Security Directory

T

Terumo India Private Limited

terumoindiaskilllab.com

10

Terumo India Skill Lab is a specialized e-learning platform focused on interventional cardiology, interventional radiology, and perfusion medicine education. It serves healthcare professionals and patients by providing simulation-based learning, webinars, masterclasses, and patient resources. The platform is operated by Terumo India Private Limited, a subsidiary of Terumo Corporation, and targets the Indian healthcare market with a medium-sized business presence. The website demonstrates consistent branding, professional content, and a clear business model centered on medical education and training. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, and analytics tools such as Google Analytics and Microsoft Clarity. It uses WordPress as the CMS and integrates multiple security features like HTTPS and CAPTCHA to protect user data. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. From a security perspective, the site has a good posture with HTTPS, CAPTCHA on forms, and detailed privacy and cookie policies that indicate GDPR compliance. However, some improvements are recommended such as implementing Content-Security-Policy headers and enhancing password handling mechanisms. No critical vulnerabilities or WAF blocking were detected, indicating stable and secure operations. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports its business goals of providing specialized healthcare education while maintaining user security and privacy.

T

Terumo Europe NV

terumopharmaceuticalsolutions.com

11

Terumo Pharmaceutical Solutions is a division of Terumo Corporation, a global leader in healthcare technology since 1921. The division specializes in providing pharmaceutical and medical device manufacturers with high-quality injection, infusion, and primary packaging solutions, including contract development and manufacturing services. Their market position is strong, supported by a comprehensive portfolio and global reach, targeting pharmaceutical professionals worldwide. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to its B2B audience. Technically, the website is built on Microsoft SharePoint, leveraging modern JavaScript libraries such as jQuery and Bootstrap for UI components. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. The site is mobile-optimized with good SEO practices and accessibility features, although some accessibility aspects could be enhanced. Performance is moderate, typical for SharePoint-based sites. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no publicly available security policy or incident response contact, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in security headers and incident response transparency would further enhance trust and security posture.

T

Terumo Europe NV

terumo-europe.com

61

Terumo Europe NV operates as a healthcare company providing medical devices and services across the Europe, Middle East, and Africa region. The website reflects a well-established business with a broad product portfolio targeting healthcare professionals and patients. The company is a subsidiary of Terumo Corporation, a global medical device manufacturer headquartered in Japan. The site offers comprehensive product information, clinical programs, and corporate news, indicating a mature digital presence. Technically, the website is built on Microsoft SharePoint, leveraging modern web technologies such as jQuery, Bootstrap, and Slick Carousel. It integrates Google Analytics and Google Tag Manager for user behavior tracking and marketing insights. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic, suggesting room for improvement. From a security perspective, the site enforces HTTPS and uses standard tracking scripts responsibly. There is no evidence of exposed sensitive data or vulnerable libraries in the provided content. However, the absence of security headers and lack of explicit security or incident response policies are areas to address. The WHOIS data is missing, which is unusual and reduces trustworthiness, though the website content and branding strongly indicate legitimacy. Overall, the website presents a professional and trustworthy front for Terumo Europe NV, with solid privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance the security posture and trust further.

S

Skeepers

mfb.li

63

Skeepers operates a customer experience platform, as evidenced by the backend login portal branded with their name and logo. The website serves primarily as an access point for users to sign in, including support for Single Sign-On (SSO) via SAML2, indicating enterprise-grade user management. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and third-party widgets like Zendesk and Stonly for support and user guidance. However, the site lacks visible privacy and cookie policies, which are critical for compliance and user trust. Security measures are basic, with no explicit security headers or anti-CSRF tokens detected, though HTTPS is implied by the URL scheme. Overall, the site is functional but could benefit from enhanced security and privacy features.

S

Stanford Medicine Children's Health

stanfordchildrens.org

73

Stanford Medicine Children's Health operates a comprehensive pediatric and obstetric healthcare network, recognized nationally for excellence and specialized care. The website reflects a mature digital presence with extensive patient resources, service information, and research initiatives. Technically, the site leverages Adobe Experience Manager and integrates multiple analytics and marketing tools, ensuring a modern and responsive user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data limits domain registration trust insights but does not detract from the site's evident legitimacy and professional standing. Overall, the site is a trustworthy and authoritative resource for patients, families, and health professionals.

