Security Directory

S

Slovak PRO

slovakpro.org

59

Slovak PRO is a small professional organization dedicated to connecting Slovak professionals worldwide through networking events and community initiatives. The website is hosted on Squarespace and features a clean, professional design with good mobile optimization and clear navigation. The organization leverages social media platforms such as LinkedIn, Facebook, and Instagram to engage its audience. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating a good baseline security posture. However, the absence of privacy and cookie policies, as well as lack of visible contact information, represents gaps in privacy compliance and user trust. The WHOIS data is unavailable due to privacy protection, which is common for small organizations but slightly reduces transparency. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security headers.

A

Aspire Themes, LLC

aspirethemes.com

58

Aspire Themes, LLC is a specialized provider of premium Ghost CMS themes targeting publishers, bloggers, and newsletter creators. Established in 2015, the company offers a curated selection of professional, accessible, and customizable themes trusted by notable clients such as Harvard and Quillette, as well as thousands of other customers. Their business model centers on one-time purchases with free support and updates, positioning them as a niche player in the Ghost theme market with a strong reputation for quality and customer satisfaction. Technically, the website is built using modern web standards and tools including Jekyll for static site generation, integrates Google Tag Manager and Microsoft Clarity for analytics, and demonstrates excellent mobile optimization and SEO practices. The site is hosted on a domain registered with NameCheap, with HTTPS enforced and no signs of blocking or WAF interference. Security posture is solid with no exposed vulnerabilities, though improvements could be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website reflects a professional and trustworthy digital presence with room for enhanced security and privacy transparency.

F

Forsvaret

forsvaret.no

70

Forsvaret.no is the official website of the Norwegian Armed Forces, providing comprehensive information about military tasks, training, education, recruitment, veteran affairs, and public communication. The site targets Norwegian citizens interested in military service and the general public seeking authoritative defense information. The website demonstrates a high level of professionalism, with clear navigation, consistent branding, and relevant content tailored to its audience. Technically, the site employs modern web technologies including Vue.js and Google Tag Manager, and appears to be built on the Enonic CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanisms. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data is not publicly available due to Norid privacy policies, but the domain is consistent with an official Norwegian government entity. Overall, Forsvaret.no presents a trustworthy, secure, and well-maintained digital presence for the Norwegian Armed Forces, with recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen its security posture.

B

Bundesschülerrat im Bund der Freien Waldorfschulen e.V.

waldorfsv.de

49

WaldorfSV is a German non-profit organization representing students of Waldorf schools at the federal level. The website serves as an informational and organizational platform, providing details about their activities, events such as the Bundesschüler*innentagung, and sections dedicated to philosophical and educational policy matters. The organization targets students and stakeholders within the Waldorf education community in Germany. Technically, the website is built on WordPress with Elementor and uses common plugins like Events Manager and Slider Revolution. It is hosted on Goneo servers and employs HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is adequate with no critical vulnerabilities detected, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

LEAB is a German-based company specializing in mobile energy solutions, primarily serving manufacturers and converters of emergency, special, and commercial vehicles across sectors such as BOS, service, transport, and leisure. The company is positioned as a specialist within the Micropower Group, offering tailored power supply systems and related services including application engineering, logistics, production, and training. The website reflects a professional and consistent brand image with detailed product highlights and industry focus. Technically, the site employs modern web technologies including Laravel Livewire and integrates privacy-conscious analytics via Plausible. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit privacy and cookie policies. Overall, LEAB demonstrates a credible and trustworthy digital presence aligned with its business objectives.

S

Sparkasse Fulda

sparkasse-fulda.de

69

Sparkasse Fulda is a regional financial institution in Germany offering a comprehensive range of banking and financial services including online banking, accounts, credit cards, loans, insurance, investment products, and retirement planning. The website targets private customers, business clients, and young customers with tailored offerings. The site is professionally designed, well-structured, and provides extensive product information and customer support channels. Technically, the website is built on a modern stack likely powered by Adobe Experience Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, session timeout warnings, and cookie consent mechanisms, although explicit security headers could be confirmed. The domain registration data aligns well with the brand and regional focus, supporting legitimacy. Overall, the site demonstrates a mature digital presence with good compliance and trust indicators.

O

Olje og gass for det 21. århundre

og21.no

72

The website www.og21.no serves as a Norwegian platform focused on the oil and gas sector for the 21st century, likely supporting research, innovation, and collaboration within the energy industry. The site targets industry professionals and stakeholders, providing sector-specific information and updates. Technically, the site is hosted on Microsoft Azure and employs modern analytics tools such as Piwik PRO and Microsoft Application Insights, indicating a mature digital infrastructure. The presence of a comprehensive cookie consent mechanism aligned with GDPR demonstrates good privacy compliance. Security posture is solid with HTTPS enforced and use of security cookies, though explicit security headers and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for mobile and accessibility, but could improve transparency by publishing security policies and contact information.

