Security Directory

H

Historic Hotels of Europe

historichotelsofeurope.com

60

Historic Hotels of Europe operates a niche hospitality website focused on promoting and facilitating bookings for historic hotels across Europe. The business targets culturally interested travelers seeking unique accommodations in historic houses. The website is built on WordPress using the Elementor page builder, hosted by a reputable Irish hosting provider, and has been operational since 2003, indicating a mature digital presence. Technically, the site employs modern web technologies and includes cookie consent mechanisms via Cookiebot, reflecting basic privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information limits full compliance and user trust. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response details. Overall, the site is professionally designed with good SEO and mobile optimization but would benefit from enhanced transparency and security practices.

W

Weblate s.r.o.

weblate.org

71

Weblate s.r.o. operates a professional web-based continuous localization platform that serves over 2,500 libre software projects and companies worldwide. The company offers both self-hosted and premium cloud-hosted localization services, emphasizing open source principles and community collaboration. Their market position is strong within the niche of software localization, supported by a clear business model combining free libre software with paid hosting and support plans. Technically, the website is well-built with modern HTML5, CSS3, and JavaScript, optimized for mobile and SEO, and hosted via Cloudflare for performance and security. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

E

enabl

enabl.fr

44

enabl is a French-based No Code and AI agency located in Nantes, targeting small and medium enterprises (TPE and PME). Founded in 2020, it operates as a hub and agency under the parent company Digital Korner. The company focuses on accelerating digital project delivery by leveraging No Code technologies and AI, offering services such as audit and consulting, production and deployment, and training and support. Their market position emphasizes rapid, cost-effective digital transformation solutions for SMEs. Technically, the website is built using modern front-end technologies including HTML5, CSS3, JavaScript, jQuery, Typed.js, and AOS for animations. It is hosted by Infomaniak Network SA and uses the Dorik CMS platform. The site is mobile-optimized with good SEO practices and moderate performance. Analytics are implemented via Google Tag Manager and Google Analytics, indicating moderate user tracking. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs basic anti-spam measures in its contact form. However, it lacks security headers and published security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a web form, with no direct emails or phone numbers provided. Overall, the website is professional and trustworthy with good content quality and technical implementation. The main risks relate to privacy compliance gaps and missing security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

F

Flickr

flic.kr

71

Flickr is a well-established online photography community platform that offers users the ability to share, organize, and showcase their photos. It operates a freemium business model with a paid Pro subscription that unlocks additional features such as unlimited storage and advanced statistics. The platform targets photographers and creative enthusiasts globally and maintains a strong market position as one of the largest photo-sharing services. The website demonstrates consistent branding, excellent content quality, and a professional user experience. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, Cloudflare Turnstile CAPTCHA, and Weglot for multilingual support. The infrastructure is optimized for performance and mobile responsiveness, with good SEO and accessibility practices. Security measures include HTTPS enforcement, Content Security Policy, CAPTCHA on forms, and GDPR-compliant consent management. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site could improve by publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies. Business credibility is supported by transparent WHOIS data, certifications, and active social media presence. Overall, Flickr presents a low-risk profile with a mature digital presence and robust security and privacy practices. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.

R

RaulWalter s. r. o.

irontime.cz

47

IronTime, operated by RaulWalter s. r. o., is a Czech-based company specializing in chip timing services for sports events such as triathlons, duathlons, running, and cycling races. The company provides comprehensive race timing solutions including online registration, chip-based time measurement, result processing, and publication, as well as payment integration and participant notifications via SMS and email. Their niche focus positions them as a specialized service provider within the sports event management sector. The website is professionally designed with clear navigation and consistent branding, targeting race organizers and sports event coordinators primarily in the Czech Republic. From a technical perspective, the website uses a modern tech stack including Bootstrap, jQuery, and Font Awesome, hosted likely via Czech hosting providers. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS is detected, indicating a custom or static site approach. Security-wise, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No analytics or tracking scripts were detected in the provided HTML, suggesting minimal user tracking. The security posture is moderate with no critical vulnerabilities detected in the visible content. However, improvements are recommended in implementing security headers, cookie consent, and explicit GDPR compliance in privacy policies. The WHOIS data is consistent with the business information, showing a domain age of over a decade and no privacy protection, which supports legitimacy and transparency. Overall, IronTime presents a trustworthy and professional online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas will strengthen their risk posture and customer trust.

M

Městská část Praha 15

praha15.cz

44

Městská část Praha 15 operates as the official municipal government authority for the Praha 15 district in the Czech Republic. The website serves as a comprehensive portal for residents and visitors, offering information on public administration, social services, cultural events, and community engagement. It targets local citizens and stakeholders, providing essential government services and communication channels. The business model is typical of a public sector entity focused on local governance and citizen services. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of advanced security headers and a dedicated security policy indicates room for improvement in security maturity. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, reducing risk of automated abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the lack of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited formal security governance. The missing WHOIS data for the domain is a concern for domain legitimacy verification but does not detract from the website's apparent authenticity as a government portal. Overall, the website presents a trustworthy and professional digital presence for the municipal district, with good content quality and user experience. Strategic enhancements in security policy transparency, domain registration clarity, and security header implementation would strengthen its security posture and trustworthiness.