A

Alice Salomon Hochschule Berlin

ash-berlin.eu

66

Alice Salomon Hochschule Berlin (ASH Berlin) is the largest German state university specializing in social work, health, education, and upbringing, offering 20 Bachelor and Master degree programs. The institution targets students, researchers, and continuing education participants, including international students. The website reflects a professional and comprehensive digital presence with rich content about academic programs, research, events, and student support services. The business model is that of a public higher education institution with a strong emphasis on social responsibility and international cooperation. Technically, the website is built on TYPO3 CMS and uses modern web technologies such as jQuery, Bootstrap, and MediaElement.js. It is mobile-optimized, accessible, and SEO-friendly. The site employs Matomo analytics with a cookie consent mechanism, indicating a privacy-conscious approach. No blocking or WAF challenges were detected, and the site is served over HTTPS with good security practices, although some security headers could be improved. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the WHOIS data is privacy protected and unavailable, which is common for EU domains but limits transparency. The website maintains GDPR compliance with a comprehensive privacy policy and cookie consent. Overall, the site is trustworthy, professional, and well-maintained. The main risk is the lack of publicly available WHOIS registrant data, but given the institutional nature and consistent content, this is not a significant concern. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a security.txt file to improve vulnerability disclosure transparency.

NETQUES . daten & diagnostik GmbH operates the NQAP platform, a GDPR-compliant online application management system designed primarily for public sector and educational institutions in Germany. The platform digitizes and automates application processes, reducing paperwork and accelerating decision-making. The company positions itself as a niche technology provider with a focus on secure, efficient, and user-friendly application workflows. The website is professionally designed, consistent in branding, and targets organizations requiring compliant digital application solutions. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various UI enhancement libraries. Security is well considered with HTTPS, Content Security Policies, and secure form handling including CSRF tokens and honeypot anti-spam measures. However, some security headers could be improved, and no cookie consent mechanism was detected despite GDPR emphasis. The WHOIS data is unavailable due to registry restrictions common for .es domains, but the website content and business information indicate a legitimate and professional operation. Overall, the security posture is strong with good data protection practices and ISO-certified hosting claims. The absence of vulnerability disclosure and incident response contacts are areas for improvement. The website is safe for general audiences, with no adult or questionable content. The business credibility is high, supported by clear contact information and trust signals such as LinkedIn presence and ISO certifications. Strategically, NETQUES should enhance transparency by adding cookie consent, incident response information, and vulnerability disclosure policies. Improving accessibility and adding additional security headers would further strengthen their security posture and compliance. These steps will enhance trust and align with their GDPR-focused business model.

C

Churchill

agence-churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders and businesses in France. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced SEO and marketing strategies to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with strong trust signals including high Google review ratings and notable client logos. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as WP Rocket and lazy loading. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by strong business and branding indicators. Overall, the website presents a professional, trustworthy, and technically sound digital presence.

B

Budgetbox

budget-box.com

75

Budgetbox is a French technology company specializing in omnichannel retail media platforms designed to engage consumers across all shopping journeys, both online and in-store. Established around 2021, it serves over 200 brands and partners with major retailers such as Carrefour, E.Leclerc, and Intermarché. The company offers tailored solutions for brands and distributors to activate retail media campaigns effectively. The website reflects a professional and consistent brand image with comprehensive business and privacy information, targeting retail and media sectors primarily in France. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Matomo Analytics for privacy-conscious visitor tracking. It employs GDPR-compliant cookie management and integrates marketing tools such as Drift chat and Plezi. The site is mobile-optimized with good SEO practices, though some security headers could be enhanced. Performance is moderate, with a clean and user-friendly design. From a security perspective, the site enforces HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers like CSP or X-Frame-Options. No vulnerabilities or sensitive data exposures were detected in the content. The absence of WHOIS registration data is a concern but does not outweigh the professional presentation and detailed compliance documentation. Overall, Budgetbox presents a credible and trustworthy online presence with strong privacy compliance and a solid technical foundation. Strategic improvements in security headers and ongoing domain registration monitoring are recommended to maintain and enhance trust and security posture.

S

STORMWARE s.r.o.

e-trzby-pohoda.cz

58

The website www.e-trzby-pohoda.cz serves as an informational and promotional platform for electronic sales evidence solutions, primarily centered around the POHODA accounting software and its mobile applications. It targets businesses in the Czech Republic required to comply with electronic sales record-keeping regulations (EET). The site is professionally designed with clear navigation and provides useful resources such as PDF guides and video tutorials. The business behind the site is STORMWARE s.r.o., a recognized software provider in the Czech market. Technically, the website is built on ASP.NET Web Forms with Bootstrap for responsive design and uses Google Analytics for visitor tracking. The site implements a cookie consent mechanism compliant with GDPR, allowing users to control their cookie preferences. While the site loads external scripts securely via HTTPS, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. From a security perspective, the site shows good practices such as no exposed sensitive data and user consent for tracking. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy and transparency. No critical vulnerabilities or security issues are apparent in the content. The site does not display social media links or direct contact emails, which slightly limits direct communication channels. Overall, the website presents a trustworthy and professional front for its business purpose but would benefit from enhanced security headers, verified domain registration data, and more explicit contact information to improve trust and compliance posture.

