Security Directory

B

Blizzard Entertainment

worldofwarcraft.com

75

World of Warcraft's official website, hosted under the Blizzard Entertainment domain, serves as a comprehensive portal for one of the most popular MMORPGs globally. The site targets gamers and fans of fantasy online games, offering game information, updates, and community engagement. As part of the Activision Blizzard group, it benefits from strong brand recognition and a large enterprise infrastructure. The website is professionally designed with excellent content quality and clear navigation, optimized for both desktop and mobile users. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. Performance is fast, and SEO and accessibility practices are well implemented. However, explicit security headers are not visibly present in the HTML, and no public security policy or incident response information is found, which could be improved. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with comprehensive privacy and cookie policies and GDPR compliance indicators. Business credibility is high due to clear branding, association with Blizzard Entertainment, and professional presentation. WHOIS data is unavailable due to the domain being a subdomain of blizzard.com, which is typical for large enterprises and privacy protected domains. Overall, the website presents a low risk profile with strong trust indicators, though it could enhance transparency by publishing security policies and vulnerability disclosure information.

G

Gransy, s.r.o.

saiffer.net

8

The website saiffer.net is a personal blog and portfolio site primarily focused on creative writing including poetry, short stories, and personal reflections. It is operated by an individual known as Saiffer and has been active since at least 2005, consistent with the domain registration date. The site targets general internet users interested in Slovak language literary content and personal blogs. Technically, the site is built with basic HTML and CSS without modern frameworks or CMS, hosted on Websupport.sk. The design and navigation are functional but dated, with basic mobile optimization and accessibility. Security posture is weak, lacking HTTPS enforcement, security headers, and privacy or cookie policies, which poses risks for user data protection and compliance. No analytics or tracking scripts are detected, indicating minimal user tracking. WHOIS data shows privacy-protected registration, which is justified for a personal site. Overall, the site is safe for general audiences but requires improvements in security and privacy compliance to enhance trust and protect visitors.

S

Soare sekt a.s.

nassad.cz

50

Náš sad is a Czech-based producer and retailer of traditional fruit wines, operating under the company Soare sekt a.s. The website presents a professional and well-structured digital presence focused on promoting their fruit wine products, targeting adult consumers in the Czech Republic. The business model includes manufacturing and distribution through multiple retail chains and online sales. The website content is rich, localized in Czech, and includes detailed product descriptions and legal compliance information such as age verification and privacy policies. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security posture is moderate with age verification and cookie consent implemented, but lacks visible advanced security headers or explicit security policies. WHOIS data is unavailable, limiting domain trust assessment, but the website's contact information and content suggest legitimacy. Overall, the site scores well on content quality, privacy compliance, and business credibility, with room for improvement in security best practices and technical enhancements.

Centrum experimentálního divadla, p.o. is a public cultural institution based in Brno, Czech Republic, dedicated to fostering professional and experimental live theater arts. It operates several theaters including Divadlo Husa na provázku, HaDivadlo, and Terén, and publishes a quarterly magazine called CEDIT. The institution is supported financially by the city of Brno and the Ministry of Culture of the Czech Republic, positioning it as a key player in the regional cultural landscape. The website reflects this mission with rich content about performances, projects, and educational activities targeting a general audience interested in experimental theater and culture. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and Mapbox GL JS for interactive maps. It features a responsive design with good mobile optimization and basic accessibility features. The site includes a cookie consent mechanism and uses Google Analytics for traffic analysis, indicating moderate digital maturity. However, the absence of a privacy policy and terms of service pages represents a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and does not provide incident response or vulnerability disclosure information. The WHOIS data for the domain is unavailable, which limits the ability to verify domain legitimacy and age, slightly reducing trustworthiness. Nonetheless, the presence of official city support logos and consistent branding enhances credibility. Overall, the website is professionally designed and functional, serving its cultural mission effectively. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and security posture, supporting long-term institutional credibility and user confidence.

R

Rocher Blanc

rocher-blanc.mc

59

Rocher Blanc Monaco is a specialized digital communication agency operating in Monaco, focusing on services such as website creation, digital marketing (SEO, SEA, social media management), and visual identity development. As a member of the Inforca group, it targets small and medium enterprises seeking tailored digital solutions. The website reflects a professional and modern digital presence with clear service offerings and strong branding consistency. Technically, the site employs modern JavaScript libraries, uses HTTPS, and integrates analytics and consent management tools effectively. Security measures include the use of hCaptcha on contact forms and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements, making it a credible digital agency in its market niche.

H

HS Media

hsmedia.no

8

HS Media is a Norwegian small business specializing in contextual marketing across print, digital, and social media channels. The company aims to place advertising in contexts where the target audience is most receptive, focusing on Norwegian markets. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. The site presents professional content with good design and navigation but lacks comprehensive privacy and security disclosures. Security posture is moderate with no detected WAF or blocking mechanisms, but the absence of security headers and policies indicates room for improvement. Overall, the domain registration is privacy protected, which is common for small businesses, and no suspicious indicators were found. Strategic recommendations include enhancing privacy compliance, adding contact and security information, and improving security headers and SSL configurations.