I

IEA Norge

iea.no

74

IEA Norge operates as the Norwegian representative and coordinator for the International Energy Agency's technology collaboration programs. The organization facilitates information dissemination and participation coordination for Norwegian stakeholders in various energy and technology programs involving over 40 countries. The website reflects a professional governmental or quasi-governmental entity with a focus on energy and transportation sectors. Technically, the site is hosted on Microsoft Azure and uses modern analytics tools such as Piwik PRO and Microsoft Application Insights, indicating a mature digital infrastructure. The presence of a comprehensive cookie consent mechanism and privacy policies demonstrates good privacy compliance. Security posture is solid with HTTPS enforced, though the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

P

Industriell strategi for prosessindustrien

prosess21.no

73

The website www.prosess21.no serves as an informational and strategic platform focused on the industrial strategy for the process industry in Norway. It appears to be a government or research-backed initiative aimed at industry professionals, researchers, and policymakers. The site provides detailed information about industrial strategies and related initiatives, linking to several partner domains within the Norwegian industrial and energy sectors. Technically, the website is hosted on Microsoft Azure and uses modern analytics tools such as Piwik PRO and Microsoft Application Insights, indicating a mature digital infrastructure. The presence of a comprehensive cookie consent mechanism and privacy policy demonstrates good privacy compliance and user data protection awareness. Security-wise, the site enforces HTTPS and uses reputable cloud services, though explicit security headers are not fully confirmed. There are no visible vulnerabilities or exposed sensitive data. However, no direct contact information or security incident response details are provided, which could be improved for transparency and user trust. Overall, the website is professional, well-structured, and trustworthy, with a moderate to good security posture and compliance level.

The website coinstore.io is a parked domain page currently offered for sale through the Sedo domain parking platform. The domain is registered to Aligned Acquisitions Inc, a US-based entity, with registration dating back to 2017. The site contains no original business content or services and primarily serves as a placeholder with advertising and domain sale links. Technically, the site uses standard HTML5 and JavaScript with Sedo and Google Ads scripts for monetization. There is no evidence of a CMS or advanced frameworks. Security posture is minimal with no detected security headers and no explicit security or privacy policies beyond Sedo's generic privacy policy. The domain WHOIS data is consistent and transparent, indicating legitimate ownership and control. Overall, the site has low business credibility and content quality, reflecting its status as a domain parking page.

I

iSmile

blueskysmilesimulation.com

46

iSmile Simulation is a specialized digital healthcare service focused on providing 2D smile design and tele-dentistry solutions. The platform allows users to upload smile images for simulation and offers mobile applications for iOS and Android to extend its services. The business targets dentists and patients interested in dental aesthetics and remote dental consultations. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and an image comparison slider, delivering a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust in healthcare services. The domain uses privacy protection in WHOIS, which is common and justified for healthcare-related businesses. Overall, the website is functional and professional but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

艾迪斯鼎力科技（天津）有限公司是一家专注于消防与救援设备制造的企业，隶属于全球性的IDEX集团。公司提供包括液压破拆工具、消防泵、压缩空气泡沫系统等多种专业救援产品，服务于消防救援市场，拥有30年以上的行业经验和国际认证。网站内容丰富，设计专业，面向消防及救援专业人员，体现了较高的业务成熟度和市场定位。技术架构基于现代前端框架UIkit和jQuery，支持响应式设计，用户体验良好。安全方面，网站启用HTTPS，但缺少部分安全头和隐私合规机制，存在改进空间。整体风险较低，建议加强安全策略和隐私合规以提升信任度和合规性。

E

Evangelischer Kirchenkreis Bad Salzungen Dermbach

dein-tauftag.de

44

Dein-Tauftag.de is a small, non-profit web platform operated under the Evangelischer Kirchenkreis Bad Salzungen Dermbach, affiliated with the Evangelische Kirche in Mitteldeutschland (EKM). The website provides a service to remind users of their baptism day and offers informational content and community engagement tools targeted at parents, godparents, and baptized individuals. It holds a niche position within the religious community in Germany, focusing on spiritual and family-oriented content. Technically, the website employs a modern and common technology stack including Bootstrap, jQuery, and Piwik/Matomo for analytics. It is hosted on Eastlink servers, uses HTTPS with good SSL configuration, and is mobile-optimized with a clear navigation structure. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. There is no evidence of security policy publication or incident response contacts, and no cookie consent mechanism was detected, which could be improved for GDPR compliance. The WHOIS data is consistent with the website's organizational claims, supporting legitimacy. Overall, Dein-Tauftag.de is a trustworthy, well-maintained religious community website with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.