MyQ is a professional provider of print management software solutions designed to optimize printing processes, reduce costs, and promote eco-friendly practices. The company targets businesses and organizations seeking efficient print management and control. The website reflects a mature digital presence with multi-language support, comprehensive product information, and clear calls to action. Technically, the site employs modern JavaScript libraries and frameworks, integrates analytics tools, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforcement and security headers, although the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Strategic recommendations include enhancing transparency around security practices and verifying domain registration details to bolster credibility.

The website programprazskychkin.cz serves as an informational portal providing cinema program listings primarily for Prague and other locations in the Czech Republic. It aggregates schedules and links to multiple cinema websites, offering users a centralized resource for movie showtimes and related contests. The site targets general audiences interested in cinema and cultural events. Technically, the site uses basic HTML, CSS, and JavaScript with jQuery 1.10.2, alongside Google Analytics and Google Tag Manager for tracking. The design and user experience are functional but basic, with limited mobile optimization and accessibility features. Security posture is moderate to low, with no visible HTTPS enforcement in metadata, outdated JavaScript libraries, and lack of security headers. Privacy compliance is poor, with no visible privacy or cookie policies or consent mechanisms. Contact information is provided in the form of multiple cinema addresses and phone numbers, but no company emails or social media links are present. Overall, the site is a small-scale media information portal with moderate trustworthiness but requires improvements in security and privacy compliance.

M

Michal Strouhal

licker.cz

40

Licker.cz is a small Czech graphic design studio operated by Michal Strouhal, offering a range of creative services including graphic design, web design, printing materials, and domain registration with hosting. The company emphasizes personalized and detail-oriented design work, targeting clients primarily in the Hradec Králové region. The website is professionally designed with a clear structure and good content quality, supporting the business's local presence and service offerings. Technically, the website uses standard web technologies such as Bootstrap, jQuery, and Google Fonts, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS or analytics tools, and performance is moderate. Accessibility is basic but functional, and SEO practices appear adequate based on meta tags and content structure. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and modern privacy standards. The WHOIS data is unavailable, which reduces domain trustworthiness and complicates legitimacy verification. No forms or tracking scripts were detected, minimizing data collection risks but also limiting user engagement features. Overall, the website presents a legitimate small business with good content and design quality but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

S

Somfy

somfyprojects.me

65

Somfy Projects is a specialized division of the Cross - Groupe Micropole, focusing on the manufacturing and automation of solar shading solutions for buildings. Their offerings include motors, building controls, and local control systems designed to improve energy efficiency and occupant comfort. The company targets building professionals and owners seeking dynamic solar shading solutions, positioning itself as a market leader in this niche. The website reflects a mature digital presence with multilingual support and regional sites, indicating a global footprint primarily focused in the Middle East and Europe. Technically, the website is built on a ColdFusion backend with modern JavaScript libraries and performance monitoring tools such as Boomerang and TagCommander. The site is hosted likely behind Akamai CDN, ensuring good performance and availability. The site is mobile optimized and SEO friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses captcha on its contact forms to prevent spam. However, it lacks explicit security headers and a visible cookie consent mechanism, which are areas for improvement. The WHOIS data is unavailable due to privacy protection or query failure, but the website content and external references indicate a legitimate and professional business. Overall, Somfy Projects presents a solid business and technical profile with room for enhancement in privacy compliance and security best practices to further strengthen trust and regulatory adherence.

A

ACIAH

aciah.xyz

58

ACIAH is a French non-profit organization dedicated to digital inclusion and accessibility, primarily targeting seniors, people with disabilities, and those less familiar with digital technology. They offer a simplified Linux system (ACIAH-Linux), workshops, personalized support, and educational resources to foster autonomy and digital literacy. The website is professionally designed, mobile-optimized, and uses a mature technology stack including SPIP CMS and Bootstrap. The hosting is provided by OVH, a reputable registrar, with domain registration consistent with the organization's founding date and mission. Security posture is moderate with HTTPS enabled but lacking advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy, content-rich, and focused on social good but could improve in privacy and security transparency.

