Security Directory

F

Ferrino

ferrino.sk

51

Ferrino is a well-established outdoor equipment retailer with a rich history dating back to 1870. The company offers a comprehensive range of products including backpacks, sleeping bags, tents, clothing, and accessories for outdoor enthusiasts. Their market position is strong in Slovakia and the Czech Republic, supported by a professional e-commerce platform and physical store pickup options. The website demonstrates a good level of digital maturity with modern technologies and responsive design, catering well to their target audience of hikers, climbers, and outdoor lovers. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

R

RI OKNA

ri-okna.fr

53

RI OKNA is a traditional Czech manufacturer specializing in high-quality windows and doors, operating since 1994 with nearly 30 years of experience. The company targets both domestic and international markets, offering a wide range of products including PVC, aluminum, wood, and composite windows and doors. Their business model focuses on manufacturing and direct sales, emphasizing quality materials and customer service. The website is professionally designed, multilingual, and optimized for French-speaking customers, reflecting a medium-sized enterprise with a strong market position in manufacturing.

K

Klasik dutalon

klasikduatlon.cz

42

The website klasikduatlon.cz is dedicated to organizing and promoting duathlon events in Příbram, Czech Republic, targeting athletes and sports enthusiasts. It provides detailed information about race categories, schedules, registration, and event logistics. The site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate mobile optimization and basic SEO features. However, it lacks critical security features such as HTTPS and security headers, and does not provide privacy or cookie policies, which are essential for compliance and user trust. The domain registration data is inconsistent with the website's content timeline, raising questions about the domain's history and ownership transparency. Overall, the site serves its business purpose but requires significant improvements in security and compliance to enhance trustworthiness and protect users.

P

Poweryoga-pilates

poweryoga-pilates.cz

35

Poweryoga-pilates.cz is a small local fitness and wellness service provider based in Příbram, Czech Republic, specializing in Power Yoga and Pilates classes. The website serves as an informational and promotional platform for the business, offering schedules, articles, videos, and contact details. The business appears well-established with a domain age since 2009, targeting a general audience interested in health and fitness. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and integrates several plugins for forms, galleries, and video embedding. The site is mobile optimized and uses HTTPS, ensuring secure communication. Security posture is moderate with use of Google reCAPTCHA and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Contact information is clearly presented, including email, phone, and physical addresses, enhancing business credibility. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements.

Refaglass s.r.o. is a Czech-based manufacturer specializing in foam glass insulation products made from 100% recycled glass. The company targets construction professionals and distributors, offering thermal insulation materials suitable for various building applications. Their market position is niche, focusing on sustainable and innovative building materials within the Czech and Slovak markets. The website reflects a professional presence with clear product information, contact details, and social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is fair with HTTPS enforced and cookie consent implemented; however, the absence of security headers and a privacy policy page are notable gaps. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and establishing a vulnerability disclosure process to improve overall trust and compliance.

P

Potisk Vylita

vylita.cz

39

Potisk Vylita is a Czech Republic-based company specializing in high-quality one- and multicoloured industrial and promotional printing services. Positioned as one of the largest printing companies in the Czech Republic, they offer rapid turnaround times including bulk orders, design proposals, and sample evaluations. Their business model focuses on B2B manufacturing and printing services targeting companies requiring customized printed products. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, including a GDPR-compliant privacy policy page. Technically, the website is built on WordPress using Bootstrap and jQuery, with Google reCAPTCHA implemented for form security. The site uses HTTPS with good SSL configuration but lacks some advanced security headers. Advertising is limited to Google Ads and Seznam Retargeting, with minimal user tracking observed. The site lacks explicit cookie consent mechanisms and security or incident response policies. Security posture is solid with HTTPS and reCAPTCHA, but could be improved by adding security headers and publishing incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. Overall, the site is safe, business-focused, and compliant with GDPR, with room for security and privacy enhancements. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and maintaining up-to-date software to enhance trust and compliance.

Spolek Prokop Příbram is a Czech non-profit association dedicated to preserving the mining heritage and cultural traditions of the Příbram region. Founded in 1992, it continues the legacy of a historical mining student association and engages the community through cultural, educational, and sporting events. The organization collaborates with local government, museums, and other cultural institutions to maintain mining sites and promote regional history. Technically, the website is built on WordPress using Bootstrap and jQuery, hosted under a Czech registrar with DNS servers from forpsi.it/cz/net. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. No advanced analytics or tracking tools are detected, reflecting a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data aligns well with the website's stated purpose and location, supporting legitimacy. Overall, the website presents a trustworthy and professional front for a small non-profit cultural association but should enhance privacy compliance and security headers to improve its security posture and user trust.

