Security Directory

G

Groupe BPCE

groupebpce.com

77

Groupe BPCE is a major French banking and insurance group, operating through well-known brands such as Banque Populaire, Caisse d'Epargne, and Natixis. It holds the position of the second largest banking group in France, financing a significant portion of the national economy. The website reflects a mature digital presence with comprehensive content targeting customers, investors, journalists, and partners. The business model focuses on retail banking, insurance, investment management, and corporate banking services. The site is professionally designed, mobile-optimized, and SEO-friendly, indicating a high level of digital maturity. Technically, the website is built on WordPress, leveraging modern JavaScript libraries, SEO plugins, and tag management tools like Tealium. Security measures include HTTPS enforcement and bot protection via hCaptcha. Cookie consent and privacy policies are implemented in compliance with GDPR, demonstrating attention to privacy and regulatory requirements. However, explicit security policies and incident response contacts are not prominently available, which could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a notable anomaly but does not detract from the overall legitimacy given the extensive corporate branding and content. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Groupe BPCE's website is a robust, professional platform supporting its business operations and stakeholder communications. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.

O

onestar press

onestarpress.com

58

Onestar Press is a niche e-commerce business specializing in the sale of artists' books, prints, and multiples, operating since 2000. The website is professionally designed using Shopify and React technologies, providing a good user experience with clear navigation and mobile optimization. The business targets collectors and enthusiasts of contemporary art publications, offering a curated selection of unique and special edition works. Despite the professional presentation, the WHOIS data for the domain is missing, indicating either a recent registration or privacy protection, which conflicts with the claimed business history. The website includes comprehensive legal pages and contact information, supporting business credibility. Technically, the site uses modern frameworks and is hosted on Shopify, ensuring reliable infrastructure and moderate performance.

B

Bureau DGC

bureaudgc.com

46

Bureau DGC is a small Paris-based graphic design studio founded in 2016, specializing in book design, visual identity, spatial design, website, and digital media. The company targets artists, publishers, architects, urbanists, and brands, positioning itself as a niche creative agency with a professional portfolio showcasing diverse projects. The website reflects a consistent brand identity and provides clear contact information, though it lacks social media presence and phone contact details. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Analytics and Google Tag Manager for tracking. The site is hosted by OVH sas, a reputable provider. Mobile optimization is good, but accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are important for enhancing security posture. There are no visible privacy or cookie policies, nor incident response contacts, indicating compliance gaps especially regarding GDPR. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is professional and functional but would benefit from improved security practices and privacy compliance measures to enhance trust and regulatory adherence.

R

RightCapital

rightcapital.com

53

RightCapital is a financial planning software company offering an easy-to-use SaaS platform designed to simplify financial planning, enhance client engagement, and help financial advisors scale their practices efficiently. The company targets financial advisors and planners, providing advanced planning features, risk assessment tools, and workflow automation. The website is professionally designed, mobile-optimized, and demonstrates strong branding consistency. The technical infrastructure leverages modern web technologies including React and Gatsby, ensuring fast performance and good SEO. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain trust verification, but the overall digital presence and content quality indicate a legitimate and professional business. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance trust and compliance.

T

Thrill

thrill.com

59

Thrill.com operates as an online crypto casino and sports betting platform, offering a variety of casino games, premium slots, and crash games with seamless cryptocurrency transactions. The platform targets adult users interested in gambling and crypto-based betting, positioning itself as a future-forward service in the online gaming industry. The website is professionally designed with a modern UI, leveraging technologies such as SvelteKit and Cloudflare for hosting and security. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security measures include HTTPS and Cloudflare WAF protection, but there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates moderate technical maturity and business credibility but requires enhancements in privacy compliance and security posture to strengthen trust and regulatory adherence.

S

SOMFY, SPOL. S R.O.

somfypro.cz

66

Somfy PRO CZ&SK is a professional B2B web portal serving Somfy brand resellers, manufacturers, and distributors in the Czech and Slovak markets. The portal provides comprehensive product catalogs, technical specifications, pricing, manuals, and training information, positioning itself as a key resource for Somfy's professional partners. The website reflects a medium-sized manufacturing business with a consistent brand presence and a focus on B2B engagement. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and YUI, and implements responsive design for mobile users. The infrastructure supports good performance and SEO practices, although some accessibility features could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract significantly from the overall legitimacy of the business. Overall, Somfy PRO CZ&SK presents a trustworthy, professional, and well-maintained digital presence suitable for its B2B audience. Strategic improvements in security headers, incident response transparency, and direct contact information visibility would further enhance its security posture and business credibility.

