Security Directory

foundation-laserie.fr is a domain owned by a user of Kifdom, a domain marketplace platform operated by KifCorp. The website serves as a placeholder indicating the domain is not for sale and promotes Kifdom's domain sales services. The technical infrastructure uses modern frontend technologies such as Livewire and Alpine.js, with good mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and privacy policies. No forms or contact information are provided, limiting user engagement and compliance. WHOIS data is transparent and consistent with the website's purpose, showing a legitimate domain registration with a valid expiry date. Overall, the website is functional but minimal, with room for improvement in privacy, security, and business transparency.

A

Azimut

azimut.net

61

Azimut is a French technology company specializing in custom digital solutions including interactive kiosks, software platforms, and dynamic digital signage. With over 30 years of experience, they serve a diverse clientele including enterprises, public sector entities, and cultural ticketing points of sale. Their website reflects a mature digital presence with professional design, client testimonials, and certifications that support their market credibility. Technically, the site employs modern web technologies and includes a cookie consent mechanism, indicating awareness of privacy compliance, though explicit privacy and terms policies are not found. Security posture is generally good with HTTPS and tracking tools in place, but lacks some security headers and incident response disclosures. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, Azimut presents as a credible and established digital solutions provider in the French market.

meteoblue AG operates a professional weather forecasting platform offering detailed meteorological data including forecasts, radar, satellite imagery, and weather warnings. The company targets a broad audience from general users to professionals requiring precise weather data. The website demonstrates a mature digital presence with multilingual support, structured data, and integration of modern web technologies such as Google Tag Manager and Google Ads for analytics and advertising. Security posture is good with HTTPS enforced, though explicit security headers could be improved. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency. Overall, the site is professional, trustworthy, and technically sound.

N

Nemocnice Vyškov, příspěvková organizace

nemvy.cz

61

Nemocnice Vyškov, příspěvková organizace, is a regional healthcare provider in the Czech Republic offering a wide range of medical services including inpatient and outpatient care, oncology, laboratories, radiodiagnostics, emergency services, and pharmacy. The website targets patients and the general public, providing comprehensive information about departments, patient services, and public information. The organization positions itself as a trusted regional healthcare institution with certifications such as Baby Friendly and others, enhancing its credibility. Technically, the website employs modern web technologies including Google Web Fonts and Font Awesome icons, with a responsive design optimized for mobile devices and accessibility. The site uses HTTPS with a good SSL configuration, though the Content-Security-Policy header is empty and could be improved. The site includes cookie consent mechanisms and privacy policies compliant with GDPR, reflecting a mature approach to privacy and user consent. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contact information and does not publish a security.txt file, which could enhance transparency and security posture. The absence of WHOIS data reduces trust in domain legitimacy, but the website content and structure suggest a legitimate public healthcare entity. Overall, the website is professional, well-structured, and trustworthy, with room for improvement in security header implementation and domain registration transparency. The risk level is moderate, primarily due to missing WHOIS data and minor security header gaps.

T

TVVU s.r.o.

povodnovyportal.cz

46

TVVU s.r.o. operates the Povodňový portál, a specialized website dedicated to flood management solutions in the Czech Republic. The company provides digital flood plans, flood warning systems, monitoring services, and mobile flood barriers, targeting government agencies and emergency services. The website reflects a niche market position with strong partnerships with Czech hydrometeorological and water management institutions. Technically, the site uses a basic but modern tech stack including Google Analytics and Bootstrap-like CSS classes, hosted via WEDOS. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with no visible security headers and no incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

B

Bubble Group, Inc

valorimetre.com

67

Bubble Group, Inc operates Bubble.io, a leading no-code platform that enables users ranging from first-time founders to experienced engineers to build, design, and launch web applications rapidly without coding. The platform supports SaaS, marketplaces, and CRM applications hosted on Bubble's cloud infrastructure. The website content and metadata confirm a strong market position as a pioneer in visual programming and no-code development tools. Technically, the site leverages modern JavaScript libraries, Google Fonts, and animation frameworks, hosted on Cloudflare with robust SSL encryption. The presence of multiple analytics and marketing tools indicates a mature digital marketing strategy. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

S

Scire Pty Ltd

scire.au

63

Scire Pty Ltd operates a professional Australian journalism website focused on business news and analysis, with its flagship publication Capital Brief targeting founders, executives, investors, and policymakers. The company positions itself as a challenger to the existing media oligopoly in Australia by providing transparent, trustworthy, and practical journalism. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content, although it lacks comprehensive privacy and cookie policies. Technically, the site uses modern web standards and Google Fonts but does not employ advanced security headers or extensive analytics tracking. Security posture is adequate with HTTPS enabled but could be improved with additional headers and policies. WHOIS data is limited due to .au domain privacy restrictions, but the domain appears legitimate based on content and contact information. Overall, the site is a credible media outlet with moderate risk and room for compliance and security enhancements.

