Security Directory

B

Bookimed Limited

bookimed.com

67

Bookimed Limited operates an international medical tourism platform facilitating hospital search and treatment arrangements worldwide. The website targets patients seeking verified clinics and doctors abroad, offering extensive patient reviews and treatment options. The platform is well-established with a strong market position in healthcare travel, supported by a medium-sized team and multiple international contact points. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with integrated analytics and tracking tools for marketing and user behavior analysis. Security posture is strong with HTTPS, security headers, and secure forms, although dedicated security and incident response policies are not publicly found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving a general audience safely.

F

Farmi

farmi.com

70

Farmi is a French e-commerce platform specializing in agricultural products and services, catering primarily to farmers and agricultural professionals. The website presents a professional and well-structured online marketplace, offering a range of products and services tailored to the agricultural sector. The platform leverages modern web technologies such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are clearly stated and comply with GDPR requirements, enhancing user trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall business credibility. Security measures such as HTTPS and security headers are properly implemented, but the lack of a published security policy and incident response information suggests room for improvement in transparency and preparedness. Overall, Farmi demonstrates a solid digital presence with good technical foundations but should address domain registration transparency and enhance security communication to strengthen trust and compliance.

K

Karlovarská Korunní, s.r.o.

korunni.cz

51

Karlovarská Korunní, s.r.o. is a Czech company specializing in the production and sale of flavored mineral waters enriched with vitamins and minerals. The company positions itself as a provider of healthy, functional beverages with low sugar content and no artificial additives, targeting health-conscious consumers. The website reflects a well-established brand with consistent messaging and a focus on product benefits. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, integrating standard analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Overall, the domain's WHOIS data is consistent with the business claims, indicating a legitimate and trustworthy entity.

J

J&T INVESTIČNÍ SPOLEČNOST, a.s.

jtarchinvestments.cz

47

J&T ARCH INVESTMENTS is a Czech-based qualified investor fund managed under the supervision of the Czech National Bank. The fund focuses on co-investing alongside the founding families of J&T and leading Czech-Slovak business figures, targeting sectors such as energy, banking, e-commerce, media, real estate, hospitality, and professional sports. The website is built on a modern Nuxt.js framework, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers properly implemented, though privacy and cookie policies are absent, which is a compliance gap. WHOIS data is missing, which slightly reduces domain trustworthiness but the business content and partner references support legitimacy. Overall, the site is professional and trustworthy for its target audience of qualified investors.

L

LD Seating

ldseating.com

67

LD Seating is a manufacturing company specializing in seating products, with a long-established online presence since 2002. The website showcases their product lines and targets business customers seeking seating solutions. Technically, the site is built using modern frameworks such as Nuxt.js and styled with Tailwind CSS, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports legitimacy and business credibility. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

Toptrans is a well-established transportation and logistics company operating primarily in the Czech Republic and Slovakia. The company offers parcel and pallet shipping services alongside warehousing and packaging solutions, targeting businesses and individuals requiring reliable logistics support. The website reflects a professional business presence with clear contact information and a focus on service offerings. Technically, the site is built using modern JavaScript frameworks such as Nuxt.js and integrates multiple tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Adform. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is adequate with HTTPS enforced, but lacks important security headers and visible privacy and cookie policies, which impacts compliance and user trust. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not significantly detract from the site's legitimacy given the business context. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

K

Korea Hydro and Nuclear Power Company (KHNP)

korejskaenergie.cz

53

Korejskaenergie.cz is a professionally designed website representing Korea Hydro and Nuclear Power Company (KHNP), a large South Korean state-owned enterprise specializing in nuclear power plant construction and operation. The site targets Czech stakeholders and investors, promoting KHNP's advanced nuclear technology and experience, particularly for the Dukovany nuclear power plant project. The website uses modern web technologies including Nuxt.js and integrates social media and video content to enhance engagement. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks published privacy and cookie policies, security headers, and explicit contact information. The domain registration is consistent and appropriate for the business's regional presence. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

I

ICT UNION

ictunie.cz

55

ICT UNION is a professional association representing companies in the electronic communications sector in the Czech Republic. Founded in 2010, it serves as a platform to promote the adoption of modern information technologies among businesses and government bodies, fostering a knowledge-based society. The association offers membership services, organizes working groups on specialized ICT topics, and hosts events to educate and connect industry stakeholders. The website reflects a medium-sized organization with a solid market position and a clear focus on telecommunications and technology sectors. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with responsive design and moderate performance. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, with active social media presence and partnerships enhancing credibility.