P

Political Watch

parlamento2030.es

55

Parlamento2030 is a specialized platform developed and supported by Political Watch and the Spanish Ministry of Foreign Affairs to provide transparent, accessible information on parliamentary activities related to the Sustainable Development Goals (SDGs) in Spain. The platform leverages advanced automatic tagging technology to classify and present parliamentary data, enabling researchers, policymakers, journalists, and the public to monitor progress on the Agenda 2030. The website is well-structured, professionally designed, and offers multilingual support, enhancing accessibility and user engagement. Technically, the site is built using modern frontend technologies such as Vue.js and Vite, ensuring a responsive and performant user experience. While no explicit CMS or hosting provider information is available, the site demonstrates good SEO practices and mobile optimization. Security-wise, HTTPS is enforced, but the absence of visible security headers and vulnerability disclosure mechanisms suggests room for improvement in hardening the platform against potential threats. The security posture is moderate with no evident vulnerabilities or exposed sensitive data, but the lack of detailed WHOIS information due to registrar restrictions limits full trust verification. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Business credibility is supported by government affiliation, open source transparency, and clear contact information. Overall, Parlamento2030 presents a trustworthy, well-maintained platform with a clear mission and target audience. Strategic recommendations include enhancing security headers, adding a security.txt file, improving accessibility features, and maintaining regular audits of third-party components to sustain and improve the security and compliance posture.

J

JUDr. Tomáš Philippi

t-p.cz

57

JUDr. Tomáš Philippi operates a specialized legal practice in the Czech Republic focusing on real estate, civil, commercial, family, and copyright law. The firm is well-established since 2006 and holds a reputable position in the market, notably through contributions to real estate legislation and education. The website serves as a professional portal presenting the firm's services, contact information, and related real estate educational resources. Technically, the website is basic but functional, with minimal modern enhancements and limited mobile optimization. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and there are no published privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy but would benefit from improved security and privacy practices.

P

PROFIBUS Nutzerorganisation e.V. (PNO)

profibus.de

62

PROFIBUS Nutzerorganisation e.V. (PNO) is a leading industrial association based in Germany focused on the development, standardization, and dissemination of industrial communication and automation technologies including PROFIBUS, PROFINET, IO-Link, and others. The organization serves a global community of members and experts, providing certification, training, and technology services to support industrial production sectors. The website reflects a mature digital presence with comprehensive content and professional design. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and implements privacy-conscious analytics and cookie consent mechanisms. Security posture is strong with HTTPS and privacy features, though additional security headers and a security.txt file would enhance trust. Overall, the domain and website present a credible, professional, and trustworthy industrial association with a clear focus on technology standards and community support.

A

Advokátní kancelář Pásek, Honěk & Partners

phpartners.cz

53

PH Partners is a Czech law firm established in 2012, providing a broad range of legal services including corporate law, contract law, litigation, public procurement, transport, financial, administrative, real estate, and environmental law. The firm operates from offices in Prague and Brno and emphasizes personal service, professionalism, and interdisciplinary legal solutions. The website reflects a professional and consistent brand image with detailed attorney profiles and comprehensive service descriptions. Technically, the website uses legacy jQuery 1.8.3 and custom JavaScript with CSS styling. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident. Security headers and HTTPS status could not be verified from the data provided, indicating potential areas for improvement. From a security perspective, the site shows no immediate vulnerabilities in the HTML content, no exposed sensitive data, and no forms collecting personal data. However, the absence of privacy and cookie policies and missing WHOIS data reduce compliance and trust levels. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the site is a credible and professional legal services platform but would benefit from enhanced security practices, privacy compliance, and updated technical infrastructure to improve trust and user experience.

Z

Zlatý Anděl

zlatyandel.cz

52

Zlatý Anděl is a Czech Republic-based shopping center offering a variety of retail shops, restaurants, and office spaces. The website is professionally designed with clear navigation and mobile optimization, targeting local shoppers and business tenants. The technical infrastructure includes modern JavaScript frameworks, cookie consent management, and Google Tag Manager for analytics. Security posture is strong with HTTPS and cookie consent but could be improved by adding security headers and visible contact information. The absence of WHOIS data reduces domain trustworthiness, though the website's professional appearance and social media presence support legitimacy. Overall, the site is low risk but would benefit from enhanced transparency and security disclosures.

TeamIn is a Czech Republic-based software solution focused on providing a team information system tailored for small businesses. The platform facilitates project management, workflow control, and performance tracking, aiming to simplify communication and task management within small firms. The website presents a clear business focus with professional content and consistent branding, targeting small companies needing efficient project and workflow management tools. Technically, the website is built using standard web technologies including HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The site shows moderate performance and basic mobile optimization but lacks advanced frameworks or CMS detection. Security measures appear minimal, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies published, indicating gaps in compliance and security best practices. From a security perspective, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The lack of privacy and cookie policies further impacts GDPR compliance. While the site content is safe and business-appropriate, the security posture is weak, and improvements are needed to enhance trust and protect user data. Overall, the site is functional and informative but requires significant enhancements in security, privacy compliance, and domain legitimacy to improve its risk profile and business credibility.