T

Točírna z.s.

tocirna.cz

42

Točírna z.s. is a small ceramic workshop located in Příbram, Czech Republic, offering a variety of ceramic courses and workshops for children and adults. The business focuses on providing a calm and family-friendly environment for creative ceramic activities, including regular weekly courses, one-time thematic workshops, open studio sessions, and summer camps. The website is professionally designed with clear navigation and relevant content tailored to its target audience of ceramic enthusiasts and learners. Technically, the site is built on WordPress with common plugins for galleries, forms, and GDPR compliance, and it uses HTTPS with Google reCAPTCHA for security on contact forms. However, the absence of WHOIS data for the domain reduces the ability to fully verify domain legitimacy, though the presence of valid company registration and contact details supports trustworthiness. Overall, the website demonstrates good digital maturity for a small local business with appropriate privacy and security measures in place.

E

Etheris

etheris.cz

32

Etheris is a small artisanal business based in the Czech Republic specializing in unique, handcrafted ceramic products. The website showcases a variety of original ceramic items, emphasizing the artistic and positive energy aspects of the products. The business supports a local ceramic workshop, Točírna z.s., and operates primarily through direct sales and local engagement. The website is built on WordPress using common plugins and frameworks, providing a functional and visually appealing platform for product display and customer contact. From a technical perspective, the website employs standard web technologies including jQuery, Bootstrap, and WordPress CMS. SEO optimization is addressed through the All in One SEO plugin, and the site is mobile responsive at a basic level. Performance is moderate, with no major issues detected. However, some technical improvements could enhance security and compliance. Security posture is adequate with HTTPS enforced and a contact form that includes a privacy acceptance checkbox, indicating GDPR awareness. However, the absence of security headers and use of an older jQuery version present moderate risks. No explicit security policies or incident response contacts are published, which could be improved to enhance trust and compliance. Overall, the website is legitimate, professionally presented, and serves its niche market effectively. Strategic improvements in security headers, cookie consent mechanisms, and updated libraries would strengthen the security and compliance posture, supporting long-term business credibility and customer trust.

H

Happy Robots s.r.o.

happy-robots.cz

50

Happy Robots s.r.o. is a small Czech technology company founded in 2020 specializing in chatbot and voicebot solutions aimed at automating customer support and e-commerce interactions. Their website presents a professional and consistent brand image, offering both custom chatbot development and a platform for chatbot management. The company targets businesses seeking to improve customer engagement and reduce operational costs through automation. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, it lacks advanced security headers and published privacy or cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS and secure form handling but could be improved with additional headers and incident response information. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

C

CBS spol, s.r.o.

cbsmapexplorer.com

58

CBS spol, s.r.o. operates the CBS Map Explorer website and mobile application, which provides augmented reality experiences for tourists using physical maps. The company targets travelers who prefer paper maps but want enhanced digital information about points of interest. The website is professionally designed, multilingual, and offers app download links for Android and iOS platforms. The business appears to be a small Slovak company focused on niche tourism technology solutions. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and CookieYes for privacy compliance. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. WHOIS data is missing, which raises some concerns about domain registration transparency but does not directly contradict the business legitimacy. Overall, the site is functional, user-friendly, and compliant with GDPR requirements.

E

ESSENS Restaurant

essensrestaurant.cz

41

ESSENS Restaurant is a fine dining establishment located in South Moravia, Czech Republic, offering Michelin-quality gastronomic experiences focused on regional and seasonal ingredients. The website presents a professional and visually appealing interface with clear navigation and multilingual support, targeting discerning clients seeking high-end culinary experiences. The technical infrastructure leverages popular front-end libraries such as Bootstrap, jQuery, and Flexslider, alongside tracking and marketing tools including Google Tag Manager, Facebook Pixel, and Adform. While the site is mobile optimized and performs moderately well, some libraries are outdated and security headers are not evident, indicating room for improvement in security posture. The absence of privacy and cookie policies and missing WHOIS data represent compliance and trust concerns. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

P

Pražské Ulice

prazskeulice.cz

43

Pražské Ulice is a Czech website dedicated to showcasing urban projects related to Prague's streets, squares, embankments, and islands. It serves as an informational and promotional platform targeting the general public interested in local urban development. The site features launched projects, blog articles, photo galleries, and cooperation opportunities, positioning itself as a niche local informational resource. Technically, the website employs common web technologies such as jQuery, Bootstrap, Google Analytics, and Facebook SDK, with moderate performance and good mobile optimization. Security-wise, HTTPS is enabled and cookie consent mechanisms are in place, but the site lacks advanced security headers and explicit privacy or security policies. The absence of WHOIS registration data reduces transparency and trustworthiness, although the website content and structure appear legitimate and professional. Overall, the site scores moderately in content quality, technical implementation, security posture, privacy compliance, and business credibility.

T

Trendy Living

trendy-living.cz

44

Trendy Living is a Czech lifestyle and home decor website providing articles, tips, and product reviews focused on modern living and furniture. The site targets a general audience interested in home improvement and lifestyle trends. It operates primarily as a content publisher with advertising and partner promotions as key revenue streams. Technically, the website uses a mix of popular frontend libraries including jQuery, Bootstrap, and various sliders, along with Google Analytics and Facebook SDK for analytics and marketing. The site is served over HTTPS and includes a cookie consent mechanism, indicating some level of privacy compliance. However, explicit privacy policy and terms of service pages are not found, which is a compliance gap. Security posture is moderate with HTTPS and reCaptcha implemented but lacks security headers. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency but does not indicate malicious intent. Overall, the website is functional, professionally designed, and moderately secure, suitable for its business purpose.