Z

Zaslat s.r.o.

zaslat.sk

63

Zaslat s.r.o. operates an online parcel shipping platform primarily serving Slovakia and international markets. The company offers a convenient service allowing customers to compare prices and book courier shipments from home, partnering with multiple carriers such as FedEx, GLS, and others. The platform is well-established with over 26,800 customers and nearly 98,000 reviews, indicating strong market presence and customer trust. Technically, the website leverages modern frameworks like Nuxt.js and Vue.js, integrates Google and Facebook APIs for authentication and analytics, and employs security measures such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies suggests room for improvement in compliance documentation. Overall, the site is professional, user-friendly, and secure, but could enhance transparency and security posture by publishing dedicated policies and incident response information.

Z

Zaslat s.r.o.

zaslat.cz

64

Zaslat s.r.o. operates an online platform that enables customers to compare parcel shipping prices and arrange courier pickups for domestic and international deliveries. The company targets both individual consumers and businesses, offering a convenient alternative to traditional postal services with significant cost savings. With a strong market presence in the Czech Republic and partnerships extending internationally, Zaslat has established itself as a trusted logistics intermediary since its founding in 2014. The website demonstrates a mature digital infrastructure leveraging modern web frameworks and third-party integrations to provide a seamless user experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though explicit privacy and security policies are not clearly presented. Overall, the business exhibits a solid reputation supported by extensive customer reviews and active social media engagement.

Č

Česká komora architektů

ceskacenazaarchitekturu.cz

44

The website ceskacenazaarchitekturu.cz serves as the official portal for the Czech Architecture Award 2025, organized by the Czech Chamber of Architects. It showcases the best architectural realizations built in the Czech Republic over the last five years, providing information about the competition, timelines, nominees, and public voting. The site targets architects, industry professionals, and the general public interested in architecture within the Czech Republic. The business model is non-profit and focused on promoting architectural excellence and public engagement through exhibitions and awards. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted on DigitalOcean, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with preloading of scripts and responsive design elements. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of visible privacy and cookie policies, which are important for GDPR compliance. No vulnerability disclosures or incident response contacts are provided, indicating room for improvement in security transparency and user trust. Overall, the website is professional and trustworthy, with consistent branding and relevant content. The domain registration data aligns well with the business purpose and history, supporting legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and publishing vulnerability disclosure and incident response information to strengthen security posture and compliance.

D

Dentsu Česká republika

dentsu.cz

56

Dentsu Česká republika is a local branch of the global Dentsu Group, providing integrated marketing and communication services to brands in the Czech Republic. The company positions itself as a partner for meaningful progress, leveraging the One Dentsu philosophy to offer collaborative and innovative solutions. The website reflects a professional marketing agency with a clear focus on brand growth and customer engagement. Technically, the website is built on modern JavaScript frameworks such as Vue.js and Nuxt.js, with optimized fonts via Typekit. The site is moderately performant and mobile-optimized, though accessibility and SEO optimizations are basic. The technical infrastructure indicates a contemporary digital presence but lacks some advanced security and privacy features. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security or privacy policies. No vulnerability disclosures or incident response contacts are published, which could be improved. The absence of privacy and cookie policies suggests incomplete GDPR compliance. Overall, the security posture is moderate but could benefit from enhancements. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, publishing incident response information, and improving contact transparency to strengthen trust and compliance.

K

Knihovna Jiřího Mahena v Brně

kjm.cz

50

The website kjm.cz represents the official online presence of Knihovna Jiřího Mahena v Brně, a public library serving the Brno region in the Czech Republic. The site provides access to library services including book lending, event information, and branch locations, targeting the general public and library users. The business model is government-funded public service, positioning the library as a regional cultural and educational institution. The website's content is relevant and professionally presented, with consistent branding and a clear focus on library services. Technically, the site is built using modern web technologies such as Vue.js and Nuxt.js, styled with Tailwind CSS, and integrates Google Maps API for location services. The site is mobile-optimized and offers a good user experience with clear navigation. Performance is moderate, and SEO and accessibility features are basic but present. The site uses HTTPS, ensuring encrypted communication. From a security perspective, the site demonstrates a good posture with HTTPS enabled and no visible sensitive data exposure. However, it lacks important security headers such as Content-Security-Policy and HSTS, which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive information were detected. Privacy compliance is partial; a cookie consent mechanism is present, but no explicit privacy policy or terms of service were found in the provided content. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content. The absence of WHOIS data and registrant information reduces the domain trustworthiness score, but the website content and presentation support legitimacy. Strategic recommendations include adding comprehensive privacy and security policies, implementing security headers, and improving WHOIS transparency to enhance trust and compliance.