Thüringer Literaturtage is a small regional cultural festival organized by LeseZeichen e.V., focusing on literature events in the Thüringen region of Germany. The website serves as an informational portal for festival programming, archival content, and organizational details. The target audience includes literature enthusiasts and regional visitors interested in cultural events. The business operates as a non-profit cultural event organizer with a modest online presence. Technically, the website uses basic web technologies including HTML5, CSS, JavaScript with jQuery, and Font Awesome icons. The site is hosted likely on a German hosting provider indicated by the nameservers. Performance and mobile optimization are basic, with no advanced CMS or frameworks detected. SEO and accessibility features are minimal but present. From a security perspective, the site lacks HTTPS enforcement and security headers, which lowers its security posture. No privacy or cookie policies are present, and no contact information is explicitly provided, which impacts privacy compliance and business credibility. No WAF or blocking mechanisms are detected, and no vulnerabilities are immediately apparent from the content. WHOIS data is minimal but consistent with a small cultural event domain. Overall, the site is functional but basic, with room for improvement in security, privacy compliance, and contact transparency. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, securing login forms, and improving contact information visibility to enhance trust and compliance.

N

NCC

ncc.no

51

NCC is a large Norwegian company specializing in infrastructure, building, and real estate development. Their website reflects a professional corporate presence with a focus on sustainable construction solutions and societal development. The company targets customers and partners in the Norwegian construction and real estate sectors. Technically, the website uses modern web technologies including Google Fonts, Microsoft Application Insights for telemetry, and Cookiebot for cookie consent management. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and explicit privacy or security policies. Overall, the domain appears legitimate despite the absence of WHOIS data, which is common for Norwegian domains. The site integrates multiple third-party services for analytics and marketing, maintaining good advertising transparency. Recommendations include publishing clear privacy and security policies, adding contact information, and enhancing security headers to improve trust and compliance.

C

Coffin & Nails Publishing, LLC

coffinandnailspublishing.com

53

Coffin & Nails Publishing, LLC is a newly founded micro-publisher specializing in assisting debut authors with self-publishing their works, particularly in genres such as horror, thriller, fantasy, and science fiction. The company offers a unique business model that eliminates upfront financial investment by authors, instead providing advances as services. Their a la carte service offerings allow authors to tailor publishing support to their needs, positioning the company as a niche player focused on cost-effective, guided publishing experiences. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, including GSAP for animations. Hosting is provided by DreamHost, LLC, a reputable provider. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a cookie consent mechanism, which are important for compliance and protection. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security governance. Overall, the website presents a professional and trustworthy front for a small publishing business, with a solid foundation but some gaps in privacy compliance and security best practices. Strategic enhancements in these areas would improve trust and regulatory adherence.

D

Dark Veil Society

darkveilsociety.com

59

Dark Veil Society is a collective of independent horror authors focused on promoting and supporting dark fiction. The website serves as a platform for author collaboration, book promotion, and community engagement within the horror genre niche. The site is professionally designed with good content quality and clear navigation, targeting horror readers and writers. Technically, the site uses modern web standards, Google Analytics for tracking, and is hosted by DreamHost with DNS managed by Cloudflare. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows anomalies with a future domain creation date, which may be a data error but reduces trust slightly. Overall, the site is trustworthy and professional but could improve security and privacy practices.

I

International Workers and Amateurs in Sports Confederation

csit.sport

49

The International Workers and Amateurs in Sports Confederation (CSIT) is a well-established non-profit organization founded in 1913, dedicated to promoting amateur and workers' sports globally. The website reflects a mature digital presence with comprehensive content about their events, social missions, and partnerships with recognized international bodies such as the IOC and SportAccord. Their business model focuses on organizing multi-sport events and fostering social values like sustainability, human rights, and fair play. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including a robust cookie consent mechanism powered by Clickskeks. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. While no CMS or hosting provider is explicitly identified, the performance is moderate with good responsiveness. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. The cookie consent banner and privacy policy indicate good privacy compliance, although formal security policies and vulnerability disclosure mechanisms are absent. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, and enhancing HTTP security headers to further strengthen security posture.

W

worldgames.com

worldgames.com

51

The website ww25.worldgames.com is a domain parking page indicating that the domain worldgames.com may be for sale. There is no substantive business content, services, or company information presented. The site primarily serves advertisements via Google Adsense and Bodis scripts, with minimal user engagement or navigation features. The WHOIS data is unavailable, suggesting the domain is either unregistered or privacy protected, which aligns with the domain parking status. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS and security headers. Privacy compliance is minimal with only basic privacy and legal pages present but no cookie consent mechanism. Overall, the site lacks business credibility and trust indicators.