V

Víkendový RELAX

vikendovyrelax.cz

44

Víkendový RELAX is a Czech hospitality content platform focusing on wellness resorts, hotels, and relaxation destinations. The website provides curated articles and recommendations for travelers seeking weekend getaways and wellness experiences primarily within the Czech Republic. The business operates as a content and referral platform, targeting individuals interested in leisure and hospitality services. Technically, the site is built on the PublicMC CMS platform using Bootstrap and jQuery frameworks, integrating multiple third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The website is mobile-optimized and features a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and detailed security policies. WHOIS data is unavailable, which reduces domain trustworthiness and suggests privacy protection or registration issues. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

GRAND Developer is a Czech online media platform specializing in real estate development projects, architectural news, interviews, and AI-generated content related to architecture and design. The website targets real estate developers, architects, and enthusiasts interested in the latest trends and projects in the Czech Republic and abroad. It operates under Studio Modern Creative and has been active since 2005, offering a niche content publishing business model supported by partnerships and advertising. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, Google Translate, and reCAPTCHA, with a custom CMS platform. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, and the site uses HTTPS with a cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers and dedicated security policy pages. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional and trustworthy front with comprehensive content and good technical implementation. The absence of WHOIS data reduces transparency but is common for Czech domains. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security posture.

U

Ulice Újezd, Malá strana, Praha

uliceujezd.cz

43

The website www.uliceujezd.cz serves as a local business directory and promotional platform for the Ulice Újezd street area in Malá Strana, Prague. It highlights local hotels, restaurants, cafes, and shops, targeting local visitors and tourists interested in this specific neighborhood. The site offers listings, partner information, and newsletter subscription options, positioning itself as a niche hospitality and local commerce resource. Technically, the website employs a traditional web stack including jQuery, Bootstrap, Google Analytics, and Smartsupp chat integration. It uses Google Fonts and common JavaScript libraries for UI and analytics. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Cookie consent mechanisms are implemented, indicating some level of privacy compliance, though a dedicated privacy policy page is absent. From a security perspective, the site uses HTTPS and includes CAPTCHA placeholders for form protection, but lacks visible security headers such as CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces trustworthiness and complicates domain legitimacy assessment. Overall, the security posture is moderate but could be improved with enhanced headers and explicit privacy/security policies. The overall risk assessment suggests a functional and legitimate local business site with moderate technical maturity and privacy compliance. Strategic recommendations include adding a privacy policy, improving security headers, verifying WHOIS registration details, and enhancing accessibility and SEO to strengthen trust and compliance.

U

Ulice Na Příkopě , Praha 1

ulicenaprikope.cz

43

The website www.ulicenaprikope.cz serves as an informational and promotional platform focused on the Na Příkopě street area in Prague 1, highlighting local restaurants, cafes, shopping venues, hotels, and entertainment options. It targets visitors and customers interested in exploring this prominent commercial street. The business model is primarily a local directory and marketing platform for businesses in this area, with features such as partner listings and newsletter subscriptions. The site is small in scale and operates within the hospitality sector in the Czech Republic. From a technical perspective, the website employs a traditional tech stack including jQuery, Bootstrap, Google Analytics, SmartLook for session recording, and Facebook Pixel for marketing. The site shows moderate performance and good mobile optimization but lacks advanced accessibility features. SEO optimization is basic, and no CMS or hosting provider details are evident. The site uses HTTPS and includes a cookie consent mechanism, but no HTTP security headers were detected, indicating room for security improvements. Security posture is moderate with standard tracking and marketing tools integrated. The site uses cookie consent and CAPTCHA placeholders but lacks explicit privacy and security policies. No vulnerabilities or exposed sensitive data were identified in the content. The absence of WHOIS data reduces domain trustworthiness, suggesting privacy protection or registration issues. However, the website content is professional and safe, with no adult or questionable material. Overall, the site is functional and serves its business purpose well but would benefit from enhanced security headers, clearer privacy policies, and verified domain registration information to improve trust and compliance.

U

Ulice Vinohradská, Praha

ulicevinohradska.cz

43

The website www.ulicevinohradska.cz serves as a local business directory focused on Vinohradská street in Prague, highlighting restaurants, bars, hotels, shops, and other services. It targets local residents and visitors seeking information about businesses in this area. The platform operates as an informational and promotional tool for local hospitality and retail businesses, with a small-scale market presence. Technically, the site uses common web technologies including jQuery, Bootstrap, Google Analytics, and Facebook SDK, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS registration data reduces domain trustworthiness, though the site content appears legitimate and safe for general audiences. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