E

Ecma International's TC39

tc39.es

55

Ecma International's TC39 is a specialized standards organization focused on the development and maintenance of the JavaScript (ECMAScript) language specification. The website serves as a hub for developers, implementers, and academics to access meeting agendas, proposals, and specification documents. The organization holds a strong market position as the authoritative body for JavaScript standards, with a clear focus on community collaboration and open development. Technically, the website is well-constructed using modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts enhancing typography. The site is mobile-optimized, fast-loading, and accessible, providing a professional user experience. However, there is room for improvement in security headers and explicit privacy and cookie policies. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The absence of explicit security headers and vulnerability disclosure mechanisms suggests an opportunity to strengthen the security posture. No signs of blocking or WAF interference were detected, indicating full accessibility. Overall, the website is trustworthy and professional, with strong business credibility linked to Ecma International. The lack of contact information and privacy policies slightly reduces privacy compliance scores but does not significantly impact overall trust. Strategic recommendations include enhancing security headers, publishing clear privacy and cookie policies, and providing contact channels for security incidents.

T

The Accessibility Project

a11yproject.com

57

The A11Y Project is a well-established community-driven initiative focused on making digital accessibility easier through educational content, resources, and community engagement. The website serves as a hub for accessibility professionals, developers, and designers, offering workshops, checklists, and spotlight features. It operates as a small non-profit entity with a strong reputation in the accessibility space. Technically, the site is built using modern static site generation technology (Eleventy) and hosted on Netlify, ensuring fast performance and excellent mobile optimization. Accessibility is a core focus, reflected in the site's design and content structure. Security posture is good with HTTPS enforced and no exposed sensitive data, though some improvements are recommended such as adding security headers and a cookie consent mechanism. The absence of WHOIS data is unusual but does not detract significantly from the site's trustworthiness given its community presence and transparency. Overall, the site scores well in content quality, technical implementation, and business credibility, making it a reliable resource in its domain.

G

Google

v8.dev

58

The V8.dev website represents Google's V8 JavaScript and WebAssembly engine, a critical open source technology powering major platforms like Chrome and Node.js. The site provides comprehensive technical content aimed at developers and technology professionals, showcasing Google's leadership in high-performance JavaScript engine development. The website is well designed, fast, and optimized for multiple platforms, reflecting a mature digital infrastructure. From a security perspective, the site benefits from Google's robust hosting and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. However, explicit security headers and incident response information are not present, representing areas for improvement. Privacy compliance is strong due to linkage to Google's official privacy policies, though no cookie consent mechanism is detected. Overall, the website is highly credible, trustworthy, and professional, with clear alignment between domain registration and business identity. The absence of contact information and security policy details slightly limits transparency but does not detract significantly from the site's reliability. Strategic recommendations include enhancing security headers, adding incident response contacts, and implementing cookie consent to further strengthen compliance and trust.

L

Left Logic

ffconf.org

53

FFConf is a well-established UK-based web development conference organized by Left Logic, a small Brighton development company specializing in Node.js and front-end technologies. The conference focuses on curated sessions about the future of the web, targeting web developers and technology enthusiasts. The website reflects a professional and consistent brand with a clear event history dating back to 2009. The business model centers on event organization, community engagement, and content dissemination through talks, articles, and job listings. Technically, the website is custom-built without a CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. It uses Plausible Analytics for privacy-conscious visitor tracking and is hosted behind Cloudflare DNS and CDN services. The site is mobile optimized, accessible, and performs well with good SEO practices. However, some security enhancements such as DNSSEC and security headers are missing. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks explicit security headers and cookie consent mechanisms, indicating partial GDPR compliance. No direct contact emails or phone numbers are provided, limiting direct communication channels. No vulnerability disclosure or incident response policies are publicly available. Overall, the security posture is moderate with room for improvement. The overall risk assessment is low given the nature of the site as an informational and event platform with no sensitive transactions. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to enhance trust and compliance.

E

Every Layout

every-layout.dev

59

Every Layout is a specialized educational platform focused on teaching resilient and modern CSS layout techniques. It offers a paid book, custom layout components, and free educational content aimed primarily at web developers and designers. The website demonstrates a strong market position within its niche, supported by testimonials from industry professionals and usage by reputable organizations such as the BBC and W3C. Technically, the site employs modern web standards including Web Components, service workers for offline access, and integrates Stripe for secure payment processing. The design is professional, mobile-optimized, and accessible, providing an excellent user experience. Security posture is solid with HTTPS and secure payment integration, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, with minor areas for improvement in privacy and security transparency.

G

Google

flutter.dev

70

Flutter.dev is the official website for Flutter, an open source multi-platform app development framework maintained by Google LLC. The site targets developers and software engineers, offering comprehensive resources to build, test, and deploy applications across mobile, web, desktop, and embedded platforms from a single codebase. The website reflects Google's strong market position in developer tools and frameworks, supported by a large global community and integration with Google's ecosystem services such as Firebase and Google Ads. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Alpine.js, and integrates Google services like Google Analytics and Tag Manager for analytics and tracking. The site is hosted on Google Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security best practices are observed with HTTPS enforcement and use of Google reCAPTCHA on forms, although explicit security headers are not visible in the HTML content. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, linking to Google's comprehensive privacy and cookie policies, and providing a cookie consent mechanism. However, the site lacks explicit incident response contact details and a public vulnerability disclosure page. Overall, the website is highly trustworthy, professional, and secure, reflecting Google's standards. Strategically, Flutter.dev serves as a critical platform for Google to engage the developer community, promote its cross-platform framework, and integrate with its broader cloud and advertising ecosystem. The site’s design, content quality, and technical implementation support a high level of user trust and engagement.

