Security Directory

G

GPartners

canaletico.es

53

The website canaletico.es/en serves primarily as a login portal for GPartners' backoffice administration. It lacks public-facing business content, marketing descriptions, or customer engagement features. The site targets internal users or administrators rather than external customers. Technically, the site uses a legacy technology stack including jQuery 1.12.2, Bootstrap, and the Metronic theme framework. While the design is functional, it is basic with limited mobile optimization and accessibility features. Security posture is moderate but could be improved significantly by updating libraries, adding security headers, and implementing stronger authentication controls. No privacy or cookie policies are present, indicating low privacy compliance. The domain WHOIS is privacy protected, which is common for administrative portals but reduces transparency. Overall, the site is functional for its purpose but lacks comprehensive security and compliance measures.

L

Le Vestiaire

le-vestiaire.fr

46

Le Vestiaire is a well-established French retailer specializing in hockey, skating, roller hockey, and related sports equipment. Founded in 2001, it operates both an e-commerce platform and 11 physical stores across France, positioning itself as a trusted supplier in the sports retail sector. The website is professionally designed, with clear navigation and comprehensive product offerings targeting sports enthusiasts and athletes in France. The company also provides technical services such as blade sharpening and bootfitting, enhancing its value proposition. Technically, the website is built on the PrestaShop CMS platform, leveraging modern web technologies including jQuery, Google reCAPTCHA v2 for form security, and various modules for enhanced user experience such as sliders and carousels. Hosting is provided by OVH, a reputable provider, and the site employs HTTPS with good SSL configuration. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. From a security and compliance perspective, the site includes a comprehensive privacy policy and cookie consent mechanism, indicating GDPR compliance. Contact information is clearly presented, including email, phone, and physical address. However, no explicit security policy, incident response page, or vulnerability disclosure mechanism was found, which could be areas for future improvement. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, Le Vestiaire presents a secure, professional, and user-friendly online presence with strong business credibility in the French sports retail market. Strategic enhancements in security headers and formal incident response documentation could further strengthen its security posture and compliance standing.

T

The Scottish Government

scotland.gov.uk

81

The Scottish Government website serves as the official digital presence for the devolved government of Scotland, providing comprehensive information on policies, news, publications, consultations, and statistics. It targets residents, stakeholders, and the general public interested in Scottish governance and public services. The site is authoritative and well-positioned as a primary source of government information. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Plausible Analytics, with a strong emphasis on accessibility, mobile optimization, and SEO best practices. The site is well-structured with clear navigation and uses structured data to enhance search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical and justified for government domains, and the domain is highly legitimate based on trust signals and domain usage. Overall, the website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy and reliable source for its audience.

O

OANNA

oanna.be

40

OANNA is a small creative agency based in Liège, Belgium, specializing in web design, branding, digital marketing, strategy, and video production. The company targets businesses seeking comprehensive communication and marketing services to enhance their market presence. The website reflects a professional and creative approach with good content quality and consistent branding. Technically, the site uses a CMS Made Simple platform hosted by OVH, integrates multiple modern JavaScript libraries and marketing tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though lacks explicit security policies and headers. Overall, the website is trustworthy and well-positioned in its niche, with room for improvement in security transparency and contact information visibility.

P

Pixmig

pixmig.com

10

Pixmig is an e-commerce platform specializing in the design and printing of custom photo albums and books. Established in 2015, it targets consumers seeking personalized keepsakes to preserve memories. The website presents a professional and consistent brand image with a focus on quality and customer testimonials, positioning itself as a niche player in the personalized photo album market. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including jQuery, Google Fonts, and Font Awesome. Hosting is provided by HOSTINGER operations, UAB. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. No incident response or security policy is published. Overall, the site is trustworthy but could improve security and privacy transparency.

P

Professional Testing Corporation

ptcny.com

50

Professional Testing Corporation (PTC) is a well-established service provider specializing in certification and licensure testing services with over 35 years of industry experience. The company offers a comprehensive suite of services including exam development, test administration, psychometric consulting, survey processing, and scoring/reporting. Their target audience includes organizations and individuals seeking credentialing solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their niche market. Technically, the site is built on WordPress with Bootstrap and jQuery, featuring good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present. Analytics usage includes Google Analytics and Tag Manager with moderate user tracking. Overall, the website is trustworthy and professional but could improve privacy compliance and security best practices.