The website at arisf.sport is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered to ARISF, a Swiss organization established in 2018, with transparent WHOIS data and no privacy protection. Due to the access restriction, no privacy policies, contact information, or business descriptions are available on the site. The technical infrastructure appears minimal with basic HTML and CSS, and no advanced frameworks or analytics detected. Security posture is limited by lack of DNSSEC and security headers, but the domain registration is legitimate and consistent with the organization. Overall, the site is currently non-functional for public users, limiting any meaningful analysis of business or security maturity.

J

JIROUT REKLAMNÍ AGENTURA s.r.o.

rezidencetrnova.cz

60

Rezidence Nová Trnová is a Czech Republic-based real estate development project focused on providing modern, comfortable housing for approximately 200 families in Pardubice. The project emphasizes proximity to nature, accessibility to city centers, and full civic amenities including parking facilities. The website is professionally designed with clear navigation and contact options, targeting home buyers and families. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and YouTube API for video content. While the site is mobile optimized and includes cookie consent mechanisms, it lacks visible security headers and explicit SSL configuration details. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a moderate security posture with good privacy compliance but would benefit from enhanced security practices and domain registration verification.

F

fitness-rezervace.cz

fitness-rezervace.cz

47

fitness-rezervace.cz operates a specialized online reservation and information system primarily targeting fitness centers, gyms, yoga studios, and various sports facilities in the Czech Republic. Established in 2011, the company offers a comprehensive software solution that includes user management, payment integration, live streaming capabilities, and advanced features such as turnstiles, vouchers, and REST API for developers. Their market position is that of a niche leader within the Czech fitness and sports reservation software sector, supported by a small but focused business model emphasizing customization and client support. The website reflects a professional and consistent brand image with clear business information and contact details.

The domain roadsafety.international is currently a parked domain with no active website content or business presence. The site displays a Sedo parking iframe and Google ads scripts, indicating it is not operational for any road safety-related business or service. The lack of privacy policies, contact information, or business details further confirms the domain is inactive. Technically, the site uses basic HTML and JavaScript with no detected CMS or advanced frameworks. There is no evidence of HTTPS enforcement or security headers, which poses a security risk if the site were to become active. The WHOIS data is minimal and does not provide creation or expiry dates, with registrant information withheld, reducing trustworthiness. Overall, the domain is not currently suitable for business use and lacks any meaningful security or compliance posture.

X

Xenoplexus Webstudios, LLC

idowebsitestuff.com

56

Xenoplexus Webstudios, LLC is a small freelance web development business operated by Blake Myers, offering custom website design, performance optimization, responsive development, logo creation, and consulting services. The company targets small businesses, non-profits, and schools, emphasizing high-quality, standards-compliant web solutions. The website demonstrates a professional portfolio with multiple client projects and clear contact information including physical addresses in the US and Czech Republic. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and PHP, with a focus on responsive design and performance. Hosting is provided by DreamHost, with Cloudflare nameservers, and the site enforces HTTPS with a clientTransferProhibited domain status, indicating good security practices. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in security hardening. Privacy compliance is addressed with a GDPR privacy policy, but no cookie consent mechanism is present. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is well-structured, trustworthy, and professionally maintained, with a solid security posture but some opportunities for enhancement.

Č

Česká asociace cheerleaders

cheerleadingjesport.cz

45

The website 'Cheerleading je sport!' serves as the official online presence for the Czech Association of Cheerleaders (ČACH), a national sports authority representing cheerleading clubs and athletes in the Czech Republic. It provides educational content about cheerleading, club directories, national team information, and historical context. The site targets cheerleading enthusiasts, athletes, and the general public interested in the sport within the Czech Republic. The business model is non-profit and focused on sport promotion and community building. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and FontAwesome icons, with a responsive design framework (Skel) to support mobile devices. The site loads moderately fast and offers a good user experience with clear navigation and relevant content. However, there is no detected CMS or advanced analytics, indicating a relatively simple technical infrastructure. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. No forms or sensitive data collection mechanisms are present, reducing immediate privacy risks. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small non-commercial organizations. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a legitimate, well-structured resource for cheerleading in the Czech Republic but would benefit from enhanced privacy compliance, improved security headers, and more transparent business contact information to strengthen trust and compliance.

The website smartteplomery.cz represents a small technology business focused on providing smart thermometers and meteorological stations with remote administration capabilities. The business appears to be newly established in 2024, targeting consumers and small businesses interested in temperature monitoring solutions. The website offers an e-shop and user account management features, emphasizing data visualization and remote device control. Technically, the website is built with standard HTML, CSS, and JavaScript without reliance on major frameworks or CMS platforms. Hosting is provided by WEDOS, a Czech hosting provider. The site demonstrates good mobile optimization and user experience with a clean, consistent design. However, SEO and accessibility features are basic, and no advanced analytics or marketing tools are detected. From a security perspective, the site uses HTTPS (assumed from domain and modern standards, though not explicitly confirmed in the HTML). There is a lack of security headers and no visible privacy or cookie policies, which impacts GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and regulatory adherence.