U

Ultahost

ultahoststatus.com

53

Ultahost Status is a dedicated status monitoring website for Ultahost's server infrastructure, providing real-time updates and historical incident reports to its customers. The site is relatively new, consistent with the domain registration date in 2024, and targets Ultahost users who require transparency about service availability and outages. The business model focuses on enhancing customer communication and trust through timely incident reporting. Technically, the website employs modern web technologies such as Vue.js and is hosted with Cloudflare DNS services. The site is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. The absence of DNSSEC and security headers indicates room for improvement in security hardening. From a security perspective, the site uses HTTPS, ensuring encrypted communications, but lacks explicit security policies, vulnerability disclosures, and contact channels for incident response. No privacy or cookie policies are present, which may affect compliance with data protection regulations. The site does not employ tracking or advertising technologies, minimizing privacy risks. Overall, the website is functional and serves its purpose as a status page but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance. Strategic improvements in security headers, DNSSEC, and policy disclosures are recommended to elevate the site's security posture and regulatory adherence.

A

Admitad

artfut.com

42

Admitad is a German IT company specializing in online advertising and affiliate marketing services, providing a platform for media buying, sales growth, and customer acquisition. The website analyzed is minimalistic, serving primarily as an informational placeholder indicating domain ownership by Admitad. The technical infrastructure is basic, with limited use of modern web technologies and no detected CMS or advanced frameworks. Security posture is moderate but lacks critical elements such as HTTPS verification and security headers. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and contact email for abuse reporting lend some credibility. Overall, the site requires enhancements in security, privacy compliance, and content richness to better serve its audience and establish trust.

B

bokyo.net

bokyo.net

66

bokyo.net is a small e-commerce business specializing in contemporary art, offering limited edition artworks, posters, and prints primarily targeting art enthusiasts and collectors. The website is professionally designed using the Shopify platform with a Retina theme, providing a good user experience and mobile optimization. The technical infrastructure leverages Shopify's hosting and CDN services, ensuring moderate performance and modern web standards. Security posture is generally good with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and some security headers are not explicitly present. Privacy compliance is limited as no explicit privacy or cookie policies were found, which should be addressed to improve trust and regulatory adherence. Overall, the website is legitimate, consistent with its domain registration data, and presents a trustworthy online storefront for niche art products.

E

ergo.cz

ergo.cz

50

Ergo.cz is a Czech online magazine focused on lifestyle, health, productivity, technology, and related topics. The website offers a variety of articles targeting a general Czech-speaking audience interested in ergonomic living, work efficiency, and health trends. The business model centers on content publishing supported by advertising revenue, primarily through Google Adsense. The site is relatively new, with domain registration in late 2024, and presents itself as a niche media outlet with consistent branding and good content quality. Technically, the website employs standard web technologies including JavaScript, CSS, and uses Matomo for analytics alongside Google Adsense for monetization. Hosting is provided by vas-hosting.com, and the site is served over HTTPS with a moderate performance profile. Mobile optimization and SEO practices are good, though accessibility features are basic. No CMS is explicitly detected. From a security perspective, the site benefits from HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism despite the use of tracking and advertising scripts, which may pose GDPR compliance risks. No incident response or security policy information is published, and no vulnerability disclosure or security.txt files are found. Overall, the security posture is moderate but could be improved. The website content is safe for general audiences with no adult or explicit material detected. Contact information is limited to a contact form with no direct emails or phone numbers publicly listed. WHOIS data is consistent and legitimate, showing recent registration aligned with the website's launch. No suspicious domains or patterns are detected. Strategic recommendations include implementing a cookie consent banner, adding security headers, publishing security and incident response policies, and enhancing GDPR compliance measures to improve trust and legal standing.

M

Martin Bugner

martinbugner.com

47

Martin Bugner operates a small-scale personal web development and WordPress optimization service primarily targeting clients seeking fast and optimized websites. The website is minimalistic, serving as a temporary presentation with clear contact details and a straightforward business description. The domain is newly registered in 2024, consistent with the stated temporary nature of the site and upcoming new presentation. The technical infrastructure is basic, relying on standard HTML and CSS with no advanced frameworks or analytics detected. Hosting and DNS are provided by Czech-based providers, aligning with the website's Czech language and contact information. Security posture is modest, with no advanced security headers or policies implemented, and no privacy or cookie policies present, indicating low compliance maturity. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced security and compliance measures.

F

Framasoft

framapad.org

55

Framasoft is a French non-profit organization dedicated to promoting digital autonomy and popular education through free and open-source software projects such as Framapad, a collaborative real-time text editor. The organization operates on a donation-based model, emphasizing ethical hosting and user data protection. The website reflects a mature digital presence with multilingual support, clear navigation, and a strong community focus. Technically, the site uses modern frameworks like Vue.js and hosts Etherpad-lite software, ensuring a responsive and performant user experience. Security posture is solid with HTTPS and domain transfer protections, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is good, with clear terms of use and a privacy policy, but lacks a cookie consent mechanism despite minimal tracking. Overall, the site is trustworthy, professional, and aligned with its mission of digital emancipation.

S

SKP RAPID Plzeň, z. s.

fwcczech.cz

43

The website fwcczech.cz serves as the official online presence for the Footbike World Championship 2024 held in Czechia. It provides comprehensive event information, historical context, results, videos, and partner promotion, targeting footbike sport enthusiasts and participants. The site is bilingual (Czech and English) and emphasizes community engagement through social media links and partner showcases. The business model revolves around event organization and promotion within a niche sports market in the Czech Republic. Technically, the site is built on WordPress using the GeneratePress theme and related plugins, hosted by a Czech hosting provider, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent mechanism or GDPR details. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy for its purpose but could improve in privacy and security practices.

K

KlaukeGear

klaukegear.eu

52

KlaukeGear operates an e-commerce platform specializing in branded merchandise and promotional products, targeting businesses and individuals seeking textile items, giveaways, and accessories under the Klauke brand. The website is built on the Shopware 6 platform, offering a product catalog with shopping cart and user account features. The business appears to be a small retail operation with a consistent brand presentation and moderate market positioning in the promotional merchandise niche. Technically, the site uses modern e-commerce technology but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and CSRF protections but lacks comprehensive security headers and explicit security policies. Privacy compliance is basic with a privacy policy present but no cookie policy or GDPR explicit indicators. Overall, the site is functional and professional but could improve in security and compliance maturity.

S

SCRAMBLE AUSTRALIA

scramblestuff.com.au

63

SCRAMBLE AUSTRALIA operates a professional e-commerce website specializing in high-quality martial arts training apparel, including gis, rashguards, shorts, and casual wear, targeting martial arts practitioners in Australia and New Zealand. The website is built on the Shopify platform, leveraging modern web technologies and providing a responsive, well-structured user experience. The business maintains a consistent brand presence across social media channels and offers clear policies for privacy, refunds, and shipping, indicating a mature e-commerce operation. Technically, the site benefits from Shopify's secure hosting and payment infrastructure, with HTTPS enforced and security headers implemented, contributing to a strong security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration data is privacy-protected but consistent with a legitimate small business. The website content is safe for general audiences and free from adult or explicit material.

K

Krajská hospodářská komora Zlínského kraje

khkzk.cz

43

Krajská hospodářská komora Zlínského kraje is a regional business chamber representing entrepreneurs and business entities in the Zlín region of the Czech Republic. The organization provides a variety of services including business representation, education, networking events, export support, and certification services. The website is professionally designed with clear navigation and content relevant to its target audience of regional businesses and entrepreneurs. Technically, the site uses modern web technologies including JavaScript, CSS frameworks, and Google Tag Manager for analytics and marketing. The site is mobile optimized and includes GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement. The absence of WHOIS data reduces domain trustworthiness, but the presence of reputable partners and active social media channels supports legitimacy. Overall, the site is a credible regional business resource with good content quality and privacy compliance but could enhance security and transparency.

The website webusager.fr is currently a placeholder page indicating it is under construction, hosted by OVH. There is no active business content, no contact information, and no privacy or cookie policies present. The domain is registered since 2012 with OVH, consistent with the hosting provider, but the lack of content suggests the site is not yet operational or is abandoned. Technically, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. There is no evidence of HTTPS or security headers, which presents a security risk. No analytics or tracking technologies are in use, and no advertising or marketing tools are present. Overall, the site has very limited digital maturity and poor content quality.

V

Viessmann Technologies GmbH

viessmann-vitec.com

65

Viessmann Technologies GmbH operates as a specialized provider of cleanroom and controlled air solutions targeting industries such as healthcare, life sciences, high-tech manufacturing, and indoor growing. The company positions itself as a competent partner for industry-specific cleanroom technology applications, supported by a professional website that highlights their solutions, project management expertise, and references. The website reflects a medium-sized business with a clear affiliation to the Viessmann Group, enhancing its market credibility. Technically, the website is built on the Scrivito CMS platform and integrates modern analytics and marketing tools such as Microsoft Clarity and Pardot. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly detected, and the WHOIS data for the domain is missing, which raises concerns about domain registration transparency. From a security perspective, the site enforces HTTPS and employs cookie consent tools, but lacks visible security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data and security headers suggests areas for improvement to enhance trust and compliance. Overall, the website is professional and trustworthy in appearance but would benefit from improved transparency in domain registration and enhanced security header implementation. Strategic recommendations include adding explicit security policies, incident response contacts, and regular third-party script audits to strengthen security posture and compliance.

H

Top Porn Videos Free - Full HD and 4K Porn XXX Tube

hitporntube.com

56

The website www.hitporntube.com operates as an adult entertainment platform offering free streaming and downloadable pornographic videos in HD and 4K quality. It targets an adult audience exclusively, providing a wide range of explicit content categorized by various adult genres. The business model appears to rely primarily on advertising revenue through third-party ad networks and tracking services. The site lacks visible corporate or contact information, privacy policies, or terms of service, which limits transparency and user trust. Technically, the site uses standard web technologies including jQuery and JavaScript, with a basic but functional design optimized for mobile devices. HTTPS is enabled, ensuring encrypted connections; however, the absence of advanced security headers such as Content-Security-Policy and HSTS reduces the overall security posture. The site loads moderately fast but could benefit from performance and accessibility improvements. From a security perspective, the site does not expose sensitive data but lacks comprehensive security best practices. The missing WHOIS data and domain registration details raise concerns about legitimacy and transparency, common in adult content domains but detrimental to trustworthiness. No privacy or cookie policies were found, indicating poor compliance with data protection regulations such as GDPR. Overall, the website presents moderate risks related to privacy, security, and business credibility. Strategic improvements in transparency, security headers, and compliance documentation are recommended to enhance trust and reduce potential legal and security risks.

E

Porno Catalog

eroticax.org

52

The website eroticax.org operates as an adult entertainment catalog and review platform, focusing on listing premium porn sites and providing links to free HD porn downloads. It targets an adults-only audience interested in adult video content and related services. The business model appears to be affiliate/referral based, aggregating content and directing traffic to partner adult sites. The site was established in 2018 and maintains a small-scale online presence without visible corporate transparency or detailed business information. Technically, the site uses basic HTML and CSS with Cloudflare DNS services but lacks advanced frameworks or CMS detection. The site shows moderate performance and basic mobile optimization but lacks accessibility and SEO best practices. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks critical security headers and privacy compliance documentation such as privacy or cookie policies. The absence of contact information and incident response channels reduces transparency and trust. The domain registration is consistent with the business type and age but lacks registrant detail. Overall security posture is weak, with recommendations to improve HTTPS configuration, add security headers, and implement privacy policies. The overall risk assessment indicates a low trustworthiness level due to missing compliance and security best practices. Strategic recommendations include enhancing security configurations, adding privacy and cookie policies, improving business transparency, and regularly auditing external links for safety to reduce potential risks and improve user trust.

H

Hirose Electric Co., Ltd.

hirose.com

53

Hirose Electric Co., Ltd. is presented as a leading global supplier of electrical and electronic connectors, focusing on innovative interconnect solutions and worldwide manufacturing capabilities. However, the website content is minimal, lacking detailed information, contact details, or policies, which limits the ability to fully assess the company's digital maturity. The technical infrastructure appears basic with standard HTML, CSS, and a single analytics script, but no advanced frameworks or CMS detected. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance indicators. The WHOIS data is missing or inaccessible, raising concerns about domain legitimacy despite the presence of website content. Overall, the site appears to be a minimal or placeholder page rather than a fully developed corporate website.

A

Alexion

alexion.us

66

Alexion, a part of AstraZeneca Pharmaceuticals LP, operates a dedicated US website focused on delivering therapies for rare diseases. The company is positioned as a leader in rare disease research and patient support, targeting US audiences including patients, caregivers, and healthcare professionals. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its parent company. Technically, the site uses modern web technologies including Sitecore CMS, AWS hosting, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with no signs of malicious activity or content safety concerns.

M

Ministerstvo pro místní rozvoj ČR

projektovezamery.cz

62

The website projektovezamery.cz serves as an official information system for project intents managed by the Czech Republic's Ministry of Regional Development (Ministerstvo pro místní rozvoj ČR). It provides authenticated access to project data via national identity systems such as JIP, NIA, and ISDS, targeting government officials and stakeholders involved in regional project planning. The platform is positioned as an authoritative government resource with a focus on transparency and centralized project management. Technically, the site is built using modern web technologies including React and Webpack, delivering a moderate performance experience with basic mobile optimization and accessibility features. The site lacks advanced SEO and comprehensive metadata but maintains a consistent and professional government branding. Hosting and SSL details are not explicitly provided but HTTPS usage is implied. From a security perspective, the website employs national authentication mechanisms but lacks visible security headers and published security or privacy policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of privacy and cookie policies, as well as contact information, reduces privacy compliance scores. The WHOIS data is consistent with the website's government affiliation, showing no suspicious patterns and a domain age appropriate for the service. Overall, the site is trustworthy and serves its government function adequately but would benefit from enhanced privacy compliance, security header implementation, and improved user contact options to strengthen its security posture and user trust.

S

Státní fond životního prostředí ČR

opst.cz

63

The website represents the official online presence of the Operační program Spravedlivá transformace, a Czech government-backed funding program focused on supporting regions affected by the transition away from coal energy. Managed by the State Environmental Fund of the Czech Republic, the program offers substantial financial resources to regional projects in energy, research, innovation, and social development. The site serves as a comprehensive portal for information, application submission, and updates related to the program. Technically, the site is built on WordPress with modern design and responsive features, integrating Google Analytics for minimal user tracking and employing cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The domain registration is consistent with the program's timeline and official nature, hosted by reputable Czech providers. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

S

Swiss National Bank

snb.ch

75

The Swiss National Bank (SNB) operates as Switzerland's central bank, providing essential services including monetary policy implementation, issuance of banknotes and coins, payment transaction facilitation, asset investment, and financial stability oversight. The website serves a broad audience including the general public, financial market participants, media, researchers, and government entities. It positions itself as a key national financial institution with a strong market presence and government backing. Technically, the website employs modern web technologies such as JavaScript, SVG icons, and CSS, likely managed via a custom CMS. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, avoids exposing sensitive data, and implements secure forms. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure or security.txt files are found. Analytics are conducted via a custom SNB service with moderate user tracking and a two-year data retention policy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high legitimacy score based on WHOIS data consistency. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to enhance transparency and security posture.

I

ispmanager

ispmanager.com

69

ispmanager operates as a Linux-based hosting control panel provider, targeting web developers, system administrators, website managers, and hosting providers. The company offers software solutions for managing web servers, mail servers, SSL certificates, and security features, supported by a partner program and a global user base. The website reflects a mature business with 20 years of market presence and millions of websites supported worldwide. Technically, the site uses modern web technologies including JavaScript modules, CSS, and integrates analytics and consent management tools, providing a fast, mobile-optimized, and accessible user experience. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and a published security policy. The absence of WHOIS data for the domain is a notable risk factor, potentially indicating domain registration issues or privacy blocking, which detracts from overall trustworthiness. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and verifying domain registration legitimacy to improve business credibility and security posture.

F

Futura DDB

futuraddb.com

56

Futura DDB is a well-established integrated advertising agency based in Slovenia, offering a comprehensive suite of marketing services that blend digital and traditional approaches. Their market position is strong, supported by a notable client portfolio including major brands such as McDonald's Slovenija and Merkur, and multiple industry awards like the Agency of the Year title awarded 14 times. Their key services include branding, digital product development, communications, gaming and e-sport marketing, and media planning. The website reflects a professional and modern digital presence with excellent design quality and user experience, optimized for mobile devices and enriched with multimedia content.

F

Framasoft

framaprout.org

56

Framaprout.org is a niche, playful web project operated by the French non-profit organization Framasoft, known for promoting free software and digital commons. The site offers an interactive 'Prout-o-mètre' application with humorous content and browser extensions to engage users in a lighthearted manner. The project targets a general audience interested in digital culture and community-driven initiatives. Technically, the site uses modern frontend technologies including Vue.js and Bootstrap, hosted by OVH sas, with good mobile optimization and privacy-respecting analytics. Security posture is adequate with HTTPS enforced and domain protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partial, with privacy and terms policies available on the parent site but no cookie consent mechanism on this site. Overall, the site is trustworthy, professionally presented, and aligned with Framasoft's mission.

K

Kadence WP

kadencewp.com

60

Kadence WP is a technology company specializing in the development and distribution of professional WordPress themes and plugins. Their offerings include both free and premium products designed to help creators and businesses build effective and visually appealing websites. The company maintains a strong market position within the WordPress ecosystem, supported by a professional website, active social media presence, and comprehensive SEO strategies. Technically, the website is built on WordPress using the Kadence Theme and Kadence Blocks, enhanced by performance optimization plugins such as Flying Press and SEO tools like Rank Math. The site demonstrates excellent mobile optimization, fast loading times, and good accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a publicly visible security policy or incident response information, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, although the website content and branding are consistent and professional. Overall, Kadence WP presents a trustworthy and well-maintained online presence with minor areas for improvement in transparency and security documentation. Strategic enhancements in these areas would further solidify their credibility and security posture.

F

Framasoft

framagames.org

54

Framagames is a small, community-driven platform operated by the non-profit organization Framasoft, offering free and open source games playable online or offline. The website targets a general audience interested in free software and gaming, positioning itself as a niche player within the open source gaming community. The platform provides downloadable games and online play options, supported by community engagement and guides hosted on the parent Framasoft domain. Technically, the site is built using modern web technologies including Vue.js and Font Awesome, hosted by Gandi SAS. The website is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance. The domain is well maintained with HTTPS and clientTransferProhibited status, but lacks DNSSEC and security headers which could enhance security posture. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response information, and cookie consent mechanisms. Tracking is minimal and privacy policies are hosted on the parent domain, indicating reasonable privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, Framagames presents a trustworthy, well-maintained platform with a strong community focus. Strategic improvements in security headers, cookie consent, and public security policies would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its non-profit, open source mission.

F

Framasoft

framagroupes.org

63

Framasoft is a French non-profit association founded in 2004, dedicated to popular education on digital challenges and the cultural commons. The Framagroupes service provides a free, ethical platform for creating and managing email discussion groups, emphasizing user privacy, data autonomy, and community moderation. The organization is funded primarily by donations and operates with transparency and a strong ethical stance against surveillance capitalism. Technically, the website uses modern web technologies including Vue.js and the Sympa mailing list software, hosted by Gandi SAS. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy, safe, and aligned with its mission of digital emancipation.

F

Framasoft

framalistes.org

63

Framasoft is a French non-profit organization providing ethical digital services, including Framalistes, a free mailing list platform focused on privacy and user autonomy. The organization is well-established with a domain age consistent with its founding and operates transparently with donation-based funding. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, it uses modern frameworks like Vue.js and the Sympa mailing list software, hosted by a reputable registrar, Gandi SAS. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and explicit security policies could be improved. Privacy compliance is strong with minimal tracking and clear terms of use. Overall, the site is trustworthy and serves a niche audience seeking ethical alternatives to commercial mailing list services.