STORMWARE s.r.o. is a Czech software company specializing in accounting and economic software solutions, notably the POHODA Start product which integrates GDPR compliance features. The company has a strong market presence in the Czech Republic, supported by over 30 years of experience and a Microsoft partnership. Their website provides detailed information about GDPR compliance, software features, and practical guidance for businesses. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Fonts, with good mobile optimization and user experience. Security-wise, the site implements cookie consent mechanisms and JavaScript error logging but lacks visible HTTP security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, though the website's professional content and contact details support legitimacy. Overall, the site is well-structured, informative, and compliant with privacy regulations, serving its target audience effectively.

Lausuntopalvelu.fi is an official Finnish government digital platform maintained by the Ministry of Justice (Oikeusministeriö). It facilitates electronic submission and management of public consultation requests, allowing all public authorities to publish consultation requests and enabling organizations and citizens to provide statements. The service is well-positioned as a trusted government resource with a clear target audience of public sector entities and the general public. The website content is professionally presented, bilingual (Finnish and Swedish), and includes user support contact information.

Madame Marissa is an adult content website requiring users to confirm their age before accessing sexually explicit material. The site targets consenting adults and offers adult entertainment content with an emphasis on BDSM and femdom themes. The business model appears to be content access gated by age verification, but no detailed business or contact information is provided on the site. Technically, the site uses Bootstrap and jQuery for frontend styling and functionality, and Google Analytics for user tracking. The site is mobile optimized and has a basic cookie consent mechanism. However, there is no evidence of advanced security headers or HTTPS enforcement visible in the provided data. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. Privacy compliance is basic with a privacy policy and cookie banner but lacks GDPR explicit statements or data retention policies. Overall, the site has moderate technical quality but low business credibility and security posture, resulting in a moderate risk profile.

Queens of Kink is a niche adult entertainment website specializing in dominant femdom and fetish videos featuring crossdressers, transvestites, and shemales. The site operates on a subscription and membership model, offering exclusive fetish content to an adult audience. It maintains a consistent brand presence with a professional design and clear navigation, targeting mature users interested in specialized adult content. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, hosted by MojoHost. While the site is mobile optimized and performs moderately well, it lacks advanced SEO and accessibility features. Security posture is basic, with no visible security headers or DNSSEC enabled, and no explicit HTTPS information was found in the provided data. Privacy compliance is minimal, with basic privacy and terms policies but no clear GDPR compliance or cookie consent mechanisms. The WHOIS data is consistent and supports the legitimacy of the domain, which has been active since 2013. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices.

S

SADO-LADIES.com

sado-ladies.com

9

SADO-LADIES.com is a specialized adult entertainment website focusing on classic femdom movie content. Established in 2007, it offers a subscription-based model with over 200 hours of downloadable clips and photo galleries, targeting an adult audience interested in BDSM and fetish themes. The site maintains a consistent brand presence and updates content regularly, positioning itself as a niche leader in its market segment. Technically, the site runs on Joomla CMS with a moderate performance profile and integrates multiple analytics platforms including Google Analytics, Matomo, and Microsoft Clarity. While HTTPS is enforced and the domain is well maintained, there are gaps in security best practices such as missing security headers and lack of DNSSEC. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the site is functional and professional but could benefit from enhanced security and privacy measures.

Club Stiletto is an adult entertainment website specializing in fetish and BDSM-themed video content, photo galleries, and stories. It operates primarily on a subscription and pay-per-clip business model, targeting an adult audience interested in niche fetish content. The site uses Drupal 7 CMS and integrates various JavaScript libraries and Google Analytics for tracking, with Bitcoin payment options indicating flexibility in payment methods. The website is professionally branded with consistent design and regularly updated content, positioning it as a niche player in the adult media sector. However, the absence of visible privacy and cookie policies and the lack of WHOIS registrant data reduce transparency and compliance posture. Security practices include HTTPS and anonymized IP tracking, but missing security headers and outdated libraries suggest areas for improvement. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and security hardening.

E

E2L - Ecole du Logiciel Libre

e2li.org

59

E2L - Ecole du Logiciel Libre is a French non-profit association dedicated to educating the public about free software through courses, conferences, and community events. Founded in 2015, it operates primarily in Ivry-sur-Seine and offers a range of educational activities including install parties, publications, and online resources. The organization targets individuals interested in free software, from beginners to IT professionals, emphasizing community involvement and open knowledge sharing. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Leaflet for maps, hosted via Gandi SAS. While the site is content-rich and professionally presented, it lacks formal privacy and cookie policies and does not show advanced security headers or DNSSEC, indicating room for improvement in security and compliance. Contact information is clearly provided, enhancing trust and credibility.

