non-profit mission effectively.

A

Akademie AI

akademieai.cz

48

Akademie AI is a Czech-based educational platform specializing in artificial intelligence training, offering workshops and webinars primarily focused on ChatGPT and AI tool usage. The website positions itself as a niche provider targeting individuals and professionals seeking to enhance their AI skills. Technically, the site employs modern frontend technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The site is mobile optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy based on content and external references. Overall, Akademie AI demonstrates a solid digital presence with room for security and compliance enhancements.

R

Roman Kunert - Váš Digitální Stratég

romankunert.com

50

Roman Kunert operates a professional digital services business focused on website and e-shop development, SEO, digital marketing, and AI training. The company has a strong presence in the Czech Republic with multiple related projects and brands, positioning itself as a comprehensive digital strategist and service provider. The website is well-structured, visually consistent, and integrates modern web technologies and analytics tools. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, but the overall business presentation and multiple partner domains suggest a legitimate operation. Strategic recommendations include improving security headers, configuring third-party SDKs properly, and publishing clear privacy and security policies.

MojeRuka.cz is an informational and educational website dedicated to diseases and conditions of the hand and upper limb, targeting the general public primarily in the Czech Republic. The site offers comprehensive content on anatomy, acute and chronic diseases, prevention, treatment advice, and a directory of medical specialists. It also links to related healthcare projects and magazines, enhancing its value as a niche healthcare resource. The business model is non-commercial, focusing on education and community building for patients with upper limb conditions. Technically, the website is built on the LuckyWonder CMS 3.0 platform and utilizes a range of JavaScript libraries including jQuery, Owl Carousel, Fancybox, LayerSlider, and Google reCAPTCHA v3 for spam protection. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. There is no evidence of advanced analytics or tracking beyond reCAPTCHA. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect its contact form. However, no security headers were detected, and there is a lack of explicit privacy and cookie policies, indicating compliance gaps with GDPR and related regulations. The absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, the website provides valuable healthcare information with a professional design and good user experience but requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and security posture.

C

Centrum léčby bolesti

bolestbrno.cz

29

Bolest Brno is a specialized healthcare center focused on the treatment of acute and chronic pain, located in Brno, Czech Republic. The website presents a professional image with detailed descriptions of their key services including pharmacotherapy, acupuncture, nerve blocks, and infusion therapies. The center targets patients suffering from pain and offers treatments covered by general health insurance without the need for a referral. Technically, the website uses common frontend libraries such as Bootstrap, jQuery, and Slick slider, providing a moderate performance and basic mobile optimization. However, the absence of privacy and cookie policies and missing WHOIS data reduce the overall trust and compliance posture. Security headers and SSL configuration details are not evident from the provided data, indicating room for improvement in security practices. Overall, the website is functional and informative but would benefit from enhanced security, privacy compliance, and transparency regarding domain registration.

H

hub.brussels

hub.brussels

55

hub.brussels is the official Brussels Agency for Business Support, dedicated to assisting entrepreneurs and fostering economic development in the Brussels region. The agency provides a wide range of services including business creation, development, international expansion, networking, and access to resources and events. The website reflects a strong regional government presence with clear branding and comprehensive content tailored to independent professionals and business owners in Brussels. Technically, the site is built on WordPress with Elementor and integrates modern SEO and analytics tools, ensuring good performance and accessibility. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, although explicit security and incident response policies are not publicly detailed. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate government entity.

H

HelloPrint

helloprint.us

73

HelloPrint is a professional online printing service targeting businesses and resellers in the United States. The company offers a broad range of printing products including business cards, flyers, brochures, banners, and promotional items. The website is well-branded, consistent, and provides a comprehensive user experience with clear navigation and mobile optimization. Technically, the site leverages modern analytics and marketing technologies such as Google Analytics, Segment, and Algolia Search, and appears to be built on PrestaShop e-commerce platform. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and dedicated security policies are not clearly presented. The absence of WHOIS data for the domain is a notable anomaly, which slightly reduces trustworthiness despite the professional appearance and functionality of the site. Overall, the site is safe, compliant with GDPR, and provides clear contact channels, but would benefit from enhanced transparency in domain registration and security policies.

H

HelloPrint

helloprint.ie

73

HelloPrint operates as a large-scale e-commerce platform specializing in online printing services, offering a wide range of products including flyers, business cards, booklets, posters, banners, and more. The company targets both businesses and individual customers seeking convenient and affordable printing solutions, positioning itself as a major player in the online print marketplace with international reach. The website demonstrates a high level of digital maturity with a modern, responsive design, comprehensive cookie consent mechanisms, and integration of multiple analytics and marketing tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy front, though the lack of WHOIS data slightly impacts domain trust assessment.

AllCityBlog.fr is a specialized French media website dedicated to graffiti and street art culture, providing news, videos, and event information primarily targeting graffiti artists and enthusiasts. The site operates on a WordPress CMS with various plugins for galleries and event calendars, supported by affiliate partnerships with graffiti supply vendors such as Allcity.fr and Montana Colors. While the website offers rich content and a consistent brand presence, it uses an outdated WordPress version and lacks modern security headers and cookie consent mechanisms, which pose moderate security and compliance risks. Social media integration is robust, enhancing community engagement. Overall, the site is functional and trusted within its niche but requires technical and security updates to improve its posture and GDPR compliance.