I

INRAE

inrae.fr

64

INRAE is a prominent French public research institute specializing in agriculture, food, and environmental sciences. The website reflects a mature digital presence with comprehensive content targeting researchers, students, policymakers, and the general public. It offers extensive resources including research dossiers, events, and collaboration opportunities. The site is multilingual and well-branded with official government logos and certifications, reinforcing its authoritative position. Technically, the website is built on Drupal 10, leveraging modern web standards and responsive design to ensure accessibility and usability across devices. The presence of cookie consent mechanisms and privacy policies indicates attention to regulatory compliance, particularly GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. The WHOIS data is unavailable due to AFNIC policies, but the domain is active and updated, consistent with a legitimate public institution. No suspicious or malicious indicators were found. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government research entity.

I

IRIT (Institut de Recherche en Informatique de Toulouse)

irit.fr

52

IRIT (Institut de Recherche en Informatique de Toulouse) is a prominent academic research institute specializing in computer science and information technology, affiliated with Toulouse universities in France. The website serves as an informational and academic portal targeting researchers, students, and industry partners. It offers insights into research activities, educational programs, and collaborations. The site is well-structured, professionally designed using modern web technologies such as Bootstrap, and supports multilingual content in French and English. The technical infrastructure reflects a mature digital presence with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though explicit security headers and policies are not clearly documented. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the domain registration and WHOIS data align well with the institution's academic nature, indicating high legitimacy and trustworthiness.

T

Outlook

toulouse-tech-transfer.com

50

The website at toulouse-tech-transfer.com/owa/auth/logon.aspx is a Microsoft Outlook Web Access (OWA) login portal hosted on a custom domain registered with OVH sas since 2011. The site primarily serves as an authentication gateway for email access and does not provide business descriptive content, privacy policies, or contact information on the login page. The domain registration is consistent and legitimate, hosted by a reputable provider, but the website content is minimal and focused solely on login functionality. Technically, the site uses standard Microsoft OWA web technologies including JavaScript, HTML5, and CSS, with some legacy ActiveX references for S/MIME controls. The hosting provider is OVH sas, and the domain is not DNSSEC enabled. The site lacks modern security headers and privacy compliance disclosures, which limits its security posture and GDPR compliance. Mobile optimization and SEO are basic, and no analytics or advertising scripts are detected. From a security perspective, the site uses HTTPS (implied by URL), employs POST method for login form submission with autocomplete disabled, and includes client-side scripts for password visibility toggling. However, the absence of security headers and privacy policies reduces the overall security maturity. No vulnerabilities or malware indicators are detected in the provided data. Overall, the website functions as a secure login portal but lacks comprehensive privacy, security, and business transparency features. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance.

L

L’Atelier Transmédia

lateliertransmedia.com

46

L’Atelier Transmédia is a small audiovisual production company based in Nantes, France, specializing in media content creation and transmedia storytelling. The website reflects a professional service provider targeting businesses and individuals seeking audiovisual production services. The technical infrastructure is built on WordPress with Elementor and optimized using WP Rocket, indicating a moderate level of digital maturity. The site loads moderately fast and is mobile optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve in compliance and security transparency.

F

Forum-Debian.fr - Forum-Debian.fr

forum-debian.fr

52

Forum-Debian.fr is a French-language community forum dedicated to Debian Linux and related topics, providing a platform for discussions, support, announcements, and programming help. The site targets French-speaking Debian users and Linux enthusiasts, operating as a niche community forum with a small but active user base. The business model is community-driven, offering free access to discussion forums without commercial transactions. Technically, the site runs on phpBB forum software, hosted by OVH in France, and uses modern web technologies including jQuery, Font Awesome, and Google Fonts. The site is moderately performant and mobile-optimized with basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published incident response contacts. Privacy compliance is adequate with visible privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy, well-branded, and professionally maintained with active user engagement.

D

Debian

debian.org

63

Debian is a globally recognized open source operating system distribution maintained by a large community of volunteers. The website serves as a hub for project news, downloads, community engagement, and security advisories. It targets a broad audience including developers, users, and contributors interested in free software. The project is well-established with a strong reputation in the technology sector, particularly in Linux and open source communities. Technically, the website is built with standard HTML and CSS technologies, with no advanced frameworks detected. It is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. The site uses HTTPS for secure form submissions but lacks visible advanced security headers or explicit security policies. From a security perspective, the site shows good basic practices such as no exposed sensitive data and secure form handling. However, the absence of explicit privacy, cookie, and security policies, as well as missing WHOIS registration details, limits the overall trust and compliance posture. There is no evidence of vulnerability disclosure mechanisms or incident response contacts. Overall, Debian's website is trustworthy and professional, reflecting the project's maturity and community-driven nature. Strategic improvements in transparency around privacy, security policies, and WHOIS data would enhance trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

The website remspace.sk is a parked domain page primarily serving as a placeholder to advertise the domain for sale via Sedo's domain parking service. It does not represent an active business or service provider and lacks any substantive content beyond basic domain sale information. The site uses standard HTML and JavaScript with embedded Google Ads and Sedo advertising frameworks. There is a basic cookie consent mechanism but no privacy or security policies beyond a link to Sedo's privacy policy. No contact information or business identity is provided, and the WHOIS data is privacy protected, typical for parked domains. Security posture is minimal with no visible HTTPS enforcement or security headers. Overall, the site is low trust and low content quality, serving only as a domain sales landing page.