Mateřská škola Chvojenec is a small, local preschool institution located in the Pardubice region of the Czech Republic. The website provides detailed information about the school's educational philosophy, programs, and community engagement, targeting parents of preschool-aged children. The business operates as a public contributory organization, emphasizing child development through experiential learning and Czech cultural heritage. Technically, the website is built with standard HTML and CSS, includes basic forms for login and search, and embeds Google Maps for location reference. The site uses Google Fonts and has a cookie consent mechanism, but lacks advanced CMS or modern frameworks. Security posture is basic with no visible HTTPS enforcement or security headers, and no privacy or terms of service policies are published. Contact information is clearly presented, supporting business credibility. Overall, the site is functional and informative but would benefit from improved security and privacy compliance measures.

F

Facta Pro Futura

factaprofutura.com

58

Facta Pro Futura is a specialized strategic foresight platform focusing on understanding future trends and challenges, particularly in the energy sector and Central Europe. The website offers horizon scanning, data analysis, reports, and a geocalendar to support decision-makers in anticipating risks and opportunities. The platform collaborates with recognized partners such as the Adapt Institute, enhancing its credibility in the foresight domain. Technically, the website is built on the Webnode CMS, leveraging AWS Cloudfront CDN for content delivery, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism but lacks visible security headers and formal privacy or terms of service pages. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional nature of the site partially offsets this risk. Overall, the site presents a moderate security posture with room for improvement in compliance and transparency.

MI-MA is a small Czech graphic design business specializing in the creation of internet websites, e-shops, banners, flyers, posters, and video production. The website serves as a portfolio showcasing various projects and design works. The business appears to be well-established with a domain registered since 2007, indicating stability and longevity in the market. The target audience is general, likely local businesses or individuals seeking graphic design services. Technically, the website is built on the MyPortfolio platform, uses modern web standards including HTTPS and Typekit fonts, and is moderately optimized for mobile devices. However, it lacks comprehensive privacy and cookie policies, contact information, and security headers, which are important for trust and compliance. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user engagement. Security posture is adequate with HTTPS but could be improved with additional headers and policies. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

LUVENEX is a small Czech digital agency specializing in creative graphic work, website development, and internet marketing services. The company presents itself as a team of experienced professionals offering comprehensive digital solutions including web design, SEO, PPC advertising, and social media management. The website is professionally designed with clear service descriptions and client testimonials, indicating a stable market position within its niche. Technically, the site uses standard web technologies such as HTML5, CSS3, and Google Fonts, with moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS platforms. Security posture is limited due to lack of HTTPS verification, missing security headers, and absence of privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the website is functional and professional but requires improvements in security, compliance, and trust signals to enhance its credibility and risk profile.

The website 'Slovak Industry Vision Day' appears to be a business event platform aimed at connecting industry professionals and partners in Slovakia. The site promotes networking and matchmaking opportunities but lacks detailed business information, contact details, and formal policies. The technical infrastructure is based on the SITE123 CMS platform, utilizing standard web fonts and CDN-hosted resources. The site is accessible without any WAF or security blocking mechanisms, but it lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site presents basic content with moderate technical implementation but requires significant improvements in security posture and business credibility to enhance trust and compliance.

T

TRL SPACE

trlspace.cz

43

TRL SPACE is a Czech Republic-based mission integrator specializing in small satellites, probes, and space technology solutions. Founded in 2021, the company focuses on providing affordable and customized satellite solutions for sovereign satellite systems, Earth Observation, Communications, and lunar missions. Their business model centers on mission integration services and delivering bespoke satellite products and services to a diverse client base including commercial customers and space sector entities. The company maintains a strong partnership ecosystem with numerous research and space organizations, enhancing its market position as a premier mission integrator in the region. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. However, SEO and accessibility features are basic, and performance is moderate. The hosting provider is not explicitly identified, but external scripts are served via Amazon CloudFront. From a security perspective, the website uses HTTPS but lacks visible security headers and published security policies such as privacy, cookie, or incident response policies. No forms collecting sensitive data are present on the homepage, reducing immediate risk exposure. The WHOIS data is consistent with the business profile, showing domain registration in 2021 with no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could be improved by implementing security headers, privacy policies, and incident response information. The overall risk assessment indicates a trustworthy and professional business with minor compliance gaps primarily in privacy and security policy disclosures. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing incident response contacts to improve compliance and trust.

