Security Directory

The website natural-sport.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks direct access to its content. This prevents extraction of business details, contact information, policies, or any other substantive content. The domain is registered since 2008 with REG-WEDOS and uses Cloudflare for DNS and security services. Due to the blocking, the technical infrastructure appears to leverage modern security mechanisms, but the actual website content and business model cannot be assessed. The security posture benefits from Cloudflare's protection, but the lack of accessible content limits further evaluation. Overall, the site is low in transparency and business credibility from the accessible data.

E

EVENT media s.r.o.

neonrun.cz

44

Neon Run, operated by EVENT media s.r.o., is a well-established Czech event organizer specializing in themed night running events such as the Mizuno Neon Run. The company has been active since 2014 and maintains a professional online presence with clear event information, partner listings, and registration links. Their target audience includes runners and sports enthusiasts primarily in the Czech Republic. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and a cookie consent mechanism, hosted on VAS Hosting. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is implemented, but the absence of explicit security headers and incident response policies suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR, though it lacks a visible terms of service and vulnerability disclosure policy.

S

Sunforwatt

sunforwatt.com

62

Sunforwatt is a French photovoltaic energy solutions provider specializing in serving agricultural, industrial, and tertiary sectors. Established since 2008, the company offers comprehensive services from technical and financial studies to installation, compliance, commissioning, and ongoing maintenance of photovoltaic systems. Their market position is that of an experienced niche player with a growing footprint in renewable energy projects for businesses. Technically, the website is built on Webflow with modern front-end technologies and integrates Google Tag Manager for analytics. The site is well designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and the contact form relies on a third-party service without visible advanced protections. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy in content but requires improvements in security and compliance transparency.

Sémaphore Communication is a small French communication agency based in Melle, affiliated with the cooperative SCOP Oxalis. Founded in 2009, it offers comprehensive communication services including graphic design, web projects, strategic consulting, training, and multimedia production. The agency targets local businesses, associations, and collectives seeking tailored communication solutions. The website reflects a professional and consistent brand image with clear service descriptions and team presentation. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript libraries including jQuery, GSAP, ScrollMagic, and Barba.js for animations and page transitions. It is hosted by O2Switch, a reputable French hosting provider. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. SEO optimization is minimal but present. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information. The contact form is present but commented out, limiting user interaction. The use of Crisp chat provides live communication but also introduces tracking. Overall, the security posture is moderate but could be improved with better compliance and security practices. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No WAF or blocking mechanisms are detected, and the site content is fully accessible and safe for general audiences.

A

L'Agenda du Libre

agendadulibre.org

54

L'Agenda du Libre is a community-focused platform dedicated to aggregating and promoting events related to free and libre software, arts, data, hardware, and commons. It serves a niche audience interested in open source and libre culture, providing a comprehensive calendar of events, organization listings, and news updates. The website is closely associated with the April organization and related libre initiatives, reinforcing its position within the free software community. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and Turbolinks, offering a mobile-responsive and user-friendly experience. However, there is a lack of explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with no visible security headers or incident response information, and WHOIS data is unavailable, limiting domain trust verification. Overall, the site is functional and relevant for its target audience but would benefit from enhanced security and privacy transparency.

C

CAn7

can7.fr

51

CAn7 is a French student association affiliated with INP-ENSEEIHT, specializing in providing sound and lighting services for a variety of events including school galas, concerts, and conferences. The organization has over 20 years of experience and serves primarily the student and local community event market. The website reflects a small, non-profit entity with a clear focus on event technical support. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted by OVH, a reputable provider. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. Security posture is moderate; while no critical vulnerabilities or exposed data are evident, the absence of security headers and unclear SSL status suggest room for improvement. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site is trustworthy but would benefit from enhanced security and compliance measures.

T

TVn7

tvn7.fr

47

TVn7 is a well-established student video association based at ENSEEIHT in Toulouse, France, founded in 1992. The organization provides a variety of video production services including event coverage, multi-camera live broadcasts, and promotional clips primarily targeting the academic community and local organizations. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses standard web technologies with good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but missing explicit security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the presence of partner logos, testimonials, and active social media accounts supports legitimacy. Overall, the site is safe, trustworthy, and serves its niche effectively.

