Security Directory

The website www.enspryng.com represents Genentech's pharmaceutical product ENSPRYNG®, a treatment for Neuromyelitis Optica Spectrum Disorder (NMOSD). The site provides detailed patient-focused information, healthcare professional resources, and access to medication guides and prescribing information. The business is positioned as an established biotechnology company with a specialty drug offering, targeting patients and clinicians. Technically, the site is built on Adobe Experience Manager with modern web technologies, including consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and policies are not fully documented. The absence of WHOIS registration data is a concern for domain legitimacy, but the site content and branding align with a reputable pharmaceutical entity. Overall, the site is professional, secure, and compliant with privacy norms, though improvements in transparency of security and privacy policies are recommended.

The website superbthemes.com is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, including business descriptions, contact information, or policies. The domain is registered with NameCheap since 2018 and uses Cloudflare for DNS and security services. Due to the blocking, no detailed content or business information could be extracted or analyzed. The security posture appears to include Cloudflare's WAF protection, but no further security headers or policies are visible. Overall, the site cannot be fully assessed in its current state, limiting the ability to provide a comprehensive risk or business analysis.

B

Built by Buffalo Limited

builtbybuffalo.com

60

Built by Buffalo Limited is a boutique web design and branding agency based in Brighton, UK, established in 2006. The company specializes in creating visually appealing and user-friendly websites and brands for clients worldwide. Their market position is that of a reputable small agency known for quality and client satisfaction, offering services including web design, development, e-commerce solutions, and content management systems. The website reflects a professional and consistent brand image with strong client testimonials and partner endorsements from Shopify and Mailchimp. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript with MooTools and Raphaël.js, and integrates Google Analytics and Tag Manager for tracking. Hosting and DNS services are provided via Cloudflare, although DNSSEC is not enabled. The site is mobile optimized with good SEO and accessibility basics. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and DNSSEC is absent. Privacy compliance is basic with a privacy policy page but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve security and privacy practices.

Y

YoPlanning

yoplanning.pro

63

YoPlanning is a SaaS provider specializing in online booking, planning, and payment software solutions targeted at businesses and professionals requiring streamlined scheduling tools. The website presents a professional and consistent brand image with a focus on ease of use and integration with popular social login providers such as Google, Apple, and Facebook. The technical infrastructure leverages modern web technologies including Django backend (implied), Google Cloud Storage for static assets, and integration with Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and responsive design. Security posture is solid with HTTPS enforced, CSRF protection, and secure login forms, although some security headers are missing and no explicit security or incident response policies are publicly disclosed. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. WHOIS data is unavailable due to TLD limitations and privacy protection, which is common for SaaS providers but slightly reduces trust. Overall, the website is legitimate, functional, and professionally maintained with room for improvement in privacy compliance and security transparency.

G

Genentech

gene.com

77

Genentech is a leading biotechnology company specializing in biopharmaceutical research and development, serving healthcare professionals, patients, and investors. The website reflects a mature enterprise with consistent branding and comprehensive content focused on breakthrough science and patient care. Technically, the site employs modern JavaScript libraries, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent, indicating a strong digital maturity. Security posture is robust with HTTPS, security headers, and privacy compliance, though explicit security and incident response policies are not publicly detailed. Overall, the site is trustworthy and professionally maintained, with minor gaps in public security disclosures.

K

Krinolína Art - Nikola Tylšová

krinolinaart.cz

41

Krinolína Art - Nikola Tylšová is a small artisan business specializing in hand-embroidered jewelry based in the Czech Republic. The website serves as an informational and branding platform with links to social media and contact details. The e-commerce shop is under preparation, indicating a startup phase. The business targets general consumers interested in unique handmade jewelry. Technically, the website is built on WordPress, hosted by Wedos, and uses modern web fonts and responsive design techniques. However, it lacks advanced security headers and privacy policies, which are important for compliance and trust. The security posture is moderate with HTTPS usage but no visible security enhancements. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

Via Transportation operates a comprehensive digital platform transforming public transit and shared mobility through software and operations. The company targets a broad audience including cities, transit authorities, operators, educational institutions, corporations, and healthcare providers. Their market position is strong with strategic partnerships such as with Waymo and Citymapper, offering a suite of services from microtransit to corporate shuttles. Technically, the website is built on HubSpot CMS, leveraging modern analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and domain protections, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though direct contact emails and phone numbers are not publicly listed, relying on forms for communication.