B

BRNO SPACE CLUSTER z.s.

brnospacecluster.cz

42

Brno Space Cluster z.s. is a technology-focused business entity formed by multiple companies and institutions from the Brno region, specializing in engineering services and cooperation on space projects. Leveraging experience from major aerospace players such as ESA, ArianeGroup, OHB, Avio, and Leonardo, the cluster operates in the commercial space market, providing services including satellite development exemplified by the Mise Drak project. The website reflects a professional and consistent brand presence with clear contact information and a strong partner ecosystem. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google Analytics for user tracking and is hosted on servers associated with the Ignum nameservers. The site is mobile-optimized with good SEO practices but lacks some accessibility features and security headers which could enhance its technical robustness. From a security perspective, the website uses HTTPS with excellent SSL configuration, but it lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. No forms or direct data collection mechanisms are present, reducing immediate data exposure risks. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the organization's founding date and no suspicious registration patterns. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

A

Affino

affino.com

69

Affino is a technology company specializing in AI-enhanced customer experience solutions delivered via a unified SaaS platform. Their offerings include personalization, automation, AI-powered search, adaptive analytics, and conversion funnel optimization. The company positions itself as a leader providing hands-on services to help clients outperform competitors. Technically, the website employs modern front-end technologies such as HTML5, CSS3, JavaScript, jQuery, and SVG graphics, with a proprietary CMS platform. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate with HTTPS implied and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is limited with no visible privacy or terms of service pages, though a cookie policy with consent mechanism is present. WHOIS data is unavailable, which reduces trustworthiness but the professional presentation and contact information support business credibility. Overall, the site is suitable for business audiences seeking AI-driven customer experience platforms.

L

Les Ateliers de maîtrise d’œuvre urbaine de Cergy Pontoise

ateliers.org

52

Les Ateliers de maîtrise d’œuvre urbaine de Cergy Pontoise is a well-established non-profit organization based in France, specializing in organizing international workshops focused on urban planning and design. With over 30 years of experience, they engage students, young professionals, and local stakeholders to collaboratively address urban challenges. Their website reflects a professional and content-rich platform that supports their mission and outreach. Technically, the website uses modern web technologies including Google Analytics and Tag Manager for tracking, hosted by OVH sas. The site is mobile-optimized and has a moderate performance profile. However, there are gaps in security best practices such as missing DNSSEC, lack of security headers, and absence of published privacy and cookie policies, which impact compliance and security posture. From a security perspective, the site uses HTTPS and includes CSRF protection in forms, but lacks explicit incident response and vulnerability disclosure information. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, enhancing trustworthiness. Overall, the site is credible but would benefit from improved security and privacy compliance measures.

H

HELCZA - High Energy Load Czech Assembly

helcza.cz

54

The website www.helcza.cz represents HELCZA (High Energy Load Czech Assembly), a specialized experimental facility dedicated to cyclic thermal testing of components for future fusion energy devices. The site targets the scientific and engineering community involved in fusion technology development. The business model is focused on research and development within the energy sector, specifically fusion energy. The website presents a professional and consistent branding with good content quality, though it lacks visible contact information and privacy policies. Technically, the site uses modern web technologies including the Brz framework and Bunny Fonts, with moderate performance and good mobile optimization. Security posture is moderate due to lack of visible security headers and unknown SSL configuration. WHOIS data is unavailable, limiting domain trust assessment. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and clearer contact channels.

E

Energy Well - small modular nuclear reactor

energywell.cz

57

The website www.energywell.cz presents a business focused on the development of a fourth generation small modular nuclear reactor characterized by high passive safety and innovative technologies. The site content is professionally designed and targeted at a general audience interested in advanced energy technologies. However, the absence of WHOIS registration data and lack of contact or policy information limits the ability to fully verify the business legitimacy and compliance. Technically, the site uses modern web fonts and standard web technologies but lacks visible security headers and privacy compliance mechanisms. The security posture is weak due to missing security best practices and absence of HTTPS verification in the provided data. Overall, the site is accessible and content-rich but requires improvements in transparency, security, and compliance to enhance trust and reduce risk.

C

CICRR Czech International Centre of Research Reactors

cicrr.cz

58

The Czech International Centre of Research Reactors (CICRR) operates as a significant national research infrastructure focusing on nuclear research reactors and supporting scientific facilities. The website presents detailed information about its reactors LVR-15, LR-0, and JHR-CZ, along with associated laboratories and analytical facilities, targeting the scientific and energy research community. The organization appears to hold an important position within the Czech Republic's energy and research sectors. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with fonts served via Bunny Fonts and content delivered through Bunny CDN. The site is mobile-optimized with good SEO practices but lacks advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or incident response policies, which are critical for compliance and trust. No WHOIS data is available, suggesting privacy protection or domain registration issues, but the website content aligns with a legitimate research entity. No WAF or blocking mechanisms were detected, and no tracking or advertising scripts are present, indicating minimal user tracking. Overall, the site is professional and content-rich but would benefit from enhanced security practices, clear privacy and contact information, and WHOIS transparency to improve trust and compliance.

