Security Directory

S

Sport et neige

sportetneige.com

66

Sport et Neige is a specialized retail business focused on cross-country skiing and Nordic walking equipment, operating both online and through a physical store in Pontarlier, France. Established in 1977, it offers a wide range of products including skis, clothing, and accessories for men, women, and children. The website is well-structured, professionally designed, and targets enthusiasts of endurance sports in the Jura region and beyond. Technically, the site uses modern frameworks such as UIkit and Swiper, with a cookie consent mechanism implemented via tarteaucitron. Security posture is generally good with HTTPS enforced, though some security headers are missing and an outdated jQuery version is used. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy perception. Overall, the site presents a trustworthy and professional front for a niche sports retail business.

V

VIP line s.r.o.

vipline.cz

45

VIP line s.r.o. is a Czech Republic-based transportation service provider specializing in passenger transport via buses, minibuses, vans, and limousines. Founded in 2016, the company serves individuals, schools, companies, travel agencies, and sports clubs primarily in Prague and surrounding regions. Their business model focuses on providing professional, safe, and comfortable transport solutions with a modern fleet and experienced drivers. The company maintains partnerships with notable organizations such as Škoda Auto and regional sports clubs, enhancing its market credibility. Technically, the website is built on Joomla CMS using the Astroid Framework, with modern frontend technologies including jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized and uses Google Analytics and Google Tag Manager for user tracking. Hosting is provided by WEDOS, consistent with the domain registration data. The website performance is moderate with good design and navigation clarity. From a security perspective, the site uses HTTPS and modern libraries but lacks visible security headers and published security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no incident response or security contact channels are published. Overall, the security posture is adequate but could be improved with better policy disclosures and security headers. The website content is safe for general audiences, focusing solely on transportation services without any adult or questionable content. The domain registration data is consistent with the business claims, showing no suspicious patterns. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to enhance trust and compliance.

W

W3 Eden, Inc.

wpliveforms.com

10

WPLiveForms.com is the official website for LiveForms, a WordPress plugin developed by W3 Eden, Inc. The company offers a drag and drop form builder plugin designed to simplify the creation and management of complex forms on WordPress websites. Positioned as a flexible and powerful solution, LiveForms targets WordPress users and developers seeking efficient form-building tools with extensive features and add-ons. The website provides detailed product descriptions, testimonials, and blog resources to support user engagement and education. Technically, the site is built on WordPress with Bootstrap and jQuery, leveraging CDN services for content delivery and Google Analytics for user tracking. While the site employs HTTPS and standard domain security locks, it lacks DNSSEC and security headers, indicating room for security enhancements. Privacy compliance is basic, with terms and conditions present but no explicit cookie or privacy policies detected. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility, though improvements in security and privacy transparency are recommended.

C

COM-TRADE s.r.o.

smstools.sk

57

The website smstools.sk represents a telecommunications service branded as O2 - SMS Connector, operated by COM-TRADE s.r.o. It provides a suite of SMS messaging services including sending SMS via web forms, APIs, Excel sheets, and email, as well as two-way SMS reception. The service targets businesses and developers requiring reliable SMS communication solutions. The website is professionally designed with clear navigation and consistent branding aligned with O2 Slovakia. Technically, it employs a modern JavaScript stack including jQuery, Bootstrap, and FontAwesome, delivering moderate performance and good mobile optimization. Security posture is moderate; HTTPS is used but security headers are not evident, and no cookie consent mechanism is present, indicating room for compliance improvements. Contact information is limited to a support email, with no phone or physical address found in the HTML content. Overall, the site is legitimate, accessible, and business-focused with a moderate risk profile.

W

Free Porn Videos - HD Porno, Full HD and 4K Porn XXX Tube

wetpassions.com

56

Wetpassions.com is an adult entertainment website specializing in free streaming and downloading of pornographic videos in HD and 4K quality. The site offers a wide range of adult content categories targeting an adults-only audience. Technically, the website is built on the DataLife Engine CMS platform, utilizing jQuery, Bootstrap, and FontAwesome for frontend design. The site is hosted behind Cloudflare DNS but lacks visible HTTPS enforcement and security headers, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, which limits compliance and trustworthiness. Overall, the site serves a niche adult content market with basic technical implementation but requires significant improvements in security and privacy compliance.

N

NameCheap, Inc.

onlinehdtube.com

56

OnlineHDTube.com is an adult entertainment video streaming website offering free pornographic videos with an option to upgrade to premium membership. The site targets adults seeking explicit content and features a wide range of videos including categories, pornstars, and channels. Technically, the site is built on the DataLife Engine CMS, uses common web technologies such as jQuery, Bootstrap, and FontAwesome, and is supported by Cloudflare DNS services. While the site is functional and mobile-optimized, it lacks visible privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is moderate with no DNSSEC and missing security headers, though HTTPS usage is implied but not explicitly confirmed in the provided data. The domain is registered with NameCheap since 2021, consistent with the business age and model.

