Security Directory

B

Brdský běžecký pohár

brdskypohar.cz

44

The website 'Brdský běžecký pohár' serves as a regional platform dedicated to organizing and promoting running events and athletic competitions primarily in the Příbram area of the Czech Republic. It offers detailed information about upcoming races, results, photo galleries, and registration options, targeting runners, athletes, and local sports enthusiasts. The business model revolves around event organization, community engagement, and race facilitation, positioning itself as a key regional sports event organizer. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript with jQuery and Bootstrap 5 frameworks, and integrates Google Analytics for visitor tracking. The site is hosted under a Czech registrar with appropriate DNS settings and uses HTTPS for secure communication. Mobile optimization and user experience are good, though accessibility and SEO could be improved. From a security perspective, the site benefits from HTTPS but lacks visible security headers and a formal privacy or cookie policy, which are important for GDPR compliance. No vulnerability disclosure or incident response information is provided. The use of Google Analytics without a cookie consent mechanism indicates potential privacy compliance gaps. Overall, the website is functional, content-rich, and trustworthy for its intended audience but would benefit from enhanced privacy compliance, improved security headers, and formal policies to strengthen its security posture and regulatory adherence.

W

Windcoop SCIC SA

wind.coop

52

Windcoop SCIC SA is a French maritime cooperative based in Lorient specializing in low-carbon cargo transport using sail-powered container ships. The company operates an innovative business model focused on sustainability and cooperative ownership, targeting individuals, businesses, and communities interested in ethical and ecological maritime transport. Their flagship project is a 90-meter sail cargo ship designed to reduce CO2 emissions by 60% compared to conventional vessels, with operations planned between Marseille and Madagascar starting in 2027. The website reflects a professional and modern digital presence built on WordPress, featuring comprehensive content, multimedia, and clear calls to action for investment and membership. Technical infrastructure includes Matomo analytics and Google Tag Manager, with a strong emphasis on privacy and cookie consent compliance. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and explicit security policies are recommended. Overall, Windcoop presents a credible, transparent, and innovative player in the sustainable transportation sector.

éthi'Kdo is a French e-commerce platform specializing in eco-responsible gift cards that promote ethical gifting for individuals, businesses, and employee committees. The website presents a well-structured and professionally designed interface with a focus on sustainability and social responsibility. The technical infrastructure leverages modern JavaScript, CSS, and HTML5 technologies, integrating third-party services such as Sentry for error monitoring, Google Analytics for user behavior tracking with IP anonymization, and Crisp Chat for customer support. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the website demonstrates a high level of business credibility and technical maturity, with no detected vulnerabilities or suspicious activity.

N

NEONUS, s.r.o.

neonus.sk

69

NEONUS, s.r.o. is a Slovak digital agency specializing in custom web development, e-commerce, B2B online shops, design, and data synchronization services. The company targets businesses seeking tailored digital solutions and technical support for their online presence. With over 15 years of experience and more than 500 projects completed, NEONUS holds a solid regional market position. The website reflects a professional and consistent brand image with comprehensive service offerings and client references. Technically, the website employs modern web technologies including GSAP for animations, Google Tag Manager and Analytics for tracking, and Tawk.to for live chat support. The site is built likely on WordPress with WooCommerce integration, optimized for mobile devices, and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in accessibility and loading speed. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and secures user data collection via forms with CAPTCHA. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure information. Security headers are not explicitly detected, suggesting potential areas for enhancement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The risk profile is low, but strategic improvements in security transparency and technical optimizations are recommended to further strengthen the security posture and user trust.

H

Hudební agentura Arte per tutti

artepertutti.cz

59

Hudební agentura Arte per tutti is a small Czech music agency specializing in live music performances for weddings, concerts, corporate events, and other celebrations. Founded in 2017 by Jitka Břízová, who also acts as manager and violinist, the agency emphasizes quality, originality, and personalized service. Their offerings include tailored musical ensembles and guaranteed substitutes for musicians in case of illness. The website presents a professional image with testimonials and clear contact information, targeting clients seeking live music experiences in the Czech Republic. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and uses Amazon Cloudfront CDN for content delivery. It integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and features a cookie consent mechanism, though it lacks some advanced security headers and a published privacy policy. From a security perspective, the site uses HTTPS with a good SSL configuration but does not implement common security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data and privacy policy reduces trustworthiness. There is no visible incident response or vulnerability disclosure information. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and compliance.

Gitoyen is a French non-profit association established in 2000, dedicated to maintaining a decentralized and neutral Internet by supporting small network operators. It operates as a local Internet registry (LIR) and provides Internet transit, routing, switching, and equipment hosting services primarily to its members. The organization positions itself as a niche player in the telecommunications sector with a strong community and non-profit ethos. Technically, the website uses legacy JavaScript libraries and basic web technologies, hosted under Scaleway SAS, with moderate performance and basic mobile optimization. Security posture is moderate with notable gaps such as lack of DNSSEC, outdated libraries, and missing security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in security and compliance aspects.