Č

Česká asociace cheerleaders

cach.cz

49

Česká asociace cheerleaders (ČACH) is a Czech non-profit organization dedicated to the promotion and development of cheerleading in the Czech Republic. The association organizes competitions, training camps, workshops, and certifies coaches and judges. It also manages national team representation and membership services. The website reflects a well-structured organization with a clear focus on cheerleading sports and community engagement. The association maintains partnerships with various sports and commercial entities and has an active presence on multiple social media platforms. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with a CMS likely based on Perch. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

J

Jupiter System Partner AS

jupiter.no

61

Jupiter System Partner AS is a Norwegian technology company established in 1999, specializing in system development, system architecture, and project management across both private and public sectors. The company offers cloud-based publishing solutions, data integration services, and digital tools for formal meetings, positioning itself as a trusted partner with over two decades of expertise. Their market presence is solidified by membership in the Norwegian Cyber Security Cluster and a professional digital footprint. Technically, the website employs modern web technologies with a clean, responsive design, though no major CMS or third-party frameworks are explicitly detected. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible and professional business with room for improvement in security transparency and privacy practices.

L

Locaweb Serviços de Internet S/A

locaweb.com.br

70

Locaweb Serviços de Internet S/A is a leading Brazilian technology company specializing in web hosting, domain registration, email, cloud, and VPS services. Established in 1998, it holds a strong market position as a trusted provider with a comprehensive portfolio targeting businesses and individuals seeking reliable internet infrastructure solutions. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site employs modern web standards, uses HTTPS with strong SSL configuration, and integrates Google Analytics for user insights. Security posture is robust with appropriate headers and no evident vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the domain registration data aligns perfectly with the business claims, reinforcing legitimacy and credibility.

K

Kloster Memleben

kloster-memleben.de

60

Kloster Memleben is a cultural heritage site in Germany focused on preserving and presenting imperial history and monastic traditions. The website serves as an informational portal for visitors, offering details on exhibitions, guided tours, events, and visitor amenities such as a café and museum shop. The target audience includes tourists, local visitors, and history enthusiasts. The business operates primarily as a small-scale cultural and hospitality entity with a regional focus. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting services. The site employs modern web technologies including HTML5, CSS, and JavaScript, with a responsive design optimized for mobile devices. Performance is moderate, with standard Squarespace assets and no heavy third-party scripts detected. From a security perspective, the site enforces HTTPS with HSTS enabled, indicating strong SSL configuration. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosures. Privacy compliance is partial, with a cookie consent banner present but no accessible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional front for Kloster Memleben, though improvements in privacy documentation and security transparency would enhance compliance and user trust.

F

Freie Gemeinschaftsbank Genossenschaft

gemeinschaftsbank.ch

42

Freie Gemeinschaftsbank Genossenschaft is a Swiss cooperative bank focused on sustainable and transparent banking practices. It offers services including account opening, credit lending, and sustainable investments, targeting individuals and projects aligned with ecological and social values. The bank positions itself as a niche player in the Swiss sustainable finance sector, emphasizing community involvement and transparency. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies with good SEO and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website reflects a trustworthy and professional financial institution with a clear sustainability mission.

Mastercard Norway's website serves as a corporate portal for Mastercard's payment and financial services in Norway. The site presents a professional brand image consistent with Mastercard's global identity, targeting consumers and businesses in the Norwegian market. The business model focuses on payment processing and digital payment solutions, positioning Mastercard as a leading player in the finance sector. Technically, the website employs modern web technologies such as StencilJS web components, ensuring a contemporary user experience with good mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and user trust. Security posture is moderate with HTTPS enforced but missing additional security headers. Overall, the site appears legitimate and safe but could improve transparency and compliance aspects.

M

mnemonic AS

mnemonic.io

81

mnemonic AS is a well-established cybersecurity company based in Norway, celebrating 25 years of operation in 2025. The company specializes in helping businesses manage security risks, protect data, and defend against cyber threats. Their market position is strong within Europe, offering a broad range of services including Managed Detection & Response, Threat Intelligence, Incident Response, Assessments & Testing, Consulting, and Security Products. The company targets businesses requiring advanced cybersecurity solutions and operates multiple offices across Europe and the US. Technically, the website is built on the EPiServer CMS platform with modern web technologies and demonstrates good mobile optimization, accessibility, and SEO practices. The site is performant with a professional design and clear navigation. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and a public vulnerability disclosure policy. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies. The WHOIS data is privacy protected, which is typical for cybersecurity firms, and the domain's legitimacy is supported by consistent contact information and trusted client references. Overall, mnemonic presents a professional, trustworthy, and technically mature online presence with a strong focus on cybersecurity services for enterprise clients.