M

Monzilla Media

m0n.co

50

m0n.co is a niche web utility site curated by Monzilla Media that provides a comprehensive collection of free online tools for web developers, IT professionals, and tech enthusiasts. The site aggregates links to various categories including search engines, HTTP tools, proxy services, PHP utilities, and .htaccess tools, positioning itself as a useful resource hub rather than a direct service provider. The business model is based on curation and aggregation, targeting a specialized audience seeking quick access to web-related tools. Technically, the website employs a simple but effective front-end stack using HTML5, CSS3, jQuery, and Isotope.js for dynamic filtering of tool categories. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and SEO optimizations. There is no detected CMS or complex backend infrastructure, indicating a lightweight and static content approach. From a security perspective, the site lacks critical security headers and does not provide HTTPS enforcement details, which limits its security posture. No privacy or cookie policies are present, and no contact or incident response information is disclosed, which may impact user trust and compliance with data protection regulations. The absence of analytics and tracking scripts suggests minimal user data collection, reducing privacy risks but also limiting business intelligence. Overall, m0n.co is a functional and safe resource site with good content quality and user experience but requires improvements in security practices, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

The website godefense.fr is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to its content. As a result, no business descriptive content, contact information, or compliance documentation is available for analysis. The domain is registered since 2013 with Scaleway as registrar, indicating a legitimate and established registration. However, the lack of accessible content limits the ability to assess the company's market position, services, or technical maturity. The technical infrastructure includes Cloudflare security mechanisms but no visible CMS or analytics tools. Security posture is difficult to evaluate fully due to blocked content, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site scores low on content quality and privacy compliance due to inaccessibility, with recommendations to reduce blocking for better transparency and trust.

G

Gesellschaft für Garantierte Bewertungen

g-g-b.de

56

Gesellschaft für Garantierte Bewertungen is a specialized provider of authentic customer review solutions aimed at e-commerce businesses. The company offers multilingual modules compatible with major e-commerce platforms such as WooCommerce, PrestaShop, Magento, and Shopify. Their services focus on collecting, moderating, and showcasing verified customer reviews to enhance conversion rates and online reputation. The website is professionally designed, well-structured, and provides clear contact channels and GDPR-compliant privacy practices. Technically, the site is built on WordPress with WooCommerce and employs modern web technologies including Google reCAPTCHA for form security and Cloudflare for DNS and CDN services. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional HTTP security headers could improve defenses. Overall, the site demonstrates a mature digital presence with strong trust indicators such as certifications and customer testimonials.

S

Somfy

somfy.co.kr

10

Somfy Korea operates as a regional branch of the global Somfy Group, specializing in motorized automation products and smart home solutions including blinds, shutters, alarms, cameras, heating, and lighting controls. The website targets both consumers and professionals in South Korea, offering a comprehensive product catalog and support services. The brand is well-established with a founding date of 1969 and a strong market presence supported by multiple international domains and social media channels. Technically, the site uses modern web technologies such as jQuery, JSON-LD structured data, and performance monitoring tools, hosted likely via Akamai CDN, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, though explicit security headers are not detected and no public security policy or incident response information is available. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not negate the legitimacy of the site given the brand's global reputation. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

S

Somfy

somfy.gr

53

Somfy Greece operates as a regional branch of the international Somfy Group, specializing in home automation products including motorized blinds, shutters, security cameras, alarms, heating, and lighting solutions. The website targets both consumers and professionals, offering a comprehensive product catalog and support services. The company is well-established with a founding date of 1969 and maintains a strong market position in the smart home and energy-saving sectors within Greece. Technically, the website is modern, responsive, and well-optimized for SEO and accessibility, leveraging structured data and a robust tech stack including JavaScript and jQuery. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some advanced security headers could be added. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Overall, the site reflects a professional, trustworthy, and mature digital presence aligned with business goals.

I

InsiderData360

insiderdata360online.com

45

InsiderData360 operates a proprietary dashboard platform, likely focused on data analytics or business intelligence services. The website serves primarily as a login portal for authorized users to access the dashboard. The business appears to be a small technology company founded around 2018, with claims of proprietary technology protected by patents. The platform targets business users requiring data insights and dashboard services. Technically, the website uses modern web technologies including Bootstrap, Chartist.js, Moment.js, and integrates Calendly for scheduling. The site is basic in design and functionality, optimized for desktop and mobile with minimal content beyond the login form. Security posture is moderate but lacks advanced protections such as security headers, CSRF tokens, and CAPTCHA on login forms. No privacy or cookie policies are present, indicating limited compliance with privacy regulations. The domain registration is consistent and stable, supporting legitimacy. Overall, the site is functional but could benefit from enhanced security and compliance measures.