A

AiVision, s.r.o.

ai-shop.cz

46

AiVision, s.r.o. operates the website www.ai-shop.cz offering advanced e-shop solutions with ERP system integrations such as Pohoda, Helios, Money, Cezar, Premier, and SAP. The company targets small to medium-sized businesses seeking customizable e-commerce platforms with B2B and B2C capabilities. With over 20 years of experience and more than 1100 satisfied clients, AiVision positions itself as a reliable technology provider in the Czech Republic's e-commerce sector. The website showcases a modern, responsive design with comprehensive content, client references, and integration options, reflecting a mature digital presence. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring good performance and security basics. However, explicit security headers and incident response policies are not published, indicating areas for improvement. The site is GDPR compliant with a clear privacy and cookie policy, and contact information is readily available. WHOIS data is missing or privacy protected, which slightly reduces trustworthiness but does not negate the evident business legitimacy. Overall, the website demonstrates a strong business and technical foundation with moderate security posture and good privacy compliance.

W

Windcoop SCIC SA

wind.coop

52

Windcoop SCIC SA is a French maritime cooperative based in Lorient specializing in low-carbon cargo transport using sail-powered container ships. The company operates an innovative business model focused on sustainability and cooperative ownership, targeting individuals, businesses, and communities interested in ethical and ecological maritime transport. Their flagship project is a 90-meter sail cargo ship designed to reduce CO2 emissions by 60% compared to conventional vessels, with operations planned between Marseille and Madagascar starting in 2027. The website reflects a professional and modern digital presence built on WordPress, featuring comprehensive content, multimedia, and clear calls to action for investment and membership. Technical infrastructure includes Matomo analytics and Google Tag Manager, with a strong emphasis on privacy and cookie consent compliance. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and explicit security policies are recommended. Overall, Windcoop presents a credible, transparent, and innovative player in the sustainable transportation sector.

N

NEONUS, s.r.o.

neonus.sk

69

NEONUS, s.r.o. is a Slovak digital agency specializing in custom web development, e-commerce, B2B online shops, design, and data synchronization services. The company targets businesses seeking tailored digital solutions and technical support for their online presence. With over 15 years of experience and more than 500 projects completed, NEONUS holds a solid regional market position. The website reflects a professional and consistent brand image with comprehensive service offerings and client references. Technically, the website employs modern web technologies including GSAP for animations, Google Tag Manager and Analytics for tracking, and Tawk.to for live chat support. The site is built likely on WordPress with WooCommerce integration, optimized for mobile devices, and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in accessibility and loading speed. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and secures user data collection via forms with CAPTCHA. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure information. Security headers are not explicitly detected, suggesting potential areas for enhancement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The risk profile is low, but strategic improvements in security transparency and technical optimizations are recommended to further strengthen the security posture and user trust.

H

Hudební agentura Arte per tutti

artepertutti.cz

59

Hudební agentura Arte per tutti is a small Czech music agency specializing in live music performances for weddings, concerts, corporate events, and other celebrations. Founded in 2017 by Jitka Břízová, who also acts as manager and violinist, the agency emphasizes quality, originality, and personalized service. Their offerings include tailored musical ensembles and guaranteed substitutes for musicians in case of illness. The website presents a professional image with testimonials and clear contact information, targeting clients seeking live music experiences in the Czech Republic. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and uses Amazon Cloudfront CDN for content delivery. It integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and features a cookie consent mechanism, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site uses HTTPS with a good SSL configuration but does not implement common security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data and privacy policy reduces trustworthiness. There is no visible incident response or vulnerability disclosure information. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and compliance.

B

BussinesMC

ulicenarodni.cz

45

The website www.ulicenarodni.cz serves as a local informational portal focused on the Národní street area in Prague 1, providing visitors and locals with details about hotels, restaurants, bars, cultural venues, theaters, and clubs. The site targets tourists and residents interested in cultural and hospitality services, positioning itself as a niche guide for this specific locality. The business model appears to be promotional and informational, likely monetized through partnerships and advertising. The site is operated by BussinesMC, a small entity with no publicly disclosed parent or subsidiaries. Technically, the website employs a traditional web stack with HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supplemented by third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with GDPR-aligned cookie consent and a basic privacy policy. Overall, the website is trustworthy and professionally maintained, though it could benefit from enhanced security practices and more transparent business contact information.