D

Display

display.cz

41

Display is a small non-profit association based in Prague, Czech Republic, focused on research and collective practice in cultural and educational domains. The website presents a well-structured platform showcasing events, projects, and publications, targeting a general audience interested in cultural research and collective activities. The organization appears established with a domain age since 2000 and active social media presence, enhancing its market position within its niche. Technically, the website is built on GravCMS, a modern flat-file CMS, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The use of Mailchimp for newsletter subscriptions shows integration with common marketing tools. However, there is a lack of visible advanced analytics or tracking services, suggesting minimal user tracking. From a security perspective, the site uses HTTPS and secure form handling but lacks visible security headers and published security policies. No privacy or cookie policies are found, representing compliance gaps with GDPR and related regulations. The WHOIS data is consistent and supports the legitimacy of the domain and organization. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the provided data. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve its risk posture and user trust.

Z

zirk.us

zirk.us

65

zirk.us operates as an independent Mastodon social network server focused on the arts and humanities community, providing a platform for readers, writers, and academics to engage in cultural and intellectual discussions. The website leverages the Mastodon open-source platform, utilizing modern web technologies such as React and JavaScript ES modules to deliver a responsive and user-friendly experience. The domain is well-established, registered since 2004, and managed via GoDaddy with protective domain status flags, enhancing trustworthiness. However, the domain predates the Mastodon platform, indicating repurposing of the domain for this service. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service found. Overall, the site is functional, trustworthy, and serves a niche community with good content quality and technical implementation.

G

GoDaddy Operating Company, LLC

cea.tech

11

The website is a domain sales landing page for the domain cea.tech, operated by GoDaddy Operating Company, LLC, a leading global domain registrar and marketplace. The platform offers multiple purchasing options including buy now, lease to own, and making an offer, targeting businesses and individuals seeking premium domain names. The site leverages modern web technologies such as React and Next.js, hosted on GoDaddy infrastructure, providing a fast and responsive user experience. Security is robust with HTTPS enforced, security headers present, and secure payment assurances. Privacy and cookie policies are available through GoDaddy's main site, indicating compliance with GDPR and other regulations. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

Le Biau Germe is a small French collective of organic and traditional seed producers, operating an e-commerce platform focused on selling biological, reproducible, and traditional seeds to both individuals and professionals. The website presents a consistent brand image with good content quality and clear business focus on organic agriculture. Technically, the site uses modern CSS frameworks like Tailwind CSS and is hosted by Infomaniak Network SA, a reputable hosting provider. The site is mobile optimized and SEO friendly with proper metadata and Open Graph tags. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly found, limiting direct communication channels. Overall, the domain registration data supports legitimacy with a long-standing registration since 2002.

O

oldstarsontheroad

oldstarsontheroad.cz

57

The website oldstarsontheroad.cz serves as an online news and information platform for the Festival Studenských divadel v Celetné a Solné věži 2025, a student theater festival in Prague. It provides festival news, interviews, backstage insights, and interactive content aimed at students and theater enthusiasts. The site is built on the Webnode CMS platform and hosted via AWS Cloudfront CDN, ensuring moderate performance and good mobile optimization. The content is well-structured, relevant, and professionally presented, though some accessibility and SEO improvements are possible. Security posture is basic with HTTPS enabled and a cookie consent banner present, but lacks advanced security headers and privacy policy documentation. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust assessment but is reasonable for a small cultural event site. Overall, the site is functional and serves its niche audience effectively.

M

Město Kutná Hora

kutnahora.cz

64

Město Kutná Hora operates an official municipal information portal serving citizens, entrepreneurs, and tourists. The website provides comprehensive information about city administration, cultural events, tourism, and local services. It holds a strong market position as the authoritative source for Kutná Hora city information, leveraging official branding and UNESCO heritage association. The portal supports multiple languages and integrates social media channels to enhance engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. The CMS identified is Marwel, a specialized platform. The site is mobile optimized with good SEO and accessibility features, though some improvements in security headers and incident response transparency are recommended. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with GDPR-aligned cookie management and privacy policy presence. Overall, the website is a trustworthy, well-maintained municipal portal with moderate technical sophistication and good user experience. The absence of WHOIS data slightly reduces domain trust but does not detract from the legitimacy of the site. Strategic improvements in security policy publication and header implementation would enhance the security posture further.

M

Městský úřad Nymburk

mesto-nymburk.cz

47

The website www.mesto-nymburk.cz serves as the official online portal for the city of Nymburk, Czech Republic. It provides residents and visitors with comprehensive municipal information including news updates, event calendars, administrative services, and contact details. The site is well-structured to cater to the local community's needs, offering online appointment systems and access to official documents. The presence of social media links and a citizen portal enhances engagement and service accessibility. Technically, the site employs a custom CMS (vismoWeb5) with modern web technologies such as HTML5, CSS3, JavaScript, and integrates Google services like reCAPTCHA and Translate for security and accessibility. The website is mobile-optimized and includes accessibility features, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is addressed with privacy and cookie policies, though the cookie consent mechanism could be improved for explicit user consent. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain trust verification, but the official nature and consistent branding support legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance the security posture and compliance.