The website petitesimmensites.org is a small French-language informational platform focused on educating users about the benefits and usage of VPNs for accessing geo-restricted streaming content. It provides detailed explanations of VPN technology, usage instructions, and recommends Surfshark VPN as a preferred service. The site targets French-speaking internet users interested in streaming and privacy technologies. Technically, the site is built with basic HTML, CSS, and jQuery, hosted behind Cloudflare DNS but lacks DNSSEC and advanced security headers. The site is mobile responsive at a basic level and has moderate performance. Security posture is minimal with no visible security policies or incident response information. Privacy compliance is lacking as no privacy or cookie policies are present. Business credibility is low due to absence of contact or company information. Overall, the site is safe for general audiences and does not contain adult or explicit content.

B

BussinesMC

ulicenarodni.cz

45

The website www.ulicenarodni.cz serves as a local informational portal focused on the Národní street area in Prague 1, providing visitors and locals with details about hotels, restaurants, bars, cultural venues, theaters, and clubs. The site targets tourists and residents interested in cultural and hospitality services, positioning itself as a niche guide for this specific locality. The business model appears to be promotional and informational, likely monetized through partnerships and advertising. The site is operated by BussinesMC, a small entity with no publicly disclosed parent or subsidiaries. Technically, the website employs a traditional web stack with HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supplemented by third-party analytics and marketing tools such as Google Analytics, Facebook Pixel, and SmartLook. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with GDPR-aligned cookie consent and a basic privacy policy. Overall, the website is trustworthy and professionally maintained, though it could benefit from enhanced security practices and more transparent business contact information.

B

b2match

b2match.com

68

b2match is a technology-driven SaaS company specializing in event management platforms focused on networking and matchmaking for in-person, virtual, and hybrid events. The platform offers a comprehensive suite of tools including registration, ticketing, agenda management, AI-powered matchmaking, mobile apps, and analytics, positioning itself as a trusted solution for event professionals globally. The website demonstrates a mature digital presence with modern technologies such as Next.js, React, and integration of major analytics and advertising platforms. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the website and business exhibit high professionalism and trustworthiness, though WHOIS data is privacy-protected, which is common for SaaS providers. Strategic recommendations include enhancing security header implementation and publishing security policies to further improve trust and compliance.

T

TAZ Verlags- und Vertriebs GmbH

taz.de

66

TAZ Verlags- und Vertriebs GmbH operates taz.de, a well-established German left-leaning independent news media website founded in 1992. The site offers critical journalism including analyses, commentaries, interviews, and reportages, targeting a general audience interested in progressive news. The business model combines subscription services and advertising revenue, supported by a cooperative structure. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks like Alpine.js, Cash DOM, and uses Google Publisher Tag for advertising and Matomo for analytics. Mobile optimization and accessibility are well implemented, providing a good user experience. Security posture is strong with HTTPS enforced and consent mechanisms for cookies, though explicit security headers could be confirmed. Privacy compliance is robust with clear privacy and cookie policies in German, aligned with GDPR requirements. WHOIS data is consistent with the business claims, showing legitimate domain registration and hosting in Berlin. Overall, the site is professional, trustworthy, and secure, with no critical vulnerabilities detected.

C

Circle U.

circle-u.eu

71

Circle U. is a collaborative alliance of nine research-intensive European universities focused on providing interdisciplinary education, research, and innovation opportunities. The website serves as a portal for students, academics, and administrative staff, offering news, events, and resources. The alliance is co-funded by the European Union, reinforcing its legitimacy and institutional backing. The technical infrastructure is based on the Vortex CMS platform, hosted likely by the University of Oslo, with modern web technologies and multimedia integration. The site is moderately optimized for performance and accessibility, with room for improvement in mobile responsiveness and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and aligned with its educational mission.

G

German U15 e.V.

german-u15.de

53

German U15 e.V. is a non-profit association representing fifteen leading research-intensive universities in Germany. The organization focuses on promoting excellent research, innovative teaching, and international cooperation among its member institutions. The website serves as an information hub for policy statements, publications, events, and news related to higher education and research in Germany. The association holds a significant position in the German academic landscape, advocating for science policy and fostering collaboration. Technically, the website is built on the Infopark CMS Fiona platform using Ruby on Rails, with a modern tech stack including HTML5, CSS3, JavaScript, and jQuery. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. Hosting appears to be managed through German academic networks, ensuring reliability and alignment with the organization's profile. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating a baseline security posture. However, it lacks several recommended security headers and does not provide explicit vulnerability disclosure or incident response contacts. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent mechanism is a notable gap. Contact information is primarily available via contact forms rather than direct emails or phone numbers. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and providing clearer contact channels for security incidents to strengthen trust and compliance.

The Berlin University Alliance is a prominent academic consortium of four major Berlin universities and university medical centers, established in 2011. It focuses on collaborative research addressing global societal challenges, knowledge exchange, promoting academic talent, sharing research resources, and fostering international partnerships. The alliance is well-positioned as a leading academic excellence network in Germany, supported by government funding and strategic collaborations such as with the University of Oxford. Technically, the website is built on the Infopark CMS Fiona platform using Ruby on Rails, with modern web standards including responsive design and accessibility features. The site performs moderately well with good SEO and mobile optimization, though some improvements in performance and security headers could be made. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide a public security policy or incident response information. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but no cookie consent mechanism is present. Overall, the website is professional, trustworthy, and safe, serving its academic audience effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and vulnerability disclosure policies to further strengthen trust and compliance.

P

Pražské vodovody a kanalizace, a.s.

pvk.cz

57

Pražské vodovody a kanalizace, a.s. is a major water utility company serving Prague and surrounding regions, providing essential water supply and sewage services. The company is part of the Veolia group, a global leader in environmental services. Their website offers comprehensive information on services, customer support, water quality, and company news, targeting residential and commercial customers. The business model focuses on utility service provision with a strong emphasis on customer engagement and environmental responsibility. Technically, the website is built on the Vizus CMS platform, utilizing modern web technologies including JavaScript, CSS, and Bootstrap framework components. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR standards. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and provides cookie consent controls, but lacks visible security headers and explicit security policies or incident response contacts. The absence of WHOIS data reduces domain trust slightly, though the affiliation with Veolia and professional presentation support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence for a large utility company. Strategic improvements in security headers, explicit privacy and security policies, and WHOIS transparency would enhance trust and compliance further.

G

Grand Automotive Central Europe

omoda-jaecoo.cz

63

The website omoda-jaecoo.cz represents the Czech market presence of the automotive brands Omoda and Jaecoo, subsidiaries of the Chinese Chery Group. It offers detailed information about various car models including electric, hybrid, and combustion engine vehicles, targeting a broad audience from young buyers to urban elites. The site includes dealer locators, news updates, and vehicle configuration options, supporting a direct-to-consumer sales model through a network of dealerships. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and analytics tools, hosted on Netim infrastructure with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policy disclosures. WHOIS data confirms recent domain registration consistent with the brand's market entry timeline. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

EXPOBEAUTY PRAGUE s.r.o.

worldofbeauty.cz

38

Beauty Expo CZ, operated by EXPOBEAUTY PRAGUE s.r.o., is a prominent organizer of international trade fairs focused on cosmetics, hairdressing, wellness, and spa industries in the Czech Republic. The website showcases a long history of events dating back to 2006, attracting over 350 exhibitors and 15,000 visitors, positioning itself as a leading event in its sector. The business model revolves around organizing exhibitions, competitions, and seminars to connect industry professionals and consumers. The target audience includes industry professionals, exhibitors, and visitors interested in beauty and wellness sectors. Technically, the website employs standard HTML, CSS, and JavaScript with jQuery plugins for slideshows, but lacks modern frameworks or CMS indications. The site shows moderate performance and basic mobile optimization.

F

Fashion Models

fashion-models.cz

44

Fashion Models is a Czech Republic-based modeling agency website that showcases a variety of models, photographers, and fashion designers. The site offers services including model representation, portfolio creation, event organization, and photo editing. It targets models, fashion professionals, and clients seeking modeling services within the Czech market. The website is professionally designed with good content quality and consistent branding, supported by social media presence and partnerships with industry-related entities. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with mobile optimization and moderate performance. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some security headers and explicit privacy policy documentation. The domain WHOIS data is unavailable, which reduces transparency and trustworthiness assessment. Overall, the website is safe, professional, and functional, but could improve in privacy compliance and security best practices.

A

Atmo-Auvergne-Rhône-Alpes

captotheque.fr

53

La Captothèque is a regional public service platform operated by Atmo-Auvergne-Rhône-Alpes, focused on enabling citizens to measure and understand air quality in their territories. The website offers sensor loans and data visualization tools to engage the community in environmental monitoring. The platform is supported and financed by the Auvergne-Rhône-Alpes regional government, positioning it as a niche but trusted service in the energy/environment sector. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Flickity, hosted by OVH, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and formal privacy or security policies. The WHOIS data confirms domain legitimacy and consistency with the business age and claims. Overall, the site is professional, trustworthy, and serves a clear public interest mission.

R

Review Porn

reviewporn.com

68

ReviewPorn.com is an established adult entertainment review platform founded in 2004, specializing in providing comprehensive reviews and comparisons of adult straight porn sites. The site targets an adult-only audience and operates primarily as an affiliate marketing business, offering detailed content and discount offers for various adult sites. Technically, the website uses standard web technologies including JavaScript, CSS, and Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled and an adult content consent banner, but lacks advanced security headers and explicit security policies. Privacy compliance is minimal with a basic privacy policy but no cookie policy or GDPR indicators. The domain WHOIS data is consistent and trustworthy, registered through GoDaddy since 2004, supporting the site's legitimacy. Overall, the site is professional and credible within its niche but could improve security and privacy compliance.

Y

Your Mailing List Provider

ymlp.com

60

Your Mailing List Provider (YMLP) operates a web-based email marketing software platform offering tools for creating, sending, and tracking email newsletters. The company targets businesses and individuals seeking easy-to-use email marketing solutions, with a freemium model and paid subscription plans. The website highlights a long operational history of 23 years and a user base exceeding 500,000 across more than 100 countries, positioning itself as an established player in the email marketing SaaS market. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts integration. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and modern frameworks. No CMS or hosting provider information is discernible from the content. SEO and navigation are basic but functional. From a security perspective, the website mentions GDPR compliance but lacks visible security headers and explicit HTTPS confirmation in the provided data. No incident response or vulnerability disclosure policies are found. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, despite the professional appearance of the site. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site presents a professional business offering with moderate technical maturity and basic privacy compliance. However, the lack of domain registration data and security best practices reduces trust and security posture. Strategic improvements in domain registration transparency, HTTPS implementation, security headers, and privacy mechanisms are recommended to enhance credibility and compliance.

The website outil-web.fr is a French-language agricultural form platform designed to collect user data related to agricultural activities such as cultivated surface area and type of culture. The site targets agricultural professionals or farmers in France and operates as a small-scale data collection service. The technical infrastructure is basic, relying on standard HTML and CSS with Google Fonts integration, hosted by Infomaniak Network SA. The site includes a CSRF token in its form, indicating some attention to security, but lacks advanced security headers and visible HTTPS confirmation in the provided data. No privacy, cookie, or terms of service policies are present, which limits compliance with GDPR and other privacy regulations. The absence of contact emails or phone numbers reduces business credibility and user trust. Overall, the site is functional but basic, with moderate mobile optimization and minimal tracking or advertising.

The Syndicat ELE website represents a professional association for local energy companies in France, focusing on industry representation and advocacy. The site content is relevant and targeted towards energy sector professionals, with a clear business focus. Technically, the website uses standard web technologies and some modern fonts and libraries, but lacks advanced SEO, accessibility, and security features. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy and trustworthiness. Security posture is basic, with no evident security headers or privacy policies, which could expose the organization to compliance risks. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain transparency to enhance trust and regulatory adherence.

J

Journées du Logiciel Libre

jdll.org

55

Journées du Logiciel Libre (JdLL) is a well-established non-profit event focused on free software and open source culture, primarily serving the French-speaking community in Lyon, France. The website provides information about the event, its history, and ways to participate or support the initiative. The organization has a mature online presence with a domain registered since 2005 and a consistent branding approach. Technically, the site is built on GravCMS, a modern flat-file CMS, hosted on Infomaniak servers, and is mobile-optimized with good SEO practices. However, it lacks advanced security headers and DNSSEC, which could enhance its security posture. The site does not currently provide privacy or cookie policies, which is a compliance gap, especially under GDPR regulations. No direct contact emails or phone numbers are provided, but social media presence on Mastodon and Peertube supports community engagement. Overall, the site is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

M

MARK of the BRAND

themolitor.com

45

MARK of the BRAND is a small, Seattle-based independent design studio specializing in brand identity services including monograms, brand marks, and logos primarily serving the Pacific Northwest region. The website presents a professional portfolio showcasing various brand mark designs and related services, targeting businesses and professionals seeking distinctive visual identity solutions. The business appears newly founded in 2024, consistent with the domain registration date. Technically, the website is built on WordPress with modern web technologies including optimized CSS and JavaScript, Google Fonts integration, and caching mechanisms. The site is mobile-optimized and SEO-friendly with appropriate meta tags and structured data. Hosting appears to be through NameCheap, the domain registrar, with HTTPS enabled ensuring secure communications. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. The site uses minimal tracking scripts and has no visible forms collecting sensitive data, reducing attack surface. No incident response or vulnerability disclosure information is provided. Overall, the website is professionally designed and trustworthy with a good security baseline but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

ClubDomCash.com is a niche adult entertainment website specializing in FemDom video content, operated by a female lifestyle Dominatrix. The business model centers around producing exclusive adult videos and affiliate marketing programs targeting a mature adult audience interested in FemDom themes. The website has been operational since 2006, indicating a stable market presence within its niche. Technically, the site uses legacy JavaScript libraries and basic web technologies with moderate mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks modern security headers and DNSSEC, and uses outdated libraries that could pose risks. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

H

Haploïde

haploide.com

51

Haploïde is a French technology company specializing in the design and optimization of eco-friendly, accessible, and performant websites. Founded in 2018, the company positions itself as a niche player focused on sustainable digital solutions, leveraging scientific rigor and partnerships such as with DK and adherence to ADEME and GHG Protocol standards. Their key services include optimization of existing sites, eco-designed redesigns, and new site conception with a strong emphasis on reducing carbon emissions and improving digital performance. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, integrates Matomo analytics configured for privacy, and is hosted by OVH sas. The site is fast, mobile-optimized, and accessible, following RGAA v4 guidelines. Security posture is good with HTTPS enforced and domain registration protections in place, though some security headers and explicit policies could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is currently present. Overall, Haploïde demonstrates a mature digital presence with a strong focus on sustainability and compliance. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. No critical security issues or content safety concerns were identified, making the site reliable and professional. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, enabling DNSSEC, and implementing cookie consent mechanisms if cookies are used in the future.

A

Altermedia, s.r.o.

altermedia.cz

59

Altermedia, s.r.o. is a small digital agency based in Prague, Czech Republic, with over 20 years of experience. The company specializes in web design, custom software development, social media management, SEO, PPC, and multimedia content production. Their client base includes individuals and small to medium-sized businesses, positioning them as a trusted service provider in the local digital marketing and web development sector. The website reflects a professional and consistent brand image with clear service offerings and partner references. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Typed.js and Glide.js, and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. HTTPS is enforced, ensuring secure communication, but the absence of security headers and privacy/cookie policies indicates room for improvement in security and compliance. From a security perspective, the site shows a solid baseline with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data and missing privacy and cookie policies reduce trust and compliance scores. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture and user trust. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance, security headers, and domain registration transparency would elevate the site's security and credibility further.

France 24 is a prominent international news broadcaster providing breaking news, top stories, and video news coverage across multiple global regions including the US, Europe, Asia Pacific, Africa, and the Middle East. The website serves a general audience interested in global current events, business, sports, and culture. It maintains a strong market position as a reputable media outlet with consistent branding and official social media presence. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with a consent management platform integrated for privacy compliance. The site is well-optimized for mobile devices, offers excellent SEO, and provides a professional user experience with clear navigation and rich content. From a security perspective, the site enforces HTTPS and uses a consent SDK for cookie management, indicating good privacy practices. However, there is room for improvement by adding security headers and publishing a security.txt file to enhance vulnerability disclosure transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, France 24's website demonstrates a high level of professionalism, security, and compliance suitable for a major international news organization. The absence of WHOIS data is likely due to privacy protection or registry limitations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, improving incident response visibility, and maintaining strong privacy compliance.

ARTE is a well-established European cultural television channel and online media platform, providing high-quality cultural, educational, and documentary content to a broad European audience. The website reflects a mature digital presence with a modern tech stack including React and Next.js, optimized for performance and mobile devices. Security posture is strong with HTTPS enforcement, modern security headers, and no detected vulnerabilities. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, ARTE demonstrates a high level of professionalism and trustworthiness, consistent with its public broadcaster status.

S

Spiel und Objekt – MA in Experimental Play

spielundobjekt.de

45

Spiel und Objekt is a specialized Master’s program in Experimental Play affiliated with the Hochschule für Schauspielkunst Ernst Busch in Berlin. The program focuses on developing artistic, technological, social, and material skills for new playful formats, primarily in theater and related fields. The website serves as an academic and informational platform targeting prospective students, artists, and researchers interested in experimental play and theater arts. Technically, the site is built on modern frameworks such as SvelteKit and uses Sanity.io as a CMS, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are lacking. The WHOIS data is minimal but does not raise concerns, and the domain appears consistent with the academic nature of the site. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy compliance and security headers are recommended.

N

Nakladatelství Akademie múzických umění v Praze

namu.cz

46

Nakladatelství Akademie múzických umění v Praze (NAMU) is a specialized publishing house affiliated with the Academy of Performing Arts in Prague, focusing on academic and artistic publications in film, music, theatre, dance, and related disciplines. The website serves as an online catalog and sales platform, targeting academics, students, and professionals in the performing arts sector. The business operates with a clear niche focus and maintains a consistent brand presence with professional content and social media engagement. Technically, the website uses standard web technologies (HTML5, CSS, JavaScript) with a moderate performance profile and good mobile optimization. However, it lacks advanced frameworks or CMS indications and does not show evidence of modern security headers or advanced analytics/tracking tools. The cookie consent mechanism is implemented, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and provides basic privacy compliance but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected, but improvements in security headers and formal policies are recommended to enhance trust and compliance. Overall, NAMU presents a trustworthy, professional online presence with room for technical and security enhancements to better align with best practices and regulatory requirements.

D

Divadlo DISK

divadlodisk.cz

63

Divadlo DISK is a well-established theatre institution based in Prague, Czech Republic, with a history dating back to 1945. It offers theatrical performances, cultural events, and collaborates with academic and research institutions. The website reflects a professional cultural organization with clear contact information, active social media presence, and a focus on audience engagement through newsletters and event promotions. Technically, the site uses modern web technologies including JavaScript libraries like jQuery and Fancybox, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a cookie consent mechanism in place, though it lacks a published privacy policy and terms of service, which are important for compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and formal security policies. Overall, the website is trustworthy and serves its audience effectively, but should address compliance gaps to enhance privacy and security transparency.

RFI (Radio France Internationale) is an established international news broadcaster providing comprehensive news coverage from France, Europe, Africa, and worldwide. The website offers political, cultural, sporting news, and live streaming services targeting a general audience. The brand is well recognized with consistent branding and multiple official social media presences. Technically, the website employs modern web standards, including responsive design, consent management via Didomi, and robust SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, though WHOIS data is privacy protected, which is typical for media entities. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection roles.

F

Ferrero Hazelnut Company

ferrerohazelnutcompany.com

69

Ferrero Hazelnut Company is a division of the Ferrero Group focused on the entire hazelnut value chain, from cultivation to processing, emphasizing sustainability and quality. The company operates globally with agribusiness development programs and a commitment to responsible sourcing. The website reflects a professional corporate presence with detailed information about their mission, programs, and sustainability efforts. Technically, the site is built on Drupal CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and privacy compliance could be improved. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the apparent legitimacy given the strong brand association. Overall, the site is trustworthy, professional, and well-maintained, serving as an effective corporate communication platform.

S

Stereotaxis

stereotaxis.com

65

Stereotaxis is a medical technology company specializing in pioneering endovascular robotics to advance interventional medicine and improve patient care. The company targets healthcare professionals, patients, caregivers, and investors, positioning itself as an innovator in robotic systems for vascular procedures. The website reflects a professional and consistent brand presence with multimedia content and active social media engagement. Technically, the site uses modern web technologies including Bootstrap 4, jQuery, and Google Analytics, delivering a moderate performance and good mobile optimization. However, the absence of visible security headers and privacy policies indicates gaps in security and compliance maturity. The WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer privacy disclosures.

S

Stanford Health Care

stanfordhealthcare.org

63

Stanford Health Care is a leading academic medical center and healthcare provider based in the United States, delivering comprehensive medical services including cancer treatment, heart disease care, brain disorder treatment, primary and specialty care, and clinical trials. The website reflects a mature digital presence with a focus on patient engagement through services like the MyHealth portal and video visits. The organization maintains a strong market position in the Bay Area healthcare sector with consistent branding and professional content. Technically, the website is built on Adobe Experience Manager and hosted on Amazon AWS infrastructure, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, Adobe Launch, and Qualtrics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. From a security perspective, the site enforces HTTPS and employs domain registration protections. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no visible vulnerability disclosure or security policy page, which could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security hardening and transparency. The risk profile is low, and the site effectively supports the business objectives of Stanford Health Care.

H

Hochschule für Technik und Wirtschaft Berlin

htw-berlin.de

63

HTW Berlin is a prominent University of Applied Sciences located in Germany, offering a wide range of Bachelor, Master, and MBA programs across multiple disciplines including engineering, business, design, and health. The institution is well-ranked nationally and provides extensive research and continuing education services. The website reflects a mature digital presence with clear navigation, multilingual support, and active engagement with its target audiences such as prospective students, current students, alumni, and industry partners. Technically, the site uses modern web standards, integrates Matomo analytics with user consent, and maintains good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

Evangelische Hochschule Berlin

eh-berlin.de

67

The Evangelische Hochschule Berlin (EHB) is a specialized higher education institution based in Germany, focusing on practical degree programs in social work, health, nursing, and education. The website serves as an information portal for prospective and current students, offering detailed navigation through academic programs, research, international opportunities, and continuing education. The institution positions itself as a medium-sized university of applied sciences with a clear focus on social and health sectors. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web standards such as HTML5, CSS, and JavaScript. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of advanced analytics or tracking scripts suggests a privacy-conscious approach or limited digital marketing. From a security perspective, the site lacks visible security headers and explicit security or privacy policies, which lowers its security posture. No blocking mechanisms or WAF challenges were detected, indicating open accessibility. The WHOIS data is minimal, with generic DNS servers and no detailed registrant information, which slightly impacts trust but is not uncommon for educational institutions. Overall, the website is professional and functional but would benefit from enhanced transparency in privacy and security policies, improved security headers, and clearer contact information to strengthen trust and compliance.

D

DK

d-k.io

62

DK is a French company specializing in carbon measurement and management solutions tailored for the communication, media, and advertising sectors. Their platform offers harmonized and standardized carbon footprint measurement tools, including an API for automated calculations, targeting advertisers, agencies, publishers, and media companies. The company positions itself as a market reference in France with notable media clients and a strong emphasis on sustainability and environmental impact reduction. Technically, the website is well-built with modern technologies such as Matomo analytics and Google Tag Manager, hosted by OVH SAS. It demonstrates excellent mobile optimization, accessibility, and SEO practices. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, reflecting a credible business with a clear mission. The domain registration data aligns well with the business claims, enhancing legitimacy. Privacy compliance and security transparency could be strengthened to improve user trust and regulatory adherence.

I

Instagram

tictac.com

80

Instagram is a globally recognized social media platform owned by Meta Platforms, Inc., providing photo and video sharing services to a broad audience. The website analyzed is the official login page, designed with modern web technologies and optimized for performance and mobile use. The platform maintains a strong security posture with HTTPS enforcement and comprehensive security headers, ensuring user data protection during login. While privacy and cookie policies are not directly visible on the login page, the overall compliance posture is good given Instagram's global presence and regulatory adherence. The domain's WHOIS data is privacy protected, which is typical for large enterprises, and does not detract from the site's legitimacy. Overall, Instagram's website demonstrates high professionalism, security, and trustworthiness.

B

Boursorama

boursorama.com

69

Boursorama is a prominent French online bank and financial information provider, offering a wide range of services including online banking, stock market data, and financial news. The website presents a professional and well-structured interface targeting investors and banking customers primarily in France. Technically, the site uses modern web standards with good mobile optimization and SEO practices, although explicit CMS or hosting details are not evident. Security posture is moderate due to lack of visible security headers and missing WHOIS data, which raises some concerns about domain registration transparency. Privacy compliance appears weak as no privacy or cookie policies were detected in the provided content. Overall, the site is functional and trustworthy from a business perspective but would benefit from enhanced transparency and security measures.

S

STORMWARE s.r.o.

fakturace-zdarma.cz

55

STORMWARE s.r.o. operates the website fakturace-zdarma.cz, offering free invoicing solutions through their POHODA Start accounting software and mPOHODA mobile invoicing app. The company targets small businesses and freelancers primarily in the Czech Republic, providing both offline and online invoicing capabilities with integration between desktop and mobile platforms. The website is professionally designed, with clear navigation and relevant content focused on their software offerings. Technically, the site uses standard web technologies including JavaScript, jQuery, and Google Tag Manager, with a cookie consent mechanism that supports GDPR compliance. Security posture is moderate, with no explicit security headers detected and use of an outdated jQuery version, but no critical vulnerabilities are evident from the content. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective but the website content and company information suggest a legitimate business presence.

M

MPOHODA

mpohoda.sk

63

mPohoda is a well-established Slovak company providing comprehensive accounting and economic software solutions tailored for small and medium-sized enterprises. The website reflects a professional and consistent brand image, targeting SMEs primarily in Slovakia. Their key services include accounting, payroll, invoicing, and business analytics, positioning them as a leading software provider in their regional market. The technical infrastructure is modern, leveraging Tailwind CSS and JavaScript, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contact could enhance trust further. Overall, the website is compliant with GDPR and cookie regulations, providing clear privacy and cookie policies. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Státní fond audiovize is the official Czech government fund dedicated to supporting audiovisual projects including film, television, animation, and video games. The website serves as a portal for funding calls, official meeting minutes, and important documents related to the audiovisual sector in the Czech Republic. It targets audiovisual professionals and stakeholders seeking government support and information. The domain is well-established since 2012 and hosted on Czech servers, reinforcing its legitimacy. Technically, the website uses standard HTML5, CSS3, and JavaScript with a clean and professional design. It is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking technologies, reflecting a minimalistic and privacy-conscious approach. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms collecting personal information. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, the website is trustworthy and professional but could benefit from enhanced privacy compliance and security best practices. There are no signs of malicious content or adult material, making it safe for general audiences.

SubmissiveCuckolds.com is an adult entertainment website specializing in cuckolding fetish videos with a femdom touch. The site operates on a subscription-based model offering exclusive adult video content targeted at mature audiences interested in niche fetish genres. The website has been active since 2009, indicating a stable presence in its niche market. The content is explicit and designed for adults only, with no visible age verification mechanisms on the main page. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and video.js for media playback. Google Analytics and Google Tag Manager are employed for user tracking, but there is no visible cookie consent mechanism, which may raise privacy compliance concerns. Security posture is basic with no advanced security headers detected and DNSSEC not enabled on the domain. The WHOIS data shows consistent domain registration with a long history and no privacy protection, supporting legitimacy. However, the absence of contact information and security policies reduces business credibility. Overall, the site functions adequately for its purpose but lacks several modern security and privacy best practices.

Orgasmabuse.com is an adult entertainment website specializing in forced orgasm content, offering exclusive videos and daily free content to adult enthusiasts. The site targets a niche adult audience and operates on a subscription or content access business model. The domain is mature, registered since 2013, and hosted by Hosting Concepts B.V., indicating a stable operational history. Technically, the site uses standard web technologies such as JavaScript, CSS, and HTML5, with cookie consent managed by Cookiebot and analytics via Google Tag Manager. However, the site lacks advanced SEO optimization and accessibility features, and the design quality is basic. From a security perspective, the website uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy policy, terms of service, or contact information are published, limiting transparency and compliance with privacy regulations such as GDPR. The site employs external ad networks and tracking services, which may impact user privacy. Overall, the security score is moderate but could be improved significantly by implementing standard security headers and publishing comprehensive policies. The content is explicitly adult and NSFW, with clear age verification and warnings, making it suitable only for adults. There is no evidence of WAF or blocking mechanisms, allowing full content access for analysis. The domain registration data is consistent with the business type, though registrant details are minimal. Strategic recommendations include enhancing security headers, publishing privacy and security policies, improving SEO and accessibility, and adding clear contact and incident response information to build trust and compliance.

T

The English Mansion

theenglishmansion.com

7

The English Mansion operates as a niche adult content membership website specializing in femdom BDSM videos and related fetish content. It targets an adults-only audience with explicit content and enforces age verification for UK subscribers. The site claims over 20 years of operation and positions itself as a leader in its niche, offering daily updated HD videos and VR content. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, there is no evidence of a modern CMS or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie policies are present. The absence of WHOIS registration data and contact information reduces business credibility and trust. Overall, the site is functional but requires significant improvements in security, privacy compliance, and transparency to enhance trust and user safety.

F

Femdom Empire

femdomempire.com

9

Femdom Empire is a niche adult entertainment website specializing in femdom fetish videos. Established in 2011, it operates a subscription-based business model offering weekly updates and access to exclusive video content. The site targets an adult audience interested in hardcore dominatrix and fetish video content. Technically, the website uses a custom CMS with a variety of JavaScript libraries including jQuery, Fancybox, and Flexslider to provide a multimedia-rich user experience. Hosting is provided by MojoHost, and the domain is registered with GoDaddy, reflecting a stable and consistent digital infrastructure. Security posture is moderate with HTTPS usage and age verification mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no explicit cookie policy. Overall, the site is professionally designed with good navigation and content relevance but could improve in security and privacy transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and improving privacy and cookie consent mechanisms.

G

GE-Data

ge-data.com

55

GE-Data is a specialized consulting firm focusing on geospatial technologies applied to agriculture, forestry, and water management. With offices in the United States and France, the company leverages over 30 years of expertise in remote sensing, GIS, and data science to deliver tailored, cost-effective solutions. Their services include land-use mapping, crop monitoring, production estimation, and disease detection, targeting both public and private sector clients. The website reflects a professional and consistent brand image with clear business messaging and client engagement features. Technically, the website is built using One.com Web Editor, incorporating modern JavaScript libraries such as Swiper.js for image sliders and Termly for cookie consent management. The site is hosted by One.com A/S and uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and mobile optimization. Analytics are implemented via SiteWit, with moderate user tracking and basic privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies, incident response information, and vulnerability disclosure details. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, GE-Data presents a trustworthy and professional online presence with a solid foundation in technical and business aspects. Strategic enhancements in security policies, contact transparency, and mobile accessibility would further strengthen their digital maturity and compliance posture.

O

Oasis21

oasis21.org

48

Oasis21 is a small community-oriented social economy shared space located in Paris, France, founded around 2018. The website serves primarily as an informational and reservation portal for the space, targeting local community members and organizations interested in social and solidarity economy initiatives. The business model revolves around providing a physical venue for events and activities aligned with social economy values. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH sas, and includes minimal external dependencies. There is no evidence of advanced CMS or frameworks, and performance and mobile optimization are basic. Security posture is limited, with no visible security headers or privacy policies, and DNSSEC is not enabled. The domain registration is consistent with the business timeline and shows standard protections against unauthorized transfers or deletions. Overall, the site is functional but lacks advanced security and privacy features, which could be improved to enhance trust and compliance.