H

Hotel Imperial *****

spa-hotel-imperial.cz

66

Hotel Imperial is a luxury hospitality business located in Karlovy Vary, Czech Republic, with a rich tradition dating back to 1912. The hotel offers a wide range of services including accommodation in various room categories, wellness and spa treatments, gastronomy through multiple restaurants and cafés, and event hosting facilities. The website reflects a well-established market position targeting luxury travelers and wellness guests. Technically, the website employs modern web technologies such as lazy loading, Google Analytics, Facebook Pixel, and a custom booking form, ensuring a smooth user experience with mobile optimization and good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap that slightly reduces trustworthiness but does not detract significantly from the overall professional presentation. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve business credibility and compliance.

R

Rudy Lis

skleprl.pl

60

Rudy Lis is a Polish e-commerce retailer specializing in photography and video equipment, targeting photographers, filmmakers, streamers, and content creators such as TikTokers and YouTubers. The business offers product sales alongside consulting, project design, installation, and training services. The website is built on the Shoper platform and hosted by nazwa.pl, with a modern but basic technical infrastructure including Google Analytics and reCAPTCHA for security. The domain is newly registered in May 2024, consistent with a recently launched business. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are not present, indicating compliance gaps. Overall, the site provides a professional user experience with good navigation and mobile optimization but requires improvements in privacy compliance and security best practices.

V

Vinařství Málek Valtice s. r. o.

malekvaltice.cz

57

Vinařství Málek Valtice s. r. o. operates a historic wine cellar and accommodation business located in Valtice, Czech Republic, a renowned wine tourism destination. The company offers wine cellar tours, tastings, event hosting, and accommodation in both rooms and modern apartments. Their market position is that of a specialized local hospitality provider catering primarily to tourists and wine enthusiasts visiting the South Moravia region. The website reflects a professional and consistent brand image with good content quality and clear service descriptions. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses modern web technologies including JavaScript and CSS, and is served over HTTPS ensuring secure communication. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured content. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, demonstrating some compliance with privacy regulations. However, it lacks explicit security headers and published privacy or security policies, which are important for comprehensive security posture. The absence of WHOIS data reduces domain trust verification, though the website content and business details appear legitimate and professional. Overall, the website presents a trustworthy and professional front for a small hospitality business with moderate technical maturity and security posture. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and trustworthiness.

C

Capital Radio

capitalradio.es

61

Capital Radio is a Spanish media company specializing in financial news, podcasts, and business-related content. It targets Spanish-speaking professionals interested in economy, markets, and quality of life. The website offers a rich content experience including news articles, podcasts, event information, and newsletters. Technically, the site uses modern web technologies including Google Analytics, InMobi Consent Manager for GDPR compliance, and custom CMS infrastructure. The site is mobile-optimized and SEO-friendly with structured data markup. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. WHOIS data is unavailable due to Red.es restrictions, limiting domain legitimacy verification. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a medium-sized business audience in Spain.

T

Teamwork

teamwork.com

76

Teamwork is a well-established SaaS company specializing in project and resource management software designed for busy teams. The company offers a comprehensive suite of tools including project management, resource allocation, collaboration, time tracking, and helpdesk solutions. Positioned strongly in the technology sector, Teamwork targets business teams and project managers globally, with a focus on improving productivity and workflow efficiency. The website reflects a mature digital presence with professional branding and clear messaging aligned with its business objectives. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a fast, responsive, and accessible user experience across devices. The infrastructure appears robust with good SEO practices and performance optimizations. Security measures are well implemented, including HTTPS enforcement and multiple security headers, although explicit security policies and incident response details are not publicly disclosed. From a security standpoint, the site demonstrates strong baseline protections but lacks transparency in vulnerability disclosure and incident response readiness. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional web presence and external trust signals. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, Teamwork presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure programs to enhance trust and compliance further.

PROKOS z.s. is a Czech non-profit association representing manufacturers, importers, and sellers of cosmetic products and raw materials. The website serves as an informational portal announcing industry events such as seminars and conferences, and providing membership-related content. The organization positions itself as a key industry association within the Czech cosmetics sector, targeting professionals and companies involved in cosmetics production and sales. The business model is membership-based, focusing on industry collaboration and knowledge sharing. The website content is professionally presented in Czech, with consistent branding and relevant partner affiliations.

The website justformen.cz represents FACTUM CZ, s.r.o., a company specializing in men's hair and beard coloring products, positioning itself as a global leader in this niche. The site offers detailed product information and a contact form for wholesale inquiries, targeting male consumers interested in grooming products. The technical infrastructure is based on standard web technologies with moderate performance and good mobile optimization, hosted likely by Active24 with a CMS platform inferred as WebSupport Sitebuilder. Security measures include HTTPS and hCaptcha integration, but lack advanced security headers and formal privacy or terms policies, indicating room for compliance improvement. Overall, the site is legitimate, professionally presented, and safe for general audiences.