S

Slovenská biblická spoločnosť

bibliaprenepocujucich.sk

53

The website 'Biblia pre nepočujúcich' is a non-profit project managed by the Slovenská biblická spoločnosť, providing biblical stories in Slovak sign language targeted at the deaf community in Slovakia. The project is educational and religious in nature, relying on donations for continuation. The site features video content, a sign language dictionary, and is designed with accessibility in mind, though some accessibility features could be improved. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, JW Player for video playback, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for tracking and analytics. The site is mobile optimized and has good SEO practices, but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and includes a CSRF token, but does not expose security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. No contact information for security incidents or data protection officers is provided. The domain uses privacy protection in WHOIS, which is justified for this non-profit. No vulnerabilities or suspicious patterns were detected. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and security posture.

The website giftlegacy.com is currently inaccessible beyond a Cloudflare security challenge page employing Turnstile captcha, which prevents direct content access and analysis. The domain is long-established, registered since 1999 via GoDaddy.com, LLC, with no privacy protection enabled. Due to the WAF challenge, no business, contact, or policy information is visible, limiting the ability to assess the company's market position, services, or compliance posture. The technical infrastructure includes Cloudflare as a security and performance provider, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to blocked content, but domain registration data suggests a stable and legitimate domain. Overall, the site requires removal or adjustment of WAF restrictions to enable proper content delivery and compliance transparency.

The website www.oborahukvaldy.cz serves as the official online presence for Obora Hukvaldy, affiliated with Biskupství ostravsko-opavské, a regional ecclesiastical entity managing forestry and related services. The site provides information about hunting, fishing, and other services related to the management of the Obora Hukvaldy area. The business model is informational and service-oriented, targeting local visitors and stakeholders interested in forestry and land management activities. The market position is local and specialized, with a small organizational size and limited digital footprint. Technically, the website is built on WordPress 6.8.3, utilizing Bootstrap and jQuery 1.11.2, indicating a moderately modern but somewhat dated technology stack. The site is functional with basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The absence of updated libraries and security headers suggests room for technical improvements. From a security perspective, the site uses HTTPS but lacks critical security headers such as Content-Security-Policy and HSTS. No evidence of security policies, incident response contacts, or vulnerability disclosures were found. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. No signs of malware or phishing were detected, but the security posture is moderate and could benefit from enhancements. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. However, the lack of privacy and cookie policies, combined with missing WHOIS data and security headers, lowers its compliance and trust scores. Strategic improvements in security practices, privacy compliance, and technical modernization are recommended to enhance the site's credibility and resilience.

F

Futura DDB

futura.si

55

Futura DDB is a professional integrated advertising agency based in Slovenia, offering a comprehensive range of marketing services including branding, digital product development, communications, gaming and e-sport marketing, and media planning. The company positions itself as a market leader with multiple industry awards, targeting businesses seeking integrated digital and traditional marketing solutions. The website reflects a mature digital presence with modern technologies such as Alpine.js, Livewire, and Google Analytics integrated for performance and user tracking. The site is well-optimized for mobile and desktop users, providing a seamless user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and WHOIS registration data introduces some risk factors. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and security policies.

O

ohai.is

ohai.is

53

ohai.is is a small Iceland-based technology service provider offering a suite of decentralized and privacy-focused public internet services including Mastodon social media, Matrix messaging, collaborative markdown editing, encrypted pastebin, polls, recipe management, ad removal, and a game server community. The website is professionally designed with clear navigation and consistent branding, targeting general internet users interested in privacy and decentralized platforms. Technically, the site uses standard HTML5 and CSS with hosting provided by fnoco.eu, showing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no cookie consent mechanism is implemented. The domain registration is consistent with the business age and shows no suspicious patterns, supporting legitimacy. Overall, the site is trustworthy and functional but could improve in security and privacy compliance areas.

F

Framasoft

framalang.org

59

Framasoft is a reputable French non-profit organization dedicated to promoting free software, digital commons, and collaborative translation efforts through its Framalang project. The website serves as a portal for community members to participate in translating digital culture content, primarily from English to French, supporting the broader mission of open knowledge dissemination. The organization maintains a strong presence in the francophone free software ecosystem with multiple linked community platforms and projects. Technically, the site is built using modern static site generation tools (HonKit), ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. The WHOIS data is privacy protected, which is typical and justified for a non-profit entity, and does not detract from the domain's legitimacy. Overall, the site is trustworthy, well-maintained, and aligned with its community-driven mission.

