Security Directory

R

Roomthree Design

roomthree.com

53

Roomthree Design is a Dublin-based design agency specializing in visual communications, including website development, graphic design, brand identity, and print design. Recently integrated into the Communicraft family, they leverage enhanced expertise in user experience and advanced web development. Their market position is that of a small but established agency serving clients with complex messaging needs, particularly in the public sector and corporate domains. The website showcases a professional portfolio and clear service offerings, targeting organizations seeking bespoke design solutions. Technically, the website is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and MediaElement.js. Google Analytics and Google Tag Manager are employed for user tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimizations. From a security perspective, the site uses HTTPS (assumed though not explicitly confirmed in provided data) but lacks visible security headers and published privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is available. The absence of WHOIS data reduces trust in domain legitimacy, though the website content and business information appear professional and credible. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

P

Plattformland Südtirol

plattformland.org

55

Plattformland Südtirol is a South Tyrolean alliance focused on sustainable development and networking for rural areas. Founded in 2013 and institutionalized as an association in 2017, it serves as a collaborative platform for key regional stakeholders including farmers, municipalities, and various organizations. The website presents a professional and well-structured digital presence, offering information on projects, events, and expert advisory boards. It targets stakeholders interested in rural development and intelligent land use within South Tyrol. Technically, the website is built on WordPress using the Enfold theme, enhanced with multilingual support (WPML), GDPR compliance tools (Complianz), and interactive elements like LayerSlider and embedded Vimeo videos. The site is mobile-optimized and employs modern web technologies, though some accessibility features could be improved. Performance is moderate with good SEO practices implemented. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which slightly reduces trustworthiness but the website content and contact information suggest a legitimate organization. Overall, Plattformland Südtirol demonstrates a solid digital presence with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

A

Alamode Film

bachmannfilm.com

55

Alamode Film is a specialized film distribution and production company focused on high-quality and sophisticated cinema releases, primarily serving German-speaking audiences. The company maintains a professional online presence with detailed film promotion, social media engagement, and a dedicated e-commerce platform for DVD sales. Their market position is niche but well-defined, targeting cinephiles and cultural film enthusiasts. Technically, the website is built on WordPress with modern plugins and APIs, offering a responsive and content-rich experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

D

DotAsia Organisation

dot.asia

58

DotAsia Organisation operates the .Asia top-level domain registry, serving individuals, businesses, and organizations interested in Asian internet presence. The organization emphasizes community governance, transparency, and social impact through charitable initiatives. The website is professionally designed using WordPress and Divi theme, with modern SEO and accessibility features. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is privacy protected but consistent with a legitimate registry operator. Overall, the site reflects a mature, credible, and community-focused internet registry with a solid technical foundation and good privacy compliance.

F

Film Association of South Tyrol (FAS)

fas-film.net

46

The Film Association of South Tyrol (FAS) is a professional organization representing film industry professionals in South Tyrol, Italy. It serves as a hub for filmmakers, actors, production companies, and service providers, promoting the region as a film-friendly location and supporting local film productions with international aspirations. The website is well-structured, bilingual (German and Italian), and provides clear information about the association's mission, membership, and news. The presence of partner logos and a newsletter subscription indicates active community engagement. Technically, the website is built on WordPress using WPBakery Page Builder and common JavaScript libraries such as jQuery and MediaElement.js. It employs HTTPS with a valid SSL certificate and includes a GDPR-compliant cookie consent mechanism. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers and does not provide visible security policies or incident response contacts. The WHOIS data for the domain is unavailable, which is unusual but the website content and professional presentation suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a trustworthy and professional front for the Film Association of South Tyrol, with minor improvements recommended in security headers and transparency around security policies. The missing WHOIS data warrants monitoring but does not currently indicate malicious intent.

I

Internet Society (ISOC) France

isoc.fr

43

Internet Society France is the French chapter of the global Internet Society, dedicated to protecting internet users and promoting an open, accessible, and neutral internet. The organization operates as a non-profit, engaging in advocacy, education, and community building within France and internationally. Their website reflects a professional presence with clear mission statements, event information, and membership opportunities. The organization is well-established with a domain age consistent with its founding date and maintains active social media channels for outreach. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Smart Slider 3, with integration of SEO tools like Yoast. Hosting appears to be through OVH with DNS managed via AWS, indicating a robust infrastructure. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO practices are good, with proper meta tags and structured data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. There is no visible cookie consent mechanism, which is a GDPR compliance gap. No vulnerability disclosure or security.txt files are present. Overall, the security posture is adequate but could be improved with additional best practices. The risk assessment is low given the organization's non-profit nature, clear contact information, and consistent domain registration. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and establishing a vulnerability disclosure process to enhance trust and compliance.