F

Friends Of OpenPGP

foopgp.org

49

Friends Of OpenPGP is a small non-profit association founded in 2020 focused on promoting OpenPGP technologies among businesses and citizens. The organization facilitates adoption through events, training, workshops, and community support. Their website reflects a niche market position with a clear mission to educate and support OpenPGP users and developers. Technically, the site is built with modern static site generator Hugo and uses popular frontend libraries such as Bootstrap and jQuery, hosted by OVH sas. The website is mobile responsive and well-structured, though it lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but DNSSEC is not enabled and security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security transparency.

F

FFmpeg Project

ffmpeg.org

10

FFmpeg is a well-established open-source multimedia software project founded in 2002, providing a comprehensive cross-platform solution for recording, converting, and streaming audio and video. It holds a leading position in the multimedia technology sector, supported by a strong developer community and regular major releases. The website reflects a mature project with detailed documentation, changelogs, and community engagement channels, targeting developers, multimedia professionals, and system integrators worldwide. The business model is donation and sponsorship-based, with no commercial advertising evident on the site. Technically, the website is built on a modern, lightweight stack using Bootstrap, Font Awesome, and jQuery, hosted by a reputable data center (Telepoint). The site is fast, mobile-optimized, and accessible, though accessibility features are basic. SEO practices are good, with proper meta tags and structured navigation. No CMS is detected, indicating a custom or static site approach. From a security perspective, the domain is long-standing and registered with a reputable registrar, with domain status flags enhancing security. However, DNSSEC is not enabled, and no explicit security headers or security.txt file are detected, representing areas for improvement. The project maintains a dedicated security page and issues regular security updates, demonstrating a proactive security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific compliance indicators. Overall, FFmpeg.org is a trustworthy, professional, and content-rich website representing a critical open-source multimedia project. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security.txt file, and adding cookie consent mechanisms to enhance privacy compliance and security posture.

L

L’Association de Surveillance Calédonienne de la Qualité de l’Air

scalair.nc

58

L’Association de Surveillance Calédonienne de la Qualité de l’Air operates as a regional non-profit organization dedicated to monitoring and reporting air quality in New Caledonia. The website serves as a comprehensive platform providing real-time air quality data, periodic reports, educational content, and public bulletins to residents and stakeholders concerned with environmental health. The association holds a key position as the authoritative source for air quality information in the region, targeting a general audience including the public, government entities, and environmental professionals. Technically, the website is built on the Joomla CMS platform, leveraging modern web technologies such as jQuery, Bootstrap, and OpenLayers for interactive maps and data visualization. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. Privacy compliance is well addressed through a comprehensive privacy policy and an active cookie consent mechanism, reflecting GDPR adherence. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks several important security headers that could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's organizational claims, supporting its legitimacy. Overall, the site presents a trustworthy and professional digital presence with room for security enhancements. Strategically, the association should focus on implementing additional security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen its security posture and public trust.

N

Nadace Preciosa

nadacepreciosa.cz

51

Nadace Preciosa is a well-established non-profit foundation affiliated with the Preciosa company, focusing on charitable activities primarily in the Liberec region of the Czech Republic. The foundation supports social, cultural, educational, health, and sports initiatives and has donated over 250 million CZK in its 27 years of operation. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at donors, volunteers, and beneficiaries. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers are missing and no explicit security policies are published. The absence of WHOIS registration data is a notable gap, reducing domain trustworthiness, but external media references and the association with Preciosa company support legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving its non-profit mission effectively.

A

Akademie AI

akademieai.cz

48

Akademie AI is a Czech-based educational platform specializing in artificial intelligence training, offering workshops and webinars primarily focused on ChatGPT and AI tool usage. The website positions itself as a niche provider targeting individuals and professionals seeking to enhance their AI skills. Technically, the site employs modern frontend technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The site is mobile optimized and provides a good user experience with clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy based on content and external references. Overall, Akademie AI demonstrates a solid digital presence with room for security and compliance enhancements.

R

Roman Kunert - Váš Digitální Stratég

romankunert.com

50

Roman Kunert operates a professional digital services business focused on website and e-shop development, SEO, digital marketing, and AI training. The company has a strong presence in the Czech Republic with multiple related projects and brands, positioning itself as a comprehensive digital strategist and service provider. The website is well-structured, visually consistent, and integrates modern web technologies and analytics tools. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, but the overall business presentation and multiple partner domains suggest a legitimate operation. Strategic recommendations include improving security headers, configuring third-party SDKs properly, and publishing clear privacy and security policies.