Strabic.fr is a French niche media website focused on design, DIY, architecture, and cultural topics. It offers editorial content, a digital library, and supports its operations through donations and newsletter subscriptions. The website is built on the SPIP CMS and hosted by OVH, a reputable French hosting provider. Technically, it uses common web technologies including jQuery, Google Analytics, Typekit fonts, MailChimp for newsletters, and PayPal for donations. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content for its target audience. From a security perspective, the website uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or security policy information is provided. The WHOIS data is consistent with the website's French origin and domain age supports legitimacy. No WAF or blocking mechanisms are detected, and no suspicious or malicious content is present. Overall, the site is a small but credible cultural media outlet with moderate technical maturity and some gaps in privacy compliance and security best practices. Strategic improvements in privacy disclosures, cookie consent, and security headers would enhance trust and compliance.

E

ebabx école supérieure des beaux-arts de Bordeaux

ebabx.fr

52

The website www.ebabx.fr represents the ebabx école supérieure des beaux-arts de Bordeaux, a public higher education institution specializing in art and design under the French Ministry of Culture. The site provides detailed information about academic programs, workshops, events, and international mobility, targeting students, artists, and cultural professionals. The business model is that of a public educational entity with a medium-sized presence in the French education sector. Technically, the website is built on Drupal 8 CMS, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive content. Google Analytics is integrated with IP anonymization to track user engagement. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS (implied by canonical URLs) but lacks visible security headers in the provided data. No privacy or cookie policies are explicitly found, which is a compliance gap. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and institutional affiliation suggest authenticity. Overall, the website is professional and content-rich but would benefit from enhanced security headers, explicit privacy and cookie policies, and verification of domain registration details to strengthen trust and compliance.

L

Librairie Ombres Blanches

ombres-blanches.fr

61

Librairie Ombres Blanches is a regional bookstore based in Toulouse, France, offering a large inventory of books both in stock and available for order. The website serves as an online presence to support retail sales, provide reading advice, and promote events such as meetings and podcasts. The business targets general book readers in the Midi-Pyrénées region and operates primarily as a small retail entity with an online ordering capability. Technically, the website employs modern frontend frameworks such as Vue.js and Vuetify, along with analytics tools like Matomo and Pingdom for performance monitoring. The site is moderately optimized for mobile devices and SEO, with a good user experience and professional design. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and transparency. Security posture is moderate, with no detected security headers and unknown SSL configuration. Privacy compliance is weak due to missing privacy and cookie policies and lack of GDPR indicators. Overall, the website is functional and professional but would benefit from improved transparency, security hardening, and privacy compliance to enhance trust and reduce risk.

F

Fotokino

fotokino.org

49

Fotokino is a well-established cultural arts organization based in Marseille, France, specializing in visual arts exhibitions, workshops, conferences, and publishing. The organization operates a physical venue and an online presence that includes an e-shop and a rich events calendar. Their market position is niche, focusing on contemporary design and visual arts with a strong local and regional cultural impact. The website reflects a professional and consistent brand image with clear contact information and active social media engagement. Technically, the site is built on WordPress with modern plugins and libraries, hosted by Infomaniak, and optimized for mobile users. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, serving a general audience interested in arts and culture.

A

Ag Art cz s.r.o.

webmeeting.cz

54

WebMeeting, operated by Ag Art cz s.r.o., is a Czech-based online communication platform offering solutions for meetings, webinars, training, and conferences. It targets both business and private users within the Czech Republic, providing a localized and installation-free environment. The platform offers two main products: WebMeeting kavárna for quick, small meetings, and WebMeeting PRO for larger, professional online events. The company maintains a professional web presence with detailed contact information, client references, and social media engagement. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Matomo and Facebook Pixel. Security practices include HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the transparent business information and active customer support channels.

P

Pornhub

modelhub.com

66

Pornhub is a globally recognized adult entertainment platform offering free and premium pornographic video content. It holds a leading market position in the adult media industry, providing a wide range of services including video streaming, user-generated content, and live cam shows. The website demonstrates a mature digital infrastructure with modern technologies such as JavaScript frameworks, Google Tag Manager, and ad networks like TrafficJunky. Security measures include HTTPS enforcement, age verification modals, and cookie consent mechanisms, reflecting a strong commitment to user privacy and compliance with regulations such as GDPR. However, the absence of publicly available WHOIS data and explicit contact information for security or business inquiries slightly impacts its business credibility score.

AV your day svatby&eventy is a specialized wedding and event planning agency based in Brno, Czech Republic, founded in 2014. The company offers a comprehensive range of services including turnkey wedding planning, partial services, coordination, floral arrangements, decoration rental, wedding cakes, and event organization. The website reflects a professional and well-established business with a strong local presence and international experience. The target audience primarily consists of couples planning weddings and clients organizing events in the Brno region. Technically, the website is built on WordPress with WooCommerce and Elementor, utilizing modern plugins and frameworks to deliver a responsive and user-friendly experience. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the website is trustworthy and professional, but enhancing privacy compliance and security best practices would strengthen its position.

W

Webfusion

webfusion.cz

40

Webfusion is a Czech Republic-based technology service provider specializing in professional web development, e-commerce solutions, online marketing, mobile and web application development, and graphic design services. Established in 2015, the company targets businesses and entrepreneurs seeking to enhance their online presence and digital marketing effectiveness. Their website showcases a strong portfolio and case studies, indicating a solid market position among small to medium enterprises and corporates. Technically, the website is built on WordPress using the Salient theme and various plugins, including WPBakery Page Builder and Quform, reflecting a mature digital infrastructure. The site is mobile-optimized and employs modern web technologies, although performance is moderate. Security posture is good with HTTPS enforced and cloud backups mentioned, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.