F

Filament Group, Inc.

filamentgroup.com

55

Filament Group, Inc. is a specialized UI design studio focused on creating intuitive, accessible, and resilient websites and web applications. Established since 2001, the company has built a strong reputation through collaborations with notable clients such as Boston Globe, LEGO, and vineyard vines. Their core competencies include responsive design, accessibility, and scalable UI design systems, targeting clients who prioritize exceptional user experience. The website reflects a professional and consistent brand image with high-quality content and multimedia presentations. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with references to Bootstrap for UI components. The site is well-optimized for mobile devices and accessibility, demonstrating good SEO practices. However, there is no evidence of a CMS or hosting provider details. Performance appears fast with no broken elements detected. From a security perspective, the site lacks explicit security headers and privacy-related policies such as privacy and cookie policies, which are critical for compliance with regulations like GDPR. No forms collecting sensitive data are present, reducing immediate risk, but the absence of incident response contacts and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is missing, which raises concerns about domain registration transparency, although the business legitimacy is supported by the website content and client portfolio. Overall, the website scores well on content quality, technical implementation, and business credibility but falls short on privacy compliance and some security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

T

ThinkDoBeCreate - Stephanie Eckles

moderncss.dev

62

ModernCSS.dev is a specialized educational website authored by Stephanie Eckles under the ThinkDoBeCreate brand, focusing on modern CSS solutions and frontend development techniques. The site offers a rich collection of articles, tutorials, and resources aimed at frontend developers and CSS enthusiasts, positioning itself as a niche expert content provider with strong author credibility and community endorsements. Technically, the site is built using the Eleventy static site generator, leveraging modern web standards including HTML5, CSS3, and JavaScript, with excellent mobile optimization and fast performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. The site uses minimal tracking via Plausible Analytics and monetizes through Carbon Ads and BuySellAds, maintaining a good balance between user experience and advertising. Overall, the website is trustworthy, professional, and well-maintained, though it could improve compliance by adding privacy and cookie policies and enhancing security headers.

C

CVVZ

cvvz.cz

51

CVVZ is a non-profit organization that hosts an annual event focused on youth resilience, wellbeing, and experience exchange in Kolín, Czech Republic. The event features lectures, workshops, and volunteer opportunities, supported by regional authorities and national partners. The website demonstrates a good level of professionalism with consistent branding and clear navigation, targeting youth, volunteers, and educators. Technically, the website uses modern web technologies including ES modules, Bootstrap, and Google Fonts, with a moderate performance profile and good mobile optimization. However, there is no explicit CMS or hosting provider information. Security headers are not detected, and privacy and cookie policies are missing, indicating areas for improvement in compliance and security posture. The security posture is moderate with HTTPS usage implied but lacking visible security headers and vulnerability disclosures. The absence of WHOIS data is a concern for domain legitimacy, though the website content and partner endorsements suggest a legitimate and trusted organization. Overall, the site is safe for general audiences and does not contain any adult or explicit content. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

C

Cofidis SA

cofidis.fr

74

Cofidis is a well-established French financial services company specializing in online consumer credit, personal loans, credit refinancing, and credit insurance. With over 35 years of experience and a strong market presence in France, Cofidis offers a comprehensive range of financing solutions tailored to individual customer needs. The website reflects a mature digital infrastructure with modern technologies, responsive design, and extensive content that supports user engagement and trust. The integration of third-party review platforms like Trustpilot and visible certifications further enhance credibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in France and does not detract from the site's legitimacy. Overall, Cofidis demonstrates a strong business and digital maturity with good compliance to privacy regulations and user experience standards.

V

Vojenské lesy a majetky SR, š.p.

vlm.sk

63

Vojenské lesy a majetky SR, š.p. is a Slovak state enterprise responsible for the ecological management of forest and agricultural lands within military training areas. The organization operates through a general directorate and multiple branch offices, providing services such as forestry management, agricultural activities, water management, and public education. The website reflects a professional government portal with clear contact information and compliance with privacy regulations. Technically, the site uses modern web technologies including Bootstrap and Cookiebot for consent management, ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

Aglo Solutions s.r.o. is a Slovakian technology company specializing in custom web applications, website and e-shop development, online marketing, and server management services. Established in 2003, the company has over 15 years of experience and serves more than 400 clients, positioning itself as a trusted local provider with ISO 9001 certification indicating a commitment to quality management. Their website reflects a professional and consistent brand image targeting businesses seeking tailored digital solutions. Technically, the site is built on the SysCom CMS platform, uses modern web technologies, and integrates Google Analytics for traffic insights. The site is mobile optimized and provides clear navigation and content relevant to its audience. Security-wise, the website uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and incident response disclosures, which are recommended for enhanced security posture. Overall, the domain registration details are consistent with the business claims, supporting the legitimacy and trustworthiness of the company.