T

TAZ Verlags- und Vertriebs GmbH

taz.de

66

TAZ Verlags- und Vertriebs GmbH operates taz.de, a well-established German left-leaning independent news media website founded in 1992. The site offers critical journalism including analyses, commentaries, interviews, and reportages, targeting a general audience interested in progressive news. The business model combines subscription services and advertising revenue, supported by a cooperative structure. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks like Alpine.js, Cash DOM, and uses Google Publisher Tag for advertising and Matomo for analytics. Mobile optimization and accessibility are well implemented, providing a good user experience. Security posture is strong with HTTPS enforced and consent mechanisms for cookies, though explicit security headers could be confirmed. Privacy compliance is robust with clear privacy and cookie policies in German, aligned with GDPR requirements. WHOIS data is consistent with the business claims, showing legitimate domain registration and hosting in Berlin. Overall, the site is professional, trustworthy, and secure, with no critical vulnerabilities detected.

G

German U15 e.V.

german-u15.de

53

German U15 e.V. is a non-profit association representing fifteen leading research-intensive universities in Germany. The organization focuses on promoting excellent research, innovative teaching, and international cooperation among its member institutions. The website serves as an information hub for policy statements, publications, events, and news related to higher education and research in Germany. The association holds a significant position in the German academic landscape, advocating for science policy and fostering collaboration. Technically, the website is built on the Infopark CMS Fiona platform using Ruby on Rails, with a modern tech stack including HTML5, CSS3, JavaScript, and jQuery. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. Hosting appears to be managed through German academic networks, ensuring reliability and alignment with the organization's profile. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a baseline security posture. However, it lacks several recommended security headers and does not provide explicit vulnerability disclosure or incident response contacts. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent mechanism is a notable gap. Contact information is primarily available via contact forms rather than direct emails or phone numbers. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and providing clearer contact channels for security incidents to strengthen trust and compliance.

F

Fashion Models

fashion-models.cz

44

Fashion Models is a Czech Republic-based modeling agency website that showcases a variety of models, photographers, and fashion designers. The site offers services including model representation, portfolio creation, event organization, and photo editing. It targets models, fashion professionals, and clients seeking modeling services within the Czech market. The website is professionally designed with good content quality and consistent branding, supported by social media presence and partnerships with industry-related entities. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with mobile optimization and moderate performance. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some security headers and explicit privacy policy documentation. The domain WHOIS data is unavailable, which reduces transparency and trustworthiness assessment. Overall, the website is safe, professional, and functional, but could improve in privacy compliance and security best practices.

A

Atmo-Auvergne-Rhône-Alpes

captotheque.fr

53

La Captothèque is a regional public service platform operated by Atmo-Auvergne-Rhône-Alpes, focused on enabling citizens to measure and understand air quality in their territories. The website offers sensor loans and data visualization tools to engage the community in environmental monitoring. The platform is supported and financed by the Auvergne-Rhône-Alpes regional government, positioning it as a niche but trusted service in the energy/environment sector. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Flickity, hosted by OVH, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and formal privacy or security policies. The WHOIS data confirms domain legitimacy and consistency with the business age and claims. Overall, the site is professional, trustworthy, and serves a clear public interest mission.

Y

Your Mailing List Provider

ymlp.com

60

Your Mailing List Provider (YMLP) operates a web-based email marketing software platform offering tools for creating, sending, and tracking email newsletters. The company targets businesses and individuals seeking easy-to-use email marketing solutions, with a freemium model and paid subscription plans. The website highlights a long operational history of 23 years and a user base exceeding 500,000 across more than 100 countries, positioning itself as an established player in the email marketing SaaS market. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts integration. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and modern frameworks. No CMS or hosting provider information is discernible from the content. SEO and navigation are basic but functional. From a security perspective, the website mentions GDPR compliance but lacks visible security headers and explicit HTTPS confirmation in the provided data. No incident response or vulnerability disclosure policies are found. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance of the site. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site presents a professional business offering with moderate technical maturity and basic privacy compliance. However, the lack of domain registration data and security best practices reduces trust and security posture. Strategic improvements in domain registration transparency, HTTPS implementation, security headers, and privacy mechanisms are recommended to enhance credibility and compliance.

The Syndicat ELE website represents a professional association for local energy companies in France, focusing on industry representation and advocacy. The site content is relevant and targeted towards energy sector professionals, with a clear business focus. Technically, the website uses standard web technologies and some modern fonts and libraries, but lacks advanced SEO, accessibility, and security features. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy and trustworthiness. Security posture is basic, with no evident security headers or privacy policies, which could expose the organization to compliance risks. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain transparency to enhance trust and regulatory adherence.