The website at wip.framasoft.org currently serves as a placeholder maintenance page indicating that the service is not yet available. There is minimal content, limited to a message in French stating the service does not exist yet, and a credit link to an artist for the background image. The site lacks any business or contact information, privacy or cookie policies, and does not provide any interactive elements or forms. The WHOIS query for the domain failed to return any registrar, registrant, or creation data, which raises concerns about the domain's legitimacy and maturity. Technically, the site is built with basic HTML and CSS, with no detected CMS, frameworks, or advanced technologies. No security headers or HTTPS information was found, indicating a weak security posture. Overall, the site is not yet operational and provides no business or security assurances.

F

Framasoft

sepiasearch.org

57

Sepia Search is a specialized search engine focused on indexing videos, channels, and playlists from the decentralized PeerTube network. Developed and maintained by Framasoft, a recognized non-profit organization in the free software community, the website serves a niche audience interested in decentralized video content. The platform leverages modern web technologies including Vue.js and modular JavaScript to deliver a responsive and user-friendly search experience. Hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business timeline, enhancing trustworthiness. From a security perspective, the website uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response contacts published. Privacy compliance is partially addressed through a linked legal notice page, but no cookie consent mechanism is present despite the use of a tracking script. No direct contact information such as emails or phone numbers are provided on the main site, which may limit user support options. Overall, the website demonstrates good technical implementation and business credibility within its niche. The content is safe for general audiences, with no adult or explicit material detected. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and implementing a cookie consent mechanism to improve privacy compliance and security posture.

M

Městské trhy, z.s.

vychodocesketrhy.cz

57

The website 'Farmářské trhy' represents a small, local non-profit organization named Městské trhy, z.s., focused on organizing farmers markets in Hradec Králové, Czech Republic. It serves as a community platform connecting local producers with residents and visitors, offering event schedules, vendor information, and community engagement activities. The site is built on the GoDaddy Website Builder platform, leveraging standard web technologies and third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is adequate for a small community site, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and professionally presented, though it could benefit from enhanced security practices and more transparent contact information. No blocking or WAF mechanisms interfere with content access.

T

Tubebdsm.org - Real BDSM Porn Videos

tubebdsm.org

57

Tubebdsm.org is an adult entertainment website specializing in BDSM and fetish video content. It offers streaming and downloadable videos categorized by various adult themes and fetishes. The site targets an adults-only audience interested in niche BDSM content. Technically, the site uses DataLife Engine CMS with common frontend libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS services. While HTTPS is enabled, the site lacks important security headers and privacy compliance documentation, which are critical for user trust and regulatory adherence. No contact or business information is provided, limiting transparency. Overall, the site functions as a niche adult content platform with moderate technical implementation but weak privacy and security posture.

T

Tubxporn.com - Best Porn Videos. Stream or Download Movies

tubxporn.com

39

Tubxporn.com is an adult entertainment website offering pornographic video streaming and free downloads. The site appears to serve a niche adult audience with a basic content offering and minimal on-site content, primarily redirecting users to a partner site. The technical infrastructure is simple, relying on standard web technologies and Google PageSpeed scripts, with moderate performance and basic mobile optimization. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no privacy or cookie policies. The WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site lacks business transparency and compliance features, which increases risk for users and partners.

S

schülke

schuelke.com

51

schülke is a long-established company specializing in hygiene and preservation products, with a corporate philosophy focused on combating diseases and contamination. The website presents professional content targeting healthcare professionals and industries requiring hygiene solutions. Technically, the site is built on the Weblication® CMS platform, with a moderate level of performance and good mobile optimization. However, the security posture is weak due to lack of visible security headers and missing SSL configuration details. Privacy compliance is also lacking, with no privacy or cookie policies detected. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy. Overall, while the business content is credible and professional, the technical and security aspects require significant improvement to ensure trust and compliance.

E

Encavis

encavis.com

67

Encavis is a large European renewable energy company specializing in solar parks and wind farms, with over 3.8 GW installed capacity. The company targets institutional investors, energy-intensive companies, and partners such as landowners and project developers. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and recent business activities. Technically, the site uses modern web technologies including JavaScript libraries, consent management, and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response contacts. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in the renewable energy sector.

I

ISSA CZECH s.r.o.

cloverbooks.cz

56

Jazyková škola Cloverleaf Ostrava is a well-established language school operating since 1993, offering a broad range of language courses including English, Cambridge exam preparation, e-learning, and corporate training. The school targets a diverse audience including individuals, children, youth, and corporate clients, positioning itself as the largest language school in the Ostrava region. The website is professionally designed, mobile-optimized, and provides comprehensive information about courses, contact details, and policies. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Seznam Retargeting. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages are found. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the overall business credibility remains high due to transparent contact information and professional presentation.

S

Severomoravské vodovody a kanalizace Ostrava a.s.

smvak.cz

63

Severomoravské vodovody a kanalizace Ostrava a.s. is a leading water utility company serving over one million residents in the Moravskoslezský and Olomoucký regions of the Czech Republic. The company provides high-quality potable water supply and wastewater treatment services, supported by a broad range of customer-focused offerings such as water meter management and consultation portals. The website reflects a professional and consistent brand image, with clear navigation and comprehensive service information. Technically, the site employs modern web technologies including Google Tag Manager and cookie consent mechanisms, ensuring GDPR compliance and user privacy awareness. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding security headers and publishing explicit security policies. The absence of WHOIS data is a notable gap, slightly reducing domain trustworthiness, but the association with the parent company Aqualia and visible certifications bolster credibility. Overall, the site is well-positioned to serve its audience with reliable information and services.

I

I love Hummus, s.r.o

ilovehummus.cz

53

I love Hummus, s.r.o is a Czech-based small enterprise specializing in the production and distribution of natural chickpea-sesame spreads (hummus) and related food products. Established in 2011, the company has developed a strong local market presence with over 600 retail outlets and partnerships with major chains such as Tesco and Makro. The business emphasizes natural ingredients, vegan and gluten-free products, and has expanded its portfolio under the Beavia brand to include fermented foods. Technically, the website employs modern web technologies including Bootstrap, jQuery, and tracking tools like Google Analytics and Adform, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the site is well-designed and functional but would benefit from enhanced privacy and security disclosures.

M

Město Frenštát pod Radhoštěm

mufrenstat.cz

46

Město Frenštát pod Radhoštěm operates an official municipal website serving residents and visitors with comprehensive information about city administration, public notices, social services, events, and urban planning. The website positions itself as a trusted government portal with a clear focus on community engagement and transparency. The target audience includes local citizens and tourists seeking official information and services. The business model is a public service platform funded and operated by the city government. Technically, the website uses a custom CMS (vismo®), integrates Google Analytics and Tag Manager with GDPR-compliant consent mechanisms, and supports accessibility and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and well-maintained, reflecting a mature digital presence for a municipal government entity.

M

Magistrát města Třince

trinecko.cz

57

The website www.trinecko.cz serves as the official online presence of the statutory city of Třinec, Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, and community news. The site targets residents, visitors, and local businesses, offering a centralized platform for municipal communication and citizen engagement. The business model is typical for government entities, focusing on transparency, service delivery, and public information dissemination. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google reCAPTCHA for form security and includes a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. However, it lacks visible HTTP security headers and does not publish a dedicated security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust verification, but the official nature and consistent branding of the site support its legitimacy. Overall, the website is a well-maintained municipal portal with strong content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and security posture.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) displaying the offline Dinosaur game. There is no business-related content, contact information, or policies present. The page serves as a fallback offline experience rather than a commercial website. The technical infrastructure is based on standard web technologies including HTML5, CSS3, and JavaScript with canvas and Web Audio API for the game. Security posture is minimal due to the nature of the page, with no forms or external dependencies. Privacy compliance and business credibility cannot be assessed due to lack of relevant content.

S

Sport et neige

sportetneige.com

66

Sport et Neige is a specialized retail business focused on cross-country skiing and Nordic walking equipment, operating both online and through a physical store in Pontarlier, France. Established in 1977, it offers a wide range of products including skis, clothing, and accessories for men, women, and children. The website is well-structured, professionally designed, and targets enthusiasts of endurance sports in the Jura region and beyond. Technically, the site uses modern frameworks such as UIkit and Swiper, with a cookie consent mechanism implemented via tarteaucitron. Security posture is generally good with HTTPS enforced, though some security headers are missing and an outdated jQuery version is used. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy perception. Overall, the site presents a trustworthy and professional front for a niche sports retail business.

ASTON - služby v ekologii, s.r.o. is a Czech Republic based company specializing in ecological services and waste recycling with a history dating back to 1993. The company operates multiple regional offices and serves over 350 customers with a broad portfolio of services including hazardous waste disposal, recycling, legislative support, and environmental remediation. The website reflects a professional and consistent brand presence with detailed service descriptions and contact information. Technically, the site uses modern web technologies such as Google Tag Manager and Google Fonts, and is mobile optimized with good SEO practices. However, the absence of privacy and cookie policies and lack of WHOIS data limit the site's compliance and trustworthiness. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and domain legitimacy verification.

GEOSAN GROUP a. s. is a well-established Czech construction company specializing in general contracting for residential, civil, industrial, environmental remediation, water management, and transportation projects. The company positions itself as a financially stable and reputable player with nationwide operations. Their website reflects a professional digital presence with clear navigation, good mobile optimization, and detailed information about their certifications and references. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and the Nette framework for form handling. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and published incident response policies. Privacy compliance is demonstrated through a cookie consent mechanism and a privacy policy page. Overall, the website is trustworthy and business-focused, though WHOIS data is unavailable, which slightly impacts domain trust evaluation.

P

ProfiSMS s.r.o.

stopsms.cz

60

ProfiSMS s.r.o. operates the StopSMS platform, a specialized service for automated opt-out management from marketing SMS campaigns primarily targeting the Czech and Slovak markets. The company provides a professional solution that integrates toll-free phone lines, microsite domains, and API connectivity to ensure compliance with Czech data protection laws and the latest interpretations by the ÚOOÚ. The website reflects a focused B2B SaaS business model with a niche market position, supported by clear branding and client references. Technically, the site employs modern front-end technologies including Bootstrap, jQuery, and Google services such as reCAPTCHA and Analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and spam protection on forms, although explicit security policies and incident response information are not publicly detailed. Overall, the domain registration data and website content are consistent, indicating a legitimate and stable business entity.

H

Havas Media Network

havasmedianetwork.com

70

Havas Media Network is a global media experience network focused on connecting brands and consumers through meaningful media, leveraging data, content, and technology. Founded in 2023, it operates as part of the larger Havas Group, with a presence in over 140 countries and a workforce exceeding 10,000 people. The company offers a range of services including media buying and planning, e-commerce solutions, data technology, and entertainment activation, serving a diverse portfolio of high-profile clients worldwide. Technically, the website is built on WordPress and employs modern web technologies such as Google Tag Manager and Swiper.js for enhanced user experience and analytics. The site is well-optimized for mobile devices, features fast loading times, and includes comprehensive SEO and accessibility features. Hosting and DNS are managed by Gandi SAS, a reputable provider, with HTTPS enforced ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS, clientTransferProhibited domain status, and no detected vulnerabilities or exposed sensitive data. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response information. Privacy compliance is strong with clear privacy and cookie policies, GDPR adherence, and consent mechanisms in place. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with its business objectives. Strategic recommendations include enhancing DNS security, formalizing security policies, and continuous monitoring to maintain high security and compliance standards.

G

Google LLC

adventistmission.cz

71

The analyzed website is a consent management page hosted on the subdomain consent.youtube.com, part of the YouTube platform owned by Google LLC. It serves as an interface for users to manage privacy and cookie consent in compliance with regulations such as GDPR. The page is professionally designed, mobile-optimized, and uses modern web technologies consistent with Google's standards. It integrates with Google APIs and employs Material Design components for UI consistency. Security is robust with HTTPS enforced and multiple security headers present, reflecting a mature security posture. No vulnerabilities or suspicious activities were detected. The domain is a subdomain of youtube.com, which is a well-established and trusted domain owned by Google, ensuring legitimacy. Overall, the site demonstrates high technical maturity, strong security practices, and good privacy compliance, although explicit links to privacy policies or contact information are not present on this specific page.

The website omworldfinals.com currently displays a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. There is no accessible business or contact information, privacy or cookie policies, or any other content that would provide insight into the company's operations or services. The domain is registered with NameCheap since 2021 and hosted on SiteGround, but the lack of accessible content severely limits the ability to assess the business or technical maturity. The site uses basic HTML and CSS with Google Fonts but no advanced frameworks or analytics are detected. Security posture is weak due to missing DNSSEC and absence of security headers, although HTTPS status cannot be confirmed from the content. Overall, the site is inaccessible for meaningful analysis and presents a low trust profile.

P

Pivovarna Laško Union d.o.o.

union-experience.si

41

Pivovarna Laško Union d.o.o. operates a well-established brewery business in Slovenia with a rich history spanning over 160 years. The website serves as a comprehensive platform promoting their brewery tours, events, product offerings, and brand experiences, targeting adult consumers interested in beer and related hospitality services. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website employs modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit security policies and headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Královská věnná města

vennamesta.cz

56

Královská věnná města is a cultural and historical regional initiative representing nine Czech towns historically gifted by Czech kings to their queens. The website serves as an informational portal promoting tourism, local events, and cultural heritage in these towns. It targets families, schools, seniors, and active visitors interested in history and regional tourism. The business model focuses on regional promotion and cultural engagement rather than commercial sales. Technically, the site is built on OctoberCMS, uses modern web standards, and integrates Mapy.cz for mapping. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced HTTP security headers and incident response disclosures. WHOIS data is missing, which raises some legitimacy concerns, but the professional content and official social media presence support trustworthiness. Overall, the site is a well-maintained regional cultural portal with moderate technical maturity and good privacy compliance.

YunoHost is an open-source, volunteer-driven non-profit project founded in 2012 that provides an easy-to-use system for self-hosting digital services on personal or organizational servers. It targets individuals, small organizations, and associations seeking to control their own digital infrastructure with minimal technical knowledge. The platform offers a variety of applications including mail hosting, cloud storage, social networks, and more, emphasizing privacy, decentralization, and digital sovereignty. The website reflects a consistent brand and community-oriented approach with multilingual support and active donation campaigns. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, using fonts like Source Sans 3 and icon sets such as Font Awesome. It is hosted by OVH sas, a reputable provider, and the domain is well-established since 2012. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No CMS or major frameworks are explicitly detected. The site lacks advanced security headers and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site uses HTTPS and has domain status protections against unauthorized transfers or deletions. However, it lacks explicit security headers and cookie consent mechanisms, and no vulnerability disclosure or incident response contacts are published. No sensitive data exposure or vulnerabilities are evident in the content. The overall security posture is moderate but could be enhanced by adopting best practices such as enabling DNSSEC, adding security headers, and publishing clear privacy and security policies. Overall, YunoHost presents a trustworthy and professional presence consistent with its open-source community-driven mission. The site is safe, free of adult or questionable content, and provides clear information about its services and community. Strategic recommendations include improving privacy compliance, enhancing security configurations, and publishing vulnerability disclosure information to strengthen trust and security culture.

L

LogTech

logtech.cz

60

LogTech is a Czech Republic-based company specializing in the integration of logistics technologies, including conveyors, sorting systems, software, and robotics, aimed at optimizing warehouse operations. The company leverages nearly three decades of experience to provide tailored automation and material handling solutions supported by comprehensive service and technical support. Their website reflects a professional and consistent brand presence targeting industrial and logistics sectors seeking efficiency improvements. Technically, the website employs modern web standards with responsive design, Google Fonts, and SVG icons, ensuring good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. From a security and compliance perspective, the site includes GDPR and cookie policies with consent mechanisms, but lacks visible incident response contacts, vulnerability disclosure, or security certifications. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy despite the professional site content and clear company contact information. Overall, the website is functional, professional, and privacy-conscious but would benefit from enhanced security practices and domain registration transparency to improve trust and compliance.

O

Obecní knihovna v Zastávce

knihovnazastavka.cz

57

Obecní knihovna v Zastávce operates as a local public library serving the community of Zastávka, Czech Republic. The website provides information about the library's services, including book lending, a reader portal, e-books, and a return box for after-hours book returns. The library is municipally operated and targets local residents including adults, students, and children. The site is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for hosting and content delivery. It employs HTTPS and a cookie consent mechanism to enhance security and privacy compliance. However, the absence of a privacy policy and WHOIS data limits full trust verification. The website is well-structured, mobile-optimized, and provides clear contact information, contributing to a positive user experience.

O

Obec Zastávka

zastavka.cz

54

Obec Zastávka operates as a local government entity serving approximately 2,500 residents in the Brno-venkov district of the Czech Republic. The website provides comprehensive municipal information including news, public notices, official documents, and community services. The site is well-structured, accessible, and includes features such as weather updates and map integration to enhance user experience. The business model focuses on public service and information dissemination to local citizens and visitors. Technically, the website is built on WordPress CMS using the LSVR TownPress theme, with integrations of Google Maps and OpenWeatherMap APIs. It employs modern web technologies including jQuery and responsive design, ensuring good performance and mobile optimization. Accessibility is addressed through a dedicated toolbar offering contrast and font adjustments. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. While explicit security headers and incident response policies are not published, no critical vulnerabilities or exposures were detected. The domain registration is consistent and longstanding, supporting the site's legitimacy. Overall, the website demonstrates a solid digital presence for a municipal government, balancing usability, compliance, and security. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

B

BootstrapMade

bootstrapmade.com

68

BootstrapMade is a specialized provider of free and premium Bootstrap templates and themes, catering primarily to web developers, startups, and businesses seeking professional and responsive website designs. Established in 2013, the company has built a strong market presence with over 9 million downloads and a broad portfolio of templates across multiple industries. Their business model revolves around offering both free templates with footer credits and premium templates with advanced features and dedicated support, supplemented by a visual Bootstrap Template Builder for premium users. Technically, the website is built on modern web standards using Bootstrap 5, HTML5, CSS3, and JavaScript, hosted and protected by Cloudflare infrastructure. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Analytics and tracking are implemented via Google Tag Manager and Cloudflare Insights, reflecting a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS and hosting, providing a solid SSL configuration. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not visibly implemented, and no public security policy or incident response contacts are provided. Forms use secure POST methods, and no sensitive data exposure or vulnerabilities were detected in the HTML content. Overall, BootstrapMade presents a trustworthy and professional online presence with high-quality content and technical maturity. The absence of direct contact emails or phone numbers is mitigated by a contact form. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

O

One by Allegro

onedelivery.cz

63

One by Allegro is a logistics and parcel delivery service operating primarily in the Czech Republic and internationally, affiliated with the Allegro brand. The company offers multiple delivery methods including courier delivery, self-service parcel boxes (One Box), and pickup points (One Point), targeting e-shops, businesses, and individual recipients. The website is professionally designed, mobile-optimized, and provides shipment tracking capabilities. Technically, the site uses modern web technologies and Allegro's proprietary frameworks, with good SSL and basic security headers. However, it lacks explicit privacy and cookie policies, and no incident response or security contact information is provided, which are areas for improvement. The domain registration is recent but consistent with the business launch, and the WHOIS data aligns with the website's claims, supporting legitimacy. Overall, the site demonstrates a moderate to good security posture and business credibility but should enhance privacy compliance and transparency.

A

AREON s.r.o.

kamenynaburni.cz

66

The website www.kamenynaburni.cz represents a professional real estate development project named 'Kameny Na Burni' located in Slezská Ostrava, Czech Republic. The business behind the project is AREON s.r.o., a small-sized real estate developer under the parent company ALUMONT HOLDING a.s. The site offers detailed information about new apartments for sale, including visualizations, construction updates, and contact options. The target audience is potential home buyers seeking premium residential properties in a quiet urban setting. Technically, the website employs modern web technologies such as Svelte, JavaScript ES modules, and integrates Google Analytics and CookieScript for tracking and consent management. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms and contact forms with explicit consent checkboxes. However, explicit security headers and detailed security policies are absent, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced transparency in domain registration and security disclosures.

E

ExxonMobil

exxonmobil.co.uk

72

ExxonMobil is a leading global energy company with a significant presence in the United Kingdom, particularly in the offshore oil and gas sector. The website highlights its joint operations in the North Sea and emphasizes its commitment to sustainability and community investment. The digital infrastructure is modern, leveraging advanced web technologies and compliance tools such as OneTrust for cookie consent and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting the company's enterprise-level stature. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not prominently published. Overall, the website represents a mature digital presence consistent with a major multinational corporation.

E

ExxonMobil

exxonmobil.it

73

ExxonMobil's Italy corporate website presents a professional and comprehensive digital presence focused on the company's energy, lubricants, and chemical business sectors. The site targets a broad audience including business partners, customers, and potential employees, emphasizing sustainability, innovation, and corporate responsibility. The website is well-branded and consistent with ExxonMobil's global corporate identity. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and OneTrust for cookie consent, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and vulnerability disclosure information are absent. The WHOIS data for the subdomain is unavailable, which is typical for corporate subdomains managed under a parent domain. Overall, the site demonstrates a mature digital infrastructure with a high level of professionalism and trustworthiness.

E

Esso S.A.F.

exxonmobil.fr

58

Esso S.A.F., a subsidiary of ExxonMobil, operates in France as a long-established petroleum refining and product commercialization company since 1902. The website presents a professional corporate presence with detailed information about its industrial operations, strategic priorities, and governance. The digital infrastructure leverages modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, ensuring a compliant and user-friendly experience. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security headers and policies are not visible. The absence of WHOIS data limits domain trust verification but the strong corporate branding and linkage to ExxonMobil's global network support legitimacy. Overall, the site is well-structured, accessible, and targeted at stakeholders and the general public interested in the energy sector in France.