H

Hradčanské náměstí, Praha

hradcanske-namesti.cz

44

The website www.hradcanske-namesti.cz serves as a local informational and promotional platform focused on Hradčanské Square in Prague, highlighting restaurants, cafes, shops, and historical buildings. It targets tourists and local visitors interested in exploring this historic area. The business model appears to be centered on providing curated content and promoting local businesses, supported by newsletter subscriptions and partner listings. The site is small in scale and focused on hospitality and tourism within the Czech Republic. Technically, the website employs a moderately modern tech stack including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and SmartLook for analytics and user interaction tracking. The site is mobile optimized with good user experience and basic SEO practices. However, no CMS or hosting provider details are evident. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and implements cookie consent with reCaptcha for form protection. However, no advanced security headers such as CSP or HSTS are detected, and there is no visible privacy policy or terms of service, which are important for compliance and trust. The WHOIS data is unavailable, likely due to privacy protection, limiting domain trust analysis. No contact emails or phone numbers are explicitly provided, which reduces business credibility slightly. Overall, the website is legitimate and functional for its purpose but would benefit from enhanced security headers, clearer privacy and contact information, and improved compliance documentation to strengthen trust and security posture.

B

Blindenzorg Licht en Liefde VZW

anysurfer.be

69

AnySurfer is a Belgian non-profit organization operated by Blindenzorg Licht en Liefde VZW, specializing in digital accessibility consulting, auditing, training, and labeling services. The organization targets businesses and developers aiming to improve accessibility compliance with WCAG standards, enhancing digital inclusion for users with disabilities. The website reflects a professional and consistent brand presence with clear service offerings and client references, positioning AnySurfer as a trusted expert in the accessibility domain. Technically, the website is built on Fork CMS with modern web technologies including Bootstrap, jQuery, and Google Analytics. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS with anonymized IP tracking for privacy and implements a cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site benefits from HTTPS and secure form handling but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to registry restrictions, but the domain privacy protection is justified given the non-profit nature. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk is low with strong trust indicators and no suspicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

Lékárna PILULKA is a well-established local pharmacy based in Brno, Czech Republic, with over 20 years of experience. The company offers a broad range of pharmaceutical services including individually prepared medicinal products, veterinary products, diagnostic tests, and medicinal cannabis. They operate both a physical pharmacy and an e-shop, targeting local customers seeking professional pharmaceutical care and products. The website is professionally designed with clear navigation and multilingual support via Google Translate. Technically, it uses a custom CMS and modern JavaScript libraries, providing a moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks visible security headers and formal privacy or cookie policies. WHOIS data is missing, which raises concerns about domain transparency and trustworthiness. Overall, the business appears credible and professional but would benefit from enhanced security and compliance disclosures.

K

Kožní Brno - Mudr. Lucie Haklová

koznibrno.cz

39

Kožní Brno is a specialized dermatology clinic operated by MUDr. Lucie Haklová, located in the modern Konstancie medical facility in Brno-Komín, Czech Republic. The clinic offers comprehensive dermatological and cosmetic skin care services including medical examinations, removal of skin lesions, botulinum toxin treatments, dermapen procedures, and other advanced skin therapies. The website targets local patients seeking professional dermatological care and cosmetic procedures. The business operates as a small healthcare provider with a clear focus on quality and patient care. Technically, the website is built on LuckyWonder CMS 3.0 and uses common web technologies such as Bootstrap, jQuery, and nanogallery2 for galleries. It includes Google Maps integration for location display. The site is mobile optimized with a clear navigation structure and professional design. However, performance is moderate and accessibility features are basic. SEO optimization is minimal with missing meta descriptions and keywords. From a security perspective, the site lacks visible security headers and there is no evidence of HTTPS enforcement in the provided data. No privacy or cookie policies are published, indicating compliance gaps with GDPR and related regulations. No WHOIS data is available, which limits domain legitimacy verification and reduces trustworthiness. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is functional and professional for its healthcare niche but would benefit from improved security practices, published privacy and cookie policies, and domain registration transparency to enhance trust and compliance.

P

PainCare | Home

paincare.cz

43

PainCare is a small healthcare-focused organization dedicated to providing quality health information and education related to pain treatment for both professional and lay audiences. Their business model centers on creating educational projects and offering corporate training in pain management. The website is professionally designed with clear navigation and good content relevance, targeting primarily Czech Republic users interested in healthcare education. Technically, the site uses modern frontend libraries such as jQuery, Bootstrap, and Slick Slider, but lacks a detected CMS or backend platform. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the HTML content, and no privacy or cookie policies are present, indicating compliance gaps. WHOIS data is missing, which reduces trustworthiness and complicates domain legitimacy verification. Overall, the site is safe, professional, and focused on healthcare education but would benefit from improved security and compliance measures.

S

Studio Modern Creative

studiomc.cz

45

Studio Modern Creative is a Czech-based digital agency specializing in web development, e-commerce solutions, branding, and artificial intelligence integration. The company targets businesses and professionals seeking modern, responsive websites and online shops, supported by digital marketing and email campaigns. Their market position is that of an established small enterprise with a consistent brand and a professional online presence. Technically, the website uses modern frameworks such as Bootstrap and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the website content and partner ecosystem support trustworthiness. Overall, the site is professional, compliant with GDPR, and provides clear contact channels.