M

Městský úřad Brandýs nad Labem-Stará Boleslav

brandysko.cz

49

The website brandysko.cz serves as the official online presence of the municipal government of Brandýs nad Labem-Stará Boleslav, Czech Republic. It provides comprehensive information about the city, its administration, public services, cultural events, and community resources. The site targets local residents, visitors, and stakeholders seeking municipal information and services. The business model is focused on public service delivery and information dissemination, positioning itself as a trusted and authoritative source for the local community. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor analytics, with a clear cookie consent mechanism in place to comply with GDPR. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with a municipal entity. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, providing a professional and trustworthy user experience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and resilience.

M

Přístup není povolen | Access Denied

mkz-ltm.cz

47

The website www.mkz-ltm.cz is currently inaccessible to visitors from unauthorized countries due to geographic IP blocking. The content is limited to an access denied message in Czech and English, indicating a security or legal restriction on access. No business description or services are visible, limiting the ability to assess the company's market position or offerings. The domain WHOIS data is unavailable, suggesting privacy protection or registration issues, which impacts trust and legitimacy assessments. Technically, the site uses basic HTML, CSS, and JavaScript with responsive design but lacks advanced frameworks or CMS. Security posture is weak due to absence of security headers and unknown SSL status. Privacy and cookie policies are missing, and no analytics or tracking scripts are detected. Overall, the site is minimal and blocked, resulting in a low AI score and limited business insights.

The website www.atlantis-brno.cz is an online bookstore operating on the Zoner InShop 5 platform, primarily targeting Czech-speaking customers. It offers a catalog of books including antique and specialized literature. The site demonstrates a moderate level of digital maturity with a responsive design and basic SEO and accessibility features. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages indicate gaps in transparency and compliance. Security posture is moderate, with no detected security headers and limited information on SSL configuration. The site uses Google Analytics for user tracking but lacks comprehensive privacy compliance indicators. Overall, the website is functional and safe for general audiences but would benefit from improved security and compliance measures.

X

Xcruiter

xcruiter.no

49

Xcruiter is a Norwegian-based technology company founded in 2023 that provides an AI-powered recruitment platform designed to streamline and enhance the hiring process for businesses. Their solution focuses on lead generation, smart advertising, and automation to connect companies with quality candidates efficiently. The company targets businesses looking to improve recruitment outcomes and job seekers interested in new opportunities. The website demonstrates a professional and consistent brand presence with clear messaging and calls to action. Technically, the site is built on WordPress using the Themway theme and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, and Microsoft Clarity, indicating a mature digital marketing strategy. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting awareness of GDPR requirements. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response policies are absent. The domain registration aligns well with the company's founding date and business claims, supporting legitimacy. Overall, the website is well-constructed, secure, and business-focused, suitable for its target audience.

The website queercom.de currently serves as a minimal placeholder page that redirects or links to queer.de, a German LGBTQ+ magazine. The site lacks substantive content, contact information, privacy or cookie policies, and security features such as HTTPS or security headers. The technical infrastructure is basic, relying on CSS fonts and simple HTML, hosted via GoDaddy-related nameservers. There is no evidence of analytics, advertising, or tracking technologies. The WHOIS data is minimal but indicates a legitimate registration without privacy protection. Overall, the site appears to be in an early or transitional stage, with low digital maturity and limited business presence. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is absent. The site is safe in terms of content, with no adult or explicit material detected.

N

Nadační Fond Hyundai

nadacnifondhyundai.cz

47

Nadační Fond Hyundai is a small non-profit foundation established in 2007, focused on supporting civil society development and community projects primarily in the Czech regions of Frýdek-Místek and Nový Jičín. The foundation collaborates with Hyundai Motor Manufacturing Czech and local government entities to promote environmental protection, transparency, education, and human rights. The website provides information about the foundation's mission, grant rounds, and contact details, primarily targeting local NGOs and active citizens. Technically, the website is built with basic HTML and CSS, uses Google Tag Manager for analytics, and is hosted via WEDOS. The site lacks advanced CMS or frameworks and shows basic mobile and accessibility features. Security posture is moderate with some security headers but no visible HTTPS confirmation or advanced policies. Privacy compliance is limited, with a privacy policy PDF linked but no cookie consent or GDPR details. Overall, the site is legitimate, consistent with its stated mission, and shows moderate digital maturity.

The website 'Náš Jih' serves as a digital platform for the Ostrava-Jih municipal district in the Czech Republic, facilitating participatory budgeting where residents can influence the allocation of local government funds. The site provides information about ongoing projects, community engagement opportunities, and a project submission portal. It targets local residents and community members interested in civic participation. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google Analytics, and Facebook Pixel for analytics and marketing. The hosting is provided by a Czech hosting provider, aligning with the local focus. Security-wise, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. No security headers were detected in the provided data, suggesting room for improvement in security hardening. Overall, the site is professionally designed with good user experience and mobile optimization, but could enhance privacy and security transparency.