O

Online Apotheke Europa B.V.

diskrete-apotheke24.de

49

The website diskrete-apotheke24.de operates as an online pharmacy specializing in the sale of erectile dysfunction medications such as Viagra, Cialis, and Levitra. It targets adult male customers primarily in Germany and Europe, offering discreet, legal, and duty-free pharmaceutical products. The business model is e-commerce focused, with an emphasis on convenience, privacy, and customer satisfaction. The site presents itself professionally with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies including Bootstrap and Google Fonts, and is hosted behind Cloudflare DNS for performance and security. However, there is no evidence of advanced CMS or extensive third-party integrations. Security posture is moderate; while HTTPS is implied, no explicit security headers or incident response policies are visible. Privacy compliance is basic with cookie consent implemented and a privacy policy linked in the impressum page. Overall, the site is functional and trustworthy for its niche but could improve security and compliance transparency.

P

Portaflex s.r.o.

portaflex.cz

56

Portaflex s.r.o. is a Czech Republic based company specializing in the supply and custom manufacturing of building plastics, fittings for doors and gates, and advertising materials. Established since 1997 with a domain registered since 2001, the company serves primarily B2B clients in construction, industrial, and advertising sectors. Their key offerings include lamella curtains, swing gates, sanitary partitions, ventilated facades, and CNC machining services. The website reflects a stable regional player with consistent branding and clear product/service descriptions. Technically, the site uses ISSA CMS with Bootstrap and Google Tag Manager, providing a moderately fast and mobile-optimized experience. Security posture is good with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Privacy compliance is adequate with a linked cookie and privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences.

S

SATJAM, s.r.o.

satjam.cz

57

SATJAM, s.r.o. is a well-established Czech manufacturer specializing in lightweight metal roofing products, including roof coverings, gutters, trapezoidal sheets, and related accessories. The company holds national quality certifications such as Česká kvalita and Zlatá taška, underscoring its market leadership and product excellence. Their website targets construction professionals and end customers seeking durable and modern roofing solutions, offering a comprehensive product range and expert support. Technically, the website is built on ISSA CMS, employs modern web standards, and integrates multiple analytics and marketing tools like Google Analytics (Universal and GA4), Google Tag Manager, and Seznam retargeting, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts, suggesting room for improvement in transparency and security posture. Overall, the domain's WHOIS data confirms legitimacy and long-term operation, supporting trust in the business. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining compliance with evolving privacy regulations.

S

SuperSaaS

supersaas.se

60

SuperSaaS is a well-established Swedish technology company providing a versatile and customizable online booking system tailored for a wide range of industries and business sizes. The platform supports appointment scheduling, resource booking, and integrates with popular payment gateways and third-party services, serving over 190,000 customers globally. The website reflects a mature digital presence with comprehensive content, strong branding, and multilingual support. Technically, the site employs modern web standards, is mobile-optimized, and uses reputable analytics tools. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the exact subdomain is noted but does not detract from the overall legitimacy given the brand's global footprint and consistent domain usage. Overall, SuperSaaS presents a trustworthy and professional online presence with strong market positioning in the SaaS booking system niche.

S

SuperSaaS

supersaas.com.br

53

SuperSaaS is a well-established SaaS company specializing in online appointment and reservation scheduling solutions, serving over 205,000 customers globally. The website is professionally designed, localized in Portuguese for the Brazilian market, and offers comprehensive information about its flexible scheduling software, integrations, and pricing models. The business targets small to medium enterprises and individual professionals across various sectors, providing a scalable and customizable platform with free and paid tiers. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager for performance and user behavior tracking. Hosting is managed via Amazon AWS infrastructure, ensuring reliable uptime and fast content delivery. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS and follows best practices such as asynchronous script loading and no visible exposure of sensitive data. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms, and GDPR compliance is indicated. No direct contact emails or phone numbers are publicly listed, which may affect user trust slightly. Overall, the website presents a low-risk profile with high legitimacy, consistent WHOIS data, and strong trust signals from customer reviews and social media presence. Strategic recommendations include enhancing security header implementation, publishing a security policy or incident response page, and providing clearer contact channels for security and data protection inquiries.