Security Directory

A

AiVision, s.r.o.

aivision.cz

53

AiVision, s.r.o. is a Czech Republic based technology company specializing in web development, e-commerce solutions, and IT services with over 21 years of market presence. The company offers a comprehensive portfolio including website creation, web design, database applications, SEO, hosting, and WordPress security services. Their market position is that of an established local provider focused primarily on Prague and surrounding regions. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for marketing and tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, though business legitimacy is supported by consistent contact information and client references. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in security transparency and WHOIS data availability.

N

Netdev

netdev.fr

46

Netdev is a small digital agency based in Annecy, France, specializing in web creation, digital marketing solutions, and media services such as photo, video, and drone shoots. The company targets businesses seeking to enhance their online presence through expert digital solutions. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern analytics and marketing tools like Matomo, Google Tag Manager, and Microsoft Clarity, indicating a mature digital setup. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website presents a trustworthy and professional business presence with moderate risk due to lack of WHOIS transparency and some missing security documentation.

G

G4 REALITY

g4reality.cz

49

G4 REALITY is a small regional real estate agency based in Rosice u Brna, Czech Republic, specializing in the sale and rental of houses and apartments primarily in the surrounding areas including Rosice, Ivančice, Moravský Krumlov, and Brno venkov. The company offers comprehensive real estate services including professional property valuation, legal services, and mortgage consulting through partnerships with recognized specialists. The website reflects a professional and trustworthy business presence with clear contact information and positive client testimonials. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and some security headers slightly reduce trustworthiness from a security perspective. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the site is well-designed, content-rich, and serves its target audience effectively.

F

Femdom Empire - Hardcore Dominatrix video

femdomempire.net

51

Femdom Empire is an adult entertainment website specializing in femdom fetish videos, positioning itself as a market leader in this niche. The platform offers categorized video content with frequent updates and operates a network of partner and affiliate sites. Technically, the site is built on the DataLife Engine CMS, utilizing common web technologies such as jQuery UI, Bootstrap, and Font Awesome, and is hosted behind Cloudflare DNS services. The website demonstrates good content quality and user experience with mobile optimization and clear navigation, although accessibility features are basic. Security posture is moderate; while HTTPS is implied, no advanced security headers or cookie consent mechanisms are present, indicating room for improvement in compliance and security best practices. The domain registration is consistent and legitimate, with no privacy protection or suspicious WHOIS data. Overall, the site serves an adult-only audience with explicit content and lacks explicit privacy and cookie policies, which impacts its compliance score.

A

ALISCHEM – Průmyslová chemie s.r.o.

alischem.cz

37

ALISCHEM – Průmyslová chemie s.r.o. is a Czech Republic based small industrial chemical company founded in 2016, specializing in fireproof coatings for wood, powder coatings, industrial paints, and comprehensive corrosion protection services. The company benefits from the support of its parent company ALUMONT BUILDING a.s., which provides essential business infrastructure. The website is professionally designed using WordPress and common plugins, presenting clear business information and contact details. However, the absence of WHOIS data and privacy policies slightly reduces trustworthiness. Technically, the site uses HTTPS but lacks important security headers, which could be improved to enhance security posture.

I

iJoomla

ijoomla.com

65

iJoomla is a specialized technology company focused on developing professional Joomla extensions, including learning management systems, community software, advertising tools, publishing platforms, and SEO enhancements. With over 15 years of experience and a customer base exceeding 40,000, iJoomla holds a respected position in the Joomla ecosystem. Their product suite targets Joomla website owners and developers seeking to enhance their sites with robust, feature-rich extensions. The website demonstrates a mature digital presence with clear navigation, multimedia content, and integration of modern web technologies such as Joomla CMS, PHP 8.2 compatibility, and Google Analytics for performance insights. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. The absence of WHOIS registration data is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, iJoomla presents a professional and trustworthy business front with good technical infrastructure and compliance practices.

I

iJoomla.com Inc

jomsocial.com

64

JomSocial is a leading community software solution designed to transform Joomla CMS into a full-featured social networking platform. The company behind it, iJoomla.com Inc, offers a mature product with a strong market presence, serving over 180,000 websites globally. Their offerings include a rich set of features, add-ons, templates, and customization services, supported by a professional team and an active user community. The website reflects a well-structured, modern design optimized for mobile and desktop users, leveraging Joomla CMS and popular web technologies such as Bootstrap, UIkit, and Google Analytics. From a technical perspective, the site demonstrates good digital maturity with responsive design, SEO optimization, and integration of security features like HTTPS and Google reCAPTCHA. However, there is room for improvement in security headers and explicit incident response disclosures. The absence of WHOIS data for the domain www.jomsocial.com is a notable gap, impacting trust and legitimacy assessments. Despite this, the website content and external references to iJoomla.com Inc provide reasonable confidence in the business's authenticity. Security posture is solid with encrypted communications and no visible vulnerabilities, but the lack of detailed security policies and incident response contacts suggests an opportunity to enhance transparency and compliance. Privacy compliance is addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned in its niche, though verifying domain registration details is recommended to strengthen credibility.