F

Fun Rádio

funradio.sk

58

Fun rádio is a prominent Slovak media company operating a popular radio station and digital platform offering music hits, podcasts, news, and contests. The website demonstrates a mature digital infrastructure using modern technologies such as Vue.js, Cookiebot for cookie consent, and Google Tag Manager for analytics and marketing. The security posture is strong with HTTPS enforced and standard security headers present, although explicit privacy and terms of service documents are missing, representing a compliance gap. The site is well-optimized for mobile and desktop users, providing a good user experience with clear navigation and relevant content. Overall, the domain registration and WHOIS data align with the business claims, supporting legitimacy and trustworthiness.

F

Funding Centre

fundingcentre.com.au

65

Funding Centre is an Australian-based organization providing a comprehensive grants database and fundraising capacity building services primarily targeting not-for-profits, schools, businesses, government entities, and individuals. The website offers subscription-based membership plans granting access to a rich database of live grants, fundraising tools, and resources, positioning itself as a leading platform in the Australian fundraising ecosystem with over 20 years of experience. The parent company, Our Community, supports the platform, enhancing its credibility and market presence. Technically, the website employs modern web technologies including Bootstrap 4, FontAwesome, Google reCAPTCHA v3, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices and moderate performance, with room for improvement in accessibility and explicit security header implementation. From a security standpoint, the site enforces HTTPS and integrates bot protection via reCAPTCHA. However, it lacks explicit security headers and a visible security or incident response policy. Privacy compliance is partially addressed with a comprehensive privacy policy hosted on the parent domain, but no cookie consent mechanism is present. WHOIS data is privacy-protected, which is typical for such organizations, and no suspicious patterns were detected. Overall, the website presents a professional, trustworthy, and functional platform with moderate technical maturity and a solid business model. Strategic improvements in privacy compliance and security transparency would enhance its risk posture and user trust.

S

Sensitech Inc.

sensitech.com

74

Sensitech Inc. is a well-established company specializing in supply chain visibility solutions, particularly focusing on real-time temperature monitoring and cold chain logistics for industries such as life sciences, food, and industrial sectors. The company operates under the parent organization Carrier Global Corporation, indicating a strong market position and corporate backing. Their website reflects a mature digital presence with comprehensive product and solution offerings, targeting business customers requiring advanced supply chain monitoring technologies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services like Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. The use of Carrier CMS suggests a tailored content management approach. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy and regulatory compliance. However, explicit security headers are not clearly visible in the provided data, and no dedicated security or incident response policies are published on the site. The WHOIS data for the domain is unavailable or not found, which is unusual for a company of this stature but does not detract significantly from the overall trustworthiness given the strong branding and parent company association. Overall, Sensitech's website demonstrates a high level of professionalism, technical maturity, and compliance with privacy standards, making it a trustworthy and credible source for its target audience. Strategic improvements in publishing explicit security policies and ensuring WHOIS transparency could further enhance trust and security posture.

P

Pivovarna Laško Union d.o.o.

pivovarnalaskounion.com

58

Pivovarna Laško Union d.o.o. is the largest beer and beverage producer in Slovenia, with a rich 200-year tradition in brewing. The company emphasizes sustainability and social responsibility, positioning itself as a leader in the Slovenian beverage market. Their website reflects a professional and modern digital presence, showcasing their brands and corporate values. Technically, the site is well-implemented with modern HTML5 and CSS, mobile responsiveness, and a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and age verification for alcohol content, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data are consistent with the business claims, supporting legitimacy and trustworthiness.

C

Cognigy GmbH

cognigy.ai

75

Cognigy GmbH is a German-based technology company specializing in conversational AI solutions designed to automate and enhance customer service operations. Positioned as a leader in the conversational AI market, as evidenced by its recognition in the 2025 Gartner Magic Quadrant, Cognigy offers a comprehensive AI platform that supports voice and chat AI agents, agent assist tools, and integrations with major contact center platforms. The company targets enterprise customers seeking to deploy AI-powered customer service automation across multiple channels and languages. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including JavaScript, CSS3, and HTML5, with embedded video content hosted on Vimeo. The site demonstrates good digital maturity with mobile optimization, accessibility considerations, and SEO best practices. Analytics and marketing tools such as Google Tag Manager and HubSpot Analytics are employed with appropriate cookie consent mechanisms, reflecting compliance with privacy regulations including GDPR. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. No exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and a vulnerability disclosure policy are not publicly available, representing areas for improvement. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with a reputable technology enterprise. The absence of WHOIS data is a minor concern but is offset by strong business and trust indicators. Strategic recommendations include enhancing transparency around security incident response and vulnerability reporting to further strengthen trust and compliance.

R

RMC BFM ADS

rmcbfm-ads.com

55

RMC BFM ADS is a prominent French advertising agency specializing in the commercialization of advertising spaces for major media brands such as BFM and RMC. Positioned as the third largest private TV advertising agency in France, it offers a comprehensive portfolio of advertising solutions across television, radio, digital platforms, and local channels. The company targets advertisers and businesses seeking to enhance brand visibility and performance through multi-channel campaigns. The website reflects a professional and consistent brand image with clear service offerings and a focus on digital-first advertising strategies. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data for SEO. It is mobile-optimized with good navigation clarity and moderate performance. The presence of cookie consent mechanisms and detailed privacy policies indicate a commitment to GDPR compliance. However, no explicit security policies or incident response information are published, which could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and vulnerability disclosure information suggests room for enhancement in security posture. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and consistent branding. Overall, RMC BFM ADS presents a trustworthy and professional online presence suitable for its business domain. Strategic improvements in security transparency and WHOIS data availability would further strengthen its credibility and compliance posture.