I

Informační centrum Trutnov

ictrutnov.cz

46

The website www.ictrutnov.cz serves as the official Tourist Information Center for the city of Trutnov, Czech Republic. It provides comprehensive visitor information including local attractions, events, and practical visitor services. The site targets tourists and visitors interested in exploring the region, offering multilingual support and a well-organized content structure. The business operates primarily in the hospitality and government/non-profit sectors, focusing on tourism promotion and visitor assistance. Technically, the website is built on Drupal 8 CMS and integrates modern web technologies such as Google Analytics, Google Tag Manager, FontAwesome icons, and AddToAny sharing tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Cookie consent and GDPR compliance mechanisms are implemented, reflecting awareness of privacy regulations. From a security perspective, the site uses HTTPS and cookie consent banners but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust verification, although the website's official branding and contact information support its legitimacy. Overall, the site is professional, user-friendly, and trustworthy for its intended audience. Strategic improvements include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and compliance.

F

Framasoft

degooglisons-internet.org

56

The website 'De-google-ify Internet' is operated by Framasoft, a French non-profit organization focused on providing free software alternatives to centralized web giants. The platform offers a wide range of ethical, privacy-respecting services such as collaborative editing, code hosting, cloud storage, videoconferencing, and more. It targets internet users who seek to regain control over their digital lives by using decentralized and open-source tools. Technically, the website is built with modern frameworks like Vue.js and Bootstrap 4, hosted by OVH, and uses HTTPS for secure communication. However, it lacks some important privacy and security disclosures such as privacy and cookie policies, security headers, and incident response information. The WHOIS data indicates a legitimate and stable domain registration with no privacy protection, consistent with the organization's profile. Overall, the website demonstrates good content quality and business credibility but could improve its privacy compliance and security posture.

C

Chaterimo

chaterimo.com

68

Chaterimo is a technology company offering an AI-powered customer service and sales chatbot platform leveraging advanced language models such as ChatGPT, Anthropic, and Google Gemini. The platform targets e-commerce businesses and websites, providing fast setup, flexible pricing, and deep integration with popular e-commerce platforms like Shopify and Shoptet. The website demonstrates a professional digital presence with clear branding, multilingual support, and interactive chatbot features. Technically, the site uses modern web technologies including Bootstrap, FontAwesome, and analytics tools like Smartlook and Google Tag Manager, hosted on DigitalOcean infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. WHOIS data is missing or unavailable, which slightly reduces trustworthiness but does not detract significantly from the overall professional presentation. Strategic recommendations include publishing comprehensive security and privacy policies, adding contact information, and enhancing security headers to improve compliance and trust.

Základní umělecká škola Rosice is a small educational institution based in the Czech Republic, providing foundational arts education in music, visual arts, and dance primarily to children and young people in the local community. The school is operated under the Jihomoravský kraj regional authority and offers various programs including student concerts, exhibitions, and competitions. The website reflects a well-structured and professionally designed platform that supports enrollment and provides information about the school's offerings and events. Technically, the site uses common web technologies such as jQuery, Bootstrap, and FontAwesome, with integration of Google Analytics for visitor tracking. Security-wise, the site implements cookie consent mechanisms but lacks visible security headers and detailed privacy or security policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and contact details appear legitimate and consistent with a local educational institution. Overall, the site is safe, accessible, and provides a good user experience, though improvements in security posture and privacy transparency are recommended.

C

Chachar catering s.r.o.

chachar.cz

46

Chachar catering s.r.o. operates a regional pizza delivery and catering service in the Czech Republic, established since 2006. The company offers fast delivery of pizza, wings, and other fresh food items through an online ordering platform and telephone. With multiple branch locations across various Czech cities, the business targets general consumers seeking convenient food delivery. The website is professionally designed with consistent branding and good content quality, supporting a medium-sized enterprise model focused on retail and hospitality sectors. Technically, the website is built on WordPress 4.9.8 with a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA for security. Hosting is consistent with Czech providers, and the site uses HTTPS with no detected blocking or WAF interference. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequate with proper meta tags and structured navigation. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms in place. However, explicit security headers and a formal security policy or incident response contacts are absent. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is evident with GDPR-related pages and cookie consent, though no dedicated data protection officer contact was identified. Overall, the website and business present a trustworthy and professional front with low risk. Strategic improvements include enhancing security headers, updating WordPress to the latest version, and publishing explicit security and incident response policies to further strengthen trust and compliance.

Serco Comercial S.A. de C.V. operates a professional blog and distribution platform focused on hygiene control, microbiological testing, and filtration products primarily serving the Mexican market. The website provides educational content, product news, and industry updates targeting professionals interested in food safety and microbiological analysis. The business model centers on B2B distribution and knowledge sharing through blog articles authored by industry experts. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and FontAwesome, delivering a responsive and user-friendly experience with moderate performance. However, the site lacks advanced analytics and comprehensive privacy or cookie policies, which limits its compliance posture. Security-wise, the site appears to use HTTPS but lacks visible security headers and formal vulnerability disclosure mechanisms, indicating room for improvement in security maturity. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to better protect users and improve trust.