Č

Česká pošta, s.p.

pohledniceonline.cz

53

PohledniceOnline.cz is an official online postcard creation and delivery service operated by Česká pošta, the Czech Republic's national postal service. The platform enables users to upload personal photos, customize postcards, and send them physically via postal delivery both domestically and internationally. The service is accessible via web and mobile applications, supporting multiple payment methods including prepaid vouchers and secure online payments through ComGate. The website is well-branded, professionally designed, and targets a broad audience seeking convenient postcard sending solutions. Technical infrastructure includes modern web technologies and integration with trusted payment gateways, hosted on Websupport servers. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Overall, the website demonstrates a strong business credibility and trustworthy presence aligned with its parent postal organization.

Č

Česká pošta

sipo.cz

51

The website sipo.cz represents the SIPO payment tool operated by Česká pošta, the Czech national postal service. It offers a consolidated payment solution for regular bills such as utilities, rent, and broadcasting fees, simplifying payment processes for the general public in the Czech Republic. The site is well-branded, consistent with the parent company, and provides clear information about the service and contact details. The domain is long-established, dating back to 2001, aligning with the service's history and legitimacy. From a technical perspective, the website uses standard web technologies including HTML5, CSS, and JavaScript. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, there is no explicit CMS or advanced frameworks detected, and some accessibility and SEO optimizations are basic. Security headers and explicit security policies are not visible in the provided content, though HTTPS usage is implied. No signs of tracking or advertising scripts were found, indicating a privacy-conscious approach. Security posture is moderate with no critical vulnerabilities detected in the content. The site links to comprehensive privacy and cookie policies hosted on the official Czech Post domains, indicating GDPR compliance. Contact information is clearly provided, but there is no visible incident response or vulnerability disclosure information. The domain WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the website is a trustworthy, government-backed payment service platform with good content quality and business credibility. Strategic improvements could focus on enhancing security headers, adding explicit security and incident response policies, and implementing cookie consent mechanisms to further strengthen privacy compliance and security posture.

C

Concrete Pump Repair South

concretepumpssouth.com

62

Concrete Pump Repair South is a specialized service provider focused on concrete pump repair and parts distribution, particularly Schwing OEM parts. The company operates as a Small Line Dealer and satellite CPR Repair center in the Southeastern United States, emphasizing quality and customer support. The website is professionally designed using the Squarespace platform, featuring clear navigation and responsive design, though it lacks explicit contact details and privacy-related policies. Technically, the site benefits from HTTPS and HSTS, ensuring secure connections, but could improve by adding additional security headers and privacy compliance features. The absence of WHOIS data reduces domain trustworthiness, suggesting recent registration or privacy protection, which should be monitored. Overall, the site presents a credible business front but requires enhancements in privacy, contact transparency, and security best practices to strengthen trust and compliance.

W

wbv Media

wbv-media.de

57

wbv Media is a well-established German family-owned media and logistics company with over 150 years of history. It operates through three main business units: Distribution, Communication, and Publication, serving public clients, scientific communities, and online shops. The company positions itself as a reliable partner with scalable logistics and communication services, emphasizing tradition and innovation. Technically, the website uses modern frameworks like UIkit and jQuery, is mobile-optimized, and implements a cookie consent mechanism with blocking access until consent is given. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

F

Formspree

formspree.io

65

Formspree, Inc is a US-based technology company founded in 2014 that provides a SaaS form backend, API, and email service tailored for developers and businesses seeking to embed custom forms without server code. The company enjoys a strong market position, trusted by over 500,000 users including freelancers, agencies, and Fortune 500 companies such as Amazon, OpenAI, and Adobe. Their key services include spam filtering, email notifications, third-party integrations, and easy-to-use popup forms, positioning them as a reliable form solution provider in the developer tools space. Technically, the website is built using the Hugo static site generator and leverages modern analytics platforms including Google Analytics, Amplitude, and PostHog. Hosting and DNS services are provided by Cloudflare, ensuring fast performance and robust infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security practices include HTTPS enforcement, machine learning spam filtering, reCaptcha integration, and custom spam rules, although DNSSEC is not enabled and some security headers may be missing. From a security standpoint, Formspree demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy and terms of service policies are comprehensive and GDPR compliant, though explicit incident response contacts and vulnerability disclosure policies are absent. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness. Overall, Formspree presents a professional, secure, and privacy-conscious service with excellent content quality and technical implementation. Strategic improvements could include enabling DNSSEC, publishing a security.txt file, and adding cookie consent mechanisms to enhance compliance and security transparency.