T

Team BusinessMC

shopmc.cz

42

SHOPMC is a Czech-based e-commerce solutions provider specializing in modular and customizable online shop systems tailored to client needs. The company offers multiple system variants and rental options, including integrated web hosting and payment solutions. Their target audience includes businesses and entrepreneurs seeking professional e-shop platforms for both B2C and B2B markets. The website demonstrates a good level of digital maturity with modern front-end technologies such as Bootstrap and jQuery, responsive design, and integration of analytics and chat support tools. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces trustworthiness from a domain registration perspective, but the presence of client testimonials and partner references supports legitimacy. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security transparency.

Joe FIT is a Czech Republic-based fitness and bodybuilding center offering modern gym facilities, professional trainers, and personalized training and nutrition plans. The website presents a professional and welcoming environment targeting fitness enthusiasts of all levels. The business operates a small-scale fitness center with a focus on health, conditioning, and weight loss support. Technically, the website uses modern front-end technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for analytics and marketing. The site is mobile-optimized and includes a cookie consent mechanism, but lacks a published privacy policy and terms of service, which are important for compliance. Security posture is moderate with HTTPS enabled but missing explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from improved compliance documentation and enhanced security practices.

M

MP TOBACCO s.r.o.

mptobacco.cz

46

MP TOBACCO s.r.o. operates as a specialized retailer focusing on premium tobacco products including cigars and humidors, targeting a mature adult audience primarily in the Czech Republic. The company emphasizes direct import of high-quality brands such as VAUEN and BOSSNER, positioning itself as a niche player in the tobacco retail market. The website supports this business model with product showcases, a blog, and a photo gallery to engage customers. Technically, the website employs a moderately modern technology stack including jQuery, Bootstrap, and multiple third-party analytics and chat services. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR principles. However, the absence of detected security headers and incomplete WHOIS data indicate areas for improvement in security and transparency. From a security perspective, HTTPS is enabled and form spam protection via Google reCaptcha is present, but the lack of security headers and missing privacy policy reduce the overall security posture. No incident response or vulnerability disclosure information is provided, which could be a risk in case of security events. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, improved transparency through WHOIS data and privacy policies, and clearer contact information to strengthen trust and compliance.

F

Fashion Models

fashion-models.cz

44

Fashion Models is a Czech Republic-based modeling agency website that showcases a variety of models, photographers, and fashion designers. The site offers services including model representation, portfolio creation, event organization, and photo editing. It targets models, fashion professionals, and clients seeking modeling services within the Czech market. The website is professionally designed with good content quality and consistent branding, supported by social media presence and partnerships with industry-related entities. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with mobile optimization and moderate performance. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some security headers and explicit privacy policy documentation. The domain WHOIS data is unavailable, which reduces transparency and trustworthiness assessment. Overall, the website is safe, professional, and functional, but could improve in privacy compliance and security best practices.

The website www.termsandconditionsgenerator.com offers a free, easy-to-use Terms & Conditions generator tool aimed at website and app owners who need personalized legal documents quickly. The business operates as a niche utility service, redirecting users to a trusted partner site for final document generation. The site is well-branded, uses HTTPS, and employs modern frontend technologies such as Bootstrap and jQuery, with analytics provided by Cloudflare Insights and Plausible Analytics. However, the absence of WHOIS data and lack of contact information reduce the overall trustworthiness. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices. The security posture is basic, with HTTPS enabled but lacking explicit security headers and cookie consent mechanisms. No privacy or cookie policies are present, which is a compliance gap. The site does not expose sensitive data and uses Cloudflare for CDN and security, which adds a layer of protection. From a security perspective, the site shows no immediate vulnerabilities but would benefit from implementing security headers, publishing privacy and cookie policies, and providing contact channels for incident response. The missing WHOIS data is a concern for domain legitimacy, although the site content and partner relationships suggest a legitimate operation. Overall, the website scores moderately well but has room for improvement in privacy compliance, security best practices, and transparency to enhance user trust and regulatory adherence.

Queens of Kink is an adult entertainment website specializing in dominant femdom and fetish videos featuring crossdressers, transvestites, and shemales. The site operates on a subscription-based model offering exclusive content to adult audiences. It has been active since 2013, indicating a stable presence in its niche market. The website presents content professionally with clear navigation and an age verification splash page to restrict access to adults only. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, hosted on MojoHost servers. While the site is mobile optimized and performs moderately well, it lacks advanced security headers and DNSSEC, which are recommended for improved security posture. Privacy compliance is basic, with a privacy policy and cookie notice present but no explicit consent mechanism. No direct company contact emails or phone numbers are provided, limiting business transparency. Overall, the site is legitimate and consistent with its business model but could improve security and privacy practices.