G

GERMAX Gerli GmbH

germax.net

50

GERMAX media is a well-established marketing and advertising agency based in Aachen, Germany, founded in 2000. The company offers a broad range of services including web design, corporate design, consulting, and campaign management, targeting businesses and public institutions. Their website reflects a professional and consistent brand image with a comprehensive portfolio and client testimonials, indicating a strong market position in the regional media sector. Technically, the site uses a variety of JavaScript libraries and plugins to deliver a responsive and visually appealing experience, though it appears to be custom-built rather than relying on a popular CMS. Security-wise, the site lacks DNSSEC and explicit security headers, and no cookie consent mechanism is implemented despite a detailed privacy policy. The domain registration is consistent with the business claims, showing a mature and legitimate online presence.

V

vaClavinek s.r.o.

imrvere.com

43

Imrvére is a small hospitality business based in Frýdlant nad Ostravicí, Czech Republic, offering restaurant dining, catering, and food delivery services. The company operates a professionally designed WordPress website using the Divi theme and WooCommerce for e-commerce capabilities. The site is well-structured with good SEO practices and mobile optimization, targeting a general audience interested in unique gastronomic experiences. Technically, the website leverages modern web technologies and integrates Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though it lacks some security headers and published security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website presents a credible and professional business presence with room for improvement in privacy compliance and security transparency.

T

tolk.ai - Generative AI powered Chatbot and Livechat solutions

tolk.ai

65

tolk.ai is a French technology company specializing in generative AI-powered chatbots and livechat solutions for customer relations. Their platform offers no-code deployment, integration with various web services, and analytics capabilities to enhance customer experience and operational efficiency. The company targets businesses seeking advanced AI automation for pre- and post-sales customer support. The website demonstrates a professional digital presence with good SEO, structured data, and moderate use of analytics and marketing tools. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is justified for this business type. Overall, tolk.ai presents as a credible and modern SaaS provider in the AI customer service space.

A

AGIR 53

agirenmayenne.fr

46

AGIR 53 operates a regional platform 'AGIR en Mayenne' dedicated to providing resources and support for businesses engaged in Corporate Social Responsibility (RSE) and sustainable transitions in the Mayenne region of France. The platform offers a variety of services including training, financing information, an annuaire (directory), events, and webinars, targeting local enterprises seeking to integrate sustainable practices. The website is co-constructed by reputable regional partners, the Chamber of Commerce and Industry (CCI) of Mayenne and Laval Économie, reinforcing its credibility and regional focus. Technically, the site is built on a modern WordPress CMS with Elementor and Yoast SEO plugins, ensuring good SEO and user experience. The site is mobile optimized and uses GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the platform presents a professional, trustworthy, and well-maintained digital presence supporting regional sustainable business initiatives.

U

UDES

udes.fr

46

UDES is a prominent French non-profit organization representing employers in the social and solidarity economy sector. It aggregates 22 employer groups across 17 professional branches, representing over 200,000 enterprises and nearly 2.7 million employees. The website reflects a professional and consistent brand presence, targeting employers and stakeholders in the ESS sector with services including representation, social dialogue, publications, and events. Technically, the site is built on Drupal 7 with a modern front-end stack including Bootstrap and jQuery, delivering a responsive and accessible user experience. While performance is moderate, the site benefits from HTTPS and integration with Google Tag Manager and Analytics, though some libraries like jQuery are outdated. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is missing, which slightly impacts trust but the overall site professionalism mitigates concerns. Overall, UDES presents a credible and authoritative online presence for its sector, with recommendations to improve security headers, update libraries, and enhance privacy compliance to strengthen trust and resilience.

I

Institut français NL

institutfrancais.nl

45

Institut français NL is a medium-sized non-profit organization dedicated to fostering Franco-Dutch cooperation in culture, education, research, and the French language. The organization offers a variety of programs including artist residencies, language courses, scholarships, and professional mobility initiatives. The website reflects a well-established institution with a clear mission and a broad network of partners across the Netherlands. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted by OVH with DNSSEC enabled, indicating a secure and stable infrastructure. Security posture is good with HTTPS enforced and use of hCaptcha for form protection, though additional security headers and policies could enhance the overall security framework. Privacy compliance is strong with clear policies and cookie consent mechanisms in place. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience effectively.

The website represents the Festival International du Film Ornithologique de Ménigoute, a well-established non-profit cultural event focused on wildlife and nature documentaries, particularly ornithology. Founded in 1985 and organized by Association MAINATE, it serves a general audience interested in nature and film. The site provides comprehensive information about the festival's program, activities, and participation opportunities, supported by social media and newsletter engagement. Technically, the site is built on the Contao CMS platform with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

T

Terre et Humanisme

terre-humanisme.org

49

Terre et Humanisme is a well-established French non-profit association dedicated to promoting agroecology and permaculture through education, solidarity projects, and expertise. With over 30 years of activity, it serves both individuals and professionals, leveraging a strong network of partners and animators. The website is professionally designed, content-rich, and provides multiple engagement channels including training, immersion stays, and an online store. Technically, the site is built on WordPress with modern plugins and integrations such as Google reCAPTCHA and Sendinblue for newsletters, hosted by Nuxit. Security posture is good with HTTPS and consent mechanisms, though improvements like DNSSEC and CSP headers are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

L

Les Nouvelles Voix

lesnouvellesvoixasso.org

56

Les Nouvelles Voix is a French non-profit association dedicated to supporting emerging leaders in climate and social justice through a structured multi-month program aimed at enhancing their leadership, public visibility, and networking capabilities. The organization positions itself as a niche player in the ecological transition sector in France, collaborating with reputable partners and foundations to amplify its impact. The website is built on a WordPress platform with modern JavaScript libraries such as GSAP and jQuery, hosted by Gandi SAS, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy compliance and security best practices.

C

Centre For Shaiva Studies

shaivastudies.in

48

The Centre For Shaiva Studies is a small, specialized academic research institute based in India, focusing on the advanced study of Shaiva traditions. It offers fellowships, publishes critical editions, and conducts lectures to promote scholarly understanding of Shaivism. The website is professionally designed using WordPress with the Avada theme and Yoast SEO, providing a good user experience and clear navigation. Contact information and physical address are clearly presented, enhancing business credibility. However, the site lacks published privacy and cookie policies, security policies, and incident response contacts, which are important for compliance and trust. The security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and formal policies. Overall, the site is safe, accessible, and trustworthy, serving its academic and cultural mission effectively.

Medias Libres is a French independent media coordination platform operated by the Coordination Permanente des Médias Libres (CPML). It serves as a collaborative hub for media outlets that reject both public and commercial private audiovisual media, aiming to foster a third sector of media through shared experiences and collective action. The website is built on WordPress and hosted by Scaleway SAS, reflecting a modest but stable technical infrastructure. The site is well-structured with good content relevance and navigation, targeting French-speaking media professionals and activists interested in alternative media.

M

Mauges Communauté

rencontres-tepos.fr

42

Rencontres TEPOS is a professionally managed event website dedicated to the 15th national meetings focused on energy transition in rural territories in France. The site is operated by Mauges Communauté in partnership with the réseau Cler, targeting local authorities, associations, and enterprises engaged in sustainable energy initiatives. The website provides rich multimedia content, event information, and partner details, reflecting a mature digital presence for a specialized community event. Technically, the website is built on WordPress with a modern theme and uses common web technologies such as Google Analytics and YouTube embeds. The hosting is provided by OVH, a reputable provider. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Privacy policies and cookie consent are clearly presented, supporting compliance. Contact information is transparent and professional, enhancing trustworthiness. The domain registration is consistent with the event's timeline and purpose. Overall, the website demonstrates a solid security and compliance posture suitable for its business model and audience, with room for minor improvements in security headers and incident response disclosures.

L

L’Ecole Nationale Supérieure Agronomique de Toulouse (ENSAT)

ensat.fr

55

ENSAT is a reputable public engineering school in France specializing in agronomy, environment, food, and oenology education. It serves a medium-sized student body and maintains strong partnerships with regional and international institutions. The website reflects a professional educational institution with clear communication channels and certifications. Technically, the site uses a Java-based CMS (Ametys) with modern front-end libraries and implements cookie consent mechanisms compliant with GDPR. Security posture is good with HTTPS enforced, though security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but this does not detract from the site's legitimacy. Overall, ENSAT presents a trustworthy and well-maintained digital presence.

P

PerPetum Energy

perpetumenergy.com

56

PerPetum Energy is a medium-sized company specializing in electrical decarbonization solutions, including photovoltaic energy, wind power, EV charging, energy storage, and flexibilization services. The company targets industrial consumers, developers, infrastructure owners, public entities, and communities aiming for CO2 emission-free energy transitions. Their business model encompasses development, EPC contracting, investment, operation, and maintenance of renewable energy projects. The website is professionally designed, multilingual, and content-rich, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response information. WHOIS data is missing or inconsistent, which slightly impacts trust but the website content and social media presence support legitimacy. Overall, the site demonstrates a strong business and technical foundation with room for security and transparency improvements.

Q

QUARTIS, s.r.o.

batavan.cz

47

Batavan.cz is a Czech cosmetics brand with over 20 years of history, operated by QUARTIS, s.r.o. The company specializes in manufacturing and retailing cosmetic products including foot care, body care, anti-cellulite, and spa products. The website is professionally designed using WordPress with WooCommerce and Elementor, supporting multiple languages and providing a smooth user experience. The business targets general consumers interested in wellness and beauty products within the Czech Republic. The site includes comprehensive privacy and cookie policies, with a consent mechanism compliant with GDPR. Contact information and company registration details are clearly presented, enhancing trust and credibility. Technically, the site uses modern web technologies and integrates Google Analytics and Facebook SDK for marketing and analytics purposes. Security posture is good with HTTPS enforced, though some security headers could be improved. No signs of blocking or WAF interference were detected, and the domain registration data aligns well with the business claims, supporting legitimacy.

E

EDP

edpenergia.es

69

EDP Energia is a large energy company operating in Spain, focusing on providing sustainable and innovative energy solutions for businesses. Their website highlights key services such as solar energy installations, electricity and gas supply, electric vehicle charging infrastructure, and energy efficiency services. The company positions itself as a leader in the energy sector with a strong emphasis on renewable energy and business customer support. Technically, the website uses a modern CMS (webControl CMS 3.5) and integrates various marketing and analytics tools including Google Tag Manager, Google Analytics, and Visual Website Optimizer. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA, but lacks visible security headers and published security policies or incident response contacts. Privacy compliance is basic with no explicit privacy or cookie policies detected on the analyzed page. Overall, the website is trustworthy and professional but could improve transparency and security posture by adding privacy policies, cookie consent mechanisms, and security disclosures.

P

PerPetum Energy

perpetum.be

10

PerPetum Energy is a renewable energy company specializing in electrical decarbonization solutions including photovoltaic energy, wind power, EV charging, energy storage, and flexibilization services. The company targets industrial consumers, developers, infrastructure owners, public entities, and communities aiming to reduce CO2 emissions. The website is built on WordPress with modern plugins and tracking tools, offering a professional and content-rich user experience. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the website content and business presence appear credible and professional.

M

MojoHost, B.V.

mojohost.eu

58

MojoHost, B.V. is a European hosting provider specializing in dedicated servers, VPS, cloud compute, cloud storage, and CDN services, primarily targeting businesses and technical users in Europe. The company emphasizes quality service, local payment options, and European IP address space, with a strong brand presence since 1999. Their website reflects a professional and consistent brand image with comprehensive service offerings and customer support portals. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is privacy protected, which is typical for hosting providers, and no suspicious patterns were detected. Overall, the site is trustworthy and well-positioned in the European hosting market.

Z

Zaclys

zaclys.com

66

Zaclys is a French-based provider of open-source, privacy-respecting web and cloud services targeting individuals, families, small organizations, and professionals. With over 42,000 users and a subscription-supported business model, Zaclys offers a broad portfolio of services including cloud storage, email, social networking (Mastodon), collaborative tools, and video conferencing. The website is professionally designed using WordPress and Divi, with a focus on accessibility and user experience. Technically, the site employs modern web technologies and plugins to support user management and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and vulnerability disclosures are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the website content and service offerings appear legitimate and trustworthy. Overall, Zaclys presents a mature, privacy-conscious service provider with a strong community and partnership ecosystem.

J

JackLeckerman Company

jackleckerman.com

63

JackLeckerman Company is a specialized business intelligence event organizer focusing on the pharmaceutical and biotechnology sectors primarily in Latin America, Europe, and North America. The company organizes global summits, strategic conferences, open forums, and professional training programs tailored to industry needs. Their market position is strong within their niche, supported by a professional website featuring event recaps, promotional videos, and active social media engagement. The business operates from Slovakia and has been established since 2016, with a clear focus on fostering collaboration and innovation in healthcare markets. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery, MediaElement.js, Google reCAPTCHA, Hotjar analytics, and Chatra live chat. Hosting is provided by a Slovakian provider (websupport.sk), and the site is secured with HTTPS. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features, although there is room for improvement in security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS and includes anti-spam measures like Google reCAPTCHA. Cookie consent mechanisms are implemented, and privacy policies are clearly available, indicating good privacy compliance. However, explicit security policies and incident response information are absent, and security headers are not detected, which could be enhanced to improve the security posture. No vulnerabilities or suspicious activities were identified in the analysis. Overall, the website presents a professional and trustworthy digital presence for JackLeckerman Company. The domain registration data aligns well with the business claims, and the site provides comprehensive contact information and social proof. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

A

AFNOR

marque-nf.com

60

The website marque-nf.com represents the NF certification mark, a leading European certification brand managed by AFNOR Group. It serves consumers, manufacturers, and service providers by providing certification services that attest to product and service quality and compliance with relevant standards. The site is professionally designed, multilingual (French and English), and well-structured to facilitate user navigation and information discovery. The business is well-established with a domain age dating back to 1999, reinforcing its credibility and market presence. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Yoast SEO, ensuring good SEO and content management capabilities. It employs Google Tag Manager and reCAPTCHA for analytics and security, respectively, and uses Didomi for cookie consent management, indicating compliance with privacy regulations. Performance is moderate with good mobile optimization, though accessibility could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. The absence of a security.txt file and incident response contacts suggests room for improvement in vulnerability disclosure and incident management. Overall, marque-nf.com is a trustworthy, professional website representing a reputable certification entity. Strategic recommendations include enhancing DNS security, implementing security headers, publishing vulnerability disclosure information, and improving accessibility compliance to strengthen security posture and user trust.

A

Alice Salomon Hochschule Berlin

ash-berlin.eu

66

Alice Salomon Hochschule Berlin (ASH Berlin) is the largest German state university specializing in social work, health, education, and upbringing, offering 20 Bachelor and Master degree programs. The institution targets students, researchers, and continuing education participants, including international students. The website reflects a professional and comprehensive digital presence with rich content about academic programs, research, events, and student support services. The business model is that of a public higher education institution with a strong emphasis on social responsibility and international cooperation. Technically, the website is built on TYPO3 CMS and uses modern web technologies such as jQuery, Bootstrap, and MediaElement.js. It is mobile-optimized, accessible, and SEO-friendly. The site employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. No blocking or WAF challenges were detected, and the site is served over HTTPS with good security practices, although some security headers could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is privacy protected and unavailable, which is common for EU domains but limits transparency. The website maintains GDPR compliance with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy, professional, and well-maintained. The main risk is the lack of publicly available WHOIS registrant data, but given the institutional nature and consistent content, this is not a significant concern. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.

C

Czech Soles Production

czechsoles.com

40

CzechSoles.com operates as a niche adult entertainment website specializing in foot fetish content, offering a large catalog of videos, photo galleries, custom clips, and live webcams. The site targets an adults-only audience with explicit disclaimers and age verification statements. The business model is subscription-based with additional custom content sales, positioning itself as a specialized media provider within the adult entertainment industry. The website demonstrates consistent branding and a professional presentation with a focus on quality multimedia content. Technically, the site uses common JavaScript libraries and integrates Google reCAPTCHA Enterprise for bot protection, but lacks advanced security headers and explicit privacy consent mechanisms. Payment processing is handled by a reputable third party, CCBill, enhancing transactional trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency.

F

Femdom Empire

femdomempire.com

9

Femdom Empire is a niche adult entertainment website specializing in femdom fetish videos. Established in 2011, it operates a subscription-based business model offering weekly updates and access to exclusive video content. The site targets an adult audience interested in hardcore dominatrix and fetish video content. Technically, the website uses a custom CMS with a variety of JavaScript libraries including jQuery, Fancybox, and Flexslider to provide a multimedia-rich user experience. Hosting is provided by MojoHost, and the domain is registered with GoDaddy, reflecting a stable and consistent digital infrastructure. Security posture is moderate with HTTPS usage and age verification mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no explicit cookie policy. Overall, the site is professionally designed with good navigation and content relevance but could improve in security and privacy transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and improving privacy and cookie consent mechanisms.

Nomorewords is a small Amsterdam-based label services company specializing in music production, promotion, and distribution services including vinyl, CD, cassette manufacturing, webshop and Bandcamp management, order fulfilment, and licensing administration. The company targets musicians, bands, and record labels seeking comprehensive label support. Technically, the website employs a modern JavaScript stack with jQuery, Bootstrap, and media playback libraries, providing a responsive and user-friendly experience. However, some accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enforced and secure login forms, but lacks published privacy and cookie policies, security headers, and terms of service, which are critical for compliance and trust. WHOIS data is unavailable, which reduces domain trustworthiness despite professional site content. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency.

O

OCS Final Frontier

ocsff.com

61

OCS Final Frontier is an online education platform specializing in preparation for the Orthopaedic Clinical Specialist board certification exam. Founded in 2022, it offers comprehensive study courses, live webinars, video recordings, interactive quizzes, and premium study materials tailored to physical therapy professionals. The website is built on WordPress with WooCommerce and LearnDash LMS, hosted by Automattic Inc., reflecting a modern and scalable technical infrastructure. The site demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience for its niche audience. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently lacking, with no visible privacy or cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and trustworthy, serving a specialized educational market with moderate risk and room for compliance enhancements.

T

TPAG

tpag.eu

48

TPAG is a specialized investment company focusing on Corporate Private Equity, Turnaround and Distressed acquisitions, and Direct Lending in the Central and Eastern Europe (CEE) and DACH regions. With assets under management exceeding €50 million, TPAG targets lower mid-market and mid-market companies, emphasizing value creation, tradition, and partnership culture. The website presents a professional image with detailed information about its strategies, portfolio, team, and media presence. Technically, the site is built on WordPress with modern plugins and custom fonts, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security documentation.

K

KULTURA ČESKÁ LÍPA, příspěvková organizace

cl-kultura.cz

43

Kultura Česká Lípa is a public cultural organization affiliated with the city of Česká Lípa, Czech Republic. It provides a variety of cultural services including theater performances, concerts, workshops, and venue rentals. The website serves as an information portal for upcoming events, ticket sales, and organizational details, targeting the general public interested in cultural activities. The organization is positioned as a key local cultural institution with official city backing, enhancing its credibility and trustworthiness. Technically, the website is built on WordPress using the Divi theme and several plugins such as Complianz for GDPR compliance and Supreme Modules Pro for enhanced UI components. The site demonstrates good mobile optimization, moderate performance, and basic accessibility features. It integrates external services for ticketing and event promotion, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is well addressed with clear GDPR documentation and cookie policies. Contact information is comprehensive, including phone, email, and physical address, supporting business credibility. Overall, the website presents a professional and trustworthy digital presence for a government-affiliated cultural organization. The main risk factor is the absence of WHOIS data, which limits domain registration transparency. Strategic recommendations include enhancing security headers, maintaining plugin updates, and verifying domain registration status to strengthen trust and security posture.

Chefsblogg.se is a professionally maintained blog platform operated by Ledarna, Sweden's prominent organization for managers and leaders. The site focuses on leadership, sustainability, inclusion, equality, and related societal topics, targeting managers and professionals interested in leadership development. The blog features multiple authors and regularly updated content, reinforcing its position as a thought leadership platform within the Swedish leadership community. Technically, the site is built on WordPress using the Enfold theme, leveraging common web technologies such as jQuery and PHP. It employs CookieYes for cookie consent management, ensuring compliance with cookie regulations. Security posture is solid with HTTPS enforced and basic security headers, though there is room for improvement in header implementation and privacy documentation. The WHOIS data for the exact domain www.chefsblogg.se is unavailable, suggesting it is a subdomain or alias under a parent domain, consistent with its affiliation to Ledarna. Overall, the site presents a trustworthy, professional, and content-rich platform with moderate technical sophistication and good security hygiene.

S

Sectigo Limited

hackerguardian.com

10

HackerGuardian is a PCI compliance and vulnerability scanning service operated under the Sectigo brand, a recognized leader in digital certificates and security solutions. The website offers automated PCI compliance scanning, live SAQ support, and streamlined reporting aimed at online merchants and businesses needing to meet PCI DSS requirements. The market position is strong due to Sectigo's established reputation and comprehensive service offerings. Technically, the site employs a modern JavaScript stack with analytics and marketing integrations, ensuring a good user experience and mobile optimization. Security posture is robust with HTTPS enforcement and trust seals, though some security headers and explicit policies could be improved. The absence of WHOIS data for the domain is a notable concern, potentially indicating domain registration issues or privacy protection. Overall, the site is professional and trustworthy but would benefit from enhanced transparency regarding domain registration and security policies.

A

AIRCOM

aircomsystem.com

9

AIRCOM is an Italian manufacturing company specializing in the design and production of high-performance piping and fittings for compressed air and pressure fluid systems. The company targets industrial and commercial sectors requiring reliable and efficient piping solutions. The website reflects a medium-sized enterprise with a professional online presence and multi-language support, indicating an international market reach. Technically, the website is built on WordPress using the Divi theme and integrates modern tools such as Google Tag Manager and Yoast SEO, demonstrating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain is a notable concern, as it reduces the ability to verify domain legitimacy fully. Overall, the website is professional and functional but would benefit from enhanced privacy, security disclosures, and domain transparency to improve trustworthiness and compliance.

E

Emerson Automation Solutions

emersonautomationexperts.com

80

Emerson Automation Experts is a professional B2B platform providing insights, resources, and information related to Emerson Automation Solutions' products and services. The website targets industrial professionals and businesses in sectors such as energy, manufacturing, and process control. It serves as a knowledge hub connecting users with expertise in automation technologies. Technically, the site is built on WordPress using the Divi theme, optimized with NitroPack, and integrates modern analytics and marketing tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is strong with HTTPS, security headers, and reCAPTCHA protection on forms, though explicit security policy and incident response information are absent. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, but the website branding and content strongly align with the reputable Emerson brand. Overall, the site is well-designed, secure, and compliant with privacy regulations, making it a trustworthy resource for its target audience.

P

Paul Jun

pauljun.me

59

Paul Jun's website serves as a professional portfolio showcasing his expertise as a creative director, brand strategist, writer, and photographer. The site highlights his leadership roles in notable projects and organizations, positioning him as an established figure in the creative media industry. The business model centers on personal branding and service showcasing, targeting creative professionals and potential collaborators. Technically, the site is built on WordPress with a modern theme and SEO optimizations, delivering a visually appealing and responsive user experience. Security posture is adequate with HTTPS enabled and domain protections, though lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and well-maintained but could improve in privacy and security transparency.

P

Polanský s.r.o.

polansky-sro.cz

48

Polanský s.r.o. is a Czech construction company specializing in demolition, earthworks, height work, transport, and recycling services. The company emphasizes high quality, flexibility, and comprehensive delivery, supported by ISO certifications and recognized as the Construction Company of the Year 2020. Their website is professionally designed, multilingual, and provides detailed service descriptions and project references, targeting industrial and construction sector clients. Technically, the site runs on WordPress with standard plugins and Google Analytics for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is missing, which limits full legitimacy verification. Overall, the company presents a credible business with room for improvement in privacy compliance and security best practices.

T

Tellinger Digital

tellinger.digital

55

Tellinger Digital is a small creative digital design and UX service provider based in the Czech Republic, led by Martin Tellinger, an experienced designer with over 18 years in the industry and a portfolio of more than 400 projects. The website showcases a professional portfolio with a focus on usability, branding, prototyping, and testing for mobile and web applications. The business targets clients seeking high-quality digital design and UX services. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses analytics tools such as Google Analytics and Hotjar, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie consent mechanisms, which are recommended for compliance and trust. Overall, the site is professional, trustworthy, and well-structured, though it would benefit from enhanced privacy compliance and security best practices.

M

MK Consult

k5mapserver.cz

42

MK Consult, v.o.s. is a Czech-based company specializing in geographic information systems (GIS) software development and consulting, with a focus on their flagship products Kompas 5 and K5 MapServer. The company has a long-standing presence since 2002, offering GIS solutions, spatial data processing, and custom application development primarily targeting government institutions, technical services, and public users. Their website reflects a professional and consistent brand image, providing detailed information about their software and services in Czech language. Technically, the website is built on WordPress with a range of plugins and libraries, though it uses an outdated WordPress version and older JavaScript libraries, which may pose security risks. The site is mobile-optimized and SEO-friendly but lacks privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the website is trustworthy and business credible but would benefit from technical and compliance improvements.

Black Rock Brewery is a small craft brewery established in 2012, offering a variety of brews with a focus on quality bottling and packaging. The website is built on WordPress and hosted by NameCheap, featuring moderate performance and good mobile optimization. The business has some trust indicators such as national brewing awards and testimonials but lacks visible privacy and security policies. The domain WHOIS data shows inconsistencies with a future creation date, which raises questions about registration legitimacy. Security posture is basic with HTTPS enabled but missing security headers and DNSSEC. Overall, the site is functional and professional but requires improvements in privacy compliance and security hardening.