A

AD-construct s.r.o.

adconstruct.cz

57

AD-construct s.r.o. is a newly founded Czech construction company specializing in gabion products and general building services in the Plzeň region. Their website clearly presents their core services including gabion fence sales and installation, foundation slabs, rough building structures, and terrain modifications. The company targets residential and commercial clients within the Plzeňský kraj and broader Czech Republic. The business model focuses on providing turnkey construction solutions with an emphasis on quality and professional service. Technically, the website is built on Joomla CMS with Gantry 5 framework, integrating Google Analytics and Tag Manager for marketing insights. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Security posture is solid with HTTPS, CSRF tokens, and CAPTCHA on forms, though some security headers could be improved. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the domain registration aligns with the company’s founding date and location, supporting legitimacy. No critical vulnerabilities or suspicious content were detected.

LiveWiseMS is a specialized healthcare resource website dedicated to providing trusted, evidence-based information and multimedia content for people living with multiple sclerosis, their caregivers, and healthcare providers. The platform offers a comprehensive resource library including podcasts, journal articles, videos, and clinical handbooks, supported by educational grants from major pharmaceutical companies. The website is professionally designed with consistent branding and clear navigation, targeting a niche healthcare audience with educational content. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Font Awesome, hosted with GoDaddy as registrar and Cloudflare for DNS services. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and CSRF protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy, safe, and professionally maintained, serving as a valuable educational platform in the healthcare sector.

M

Multiple Sclerosis Nurses International Certification Board

msnicb.org

51

The Multiple Sclerosis Nurses International Certification Board (MSNICB) is a specialized non-profit organization focused on certifying nurses in the field of multiple sclerosis care. Established in 2001 and affiliated with the International Organization of Multiple Sclerosis Nurses (IOMSN), MSNICB provides certification, recertification, and emeritus status for MS nurses globally. Their website serves as an information hub for certification guidelines, exam schedules, resources, and board governance, targeting healthcare professionals specializing in MS nursing. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Revolution Slider, hosted behind Cloudflare DNS and CDN services. The site demonstrates moderate performance and good mobile optimization but uses an outdated jQuery version that could pose security risks. SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. No explicit security or incident response policies are published, and cookie consent mechanisms are absent, indicating partial privacy compliance. Contact information is clear and professional, enhancing business credibility. Overall, MSNICB's website is a trustworthy and professional platform with good content quality and business credibility. However, improvements in security headers, updated libraries, and privacy compliance would strengthen its security posture and user trust.

I

ILUNION

ilunion.com

70

ILUNION is a Spanish enterprise focused on social inclusion and diversity, operating a business model that combines economic profitability with social impact by creating quality employment for people with disabilities and vulnerable groups. The company is positioned as a leader in diversity and transformation with a broad portfolio of services including hospitality, retail, consulting, and wellbeing. Technically, the website is built on Drupal CMS with modern front-end frameworks and integrates analytics and marketing tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent accessibility, mobile optimization, and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the website's content, branding, and external links to Grupo Social ONCE and subsidiaries strongly support legitimacy. Overall, ILUNION presents a professional, trustworthy, and socially responsible digital presence.

L

LUHAČOVICKO.info – Informační portál pro Luhačovice a okolí

luhacovicko.info

44

LUHAČOVICKO.info is a local information portal serving Luhačovice and its surrounding areas in the Czech Republic. The website provides news, event invitations, accommodation and dining guides, and other useful local information targeting residents and visitors. It operates as a small media outlet focused on regional content with a business model based on advertising and local service promotion. Technically, the site is built on WordPress 6.8.3 with common plugins such as Contact Form 7 and Google Analytics integration via MonsterInsights. The site is mobile-optimized and has a good user experience with clear navigation and regularly updated content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and formal privacy and cookie policies, which are compliance gaps. WHOIS data is unavailable due to privacy protection, which is typical for small websites and does not raise immediate concerns. Overall, the website is legitimate and trustworthy for its purpose but could improve privacy compliance and security transparency.

ZM – TECH s.r.o. operates the reproman.cz website, offering REPROMAN®, a dietary supplement aimed at improving male sexual health and fertility. The company positions itself as a niche healthcare provider with a focus on reproductive medicine, supported by expert partnerships and a clear e-commerce model. The website provides comprehensive product information, expert advice, and a user-friendly shopping experience targeting men seeking to enhance fertility and sexual vitality. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, with a responsive design suitable for mobile users. Security posture is solid with HTTPS and form protection, though lacks explicit security policies and incident response contacts. Privacy compliance is strong, featuring detailed privacy and cookie policies with consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

5

50skills

50skills.com

67

50skills is a technology company specializing in no-code AI workflow automation solutions designed to streamline and optimize business processes across departments such as HR, IT, finance, and operations. Their platform offers a visual workflow builder, AI agent designer, form builder, and integration studio, targeting businesses seeking to automate repetitive tasks and scale operations efficiently. The website presents a professional and consistent brand image with clear product offerings and a focus on ease of use and AI-driven automation. Technically, the site is built on Webflow with modern libraries and integrates Google Analytics and CookieHub for analytics and compliance. Security posture is solid with HTTPS and cookie consent, though explicit privacy and terms policies are missing. WHOIS data is unavailable, which slightly reduces trust but the overall digital presence supports legitimacy. Recommendations include adding comprehensive privacy and security policies, improving accessibility, and publishing vulnerability disclosure information.