Probiller operates as a secure online payment gateway service provider facilitating millions of transactions monthly for innovative eCommerce businesses worldwide. The company emphasizes security, compliance, and multilingual 24/7 customer support, positioning itself as an industry leader in payment processing. The website content reflects a professional and customer-focused approach with clear service descriptions and multiple contact channels. Technically, the website employs modern web technologies including jQuery, Bootstrap, Owl Carousel, and integrates a third-party chat widget for customer support. The site is mobile optimized with good navigation and SEO practices, though some accessibility features could be improved. Security best practices are partially implemented, with HTTPS implied but no explicit security headers detected in the HTML source. From a security perspective, the absence of WHOIS data and lack of cookie consent mechanisms are notable gaps that impact trust and privacy compliance. However, no critical vulnerabilities or exposed sensitive data were found. The site maintains a safe content rating with no adult or questionable material. Overall, Probiller presents a credible and professional online presence with room for improvement in transparency, privacy compliance, and security hardening to enhance trust and regulatory adherence.

T

TY Concept store s.r.o.

tyidentity.cz

56

TY IDENTITY operates as a niche retail and e-commerce platform specializing in Czech and Slovak design products. The company supports local designers by offering their creations in physical stores located in Ostrava and Brno, as well as through an online shop. The website is professionally designed using WordPress with a modern theme and plugins, providing a good user experience and mobile optimization. Contact information and social media presence are clearly provided, enhancing business credibility. However, the absence of WHOIS data and lack of cookie consent mechanisms indicate areas for improvement in trust and compliance. Security posture is adequate with HTTPS enabled but could benefit from additional security headers and published policies.

J

JoomlArt

joomlart.com

57

JoomlArt is a well-established provider of Joomla templates, extensions, and related services with over 19 years of experience and a large customer base exceeding 300,000 members. The company operates multiple top Joomla clubs, offering a comprehensive suite of products including the T4 Page Builder and T4 Framework, targeting Joomla developers and businesses seeking professional website solutions. Technically, the website is built on Joomla CMS with modern frameworks and libraries, optimized for mobile and SEO, and integrates multiple analytics and marketing tools. Security posture is good with HTTPS enforced and secure payment indicators, though explicit security policies and incident response details are lacking. The absence of WHOIS domain registration data is a concern but the website's content quality, branding, and community presence support its legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the Joomla ecosystem.

J

Janus s.r.l.

amamusei.it

55

AmaMusei is a specialized Italian company providing digital audioguide solutions for museums and cultural territories. Their platform enables museums to autonomously create and manage official guides accessible via a dedicated mobile app for iOS and Android. The company targets cultural institutions and local territories aiming to enhance visitor engagement and expand cultural experiences beyond museum walls. The business operates in a niche market with a small company profile and strong regional partnerships.

R

Rupa

rupa.cz

9

Rupa is a Czech-based manufacturer specializing in the production and development of cereal bars. The company targets B2B clients and distributors within the food manufacturing and retail sectors. The website is built on WordPress using the Elementor framework, indicating a moderate level of digital maturity. The presence of Google Tag Manager suggests some level of analytics and marketing integration. Security posture is adequate with HTTPS enabled, but lacks important security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data limits transparency but is common for privacy-conscious domains. Overall, the website presents a professional image suitable for a medium-sized manufacturing business but would benefit from enhanced security and compliance features.

P

Pivovar Kytín, s.r.o.

pivovarkytin.cz

9

Pivovar Kytín, s.r.o. operates a brewery and restaurant in Kytín, Czech Republic, specializing in traditional Czech beers and cuisine. The business targets beer enthusiasts and local visitors, offering a combination of beer production, dining, events, and accommodation partnerships. The website reflects a small hospitality business with a focus on authentic Czech culinary experiences and craft beer. Technically, the site uses modern web technologies including Next.js, Bootstrap, Google Analytics, and Facebook Pixel, providing a responsive and visually appealing user experience. However, the site lacks explicit privacy and cookie policies, which may impact GDPR compliance. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the presence of clear contact information and social media integration supports business credibility. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and compliance measures.

N

Národní účetní rada

nur.cz

46

Národní účetní rada (NÚR) is an established Czech independent expert institution focused on supporting professional competence and ethics in accounting professions. The website serves as the official platform for publishing accounting interpretations, organizing seminars, and providing authoritative guidance to accounting professionals, auditors, tax advisors, and academics in the Czech Republic. The organization has a long-standing presence since 2000 and collaborates with key member organizations in the Czech accounting sector. Technically, the website is built on WordPress 4.4.33 with jQuery 1.11.3 and integrates Google Analytics for user tracking. While the site is functional and professionally designed with clear navigation, it uses outdated software versions that pose security risks. Mobile optimization and accessibility are basic but adequate for the target audience. SEO practices are present but could be improved. From a security perspective, the site enforces HTTPS and includes an opt-out mechanism for Google Analytics tracking. However, it lacks modern security headers and uses outdated CMS and libraries, which could expose it to vulnerabilities. No explicit privacy, cookie, or security policies are published, indicating gaps in compliance with GDPR and best practices. Contact information is limited to a contact page without direct emails or phone numbers visible on the main pages. Overall, the website is trustworthy and authoritative within its niche but requires updates to its technical stack and privacy compliance to enhance security and user trust. Strategic improvements in security policies, software updates, and transparency will strengthen its posture and compliance.