R

Radůzy Recepty.com

raduzyrecepty.com

37

Radůzy Recepty.com is a Czech-language culinary website offering over 3600 recipes, cooking ideas, inspirations, contests, and step-by-step cake decoration guides. It targets cooking enthusiasts primarily in the Czech Republic, providing a niche content platform with community discussion features and user-generated content sections. The business model appears to be content-driven with monetization through advertising and affiliate partnerships. Technically, the site is built on the Estranky.cz CMS platform, utilizing legacy JavaScript libraries such as jQuery 1.12.4 and Google services for analytics and advertising. While the site is accessible and content-rich, it lacks modern technical optimizations and comprehensive privacy or security policies. Security posture is moderate with outdated libraries and missing security headers, and WHOIS data is unavailable, raising some legitimacy concerns. Overall, the site provides valuable culinary content but would benefit from technical and security improvements.

SVATEBNÍ KATALOG, s.r.o. operates a Czech-language wedding directory and informational portal focused on providing comprehensive wedding planning resources, service listings, and articles for couples and related parties in the Czech Republic. The website has a niche market position with over 10 years of claimed presence, serving a small to medium audience interested in wedding services. Technically, the site uses standard web technologies including jQuery, Google Maps API, and Google Analytics, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data reduces domain trustworthiness, but the business information and content quality support legitimacy. Overall, the site is functional, relevant, and safe for general audiences, though it would benefit from enhanced security and privacy measures.

The website natural-sport.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks direct access to its content. This prevents extraction of business details, contact information, policies, or any other substantive content. The domain is registered since 2008 with REG-WEDOS and uses Cloudflare for DNS and security services. Due to the blocking, the technical infrastructure appears to leverage modern security mechanisms, but the actual website content and business model cannot be assessed. The security posture benefits from Cloudflare's protection, but the lack of accessible content limits further evaluation. Overall, the site is low in transparency and business credibility from the accessible data.

B

Belfius Bank

belfius.be

69

Belfius Bank is a 100% Belgian bankinsurer providing financial solutions to individuals, entrepreneurs, and public or social profit institutions. The website targets investors and financial analysts with dedicated sections for company profile, press releases, reports, results, ratings, and debt issuance. The site is professionally designed with multi-language support and a clear focus on compliance and user experience. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates OneTrust for cookie consent management, indicating a mature approach to privacy and GDPR compliance. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible advanced security headers or explicit security policies. WHOIS data is restricted due to DNS Belgium policies, which is typical for .be domains, but the domain appears legitimate and consistent with the business claims. Overall, the site is professional, trustworthy, and compliant with privacy regulations, suitable for its financial services audience.

E

EVENT media s.r.o.

neonrun.cz

44

Neon Run, operated by EVENT media s.r.o., is a well-established Czech event organizer specializing in themed night running events such as the Mizuno Neon Run. The company has been active since 2014 and maintains a professional online presence with clear event information, partner listings, and registration links. Their target audience includes runners and sports enthusiasts primarily in the Czech Republic. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and a cookie consent mechanism, hosted on VAS Hosting. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is implemented, but the absence of explicit security headers and incident response policies suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR, though it lacks a visible terms of service and vulnerability disclosure policy.

Synerjob is a non-profit organization established in 2007 to foster collaboration between regional employment agencies in Belgium, including ACTIRIS, ADG, Bruxelles Formation, Forem, and VDAB. The website serves as an informational portal providing multilingual content about the association's mission, members, documents, events, and statistics. The business model focuses on regional labor market synergy and information sharing among government entities. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript with jQuery and Bootstrap, and integrates Google Tag Manager for analytics. The site is moderately optimized for mobile and accessibility with basic SEO practices. Security posture is moderate with no explicit security headers detected and no visible HTTPS status in the provided data, though Google Tag Manager scripts load over HTTPS. Privacy compliance is basic, with a cookie consent banner present but no privacy policy or terms of service found. No contact information or forms are present on the homepage HTML. The domain WHOIS data is consistent with the organization's founding date and business purpose, registered with a reputable registrar since 2007, supporting legitimacy. Overall, the website is professional and safe for general audiences but could improve in privacy transparency and security best practices.