Harvest Group SA is a Swiss-based international commodities merchant specializing in agricultural products such as wheat, corn, soy, and barley. The company provides comprehensive services including international logistics, financing, risk management, and advisory services, positioning itself as a key player in global commodity trading and supply chain management. The website reflects a medium-sized enterprise with a professional online presence and consistent branding. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript with the Slick Carousel library for UI elements. The site is hosted under a reputable registrar and DNS provider, with HTTPS enabled ensuring secure communications. Mobile optimization and navigation clarity are good, though accessibility features are basic and SEO optimization is moderate. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC. There is no visible security policy or incident response information, and no cookie consent mechanism is implemented, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy and professional, with clear contact information and business details. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

The website zrsr.sk is the official portal of the Ministry of Interior of the Slovak Republic, providing public access to the Trade Licensing Register. It serves as a government service platform enabling users to search for business entities by various criteria such as company ID, trade name, personal names, and addresses. The site targets Slovak citizens, entrepreneurs, and the general public seeking official business registry information. The business model is a public service with no commercial intent, positioned as a trusted government resource. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript ES modules. It uses the GOV.UK frontend framework and a custom design system (idsk-frontend) tailored for Slovak government services. The site is mobile-optimized and accessible, with moderate performance. Security measures include HTTPS enforcement and a custom CAPTCHA widget to prevent automated abuse. However, some security best practices such as security headers and vulnerability disclosure mechanisms are not implemented. From a security perspective, the site demonstrates a solid baseline with encrypted communications and input validation. The absence of security headers and vulnerability disclosure policies represents areas for improvement. No exposed sensitive data or vulnerabilities were detected in the analyzed content. Privacy compliance is partial, with cookie policy present but lacking explicit consent mechanisms and a dedicated privacy policy page. Overall, the website is a credible, professional government service with high trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, implementing explicit cookie consent, and adding vulnerability disclosure information to improve transparency and security posture.

B

bart.sk s.r.o.

bart.sk

64

bart.sk s.r.o. is a well-established Slovak technology company specializing in the development of custom digital products, including e-commerce platforms, web and mobile applications, and AI implementations. With over 27 years of experience, the company serves both B2B and B2C clients, positioning itself as a trusted partner in digital transformation. Their website showcases detailed case studies, client testimonials, and a strong social media presence, reflecting a mature and professional business model. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates advanced analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity and technical competence. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. The presence of ISO 9001 certification further underscores their commitment to quality and information security. However, the absence of explicit security headers and a public incident response or vulnerability disclosure policy suggests areas for improvement. Overall, bart.sk demonstrates a strong security posture and business credibility with no critical vulnerabilities detected. The website is safe for general audiences and complies well with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

I

Instant System

instant-system.com

62

Instant System is a French-based company founded in 2013 specializing in white-label passenger information applications and Mobility as a Service (MaaS) solutions. The company collaborates closely with local public transport authorities and operators to deliver scalable and modular mobility solutions across 80 territories worldwide. Their offerings include journey planning, ticketing integration, and back office management tools tailored for cities, transport partners, and corporations managing employee mobility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting B2B clients in the transportation sector. Technically, the site uses modern JavaScript frameworks such as Knockout.js and integrates cookie consent management via tarteaucitron.io, ensuring GDPR compliance in cookie handling. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements are recommended in security headers and explicit security policies. Overall, the site demonstrates high business credibility and technical maturity with minor gaps in privacy documentation.

The website kobotdev.com currently displays a maintenance placeholder page titled 'The Genealogy Reporter - System Maintenance | Under Construction'. The content indicates a temporary system upgrade in progress with no active business or service information presented. The domain is registered since 2008 with GoDaddy.com, LLC and shows legitimate registration status with client protection flags, but DNSSEC is not enabled. The website lacks privacy, cookie, and terms of service policies, as well as any contact information or forms. No analytics or tracking technologies are detected, and social media links are placeholders without real URLs. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with no CMS or frameworks detected. The site is mobile optimized with a visually appealing design but limited content and navigation. Security posture is weak due to missing security headers and lack of HTTPS information, though no critical vulnerabilities or malicious content are evident. Overall, the site appears to be temporarily offline for maintenance with minimal risk but lacks compliance and business credibility indicators.

I

IPPON-SHOP.COM

ippon-shop.com

64

IPPON-SHOP.COM is a specialized e-commerce platform established since 2003, serving martial arts practitioners including Judoka, Karateka, and BJJ fighters. The site offers a wide range of high-quality martial arts products, including their own brand IPPON GEAR, and targets both individual consumers and clubs. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies and tracking tools such as Google Analytics and Facebook Pixel. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and comprehensive product categorization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some explicit security headers which could enhance protection. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the website presents a professional and trustworthy front for its business, but domain registration details should be verified to strengthen trust.