A

Association of Sites Advocating Child Protection (ASACP)

rtalabel.org

58

The website www.rtalabel.org represents the Association of Sites Advocating Child Protection (ASACP), a non-profit organization focused on child protection and parental control in the online adult content industry. The site provides the RTA (Restricted To Adults) website label, a voluntary labeling system to help parents filter age-inappropriate content. The organization also offers a verified labeling service and a child exploitation reporting tipline. The website targets parents, webmasters, and stakeholders in the adult industry, emphasizing advocacy and education rather than commercial services. Technically, the site uses a modern frontend stack including Bootstrap and jQuery, integrates Google Analytics and reCAPTCHA for tracking and security, and is hosted behind Cloudflare. The site is mobile responsive and has moderate performance. However, it lacks explicit privacy and cookie policies, which impacts privacy compliance. Security best practices such as HTTPS and CAPTCHA usage are present, but security headers and vulnerability disclosure mechanisms are missing. The security posture is solid but could be improved by adding security headers, privacy disclosures, and incident response information. The absence of WHOIS data limits domain trust assessment, but the website content and branding strongly indicate a legitimate non-profit entity. Overall, the site is professional, trustworthy, and focused on child protection advocacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing security and incident response policies, adding security headers, and improving accessibility and SEO features to enhance compliance and user trust.

Bluesight is a healthcare technology company specializing in hospital and pharmacy operations intelligence. Their website showcases a suite of products designed to optimize inventory management, drug diversion surveillance, purchasing, compliance, drug shortage management, and patient privacy monitoring. Positioned as a market leader with multiple industry awards, Bluesight targets hospitals and health systems seeking to improve operational efficiency and compliance. The company has a well-established digital presence with a professional, user-friendly website that integrates modern web technologies and analytics tools. The site is optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, domain locking, and good security practices, though DNSSEC is not enabled. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. Overall, Bluesight presents a trustworthy and credible business with clear contact channels and transparent information.

Bluesight is a healthcare technology company specializing in hospital and pharmacy operations intelligence. Their platform offers integrated solutions including RFID inventory management, drug diversion surveillance, purchasing optimization, 340B compliance, drug shortage management, and patient privacy monitoring. Positioned as a market leader with multiple industry awards, Bluesight targets hospitals and health systems aiming to improve operational efficiency and compliance. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site is built on WordPress with modern frameworks and integrates advanced marketing and analytics tools, hosted on AWS infrastructure. Security posture is strong with HTTPS enforced and domain registration stable, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Bluesight presents a trustworthy and professional online presence aligned with its business objectives.

Bluesight is a well-established healthcare technology company specializing in hospital and pharmacy operations solutions. Founded in 2004, it offers a suite of products including RFID inventory management, diversion surveillance, purchasing optimization, 340B compliance, drug shortage management, and patient privacy monitoring. The company holds a strong market position with recognized awards and a clear focus on simplifying workflows and data integration for health systems. Their target audience primarily includes hospitals and pharmacy operations teams. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as HubSpot, Google Analytics, and Facebook Pixel. The site is hosted on AWS infrastructure and demonstrates excellent performance, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, uses domain locks to prevent unauthorized transfers or deletions, and employs multiple security best practices, though it could improve by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence.

L

Lutice

lutice.com

58

Lutice is a French technology company specializing in hosting and integrating BigBlueButton, a virtual classroom and web conferencing platform. Their services focus on providing secure, private, and fully managed dedicated server hosting for BigBlueButton, targeting small and medium businesses, educational institutions, and independent trainers primarily in France. The website is professionally designed using WordPress and Elementor, with a focus on French data privacy and local support. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. The absence of WHOIS data for the domain is a concern, as it is inconsistent with the active and professional nature of the website, lowering the overall trust score. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security headers, and providing explicit contact and security incident response information to enhance trust and compliance.

The website jpo-enr.fr serves as an informational and promotional platform for the 'Journées Portes Ouvertes des énergies renouvelables' event held in France. It targets the general public interested in renewable energy by providing event details, an interactive map of participating sites, and resources such as communication kits. The site is managed by the Syndicat des énergies renouvelables and partners with reputable organizations like ADEME and AMORCE, reinforcing its credibility in the energy sector. Technically, the site is built on WordPress with common web technologies such as jQuery, Bootstrap, and Google Maps API, hosted by OVH. It demonstrates moderate performance and good mobile optimization but could improve accessibility and SEO. Security-wise, HTTPS is enforced, and secure login forms are present, but the site lacks explicit security headers and public security policies. The exposure of the Google Maps API key and absence of incident response information are areas for improvement. Overall, the site is legitimate, professional, and safe, with a solid business focus on renewable energy event promotion.

F

Flamme Verte - C/O Syndicat des énergies renouvelables (SER)

flammeverte.org

53

Flamme Verte is a French organization operating under the Syndicat des énergies renouvelables (SER) that provides a certification label for ecological, economical, and high-performance domestic wood heating appliances. The website serves as an authoritative resource offering detailed information on the benefits of wood heating, financial aids, types of appliances, installation guidance, and maintenance advice. It targets both consumers and professionals in the energy sector, positioning itself as a trusted label and information hub in France. Technically, the website is built on the SPIP CMS platform with modern web technologies including Bootstrap for responsive design, JavaScript modules, and image galleries. The site is well-optimized for mobile devices, accessible, and SEO-friendly. It uses HTTPS with good SSL configuration and defers script loading to improve performance. Analytics are implemented via a Matomo/Piwik instance, respecting user privacy with a cookie consent mechanism. From a security perspective, the site enforces HTTPS but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Contact information is available via postal address and contact form, but no direct phone numbers or emails were found. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Flamme Verte label. The lack of WHOIS data due to privacy protection is typical for organizations and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing incident response contacts to improve security posture and transparency.