C

Centrum léčby bolesti

bolestbrno.cz

29

Bolest Brno is a specialized healthcare center focused on the treatment of acute and chronic pain, located in Brno, Czech Republic. The website presents a professional image with detailed descriptions of their key services including pharmacotherapy, acupuncture, nerve blocks, and infusion therapies. The center targets patients suffering from pain and offers treatments covered by general health insurance without the need for a referral. Technically, the website uses common frontend libraries such as Bootstrap, jQuery, and Slick slider, providing a moderate performance and basic mobile optimization. However, the absence of privacy and cookie policies and missing WHOIS data reduce the overall trust and compliance posture. Security headers and SSL configuration details are not evident from the provided data, indicating room for improvement in security practices. Overall, the website is functional and informative but would benefit from enhanced security, privacy compliance, and transparency regarding domain registration.

A

Ag Art cz s.r.o.

webmeeting.cz

54

WebMeeting, operated by Ag Art cz s.r.o., is a Czech-based online communication platform offering solutions for meetings, webinars, training, and conferences. It targets both business and private users within the Czech Republic, providing a localized and installation-free environment. The platform offers two main products: WebMeeting kavárna for quick, small meetings, and WebMeeting PRO for larger, professional online events. The company maintains a professional web presence with detailed contact information, client references, and social media engagement. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Matomo and Facebook Pixel. Security practices include HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the transparent business information and active customer support channels.

AV your day svatby&eventy is a specialized wedding and event planning agency based in Brno, Czech Republic, founded in 2014. The company offers a comprehensive range of services including turnkey wedding planning, partial services, coordination, floral arrangements, decoration rental, wedding cakes, and event organization. The website reflects a professional and well-established business with a strong local presence and international experience. The target audience primarily consists of couples planning weddings and clients organizing events in the Brno region. Technically, the website is built on WordPress with WooCommerce and Elementor, utilizing modern plugins and frameworks to deliver a responsive and user-friendly experience. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the website is trustworthy and professional, but enhancing privacy compliance and security best practices would strengthen its position.

P

Prokennex

prokennex.cz

51

Prokennex.cz is a Czech Republic-based retailer specializing in sports equipment for tennis, badminton, and squash, with a unique focus on their proprietary Kinetic technology designed to reduce injury risk. The website presents a professional and consistent brand image, targeting athletes of all levels. Their business model includes direct retail, a B2B platform, and a customer loyalty program called Kinetic klub. Technically, the site runs on Drupal 7 with Bootstrap and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. While the site is mobile-optimized and well-structured, it lacks visible privacy and cookie policies, which is a compliance concern. Security-wise, HTTPS is enforced, but the absence of explicit security headers and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and structure suggest a legitimate business presence.

I

International Fiscal Association (IFA)

ifa2025lisbon.com

54

The website represents the International Fiscal Association's 2025 Congress in Lisbon, targeting tax professionals and international fiscal experts. It provides comprehensive event information, including scientific and social programmes, speakers, destination details, and sponsorship opportunities. The site is well-structured and professionally designed, reflecting a mature digital presence for a medium-sized non-profit organization. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google services for analytics and reCAPTCHA, and employs a GDPR-compliant cookie consent mechanism via Usercentrics. Security posture is moderate; while HTTPS and reCAPTCHA are used, no explicit security headers were detected, and WHOIS data is missing, which slightly impacts trust. Overall, the site is safe, professional, and trustworthy for its intended audience.

N

Ninetheme

ninetheme.com

66

Ninetheme is a specialized WordPress theme developer with a decade-long presence in the market, offering modern, responsive themes primarily sold through Envato marketplaces. Their business model focuses on theme sales, customer support, and continuous theme updates. Technically, the website is built on WordPress with Bootstrap and popular page builders like Elementor and WPBakery, supported by Cloudflare for DNS and CDN services. The site demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS and security headers, though improvements like DNSSEC and published security policies are recommended. Privacy compliance is basic, lacking cookie consent mechanisms. Overall, the website is professional and trustworthy, with a good market position in the WordPress theme industry.

C

CBS Nakladatelství s.r.o.

ceskoznebe.cz

48

CBS Nakladatelství s.r.o. operates the website ceskoznebe.cz, specializing in aerial photography, publishing of aerial photo books, maps, and promoting the beauty of the Czech landscape. The company targets tourists, municipalities, and businesses interested in aerial imaging and related publications. Their market position is that of a niche media publisher with a unique product offering. Technically, the website is built on WordPress with Bootstrap and uses Google Analytics and Tag Manager for tracking. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and security headers. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and incident response information is a gap. The missing WHOIS data reduces domain trust, though the website content and contact details appear professional and legitimate. Overall, the site scores well on business credibility and content quality but could improve privacy compliance and security practices.