I

INSPIRE CZ s.r.o.

clubspire.cz

62

CLUBSPIRE.cz is a Czech-based software solution specializing in comprehensive management systems for fitness and sports centers. The platform offers a wide range of modules including reservation systems, membership management, email marketing, access control, and point of sale functionalities. With a client base of over 200 sports centers, CLUBSPIRE positions itself as a reliable and efficient tool for business managers in the fitness industry. The website reflects a professional and consistent brand image, supported by active content updates and social media engagement. Technically, the website employs a modern technology stack including Java-based backend architecture, Google reCAPTCHA for form security, and Google Analytics for user tracking. The site is optimized for multiple platforms including Windows, Linux, and Apple, and demonstrates good mobile responsiveness and SEO practices. Security measures such as HTTPS and consent-based cookie management are implemented, though some security headers could be enhanced. From a security perspective, the site shows a solid posture with encrypted communications and protection against automated abuse via CAPTCHA. However, the absence of published security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits the ability to fully verify domain legitimacy, though the professional presentation and active business operations mitigate some concerns. Overall, CLUBSPIRE.cz is a credible and well-maintained business website with good technical and security foundations. Strategic enhancements in security policy publication, WHOIS transparency, and accessibility would further strengthen its trustworthiness and compliance posture.

Obec Zbýšov's official website serves as a comprehensive portal for local government information, community news, and public services for the residents of the Vyškov district in the Czech Republic. It provides access to municipal documents, event calendars, contact information, and reservation systems for local facilities, positioning itself as a trusted source for civic engagement and administrative transparency. The website targets local residents and stakeholders interested in municipal affairs, operating under a government public service model with a small organizational size. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services including reCAPTCHA for form security and Google Translate for multilingual support, alongside OpenWeatherMap for weather updates. The site demonstrates moderate performance with good mobile optimization and basic accessibility features, though there is room for improvement in SEO and security header implementation. From a security perspective, the website enforces HTTPS and employs Google reCAPTCHA to protect its contact form, minimizing exposure to automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and detailed security or incident response policies indicates areas for enhancement. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, fulfilling its role as a municipal information hub. Strategic improvements in security policies, privacy mechanisms, and technical optimizations would further strengthen its posture and user trust.

M

Městský úřad Vyškov

vyskov-mesto.cz

45

The website vyskov-mesto.cz is the official municipal portal for the city of Vyškov, Czech Republic, providing comprehensive information about city administration, services, news, events, and contact details. It serves residents, visitors, and local businesses with a broad range of public services and community resources. The site is well-established, with a domain registered since 2000, reflecting a mature digital presence. Technically, the site uses a custom CMS (vismo) with common web technologies including Bootstrap and jQuery, though the jQuery version is outdated and poses potential security risks. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, but the absence of visible security headers and a formal security policy indicates room for improvement. Privacy compliance is good, with a clear privacy and cookie policy, though the cookie consent mechanism could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use, supporting the city’s communication and service delivery objectives effectively.

U

UVEX ARBEITSSCHUTZ GMBH

uvex-sportstyle-rx.com

68

The website www.uvex-sportstyle-rx.com represents UVEX ARBEITSSCHUTZ GMBH's specialized product line for prescription sports eyewear. It targets sports enthusiasts requiring high-quality, safe, and stylish prescription glasses for various sporting activities. The site is professionally designed, mobile-optimized, and uses modern technologies including TYPO3 CMS and Amazon Cloudfront CDN. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. WHOIS data is missing, which slightly reduces trust but the overall professional presentation and consistent branding support legitimacy. Recommendations include publishing explicit security and incident response policies and improving accessibility features.

I

INSPIRE CZ s.r.o.

inspire.cz

67

INSPIRE CZ s.r.o. is a Czech-based digital agency specializing in custom web development, e-commerce solutions, customer portals, reservation systems, and online marketing. With over 15 years of experience, they position themselves as a trusted partner for businesses seeking to enhance their online presence and operational efficiency. The website reflects a professional and modern digital infrastructure, utilizing contemporary web technologies and analytics tools to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. However, the absence of WHOIS data for the domain introduces a moderate trust concern that should be addressed. Overall, INSPIRE CZ demonstrates a mature digital presence with solid business credibility and compliance practices.

K

KNX Association

knx.org

73

KNX Association is a globally recognized standards organization specializing in smart home and building automation solutions. The website targets professionals in the automation industry, offering certification, training, and software tools such as ETS6. The organization positions itself as a leader with over 500 manufacturer members and 8000 certified products, emphasizing sustainability, security, and IoT integration. The website is professionally designed, well-structured, and provides comprehensive resources for its audience. Technically, the site uses a modern CMS (Weblication®), integrates various JavaScript libraries including jQuery and YouTube APIs, and employs HTTPS with good SSL configuration. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility features. Privacy and cookie policies are clearly presented, indicating GDPR compliance. Security posture is solid with HTTPS and secure form handling, though explicit security headers and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or suspicious content were detected. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns. Overall, the website reflects a mature digital presence with strong business credibility and a good security baseline. Strategic improvements in security headers and incident response transparency would enhance trust further.