C

CareJam

carejam.cz

60

CareJam is a Czech-based educational platform specializing in training and professional development for the nonprofit sector, with a focus on mental health, digitalization, leadership, and organizational professionalization. The website offers accredited courses, workshops, and webinars tailored to nonprofit organizations and professionals working with mental health issues. Supported by notable partners such as the Nadacni fond Hyundai, CareJam positions itself as a trusted resource within its regional market in Moravskoslezský kraj, Ostrava. The business model revolves around providing specialized educational content to enhance skills and knowledge in the nonprofit sector.

A

Acronis International GmbH

acronis.com

80

Acronis International GmbH is a well-established global provider of cybersecurity and data protection solutions, specializing in backup software and services for consumers, businesses, and managed service providers (MSPs). Founded in 2003, the company has positioned itself as a leader in the technology sector, offering award-winning products that protect sensitive information across various platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website employs modern web technologies including Vue.js, Matomo analytics, and Google Tag Manager, ensuring a responsive and performant user experience. Security best practices are evident with HTTPS enforcement, robust security headers, and no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, supporting the company's commitment to data protection. The security posture is strong, though the absence of a public vulnerability disclosure policy and explicit incident response contacts suggests areas for improvement. The WHOIS data is incomplete, likely due to privacy protection, but the overall trust indicators and structured data confirm the legitimacy of the domain and business. The website is free from adult or questionable content, targeting a general professional audience. Overall, Acronis demonstrates a high level of digital maturity and security awareness, making it a trustworthy and professional platform for its users.

C

CAVP (Caisse d'assurance vieillesse des pharmaciens)

interpharmaciens.fr

58

InterPharmaciens is a French financial aid program dedicated to supporting young pharmacists, biologists, and pharmacy owners in their first installations by providing complementary financial contributions through subordinated obligations. The program is offered by the CAVP and managed by ESFIN Gestion, targeting independent pharmacy professionals across metropolitan France and overseas regions. The website presents detailed information about the aid philosophy, eligibility, financial terms, and application process, supported by testimonials and partner logos, establishing a credible and professional presence. Technically, the website employs standard modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring mobile responsiveness and a good user experience. However, there is no evidence of advanced CMS or analytics tools, and performance is moderate. The site lacks privacy and cookie policies, which is a notable compliance gap. Security headers and SSL configuration details are not provided, limiting the assessment of security posture. From a security perspective, the site does not expose sensitive data or contain forms collecting personal information, reducing immediate risk. However, the absence of security headers and privacy policies suggests room for improvement in compliance and security best practices. WHOIS data is unavailable, likely due to privacy protection, but the domain and content appear consistent with a legitimate French healthcare financial aid service. Overall, the website is trustworthy and professionally presented but should enhance privacy compliance and security measures to improve its security posture and regulatory adherence.

L

La Fabrique des centres de santé

lafabriquedescentresdesante.org

58

La Fabrique des centres de santé is a French association dedicated to supporting project leaders in the creation and political maturation of health centers. The website serves as an informational and support platform targeting healthcare project stakeholders in France. The association operates as a small non-profit entity founded in 2017, focusing on healthcare community development and project management assistance. Technically, the website is built with standard HTML and CSS, hosted by OVH sas, and uses HTTPS for secure communication. However, it lacks advanced security headers and DNSSEC, which could enhance its security posture. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap given GDPR requirements. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the site is professional and relevant to its niche but would benefit from improved privacy and security practices.

E

EconomiX

economix.fr

55

EconomiX is an academic research laboratory specializing in economic sciences, affiliated with the Université Paris Nanterre and CNRS. It serves as a major research and training center in the Île-de-France region, with a focus on empirical and theoretical economic research. The website targets academic researchers, students, and institutions interested in economics. The business model is non-commercial, focused on research and education. The site is well-branded, consistent, and provides access to publications, events, and social media channels. Technically, the website uses modern web technologies including HTML5, CSS3, Bootstrap, and JavaScript libraries such as Animate.css and Leaflet.js. It is hosted on Alwaysdata and uses HTTPS with a good SSL configuration. The site is mobile-optimized and has good SEO practices, though accessibility could be improved. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the academic nature of the site, showing a long-standing domain registration with a reputable registrar. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and compliance.

U

UR SCOP OUEST

les-scop-ouest.coop

53

UR SCOP OUEST is a regional cooperative union based in Western France, dedicated to supporting and promoting the Scop and Scic cooperative models. The organization provides a range of services including business creation, transmission, transformation, acceleration, training, and cooperative revision. It serves cooperative entrepreneurs and members within the Ouest region, positioning itself as a key regional player in the cooperative ecosystem. The website reflects a professional and consistent brand image with comprehensive content tailored to its audience. Technically, the website is built on Drupal 10, leveraging modern web technologies and providing good mobile optimization and accessibility. The site uses Matomo and Google Tag Manager for analytics, with a clear cookie consent mechanism in place, demonstrating a mature approach to privacy compliance. Hosting appears to be managed by insite.coop, with DNS and SSL configurations generally good, though DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and employs consent management for cookies. However, it lacks DNSSEC and explicit Content-Security-Policy headers, which are recommended for enhanced security. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business identity, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Strategic improvements in DNS security and security headers would further strengthen its posture.

B

BfG Eigentümer/-innen- und Verwaltungsgenossenschaft eG

gemeinwohl.coop

61

The website 'Genossenschaft für Gemeinwohl' represents a cooperative organization based in Austria focused on reforming the financial system towards social good. Founded in 2018, it is one of the largest new cooperatives in Austria by membership. The site provides information about their mission and cooperative model but lacks explicit privacy and cookie policies. Technically, the site uses modern web technologies and Cloudflare DNS services, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protections but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security disclosures.

W

WEXBO s.r.o.

wexbo.com

65

WEXBO s.r.o. operates a SaaS platform enabling users to create websites and e-shops easily and quickly without programming knowledge. The company targets small to medium businesses and individuals seeking affordable, feature-rich CMS and e-commerce solutions. Their platform includes extensive features such as payment gateway integration, shipping services, multilingual support, and a proprietary CMS named CYBORG. The website is well designed, mobile optimized, and SEO friendly, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, AJAX, and integrates popular analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the business appears credible and trustworthy with consistent WHOIS data and active support channels.

C

Centre national du livre

centrenationaldulivre.fr

63

The Centre national du livre (CNL) is a French public institution under the Ministry of Culture dedicated to supporting all actors in the book industry, including authors, translators, editors, booksellers, and libraries. The website serves as a comprehensive portal for information on financial aids, literary events, studies, and resources related to the book sector in France. It maintains a strong market position as a key governmental cultural support entity. Technically, the site is built on Drupal 8, employs Matomo and Google Analytics with privacy-conscious configurations, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, cookie consent mechanisms, and domain protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a broad audience of literary professionals and cultural stakeholders.

S

STO

slovenia.info

69

The website www.slovenia.info serves as the official travel guide to Slovenia, operated by the Slovenian Tourist Organization (STO). It provides comprehensive information about destinations, activities, culture, and events in Slovenia, targeting tourists and travelers interested in exploring the country. The site is multilingual and well-structured, offering a rich user experience with clear navigation and professional design. The business model focuses on tourism promotion and information dissemination, positioning itself as the authoritative source for travel in Slovenia. From a technical perspective, the website employs modern web technologies including Google Tag Manager for analytics and marketing, Typekit fonts for typography, and AMP Travel scripts for enhanced performance. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. Security posture is generally good with HTTPS enforced and consent defaults set to deny ad and analytics storage, indicating privacy-conscious design. However, the absence of visible security headers and lack of published privacy and cookie policies reduce the overall security maturity. No vulnerabilities or exposed sensitive data were detected. WHOIS data is not publicly available, likely due to privacy protection, which is reasonable for this type of official site. Overall, the website is trustworthy and professional, with a high-quality user experience and solid business credibility. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response and vulnerability disclosure information to enhance trust and compliance.

K

Koop Domeinnaam

cookiebanner.eu

8

Koop Domeinnaam operates as a domain reseller specializing in selling domain names such as cookiebanner.eu. The website is a straightforward landing page offering the domain for sale at a fixed price, targeting individuals or businesses interested in acquiring domain names quickly. The business model is simple and focused on domain sales with immediate invoicing and transfer token delivery. The market position is that of a niche domain reseller within the Netherlands, with a small-scale operation and basic online presence. Technically, the website employs standard HTML5, CSS, and JavaScript, with Cloudflare services used for CDN and security purposes. The site is moderately optimized for performance and mobile devices but lacks advanced frameworks or CMS platforms. SEO and accessibility features are basic, and no analytics or tracking services are detected, indicating minimal data collection. From a security perspective, the site benefits from Cloudflare's protection but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. No forms or sensitive data collection points are present, reducing attack surface. The absence of detailed security policies and incident response information suggests limited security maturity. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the limited scope and content of the site, but improvements in privacy compliance, security headers, and transparency would enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing cookie consent, adding security headers, publishing terms of service, and improving mobile and accessibility features.

S

Svazek obcí Dobříšska a Novoknínska

dobrisskonovokninsko.cz

10

Svazek obcí Dobříšska a Novoknínska is a regional governmental association serving municipalities in the Dobříš and Nový Knín areas of the Czech Republic. The website provides official information, documents, event calendars, and contact services aimed at local government officials and residents. The site is well-structured with clear navigation and comprehensive content relevant to its audience. Technically, it uses a CMS platform (Vismo), integrates Google Analytics with GDPR-compliant consent mechanisms, and employs Google reCAPTCHA for form security. The security posture is solid with HTTPS and form protections, though it lacks some advanced HTTP security headers. Overall, the site demonstrates good privacy compliance and business credibility consistent with a small governmental entity.

The domain regiotv.cz is currently expired and parked, showing no active business content or services. The website primarily serves as a placeholder with advertising iframes and links to domain sale contact pages. There is no evidence of an operational company or digital services under this domain. The technical infrastructure is minimal, relying on basic HTML and JavaScript with external ad and tracking scripts. No CMS or modern frameworks are detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and expired domain status. Privacy and compliance policies are missing, indicating non-compliance with GDPR and related regulations. Overall, the site presents a low trust profile and minimal business credibility.

Mailjet operates a cloud-based email delivery platform serving thousands of customers with transactional and marketing email services. The subdomain mj.am is specifically used for link redirection and static content hosting, supporting Mailjet's core email services. The website content is minimal but professional, emphasizing strict anti-spam policies and abuse reporting mechanisms, reflecting a strong commitment to responsible email practices. The domain is well-established since 2014, consistent with the company's operational history. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. There are no forms or tracking scripts, indicating a low footprint in terms of data collection and user interaction. The site lacks cookie consent mechanisms and security headers, suggesting areas for technical improvement. Performance and mobile optimization are basic but adequate for the site's limited scope. From a security perspective, the site enforces strict anti-spam policies and provides clear abuse contact information, which are positive indicators. However, the absence of security headers and vulnerability disclosure mechanisms limits the overall security posture. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. Overall, the website is legitimate and trustworthy within its scope but could benefit from enhanced technical and security implementations to improve compliance and user trust.

M

ME-METAL

me-metal.cz

47

ME-METAL is a Czech manufacturing company specializing in precision milling and turning of parts primarily from aluminum alloys, steel, and plastics. Founded in 1994 and operating from a large facility near Chomutov, the company focuses on small batch and custom production, serving both domestic and international clients. Their business model includes full production services with in-house transport for delivery. The website reflects a stable and established market position with over 30 years of experience and a consistent brand presence. Technically, the website is built using Nicepage site builder with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. Hosting is likely provided by WEDOS, consistent with the registrar and nameservers. The site is mobile optimized and SEO friendly, though accessibility features are basic. No advanced analytics or advertising tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (inferred though not explicitly confirmed), includes GDPR and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Security posture is moderate with room for improvement in security headers and incident response transparency. The risk level is low, but strategic enhancements in security documentation and technical hardening are recommended.

I

INPROMA, spol. s r.o.

inproma.cz

57

INPROMA, spol. s r.o. is a Czech manufacturing company specializing in precise machining of metal castings and profiles, as well as ventilation products under the RENSON brand. The company targets industrial and business clients requiring high-quality engineering production services. The website reflects a medium-sized enterprise with a professional online presence, including certifications such as TUV and IATF, which enhance its market credibility. The site is well-structured, mobile-optimized, and provides clear contact information, supporting effective client engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Google Web Fonts. It employs a slider for visual content and has implemented a cookie consent mechanism compliant with GDPR. However, the security headers are minimal, with an empty Content-Security-Policy and absence of other common security headers, indicating room for improvement in security hardening. The site uses HTTPS, ensuring encrypted communications. From a security perspective, the site shows moderate maturity with HTTPS and cookie consent but lacks comprehensive security headers and visible incident response or vulnerability disclosure policies. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and certifications suggest legitimacy. No signs of malware or phishing were detected, and the content is safe for general audiences. Overall, the website presents a professional and trustworthy business front with moderate technical and security maturity. Strategic improvements in security headers, WHOIS transparency, and incident response documentation would enhance its security posture and trustworthiness.

P

Plinko

safetysleeve.cz

9

The website safetysleeve.cz (content points to plinkohra.cz) is an informational and promotional platform focused on the Plinko gambling game targeted at Czech players. It provides detailed guides, game mechanics, casino recommendations, and demo access to Plinko games. The site leverages Cloudflare for DNS and CDN services and uses modern web technologies including JSON-LD structured data for SEO and rich snippets. The content is well-structured, mobile-optimized, and professionally presented, though it lacks explicit cookie consent and some security headers. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and raises questions about legitimacy. Contact information is limited to an email address, with no phone or physical address provided. Social media presence is established across multiple platforms, enhancing credibility. Overall, the site is functional and informative but requires improvements in privacy compliance and security transparency.

ArtMoment is a newly launched business in Slovakia focused on offering creative workshops. The website serves primarily as a landing page to announce the upcoming launch and collect newsletter subscriptions, incentivizing sign-ups with a promotional 1+1 voucher. The business appears to be a small-scale operation targeting general consumers interested in creative activities. Technically, the website uses standard modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics. Hosting is inferred to be with Wedos based on nameservers. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies published, indicating room for compliance improvements. The domain registration is recent but consistent with the business launch timeline, supporting legitimacy. Overall, the site is safe, professional at a basic level, and suitable for general audiences.

G

Chat Button for Your Website: WhatsApp, ChatGPT, Messenger | GetButton

getbutton.io

49

GetButton.io is a technology company providing an all-in-one chat button solution that integrates popular messaging platforms such as WhatsApp, Messenger, Instagram, and AI-powered chatbots including Custom ChatGPT. The service targets website owners and businesses aiming to enhance visitor engagement through seamless chat interactions. With over 736,000 websites trusting their solution, GetButton.io holds a strong market position in the customer engagement SaaS sector. The company was founded in 2019 and operates with a medium-sized business profile based in Malta. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with Knockout.js for UI bindings, and leverages Cloudflare for DNS and CDN services. The site is mobile-optimized, SEO-friendly, and integrates third-party services such as CookieYes for GDPR-compliant cookie consent and FastSpring for payment processing. Analytics are conducted via Yandex Metrica, with extensive user tracking managed through cookies and device scanning. From a security perspective, the website enforces HTTPS, employs clientTransferProhibited domain status, and provides a granular cookie consent mechanism. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, GetButton.io presents a professional and trustworthy digital presence with good privacy compliance and security posture. The absence of explicit privacy policy and terms of service documents on the main page is a notable gap. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and adding vulnerability disclosure information to enhance transparency and trust.

C

CESAER

cesaer.org

68

CESAER is a prominent non-profit association representing over 50 leading universities of science and technology across more than 25 European countries. The organization serves as a unified voice advocating for the interests of its members in European research and education policy arenas, including the European Research Area and European Education Area. Its key services include advocacy, networking, policy influence, organizing events, and publishing relevant materials to support its mission. The website reflects a professional and consistent brand image, targeting academic institutions, researchers, and policymakers in the science and technology education sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and utilizes libraries like Slick Slider and a custom cookie consent mechanism (Brainlane Cookiewall). The site is mobile-optimized with good SEO practices and moderate performance. While no CMS or hosting provider is explicitly identified, the infrastructure appears stable and well-maintained. From a security perspective, the site enforces HTTPS and implements a granular cookie consent mechanism, demonstrating compliance with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable or privacy protected, which is common and justified for non-profit organizations, and no suspicious patterns were found. Overall, CESAER's website is a credible, secure, and well-maintained platform that effectively supports its mission. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen its security posture and compliance.

E

Eugloh

eugloh.eu

40

EUGLOH is a European University Alliance focused on global health, uniting nine research-intensive universities to provide innovative education, research, and international collaboration opportunities. The website is professionally designed using TYPO3 CMS and integrates Matomo analytics with privacy-conscious settings. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and cookie consent mechanisms. The domain is privacy protected under EURid, which is typical for EU domains, and the website content strongly supports legitimacy and trustworthiness. Overall, the site serves as a comprehensive platform for students, academics, and partners engaged in global health education and research.

The Extensible Web Manifesto website serves as a platform to promote a new philosophy for web standards development, emphasizing low-level capabilities and iterative JavaScript-based feature development. It targets web developers, standards committees, and browser vendors, positioning itself as a thought leadership and advocacy initiative within the technology sector. The site content is well-structured and professional, featuring notable industry signatories, but lacks commercial or transactional elements. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and integrates Google Analytics and AddThis for tracking and social sharing. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No CMS or hosting provider details are evident. From a security perspective, the domain is stable and legitimate with a long registration period and appropriate domain status flags. However, the site lacks DNSSEC, security headers, and visible HTTPS enforcement details. Privacy and cookie policies are absent, which impacts compliance and user trust. Tracking technologies are present without clear consent mechanisms. Overall, the website is a credible and professional advocacy platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

Z

ZAZUMi – vše pro zahradu i domov

zazumi.cz

57

ZAZUMi.cz is a Czech Republic-based e-commerce retailer specializing in plants, gardening supplies, and pet products. The website offers a broad catalog of products for home and garden enthusiasts, including indoor plants, garden equipment, and pet accessories. The platform supports customer accounts with login and registration features and provides clear contact information for customer support. The site is professionally designed with good navigation and mobile optimization, targeting primarily Czech-speaking customers interested in gardening and home care. Technically, the website employs modern JavaScript libraries such as Algolia for search and Mailkit for email services, alongside Google Tag Manager for analytics. The site uses HTTPS, ensuring encrypted communication, but lacks visible security headers which could enhance protection against common web attacks. Performance is moderate with room for improvement in accessibility and SEO features. From a security perspective, the site demonstrates basic best practices such as secure login forms with CSRF tokens and encrypted connections. However, the absence of privacy and cookie policies, as well as no visible incident response or vulnerability disclosure mechanisms, indicates gaps in compliance and security maturity. The lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Overall, ZAZUMi.cz presents a functional and user-friendly e-commerce platform with a solid business focus but requires improvements in transparency, privacy compliance, and security hardening to enhance trust and regulatory adherence.

Rijksdienst voor Ondernemend Nederland (RVO) is a Dutch government agency dedicated to supporting sustainable and strong economic development. The agency provides a wide range of services including information dissemination, advisory support, financing options, and networking opportunities to entrepreneurs, individuals, governments, and knowledge institutions. The website reflects a mature digital presence with comprehensive content tailored to its diverse audience, emphasizing sustainability, innovation, and international business growth. The agency's market position is that of a key national facilitator for economic and environmental initiatives in the Netherlands.

The website mest.com is currently a parked domain with minimal content, primarily serving as a placeholder indicating the domain may be for sale. There is no active business presence or descriptive content about services or products. The site embeds an external iframe from an unrelated domain and includes multiple advertising and tracking scripts. The technical infrastructure is basic, with no detected CMS or advanced frameworks, and the hosting appears to leverage AWS Cloudfront CDN for static assets. Mobile optimization and accessibility are minimal, and SEO practices are poor due to lack of meaningful content and metadata. Security posture is weak, with no HTTPS enforcement visible in the provided data, no security headers, and no privacy or cookie policies, which raises compliance concerns. The WHOIS data shows the domain is old (registered in 1999) but uses parking DNS servers, consistent with the parked domain status. Overall, the site lacks business credibility and trust indicators, and the security and privacy compliance posture is poor.

The University of Wisconsin–Madison is a prestigious public research university located in Madison, Wisconsin, founded in 1849. It offers comprehensive education opportunities to undergraduate, graduate, and professional students, and is recognized as one of the top-ranked research institutions in the United States. The university emphasizes public service through the Wisconsin Idea, aiming to improve lives beyond campus boundaries. Its website reflects a mature digital presence with extensive content, clear navigation, and strong branding consistency. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Eloqua for marketing and analytics. The site is well-optimized for mobile and accessibility, with good SEO practices. Hosting appears to be managed via university infrastructure or a dedicated CDN. Performance is moderate, with room for improvement in security headers and explicit security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with user consent mechanisms. However, the absence of a published security policy or vulnerability disclosure program is noted. WHOIS data is unavailable, which is unusual but does not detract from the overall legitimacy given the institutional nature and external trust signals. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and public image effectively.

K

kode24

kode24.no

62

Kode24.no is a Norwegian online news portal dedicated to the developer community, providing news, opinions, guides, and reports related to programming and the Norwegian technology sector. The website serves a niche audience of Norwegian developers and tech professionals, positioning itself as a specialized media outlet within the technology and media industries. The business model revolves around content publication and job listings, supported by advertising partnerships. Technically, the site employs modern web technologies including responsive design, SVG graphics, and WebP images, ensuring a good user experience across devices. While the site uses HTTPS and modern scripts, explicit security headers and privacy policies are not found, indicating room for improvement in security and compliance. The WHOIS data is unavailable due to registry restrictions typical for .no domains, but the website content and structure indicate a legitimate and professional operation. Overall, the site demonstrates good content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture.

C

CEA

prisonnier-quantique.fr

52

Le Prisonnier quantique is an educational interactive game developed and hosted by the French public research organization CEA. It aims to promote scientific and technical culture through a free browser-based adventure game targeting a general audience including students and educators. The website is well-branded with official CEA logos and partnerships, providing a trustworthy platform for educational content. Technically, the site uses standard web technologies with responsive design and integrates Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are missing. Contact information is limited to official CEA email addresses, supporting legitimacy but lacking phone or physical address details. Overall, the site is professional, secure, and suitable for its educational mission.

G

Galerie výtvarného umění v Ostravě, p. o.

gvuo.cz

49

Galerie výtvarného umění v Ostravě, p. o. is the oldest regional art gallery in Ostrava, Czech Republic, established in 1952. It operates as a non-profit cultural institution under the Moravskoslezský kraj (Moravian-Silesian Region) and offers art exhibitions, educational programs, virtual tours, and an e-shop. The website reflects a well-established institution with a clear focus on art and culture, targeting the general public and educational sectors. The business model is centered on cultural enrichment and public engagement rather than commercial profit. Technically, the website employs a modern technology stack including HTML5, CSS3, JavaScript libraries such as jQuery, Leaflet.js for maps, and Google Analytics for tracking. It uses the Shopnero CMS platform and is hosted by Active24. The site is mobile-optimized with good SEO practices and structured data enhancing search engine visibility. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong cultural and educational focus. Strategic improvements in security policies and accessibility could further enhance its posture and user trust.

D

Divadlo Petra Bezruče, s.r.o.

bezruci.cz

43

Divadlo Petra Bezruče, s.r.o. is a regional theatre company based in Ostrava, Czech Republic, providing theatrical performances, ticketing services, subscriptions, and cultural event hosting. The website serves as a portal for program schedules, ticket reservations, and company information, targeting local theatre audiences and cultural enthusiasts. The business operates with support from local government and cultural partners, positioning itself as a key cultural institution in the region. Technically, the website employs modern front-end technologies including Bootstrap, JavaScript libraries like WOW.js, and a cookie consent mechanism from TermsFeed. The site is mobile-optimized with responsive design and provides a user-friendly navigation experience. However, there is no evidence of a CMS or advanced analytics tools, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and published privacy or terms of service policies. Cookie consent is implemented with express consent, indicating some GDPR awareness. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and clear contact information mitigate some concerns. Overall, the website is functional and professional but would benefit from enhanced security practices, published privacy documentation, and WHOIS transparency to improve trust and compliance.