P

Performax

performax.cz

54

Performax is a business-oriented website likely offering performance optimization or consulting services, targeting professional audiences. The website is built using modern JavaScript frameworks such as Nuxt.js and employs analytics tools like Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of WHOIS data and registrant information limits the ability to fully verify the business legitimacy and domain ownership. Security posture is basic, with no evident security headers or advanced protections, and privacy compliance is minimal due to the lack of visible privacy or cookie policies. Overall, the website is accessible and functional but would benefit from enhanced transparency and security measures.

F

FTV Prima spol. s r.o.

iprima.cz

59

FTV Prima spol. s r.o. operates the www.iprima.cz website, a leading Czech streaming platform offering films, TV series, and live broadcasts primarily targeting Czech-speaking audiences. The platform supports multiple devices and offers premium subscription services. The website is professionally designed with consistent branding and high-quality content, positioning it as a major player in the Czech media streaming market. Technically, the site leverages modern web technologies including Nuxt.js, Amazon Cloudfront CDN, and integrates advanced analytics and consent management tools such as Gemius, Smartlook, and Didomi. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is due to privacy protection, which is common and justified for media companies. However, the site would benefit from publishing clear security policies and incident response contacts. Overall, www.iprima.cz presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing security and incident response information, and maintaining transparency in privacy compliance.

D

Dr. Max

drmax.cz

68

Dr. Max is a prominent pharmacy chain operating in the Czech Republic, offering a wide range of pharmaceutical products, dietary supplements, medical supplies, and cosmetics through both physical locations and an e-commerce platform. The website demonstrates a mature digital presence with modern technologies such as Magento for e-commerce, Nuxt.js for frontend, and integration with various marketing and analytics tools. The company maintains active social media channels and provides clear contact information, enhancing customer trust and engagement. However, the absence of publicly accessible WHOIS data and explicit privacy and terms of service pages slightly detracts from the overall transparency and compliance posture. Security measures are robust, including HTTPS enforcement, security headers, and CAPTCHA mechanisms, indicating a strong commitment to protecting user data and preventing abuse. Overall, the site is professional, user-friendly, and well-optimized for performance and accessibility.

G

GoOut

goout.net

76

GoOut.net is an established online platform specializing in cultural event listings and ticket sales, primarily serving the Czech Republic and surrounding regions. Founded in 2010, it offers users comprehensive information about concerts, festivals, theatre, exhibitions, and parties, positioning itself as a key player in the regional cultural media sector. The website provides inspiration and ticketing services for various cultural venues including theatres, cinemas, galleries, clubs, and museums. Technically, the site leverages modern JavaScript frameworks such as Nuxt.js, integrates reputable third-party services for analytics and advertising, and employs Cloudflare for DNS management. The presence of a detailed cookie consent mechanism powered by Cookiebot demonstrates a commitment to privacy compliance and user consent management. Security-wise, the site enforces HTTPS and domain registration protections but could improve by enabling DNSSEC and publishing explicit security policies. Overall, the website is professionally designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

L

LifeLine Ukraine

lifelineukraine.com

63

LifeLine Ukraine is a non-profit organization providing critical mental health support and suicide prevention services across Ukraine. Established in 2019, it operates a 24/7 hotline (short number 7333) and offers crisis intervention, educational courses, and resources. The organization targets individuals experiencing emotional crises, including veterans and the general population. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site uses modern frameworks such as Nuxt.js and Prismic CMS, integrating analytics and live chat tools to enhance user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers are recommended. Overall, the domain registration aligns well with the organization's history, supporting its legitimacy.

B

Bürocratik

burocratik.com

65

Bürocratik is a digital branding and design agency presenting itself as a transdisciplinary practice with global reach and critical acclaim. The website showcases a professional and modern digital presence built on Nuxt.js and Vue.js frameworks, optimized for performance and mobile responsiveness. Despite the high-quality content and design, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and registration status. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal privacy or cookie policies. The site uses analytics tools such as Umami and Google Analytics without visible consent mechanisms, indicating potential privacy compliance gaps. Overall, the business appears credible and professional, but domain registration inconsistencies and missing compliance documentation suggest areas for improvement.