H

Happy Robots s.r.o.

chytrecallcentrum.cz

43

ChytreCallcentrum.cz is a Czech Republic based small technology company specializing in voicebot automation solutions for call centers. Their core offering includes AI-driven conversational robots that automate telephone interactions, replacing traditional IVR systems and improving customer experience. The company targets small to medium businesses seeking to reduce operational costs and improve call handling efficiency. The website presents a professional and consistent brand image with clear contact information and demo scenarios illustrating GDPR compliance in voicebot interactions. Technically, the site uses modern frontend frameworks such as Bootstrap and jQuery, with good mobile optimization and moderate performance. However, the site lacks explicit privacy and cookie policies, and security headers are not detected, indicating room for improvement in security posture and compliance. Analytics tracking is present but commented out, suggesting privacy considerations or incomplete implementation. Overall, the domain registration data aligns well with the business profile, supporting legitimacy. The website is safe for general audiences and does not contain any adult or questionable content.

Coworking Příbram z.s. is a small local business providing coworking office spaces, meeting rooms, and related services in the center of Příbram, Czech Republic. The website clearly communicates its offerings including fast internet, 3D printing, and flexible membership plans. The business targets freelancers, remote workers, and local professionals seeking quiet and well-equipped workspaces. The market position is that of a community-focused coworking provider with local partnerships and a modest but professional online presence. Technically, the website uses common front-end technologies such as Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Performance is moderate with no critical errors detected. The site uses HTTPS but lacks visible security headers and active secure forms, which are areas for improvement. From a security perspective, the site shows basic good practices such as HTTPS usage and no exposed sensitive data. However, it lacks privacy and cookie policies, security headers, and active secure contact forms, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms are detected, and no vulnerabilities are evident from the provided data. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and activation of secure user input forms. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy and security policies will strengthen trust and compliance posture.

N

NT - New Time Media

nt.cz

42

NT - New Time Media is a small Czech web development agency specializing in creating websites using the WordPress content management system. Established in 1998, the company offers services including onepage websites, corporate websites, and e-commerce solutions with WooCommerce. Their portfolio showcases a variety of client websites, indicating a focus on local businesses and organizations. The website is professionally designed with good navigation and mobile optimization, targeting small to medium-sized businesses in the Czech Republic. Technically, the site runs on WordPress with Bootstrap and jQuery, integrating Google reCAPTCHA v3 for spam protection. However, it lacks some modern security headers and a cookie consent mechanism, which are areas for improvement. The domain registration data is consistent with the website's claims, supporting the legitimacy of the business.

The website deslivresencommuns.org serves as a digital archive and publishing platform for the non-profit association Framasoft, focusing on open access books under the project "Des Livres en Communs". It provides access to previous publications under the "Framabook" label and aims to progressively release new editions. The site targets French-speaking audiences interested in libre culture and digital commons. Technically, the site is built using the Hugo static site generator, styled with Bootstrap and Fork Awesome, and hosted by OVH sas. It employs Matomo analytics for user tracking, favoring privacy over commercial trackers. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

I

I love Hummus s.r.o.

ilovekimchi.de

49

I love Hummus s.r.o. operates the website ilovekimchi.de, an e-commerce platform specializing in Korean fermented foods such as Kimchi. The company targets both B2B partners and retail customers, emphasizing certified quality products under strict IFS and BIO standards. The website is professionally designed, multilingual, and offers a range of products with clear pricing and availability. The business maintains a niche market position with a focus on health-conscious consumers and wholesale partnerships. Technically, the website leverages modern e-commerce infrastructure provided by Upgates, integrates multiple analytics and marketing tools including Google Analytics 4, Microsoft Clarity, and Facebook Pixel, and uses standard web technologies such as Bootstrap and jQuery. Hosting is managed via Forpsi nameservers, indicating a reliable hosting environment. The site is mobile-optimized and SEO-friendly, with proper cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analysis. WHOIS data is minimal but consistent with a small business profile. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and maintain regular audits of third-party scripts. The website is trustworthy, compliant with GDPR, and provides clear contact channels, supporting a positive user and business experience.

A

Alliance Maladies Rares

alliance-maladies-rares.org

49

Alliance Maladies Rares is a French non-profit organization dedicated to promoting research, mutual aid, information dissemination, training, and advocacy related to rare diseases and rare disabilities. Established since 2001, it serves patients, families, healthcare professionals, and researchers within the rare disease community in France. The website reflects a professional and consistent brand presence, targeting a general audience interested in healthcare and support services for rare conditions. Technically, the website is built on WordPress, utilizing common libraries such as jQuery and Bootstrap, hosted by OVH sas, a reputable French hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. Cookie consent mechanisms are implemented, indicating awareness of GDPR requirements, although privacy and terms of service policies are missing. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and no security headers were detected, representing areas for improvement. No incident response or vulnerability disclosure policies are published, which could enhance trust and compliance. No adult or explicit content is present, making the site safe for general audiences. Overall, the website is credible and trustworthy, with a solid business foundation and technical infrastructure. Strategic improvements in privacy compliance, security headers, and DNSSEC implementation would strengthen its security posture and regulatory adherence.

S

STORMWARE s.r.o.

stormware.cz

11

STORMWARE s.r.o. is a well-established Czech software company specializing in economic and accounting software solutions, primarily through its flagship product POHODA. The company targets entrepreneurs and medium to large enterprises, offering a comprehensive suite of products including payroll, tax, and mobile invoicing software. Their market position is strong within the Czech Republic, supported by extensive customer support, training, and a professional online presence. Technically, the website is built on ASP.NET with modern JavaScript libraries and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, a strict Content-Security-Policy, and cookie consent mechanisms, reflecting a mature security posture. However, the absence of WHOIS data limits domain trust verification. Overall, the site is professional, secure, and compliant with GDPR, making it a trustworthy platform for its users.

I

International Fiscal Association

ifa.nl

57

The International Fiscal Association (IFA) is a well-established non-governmental and non-sectoral international organization focused on the study and advancement of international and comparative fiscal law. Founded in 1938 and based in the Netherlands, IFA serves a global audience of tax professionals, academics, government officials, and judiciary members. The website reflects a professional and authoritative presence with comprehensive content about its congresses, research, awards, and membership services. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, and it is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations.

R

Regiontourist.cz

regiontourist.cz

50

Regiontourist.cz is a Czech Republic-based online tourism platform established in 2009, offering curated accommodation listings, travel experiences, and regional travel tips. The platform targets tourists and service providers in the hospitality sector, providing a marketplace and content hub for travel planning within the Czech Republic. The website demonstrates a good level of content quality, with clear navigation, structured data for SEO, and active social media integration. Technically, it uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Google Tag Manager, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which impacts trust and transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

R

RI OKNA

ri-okna.cz

56

RI OKNA is a well-established Czech manufacturer specializing in windows and doors, with nearly 30 years of experience and a strong market presence in the Czech Republic and EU. The company offers a wide range of products made from various materials including plastic, wood, aluminum, and composite materials, supported by customer service and installation offerings. The website reflects a mature digital presence with multilingual support and a professional design. Technically, the site is built on WordPress with modern frameworks and includes multiple marketing and analytics tools. Security posture is adequate with HTTPS and secure forms, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness. Overall, the site is professional and trustworthy, serving a broad general audience in the manufacturing sector.

A

Výrobní systém Alokace

alokace.cz

41

The website www.alokace.cz presents a manufacturing and production management software system targeted primarily at Czech manufacturing companies. It offers comprehensive features including order management, production tracking, cooperation handling, returns, employee and warehouse management, and integrated accounting with EET support. The business model appears to be SaaS or online system access, catering to small manufacturing businesses. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information suggest a legitimate business. Security posture is moderate with recommendations to improve SSL configuration, security headers, and privacy compliance. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

P

ppwork | employee management system

ppwork.cz

42

The website ppwork.cz presents a specialized employee management system tailored for personnel agencies, primarily targeting the Czech Republic market. The platform offers comprehensive workforce management features including attendance tracking, payroll calculation, and administrative support. The business model is SaaS-based, focusing on small to medium-sized personnel agencies, with customization options for client-specific needs. The website content is professional and well-structured, providing clear information about the system's capabilities and benefits. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various JavaScript libraries for animations and UI enhancements. The site is mobile-optimized and demonstrates good design quality and user experience. However, there is no evidence of advanced SEO or accessibility features, and no CMS or hosting provider information is discernible. Performance is moderate, with no major issues detected. From a security perspective, the site lacks visible security headers and published security policies. The absence of HTTPS verification data and WHOIS information raises concerns about domain legitimacy and security posture. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR or other data protection regulations. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and business-focused but would benefit from enhanced security measures, transparency in domain registration, and improved privacy compliance. Strategic recommendations include implementing HTTPS with strong SSL, publishing privacy and cookie policies, adding security headers, and providing clearer contact and incident response information to build trust and compliance.

F

Ferrino

ferrino.cz

50

Ferrino.cz is a professional e-commerce website specializing in the retail of outdoor equipment such as tents, sleeping bags, backpacks, and apparel, primarily targeting customers in the Czech Republic and Slovakia. The site serves as the exclusive importer and retailer of Ferrino brand products in these markets, offering a comprehensive product catalog, rental services, and customer support. The website demonstrates a solid market position with a focus on outdoor enthusiasts and professionals. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools, with good mobile optimization and user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the website content and branding appear legitimate and professional. Overall, the site is well-structured, privacy compliant, and trustworthy for its business domain.

A

AiVision, s.r.o.

aivision.cz

53

AiVision, s.r.o. is a Czech Republic based technology company specializing in web development, e-commerce solutions, and IT services with over 21 years of market presence. The company offers a comprehensive portfolio including website creation, web design, database applications, SEO, hosting, and WordPress security services. Their market position is that of an established local provider focused primarily on Prague and surrounding regions. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for marketing and tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, though business legitimacy is supported by consistent contact information and client references. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in security transparency and WHOIS data availability.

A

Atmo France

atmo-france.org

62

Atmo France operates as the national federation coordinating regional associations responsible for monitoring air quality across France and its overseas territories. The organization provides comprehensive data, alerts, and educational resources to the general public, local authorities, businesses, and educational institutions. Their market position is that of an authoritative, government-aligned non-profit entity focused on environmental health and air quality surveillance. Technically, the website is built on Drupal 9, leveraging modern web technologies such as Bootstrap, Google Fonts, and FontAwesome for styling and responsiveness. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and accessible, with clear navigation and interactive features such as maps and indices for air quality and pollen. From a security perspective, the site uses HTTPS and includes some anti-bot measures, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website presents a trustworthy and professional front for a public-interest environmental organization. The lack of WHOIS data due to privacy protection is typical for such entities and does not detract from legitimacy. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and publishing clear contact and incident response information to strengthen trust and compliance.

NMO Brasil is a small Brazilian non-profit association dedicated to supporting patients with Neuromyelitis Optica and related diseases. Founded in 2014, it provides educational resources, awareness campaigns, and community engagement primarily targeting patients, families, and the medical community. The website reflects this mission with clear informational content and links to related partner organizations. Technically, the site uses a standard Bootstrap-based stack with common JavaScript libraries, hosted likely on AWS infrastructure. While the site is mobile-optimized and well-structured, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. No forms collecting personal data are evident on the main page, and no social media links are present, limiting direct engagement channels. The WHOIS data is consistent with the organization's profile and domain age aligns with the founding date, supporting legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance features.

F

Fundación CAMINEMOS.mx

caminemos.mx

43

Fundación CAMINEMOS.mx is a Mexican non-profit organization dedicated to supporting individuals affected by demyelinating diseases such as Multiple Sclerosis and Neuromyelitis Optica. The website serves as an educational and community platform offering verified medical information, events, and a directory of specialists and resources. The organization targets Spanish-speaking patients, caregivers, and medical professionals, positioning itself as a trusted source within its niche healthcare segment. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with Google Fonts and Google Analytics integrated. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no advanced security headers or policies are detected, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to an email and a contact form, with no phone or physical address disclosed. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

The Autoimmune Encephalitis Alliance is a specialized non-profit organization dedicated to supporting patients, caregivers, healthcare professionals, and researchers involved with autoimmune encephalitis. Their mission focuses on collaborative research, clinical care, education, and community support to find a cure and improve patient outcomes. The website reflects a mature organization with a clear market position in the healthcare non-profit sector, offering key services such as patient support, professional resources, research grants, and community engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Gravity Forms. It employs Google Analytics and Tag Manager for tracking and uses Google reCAPTCHA to secure forms. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Hosting and domain registration are stable and consistent with the organization's history. From a security perspective, the site uses HTTPS with a valid SSL configuration and implements reCAPTCHA on forms to prevent abuse. However, it lacks security headers and DNSSEC, and does not publish a security policy or incident response contacts. Privacy compliance is limited as no privacy or cookie policies were found, which is a notable gap for GDPR and other regulations. Overall, the website is professional, trustworthy, and content-rich, but could improve its privacy and security posture to enhance compliance and user trust. Strategic improvements in security headers, privacy disclosures, and incident response transparency are recommended to strengthen the organization's digital maturity and risk management.

T

The Insight Group

insightgroup.com.au

62

The Insight Group is a well-established Australian executive search firm specializing in leadership recruitment across education, non-profit, government, and commercial sectors. With over 30 years of experience and membership in the global Kestria alliance, the company offers tailored executive search services supported by a global network. The website presents a professional and comprehensive digital presence with rich multimedia content and clear business messaging. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and YouTube integration, ensuring good mobile responsiveness and user experience. SEO and accessibility are well addressed, though performance is moderate. Security posture is adequate with HTTPS implied, but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the security posture is solid but could be improved by publishing incident response policies, vulnerability disclosure, and enhancing privacy compliance. The domain WHOIS data is privacy-protected but consistent with a legitimate business. No critical vulnerabilities or suspicious indicators were found, supporting a high trust level for the website and business. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving contact information visibility to strengthen trust and compliance.