Q

Queer Communications GmbH

queer.de

53

Queer Communications GmbH operates queer.de, a well-established German online magazine serving the LGBTI community with news, culture, entertainment, and event information. The website targets the queer community and allies, providing diverse content including interviews, TV tips, podcasts, and galleries. The business model relies on advertising, affiliate marketing, and newsletter subscriptions, positioning queer.de as a niche media leader in Germany. Technically, the site employs standard web technologies with a focus on responsive design and GDPR-compliant cookie management. Hosting appears to be with Your-Server.de, and analytics are handled via Piwik (Matomo), reflecting a moderate digital maturity. Security posture is solid with HTTPS and content security policies, though additional headers could enhance protection. No critical vulnerabilities or adult content were detected, and privacy compliance is well addressed. Overall, queer.de presents a professional, trustworthy, and user-friendly platform with room for incremental security and compliance improvements.

S

Solutions 30

solutions30.com

68

Solutions 30 is a technology solutions provider established in 2009, offering services related to new technologies. The website is built on WordPress using the Divi theme and hosted with AWS DNS services. The digital infrastructure is moderately optimized with basic mobile responsiveness and SEO features. Security posture is average, with HTTPS enabled but lacking advanced security headers and policies. No explicit privacy or cookie policies were found, indicating potential compliance gaps. Overall, the website presents a professional but basic online presence with room for improvement in privacy, security, and contact transparency.

S

Sunforwatt

sunforwatt.com

62

Sunforwatt is a French photovoltaic energy solutions provider specializing in serving agricultural, industrial, and tertiary sectors. Established since 2008, the company offers comprehensive services from technical and financial studies to installation, compliance, commissioning, and ongoing maintenance of photovoltaic systems. Their market position is that of an experienced niche player with a growing footprint in renewable energy projects for businesses. Technically, the website is built on Webflow with modern front-end technologies and integrates Google Tag Manager for analytics. The site is well designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and the contact form relies on a third-party service without visible advanced protections. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy in content but requires improvements in security and compliance transparency.

Sémaphore Communication is a small French communication agency based in Melle, affiliated with the cooperative SCOP Oxalis. Founded in 2009, it offers comprehensive communication services including graphic design, web projects, strategic consulting, training, and multimedia production. The agency targets local businesses, associations, and collectives seeking tailored communication solutions. The website reflects a professional and consistent brand image with clear service descriptions and team presentation. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript libraries including jQuery, GSAP, ScrollMagic, and Barba.js for animations and page transitions. It is hosted by O2Switch, a reputable French hosting provider. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. SEO optimization is minimal but present. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information. The contact form is present but commented out, limiting user interaction. The use of Crisp chat provides live communication but also introduces tracking. Overall, the security posture is moderate but could be improved with better compliance and security practices. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No WAF or blocking mechanisms are detected, and the site content is fully accessible and safe for general audiences.

A

Association Debian-Facile

debian-facile.org

62

Debian-Facile is a French non-profit association dedicated to supporting new users of the Debian GNU/Linux operating system. The website serves as a hub for community-driven resources including forums, a wiki, tutorials, and an IRC support channel. It targets beginners and promotes free software principles through educational content and community engagement. The association is well-established, founded in 2007, and maintains a stable online presence with a domain registered through OVH sas. Technically, the site uses basic HTML and CSS with the FluxBB forum software, which is currently outdated and undergoing migration to a more modern platform. While the site is accessible and content-rich, it lacks explicit privacy and cookie policies, and security headers are not present, indicating room for improvement in security posture. The domain registration is consistent and trustworthy, with long-term expiry and registrar protections in place. Overall, Debian-Facile provides valuable community services with a solid business credibility but should enhance its technical security and privacy compliance to align with best practices.

A

L'Agenda du Libre

agendadulibre.org

54

L'Agenda du Libre is a community-focused platform dedicated to aggregating and promoting events related to free and libre software, arts, data, hardware, and commons. It serves a niche audience interested in open source and libre culture, providing a comprehensive calendar of events, organization listings, and news updates. The website is closely associated with the April organization and related libre initiatives, reinforcing its position within the free software community. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and Turbolinks, offering a mobile-responsive and user-friendly experience. However, there is a lack of explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with no visible security headers or incident response information, and WHOIS data is unavailable, limiting domain trust verification. Overall, the site is functional and relevant for its target audience but would benefit from enhanced security and privacy transparency.

C

CAn7

can7.fr

51

CAn7 is a French student association affiliated with INP-ENSEEIHT, specializing in providing sound and lighting services for a variety of events including school galas, concerts, and conferences. The organization has over 20 years of experience and serves primarily the student and local community event market. The website reflects a small, non-profit entity with a clear focus on event technical support. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted by OVH, a reputable provider. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. Security posture is moderate; while no critical vulnerabilities or exposed data are evident, the absence of security headers and unclear SSL status suggest room for improvement. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site is trustworthy but would benefit from enhanced security and compliance measures.

T

TVn7

tvn7.fr

47

TVn7 is a well-established student video association based at ENSEEIHT in Toulouse, France, founded in 1992. The organization provides a variety of video production services including event coverage, multi-camera live broadcasts, and promotional clips primarily targeting the academic community and local organizations. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses standard web technologies with good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but missing explicit security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the presence of partner logos, testimonials, and active social media accounts supports legitimacy. Overall, the site is safe, trustworthy, and serves its niche effectively.