A

APOLO s.r.o.

apolopraha.cz

40

APOLO s.r.o. is a Czech company specializing in the sale and installation of interior and entrance doors, primarily of the Sapeli brand, along with complementary products such as door frames, fittings, glass doors, flooring, and railings. The company operates physical showrooms in Prague Štěrboholy and Štrampouch near Čáslav, serving customers mainly in the Central Bohemian Region and Prague. Their market position is that of a regional authorized reseller with a focus on quality and customer service. Technically, the website is built on WordPress with modern plugins and technologies, including Google Tag Manager and reCAPTCHA, ensuring a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response documentation are recommended. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting the company's business credibility.

K

KAYHIL FREIGHT

kayhil.co.za

46

Kayhil Freight is a specialized logistics and freight delivery company operating primarily between South Africa and Lesotho. Established in 2008, the company has built a trusted market position with over two decades of experience, offering services such as import/export logistics, express delivery, and inhouse clearing. Their national footprint in South Africa and multiple branch locations support a broad customer base including businesses and individuals requiring reliable freight services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress using modern frameworks like Bootstrap and WPBakery Page Builder, ensuring good mobile optimization and SEO readiness. Integration of Google Analytics and social media links indicates a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and security hardening. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks DNSSEC and security headers, which are recommended for enhanced protection. There is no visible security policy or incident response information, and cookie consent mechanisms are absent, indicating compliance gaps especially regarding GDPR. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, Kayhil Freight's website is a good representation of their business with solid credibility and technical implementation. Strategic improvements in security policies, privacy compliance, and DNS security would strengthen their posture and trustworthiness further.

M

Moravský zemský archiv v Brně

mza.cz

60

Moravský zemský archiv v Brně is a Czech government archival institution providing public access to historical documents, research facilities, and archival care information. The website serves researchers, historians, and the general public interested in regional history and archival materials. It maintains a clear and consistent brand presence with official contact details and regularly updated news content. Technically, the site is built on WordPress with Elementor, uses HTTPS, and includes modern web fonts and icon libraries, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is basic but includes a cookie policy page. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable, likely due to registry policies.

C

Conscribo

conscribo.nl

58

Conscribo is a Dutch company specializing in online administrative software tailored for associations and their boards. Their platform integrates bookkeeping, membership management, mailing, and other administrative functions into a single SaaS solution. The company targets small to medium-sized associations in the Netherlands, positioning itself as a niche provider with a focus on ease of collaboration among multiple users. Technically, the website is built on WordPress with Elementor and employs modern tracking and marketing tools, including Facebook Pixel and Google Tag Manager, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. The domain registration aligns well with the business profile, enhancing trustworthiness. Overall, the website presents a professional, well-structured, and user-friendly experience with good SEO and mobile optimization.

K

K.I.T. Group

wfnr-congress.org

59

The website wfnr-congress.org serves as the official platform for the 14th World Congress for Neurorehabilitation (WCNR 2026), organized by K.I.T. Group. It targets professionals in neurorehabilitation, providing comprehensive information about the event, including program details, registration, social events, and sponsorship opportunities. The site is well-structured and professionally designed, reflecting a medium-sized organization with a focus on healthcare events in South Korea. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Swiper.js, hosted behind Cloudflare DNS, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism, but no terms of service or security policies are published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

Č

Český svaz ochránců přírody

csop.cz

61

Český svaz ochránců přírody (ČSOP) is a well-established Czech non-governmental non-profit organization dedicated to nature and landscape protection, founded in 1979. The organization engages professionals, amateurs, and volunteers in a wide range of conservation activities, education, and public awareness. The website reflects a mature digital presence with comprehensive content about their programs, projects, and partnerships, targeting environmentally conscious individuals and groups in the Czech Republic. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on a Czech hosting provider, and demonstrates good mobile optimization and user experience. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

F

Filharmonie Bohuslava Martinů

filharmonie-zlin.cz

52

Filharmonie Bohuslava Martinů is a cultural institution based in the Czech Republic, focused on delivering classical music concerts and cultural events to the local community and classical music enthusiasts. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies such as Google Tag Manager and Font Awesome, with HTTPS enabled, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data due to privacy protection limits the ability to fully verify domain ownership and legitimacy. Overall, the security posture is moderate with room for improvement in privacy policies and security best practices. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

L

LiveFX

livefx.fr

40

LiveFX is a French company specializing since 2016 in the rental, provision, and sale of special effects for various types of events including festivals, concerts, corporate events, sports, and private occasions. The website serves as a basic informational and contact portal while a new site is under development. The company targets event organizers and professionals seeking specialized stage effects services. The business operates in a niche market with a small company size and a localized French presence. Technically, the website uses a modest technology stack including jQuery, Bootstrap, and Font Awesome, hosted on OVH infrastructure. The site is accessible via HTTPS and shows basic mobile optimization and SEO practices. However, it lacks advanced security headers, privacy policies, and analytics tools, indicating a low to moderate level of digital maturity. From a security perspective, the site benefits from HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms or data collection mechanisms are present, reducing immediate data protection risks. The WHOIS data aligns well with the website content and business claims, supporting legitimacy. No signs of malware, phishing, or adult content were detected. Overall, the website is functional but basic, with room for improvement in privacy compliance, security hardening, and content richness. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

C

Concert Systemes

concert-systemes.com

46

Concert Systemes is a French audiovisual technical service provider specializing in sound, lighting, structures, video, and event engineering for spectacles and events. The company offers services including technical assistance, rental, sales, and installation, targeting event organizers and audiovisual professionals primarily in France. The website is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with Google Analytics for visitor tracking. The site is accessible, mobile-optimized, and includes a cookie consent mechanism, but lacks privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing key security headers and no visible incident response or data protection policies. WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the website and business. Overall, the site demonstrates a good level of content quality and business credibility but requires improvements in security and compliance documentation.

P

Peters Surgical USA

peters-surgical.us

44

Peters Surgical USA is a medium-sized international healthcare company specializing in the design, manufacture, and distribution of surgical medical devices, including sutures, manual ligation products, and atraumatic occlusion instruments. The company targets healthcare professionals and partners globally, with a strong presence in the United States and affiliated sites in France, Germany, India, and worldwide. The website reflects a professional and consistent brand image with clear product categorization and dedicated services for surgical teams. Technically, the website is built on WordPress using the Salient theme and leverages modern web technologies such as jQuery, Gravity Forms, and YouTube API for multimedia content. Hosting is provided by OVH sas, a reputable provider. The site is mobile optimized and includes SEO best practices, though performance is moderate. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. From a security perspective, the site uses HTTPS and has domain transfer and deletion protections enabled. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published. The site uses validated forms but could improve security headers and publish vulnerability disclosure information. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security policy transparency and DNS security would enhance trust and resilience.

APSIS Lead operates as a technology-driven marketing platform specializing in lead management and marketing automation, providing users with a secure login portal. The website content is minimal, focusing primarily on user authentication without public-facing business or compliance information. The technical infrastructure leverages common web technologies including JavaScript, jQuery, Google Fonts, and tracking tools such as Google Analytics and ProspectEye. Hosting and domain registration are managed through reputable providers, with the domain established in 2015, aligning with the company's operational timeline. From a security perspective, the site employs basic best practices such as form POST methods and domain status locks to prevent unauthorized domain changes. However, it lacks DNSSEC, visible security headers, and explicit HTTPS enforcement details, indicating potential areas for security enhancement. Privacy and cookie policies are absent, which may impact GDPR compliance and user trust. No incident response or security contact information is provided, limiting transparency in security governance. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but notable gaps in privacy compliance and security hardening. The absence of contact information and policies reduces business credibility and user confidence. Strategic improvements in security headers, privacy disclosures, and user communication channels are recommended to elevate trust and compliance standards.

B

Banalita.cz

banalita.cz

48

Banalita.cz is a Czech Republic-based small business specializing in the manufacturing and retail of promotional products, souvenirs, and related merchandise. The company operates both physical stores and an e-commerce platform, serving retail customers and businesses seeking customized advertising items. Their website demonstrates a professional and consistent brand presence, with clear contact information and compliance with GDPR cookie policies. Technically, the site is built on WordPress with Elementor, integrating modern web technologies and security features such as HTTPS and Google reCAPTCHA. However, the absence of WHOIS data limits domain trust verification. Security posture is solid but could be enhanced with additional HTTP security headers and incident response information. Overall, the website is well-structured, user-friendly, and trustworthy for its target audience.

H

Humans of UX

humansofux.com

51

Humans of UX is a community-driven project focused on mapping and surveying UX professionals in Slovakia and Czechia. The website serves as a platform to collect data on UX trends, tools, education, and work conditions in the region. It targets UX professionals and aims to provide insights into the local UX market. Technically, the site is built on Webflow CMS, hosted on Webflow's CDN, and uses common web technologies including Google Analytics and Tag Manager for tracking. The site is mobile-optimized and has a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses secure form submissions to third-party email marketing services. However, it lacks visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the site is functional and trustworthy for its intended audience but would benefit from improved transparency and security practices.

ESO travel operates a professional Slovak travel agency website specializing in exotic and cultural vacations to destinations such as Thailand, China, Cuba, and the USA. The website presents a broad portfolio of travel packages including last minute and first moment offers, supported by a clear navigation structure and multilingual options. Technically, the site uses modern frameworks like Foundation and jQuery, integrates Google Analytics and Tag Manager for marketing insights, and employs a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and suitable for its target audience of Slovak travelers seeking exotic holidays.

The website mo-je.cz represents a small Czech business specializing in technical SEO and online profile management services for platforms such as Firmy.cz, Mapy.cz, and Google Search. The business targets other companies seeking to improve their online visibility through sustainable SEO practices rather than paid advertising. The site is professionally designed with clear navigation and relevant content, though it lacks comprehensive privacy and cookie policies. Technically, the site uses modern web technologies including Google Tag Manager, Google Fonts, and Font Awesome icons, and appears mobile-optimized with moderate performance. Security posture is adequate but could be improved by adding security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and raising questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

H

Hockey Roanne

hockeyroanne.com

45

Hockey Roanne is a local sports organization focused on hockey, as indicated by the website content and branding. The website is currently under maintenance, providing basic contact information and links to ticketing and location services. The business targets local sports fans and community members interested in hockey events. The domain is well-established since 2009, consistent with a small sports club's history. Technically, the website is built on WordPress and uses common web technologies such as CSS, JavaScript, Font Awesome, and Google Fonts. Hosting is provided by OVH sas, a reputable provider. The site currently has basic mobile optimization and SEO features but lacks advanced accessibility and performance optimizations. The site uses a coming soon/maintenance plugin, limiting content availability. From a security perspective, the domain has protective status flags but lacks DNSSEC and visible security headers. No privacy or cookie policies are published, and no incident response or vulnerability disclosure information is available. The site does not appear to use analytics or tracking services, indicating minimal user tracking. Overall security posture is basic with room for improvement. The overall risk is moderate given the limited content and lack of advanced security or privacy features. Strategic improvements in security headers, privacy compliance, and content availability would enhance trust and user experience.

SCOPAY is an online platform designed to facilitate payments and communication between parents and schools, focusing on services such as lunch payments, school trip payments, and booking parents' evenings. The website presents a professional and user-friendly interface with mobile app availability on major app stores, targeting parents and school staff. Technically, the site uses common web technologies including jQuery, Bootstrap, Font Awesome, and Google reCAPTCHA for form security. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. The site lacks direct contact emails or phone numbers, relying solely on a contact form with CAPTCHA for enquiries. Overall, the website is functional and serves its business purpose but requires improvements in transparency, security headers, and compliance documentation to enhance trust and security.

J

Judarks World

judarks.com

46

Judarks World is a Ghana-based creative digital agency specializing in website development, social media management, brand identity, digital graphics, and IT support services. The company targets businesses seeking to enhance their digital presence and transform their visions into reality. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning Judarks as a trusted small-sized agency in the technology sector. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web fonts and libraries such as jQuery and Font Awesome. Hosting is provided by StormerHost, and the site uses HTTPS with a valid SSL certificate. Mobile optimization and navigation clarity are good, though accessibility and SEO optimizations are basic. From a security standpoint, the site benefits from HTTPS and domain transfer protection but lacks important security headers and DNSSEC. There is no visible privacy or cookie policy, which presents compliance risks. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. Overall, Judarks World presents a moderate risk profile with a solid business foundation but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

3

Kvalitní informace v souvislostech - rozcestník - 3oko.cz

3oko.cz

50

3oko.cz is a Czech language content portal and news aggregator focused on alternative information, self-development, spirituality, and societal topics. The website serves a niche audience interested in deeper understanding and alternative perspectives on current events and personal growth. It operates as a thematic directory linking to articles, videos, and other media, curated and categorized for ease of navigation. The business model is content aggregation and education with a small-scale operation founded recently in 2024. Technically, the site is built on Joomla CMS with the Gantry 5 framework, using common JavaScript libraries such as jQuery and Awesomplete. It employs Google Fonts and Google Analytics for typography and analytics respectively. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Hosting and domain registration are consistent with the Czech market and the website's content. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, which limits trust and compliance posture. The domain is newly registered but consistent with the website's nature and location. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is functional and well-structured for its purpose but would benefit from improved privacy compliance, security headers, and transparent contact information to enhance trust and regulatory adherence.

K

Katčenka z.s.

katcenka.cz

58

Katčenka z.s. is a small private alternative elementary school located in Plzeň, Czech Republic, focusing on individualized and project-based education for children aged 6 to 15 years. The school operates as a non-profit association offering a stress-free, flexible learning environment without traditional grading, emphasizing outdoor activities and personal development. The website reflects a community-oriented educational institution with testimonials from parents and students, highlighting a positive and supportive learning atmosphere. Technically, the website is built on Joomla CMS using the Gantry 5 framework, incorporating jQuery and other standard web technologies. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism in place, although it lacks some advanced security headers and a dedicated privacy policy page. Performance is moderate, and SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS and provides cookie consent but lacks security headers and a vulnerability disclosure policy. No WHOIS data is available, likely due to privacy protection, but the domain and website content appear legitimate and consistent with the business claims. No critical vulnerabilities or suspicious content were detected. Overall, Katčenka z.s. presents a trustworthy and professionally maintained online presence for a niche educational service. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and security posture.

G

GRAWEB s.r.o.

tiskarnahustopece.cz

45

GRAWEB s.r.o. operates the Naša tiskárna HustoPeče website, providing advanced digital printing and graphic design services primarily in Hustopeče, Czech Republic. The company leverages modern printing technologies acquired in 2019 to offer high-quality, fast, and cost-effective printing solutions. Their business model focuses on serving local businesses and individuals with a comprehensive suite of printing services including copying, binding, and file upload capabilities. The website reflects a professional and consistent brand image with clear service descriptions and pricing transparency. Technically, the website is built using Mobirise CMS with Bootstrap and jQuery frameworks, integrating third-party analytics tools such as Google Analytics and Hotjar for user behavior tracking. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data limits domain trust verification, although the website content and contact information suggest a legitimate business. The use of multiple tracking tools without clear privacy disclosures indicates potential compliance gaps. Overall, the website presents a trustworthy and professional front for a small regional printing business but should enhance its privacy compliance and security posture to align with best practices and regulatory requirements.

I

International Council of Nurses

icncongress.org

70

The ICN Congress 2025 website serves as the official platform for the 30th International Council of Nurses Congress, scheduled for June 2025 in Helsinki, Finland. It provides comprehensive information about the event, including scientific programs, speakers, photo galleries, and registration details. The site targets nursing professionals, students, and healthcare stakeholders globally, emphasizing nursing's role in shaping healthcare policy and delivery. The business model centers on event organization and professional development, supported by sponsorships and accreditation partnerships. Technically, the website is built on a Ruby on Rails framework with modern JavaScript libraries such as jQuery, Bootstrap, and Mapbox for interactive maps. It integrates third-party services like HelpScout for customer support and hCaptcha for bot mitigation. Hosting appears to be on AWS infrastructure, inferred from DNS records. The site is mobile-optimized with a responsive design and supports multiple languages, enhancing accessibility for an international audience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and no explicit HTTP security headers were detected in the HTML content, indicating room for improvement. The site employs CSRF tokens and bot protection mechanisms but lacks publicly visible security or incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website presents a professional and trustworthy front for a reputable international nursing organization. It effectively balances content richness, user experience, and basic security measures. Strategic enhancements in DNS security, HTTP headers, and documented security policies would further strengthen its posture and trustworthiness.

I

I.C.E.I.D

iceid-gh.org

47

I.C.E.I.D is a specialized eye healthcare provider based in Ghana, focusing on digital health, imaging, diabetic, and paediatric eye care services. The company positions itself as a one-stop destination for comprehensive eye health solutions, leveraging modern digital health technologies and international standards. Their service offerings include eye imaging, diabetic eye care, paediatric care, glaucoma care, and general consultations, supported by a professional and skilled team. The website reflects a small but focused healthcare business with a clear mission and vision to improve eye care delivery in Africa.

G

GE Vernova

gevernova.com

72

GE Vernova is a leading energy technology company focused on electrification and decarbonization solutions. The website presents a professional and comprehensive digital presence, showcasing a broad portfolio of energy services including power generation, wind, nuclear, and advanced research. The technical infrastructure is modern, leveraging Drupal 10 CMS, Google Analytics, and reCAPTCHA for security. Privacy and cookie policies are well implemented with user consent mechanisms. Security posture is strong with HTTPS and secure forms, though explicit security policies and incident response contacts are absent. The WHOIS data is missing or inconsistent, which raises some legitimacy concerns despite the professional branding and content. Overall, the website is well designed, accessible, and trustworthy from a content and technical perspective but would benefit from improved transparency on domain registration and security policies.

S

Sinclair Corporation Ltd.

sinclair-world.com

62

Sinclair Corporation Ltd. is a medium-sized company specializing in air conditioning, heat pumps, and LED lighting products, with a presence in 28 countries. The company emphasizes quality, environmental protection, and customer comfort. Their website demonstrates a professional digital presence with modern technologies such as Bootstrap, jQuery, and Google Maps integration. The site is mobile-optimized and includes comprehensive GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced, though the absence of explicit security headers and WHOIS data gaps suggest areas for improvement. Overall, the website reflects a credible business with solid technical infrastructure but would benefit from enhanced transparency in domain registration and security policies.

S

SINCLAIR Global Group s.r.o.

sinclair-lighting.cz

55

SINCLAIR Global Group s.r.o. operates the Sinclair Lighting website, specializing in manufacturing and designing advanced LED lighting fixtures and systems. Their offerings target a professional audience including architects, project designers, investors, and installation firms, focusing on energy-efficient, photobiologically safe LED lighting solutions for various sectors such as education, healthcare, industrial, and public lighting. The company emphasizes quality, innovation, and compliance with modern standards including healthy lighting concepts aligned with human biorhythms. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google services such as Tag Manager and Analytics. The site is built on Pagio CMS and demonstrates good mobile responsiveness and user experience. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy in Czech. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Security posture is moderate; HTTPS is assumed but no explicit security headers were detected. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. The site shows no signs of malicious content or adult material, maintaining a professional and safe environment. Overall, the website presents a credible and professional business front with good privacy practices but would benefit from enhanced security policies, transparency in domain registration, and improved technical security controls to strengthen trust and compliance.

S

SILOU HLASU, z.s.

silouhlasu.cz

60

SILOU HLASU, z.s. is a Czech non-profit organization dedicated to empowering people with disabilities through voice-controlled software for computers and home automation. Their mission is to make assistive technology accessible to those who need it most, providing free training courses funded by sponsorships and donations. The website reflects a focused and professional approach to their cause, with clear content and multiple social media channels to engage their audience. Technically, the site is built on WordPress with Elementor, using modern plugins and libraries, and is well-optimized for mobile devices. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with accessible policies and GDPR adherence. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

A

Advertising Engineers

advertising-engineers.com

46

Advertising Engineers is a small Czech advertising agency based in Zlín, specializing in honest and straightforward advertising services. Their website reflects a professional but modest digital presence built on WordPress, with a focus on regional identity and client trust. The technical infrastructure uses common web technologies such as jQuery, Bootstrap, and Google Analytics, with SEO optimized by Yoast. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and DNSSEC. No direct contact information or detailed security policies are published, which limits transparency. Overall, the site is functional and compliant with GDPR cookie requirements but could improve in security and contact accessibility.

R

Reklamní Inženýři

reklamni-inzinieri.sk

36

Reklamní Inženýři is a small Slovak advertising agency established in 2015, specializing in honest and effective marketing campaigns. The company emphasizes regional pride and a straightforward approach to client service. Their website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile and SEO with Yoast SEO and Complianz GDPR compliance plugins. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and detailed security policies. No direct contact emails or phone numbers are present on the homepage, which slightly impacts business credibility. Overall, the website is professional and trustworthy with moderate user tracking via Google Analytics.

A

AiVision, s.r.o.

svicky.net

61

Svíčky.net is a Czech Republic based e-commerce retailer specializing in hobby crafting supplies, particularly components for candle and soap making. The website offers a comprehensive catalog of products and detailed category navigation, targeting hobbyists and small-scale crafters. The company behind the site is AiVision, s.r.o., indicating a small-sized business focused on niche retail. The site integrates modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel, demonstrating a moderate level of digital maturity. Security posture is good with HTTPS enforced and secure login mechanisms, although some HTTP security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which should be further investigated. Overall, the site presents a professional and trustworthy front for its target market.

C

Cause Inspired

causeinspiredmedia.com

73

Cause Inspired is a specialized digital marketing agency focused on empowering nonprofit organizations through Google Ad Grants and related marketing services. Established in 2014, the company offers a suite of services including Google Ad Grants management, website development, branding, and SEO. Their market position is that of a niche expert serving nonprofits to maximize their digital outreach and ROI. The website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress, WPBakery, and various analytics and tracking tools. Social media presence is strong, supporting their credibility and outreach efforts. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and trust.

W

WPSERVEUR

wpserveur.net

63

WPServeur is a specialized French WordPress hosting provider offering high-quality, secure, and performant hosting solutions tailored exclusively for WordPress websites. Their business model focuses on subscription-based hosting with value-added services such as automatic backups, free migrations, security enhancements, and developer-friendly tools like WP-CLI and Git integration. The company positions itself as a premium niche player with a strong emphasis on customer support and ecological responsibility. Technically, the website is built on WordPress with WooCommerce and integrates modern technologies including Google Fonts, Font Awesome, and various analytics and marketing tools. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced, nightly backups, and security plugins, although some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. WHOIS data is missing or unavailable, which slightly impacts trust but the professional website content and customer testimonials support legitimacy. Overall, WPServeur presents a mature and trustworthy hosting service with room for improvement in transparency and security policy disclosures.

H

Hematologicko-onkologické oddělení, Fakultní nemocnice Plzeň

hematologieonkologie.cz

57

The Hematologicko-onkologické oddělení FN Plzeň website represents a specialized healthcare department within the Faculty Hospital Plzeň, uniquely accredited for all types of hematopoietic stem cell transplantation in the Czech Republic. The site provides comprehensive information about their services, accreditations, and partnerships, targeting patients and healthcare professionals. The business model focuses on delivering advanced hematology and oncology treatments, supported by clinical research and quality management. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Cookiebot for GDPR compliance, ensuring a responsive and user-friendly experience. However, some technical improvements could enhance accessibility and security headers. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, limiting full domain trust analysis.

S

Střední škola podnikatelská a Vyšší odborná škola, s.r.o.

spos.cz

44

Střední škola podnikatelská a Vyšší odborná škola, s.r.o. is a private educational institution based in the Czech Republic, specializing in secondary and higher vocational education focused on economics and business. The website serves as an informational portal for students and stakeholders, providing updates and details about the school's activities and programs. The institution maintains an active social media presence, enhancing its outreach and engagement with its audience. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts and Font Awesome icons. The site is accessible, mobile-optimized, and demonstrates good SEO practices, although performance is moderate. Security-wise, the site uses HTTPS but lacks several recommended security headers and policies, which could be improved to enhance protection and compliance. The security posture is adequate but could benefit from implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and social media presence support its authenticity. Overall, the site is safe, professional, and suitable for its educational purpose.

A

Amref Health Africa Norden

amref.se

55

Amref Health Africa Norden is a non-profit organization focused on improving health outcomes in Africa, targeting a Swedish audience. The website content emphasizes their mission to create a healthier and stronger Africa, serving as an informational and advocacy platform. The site is built on WordPress with modern styling frameworks like Tailwind CSS and Font Awesome, indicating a moderate level of digital maturity. However, the website is served from a subdomain (amref.lokl.se) rather than the queried domain (www.amref.se), and WHOIS data for the main domain is unavailable, raising concerns about domain legitimacy and ownership. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and explicit security policies. Privacy compliance is weak due to missing privacy and terms of service pages, though a cookie consent mechanism is present. Overall, the site is functional and professional but requires improvements in domain legitimacy, security transparency, and privacy compliance to enhance trust and credibility.

M

MODX

modxcloud.com

69

MODX is an established open source content management framework that empowers developers and publishers to build highly customizable digital experiences without the bloat of traditional CMS platforms. With over 20 years of history and a strong global community, MODX offers a flexible platform supported by commercial services including cloud hosting and selective content staging. The website reflects a mature business with a clear focus on technology and developer-centric solutions. Technically, the site employs modern web standards, including responsive design, accessibility features, and integration with analytics and error monitoring tools such as Segment and Sentry. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosure mechanisms are not publicly documented. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, MODX presents a professional, secure, and user-friendly web presence aligned with its market position as a leading open source CMS framework.

L

Luxembourg Air Rescue

lar.lu

59

Luxembourg Air Rescue is a specialized emergency medical air rescue and repatriation service provider based in Luxembourg. The organization focuses on saving lives globally by providing rapid medical assistance via air transport. Their website reflects a professional and focused approach to their mission, targeting travelers and individuals requiring emergency medical evacuation. The digital infrastructure incorporates modern analytics and tracking technologies, including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Piwik PRO, indicating a mature digital presence. The site implements cookie consent mechanisms, demonstrating awareness of privacy compliance requirements. Security posture is generally good with HTTPS enforced and consent-based cookie management; however, explicit security headers and published security policies are absent, representing areas for improvement. The lack of accessible WHOIS data limits domain trust analysis, but the website content and technical setup suggest legitimacy. Overall, the site is well-designed, user-friendly, and trustworthy for its intended audience.