M

MEZINÁRODNÍ CENTRUM KLINICKÉHO VÝZKUMU FNUSA A LF MU (ICRC)

fnusa-icrc.org

65

The International Clinical Research Center (ICRC) is a joint clinical research and education institution affiliated with the Faculty Hospital St. Anne's in Brno and the Medical Faculty of Masaryk University. It focuses on advancing medical research, education, and industrial cooperation, positioning itself as a key regional player in healthcare innovation. The website reflects a professional and well-structured digital presence, targeting medical researchers, healthcare professionals, students, and the general public interested in medical advancements. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO and Matomo analytics for privacy-conscious visitor tracking. It integrates Google Maps and cookie consent mechanisms, demonstrating a moderate to good level of digital maturity. Performance and mobile optimization are adequate, though accessibility could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks some recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration details slightly impacts trustworthiness, but the site's affiliations and certifications, such as the HR Award, support its legitimacy. Overall, the ICRC website is a secure, privacy-compliant, and professionally maintained platform that effectively serves its audience. Strategic improvements in security headers, accessibility, and transparency of domain registration would further enhance its trust and resilience.

C

Cirkev adventistov siedmeho dňa na Slovensku – CASD

casd.sk

38

The website www.casd.sk serves as the official online presence of the Slovak Seventh-day Adventist Church, providing religious content, community news, event information, and links to affiliated organizations. It targets Slovak-speaking members and followers of the church, offering spiritual resources and institutional information. The site is built on WordPress with a moderate technical infrastructure and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and vulnerability disclosures. The site demonstrates good content quality and trustworthiness, supported by consistent branding and regular updates. No critical security issues or adult content were detected, and the WHOIS data aligns well with the organization's claims, indicating legitimacy.

C

CEC European Managers

sustainableleaders.eu

53

SustainableLeaders.eu is a professionally maintained website representing the Sustainable Leadership Project managed by CEC European Managers, a non-profit organization based in Belgium. The project focuses on empowering leaders for a net-positive future through sustainable leadership training, reports, and summit events. The website targets managers, consultants, and organizations interested in sustainability within the European context. The business model is non-profit with EU funding and partnerships supporting its activities. Technically, the site is built on WordPress using the Enfold theme and includes modern web technologies such as jQuery and LayerSlider. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie management. Contact information is comprehensive, including email, phone, physical address, and a contact form. Overall, the website is trustworthy, professional, and well-aligned with its stated mission.

C

CEC – Confédération Européenne des Cadres

cec-managers.org

54

CEC European Managers is a well-established European umbrella organisation representing the interests of managers and leaders in the European Social Dialogue. Founded in 1951, it acts as a recognized social partner by the EU Commission, representing approximately one million managers across 15 countries. The organisation provides representation, participates in EU projects, and responds to official EU consultations, focusing on sectors such as energy, transport, and banking. The website reflects a professional and consistent brand image with good content quality and clear organizational information. Technically, the website is built on WordPress using the Enfold theme and employs modern web technologies including jQuery and MediaElement.js. It is mobile-optimized with moderate performance and good SEO practices. Google Analytics is used for user tracking, with a cookie consent mechanism in place, indicating some level of privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security or incident response policies. The WHOIS data is incomplete, which limits domain trust analysis, but the website content and EU recognition support its legitimacy. No adult or questionable content is present, and no WAF or blocking mechanisms were detected. Overall, the website presents a credible and professional front for the organisation but would benefit from enhanced privacy disclosures, security headers, and clearer contact information to improve trust and compliance.

K

Kreatura - kreativní agentura

kreatura.cz

46

Kreatura is a small creative agency based in Brno, Czech Republic, specializing in meaningful visual communication projects and offering proprietary CMS and mass mailing solutions. The website reflects a professional and client-focused business with clear contact information and a consistent brand presence. Technically, the site uses a mix of jQuery, Google Analytics, Google Tag Manager, and Google Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. Overall, the site is trustworthy and compliant with GDPR, though WHOIS data is unavailable, likely due to privacy protection. Strategic improvements in security headers and transparency could enhance trust further.

C

CarbonTear

carbontear.cz

10

CarbonTear is a small Czech Republic based company specializing in luxury caravans, offering custom-made caravans with 100% handmade production in the EU and a caravan rental service. The company targets customers in the Czech and Slovak markets who seek high-quality, bespoke caravans. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to privacy. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is good with HTTPS and consent mechanisms, but could be improved by adding security headers and incident response information.