E

EBZ Akademie

ebz-training.de

58

EBZ Akademie is a reputable educational institution specializing in training and certification for the housing and real estate industry in Germany. The website serves as a comprehensive portal for their educational offerings including certificate courses, degree programs, seminars, and consulting services. Their market position is well-established within the German real estate education sector, targeting professionals and companies seeking specialized knowledge and qualifications. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Matomo analytics for privacy-conscious tracking. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response contacts are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

T

Tichá linka

tichalinka.cz

49

Tichá linka is a Czech non-profit organization providing online sign language interpretation and speech transcription services primarily for the deaf, hard of hearing, and those with hearing impairments. The website offers access to these services via a mobile application and online platform, supported by governmental and municipal partners. The organization holds a recognized position in social services within the Czech Republic, with a focus on accessibility and communication support. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted likely on Vercel, and optimized for mobile and performance. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. WHOIS data is unavailable, limiting domain trust assessment, but the website's content and partner references support legitimacy.

Pipeback is a technology startup founded in 2023 that provides an AI-native customer growth platform tailored for SaaS companies. The platform integrates multiple customer touchpoints including support, CRM, knowledge base, product updates, sales, and marketing into a unified solution designed to help SaaS startups scale efficiently. The website presents a professional and modern design, emphasizing ease of use and AI-powered automation to enhance customer engagement and growth. Technically, the site is built using Nuxt.js and Tailwind CSS, hosted on Cloudflare, and optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are not found, indicating potential compliance gaps. Overall, the site is trustworthy and well-positioned in the SaaS market but would benefit from enhanced privacy compliance and security disclosures.

M

Marta Editions

marta-editions.com

66

Marta Editions is a specialized e-commerce business focused on releasing limited edition, numbered art prints in collaboration with artists and architectural firms. The website presents a professional and curated experience targeting art collectors and enthusiasts. Technically, the site leverages modern frameworks such as Nuxt.js and integrates Shopify for commerce, supported by Sanity.io as a CMS. The site is well-optimized for mobile and SEO, with fast performance and clear navigation. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. WHOIS data is missing, which raises some concerns about domain legitimacy, but the overall professional presentation and detailed policies suggest a legitimate business. Strategic recommendations include adding security headers, implementing cookie consent, and monitoring domain registration status to improve trust and compliance.

Verokey is an Australian-based Issuing Certificate Authority specializing in digital certificate services. The website presents a professional but basic digital presence focused on providing certificate issuance and management services primarily to Australian businesses and organizations. The technical infrastructure leverages modern frontend technologies such as Nuxt.js and Tailwind CSS, indicating a contemporary approach to web development with good mobile optimization and moderate performance. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is weak due to missing security headers and unknown SSL configuration, which could expose users to risks. The WHOIS data is privacy protected, limiting transparency about the domain ownership and registration details, which slightly reduces trustworthiness. Overall, the website is functional but requires improvements in security and compliance to enhance its credibility and user confidence.

SSLTrust is a specialized online provider of SSL/TLS certificates and web security products, targeting businesses and website owners primarily in New Zealand. The company positions itself as the number one provider with local New Zealand support, offering a broad range of certificate types including standard, business, wildcard, EV, multi-domain, email, code signing, and automation certificates. Their business model focuses on reselling trusted SSL brands such as Comodo, Sectigo, and RapidSSL, complemented by additional web security services like malware scanning. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates Google Tag Manager for analytics. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and modern JavaScript frameworks but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain www.ssltrust.co.nz raises concerns about domain registration legitimacy, although the website content and branding appear professional and consistent with a legitimate business. Overall, the site demonstrates a good security posture and technical maturity but would benefit from enhanced privacy compliance and transparency.

SSLTrust is a specialized e-commerce provider focused on selling SSL/TLS and digital certificates with a strong emphasis on European support. The website offers a broad range of certificate types including standard DV, OV, EV, wildcard, multi-domain, email signing, code signing, and automation certificates. Their market position is self-stated as the number one provider with European support, targeting businesses and website owners seeking trusted web security solutions. The site is built on modern web technologies such as Nuxt.js and Tailwind CSS, providing a responsive and professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. The domain WHOIS data is privacy protected by EURid, which is typical for EU domains and does not raise immediate concerns. Overall, SSLTrust presents as a legitimate and professional business in the web security industry.

SSLTrust is an established online provider specializing in SSL/TLS certificates and digital security products, emphasizing Canadian customer support. The company offers a broad range of SSL certificates including standard DV, business OV, EV, wildcard, multi-domain, email signing, and code signing certificates. Their market position is that of a leading SSL certificate reseller with partnerships with major certificate authorities such as Comodo, Sectigo, DigiCert, and others. The website is built on modern web technologies including Nuxt.js and Tailwind CSS, providing a professional and responsive user experience. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though security headers are not visibly implemented. Privacy and cookie policies are not detected, indicating room for compliance improvement. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection. The business targets Canadian and international website owners and enterprises seeking trusted SSL certificates and web security solutions.

SSLTrust is a technology-focused company specializing in the resale of SSL/TLS and digital certificates, primarily targeting businesses and website owners in India. The company positions itself as the number one provider with local Indian support, offering a wide range of SSL products including standard, business, wildcard, EV, multi-domain, email, code signing, and automation certificates. Their website is professionally designed using modern frameworks such as Nuxt.js and Tailwind CSS, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, supporting a good user experience. Security-wise, the website uses HTTPS and modern JavaScript frameworks but lacks visible security headers and formal security policies, which are areas for improvement. Contact information is clearly presented, but privacy and cookie policies are missing, impacting compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and adding vulnerability disclosure information to strengthen trust and compliance.

S

SSLTrust

ssltrust.com.au

61

SSLTrust is a specialized e-commerce provider focused on selling SSL/TLS certificates and digital certificates with a strong emphasis on Australian customers, offering local support. The company positions itself as a leading SSL certificate provider in Australia, leveraging recognized certificate brands such as Comodo, Sectigo, and RapidSSL. Their business model revolves around reselling security certificates to businesses and website owners seeking to secure their online presence. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user trust and engagement. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates Google Tag Manager for analytics. The site demonstrates good performance, accessibility, and SEO practices. Security-wise, SSLTrust enforces HTTPS, employs standard security headers, and secures its forms properly. However, it lacks explicit security policies or incident response pages, which could be improved to enhance transparency and trust. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. The WHOIS data is unavailable due to privacy restrictions, but the website's professionalism and operational transparency indicate a legitimate and trustworthy business. Strategic recommendations include publishing a vulnerability disclosure policy and incident response information to further strengthen security culture and customer confidence.

F

FINE

wearefine.com

68

FINE is a digital branding agency specializing in planning, creating, and evolving brand expressions for companies. Positioned as a top agency with offices in San Francisco and Portland, it targets businesses seeking modern digital branding solutions. The website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, indicating a contemporary technical infrastructure. The site includes multiple third-party marketing and analytics tools, including Google Tag Manager, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, and Reddit Pixel, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and no exposed sensitive data detected; however, the absence of security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, which raises some legitimacy concerns about domain registration, though the professional website content suggests a legitimate business. Overall, the website scores well in content quality and technical implementation but needs enhancements in privacy compliance and security best practices.

I

Institut plánování a rozvoje hlavního města Prahy

dtm-praha-sck.cz

60

The website portal.dtm-praha-sck.cz serves as the official portal for the Digital Technical Map (DTM) of Prague and the Central Bohemian Region. Operated by the Institute of Planning and Development of the Capital City of Prague, it provides access to public data packages, documentation, data validation tools, metadata, georeports, and statistics related to the digital technical map. The portal is positioned as a central hub for government entities, municipalities, and infrastructure managers, supported by European Union funding and national recovery plans. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with PrimeVue components and Tailwind CSS for styling, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA integration, although explicit security policies and incident response contacts are not published. The absence of WHOIS data is a notable gap, but the website's content and official affiliations suggest legitimacy. Overall, the portal demonstrates a mature digital infrastructure supporting government geospatial data services.

S

Práce, která vás posune vpřed | StartupJobs.cz

startupjobs.cz

41

StartupJobs.cz is an online job portal specializing in startup job opportunities within the Czech Republic. The platform targets job seekers interested in the startup ecosystem and startups looking to recruit talent. The business model revolves around providing a niche job board service connecting startups and candidates. The website's content and design are basic but functional, focusing on relevant job listings and career advancement in the startup sector. Technical infrastructure includes modern JavaScript frameworks such as Nuxt.js, and analytics tools like Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of WHOIS data and registrant information limits the ability to fully verify domain legitimacy. Security posture shows room for improvement, with no detected security headers and unknown SSL configuration. Privacy compliance is weak, with no visible privacy or cookie policies. Overall, the website appears legitimate and safe for general audiences but would benefit from enhanced security and compliance measures.

R

represent.network

represent.network

53

Represent.network is a niche online platform dedicated to highlighting the work of BPOC and (post)migrant visual communicators living and working in Germany. The website serves as a cultural and creative network, providing visibility and connection opportunities for this community. The platform uses modern web technologies including Vue.js and Nuxt.js, and employs privacy-focused analytics via Plausible. The site is accessible and uses HTTPS, but lacks comprehensive contact information, cookie consent mechanisms, and security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for small niche sites but limits transparency. Overall, the site is functional and safe but could enhance trust and compliance by improving security and privacy features.

I

Institut plánování a rozvoje hl. města Prahy

geoportalpraha.cz

58

Geoportál Praha is the official geographic data and mapping portal for the city of Prague, operated by the Institut plánování a rozvoje hl. města Prahy. It provides a comprehensive suite of map applications, data services, and urban planning resources targeted at public sector users, urban planners, GIS professionals, and the general public. The portal serves as a central hub for accessing spatial data and related services for the city, reinforcing its position as a key government resource in the Czech Republic. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Microsoft Azure infrastructure, and optimized for performance and mobile use. Security posture is strong with HTTPS, appropriate security headers, and no detected vulnerabilities or exposed sensitive data. Privacy compliance is evident with a cookie consent mechanism and a privacy policy, though terms of service and explicit security policies are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

S

SavoirFaire©

savoirfaire.nyc

58

SavoirFaire© is a small, holistic creative studio based in New York City, founded in 2020. The company specializes in digital and branding design, photography, and film production, aiming to help businesses bring their vision to life through best-in-class digital experiences and meaningful storytelling. The website reflects a professional and modern digital presence, leveraging Nuxt.js and Prismic CMS to deliver a visually rich and interactive user experience. The use of Google Tag Manager indicates an awareness of analytics and user behavior tracking, although privacy compliance measures such as cookie consent and privacy policies are currently absent. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the lack of security headers and incident response information suggests room for improvement. Overall, the website is safe, well-designed, and targeted at business clients seeking creative services, but it would benefit from enhanced transparency and compliance documentation.

A

Augen Pro

augen.pro

64

Augen Pro is a technology company specializing in AI-driven wearable and neural computing devices aimed at enhancing human capabilities through invisible computing technologies. Their market position is that of an innovator in the AI wearable space, focusing on research and development of advanced health tools and neural interfaces. The company targets tech-savvy users and professionals interested in cutting-edge AI and wearable technology. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, leveraging Storyblok CMS for content management, and optimized for mobile and SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and incident response information. Privacy compliance is addressed with linked policies, but lacks a cookie consent mechanism. Overall, the website presents a professional and trustworthy image consistent with a small, innovative tech company based in Italy.

J

Joinnus

joinnus.com

63

Joinnus is an online ticketing platform focused on providing event tickets for concerts, theater, sports, and other entertainment activities primarily targeting Spanish-speaking audiences. The website presents a professional and modern design, leveraging contemporary JavaScript frameworks such as Nuxt.js and integrating multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. The platform facilitates event discovery and ticket purchases, positioning itself as a regional player in the e-commerce entertainment sector. Despite the professional front-end and user experience, the absence of publicly available WHOIS data and lack of visible privacy or cookie policies present concerns regarding transparency and compliance. Security posture is generally good with HTTPS enforced and standard security headers in place, but the site would benefit from explicit privacy and security disclosures.

S

Spectacle - The Best Video Marketing Inspiration

spectacle.is

51

Spectacle.is is a niche media platform founded in 2019 that curates and showcases the best product and marketing videos to inspire brands and marketers. The website targets marketing professionals and content creators seeking video marketing inspiration. Technically, the site is built on modern JavaScript frameworks such as Vue.js and Nuxt.js, with integrations for Google Analytics, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is mobile optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and reCAPTCHA for forms but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is legitimate and stable but would benefit from improved privacy and security practices.

A

Impactful B2B ads, explained — Adfolio

adfolio.design

69

Adfolio.design is a niche content curation platform specializing in impactful B2B advertisements, primarily focusing on Meta and LinkedIn ads. The website offers hand-picked ad examples and detailed explanations aimed at marketers and creatives seeking design and copy inspiration. The business model revolves around content curation and a newsletter subscription service that provides actionable tips and best practices for creating effective B2B ads. The site also promotes an ad design service through a partner, Diligent Studios. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted likely on Vercel, and optimized for performance and mobile responsiveness. It employs LinkedIn Insight Tag for analytics and retargeting. The site features a cookie consent mechanism and a privacy policy, indicating a reasonable level of privacy compliance. From a security perspective, the website uses HTTPS and secure forms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, but the professional presentation and content quality support a positive trust assessment. Overall, Adfolio.design presents as a professional, well-maintained platform with a clear business focus and good technical implementation. Strategic improvements in security headers, contact transparency, and policy disclosures would enhance its security posture and trustworthiness.