T

Toodledo

toodledo.com

65

Toodledo is an established online productivity platform offering a comprehensive suite of tools including task management, note taking, habit tracking, outlines, and lists. The service targets general productivity users, including individuals and teams, providing flexible and customizable features to enhance personal and collaborative productivity. The website presents a professional and consistent brand image with clear descriptions of its services and user testimonials, positioning itself as a reliable tool in the productivity software market since 2004. Technically, the website employs a modern technology stack featuring jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, HubSpot, ProfitWell, and reCAPTCHA, indicating a mature digital infrastructure with integrated marketing and analytics capabilities. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are not explicitly detected. From a security perspective, the site enforces HTTPS and uses reputable third-party security and analytics scripts. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contact, which are areas for improvement. The WHOIS data is unavailable or protected, which slightly reduces trustworthiness but does not directly indicate malicious intent given the professional site content. Overall, Toodledo presents a solid business and technical profile with moderate security posture. Strategic enhancements in security transparency and WHOIS data clarity would further strengthen trust and compliance.

N

Nadace AGROFERT

nadace-agrofert.cz

47

Nadace AGROFERT is a well-established non-profit foundation based in the Czech Republic, focused on providing social support, grants, and scholarships primarily for children, youth, handicapped individuals, and single parents. The foundation has been operational since 2012 and is affiliated with the Agrofert group. Their website reflects a professional and consistent brand image, offering clear information about their projects, grant programs, and contact details. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and accessible user experience. Security measures such as HTTPS, reCAPTCHA, and cookie consent are implemented, although some security headers could be improved. Overall, the site demonstrates a good security posture and compliance with GDPR requirements. The domain registration data aligns well with the business claims, supporting the legitimacy of the foundation.

A

AIRCOM

aircomsystem.com

9

AIRCOM is an Italian manufacturing company specializing in the design and production of high-performance piping and fittings for compressed air and pressure fluid systems. The company targets industrial and commercial sectors requiring reliable and efficient piping solutions. The website reflects a medium-sized enterprise with a professional online presence and multi-language support, indicating an international market reach. Technically, the website is built on WordPress using the Divi theme and integrates modern tools such as Google Tag Manager and Yoast SEO, demonstrating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain is a notable concern, as it reduces the ability to verify domain legitimacy fully. Overall, the website is professional and functional but would benefit from enhanced privacy, security disclosures, and domain transparency to improve trustworthiness and compliance.

C

Church & Dwight Co., Inc.

1stresponse.ca

55

The website www.1stresponse.ca is a commercial retail and informational platform focused on pregnancy tests, fertility lubricants, and pregnancy planning tools. It is branded under First Response, a trademark of Church & Dwight Co., Inc., a recognized company in the healthcare and consumer products sector. The site targets individuals planning pregnancy or seeking fertility-related products and information, offering product listings, online calculators, and educational resources. The market position is strong with cited awards and clear brand consistency. Technically, the site uses modern front-end technologies including jQuery, Slick Carousel, FontAwesome, and Google Fonts, with marketing/tracking scripts from MikMak. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS in use but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies or consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from legitimacy given the brand association. Overall, the site is professional, trustworthy, and serves its target audience effectively.

F

Finishing Touch Flawless™

flawlessbeauty.com

69

Flawlessbeauty.com is an established e-commerce retail website specializing in beauty and personal care products targeted primarily at women. The brand, Finishing Touch Flawless™, has been in operation since 2000, indicating a mature market presence. The website employs modern technologies such as Google Tag Manager, OneTrust for cookie consent, and Bazaarvoice for customer reviews, reflecting a moderate level of digital maturity. The technical infrastructure is hosted via MarkMonitor Inc., a reputable domain registrar and brand protection service, which adds to the business credibility. However, the website lacks visible privacy and terms of service policies in the provided content, which is a compliance gap.

R

repHresh

rephresh.com

63

RepHresh is a feminine care brand focused on promoting vaginal health, pH balance, and feminine hygiene through its product offerings. The website positions itself as a trusted source for women's health products, targeting a female audience seeking solutions for feminine discomfort and odor elimination. The digital presence is supported by modern marketing and analytics tools, including Google Tag Manager and Bazaarvoice for customer reviews, alongside a comprehensive cookie consent mechanism via OneTrust. The website is well-structured, mobile-optimized, and provides clear privacy and cookie policies, reflecting a good level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is strong with HTTPS and security headers, but lacks published security policies or incident response information, which could be improved to enhance trust. Overall, the site is professional and safe for general audiences, but the domain registration opacity slightly reduces business credibility.

C

Church & Dwight Co., Inc.

firstresponse.com

59

First Response is a well-established brand specializing in home pregnancy tests, fertility lubricants, and pregnancy planning tools. The website offers a comprehensive suite of educational resources, interactive calculators, and product listings aimed at individuals planning pregnancy or seeking fertility support. The brand is positioned as a trusted provider with award-winning products and is a subsidiary of Church & Dwight Co., Inc., a recognized parent company. The site targets a general audience interested in healthcare and fertility products, providing clear navigation and professional content.

G

Jednodenní výlety z Brna tam, kde nejsou davy | Gofrombrno.cz

gofrombrno.cz

45

The website 'Go From Brno' is a regional tourism portal providing curated tips for day trips around Brno, Czech Republic. It targets families, hikers, cyclists, and tourists seeking less crowded destinations. The site offers event listings, travel guides, and regional exploration content. Technically, it is built on Drupal 10 CMS with integration of Google Analytics, Google Tag Manager, and CookieHub for consent management. The design is professional, mobile-optimized, and accessible with good SEO practices. Security posture is moderate with HTTPS implied but lacks explicit security headers and published privacy or terms policies. WHOIS data is unavailable, which limits trust assessment. Overall, the site is safe, family-friendly, and well-maintained but could improve transparency and security practices.

B

bso Berufsverband für Coaching, Supervision und Organisationsberatung

bso.ch

67

The bso (Berufsverband für Coaching, Supervision und Organisationsberatung) is a Swiss professional association dedicated to setting and maintaining quality standards in coaching, supervision, and organizational consulting. With over 1400 members, it serves as a key industry body providing membership services, education partnerships, publications, and events to support professionals and clients in these fields. The website is well-structured, professionally designed, and targets coaching professionals and their clients within Switzerland. Technically, the site is built on TYPO3 CMS and leverages modern web technologies including Google Fonts, Google Maps API, and various JavaScript libraries. It implements HTTPS with good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid but could be improved by adding security headers and publishing a formal security policy. Overall, the site is trustworthy, compliant, and provides a positive user experience.

T

TimeWave AB

timewave.se

52

TimeWave AB operates a professional business system tailored for the cleaning and home service industry in Sweden. Their website presents a mature and industry-leading software solution focusing on scheduling, invoicing, and time reporting. The company has a stable domain presence since 2010, indicating a well-established business. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted on AWS infrastructure, and includes modern analytics and marketing tools such as Google Tag Manager and HubSpot. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

P

Packaging Source Inc.

packagingsourceinc.com

63

Packaging Source Inc. is a specialized packaging manufacturer based in Texas with over 26 years of industry experience. The company focuses on custom packaging solutions including corrugated boxes, retail packaging, subscription boxes, and POP displays. Their business model is B2B, serving a diverse clientele from subscription box companies to industrial manufacturers. The website reflects a professional and consistent brand image with clear contact information and client testimonials, indicating a trustworthy business presence. Technically, the website is built on WordPress with a modern tech stack including jQuery and various plugins for sliders and galleries. The site is moderately performant and mobile-optimized, though accessibility features are basic. SEO practices are good with proper meta tags and structured content. However, Google Analytics is present but not configured, and no advanced security headers are detected. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is functional and professional but should address privacy compliance and security best practices to enhance trust and reduce risk. The missing WHOIS data warrants further investigation to confirm domain registration legitimacy.

G

Grupo Medios

grupomedios.com

59

Grupo Medios is a well-established Mexican media network founded in 2002, operating multiple digital media brands and offering custom publishing and digital marketing services. The company targets a broad audience through innovative content and multiplatform strategies, positioning itself as a key player in the Mexican media landscape. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern libraries and integrations such as Google Tag Manager and Facebook Pixel, supporting marketing and analytics needs. Security posture is adequate with HTTPS and domain protection statuses, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact information is clearly provided including email, phone, and a Mailchimp-based contact form. Overall, the site is trustworthy and functional but could improve security and privacy transparency.

E

Euro-BioImaging

eurobioimaging-access.eu

55

Euro-BioImaging Access Portal serves as a European research infrastructure platform providing access to advanced imaging technologies and image data analysis services for biological and biomedical sciences. The portal targets researchers and scientists across Europe, facilitating proposal submissions for imaging services. The website reflects a professional and consistent brand image aligned with its scientific mission. Technically, the site employs modern frontend technologies including jQuery, Bootstrap 5, RequireJS, and integrates Google Analytics and Tag Manager for user tracking and analytics. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, security headers and explicit security policies are absent, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, indicating GDPR awareness. WHOIS data is privacy protected, which is typical for research infrastructure domains, and no suspicious patterns were detected. Overall, the site is trustworthy, professional, and safe for general audiences.

N

No-IP

noip.com

70

No-IP is a well-established technology company specializing in Dynamic DNS and Managed DNS services, catering to both home and business users globally. The company offers a range of services including free and paid Dynamic DNS, domain registration, SSL certificates, and managed email solutions. With over 35 million customers and more than 25 years in the industry, No-IP holds a strong market position as a trusted DNS provider. Their website reflects a professional and user-friendly design, supporting multiple languages and providing clear navigation for diverse user needs. Technically, No-IP employs a modern web infrastructure leveraging Bootstrap, Amazon Cloudfront CDN, and various analytics and marketing tools such as Google Analytics, HubSpot, and Bing Ads. The site is optimized for performance, mobile responsiveness, and accessibility, ensuring a seamless user experience. Security best practices are observed with HTTPS enforcement, CSRF tokens, and security headers, although explicit security policies and incident response information are not publicly detailed. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms and GDPR adherence. Contact information is clearly provided, enhancing business credibility. However, the WHOIS data for the domain is unavailable or missing, which raises moderate concerns about domain registration transparency, though the overall legitimacy is supported by the professional web presence and business operations. Overall, No-IP demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include publishing explicit security and incident response policies, adding a security.txt file for vulnerability disclosure, and enhancing transparency around data protection roles to further strengthen trust and compliance.

C

Canned Dragons

canneddragons.net

51

Canned Dragons is a personal weblog authored by Robert Rackley, focusing on topics such as faith, noise, and technology. The site aggregates thoughts from independent blogs and social media, aiming to celebrate the early days of blogging. It operates as a small-scale content publishing platform with a niche audience interested in personal reflections and tech commentary. The website is built on the Ghost CMS platform, leveraging modern web technologies including Google Fonts and FontAwesome icons. Analytics are implemented via Tinylytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the site content appears genuine and safe. Overall, the site is functional and well-designed but would benefit from enhanced privacy and security practices.

S

STUDIO KUDOS

kudos.nyc

65

KUDOS Design Collaboratory is a US-based design agency established in 2015, specializing in strategic vision, design craftsmanship, and emerging technology to deliver transformative creative solutions. Their portfolio showcases a wide range of services including branding, creative technology, data visualization, editorial and exhibition design, motion graphics, and web development. The company targets businesses and organizations seeking high-quality design and technology-driven creative services. Technically, the website is built on WordPress, hosted on DigitalOcean, and uses modern libraries such as jQuery, Flickity, and FontAwesome. It integrates Google Analytics and Google Tag Manager for tracking. Security posture is good with HTTPS enabled and domain transfer protection, but lacks some advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, well-designed, and trustworthy, but could improve privacy and security transparency.

K

kouzelen.cz

kouzelen.cz

50

Kouzelen.cz is a Czech-based small business specializing in therapeutic and educational services for children and families, including various specialized therapies, community engagement, and an online shop. The website is built on WordPress and uses a modern tech stack with plugins for social media integration and analytics. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies. No incident response or vulnerability disclosure mechanisms are present. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

H

Hiporehabilitace Brno z. s.

hiporehabilitacebrno.cz

47

Hiporehabilitace Brno z. s. is a Czech non-profit organization specializing in hiporehabilitation and physiotherapy services for children with special needs. The website presents a professional and consistent brand image with detailed descriptions of their therapeutic approach, team, and facilities. The organization has established partnerships and funding sources, indicating a stable market position within the regional healthcare non-profit sector. Technically, the website is built on Drupal 8 with modern integrations such as Google Analytics and Tag Manager, providing moderate performance and good mobile optimization. However, the absence of privacy and cookie policies and lack of security headers highlight compliance and security gaps. No contact emails or phone numbers are explicitly provided, which may affect user trust and communication. Overall, the site is safe, trustworthy, and well-positioned but would benefit from enhanced privacy compliance and security practices.

K

Kopiti.am

kopiti.am

67

Kopiti.am operates as a niche Mastodon instance providing a decentralized social networking platform primarily for Singaporean users. The platform leverages the open source Mastodon software (version 4.2.17) and offers features such as user profiles, content exploration, and community engagement. The website is professionally designed with consistent branding and good content quality, targeting a small but active user base. Technically, the site employs modern web technologies including React and FontAwesome, is hosted behind Cloudflare, and demonstrates good performance and mobile optimization. Security measures include HTTPS enforcement, security headers, and script integrity checks, contributing to a solid security posture. However, the site lacks visible cookie consent mechanisms, terms of service, and explicit security or incident response policies, which are areas for improvement. Overall, the domain registration is consistent and legitimate, supporting the trustworthiness of the platform.

S

Strojírny a stavby Třinec, a.s.

sas-trinec.cz

37

Strojírny a stavby Třinec, a.s. is a Czech manufacturing and construction company established in 2013, specializing in the supply of engineering products and construction services. The company targets industrial clients and businesses requiring reliable engineering and construction solutions. The website reflects a medium-sized enterprise with a focus on regional market presence. Technically, the website is built on WordPress using Elementor and RevSlider, with moderate performance and basic mobile optimization. Security posture is limited with no advanced security headers or policies detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

F

Find Your News

findyournews.org

59

Find Your News is a nonprofit platform dedicated to connecting users with nonprofit newsrooms across various topics and geographic locations. It operates under the umbrella of the Institute for Nonprofit News (INN), which supports hundreds of independent, nonpartisan news organizations. The website offers a user-friendly interface with search and filtering capabilities to match users with relevant nonprofit journalism sources. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery and autocomplete.js, and integrates Google Analytics and StackAdapt for analytics and advertising. The site demonstrates good SEO practices and mobile optimization but lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security-wise, the site uses HTTPS and domain status protections but does not enable DNSSEC or implement security headers, representing areas for improvement. Overall, the website is professional, trustworthy, and serves a clear nonprofit media mission, though it should enhance privacy compliance and security posture to align with best practices.

W

WNYC

thegreenespace.org

69

WNYC operates as a leading public radio station in the United States, offering a broad range of media services including live radio broadcasting, podcast production, and hosting live events at The Greene Space. The organization maintains a strong market position with multiple subsidiary media outlets and a well-recognized brand. The website reflects a mature digital presence with modern technologies and extensive multimedia content, targeting a general audience interested in news, culture, and public radio programming. Technically, the site uses Ember.js framework, integrates with major analytics and advertising platforms, and demonstrates good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though improvements could be made by implementing security headers and publishing clear privacy and security policies. The absence of WHOIS data limits domain trust assessment, but the overall digital footprint and branding indicate a legitimate and professional entity. Strategic recommendations include enhancing privacy compliance, adding explicit security and incident response information, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.

W

Web3 is Going Just Great

web3isgoinggreat.com

63

Web3 is Going Just Great is an informational website curated by Molly White that documents a timeline of failures, hacks, scams, and other negative events in the crypto, DeFi, NFT, and blockchain space. The site targets crypto enthusiasts, security researchers, and the broader blockchain community by providing detailed incident reports, references to reputable news sources, and social media integration. Technically, the site is built using modern web technologies including React and Next.js, with good mobile optimization and accessibility features. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide contact information for security or incident response. The WHOIS data for the domain is missing or unavailable, raising questions about domain registration legitimacy despite the professional quality of the website content. Overall, the site presents a high-quality user experience with moderate security posture but needs improvements in compliance and transparency to enhance trustworthiness.

M

Michael Günter

michaelguenter.ch

69

Michael Günter's website presents a professional coaching and mentoring service focused on supporting individuals in their personal and professional development. The business operates in Switzerland and targets clients seeking coaching, supervision, and communication consulting. The website is built on the BaseKit CMS platform and hosted by Hoststar, utilizing modern web fonts and iconography for a professional appearance. While the site demonstrates good content quality and user experience, it lacks critical compliance documents such as privacy policy and terms of service, which are essential for GDPR compliance and user trust. The cookie consent mechanism is implemented, indicating some privacy awareness. Security posture is moderate with no detected security headers or vulnerability disclosures, suggesting room for improvement in protecting user data and enhancing trust. Overall, the domain registration data aligns well with the website content, supporting the legitimacy of the business.

D

Deque Systems

dequeuniversity.com

61

Deque University, operated by Deque Systems, is a well-established provider of digital accessibility training and certification preparation, founded in 2010. The website offers a comprehensive curriculum including online courses, instructor-led training, and scholarships targeted at accessibility professionals and organizations. The platform positions itself as a leading resource in the accessibility education market, supported by its role as an IAAP Approved Certification Preparation Provider. Technically, the website employs a modern technology stack including jQuery, DataTables, Google Tag Manager, and analytics tools such as Google Analytics and LinkedIn Insights. It is hosted on Amazon AWS infrastructure and built on the MODX CMS platform. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional and consistent design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. Strategic improvements include enabling DNSSEC, publishing a security policy, adding security headers, and establishing a vulnerability disclosure process to further enhance security posture and trust.

The Federal Communications Commission (FCC) is a United States government agency responsible for regulating interstate and international communications. The website serves as the official digital presence of the FCC, providing comprehensive information on regulatory proceedings, licensing, consumer resources, and public safety. It targets a broad audience including consumers, industry stakeholders, and government entities. The FCC maintains a strong market position as the primary federal communications regulator in the US, offering key services such as licensing databases, spectrum auctions, and consumer complaint handling. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and FontAwesome. Accessibility is enhanced through AudioEye tools, and the site is mobile-optimized with good SEO practices. The performance is moderate with a well-structured and professional design. From a security perspective, the site enforces HTTPS, employs secure forms, and publishes a vulnerability disclosure policy. While explicit security headers are not fully confirmed, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a comprehensive privacy policy and clear contact information, though a cookie consent mechanism is not detected. Overall, the FCC website is a highly credible, professional, and secure government resource. It demonstrates strong trust indicators and meets the expectations for a federal agency's digital presence. Minor improvements could include enhanced security header implementation and cookie consent compliance to further strengthen privacy and security assurances.

M

Mareceklukas.cz

my-face.cz

55

My-Face.cz is a regional lifestyle magazine serving the Blansko and Boskovice areas in the Czech Republic. Established in 2015, it offers readers interviews, event coverage, and articles on culture, sports, health, and personal development. The website is professionally designed using WordPress with Elementor and Astra theme, reflecting a moderate level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience of active adults aged 25-65. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and well-positioned in its regional media niche.

E

EU-LIFE

eu-life.eu

67

EU-LIFE is a prominent alliance of independent life sciences research institutes across Europe, focused on strengthening research and innovation and advocating for research in European policy. The website serves as a hub for news, events, publications, and member information, targeting the European research community and policy makers. The business model is non-profit and advocacy-oriented, with a medium-sized presence based in Spain. Technically, the site is built on Drupal 8, leveraging Google Analytics and Tag Manager for analytics, and uses modern web fonts and icons. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and IP anonymization in analytics, but lacks some explicit security headers. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with no critical security or content safety issues detected.

U

University of Veterinary Sciences Brno (VETUNI)

vfu.cz

65

The University of Veterinary Sciences Brno (VETUNI) is a reputable educational institution specializing in veterinary sciences, offering high-quality education, innovative research, and professional training. It holds a leading position in the Czech Republic's veterinary education sector, targeting students, researchers, and veterinary professionals. The website reflects a well-structured digital presence with clear navigation and consistent branding. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, although the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the official branding and contact information. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and cookie policies, and providing incident response information to strengthen compliance and trust.

S

Sdružení přátel Jaroslava Foglara

spjf.cz

57

Sdružení přátel Jaroslava Foglara (SPJF) is a Czech non-profit association dedicated to promoting the legacy and cultural activities related to Jaroslav Foglar, a notable Czech author and scout leader. The website serves as a community hub providing news, event information, publications, and membership details primarily targeting Czech-speaking scouting enthusiasts and cultural followers. The organization appears well-established with a history of over 35 years, supported by active social media presence and regular content updates. Technically, the website is built on WordPress with common plugins for SEO, forums, and newsletters, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit privacy or cookie policies, which could be improved to enhance compliance and trust. The absence of WHOIS data limits domain legitimacy verification, but the website content and community engagement support its authenticity. Overall, the site is professional, content-rich, and serves its niche audience effectively, though improvements in privacy compliance and security hardening are recommended.

F

Fio investiční společnost

fiofondy.cz

68

Fio investiční společnost is a Czech investment company specializing in mutual funds and investment products, targeting retail investors primarily in the Czech Republic. The company operates under the umbrella of Fio banka, a well-established financial institution. Their website offers clear information about investment opportunities, including low entry thresholds and no entry fees, supported by professional fund managers. The site integrates online banking and brokerage services, enhancing customer convenience and engagement. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics and tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are missing. The domain is well-established since 2016, registered with a Czech registrar consistent with the business location and sector. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations focusing on enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

S

Suplementos Alianza S.A. de C.V.

alianzadiario.mx

60

Alianza Diario is a Mexican editorial agency specializing in official journalistic supplements, business news, and corporate editorial content. The company positions itself as a leading publisher of authorized and endorsed supplements in Mexico, serving business and industrial sectors. Their digital presence is built on a modern WordPress platform with a variety of plugins supporting multimedia content and social media integration. The website demonstrates good content quality and professional design, targeting business professionals and industry stakeholders. Security posture is adequate with HTTPS enforced, though lacking some security headers and explicit privacy policies. Contact is available via a contact page, but no direct emails or phone numbers are published. Overall, the site is trustworthy and well-positioned in its niche.

O

Obecní knihovna Bílovice nad Svitavou

knihovnabilovice.cz

50

The website represents the Obecní knihovna Bílovice nad Svitavou, a municipal public library serving the local community in the Czech Republic. It provides library services including book lending, cultural events, exhibitions, and an online catalog. The site targets local residents, children, and students, positioning itself as a community educational resource. The business model is typical of a public service entity, likely funded by local government, with partnerships to regional and national library networks. Technically, the website is built on Drupal 7 CMS with a variety of modules and libraries such as jQuery 1.12, Foundation framework, and FontAwesome. It uses Google Analytics for visitor tracking with privacy-conscious settings. The site is mobile optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, typical for a Drupal 7 site with multiple modules. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no advanced security headers were detected, and the jQuery version is outdated, which could pose vulnerabilities. There is no visible security policy or incident response contact information. The WHOIS data for the domain is unavailable, which slightly reduces trust but is not uncommon for some ccTLDs. Overall, the security posture is adequate but could be improved with modern best practices. The overall risk is low given the nature of the site as a public library with no sensitive transactions or personal data beyond newsletter subscriptions. Strategic recommendations include updating software components, adding security headers, publishing a security policy, and improving WHOIS transparency to enhance trust and compliance.