E

Eplan

eplan.com

68

Eplan is a well-established provider of cloud-based engineering software solutions, targeting engineers and manufacturing professionals globally. Their website demonstrates a mature digital presence with comprehensive product offerings such as Eplan Platform, eStock, eManage, eView, eBuild, and Data Portal. The site is built on Adobe Experience Manager, leveraging modern web technologies and providing a seamless user experience with strong mobile optimization and accessibility. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The WHOIS data for the domain is missing, which raises minor concerns but does not detract significantly from the site's professionalism and trustworthiness. Overall, Eplan's website reflects a large enterprise with consistent branding, good content quality, and a strong market position within the technology and manufacturing sectors.

I

International Military Sports Council

milsport.one

52

The International Military Sports Council (CISM) operates as a prominent non-profit international organization dedicated to promoting military sports and fostering friendship through sport among armed forces worldwide. With 138 member countries, it organizes a wide range of military sports events, championships, and academic activities, positioning itself as a leading entity in the military sports domain. The website reflects this mission with comprehensive event coverage, news updates, and multilingual regulatory documents, targeting military personnel and associated organizations globally. Technically, the website employs a CMS named MasterEdit and integrates modern web technologies including Google Analytics and Tag Manager for tracking, alongside standard JavaScript libraries like jQuery. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, which is common for international non-profits but slightly impacts trust assessment. Overall, the website is professional, content-rich, and trustworthy, serving its niche audience effectively. Strategic improvements in security transparency and accessibility could enhance its posture further.

N

Netpromotion group s.r.o.

netfirmy.cz

62

Netfirmy.cz operates as the largest regional business directory and lead generation platform focused on Eastern Bohemia, Czech Republic. It provides verified company listings, user ratings from Google and Facebook, and facilitates business inquiries with over 120,000 monthly requests. The website is owned by Netpromotion group s.r.o., a company with over 19 years of market presence, positioning itself as a trusted regional business resource. The platform targets general users seeking reliable local businesses and services.

S

Statutární město Mladá Boleslav

mb-net.cz

51

The website https://mb-net.cz/ is the official online presence of the statutory city of Mladá Boleslav, Czech Republic. It serves as a comprehensive portal for residents and visitors, offering city information, municipal services, news updates, event calendars, and contact details. The site is well-positioned as a government entity's digital platform, providing essential public services and information in Czech language. The business model is focused on public service delivery and citizen engagement, with no commercial intent. The domain's long history since 1997 supports its credibility and established presence. Technically, the website employs a custom CMS (vismo®), modern web standards including HTML5, CSS3, and JavaScript, and integrates Google services such as reCAPTCHA for form security and Google Analytics for traffic analysis. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent and GDPR compliance mechanisms are implemented effectively. From a security perspective, the site uses HTTPS with excellent SSL configuration, employs reCAPTCHA to protect forms, and manages cookie consent responsibly. However, it lacks explicit published security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is a trustworthy, professional municipal portal with good content quality and technical implementation. Strategic improvements include publishing security and incident response policies, enhancing security headers, and possibly adding terms of service to improve transparency and compliance.

M

Městský úřad Česká Lípa

mucl.cz

50

The website www.mucl.cz serves as the official municipal portal for the city of Česká Lípa in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, public services, events, and contact details. The site is well-structured, professionally designed, and targets local citizens and stakeholders. It offers key services such as news updates, event calendars, online forms, and access to municipal resources. The presence of official branding and social media links reinforces its legitimacy as a government entity. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate widgets. The site uses a custom CMS platform (vismo®) tailored for municipal websites. Performance and mobile optimization are good, with accessibility features implemented to support diverse users. Security measures include HTTPS enforcement and CAPTCHA protection on forms, alongside a cookie consent mechanism compliant with GDPR. Security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable transparency gap, though the website content and official contact information strongly indicate a legitimate government presence. No signs of malicious content or blocking mechanisms were detected, and the site maintains a safe content rating suitable for general audiences. Overall, www.mucl.cz is a credible, well-maintained municipal website with good technical and security practices. Strategic improvements in domain transparency and security policy disclosures would further strengthen trust and compliance.

A

Alaio Inc.

bitrix24.net

71

Bitrix24, operated by Alaio Inc., is a comprehensive SaaS platform offering a free online workspace for businesses, integrating CRM, task management, collaboration, and sales tools. It targets businesses and teams seeking to streamline sales, communication, and project management. The platform is positioned as a mature and established player in the business software market, offering extensive features including AI-powered CoPilot tools across various modules. Technically, the website leverages the Bitrix Framework and modern web technologies, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, though security headers and incident response details are not evident. The site is transparent with privacy and cookie policies, showing GDPR compliance. Overall, Bitrix24 presents a professional, trustworthy, and feature-rich platform with room for security enhancements.

S

SK Slavia Praha

veznakuhvezdaje.cz

48

SK Slavia Praha is a well-established Czech football club celebrating its 130th anniversary with a new visual identity and logo. The website serves as a dedicated platform to showcase this rebranding effort, including the club's history, logo evolution, custom font, fanshop merchandise, and related brand extensions. The site targets fans, sports enthusiasts, and customers interested in official club products. Technically, the website uses modern web standards with custom fonts, video content, and Google Analytics for visitor tracking. The site is mobile-optimized and professionally designed, providing an excellent user experience. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies. No contact information or incident response details are provided, which are areas for improvement. Overall, the domain registration aligns with the website's purpose, indicating legitimacy. The site is safe, free of adult or questionable content, and maintains consistent branding.

S

StaMat CZ, s.r.o.

stamatcz.cz

45

StaMat CZ, s.r.o. is a small Czech Republic based company specializing in earthworks, demolition, construction waste recycling, and heavy transport services primarily serving the Pardubice region and surrounding areas. The company operates a waste collection and recycling center and offers a range of construction-related services. The website is professionally designed with clear navigation and relevant content, supporting the company's local market positioning. Technically, the site uses standard web technologies including jQuery and Facebook SDK, with a cookie consent mechanism in place, indicating awareness of privacy compliance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trust but the website content and contact details support legitimacy. Overall, the site presents a trustworthy and functional online presence for a regional construction services provider.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible or blocked. The page contains no business-related content, contact information, or compliance policies. Instead, it hosts the Chrome Dinosaur offline game code and assets, which is a default error placeholder in Chrome browsers when a page cannot be loaded. Due to the lack of accessible content, no meaningful business or security posture can be assessed. The technical infrastructure is limited to standard HTML, CSS, and JavaScript for the offline game, with no external dependencies or analytics detected. Security posture cannot be fully evaluated due to missing headers and SSL information. Overall, the website is non-functional at this URL, and no privacy or compliance information is present.

V

Vodárny a čerpadla

vodarnycerpadla.cz

51

Vodárny a čerpadla is a Czech-language website providing practical tips for everyday life, focusing on household care, gardening, kitchen ideas, and DIY repairs. The site targets a general audience interested in improving home and garden maintenance with easy-to-follow advice. The business operates as a content publisher with a niche focus, maintaining a consistent brand and good content quality. Technically, the website uses standard modern web technologies including HTML5, CSS3, and JavaScript, with Cloudflare DNS services. The site is mobile optimized and has good SEO practices but lacks advanced frameworks or CMS identification. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is limited, with no cookie consent mechanism and only basic privacy and terms pages. WHOIS data is inconsistent, showing a future domain creation date, which raises some trust concerns but does not detract from the site's professional presentation and content accessibility. Overall, the site is functional and trustworthy for its content niche but would benefit from enhanced security and privacy measures.

S

Statutární město Teplice

teplice.cz

51

The website represents the official portal of the statutory city of Teplice, Czech Republic. It serves as a comprehensive resource for residents, visitors, and local businesses by providing municipal services, news updates, event calendars, and contact information. The site is well-structured, professionally designed, and targets a broad audience including families, seniors, and tourists. The business model is government/public service with a focus on transparency and accessibility. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, Google reCAPTCHA, and a Voiceflow chatbot for enhanced user interaction. It uses the Vismo CMS platform and integrates Google Translate for multilingual support. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements cookie consent mechanisms compliant with GDPR. However, it lacks a dedicated security policy page and incident response contact details. Security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its public service role with moderate to good technical and security maturity. Strategic enhancements in security transparency and header implementation would further strengthen its posture.

A

AGRO CS a.s.

agrocs.cz

60

AGRO CS a.s. is a Czech Republic-based company operating in the manufacturing sector, primarily focused on agricultural machinery and services. The company targets agricultural professionals and businesses, positioning itself as a regional player in the agricultural manufacturing market. The website is professionally designed using the Wix platform, featuring structured data that enhances search engine understanding and user experience. Technical infrastructure is modern with HTTPS enforced, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data due to privacy protection limits full trust assessment, though the website content and presentation suggest a legitimate business. Security posture is moderate with room for improvement in headers and policy disclosures. Overall, the site is safe, business-focused, and suitable for its target audience.

W

web design software

mobiri.se

43

Mobirise is a well-established technology company founded in 2017 that offers a free, AI-powered no-code web design software targeting individuals and businesses seeking easy website creation solutions. The platform supports multiple operating systems including Windows, MacOS, Linux, and Android, and emphasizes features such as drag-and-drop editing, customizable templates, offline mode, and e-commerce integration. The company holds a strong market position with over 2.5 million users and positive expert and user reviews, reflecting a mature and trusted product offering. Technically, the website is built on modern web standards including Bootstrap 5 and uses Cloudflare for DNS management. The site is mobile-optimized, fast-loading, and SEO-friendly, with a clean and professional design. However, some compliance gaps exist due to the absence of visible privacy and cookie policies, and no explicit security headers are detected, which could be improved to enhance security posture and regulatory adherence. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data or vulnerable libraries. The domain registration is consistent and long-term, supporting the legitimacy of the business. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Overall, the security posture is good but could benefit from additional security headers and formalized privacy and incident response policies. The overall risk is low with strong business credibility and technical maturity. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing vulnerability disclosure and incident response information to further enhance trust and compliance.