M

MaxiBestOf

maxibestof.one

58

MaxiBestOf is a niche online platform providing curated inspiration for website designs and fonts, targeting web designers and creative professionals globally. Founded in 2016 and registered in France, it operates as a small business project by Bertrand Bruandet. The platform offers a daily feed of design inspiration, categorized website galleries, font styles, and a weekly newsletter subscription service. It monetizes through advertising and sponsorships, featuring partner promotions and affiliate links. Technically, the site is built on modern JavaScript frameworks including Nuxt.js and Vue.js, leveraging Cloudflare DNS and CDN for performance and reliability. The website is well-optimized for mobile and SEO, with a clean, professional design and clear navigation. Security-wise, the site enforces HTTPS and domain transfer protections but lacks DNSSEC and advanced security headers. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy and security practices.

O

Odorne

odorne.com

58

Odorne is a niche online platform focused on sharing inspiring home interiors from around the world and identifying the unique items that make these spaces special. The website targets home decor enthusiasts, interior designers, and homeowners seeking inspiration and product discovery. It offers curated content featuring various interior spaces and products, supported by a newsletter subscription to engage its audience. Technically, the site is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted via Cloudflare, and employs image optimization through Imgix. The site demonstrates good performance and mobile optimization, with a clean and professional design. Security-wise, the site enforces HTTPS and uses Cloudflare DNS, but lacks visible security headers and formal security policies. Privacy compliance is weak, with no visible privacy or cookie policies, and limited contact information is provided. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

U

Uneed

uneed.best

71

Uneed is a technology platform positioned as a launch and promotion platform for new products, serving as an alternative to Product Hunt. It targets product creators, startups, and developers by providing a space to discover, vote, and promote products. The platform features daily, weekly, monthly, and yearly product launches with badges and newsletter features. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with image hosting on Supabase and usage of icon libraries like Iconify. The site is well-designed, mobile-optimized, and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and modern web standards but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration aligns with the business, indicating legitimacy. The site does not contain adult or explicit content and is safe for general audiences.

NuxtDir is a specialized online directory platform focused on showcasing and promoting AI websites and products globally. It aims to help AI product developers gain visibility and user traction by providing listing, real-time ranking, and newsletter subscription services. The platform targets AI enthusiasts, developers, and users seeking the latest AI tools. Technically, NuxtDir is built on a modern stack using Nuxt.js and Tailwind CSS, with integration of Plausible Analytics for privacy-friendly tracking and Stripe for payment processing. The website demonstrates good design quality, mobile responsiveness, and SEO optimization, although accessibility features are basic. Security-wise, the site uses HTTPS and modern frameworks but lacks advanced security headers and explicit security policies. WHOIS data shows inconsistencies, including a future domain creation date and registrant being the registrar company, which slightly impacts trustworthiness. Overall, NuxtDir presents a professional and functional platform with room for improvement in privacy compliance and security transparency.

I

IPFS

ipfs.fyi

47

IPFS.tech is the official website for the InterPlanetary File System (IPFS), an open-source protocol designed to enable decentralized storage, verification, and sharing of data across distributed networks. The platform targets developers, researchers, and a broad community interested in building peer-to-peer applications and resilient data infrastructures. It holds a strong market position as a leading decentralized content addressing protocol with a large and active contributor base and ecosystem partnerships. The website provides extensive resources, case studies, and community engagement opportunities, reflecting a mature and well-established project founded in 2020. Technically, the website is built using modern web technologies including Nuxt.js and JavaScript frameworks, supporting multiple platforms such as desktop, browsers, mobile, and embedded devices. The site demonstrates excellent performance, mobile optimization, and SEO practices. Hosting details are not explicitly disclosed but the domain uses reputable DNS and registrar services. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. No published security policies, incident response plans, or vulnerability disclosure mechanisms were found, indicating areas for improvement in transparency and compliance. Privacy and cookie policies are absent, which is a compliance gap especially for GDPR and similar regulations. Overall, IPFS.tech presents a professional, trustworthy, and content-rich platform with strong business credibility and technical maturity. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, enabling DNSSEC, and publishing security and incident response documentation to improve compliance and trust further.

I

IPFS

ipfs.tech

59

IPFS.tech is the official website for the InterPlanetary File System (IPFS), an open-source protocol designed to enable decentralized storage, verification, and sharing of data across distributed networks. The website positions IPFS as a foundational technology for building a better, more resilient web, targeting developers, researchers, artists, and infrastructure providers. It showcases a strong community focus with testimonials, case studies, and extensive developer resources. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site reflects a mature, credible technology project with a robust ecosystem but could improve transparency around privacy and security policies.

1

1API GmbH (Registrar), Wortmeldungen (Program/Project)

wortmeldungen.org

53

Wortmeldungen.org is a German-language literary program website dedicated to promoting emerging authors and their engagement with contemporary issues through awards, publications, and events. The platform offers two main literary prizes, the Förderpreis and Literaturpreis, with detailed information about nominees, winners, juries, and related events. The site targets authors, literary professionals, and cultural audiences, operating as a small non-profit entity within the media sector. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and uses Matomo for privacy-conscious analytics. It is hosted with a reputable registrar and uses HTTPS with domain locking for security. The site demonstrates excellent content quality, mobile optimization, and accessibility, with a consistent brand presentation and strong trust signals. However, it lacks explicit security policies and incident response contacts, and DNSSEC is not enabled, which could be improved for enhanced security.

C

Crespo Foundation

crespo-foundation.de

48

The Crespo Foundation is a German non-profit organization dedicated to empowering individuals through cultural, educational, and social programs. Their website showcases a variety of initiatives including art exhibitions, workshops, scholarships, and community engagement projects. The foundation targets artists, youth, migrants, and the broader cultural community, positioning itself as a key player in cultural education and social empowerment in Germany with international collaborations. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and hosted via DomainControl services. It employs Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and follows several best practices, though it lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. However, no incident response or security policy pages are published. Overall, the website is professional, trustworthy, and content-rich, reflecting the foundation's mission and credibility. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

H

HAHACUAN

franklinmuseum1778.com

51

The website branded as HAHACUAN claims to be related to the Historic Museum 1778 of Franklin, targeting history enthusiasts primarily in Indonesia. However, the actual content is focused on e-commerce product sales with a strong presence of gambling-related keywords and links, which is inconsistent with the domain name and claimed business. The site uses modern web technologies including Nuxt.js and is hosted behind Cloudflare, with HTTPS enabled. Despite this, the absence of WHOIS registration data and lack of privacy or cookie policies raise significant concerns about legitimacy and compliance. Security posture is moderate due to HTTPS but lacks important security headers and incident response information. Overall, the site appears to be a low-trust, possibly deceptive e-commerce platform with gambling content rather than a legitimate museum site.

S

shopware AG

shopware.com

85

Shopware AG operates a leading ecommerce platform designed to empower online businesses with a flexible, open-source solution that supports both B2B and B2C commerce. The platform integrates advanced features such as AI-powered commerce, automation tools, and comprehensive analytics, positioning Shopware as a competitive player in the ecommerce technology market. The company targets ecommerce businesses, developers, and agencies seeking scalable and innovative online store solutions. Technically, the website leverages modern JavaScript frameworks like Vue.js and Nuxt.js, integrates with marketing and analytics tools such as Google Tag Manager and HubSpot, and employs a consent management platform to ensure privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security-wise, Shopware enforces HTTPS, implements robust security headers, and manages cookie consent effectively. However, the absence of explicit incident response and vulnerability disclosure policies, as well as missing WHOIS registration details, slightly reduce the overall trust score. Overall, Shopware presents a professional, secure, and privacy-conscious online presence with strong market credibility.

G

Generated Photos | Unique, worry-free model photos

generated.photos

69

Generated Photos operates as a technology company specializing in AI-generated model photos, offering a diverse and copyright-free headshot image database. Their market position is that of a provider of unique, worry-free model photos, targeting businesses and developers who require production-ready images. The website demonstrates a professional and modern design, leveraging advanced JavaScript frameworks such as Vue.js and Nuxt.js, and integrates analytics and marketing tools like Google Analytics and Tapfiliate. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though explicit security headers and policies are not evident in the provided content. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain appears legitimate with privacy-protected WHOIS data typical for tech companies. Strategic recommendations include enhancing transparency with published privacy and security policies and implementing a vulnerability disclosure program.