M

Mateřská škola Bílovice nad Svitavou

msbilovice.eu

60

Mateřská škola Bílovice nad Svitavou is a small, local preschool educational institution serving the community of Bílovice nad Svitavou in the Czech Republic. The website provides information primarily for parents and guardians, including school policies, events, and contact details. The institution operates as a contributory organization and maintains a clear and consistent brand presence online. The site is built on Drupal 7 with a Foundation framework and uses common web libraries such as jQuery and FontAwesome. While the technical infrastructure is functional and moderately optimized for mobile, it relies on outdated software versions that may pose security risks. The website demonstrates good privacy compliance with GDPR, including a privacy policy, cookie policy with consent mechanism, and a designated data protection officer contact. Security posture is adequate but could be improved by updating CMS and libraries and implementing additional security headers. Overall, the website is professional, trustworthy, and safe for its target audience.

Z

Základní škola Bílovice nad Svitavou

zsbilovice.cz

18

Základní škola Bílovice nad Svitavou is a local primary educational institution serving the community of Bílovice nad Svitavou in the Czech Republic. The website provides comprehensive information about the school, including educational programs, extracurricular activities, school daycare, and canteen services. It targets parents, students, and local residents, positioning itself as a trusted local school. The business model is that of a public contributory organization, typical for schools in the region. Technically, the website is built on Drupal 7 with a range of modern web technologies including jQuery, FontAwesome, and Google Analytics for tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Cookie consent mechanisms are implemented in compliance with GDPR, especially for newsletter subscriptions. From a security perspective, the site uses HTTPS and has secure forms with GDPR consent checkboxes. However, it lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professionally maintained, safe for general audiences, and compliant with basic privacy regulations. Strategic improvements include adding a privacy policy, security headers, and a security.txt file to enhance trust and security posture.

T

Tenacis, S.A. de C.V.

webmaster.com.mx

55

Webmaster.com.mx is a Mexican technology service provider specializing in web hosting, custom web systems, domain registration, and internet consulting. The company, legally known as Tenacis, S.A. de C.V., has been operating since 1995, establishing a strong local presence with over 29 years of experience. Their website reflects a professional business model targeting organizations requiring reliable and high-performance internet solutions. The key services include virtual servers, shared hosting, email hosting, anti-spam filtering, and tailored web design and development. Technically, the website employs modern front-end technologies such as Bootstrap 5, Material Kit Pro, FontAwesome, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not publish privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure mechanisms are evident. The WHOIS data is consistent with the website's business claims, reinforcing legitimacy and trustworthiness. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

O

Obec Bílovice nad Svitavou

bilovicens.cz

58

Obec Bílovice nad Svitavou operates an official municipal website serving residents, businesses, and tourists with comprehensive local government information, services, and community engagement tools. The site is positioned as the authoritative source for municipal news, events, administrative procedures, and public notices in the Bílovice nad Svitavou area of the Czech Republic. The business model is that of a government entity providing public services and information digitally. Technically, the website is built on Drupal 7 with a range of JavaScript libraries including jQuery 1.12, FontAwesome, and Foundation framework for responsive design. The site is moderately optimized for performance and mobile devices, with good SEO and accessibility basics. It employs HTTPS and a cookie consent mechanism to comply with EU regulations, though it lacks visible HTTP security headers and uses an outdated jQuery version, which may pose security risks. From a security perspective, the site demonstrates a reasonable posture with HTTPS and cookie compliance but lacks published privacy policies, terms of service, and incident response contacts. No WHOIS data is available, which reduces trust in domain legitimacy, though the website content and official contact details strongly indicate a legitimate municipal entity. No vulnerabilities or malware indicators were detected in the content. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. Strategic improvements include updating technical components, publishing privacy and security policies, and enhancing security headers to strengthen compliance and trustworthiness.

C

Coaching Kompetenzzentrum KLG

coaching-kompetenzzentrum.ch

49

Coaching Kompetenzzentrum KLG is a Swiss-based small business specializing in coaching education, mentoring, mediation, and team development services. The website presents a professional and well-structured platform targeting individuals and organizations interested in coaching and professional development. Their offerings include a 10-day coaching course, seminars, individual coaching sessions, and certification as a 'betrieblicher Mentor'. The business positions itself as a niche regional coaching education center with strong local partnerships and a clear focus on quality training and professional growth. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap, jQuery, and LayerSlider. It is mobile-optimized with good SEO practices and uses Google Analytics and Tag Manager for analytics. The site employs HTTPS with an excellent SSL configuration and includes a cookie consent mechanism, demonstrating awareness of privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. The cookie consent banner and privacy policy indicate GDPR compliance. The WHOIS data aligns with the website's Swiss business identity, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is trustworthy, professionally maintained, and compliant with privacy standards. Strategic improvements could include adding security headers, publishing an incident response policy, and implementing a vulnerability disclosure mechanism to enhance security posture and trust further.