FetishLiza.com is a niche adult entertainment website specializing in fetish and kinky video content, primarily focusing on femdom, leather, pantyhose, and related themes. The site operates on a subscription and pay-per-view business model, offering exclusive clips and featuring a roster of models. It maintains a consistent brand presence with clear adult content warnings and age verification mechanisms. Technically, the site uses a modern frontend stack including jQuery, Bootstrap, and Font Awesome, hosted on mojohost.eu servers. While the site is accessible without WAF or blocking, it lacks advanced security headers and explicit cookie consent mechanisms, which are areas for improvement. Privacy and terms pages exist but are basic and do not fully demonstrate GDPR compliance. The domain registration is consistent with the site's history and content, showing legitimacy and no suspicious patterns.

N

N/A

glovemansion.com

40

Glove Mansion is a niche adult entertainment website specializing in erotic fetish videos and pictures focused on glove fetishism. The site operates on a subscription-based model offering exclusive content featuring English and European models. It has been active since 2006, indicating a stable presence in its market niche. The website targets adults only, with an explicit age verification splash page and clear adult content warnings. Technically, the site uses a legacy technology stack including jQuery 2.1.0 and Bootstrap, with Google Analytics and DoubleClick for tracking and advertising. Mobile optimization and accessibility are basic but functional. Security posture is moderate with no visible security headers or DNSSEC enabled, and use of outdated JavaScript libraries introduces potential vulnerabilities. Privacy and terms policies exist but are basic, and no incident response or vulnerability disclosure information is provided. Overall, the site is functional and professional within its niche but could improve security and compliance measures.

N

N/A

chateau-cuir.com

44

Chateau-Cuir.com is a niche adult entertainment website specializing in premium leather fetish videos and photo galleries. Established in 2011, it operates a subscription-based business model targeting adults interested in leather and fetish content. The site offers unique, regularly updated content with a focus on high-quality fetish media. Its market position is that of a specialized provider within the adult media industry, leveraging partnerships such as Clips4sale for affiliate sales and maintaining a presence on social media platforms including OnlyFans, Facebook, and Twitter. Technically, the website uses a traditional web stack including jQuery, Bootstrap, and Google Fonts, with Google Analytics for visitor tracking. Hosting is managed via mojohost.eu as indicated by the nameservers. The site shows basic mobile optimization and SEO practices but lacks advanced accessibility features. Performance is moderate, with no critical technical issues detected in the HTML content. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are notable gaps. There is no explicit HTTPS enforcement data available, and no dedicated security or incident response policies are published. The site does implement an age verification splash page and complies with 18 U.S.C. 2257 record-keeping requirements, which are important trust signals in the adult content industry. Privacy and terms of service pages exist but are basic and do not explicitly indicate GDPR compliance. Overall, Chateau-Cuir.com presents a moderate risk profile typical for niche adult content sites. It is recommended to enhance security posture by enabling DNSSEC, implementing security headers, enforcing HTTPS, and publishing clear security and incident response policies. Improving privacy compliance and providing direct contact information would also strengthen business credibility and user trust.

D

Département de la Moselle

moselle.fr

67

The website www.moselle.fr is the official digital presence of the Moselle department, a regional government entity in France. It serves as a comprehensive portal for news, events, administrative services, and information about the department's missions, social programs, and cultural activities. The site targets residents and stakeholders within the Moselle region, providing them with relevant and timely information. The business model is that of a government public service platform, focusing on transparency and citizen engagement. Technically, the site is built on the Jalios JCMS platform, leveraging modern web technologies such as Bootstrap for responsive design, Font Awesome for icons, and Less.js for CSS preprocessing. It integrates accessibility features and SEO best practices, with a moderate performance profile. The site includes cookie consent management via Tarteaucitron and uses Piwik for analytics, indicating a moderate level of user tracking. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit privacy or terms of service pages. No vulnerability disclosure or incident response contacts are provided, which could be improved. The WHOIS data is unavailable, which slightly reduces trust but is likely due to AFNIC policies. Overall, the site demonstrates a good security posture for a government website. The overall risk assessment is moderate with recommendations to enhance transparency through privacy and terms policies, improve security headers, and publish vulnerability disclosure information. These steps will strengthen user trust and compliance with data protection regulations.

C

CHE gemeinnütziges Centrum für Hochschulentwicklung

che.de

52

CHE gemeinnütziges Centrum für Hochschulentwicklung is a well-established German non-profit think tank specializing in higher education research and policy. With over 30 years of experience, it provides studies, project work, and recommendations to stakeholders in the academic and education sectors. The website is professionally designed, primarily in German with English alternatives, and offers comprehensive content relevant to its target audience of academics, policymakers, and students. Technically, the site runs on WordPress with modern libraries and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site demonstrates a mature digital presence aligned with its business goals.