A

Aquilenet

aquilenet.fr

59

Aquilenet is a small, non-profit associative Internet Service Provider based in the Aquitaine region of France. It focuses on providing open, neutral, and privacy-respecting Internet access to its members, leveraging open-source tools and community-driven values. The organization is registered with ARCEP and is a founding member of the Fédération FDN, reinforcing its credibility and commitment to ethical Internet services. The website serves as an information portal and access point to various member services including webmail, cloud storage, VPN, and more. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jCarousel for UI elements. It employs Piwik/Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized with a clear navigation structure, though accessibility features could be improved. No major CMS or hosting provider details are evident from the HTML content. From a security perspective, the site uses HTTPS URLs and does not expose sensitive data or vulnerable scripts. However, it lacks visible security headers and formal policies such as privacy or cookie policies, which are important for compliance and user trust. No forms collecting sensitive data are present on the homepage, reducing immediate risk. WHOIS data is unavailable, likely due to privacy protection or AFNIC policies, but the site content and affiliations suggest legitimacy. Overall, Aquilenet presents a trustworthy and community-focused ISP with a solid technical foundation but could enhance its compliance posture by publishing clear privacy and cookie policies and improving security headers. The risk level is low, but transparency improvements would benefit user trust and regulatory compliance.

LUDdesign is a small Czech Republic-based business specializing in website creation and graphic design services, primarily serving clients in and around Trutnov. The website is minimalistic and currently under construction, providing basic contact information for two business owners along with their registration and banking details. The business model is service-based, charging hourly rates for design work. The domain has been registered since 2012, consistent with the business's stated history. Technically, the website is simple, built with basic HTML and CSS, hosted likely by Wedos, a Czech hosting provider. There is no evidence of advanced frameworks, CMS, or analytics tools. Mobile optimization and SEO are basic, and no security headers or HTTPS status could be confirmed from the data provided. From a security perspective, the site lacks critical elements such as a privacy policy, cookie consent, security headers, and incident response contacts. No forms or scripts were detected, reducing attack surface but also indicating limited functionality. The domain registration data aligns well with the website content, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is low complexity and low risk but would benefit from implementing HTTPS, security headers, privacy and cookie policies, and improved technical and content quality to enhance trust and compliance.

F

Fastpic

fastpic.org

47

Fastpic.org is a Russian-language free image hosting service established in 2016, offering users the ability to upload and share images, screenshots, and posters primarily for forums and online communities. The service provides multiple upload options including from local computer and via URL, with image resizing and optimization features. The business model relies on advertising revenue, with AdsKeeper ad network integrated and tracking pixels for analytics. The website targets a general audience seeking free and fast image hosting solutions, with a small-scale operation and moderate market presence in the niche image hosting sector. Technically, the site uses a traditional web stack with jQuery and FingerprintJS for user fingerprinting, hosted under a domain registered with Internet Domain Service BS Corp. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or modern frameworks are detected. Security practices are basic, with HTTPS implied but no DNSSEC or security headers observed. The upload form lacks CAPTCHA or bot mitigation, posing potential abuse risks. Security posture is moderate with room for improvement, especially in privacy compliance where no privacy or cookie policies are published, and no consent mechanisms are implemented. Contact information is limited to an email address for abuse and advertising inquiries. The domain WHOIS data is consistent and supports legitimacy, with no privacy protection or suspicious patterns. No WAF or blocking mechanisms are detected, allowing full content access. Overall, Fastpic.org is a functional but basic free image hosting service with moderate trustworthiness and security posture. Strategic improvements in privacy compliance, security headers, and abuse prevention would enhance its risk profile and user trust.

ISOPLUS is a European manufacturer specializing in pre-insulated piping systems that support the energy transition across Europe. The company serves sectors including district heating and cooling, bioenergy, agriculture, solar heating, industry, and carbon capture and storage (CCS). With a presence in over 30 countries and multiple production sites, ISOPLUS offers a comprehensive product portfolio and extensive service support, positioning itself as a key player in sustainable energy infrastructure. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Bootstrap, Google Analytics, and Google Tag Manager. The site is well-optimized for mobile devices, features clear navigation, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, explicit security headers are not detected in the HTML, and no public security or incident response policies are published. The WHOIS data is unavailable due to privacy protection, which is justified for a business of this scale. No critical vulnerabilities or exposed sensitive data were found in the site content. Overall, ISOPLUS presents a professional and trustworthy online presence with strong business credibility and compliance posture. Strategic improvements in security header implementation and transparency around security policies could further enhance trust and security maturity.

S

starstrinec

starstrinec.cz

55

The website 'starstrinec' is a small business or organization site primarily in the Czech language, built using the Wix.com Website Builder platform. The site lacks detailed business descriptions, contact information, and privacy or cookie policies, which limits its transparency and trustworthiness. Technically, the site uses standard Wix technologies and scripts, with moderate performance and good mobile optimization. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and registration transparency. Security posture is basic, with no advanced security headers or policies detected, and privacy compliance is minimal due to missing policies. Overall, the site appears functional but lacks critical trust and compliance elements.

O

Obec Čeladná

celadna.cz

52

Obec Čeladná is the official municipal website for the village of Čeladná located in the Moravian-Silesian region of the Czech Republic. The site serves local residents and tourists by providing information about the municipality, local news, public notices, tourism opportunities including golf, spa, and hiking, and interactive virtual tours. The website positions itself as a modern, community-focused portal with a strong emphasis on regional tourism and public service. The domain has been registered since 2000, reflecting a stable and established online presence. Technically, the website employs modern web technologies including Bootstrap for responsive design, deferred JavaScript loading for performance, and Firebase Messaging integrated with Notifee for push notifications. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Hosting appears to be managed by a Czech provider (web4u.cz), consistent with the domain's nameservers. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, explicit security headers are not detected, and no cookie consent mechanism is present despite GDPR compliance documentation. No vulnerability disclosure or incident response contacts are provided. The WHOIS data is consistent and supports the legitimacy of the domain and its municipal purpose. Overall, the website is professional, trustworthy, and well-suited for its audience. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance standing.

V

VAVRYS CZ s.r.o.

vavrys.cz

48

VAVRYS CZ s.r.o. operates the website www.vavrys.cz as an authorized distributor of high-quality sports and outdoor apparel and equipment. Established in 1991, the company targets both retail customers and business partners, offering a range of exclusive brands through their e-commerce platform and B2B portal. The website reflects a professional retail business with a focus on sportswear and outdoor gear in the Czech and Slovak markets. Technically, the website employs modern web technologies including HTTPS, Google Analytics, and Azure CDN hosting. The site is mobile-optimized with good navigation and content quality. Cookie consent mechanisms are implemented with granular user controls, demonstrating attention to privacy compliance, although a formal privacy policy page is missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, the absence of security headers and lack of published security policies or vulnerability disclosure mechanisms indicate room for improvement. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the website presents a solid business presence with moderate technical maturity and a good security baseline. Strategic improvements in privacy documentation, security headers, and domain registration transparency would enhance trust and compliance.

D

D&AD

dandad.org

72

D&AD is a well-established non-profit organization dedicated to stimulating, enabling, and celebrating creative excellence in design and commercial creativity. The website serves as a comprehensive platform for their awards programs, educational courses, creative community engagement, and industry insights. The organization targets creative professionals, agencies, and students globally, positioning itself as a leader in the creative media sector. Technically, the website employs modern web technologies including JavaScript modules, CSS, and integrates marketing and analytics platforms such as HubSpot and Google Analytics. The site is mobile-optimized and provides a professional user experience with clear navigation and rich multimedia content. Security-wise, the website enforces HTTPS, uses cookie consent mechanisms, and loads scripts from reputable sources, indicating a good security posture. However, the absence of explicit privacy policy and contact information for security or incident response are areas for improvement. Overall, the website is trustworthy and professionally maintained, with privacy protection applied to WHOIS data, which is typical for organizations of this nature.

A

Alumont Holding a.s.

alumont.cz

43

Alumont Holding a.s. is a Czech-based company specializing in construction openings fillings, metal and wood manufacturing, construction services, and vehicle rental with hydraulic arms. The company targets B2B clients in the construction and manufacturing sectors within the Czech Republic. The website is built on WordPress and demonstrates a moderate level of digital maturity with a professional design and good mobile optimization. However, the technical infrastructure lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data and privacy policies reduces the overall trustworthiness and compliance posture. Strategic improvements in security practices, privacy policy implementation, and transparent contact information are recommended to enhance credibility and regulatory compliance.

A

AREON s.r.o.

areon-development.cz

66

AREON s.r.o. is a Czech real estate development company specializing in residential property sales and development, operating since 1993 and part of the ALUMONT HOLDING a.s. group since 2017. The company focuses on leveraging synergies within the group to deliver residential projects primarily in Ostrava and surrounding areas. The website reflects a professional and modern digital presence with clear branding and comprehensive project information. Technically, the site uses modern web technologies including Svelte framework, ES modules, and optimized image formats, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information could enhance trust. Overall, the domain WHOIS data is not publicly available, which is typical for Czech domains, but the website content and business information support legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure mechanisms, and providing direct contact details for improved transparency.

T

Twisto

twisto.fr

61

Twisto is the primary public transportation provider for the Caen la mer urban community in France, offering bus and tramway services along with real-time traffic updates, route planning, and ticketing solutions. The website is professionally designed using Drupal 10, featuring a mobile-optimized interface and integrated journey planner widgets. It maintains a strong social media presence and provides comprehensive traffic alerts to its users. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is not publicly available, indicating privacy protection, which is justified for this type of public service entity. Overall, the website is trustworthy, user-friendly, and compliant with privacy regulations.

O

Obec Lhota u Vsetína

lhotauvsetina.cz

46

The website lhotauvsetina.cz serves as the official online presence for the municipality of Lhota u Vsetína in the Czech Republic. It provides residents and visitors with local news, official announcements, event calendars, waste collection schedules, and contact information for municipal offices. The site is designed to support community engagement and transparency in local governance. The business model is that of a governmental municipal service portal, targeting local residents and stakeholders. The domain is well-established since 2007, reinforcing its legitimacy and trustworthiness. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor analytics, with a clear cookie consent mechanism in place to comply with GDPR requirements. The site is mobile-optimized and provides basic accessibility features, although there is room for improvement in security headers and SEO. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers like CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's purpose and geographic location, indicating a trustworthy domain registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a professional and trustworthy digital presence for the municipality, with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.