J

Journées du Logiciel Libre

jdll.org

55

Journées du Logiciel Libre (JdLL) is a well-established non-profit event focused on free software and open source culture, primarily serving the French-speaking community in Lyon, France. The website provides information about the event, its history, and ways to participate or support the initiative. The organization has a mature online presence with a domain registered since 2005 and a consistent branding approach. Technically, the site is built on GravCMS, a modern flat-file CMS, hosted on Infomaniak servers, and is mobile-optimized with good SEO practices. However, it lacks advanced security headers and DNSSEC, which could enhance its security posture. The site does not currently provide privacy or cookie policies, which is a compliance gap, especially under GDPR regulations. No direct contact emails or phone numbers are provided, but social media presence on Mastodon and Peertube supports community engagement. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

ClubDomCash.com is a niche adult entertainment website specializing in FemDom video content, operated by a female lifestyle Dominatrix. The business model centers around producing exclusive adult videos and affiliate marketing programs targeting a mature adult audience interested in FemDom themes. The website has been operational since 2006, indicating a stable market presence within its niche. Technically, the site uses legacy JavaScript libraries and basic web technologies with moderate mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks modern security headers and DNSSEC, and uses outdated libraries that could pose risks. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

H

Haploïde

haploide.com

51

Haploïde is a French technology company specializing in the design and optimization of eco-friendly, accessible, and performant websites. Founded in 2018, the company positions itself as a niche player focused on sustainable digital solutions, leveraging scientific rigor and partnerships such as with DK and adherence to ADEME and GHG Protocol standards. Their key services include optimization of existing sites, eco-designed redesigns, and new site conception with a strong emphasis on reducing carbon emissions and improving digital performance. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, integrates Matomo analytics configured for privacy, and is hosted by OVH sas. The site is fast, mobile-optimized, and accessible, following RGAA v4 guidelines. Security posture is good with HTTPS enforced and domain registration protections in place, though some security headers and explicit policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is currently present. Overall, Haploïde demonstrates a mature digital presence with a strong focus on sustainability and compliance. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. No critical security issues or content safety concerns were identified, making the site reliable and professional. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, enabling DNSSEC, and implementing cookie consent mechanisms if cookies are used in the future.

A

Altermedia, s.r.o.

altermedia.cz

59

Altermedia, s.r.o. is a small digital agency based in Prague, Czech Republic, with over 20 years of experience. The company specializes in web design, custom software development, social media management, SEO, PPC, and multimedia content production. Their client base includes individuals and small to medium-sized businesses, positioning them as a trusted service provider in the local digital marketing and web development sector. The website reflects a professional and consistent brand image with clear service offerings and partner references. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Typed.js and Glide.js, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. HTTPS is enforced, ensuring secure communication, but the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data and missing privacy and cookie policies reduce trust and compliance scores. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture and user trust. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and domain registration transparency would elevate the site's security and credibility further.

France 24 is a prominent international news broadcaster providing breaking news, top stories, and video news coverage across multiple global regions including the US, Europe, Asia Pacific, Africa, and the Middle East. The website serves a general audience interested in global current events, business, sports, and culture. It maintains a strong market position as a reputable media outlet with consistent branding and official social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with a consent management platform integrated for privacy compliance. The site is well-optimized for mobile devices, offers excellent SEO, and provides a professional user experience with clear navigation and rich content. From a security perspective, the site enforces HTTPS and uses a consent SDK for cookie management, indicating good privacy practices. However, there is room for improvement by adding security headers and publishing a security.txt file to enhance vulnerability disclosure transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, France 24's website demonstrates a high level of professionalism, security, and compliance suitable for a major international news organization. The absence of WHOIS data is likely due to privacy protection or registry limitations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, improving incident response visibility, and maintaining strong privacy compliance.

D

Divadlo DISK

divadlodisk.cz

63

Divadlo DISK is a well-established theatre institution based in Prague, Czech Republic, with a history dating back to 1945. It offers theatrical performances, cultural events, and collaborates with academic and research institutions. The website reflects a professional cultural organization with clear contact information, active social media presence, and a focus on audience engagement through newsletters and event promotions. Technically, the site uses modern web technologies including JavaScript libraries like jQuery and Fancybox, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place, though it lacks a published privacy policy and terms of service, which are important for compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and formal security policies. Overall, the website is trustworthy and serves its audience effectively, but should address compliance gaps to enhance privacy and security transparency.