J

Jacques Delors Centre | Hertie School

delorscentre.eu

69

The Jacques Delors Centre is a reputable academic and policy research center focused on European affairs, operating under the Hertie School in Berlin. It provides research publications, policy briefs, events, teaching programs, and a podcast aimed at academics, policymakers, and stakeholders interested in European governance and integration. The website is professionally designed, well-structured, and offers clear navigation and comprehensive content relevant to its target audience. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and frameworks, ensuring good performance and mobile responsiveness. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data is privacy protected, which is typical for EU domains, but the website's affiliation with Hertie School and partner organizations supports its legitimacy. Overall, the site demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

S

ServiceCenter KHS

kunsthochschulen-berlin.de

45

ServiceCenter KHS operates as a centralized support hub for artistic universities in Berlin, providing essential services in financial management, personnel, and IT support. The website clearly targets university staff and students, offering structured navigation to various service areas. The business model focuses on internal administrative support for higher education institutions, positioning itself as a niche service provider within the education sector in Germany. Technically, the website is built on TYPO3 CMS with Bootstrap, indicating a modern and maintainable infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. No advanced analytics or tracking tools are detected, suggesting a privacy-conscious approach. From a security perspective, the site lacks visible security headers and explicit security policies, which lowers its security posture score. The absence of cookie consent mechanisms and limited privacy disclosures on the site itself indicate areas for improvement in privacy compliance. However, the domain registration data aligns well with the website's purpose and location, supporting its legitimacy. Overall, the website is professional and functional with moderate risk. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

ROUTAGE-EN-LIGNE.COM is an online service platform operated under the TBS GROUP brand, specializing in postal routing services for press publishers and associations in France. The platform offers file normalization, address verification, and routing processing compliant with La Poste standards, targeting small to medium-sized organizations requiring efficient postal mailing preparation. The business model is subscription and volume-based, with a focus on ease of use and cost-effectiveness for smaller volumes. Technically, the website employs a modern but basic tech stack including Bootstrap, jQuery, Owl Carousel, and HubSpot for forms and analytics. The site is mobile responsive and well-structured but lacks advanced accessibility features and comprehensive SEO optimization. Performance is moderate with no critical errors detected. From a security perspective, the site uses secure login forms but lacks visible security headers and advanced protections such as CSP or anti-CSRF tokens. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information appear professional and consistent with the business claims. Privacy compliance is minimal, with no cookie consent mechanism despite a privacy terms page. Overall, the website presents a functional and professional front for its niche service but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

T

Terumo Europe NV

terumo-ps.com

69

Terumo Pharmaceutical Solutions is a division of Terumo Corporation, a global healthcare technology leader founded in 1921 and headquartered in Tokyo, Japan. The division specializes in pharmaceutical and medical device manufacturing, offering injection, infusion, and primary packaging solutions alongside contract development and manufacturing services (CDMO). The company targets pharmaceutical professionals worldwide, emphasizing patient comfort and product quality. The website reflects a mature, professional business with a strong global presence and comprehensive product portfolio. Technically, the site is built on Microsoft SharePoint, leveraging modern JavaScript libraries and frameworks such as jQuery and Bootstrap, with integrated Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is incomplete, indicating possible privacy protection, which slightly reduces domain transparency but does not detract from the overall legitimacy given the strong brand presence and external references. Overall, the website is professional, trustworthy, and well-maintained, serving a specialized B2B healthcare market.

K

Krista Exhibitions

interpharma-indonesia.com

46

Indonesia Pharmaceutical Expo (IPEX) is a well-established event organized by Krista Exhibitions, focusing on the pharmaceutical industry and related sectors in Indonesia. The website serves as a platform for event information, exhibitor and visitor registration, and partnership details. The business model centers on event management and trade show facilitation, targeting pharmaceutical manufacturers, suppliers, and industry professionals. The domain age and WHOIS data support the legitimacy and maturity of the business. Technically, the website uses modern JavaScript libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, hosted on AWS infrastructure, providing a moderate performance and good mobile optimization. However, the site lacks a visible CMS and advanced accessibility features. Security posture is moderate with HTTPS enabled but missing critical security headers and no published privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and functional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

P

Privacy Policy Online

privacypolicyonline.com

66

Privacy Policy Online is a niche service provider offering free online generators for Privacy Policies, Terms & Conditions, and Disclaimers to help website owners comply with international privacy laws such as GDPR, CCPA, and CalOPPA. The website also provides educational blog content related to privacy and compliance. The business targets website operators needing legal compliance documents and operates a small-scale, focused online platform. Technically, the site uses Bootstrap and jQuery for frontend development and employs Plausible analytics for privacy-conscious tracking. The site is mobile optimized with a professional design and clear navigation, though accessibility features are basic. Security posture is moderate with no visible security headers and no cookie consent mechanism, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and services appear professional and trustworthy. Overall, the site scores well on content quality and business credibility but should address security and compliance gaps to enhance trust and legal adherence.