The website www.enspryng.com represents Genentech's pharmaceutical product ENSPRYNG®, a treatment for Neuromyelitis Optica Spectrum Disorder (NMOSD). The site provides detailed patient-focused information, healthcare professional resources, and access to medication guides and prescribing information. The business is positioned as an established biotechnology company with a specialty drug offering, targeting patients and clinicians. Technically, the site is built on Adobe Experience Manager with modern web technologies, including consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and policies are not fully documented. The absence of WHOIS registration data is a concern for domain legitimacy, but the site content and branding align with a reputable pharmaceutical entity. Overall, the site is professional, secure, and compliant with privacy norms, though improvements in transparency of security and privacy policies are recommended.

R

Revy Apps

revy.io

61

Revy Apps is a small Canadian-based company specializing in developing premium Shopify applications aimed at helping merchants grow their online stores. Their product portfolio includes apps such as Unlimited Bundles & Discounts and Unlimited Smart UpSell Offers, targeting Shopify store owners seeking to increase sales through automated and easy-to-use tools. The company has been operational since 2017 and serves thousands of merchants globally, positioning itself as a niche player in the e-commerce app market. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, and several UI libraries like Owl Carousel and Slick Carousel. It integrates Google Analytics and Helpscout Beacon for analytics and customer support, respectively. The site is hosted behind Cloudflare DNS, ensuring reliable performance and security, although DNSSEC is not enabled. The website is mobile-optimized with good SEO practices and a clean, professional design. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks several security headers and does not implement a cookie consent mechanism, which may impact privacy compliance. No explicit security policies or incident response contacts are published, and no vulnerability disclosure program is evident. The WHOIS data is consistent with the business claims, showing a legitimate registration with no privacy protection, enhancing trust. Overall, Revy.io presents a trustworthy and professional online presence with a solid business model and technical foundation. To improve, the company should enhance privacy compliance by adding cookie consent, implement security headers, and publish security policies. These steps will strengthen their security posture and regulatory adherence, supporting continued growth and customer trust.

M

Ministério da Gestão e Inovação em Serviços Públicos

vlibras.gov.br

69

The website represents an official Brazilian government digital service focused on accessibility, specifically the VLibras suite which provides automatic translation of digital content into Brazilian Sign Language (Libras). It is a collaborative initiative involving multiple government ministries and a federal university, positioning it as a key public service for digital inclusion of deaf individuals. The site is well-structured, professionally designed, and leverages modern web technologies and accessibility standards to deliver its content effectively. Technically, it uses Plone CMS and integrates common libraries such as jQuery and Font Awesome, hosted likely on government infrastructure with strong SSL and security headers in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though incident response contacts and vulnerability disclosure mechanisms could be improved. Privacy and cookie policies are present and appear comprehensive, aligning with GDPR and Brazilian LGPD requirements. Overall, the site is trustworthy, professional, and serves a critical government function in digital accessibility.

I

Integsoft, Inc.

integsoft.com

58

Integsoft, Inc. is a specialized technology company focused on Java-based system integration, API monitoring, and security solutions. Their offerings include custom Java development, system integration using Mule ESB, single sign-on with Keycloak, Big Data analytics, and their proprietary modular product Integration Eye®. The company targets enterprise clients across diverse sectors such as insurance, energy, banking, healthcare, automotive, and transportation. The website reflects a professional and consistent brand image with strong client testimonials and partnerships with MuleSoft and Red Hat, indicating a solid market position in their niche. Technically, the website employs a modern technology stack including JavaScript libraries like jQuery, Bootstrap framework, and various UI components such as LayerSlider and Owl Carousel. Integration with Google Analytics and Hotjar indicates moderate user tracking for analytics and user experience improvements. The site is mobile-optimized and accessible with good SEO practices. However, some security best practices like security headers are not evident, and privacy and cookie policies are missing, which could impact compliance. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response information. The absence of WHOIS data for the domain raises some legitimacy concerns, though the professional presentation and contact details mitigate this risk. Overall, the site is safe, trustworthy, and well-designed but would benefit from enhanced privacy and security disclosures. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing security and incident response contacts, adding security headers, and verifying domain registration details to improve trust and compliance.

Solirispro.com is a professionally designed pharmaceutical website dedicated to providing healthcare professionals in the United States with comprehensive information about Soliris (eculizumab), a complement inhibitor drug approved by the FDA for multiple rare diseases. The site emphasizes safety information, prescribing details, and REMS program enrollment, reflecting a strong focus on regulatory compliance and patient safety. The business is positioned as a leader in its niche with extensive clinical trial data and long-term market presence. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google Tag Manager, hosted likely on AWS infrastructure. While the site is mobile-optimized and well-structured, it lacks some advanced SEO and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site projects high business credibility and trustworthiness with minor areas for technical and compliance enhancement.

M

Mastodon Share

mastodonshare.com

48

MastodonShare is a small, niche technology project launched in late 2022 that provides a free and privacy-focused tool enabling users to share content easily on any Mastodon instance. The service simplifies sharing by remembering the user's Mastodon instance via cookies and does not require browser extensions or API access. The website is well designed with clear instructions and a straightforward user experience, targeting Mastodon users and website owners who want to facilitate sharing to Mastodon. Technically, the site uses Bootstrap and Font Awesome for styling and icons, hosted on Hover's DNS infrastructure. The site is mobile optimized and SEO friendly but lacks advanced security headers and DNSSEC, which are recommended for improved security. No analytics or tracking scripts were detected, aligning with the stated privacy-first approach. From a security perspective, the site uses HTTPS and has domain registration protections but lacks a privacy policy, cookie consent mechanism, and formal security or incident response policies. No vulnerabilities or malicious content were detected, but improvements in security headers and compliance documentation are advised. Overall, MastodonShare presents a trustworthy, privacy-conscious utility with moderate technical maturity and good business credibility for a small project. Strategic improvements in privacy compliance and security posture would enhance trust and resilience.

F

Framasoft

framagames.org

54

Framagames is a small, community-driven platform operated by the non-profit organization Framasoft, offering free and open source games playable online or offline. The website targets a general audience interested in free software and gaming, positioning itself as a niche player within the open source gaming community. The platform provides downloadable games and online play options, supported by community engagement and guides hosted on the parent Framasoft domain. Technically, the site is built using modern web technologies including Vue.js and Font Awesome, hosted by Gandi SAS. The website is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance. The domain is well maintained with HTTPS and clientTransferProhibited status, but lacks DNSSEC and security headers which could enhance security posture. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response information, and cookie consent mechanisms. Tracking is minimal and privacy policies are hosted on the parent domain, indicating reasonable privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, Framagames presents a trustworthy, well-maintained platform with a strong community focus. Strategic improvements in security headers, cookie consent, and public security policies would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its non-profit, open source mission.

P

PharOS

pharosgr.gr

48

PharOS is a privately owned pharmaceutical company based in Greece, specializing in the development, manufacturing, and supply of generic and value-added pharmaceutical products. The company boasts a significant global footprint with over 104 products and marketing authorizations in more than 116 countries, positioning itself as a key player in the pharmaceutical industry. The website reflects a professional and consistent brand image, targeting healthcare professionals and global markets. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Google Analytics, with moderate performance and good mobile optimization. Security measures include HTTPS and reCAPTCHA integration, though additional security headers and explicit privacy policies are lacking. Overall, the site is safe, trustworthy, and well-structured but would benefit from enhanced privacy compliance and security documentation.

K

KPS Global®

kpsglobal.com

61

KPS Global® is a medium-sized manufacturing company specializing in custom solutions for controlled environments, including walk-in coolers, freezers, and replacement parts. The company positions itself as a leading provider with over 75 years of industry experience, targeting businesses in cold storage, foodservice, retail, and scientific sectors. The website is built on WordPress using Elementor and NitroPack, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly disclosed. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and business-focused, with strong social media presence and good technical implementation.

P

PC Lékař.eu

pclekar.eu

39

PC Lékař.eu is a small Czech IT and telecommunications service provider operated by Petr Kubeš since 1992. The website offers a range of services including remote PC repair, helpdesk support, IT administration, and technical infrastructure documentation. The business targets individuals and small businesses in the Czech Republic seeking reliable IT and telco support. The site is built on WordPress with a moderate technical stack including Bootstrap and various plugins for enhanced functionality. The website is well-structured with good content quality and navigation, though it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS enforced but missing important security headers and vulnerability disclosure mechanisms. WHOIS data is privacy protected, which is common for small businesses, and no suspicious patterns were detected. Overall, the website is professional and trustworthy but could improve compliance and security practices.

Cirio Alta Cucina is a well-established Italian brand specializing in tomato-based food products, operating under the parent cooperative Conserve Italia. The website reflects a mature business with a strong market presence, targeting both professional chefs and consumers seeking authentic Italian tomato products. The brand leverages its historical legacy dating back to 1856 and maintains partnerships with culinary organizations such as the Federazione Italiana Cuochi. Technically, the website employs modern JavaScript libraries and responsive design, ensuring good user experience across devices. Security measures include HTTPS, DNSSEC, and a cookie consent mechanism, although explicit security and incident response policies are not publicly available. Overall, the site demonstrates a solid security posture with room for improvement in transparency and accessibility.

O

Obec Veřovice

verovice.cz

44

Obec Veřovice is the official municipal website for the village of Veřovice in the Czech Republic, providing residents and visitors with comprehensive information about local government, events, public services, and community news. The site targets local citizens and stakeholders, offering key services such as event calendars, official notices, and contact details for municipal offices. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a good level of digital maturity for a small government entity. Technically, the website employs modern web technologies including the Foundation CSS framework, jQuery, Font Awesome icons, and integrates third-party services such as Google Analytics, Facebook Pixel, and OneSignal for push notifications. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, indicating awareness of privacy regulations. However, the absence of explicit security headers and lack of visible incident response or security policy pages suggest areas for improvement in security posture. From a security perspective, the site shows good practices such as encrypted connections and cookie consent management but lacks advanced security headers and detailed security policies. No vulnerabilities or malicious content were detected. The missing WHOIS data for the domain reduces the overall trust score, although the website content and official contact information support its legitimacy as a municipal site. Overall, Obec Veřovice presents a trustworthy and functional online presence for a small government entity, with recommendations to enhance security headers, provide clearer security policies, and improve domain registration transparency to strengthen trust and compliance.

V

VAVRYS CZ s.r.o.

vavrys.cz

48

VAVRYS CZ s.r.o. operates the website www.vavrys.cz as an authorized distributor of high-quality sports and outdoor apparel and equipment. Established in 1991, the company targets both retail customers and business partners, offering a range of exclusive brands through their e-commerce platform and B2B portal. The website reflects a professional retail business with a focus on sportswear and outdoor gear in the Czech and Slovak markets. Technically, the website employs modern web technologies including HTTPS, Google Analytics, and Azure CDN hosting. The site is mobile-optimized with good navigation and content quality. Cookie consent mechanisms are implemented with granular user controls, demonstrating attention to privacy compliance, although a formal privacy policy page is missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, the absence of security headers and lack of published security policies or vulnerability disclosure mechanisms indicate room for improvement. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the website presents a solid business presence with moderate technical maturity and a good security baseline. Strategic improvements in privacy documentation, security headers, and domain registration transparency would enhance trust and compliance.

G

GOV.BR

gov.br

69

The website www.gov.br is the official Brazilian federal government portal designed to centralize access to public services and government information. It serves a broad audience including citizens, businesses, public entities, and other social segments. The portal offers a comprehensive range of digital services, information dissemination, and citizen engagement tools, positioning itself as a critical digital infrastructure for government-citizen interaction in Brazil. The site is well-branded, professionally designed, and consistently maintained, reflecting its authoritative status. Technically, the site leverages the Plone CMS platform, integrates modern JavaScript libraries such as jQuery and Swiper.js, and employs Google Tag Manager for analytics and tracking. Hosting is managed by SERPRO, a trusted Brazilian government IT service provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring broad usability and reach. From a security perspective, the portal enforces HTTPS, includes cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected and could be improved. No dedicated security policy or incident response contacts are published, and no vulnerability disclosure program or security.txt file is found, indicating areas for enhancement in transparency and security maturity. Overall, the portal is highly trustworthy and professionally managed, with strong alignment between domain registration data and official government infrastructure. It poses minimal risk and serves as a reliable digital gateway for Brazilian government services.

Associazione Italiana Miastenia is a well-established Italian non-profit organization dedicated to raising awareness, supporting patients, and promoting research on Myasthenia Gravis, a rare autoimmune neuromuscular disease. Founded in 1981, the association provides information, connects patients with specialized centers, and facilitates donations to fund research and support activities. The website serves as a comprehensive resource for patients, families, and healthcare professionals in Italy, featuring detailed content, donation options, and social media engagement.

A

ABNMO - Associação Brasileira de Neuromielite Óptica

abnmo.org

48

ABNMO - Associação Brasileira de Neuromielite Óptica is a Brazilian non-profit organization dedicated to supporting patients with Neuromyelitis Optica (NMO/NMOSD), promoting awareness, education, and research. The website serves as a hub for community engagement, offering blogs, podcasts, videos, and event information to patients, families, and healthcare professionals. It positions itself as a specialized association within the healthcare sector in Brazil, relying on donations and community participation to fund its initiatives. Technically, the website is built on WordPress using Elementor and integrates modern SEO and accessibility tools such as Yoast SEO and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is adequate with HTTPS enforced, though some security headers are not explicitly detected, and privacy compliance could be improved by adding explicit policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a privacy policy, cookie consent mechanism, and vulnerability disclosure reduces compliance and transparency. WHOIS data is privacy protected or unavailable, which is common for non-profits, but the website content and branding indicate legitimacy and trustworthiness. Overall, the website is a credible and professional platform for its target audience but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

G

Genentech

enspryng-hcp.com

70

The website www.enspryng-hcp.com serves as a professional healthcare provider portal for ENSPRYNG® (satralizumab), a pharmaceutical product developed by Genentech for the treatment of neuromyelitis optica spectrum disorder (NMOSD). The site provides detailed drug information, clinical trial data, prescribing information, and safety guidelines targeted at healthcare professionals. The content is well-structured, leveraging modern web technologies and compliance tools to ensure accessibility and privacy adherence. Technically, the site is built on Adobe Experience Manager with integrations for analytics and consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though the absence of a public security policy and incident response contacts is noted. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy; however, the strong branding and association with Genentech mitigate some risk. Overall, the site is professional, secure, and compliant, suitable for its intended audience, but domain registration verification is recommended.

T

Tourisme Bretagne

tourismebretagne.bzh

63

Tourisme Bretagne operates as a regional tourism professional portal focused on the Brittany region of France. The website provides news, resources, and subscription-based services tailored to tourism professionals. It is positioned as an important regional authority or resource hub, likely supported by government or regional tourism bodies. The site is built on WordPress with WooCommerce and integrates modern tracking and consent management tools, reflecting a moderate level of digital maturity. Security posture is good with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

Pierre Woodman

woodmancx.com

59

Woodmancx.com is an adult entertainment website specializing in original and exclusive content by Pierre Woodman. It offers a wide range of adult videos across various categories such as fetish, amateur, anal, and teens, targeting an adult-only audience. The site uses the DataLife Engine CMS platform with frontend technologies including jQuery and Bootstrap, providing a moderately optimized and mobile-friendly user experience. However, the site lacks critical privacy and cookie policies, which poses compliance risks, especially under GDPR. Security posture is basic, with no evident security headers or advanced protections, and contact information is limited to a feedback form without direct emails or phone numbers. Overall, the site functions well for its niche but requires improvements in privacy compliance and security to enhance trust and regulatory adherence.

YunoHost is an open-source, volunteer-driven non-profit project founded in 2012 that provides an easy-to-use system for self-hosting digital services on personal or organizational servers. It targets individuals, small organizations, and associations seeking to control their own digital infrastructure with minimal technical knowledge. The platform offers a variety of applications including mail hosting, cloud storage, social networks, and more, emphasizing privacy, decentralization, and digital sovereignty. The website reflects a consistent brand and community-oriented approach with multilingual support and active donation campaigns. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, using fonts like Source Sans 3 and icon sets such as Font Awesome. It is hosted by OVH sas, a reputable provider, and the domain is well-established since 2012. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No CMS or major frameworks are explicitly detected. The site lacks advanced security headers and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site uses HTTPS and has domain status protections against unauthorized transfers or deletions. However, it lacks explicit security headers and cookie consent mechanisms, and no vulnerability disclosure or incident response contacts are published. No sensitive data exposure or vulnerabilities are evident in the content. The overall security posture is moderate but could be enhanced by adopting best practices such as enabling DNSSEC, adding security headers, and publishing clear privacy and security policies. Overall, YunoHost presents a trustworthy and professional presence consistent with its open-source community-driven mission. The site is safe, free of adult or questionable content, and provides clear information about its services and community. Strategic recommendations include improving privacy compliance, enhancing security configurations, and publishing vulnerability disclosure information to strengthen trust and security culture.

O

OX Point

dorucovacibox.cz

61

OX Point is a Czech-based small business specializing in the e-commerce sale of smart, secure delivery boxes designed to facilitate safe and convenient parcel deliveries 24/7. The company positions itself as a local manufacturer offering innovative solutions that eliminate the need for customers to wait for couriers or visit parcel pickup points. Their website, hosted on Shopify, demonstrates a modern and professional digital presence with good mobile optimization and clear navigation. The business targets households and companies seeking flexible parcel delivery options. Technically, the site leverages Shopify's platform, integrates Google Tag Manager and hCaptcha for security, and uses HTTPS with good SSL configuration. However, it lacks explicit cookie consent mechanisms and some security headers, which are areas for improvement. Overall, the site is trustworthy, with transparent company information and consistent domain registration data.

Red de Consultores is a Mexican consulting firm specializing in food safety and quality management services, with over 20 years of experience. The company offers professional consulting and training services including HACCP, SQF, ISO 22000, and other food safety standards, targeting food industry professionals and quality managers primarily in Mexico. The website reflects a solid market position with clear service offerings and a professional presentation. Technically, the website is built on Joomla CMS with Gantry5 framework, utilizing common libraries such as jQuery and Bootstrap. It integrates Matomo analytics and Olark live chat for user engagement and tracking. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. There is no visible privacy or cookie policy, which is a compliance gap. No incident response or security contact information is provided. The domain WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance to improve trust and reduce risk.

Dům dětí a mládeže Zastávka, příspěvková organizace is a local non-profit educational organization based in Zastávka, Czech Republic, focused on providing extracurricular activities, camps, and events for children and youth. The website presents a clear and professional digital presence with detailed program offerings and community partnerships. Technically, the site leverages modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data limits domain legitimacy verification, and the lack of security headers indicates room for improvement in security posture. The site implements a cookie consent mechanism but lacks a dedicated privacy policy page, which is critical for GDPR compliance. Overall, the website is safe, trustworthy, and well-suited for its target audience, but enhancing security and compliance documentation would strengthen its risk profile.

K

Klub absolventů Gymnázia v Zastávce

gzklub.cz

30

Klub absolventů Gymnázia v Zastávce is a small non-profit alumni association dedicated to organizing events and activities for former students of Gymnázium v Zastávce in the Czech Republic. The website serves as a community hub providing announcements about social events, cultural exhibitions, and sports activities. The organization appears well-established since 2015 and maintains consistent branding aligned with the school's identity. Technically, the site is built on WordPress with common plugins and libraries, offering moderate performance and good mobile optimization. However, there are gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and lack of security headers. The site uses HTTPS properly, and no malicious content or vulnerabilities were detected. Overall, the website is trustworthy and professional but could improve its compliance and security posture.

A

AK Pfeifer

akpfeifer.cz

53

AK Pfeifer is a Czech Republic based law firm providing comprehensive legal services primarily to companies and individuals. The firm emphasizes a professional, client-focused approach with a team of seven legal professionals and a high success rate in legal disputes. Their services include contract documentation, legal advice, representation in courts and administrative bodies, and acting as an external legal department for businesses. The website is built on WordPress using Elementor and Slider Revolution, reflecting a modern and responsive design with good SEO and mobile optimization. Security posture is solid with HTTPS enabled, but lacks visible security headers and privacy policies, which are recommended for compliance and trust. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the professional presentation and contact transparency support legitimacy.

C

Church & Dwight México

trojan.com.mx

62

Trojan.com.mx is the official Mexican website for Trojan condoms, operated by Church & Dwight México. The site promotes sexual health and safety by offering high-quality condom products and educational content tailored to the Mexican market. It maintains a strong brand presence with integrated social media channels and a focus on user engagement. Technically, the website employs modern front-end frameworks such as Materialize CSS and Bootstrap, enhanced by analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar. The site is protected by Imperva Incapsula WAF and enforces HTTPS, reflecting a solid security posture. Privacy compliance is robust with OneTrust cookie consent management and clear privacy and terms of service pages. However, explicit contact information and security policies are not prominently displayed, which could be improved for enhanced trust and transparency.

E

Emerson Electric Co.

protoolsportal.com

68

Emerson Professional Tools Portal serves as a centralized login platform for distributors of RIDGID and Greenlee products, both brands under the Emerson Electric Co. umbrella. The portal consolidates functionalities from previous distributor sites to streamline access and ordering processes for authorized users. The website targets B2B customers, specifically distributors and suppliers, providing a professional and branded interface consistent with Emerson's corporate identity. Technically, the site employs modern web technologies including jQuery, Bootstrap, Vue.js, and Google Tag Manager for analytics and marketing. The design is responsive and user-friendly, with clear navigation and a focus on functionality. However, some security headers and advanced accessibility features appear to be missing or not detectable in the provided data, suggesting room for improvement in security hardening and compliance. From a security perspective, the site uses HTTPS and secure form submission methods, but lacks visible advanced security headers and explicit incident response or vulnerability disclosure information. Privacy and cookie policies are linked to Emerson's main corporate site, indicating a centralized compliance approach. No WHOIS data was found for the domain, which is unusual and warrants verification to confirm domain registration and ownership legitimacy. Overall, the portal presents a professional and trustworthy front for Emerson's distributor network, but would benefit from enhanced security practices and verification of domain registration details to strengthen trust and compliance posture.

E

Emerson Professional Tools

ridgidportal.com

59

Emerson Professional Tools operates a secure distributor portal for its RIDGID and Greenlee brands, enabling authorized distributors to access product information and place orders through a unified login system. The website reflects a mature business model focused on B2B distribution within the manufacturing sector, leveraging the strong Emerson brand. The portal is designed with modern web technologies including Vue.js and Bootstrap, ensuring a responsive and user-friendly experience. While the site uses HTTPS and standard security practices, the absence of WHOIS data and security headers suggests areas for improvement in transparency and security hardening. Privacy and cookie policies are linked to the main Emerson corporate site, indicating compliance with GDPR and related regulations. Overall, the site is professional, trustworthy, and well-positioned for its target audience, though enhanced security measures and clearer contact information would strengthen its posture.

E

Esso Card - EN-GB

essocard.com

55

Esso Card is a UK-based provider specializing in fuel cards for businesses, fleets, and hauliers across the UK and Europe. The company positions itself as a leading provider offering fuel savings and convenient online application processes. The website is professionally designed using WordPress with modern technologies such as jQuery, Bootstrap, and Font Awesome, and is optimized for SEO with Yoast plugin integration. However, the lack of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS likely enabled but missing explicit security headers and policies. Privacy and cookie policies are not evident, which may impact compliance and user trust. Overall, the site is business-focused, safe, and functional but would benefit from enhanced transparency and security measures.

C

Controladoria-Geral da União

cgu.gov.br

69

The Controladoria-Geral da União (CGU) website serves as the official portal for Brazil's federal government agency responsible for public asset protection, transparency, and anti-corruption efforts. The site offers a broad range of services including auditing, citizen education, access to information, and social participation. It targets citizens, businesses, and public entities, positioning itself as a key government transparency and oversight institution. The website is well-branded, consistent, and provides comprehensive content relevant to its mission.

I

IDC Online

idconline.mx

56

IDC Online is a Mexican digital media platform specializing in providing articles, indicators, tools, and calculators to assist professionals and businesses with fiscal, legal, labor, social security, and foreign trade compliance. The site offers a digital magazine, seminars, and subscription services, positioning itself as a trusted resource in its niche market. The website demonstrates a professional design with consistent branding and regularly updated content authored by named contributors. Technically, the site uses a modern tech stack including Bootstrap, Google Analytics, Taboola, and Marfeel SDK, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks published privacy and cookie policies, security incident response information, and vulnerability disclosure mechanisms, which are areas for improvement. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is a reliable resource for its target audience but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

I

Instruct-ERIC

instruct-eric.org

60

Instruct-ERIC is a pan-European non-profit research infrastructure specializing in structural biology, providing access to advanced technologies, training, and collaborative services to researchers primarily in Europe but also worldwide. The organization is affiliated with the University of Oxford and operates a well-structured website that supports proposal submissions, training events, and scientific dissemination. The platform is positioned as a leading entity in its niche, supported by multiple EU-funded projects and partnerships. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, RequireJS, and analytics via Matomo, with security features such as HTTPS and Google reCAPTCHA. The site is mobile-optimized and offers good user experience and navigation clarity. However, there are areas for improvement including enabling DNSSEC, implementing security headers, and adding cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site demonstrates a moderate security posture with enforced HTTPS and domain transfer protections but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration and ownership. Overall, Instruct-ERIC presents a credible, professional, and secure online presence suitable for its research infrastructure role, with recommendations to strengthen privacy and security practices further.

T

The University of Oxford

instruct-eric.eu

60

Instruct-ERIC is a pan-European research infrastructure hosted by The University of Oxford, specializing in structural biology. It provides high-end technologies, services, and training to researchers across Europe and globally. The organization holds a strong market position as a leading scientific infrastructure with a comprehensive catalogue of services, training programs, and collaborative projects. The website reflects a professional and well-maintained digital presence, supporting its mission to facilitate scientific research and collaboration. Technically, the website employs a modern technology stack including JavaScript frameworks, Bootstrap, and analytics tools like Matomo. It uses HTTPS with good SSL configuration and integrates security features such as Google reCAPTCHA. However, there is room for improvement in DNS security and security headers. The site is mobile-optimized and offers good accessibility and SEO practices. From a security perspective, the site demonstrates solid practices with encrypted connections and domain transfer protections. The absence of DNSSEC and explicit security policies are noted gaps. Privacy compliance is mostly addressed with a comprehensive privacy policy, though cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, Instruct-ERIC's website is a trustworthy, professional platform supporting a reputable research infrastructure. Strategic improvements in security policies and privacy mechanisms would further strengthen its posture and compliance.

C

Conselho Nacional de Desenvolvimento Científico e Tecnológico

cnpq.br

69

The Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq) is a Brazilian government agency dedicated to promoting scientific and technological development. The website serves as an official portal providing information on research funding, scholarships, scientific dissemination, and public access to government programs. It targets researchers, students, and the general public interested in science and technology within Brazil. The site is part of the gov.br ecosystem and is hosted on government infrastructure, ensuring authenticity and trustworthiness. Technically, the website employs modern web technologies including Plone CMS, jQuery, Swiper.js for carousels, and Font Awesome for icons. It integrates Google Tag Manager for analytics and uses security best practices such as HTTPS enforcement and security headers. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. From a security perspective, the site demonstrates a strong posture with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not prominently available, which could be improved to enhance transparency and trust. Overall, the website is a professional, secure, and reliable government portal with comprehensive content relevant to its audience. It maintains high legitimacy and aligns well with Brazilian government digital standards.

K

Klinika Cellthera

celltheraclinic.cz

48

Klinika Cellthera is a specialized healthcare provider focused on regenerative medicine, offering advanced diagnostic and therapeutic services such as stem cell therapies, immunology support, oncology adjunct treatments, and lifestyle counseling. The clinic positions itself as a leading provider in the Moravia region with over 25 years of experience, targeting patients seeking innovative and holistic medical solutions. The website is professionally designed, content-rich, and compliant with GDPR and cookie regulations, providing clear contact information and patient testimonials that enhance trust. Technically, the site runs on WordPress with modern plugins and integrates Google Analytics and retargeting services, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the site is trustworthy, well-maintained, and aligned with its business goals.

C

Church & Dwight Co., Inc.

zicam.com

59

Zicam.com is the official website for Zicam, a brand specializing in homeopathic cold remedies and allergy relief products. The site is owned by Church & Dwight Co., Inc., a large healthcare company. The website offers a range of products targeting consumers seeking relief from cold symptoms, nasal congestion, sinus issues, allergies, and immune support. It positions itself as a trusted brand with a focus on homeopathic solutions and transparent communication, including a voluntary product recall notice. Technically, the site is built on WordPress with a legacy jQuery version and uses Google Tag Manager and OneTrust for analytics and cookie consent, respectively. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response policies. WHOIS data for the domain is missing, which reduces trust slightly but is mitigated by the strong brand association and professional site content. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though updating technical components and improving security headers is recommended.