RFI (Radio France Internationale) is an established international news broadcaster providing comprehensive news coverage from France, Europe, Africa, and worldwide. The website offers political, cultural, sporting news, and live streaming services targeting a general audience. The brand is well recognized with consistent branding and multiple official social media presences. Technically, the website employs modern web standards, including responsive design, consent management via Didomi, and robust SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, though WHOIS data is privacy protected, which is typical for media entities. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection roles.

F

Ferrero Hazelnut Company

ferrerohazelnutcompany.com

69

Ferrero Hazelnut Company is a division of the Ferrero Group focused on the entire hazelnut value chain, from cultivation to processing, emphasizing sustainability and quality. The company operates globally with agribusiness development programs and a commitment to responsible sourcing. The website reflects a professional corporate presence with detailed information about their mission, programs, and sustainability efforts. Technically, the site is built on Drupal CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and privacy compliance could be improved. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the apparent legitimacy given the strong brand association. Overall, the site is trustworthy, professional, and well-maintained, serving as an effective corporate communication platform.

S

Stereotaxis

stereotaxis.com

65

Stereotaxis is a medical technology company specializing in pioneering endovascular robotics to advance interventional medicine and improve patient care. The company targets healthcare professionals, patients, caregivers, and investors, positioning itself as an innovator in robotic systems for vascular procedures. The website reflects a professional and consistent brand presence with multimedia content and active social media engagement. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and Google Analytics, delivering a moderate performance and good mobile optimization. However, the absence of visible security headers and privacy policies indicates gaps in security and compliance maturity. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer privacy disclosures.

S

Stanford Health Care

stanfordhealthcare.org

63

Stanford Health Care is a leading academic medical center and healthcare provider based in the United States, delivering comprehensive medical services including cancer treatment, heart disease care, brain disorder treatment, primary and specialty care, and clinical trials. The website reflects a mature digital presence with a focus on patient engagement through services like the MyHealth portal and video visits. The organization maintains a strong market position in the Bay Area healthcare sector with consistent branding and professional content. Technically, the website is built on Adobe Experience Manager and hosted on Amazon AWS infrastructure, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, Adobe Launch, and Qualtrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no visible vulnerability disclosure or security policy page, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security hardening and transparency. The risk profile is low, and the site effectively supports the business objectives of Stanford Health Care.

H

Hochschule für Technik und Wirtschaft Berlin

htw-berlin.de

63

HTW Berlin is a prominent University of Applied Sciences located in Germany, offering a wide range of Bachelor, Master, and MBA programs across multiple disciplines including engineering, business, design, and health. The institution is well-ranked nationally and provides extensive research and continuing education services. The website reflects a mature digital presence with clear navigation, multilingual support, and active engagement with its target audiences such as prospective students, current students, alumni, and industry partners. Technically, the site uses modern web standards, integrates Matomo analytics with user consent, and maintains good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Boursorama

boursorama.com

69

Boursorama is a prominent French online bank and financial information provider, offering a wide range of services including online banking, stock market data, and financial news. The website presents a professional and well-structured interface targeting investors and banking customers primarily in France. Technically, the site uses modern web standards with good mobile optimization and SEO practices, although explicit CMS or hosting details are not evident. Security posture is moderate due to lack of visible security headers and missing WHOIS data, which raises some concerns about domain registration transparency. Privacy compliance appears weak as no privacy or cookie policies were detected in the provided content. Overall, the site is functional and trustworthy from a business perspective but would benefit from enhanced transparency and security measures.

S

STORMWARE s.r.o.

fakturace-zdarma.cz

55

STORMWARE s.r.o. operates the website fakturace-zdarma.cz, offering free invoicing solutions through their POHODA Start accounting software and mPOHODA mobile invoicing app. The company targets small businesses and freelancers primarily in the Czech Republic, providing both offline and online invoicing capabilities with integration between desktop and mobile platforms. The website is professionally designed, with clear navigation and relevant content focused on their software offerings. Technically, the site uses standard web technologies including JavaScript, jQuery, and Google Tag Manager, with a cookie consent mechanism that supports GDPR compliance. Security posture is moderate, with no explicit security headers detected and use of an outdated jQuery version, but no critical vulnerabilities are evident from the content. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but the website content and company information suggest a legitimate business presence.

M

MPOHODA

mpohoda.sk

63

mPohoda is a well-established Slovak company providing comprehensive accounting and economic software solutions tailored for small and medium-sized enterprises. The website reflects a professional and consistent brand image, targeting SMEs primarily in Slovakia. Their key services include accounting, payroll, invoicing, and business analytics, positioning them as a leading software provider in their regional market. The technical infrastructure is modern, leveraging Tailwind CSS and JavaScript, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contact could enhance trust further. Overall, the website is compliant with GDPR and cookie regulations, providing clear privacy and cookie policies. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Státní fond audiovize is the official Czech government fund dedicated to supporting audiovisual projects including film, television, animation, and video games. The website serves as a portal for funding calls, official meeting minutes, and important documents related to the audiovisual sector in the Czech Republic. It targets audiovisual professionals and stakeholders seeking government support and information. The domain is well-established since 2012 and hosted on Czech servers, reinforcing its legitimacy. Technically, the website uses standard HTML5, CSS3, and JavaScript with a clean and professional design. It is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking technologies, reflecting a minimalistic and privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms collecting personal information. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is trustworthy and professional but could benefit from enhanced privacy compliance and security best practices. There are no signs of malicious content or adult material, making it safe for general audiences.

S

Stellar Media & Consulting

stellaliberty.com

58

Stella Liberty operates as a niche adult service provider specializing in dominatrix and fetish services in the Portland, OR and Vancouver, WA areas. The business offers specialized services including rope bondage, corporal punishment, foot fetish, roleplay, and submissive training, targeting an adult-only audience. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence suggests a legitimate business. Overall, the site requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and reduce risk.

F

Femdom Empire

femdomempire.com

9

Femdom Empire is a niche adult entertainment website specializing in femdom fetish videos. Established in 2011, it operates a subscription-based business model offering weekly updates and access to exclusive video content. The site targets an adult audience interested in hardcore dominatrix and fetish video content. Technically, the website uses a custom CMS with a variety of JavaScript libraries including jQuery, Fancybox, and Flexslider to provide a multimedia-rich user experience. Hosting is provided by MojoHost, and the domain is registered with GoDaddy, reflecting a stable and consistent digital infrastructure. Security posture is moderate with HTTPS usage and age verification mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no explicit cookie policy. Overall, the site is professionally designed with good navigation and content relevance but could improve in security and privacy transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and improving privacy and cookie consent mechanisms.

G

GE-Data

ge-data.com

55

GE-Data is a specialized consulting firm focusing on geospatial technologies applied to agriculture, forestry, and water management. With offices in the United States and France, the company leverages over 30 years of expertise in remote sensing, GIS, and data science to deliver tailored, cost-effective solutions. Their services include land-use mapping, crop monitoring, production estimation, and disease detection, targeting both public and private sector clients. The website reflects a professional and consistent brand image with clear business messaging and client engagement features. Technically, the website is built using One.com Web Editor, incorporating modern JavaScript libraries such as Swiper.js for image sliders and Termly for cookie consent management. The site is hosted by One.com A/S and uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and mobile optimization. Analytics are implemented via SiteWit, with moderate user tracking and basic privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies, incident response information, and vulnerability disclosure details. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, GE-Data presents a trustworthy and professional online presence with a solid foundation in technical and business aspects. Strategic enhancements in security policies, contact transparency, and mobile accessibility would further strengthen their digital maturity and compliance posture.

O

Oasis21

oasis21.org

48

Oasis21 is a small community-oriented social economy shared space located in Paris, France, founded around 2018. The website serves primarily as an informational and reservation portal for the space, targeting local community members and organizations interested in social and solidarity economy initiatives. The business model revolves around providing a physical venue for events and activities aligned with social economy values. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH sas, and includes minimal external dependencies. There is no evidence of advanced CMS or frameworks, and performance and mobile optimization are basic. Security posture is limited, with no visible security headers or privacy policies, and DNSSEC is not enabled. The domain registration is consistent with the business timeline and shows standard protections against unauthorized transfers or deletions. Overall, the site is functional but lacks advanced security and privacy features, which could be improved to enhance trust and compliance.

E

E2L - Ecole du Logiciel Libre

e2li.org

59

E2L - Ecole du Logiciel Libre is a French non-profit association dedicated to educating the public about free software through courses, conferences, and community events. Founded in 2015, it operates primarily in Ivry-sur-Seine and offers a range of educational activities including install parties, publications, and online resources. The organization targets individuals interested in free software, from beginners to IT professionals, emphasizing community involvement and open knowledge sharing. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Leaflet for maps, hosted via Gandi SAS. While the site is content-rich and professionally presented, it lacks formal privacy and cookie policies and does not show advanced security headers or DNSSEC, indicating room for improvement in security and compliance. Contact information is clearly provided, enhancing trust and credibility.

F

FFmpeg Project

ffmpeg.org

10

FFmpeg is a well-established open-source multimedia software project founded in 2002, providing a comprehensive cross-platform solution for recording, converting, and streaming audio and video. It holds a leading position in the multimedia technology sector, supported by a strong developer community and regular major releases. The website reflects a mature project with detailed documentation, changelogs, and community engagement channels, targeting developers, multimedia professionals, and system integrators worldwide. The business model is donation and sponsorship-based, with no commercial advertising evident on the site. Technically, the website is built on a modern, lightweight stack using Bootstrap, Font Awesome, and jQuery, hosted by a reputable data center (Telepoint). The site is fast, mobile-optimized, and accessible, though accessibility features are basic. SEO practices are good, with proper meta tags and structured navigation. No CMS is detected, indicating a custom or static site approach. From a security perspective, the domain is long-standing and registered with a reputable registrar, with domain status flags enhancing security. However, DNSSEC is not enabled, and no explicit security headers or security.txt file are detected, representing areas for improvement. The project maintains a dedicated security page and issues regular security updates, demonstrating a proactive security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific compliance indicators. Overall, FFmpeg.org is a trustworthy, professional, and content-rich website representing a critical open-source multimedia project. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security.txt file, and adding cookie consent mechanisms to enhance privacy compliance and security posture.

N

Nadace Preciosa

nadacepreciosa.cz

51

Nadace Preciosa is a well-established non-profit foundation affiliated with the Preciosa company, focusing on charitable activities primarily in the Liberec region of the Czech Republic. The foundation supports social, cultural, educational, health, and sports initiatives and has donated over 250 million CZK in its 27 years of operation. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at donors, volunteers, and beneficiaries. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit security policies are published. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness, but external media references and the association with Preciosa company support legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving its non-profit mission effectively.

R

Roman Kunert - Váš Digitální Stratég

romankunert.com

50

Roman Kunert operates a professional digital services business focused on website and e-shop development, SEO, digital marketing, and AI training. The company has a strong presence in the Czech Republic with multiple related projects and brands, positioning itself as a comprehensive digital strategist and service provider. The website is well-structured, visually consistent, and integrates modern web technologies and analytics tools. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, but the overall business presentation and multiple partner domains suggest a legitimate operation. Strategic recommendations include improving security headers, configuring third-party SDKs properly, and publishing clear privacy and security policies.

C

cropmark

everythingisfun.eu

55

The website everythingisfun.com serves as a transitional landing page announcing the rebranding of 'Everything is Fun' to 'cropmark'. The business operates as a creative agency specializing in digital and branding design, with offices in Brussels and Luxembourg. The site emphasizes continuity of the team and services under the new brand identity. Technically, the site employs modern web technologies including GSAP for animations and Vimeo for video content, delivering a visually appealing and responsive experience. However, the site lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided, which may impact user trust and regulatory compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site is professional but could improve in transparency and security best practices.

L

Les partisans du moindre effort

lpdme.org

55

Les partisans du moindre effort is a small, niche cultural platform established in 2003 that offers free downloadable PDF posters and booklets focused on graphic design, typography, and urban culture. The website serves a specialized audience including designers, typographers, and urbanists by providing educational and artistic resources without commercial intent. Technically, the site uses basic HTML, CSS, and legacy jQuery scripts, with no detected CMS or advanced frameworks. The hosting and domain registration are stable, with Gandi SAS as the registrar and a domain age consistent with the site's longevity. Security posture is limited, with no visible security headers, no DNSSEC, and unknown SSL status, indicating room for improvement. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is functional and content-rich but lacks modern security and privacy features.

The website www.artyfarty-gallery.com is currently inaccessible to normal users due to a Cloudflare Turnstile security challenge page. This challenge blocks access to the actual website content, preventing any meaningful analysis of the business, services, or detailed technical infrastructure. The domain WHOIS data is unavailable, indicating the domain may not be registered or is newly created and not propagated in the registry. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible on the page. The technical infrastructure relies on Cloudflare's security services, but no further technologies or CMS platforms are detectable. The security posture cannot be fully assessed due to the lack of accessible content, but the presence of a WAF challenge indicates some level of security protection. Overall, the website's legitimacy and business credibility are questionable due to the absence of WHOIS data and content access.

F

French Data Network

fdn.org

49

French Data Network (FDN) is a pioneering French non-profit Internet Service Provider established in 1992, recognized as the oldest ISP in France still operating. The organization operates on a volunteer basis, providing internet access services including ADSL, VDSL, FTTH, and VPNs, primarily targeting members and organizations aligned with digital rights and internet neutrality. FDN is deeply involved in advocacy and supports initiatives related to fundamental freedoms in the digital space, also playing a key role in the Fédération FDN, a federation of associative ISPs in France. Technically, the website is well-structured, mobile-optimized, and uses modern web standards with no detected security vulnerabilities or tracking technologies. The site integrates with the Fediverse via Mastodon and provides various member and public services. However, some security headers are missing, and no explicit cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with good SSL configuration and no exposed sensitive data. The absence of WHOIS data is noted but likely due to AFNIC policies or privacy protection, which is common for French domains. No vulnerability disclosure or incident response information is published, which could be improved to enhance trust. Overall, FDN presents a trustworthy, professional, and ethically driven organization with a solid digital presence. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving transparency around incident response and vulnerability disclosure.

K

Kozlovna Alfa

kozlovnaalfa.cz

46

Kozlovna Alfa is a small hospitality business located in Třebíč, Czechia, specializing in traditional Czech cuisine, quality tank beer, and accommodation services. The website presents a professional image with clear descriptions of their offerings, including food, beverages, and lodging. The business targets local residents and tourists seeking authentic Czech pub experiences. Technically, the site is built on WordPress with modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy policies, which could be improved to enhance compliance and trust. The absence of WHOIS data is a notable gap in domain legitimacy verification. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

B

BIGGEST

biggestpujcovna.cz

47

BIGGEST is a Czech Republic based company specializing in the rental of construction machinery and related accessories. With over 21 years of experience, they offer a wide range of equipment including excavators, loaders, dozers, dumpers, rollers, and more, targeting both specialists and the general public. Their business model includes rental with optional operator service and own transport capabilities, positioning them as a reliable medium-sized player in the construction equipment rental market. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Sentry for error monitoring. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. However, no CMS or hosting provider information is explicitly detected, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and business presence appear professional and trustworthy. Overall, the website presents a solid business presence with good content quality and privacy compliance, but would benefit from enhanced security practices and domain registration transparency to improve trust and reduce risk.

S

Slinger.cz

slinger.cz

46

Slinger.cz operates as a specialized retailer offering a unique multi-functional tennis bag that doubles as a ball launcher, targeting tennis players of all skill levels from beginners to professionals. The website presents a clear market position emphasizing product uniqueness, affordability, and portability. The business model centers on direct sales supported by informational resources such as FAQs, test centers, and maintenance guides. The company appears to be a small-sized entity founded in 2020, operating primarily within the Czech Republic retail sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and Nette Framework components, ensuring responsive design and moderate performance. The site integrates Google Analytics and Tag Manager for user tracking and marketing insights but lacks a visible cookie consent mechanism. Hosting is managed by a Czech registrar and hosting provider, consistent with the domain's WHOIS data. From a security perspective, the site uses HTTPS but lacks explicit security headers in the provided data, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy and terms of service present, though cookie consent and incident response information are missing. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is professional, content-rich, and trustworthy with moderate security posture. Strategic improvements in security headers, cookie consent, and incident response disclosures would enhance compliance and user trust.

N

NTC Hosting

ntchosting.com

59

NTC Hosting is an established web hosting and domain registration provider with over 21 years of experience. The company offers a range of services including domain registration, web hosting, VPS solutions, and a website builder, supported by 24/7/365 technical support. The website reflects a professional business presence targeting individuals and businesses seeking reliable hosting solutions. Technically, the site employs modern web technologies such as the Foundation framework and jQuery, with integration of Google Tag Manager for analytics. While HTTPS is enabled, the site lacks advanced security headers and DNSSEC, which could enhance its security posture. Privacy and cookie policies are not evident, indicating potential compliance gaps. Overall, the site is functional, professional, and trustworthy but would benefit from improved security and privacy disclosures.

The website deslivresencommuns.org serves as a digital archive and publishing platform for the non-profit association Framasoft, focusing on open access books under the project "Des Livres en Communs". It provides access to previous publications under the "Framabook" label and aims to progressively release new editions. The site targets French-speaking audiences interested in libre culture and digital commons. Technically, the site is built using the Hugo static site generator, styled with Bootstrap and Fork Awesome, and hosted by OVH sas. It employs Matomo analytics for user tracking, favoring privacy over commercial trackers. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.