M

MyMGLife

mymglife.com

65

MyMGLife operates as a niche e-commerce fundraising platform dedicated to supporting research for Myasthenia Gravis, a rare neuromuscular disease. The website leverages the Shopify platform to sell branded merchandise, with proceeds directed towards a non-profit organization focused on this cause. The site targets individuals interested in supporting medical research and awareness efforts related to Myasthenia Gravis. The business model is straightforward, combining retail sales with charitable fundraising, positioning itself as a specialized player within the non-profit e-commerce space. Technically, the website is built on a modern and robust infrastructure using Shopify's e-commerce platform, ensuring reliable hosting, secure payment processing (including Shopify Pay, Apple Pay, and PayPal), and responsive design optimized for mobile devices. The site employs standard web technologies such as JavaScript, CSS, and HTML5, with good SEO and accessibility practices evident. Performance is generally fast, benefiting from Shopify's CDN and optimized assets. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes essential security headers. Payment integrations are secure, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of explicit privacy and cookie policies, GDPR compliance indicators, and contact information for security incidents or abuse reduces the overall security posture and compliance maturity. Overall, the website presents a professional and trustworthy front for its fundraising mission but would benefit from enhanced transparency and compliance documentation. The lack of WHOIS data introduces some uncertainty regarding domain legitimacy, though the Shopify platform usage and secure infrastructure mitigate this risk. Strategic improvements in privacy, cookie consent, and incident response disclosures would strengthen trust and regulatory compliance.

A

AiVision, s.r.o.

ai-shop.cz

46

AiVision, s.r.o. operates the website www.ai-shop.cz offering advanced e-shop solutions with ERP system integrations such as Pohoda, Helios, Money, Cezar, Premier, and SAP. The company targets small to medium-sized businesses seeking customizable e-commerce platforms with B2B and B2C capabilities. With over 20 years of experience and more than 1100 satisfied clients, AiVision positions itself as a reliable technology provider in the Czech Republic's e-commerce sector. The website showcases a modern, responsive design with comprehensive content, client references, and integration options, reflecting a mature digital presence. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring good performance and security basics. However, explicit security headers and incident response policies are not published, indicating areas for improvement. The site is GDPR compliant with a clear privacy and cookie policy, and contact information is readily available. WHOIS data is missing or privacy protected, which slightly reduces trustworthiness but does not negate the evident business legitimacy. Overall, the website demonstrates a strong business and technical foundation with moderate security posture and good privacy compliance.

H

HALLENKUNST | MARKTHALLE CHEMNITZ

hallenkunst.de

7

The website www.hallenkunst.de is a Wix-hosted site with minimal content and no visible privacy, cookie, or terms of service policies. The business focus is unclear due to lack of descriptive content, but the presence of art-related media suggests an art or gallery-related business. The technical infrastructure relies on Wix technologies and standard web technologies such as JavaScript, CSS, and HTML5. Mobile optimization is good, but overall content quality and SEO are basic. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. No contact information or compliance indicators are present, which limits trust and business credibility. Overall, the site is accessible without WAF or security challenges and contains no adult or explicit content.

Asia Bistro Příbram operates a local restaurant business specializing in Asian cuisine with an online ordering platform. The website provides daily menu selections and ordering options for the upcoming week, targeting local customers in Příbram. The business model is straightforward, focusing on dine-in and takeaway food services with temporarily suspended delivery. The website is modest but functional, reflecting a small local business with limited digital sophistication. Technically, the website uses standard web technologies including Bootstrap for responsive design and jQuery for scripting. Hosting is provided by Websupport, a known Czech hosting provider. The site is mobile-optimized with basic accessibility and SEO features but lacks advanced frameworks or CMS platforms. Performance is moderate with no evident technical debt but opportunities exist for modernization and enhanced user experience. From a security perspective, the site uses HTTPS and includes anti-CSRF tokens in forms, indicating some security awareness. However, no security headers were detected, and there is no visible privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The absence of contact emails and phone numbers reduces business credibility and user trust. Overall, the website is safe with no adult or questionable content. The domain registration is consistent and appropriate for the business age and location. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

B

BISTROOO

bistrooo.cz

45

Bistrooo is a small hospitality business based in Příbram, Czech Republic, offering breakfast, soups, hot meals, and daily menus. The website presents a clear business focus on local food service with reservation capabilities and business hours. The technical infrastructure is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN and Google Tag Manager for analytics. The site is accessible, mobile-optimized, and has a good user experience, though it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and privacy compliance elements. The absence of WHOIS data limits domain legitimacy verification, which impacts trustworthiness. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices.