Security Directory

R

RI OKNA

ri-okna.cz

56

RI OKNA is a well-established Czech manufacturer specializing in windows and doors, with nearly 30 years of experience and a strong market presence in the Czech Republic and EU. The company offers a wide range of products made from various materials including plastic, wood, aluminum, and composite materials, supported by customer service and installation offerings. The website reflects a mature digital presence with multilingual support and a professional design. Technically, the site is built on WordPress with modern frameworks and includes multiple marketing and analytics tools. Security posture is adequate with HTTPS and secure forms, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness. Overall, the site is professional and trustworthy, serving a broad general audience in the manufacturing sector.

A

Výrobní systém Alokace

alokace.cz

41

The website www.alokace.cz presents a manufacturing and production management software system targeted primarily at Czech manufacturing companies. It offers comprehensive features including order management, production tracking, cooperation handling, returns, employee and warehouse management, and integrated accounting with EET support. The business model appears to be SaaS or online system access, catering to small manufacturing businesses. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information suggest a legitimate business. Security posture is moderate with recommendations to improve SSL configuration, security headers, and privacy compliance. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

P

ppwork | employee management system

ppwork.cz

42

The website ppwork.cz presents a specialized employee management system tailored for personnel agencies, primarily targeting the Czech Republic market. The platform offers comprehensive workforce management features including attendance tracking, payroll calculation, and administrative support. The business model is SaaS-based, focusing on small to medium-sized personnel agencies, with customization options for client-specific needs. The website content is professional and well-structured, providing clear information about the system's capabilities and benefits. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various JavaScript libraries for animations and UI enhancements. The site is mobile-optimized and demonstrates good design quality and user experience. However, there is no evidence of advanced SEO or accessibility features, and no CMS or hosting provider information is discernible. Performance is moderate, with no major issues detected. From a security perspective, the site lacks visible security headers and published security policies. The absence of HTTPS verification data and WHOIS information raises concerns about domain legitimacy and security posture. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR or other data protection regulations. Contact information is minimal, limited to a single email address, with no phone or physical address provided. Overall, the website is functional and business-focused but would benefit from enhanced security measures, transparency in domain registration, and improved privacy compliance. Strategic recommendations include implementing HTTPS with strong SSL, publishing privacy and cookie policies, adding security headers, and providing clearer contact and incident response information to build trust and compliance.

F

Ferrino

ferrino.cz

50

Ferrino.cz is a professional e-commerce website specializing in the retail of outdoor equipment such as tents, sleeping bags, backpacks, and apparel, primarily targeting customers in the Czech Republic and Slovakia. The site serves as the exclusive importer and retailer of Ferrino brand products in these markets, offering a comprehensive product catalog, rental services, and customer support. The website demonstrates a solid market position with a focus on outdoor enthusiasts and professionals. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools, with good mobile optimization and user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS data is a notable gap, reducing domain trustworthiness, but the website content and branding appear legitimate and professional. Overall, the site is well-structured, privacy compliant, and trustworthy for its business domain.

B

Bella Rose

bellarose.cz

51

Bella Rose is a Czech Republic-based e-commerce retailer specializing in Scandinavian home decorations and lifestyle accessories. The website offers a wide range of products including seasonal collections, gifts, and home textiles, targeting consumers interested in stylish and cozy home atmospheres. The company positions itself as an expert in creating home ambiance with a focus on quality and design. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. It implements cookie consent mechanisms and HTTPS for secure browsing. However, the absence of WHOIS registration data and lack of explicit privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance documentation and security best practices.

M

Manni Group

mannigroup.com

70

Manni Group is a well-established Italian industrial company specializing in steel processing, sandwich panels, energy efficiency, and off-site construction technologies. The company has a strong market position in Europe with multiple subsidiaries and a focus on innovation and sustainability. The website is professionally designed, multilingual, and optimized for user experience and SEO. Technically, it uses WordPress with modern integrations such as HubSpot and Google Analytics, and implements good security practices including HTTPS and cookie consent mechanisms. However, there is room for improvement in DNS security and publishing explicit security policies. Overall, the security posture is strong with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, enhancing trustworthiness.

A

AiVision, s.r.o.

aivision.cz

53

AiVision, s.r.o. is a Czech Republic based technology company specializing in web development, e-commerce solutions, and IT services with over 21 years of market presence. The company offers a comprehensive portfolio including website creation, web design, database applications, SEO, hosting, and WordPress security services. Their market position is that of an established local provider focused primarily on Prague and surrounding regions. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Facebook SDK for marketing and tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which slightly impacts domain trustworthiness, though business legitimacy is supported by consistent contact information and client references. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in security transparency and WHOIS data availability.

S

SOMFY Group

somfy-group.com

68

SOMFY Group is a global leader in home and building automation, specializing in motorization and control solutions for openings and closures. The company operates in over 59 countries and emphasizes sustainability and digital innovation. Their website reflects a mature digital presence with comprehensive corporate content, including annual reports and sustainability initiatives. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and tracking tools, hosted likely via Akamai CDN. Security posture is good with HTTPS enforced and a dedicated cybersecurity reporting channel, though explicit security headers are not detected. Privacy compliance is strong with clear cookie consent and privacy policies in French, aligned with GDPR. The domain WHOIS data is unavailable, which slightly reduces trust but the overall site professionalism and content quality support legitimacy.

S

SOMFY

somfy-connect.com

61

SOMFY Connect is a digital platform focused on enabling users to activate and manage connected smart home products, primarily through the TaHoma app ecosystem. The website serves as a portal for downloading apps and accessing smart home systems, targeting end consumers interested in home automation. The brand is established and professional, with a clear focus on IoT and smart home technology. Technically, the site uses a mix of JavaScript libraries including jQuery and TagCommander for tracking and performance monitoring, hosted on a secure HTTPS platform. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and updated libraries. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional site presence. Overall, the site is functional and moderately mature but requires improvements in privacy compliance and domain legitimacy verification.

S

SOMFY, SPOL. S R.O.

somfypro.cz

66

Somfy PRO CZ&SK is a professional B2B web portal serving Somfy brand resellers, manufacturers, and distributors in the Czech and Slovak markets. The portal provides comprehensive product catalogs, technical specifications, pricing, manuals, and training information, positioning itself as a key resource for Somfy's professional partners. The website reflects a medium-sized manufacturing business with a consistent brand presence and a focus on B2B engagement. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and YUI, and implements responsive design for mobile users. The infrastructure supports good performance and SEO practices, although some accessibility features could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract significantly from the overall legitimacy of the business. Overall, Somfy PRO CZ&SK presents a trustworthy, professional, and well-maintained digital presence suitable for its B2B audience. Strategic improvements in security headers, incident response transparency, and direct contact information visibility would further enhance its security posture and business credibility.

D

Del Monte Foods Corporation II Inc.

delmontefoodservice.com

65

Del Monte Foodservice is a well-established B2B foodservice supplier offering a wide range of produce, broths, and snacks to professional foodservice customers. The company leverages its long history and brand recognition to maintain a strong market position. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to its target audience. Technically, the site is built on Drupal 9 with integrations of HubSpot forms and Google Analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence, though WHOIS data absence warrants further verification.

D

Del Monte Foods

delmontefoods.com

68

Del Monte Foods is a well-established food manufacturing and retail company with a rich history spanning over 135 years. The company offers a portfolio of well-known brands focused on wholesome and quality food products, targeting general consumers and grocery buyers primarily in the United States. Their business model centers on manufacturing and brand management with a strong emphasis on sustainability and corporate responsibility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile optimized and includes accessibility features such as the UserWay widget. Performance is moderate, with good SEO and meta tag implementation. However, some security headers are not explicitly present, and there is no visible cookie consent mechanism, which could be improved for compliance. From a security perspective, the site enforces HTTPS and uses secure analytics scripts, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and branding strongly indicate legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and privacy compliance features. The overall risk assessment is low, with recommendations to improve privacy compliance by adding cookie consent, publish security policies, and enhance security headers. These steps will strengthen trust and regulatory adherence while maintaining a professional and secure online presence.

A

American Heart Association

goredforwomen.org

71

Go Red for Women is a prominent initiative by the American Heart Association focused on ending heart disease and stroke in women through education, advocacy, and community engagement. The website serves as a comprehensive resource for awareness, volunteer opportunities, and fundraising efforts. It targets women, healthcare advocates, and donors, positioning itself as a leading national movement in women's cardiovascular health. Technically, the site is built on the Sitecore CMS platform, leveraging modern technologies such as Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user engagement. The site is mobile optimized, accessible, and SEO friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with cookie consent mechanisms and GDPR considerations. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, though WHOIS data is privacy protected, which is justified for this non-profit entity.

P

Political Watch

parlamento2030.es

55

Parlamento2030 is a specialized platform developed and supported by Political Watch and the Spanish Ministry of Foreign Affairs to provide transparent, accessible information on parliamentary activities related to the Sustainable Development Goals (SDGs) in Spain. The platform leverages advanced automatic tagging technology to classify and present parliamentary data, enabling researchers, policymakers, journalists, and the public to monitor progress on the Agenda 2030. The website is well-structured, professionally designed, and offers multilingual support, enhancing accessibility and user engagement. Technically, the site is built using modern frontend technologies such as Vue.js and Vite, ensuring a responsive and performant user experience. While no explicit CMS or hosting provider information is available, the site demonstrates good SEO practices and mobile optimization. Security-wise, HTTPS is enforced, but the absence of visible security headers and vulnerability disclosure mechanisms suggests room for improvement in hardening the platform against potential threats. The security posture is moderate with no evident vulnerabilities or exposed sensitive data, but the lack of detailed WHOIS information due to registrar restrictions limits full trust verification. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Business credibility is supported by government affiliation, open source transparency, and clear contact information. Overall, Parlamento2030 presents a trustworthy, well-maintained platform with a clear mission and target audience. Strategic recommendations include enhancing security headers, adding a security.txt file, improving accessibility features, and maintaining regular audits of third-party components to sustain and improve the security and compliance posture.

Y

YEET.com

yeet.com

61

YEET.com operates as an online crypto casino platform offering a variety of gambling games including classic slots, live casino, blackjack, roulette, baccarat, and original game shows. The platform targets adult users interested in crypto-based gambling, providing instant deposits and a smooth gaming experience. The business appears to be established with a domain age dating back to 2003, indicating maturity in the online gambling market. YEET.com positions itself as a niche crypto casino operator with a focus on provably fair gaming and regulatory compliance as evidenced by the ANJ Seal displayed on the site. Technically, the website leverages modern web technologies including React and Material UI for frontend development, with integrations for customer support (Intercom), payment facilitation (Moonpay), and marketing/analytics (Twitter tracking). The site is hosted with infrastructure linked to Amazon Registrar and AWS DNS services, ensuring reliable availability. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, which could be improved. The presence of a provably fair gaming page and regulatory seal indicates some level of compliance and trustworthiness. No direct contact information or security policies were found, suggesting room for improvement in transparency and incident response readiness. Overall, YEET.com presents a professional and functional crypto casino platform with moderate security posture and good business credibility. The site is suitable for adult users interested in crypto gambling but should enhance security headers and publish clearer security and incident response policies to strengthen trust and compliance.

R

Risewell

mojetehotenstvi.cz

46

MojeTehotenstvi.cz is a Czech-language community website focused on pregnancy, childbirth, parenting, and related health topics. It offers forums, pregnancy diaries, articles, multimedia content, and clubs for mothers and parents. The site is built on Drupal 8 and integrates Google Analytics and Adsense for tracking and monetization. However, the site suffers from spammy user-generated posts promoting online pharmacies, which undermines content quality and trust. No privacy or cookie policies are clearly presented, and WHOIS data is unavailable, indicating privacy protection or registration issues. The technical infrastructure is moderate with responsive design but lacks visible security headers and comprehensive privacy compliance. Overall, the site serves a niche audience but requires improvements in security, content moderation, and compliance to enhance trust and user safety.

N

National eTwinning Support Service Spain

etwinning.es

63

The website represents the National eTwinning Support Service Spain, an official educational platform under the Erasmus+ program of the European Union. It facilitates collaboration among teachers and students across Europe through project-based learning and resource sharing. The platform is positioned as a trusted national service with a clear educational mission and a medium-sized operational scale. Technically, the site is built on WordPress with Elementor and JetEngine plugins, employing modern web technologies and privacy-conscious analytics via Matomo. The site enforces HTTPS and includes accessibility features, contributing to a good user experience. However, explicit privacy and cookie policies are not found, and contact information is not prominently displayed, which slightly impacts privacy compliance and user trust. Security posture is good but could be improved by adding security headers and formal incident response documentation. Overall, the domain registration and WHOIS data align well with the business purpose, indicating legitimacy and trustworthiness.

E

Euroregion Těšínské Slezsko – Śląsk Cieszyński

euregio-teschinensis.eu

36

The Euregio-Teschinensis website serves as an informational platform for the Euroregion Těšínské Slezsko – Śląsk Cieszyński, a cross-border cooperation initiative between Poland and the Czech Republic. It focuses on regional development, cultural events, and cooperation projects, targeting local governments, residents, and tourists. The site is multilingual and provides links to partner organizations and social media channels to enhance regional engagement. Technically, the website is built on WordPress using the Twenty Seventeen theme and includes plugins for video galleries and cookie consent management. The site employs HTTPS and a cookie consent mechanism that restricts ad and analytics storage by default, reflecting a good privacy posture. However, it lacks explicit privacy policy and terms of service pages, and no contact emails or phone numbers are directly provided on the main page. From a security perspective, the site benefits from HTTPS and cookie consent but lacks advanced security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration without privacy protection, appropriate for a regional governmental/non-profit entity. Overall, the website is professional and trustworthy for its niche audience but could improve by adding comprehensive privacy and security policies, explicit contact information, and enhanced security headers to strengthen compliance and user trust.

I

ij-t.cz

zabavne.online

46

Zábavně.online is a Czech Republic-based web application platform specializing in creating interactive educational games using QR codes and GPS navigation. The platform targets schools, families, and corporate teams, offering tools to build custom routes, questions, and competitions to engage users in a fun and informative manner. The business operates as a small entity with a clear focus on educational technology and marketing engagement. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and popular libraries like Modernizr and Owl Carousel, delivering a moderately performant and mobile-optimized experience. Security posture is moderate with HTTPS assumed but lacking explicit security headers and published privacy or cookie policies, which are critical for compliance and trust. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website ij-t.cz is currently inaccessible, returning a 403 Forbidden error which blocks access to any meaningful content. The domain is registered since 2011 with a Czech hosting provider Active24, indicating a potentially established business presence. However, due to the lack of accessible content, no business description, contact information, or policies can be extracted or analyzed. The technical infrastructure details are minimal, with no detected technologies, scripts, or metadata. Security posture cannot be fully assessed but is likely poor given the absence of visible security headers or SSL information. Overall, the site presents a high risk due to inaccessibility and lack of transparency, limiting trust and usability.

R

Realitní a hypoteční centrum s.r.o.

rh-centrum.cz

43

Realitní a hypoteční centrum s.r.o. is a Czech-based company specializing in mortgage and real estate financing services. The company offers tailored mortgage solutions, free property valuation, and no fees for loan processing, targeting individuals seeking financing for apartments, family houses, or land. The website reflects a professional and consistent brand image with a focus on client trust and service quality. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Slider Revolution, and it uses Google Analytics for visitor tracking. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data reduces domain trustworthiness, but the business content and certifications support legitimacy. Overall, the site is professional and trustworthy with room for technical and security enhancements.

The website razed.com is currently inaccessible due to a Cloudflare security challenge page that blocks access to any actual content. The domain is long-registered since 2004 with a stable registration status, indicating legitimacy. However, no business information, contact details, or policies are visible on the page. The technical infrastructure includes Cloudflare's Turnstile captcha for bot mitigation, but no further technologies or CMS are detectable. The security posture cannot be fully assessed due to the lack of accessible content, but the use of Cloudflare suggests a baseline security layer. Overall, the site cannot be properly evaluated for content quality, privacy compliance, or business credibility due to the blocking mechanism.

J

JUDr. Tomáš Philippi

t-p.cz

57

JUDr. Tomáš Philippi operates a specialized legal practice in the Czech Republic focusing on real estate, civil, commercial, family, and copyright law. The firm is well-established since 2006 and holds a reputable position in the market, notably through contributions to real estate legislation and education. The website serves as a professional portal presenting the firm's services, contact information, and related real estate educational resources. Technically, the website is basic but functional, with minimal modern enhancements and limited mobile optimization. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and there are no published privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy but would benefit from improved security and privacy practices.

E

Votre annuaire ETP Maladies Rares – L'Éducation Thérapeutique du Patient pour tous

etpmaladiesrares.com

56

The website 'Votre annuaire ETP Maladies Rares' serves as an educational and directory platform focused on Therapeutic Patient Education (ETP) for rare diseases. It provides patients, families, and healthcare professionals with resources, videos, and guides to better manage chronic illnesses. The site is positioned as a niche healthcare education resource in France, founded in 2017 and hosted on WordPress.com. The content is well-structured, relevant, and consistent with healthcare education standards, referencing authoritative organizations such as the WHO and French health authorities. Technically, the site leverages WordPress CMS with standard plugins and Google Fonts, hosted by Automattic Inc. Performance and mobile optimization are moderate to good, though accessibility and SEO are basic. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with a legal mentions page but no explicit cookie consent mechanism or detailed privacy policy. Security evaluation shows no critical vulnerabilities or malicious indicators, but improvements are recommended in security headers and privacy transparency. The absence of direct contact emails or phone numbers limits business credibility slightly, though the site maintains moderate trustworthiness through authoritative content and consistent branding. Overall, the website is a functional, safe, and informative resource for its target audience but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and compliance posture.

T

Transition Maladies Rares

transitionmaladiesrares.com

56

Transition Maladies Rares is a specialized healthcare resource website dedicated to supporting the transition of patients with rare and chronic diseases from pediatric to adult care. The site offers a comprehensive collection of information, tools, projects, and professional resources to facilitate this critical healthcare transition. It is supported by the NeuroSphinx initiative and associated with recognized healthcare institutions in France. The website targets patients, families, and healthcare professionals involved in rare disease management. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and FontAwesome, and integrates Google reCAPTCHA for form security. The site is well-structured, mobile-optimized, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and spam protection, though some security headers are missing and privacy compliance could be enhanced with explicit consent mechanisms. Overall, the domain registration and WHOIS data align well with the website's content and business history, indicating legitimacy and trustworthiness.

F

Filières de Santé Maladies Rares

filieresmaladiesrares.fr

47

Filières de Santé Maladies Rares is a French healthcare informational platform dedicated to rare diseases, providing resources, directories, research bulletins, and training for patients, caregivers, and healthcare professionals. The website positions itself as a national coordination point for rare disease filières in France, offering comprehensive content relevant to its audience. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and moderate performance. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved and explicit privacy policies are missing. The absence of WHOIS data limits domain trust verification, but the site content and infrastructure indicate legitimate operation. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Maladies Rares Infos Services

maladiesraresinfo.org

51

Maladies Rares Infos Services is a French national non-profit organization providing information, orientation, and support services related to rare diseases. The website serves patients, caregivers, and healthcare professionals with comprehensive resources, including general information, treatment options, expert networks, and a community forum. Supported by the French Ministry of Health and notable non-profit partners such as AFM Téléthon and Fondation Groupama, the organization holds a reputable position in the healthcare sector in France. Technically, the website employs modern web technologies including Bootstrap 5, Masonry layout, Google Tag Manager for analytics, and Calendly for appointment scheduling. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trust slightly, but the strong branding, government backing, and transparent content mitigate concerns. Overall, the site is safe, professional, and trustworthy with room for security enhancements. Strategically, the organization should focus on improving privacy compliance by implementing cookie consent, publishing security policies, and enhancing WHOIS transparency to strengthen trust and compliance posture.

F

Finby

finby.com

61

Finby is a European-focused payment solutions provider specializing in secure, scalable cross-border payment services tailored for e-commerce businesses. Their offerings include card payments, local payment methods, business accounts, and a merchant portal, positioning them as a niche player in the European payment processing market. The company was founded in 2012 and maintains a professional online presence with a modern, well-structured website optimized for mobile and SEO. Technically, the site is built on WordPress with common plugins and hosted on infrastructure using Microsoft Azure DNS. Security posture is strong with HTTPS enforced and PCI DSS certification evident, though some security headers and DNSSEC are not implemented. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Contact is primarily via web forms, with social media presence on LinkedIn and Instagram. Overall, Finby demonstrates a mature digital infrastructure and credible business model with a high trustworthiness rating.

A

Access-me

access-me.software

59

Access-me.software presents itself as a provider of web accessibility tools, targeting primarily web developers and website owners interested in compliance with accessibility standards such as WCAG and ADA. The website content is minimal, with no visible main content on the homepage beyond branding and navigation placeholders. The technical infrastructure relies on common frontend libraries including Bootstrap, jQuery, and Font Awesome, indicating a modern but basic web stack. However, the absence of backend or CMS indicators suggests a simple or early-stage deployment. From a security perspective, the website lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or terms of service policies are present, which raises compliance concerns especially under GDPR for a UK-based entity. The WHOIS data is limited due to the unsupported TLD and privacy protections, providing no clear domain creation or expiry dates, which impacts trustworthiness assessment. Overall, the site demonstrates a low maturity level in both content and security posture. The lack of contact information and compliance documentation further reduces business credibility. Strategic improvements in security configuration, privacy compliance, and content enrichment are recommended to enhance trust and user engagement.

T

The Mighty

themighty.com

61

The Mighty is a well-established online community platform dedicated to supporting individuals facing various health challenges including mental health, chronic illness, disability, and rare diseases. Founded in 2001, it serves a niche audience seeking peer support and health-related content. The platform leverages modern web technologies including Nuxt.js for server-side rendering and integrates analytics tools such as Google Analytics and Segment for user behavior tracking. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain status locks in place, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website demonstrates good professionalism and trustworthiness but would benefit from enhanced privacy disclosures and security policies.

C

Chronic Disease Awareness Day

chronicdiseaseday.org

44

Chronic Disease Awareness Day is a nonprofit advocacy initiative led by Good Days, focusing on raising awareness and improving care access for chronic disease patients across the United States. The organization collaborates with numerous national health advocacy partners to host events, engage communities, and influence policy. The website reflects a mature digital presence with clear branding, event information, and social media integration, targeting patients, advocates, and policymakers. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted via GoDaddy, and employs HTTPS with a good security posture, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is limited by the absence of explicit privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional, trustworthy, and serves its advocacy mission effectively.

F

Five9

five9.com

73

Five9 is a leading enterprise provider of cloud contact center software and AI-powered customer experience solutions. The company targets businesses seeking to enhance their customer service operations through reliable, scalable, and intelligent cloud-based platforms. Their market position is strong, supported by a professional website, high customer ratings, and a clear focus on AI integration in contact centers. The website is built on Drupal 10 and incorporates modern analytics and optimization tools, reflecting a mature digital infrastructure. Performance and mobile optimization are good, supporting a positive user experience. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and public security policies could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, indicating attention to regulatory requirements. Overall, Five9 presents a trustworthy and professional online presence, though the absence of WHOIS data limits domain registration trust verification.

O

Orkidées Studio

orkidees.fr

53

Orkidées Studio is a small French graphic and digital studio specializing in visual identity, packaging, web design, motion design, and editorial services. The website presents a professional and creative image targeting businesses and individuals seeking high-quality design solutions. The technical infrastructure is based on WordPress with Elementor and Borlabs Cookie for cookie consent management, hosted by Infomaniak Network SA, a reputable provider. The site is mobile-optimized and uses modern web technologies, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional, with room for improvement in privacy and security documentation.

B

BRAIN-TEAM

brain-team.fr

42

BRAIN-TEAM is a French healthcare coordination network specializing in rare neurological diseases. It connects multiple reference centers and provides support programs for patients and caregivers, as well as facilitating research and education. The website is professionally designed, primarily in French, and targets patients, healthcare professionals, and researchers. It maintains partnerships with European Reference Networks and other rare disease organizations, positioning itself as a key player in the French rare diseases healthcare ecosystem. Technically, the website is built on WordPress with a modern theme and several plugins for sliders, maps, GDPR compliance, and multilingual support. Hosting is provided by OVH, a reputable French provider. The site is mobile-optimized and uses HTTPS with Google Analytics for traffic monitoring. SEO is supported by structured data and meta tags. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism compliant with GDPR. However, no explicit privacy policy or terms of service pages were found in the provided content, and no security.txt or incident response contacts are published. Security headers are not evident, which could be improved to enhance protection. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professional, serving an important healthcare niche. Strategic improvements in privacy documentation, security headers, and incident response transparency would strengthen its security posture and compliance.

NMO Brasil is a Brazilian non-profit organization dedicated to supporting patients with Neuromyelitis Optica (NMO) and raising public awareness about this serious neurological condition. The website serves as a hub for patient stories, educational content, and advocacy efforts, positioning the organization as a key player in the Brazilian healthcare advocacy space for NMO. The site is built on WordPress using the Elementor page builder, hosted by Locaweb, and integrates multimedia content such as YouTube videos and augmented reality experiences to engage visitors. While the technical infrastructure is modern and the site is mobile-optimized, there are gaps in privacy and security compliance, including the absence of privacy and cookie policies and missing security headers. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

A

Air to Go

airtogo.fr

45

Air to Go is a French regional air quality monitoring service developed by a consortium of official Associations for Air Quality Surveillance. The website provides detailed air quality forecasts, pollution alerts, and route planning tools to help users anticipate air pollution and improve their daily life. The service is free and covers multiple French regions, supported by partnerships with regional air quality associations. The website is professionally designed, mobile-optimized, and uses modern web technologies including Bootstrap, Leaflet, and Firebase Analytics. Security posture is good with HTTPS and cookie consent implemented, though explicit security policies and headers could be improved. No contact emails or phone numbers are directly provided on the homepage, but privacy and cookie policies are present. The domain registration is consistent with the business purpose and shows no suspicious patterns.

A

Air Attitude

airattitude.fr

54

Air Attitude is a French environmental platform founded in 2020 that encourages citizens and organizations to participate in actions aimed at improving air quality, combating climate change, and reducing energy consumption. The website serves as a community engagement tool, showcasing contributors and mapping their impact. Technically, the site is built on WordPress with Elementor and uses modern technologies including Google Maps API, Mapbox, and Matomo analytics, hosted on OVH with Cloudflare DNS. Security posture is solid with HTTPS enabled and privacy-respecting analytics, though it lacks explicit privacy and cookie policies and contact information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact channels.

A

Atmo France

atmo-france.org

62

Atmo France operates as the national federation coordinating regional associations responsible for monitoring air quality across France and its overseas territories. The organization provides comprehensive data, alerts, and educational resources to the general public, local authorities, businesses, and educational institutions. Their market position is that of an authoritative, government-aligned non-profit entity focused on environmental health and air quality surveillance. Technically, the website is built on Drupal 9, leveraging modern web technologies such as Bootstrap, Google Fonts, and FontAwesome for styling and responsiveness. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and accessible, with clear navigation and interactive features such as maps and indices for air quality and pollen. From a security perspective, the site uses HTTPS and includes some anti-bot measures, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no visible privacy or cookie policies, which is an area for improvement. Overall, the website presents a trustworthy and professional front for a public-interest environmental organization. The lack of WHOIS data due to privacy protection is typical for such entities and does not detract from legitimacy. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and publishing clear contact and incident response information to strengthen trust and compliance.

C

Coucou de France

coucou-de-france.fr

58

Coucou de France is a specialized online travel guide focused on the Mont-Blanc region, offering curated hiking trails, local events, and activities to both local actors and visitors. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and mobile optimization. Technically, it leverages modern frameworks such as Next.js and React, integrates analytics tools like PostHog and Google Tag Manager, and employs Facebook Pixel for marketing and retargeting purposes. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website's content and technical setup suggest a legitimate and trustworthy service. Overall, the site is well-positioned as a niche regional guide with room for improvement in privacy compliance and security transparency.

N

Netdev

netdev.fr

46

Netdev is a small digital agency based in Annecy, France, specializing in web creation, digital marketing solutions, and media services such as photo, video, and drone shoots. The company targets businesses seeking to enhance their online presence through expert digital solutions. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern analytics and marketing tools like Matomo, Google Tag Manager, and Microsoft Clarity, indicating a mature digital setup. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website presents a trustworthy and professional business presence with moderate risk due to lack of WHOIS transparency and some missing security documentation.

L

Loopi

loopi-velo.fr

60

Loopi is a French company specializing in sustainable and innovative tourism solutions. Their website positions them as a partner for accelerating the transition to sustainable tourism by offering unique circuits and enhancing user experience. The company targets tourism professionals and eco-conscious travelers, emphasizing heritage valorization and environmental responsibility. Technically, the website is built on WordPress using the Divi theme, with integrations such as Yoast SEO, Contact Form 7, Matomo analytics, and Google reCAPTCHA, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS and anti-bot measures, but lacks explicit security headers and formal privacy or cookie policies. The absence of public WHOIS data suggests privacy protection, which is common for small businesses but slightly reduces trust. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

W

We Are ILL

weareillmatic.com

63

We Are ILL is a nonprofit patient advocacy organization dedicated to redefining perceptions of illness for Black women living with multiple sclerosis. The website serves as a hub for educational resources, community programs, events, and advocacy efforts, positioning itself as a niche leader in the MS nonprofit space. The organization leverages digital platforms including social media and podcasts to engage its target audience effectively. Technically, the website is built on Squarespace, ensuring a modern and responsive design with moderate performance. Security posture is solid with HTTPS and HSTS enabled, though some security headers and formal policies are missing. Privacy compliance is partially addressed with a cookie consent banner but lacks comprehensive privacy and terms of service documentation. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, though the website content and external media references support its credibility. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

The website tafcares.org is currently inaccessible due to geographic blocking enforced by an Amazon CloudFront distribution, resulting in a 403 error page. This prevents any meaningful content or metadata extraction, limiting the ability to assess the business, technical infrastructure, or security posture. The domain is registered with GoDaddy.com, LLC since 2016, indicating a potentially established entity, but no public website content is available to verify business operations or services. The lack of DNSSEC and security headers is noted but cannot be fully confirmed due to blocked access. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under these conditions.

S

Home | The SPSRF

stiffperson.org

58

The website stiffperson.org serves as a support group platform dedicated to Stiff Person Syndrome, a rare neurological disorder. It provides informational resources and community support primarily targeting patients, their families, and caregivers. The site is built on the Wix platform, leveraging Wix's hosting and content management system, which offers moderate performance and good mobile optimization. However, the content quality and design are basic, reflecting a small non-profit organization's typical digital presence. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and user trust. No contact information or incident response details are provided, limiting transparency and responsiveness to security or privacy concerns. The site employs minimal tracking via Metricool analytics, indicating a low level of user tracking. Overall, the domain WHOIS data is unavailable or privacy protected, which is common for small non-profits but limits trust verification. The website content and structure do not raise suspicion and align with a legitimate support group. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site's trustworthiness and security posture.

T

The Siegel Rare Neuroimmune Association

wearesrna.org

66

The Siegel Rare Neuroimmune Association (SRNA) is an international nonprofit organization dedicated to advocating for individuals affected by rare neuroimmune disorders such as ADEM, AFM, MOGAD, NMOSD, ON, and TM. The organization focuses on education, advocacy, and accelerating research to find cures. Their website reflects a professional and consistent brand presence with multilingual support and active social media engagement. The target audience includes patients, families, healthcare professionals, and researchers. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Hotjar, and New Relic for monitoring. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks some security headers and explicit incident response information. Privacy compliance is partial, with cookie consent mechanisms but no explicit privacy policy found in the provided content. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.

P

PAN Foundation

panfoundation.org

61

PAN Foundation is a well-established non-profit organization dedicated to providing financial assistance, advocacy, and education to patients with life-threatening, chronic, and rare diseases. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization leverages modern web technologies including WordPress CMS, Google Tag Manager, Facebook Pixel, and Fundraise Up for fundraising, indicating a robust technical infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be enhanced for improved protection. Privacy compliance is well addressed with visible privacy and cookie policies and GDPR considerations. Overall, the website demonstrates high professionalism and trustworthiness, supporting the organization's mission effectively.

NMO Brasil is a small Brazilian non-profit association dedicated to supporting patients with Neuromyelitis Optica and related diseases. Founded in 2014, it provides educational resources, awareness campaigns, and community engagement primarily targeting patients, families, and the medical community. The website reflects this mission with clear informational content and links to related partner organizations. Technically, the site uses a standard Bootstrap-based stack with common JavaScript libraries, hosted likely on AWS infrastructure. While the site is mobile-optimized and well-structured, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and user trust. No forms collecting personal data are evident on the main page, and no social media links are present, limiting direct engagement channels. The WHOIS data is consistent with the organization's profile and domain age aligns with the founding date, supporting legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance features.

N

National Infusion Center Association

infusioncenter.org

63

The National Infusion Center Association (NICA) is a well-established nonprofit trade association founded in 2007, dedicated to representing non-hospital infusion providers and outpatient care settings. The organization focuses on advocacy, standards development, education, and membership services to support community-based infusion centers across the United States. Their website reflects a professional and comprehensive digital presence with detailed information about their mission, team, and services, positioning them as a leading voice in infusion therapy advocacy. Technically, the website is built on WordPress using the Betheme theme, incorporating modern technologies such as Google Tag Manager, HubSpot, and various analytics and marketing tools. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. From a security perspective, the site enforces HTTPS and employs domain locking statuses to protect domain integrity. However, it lacks DNSSEC, advanced security headers, and a published security.txt file, which are areas for improvement. Privacy compliance is basic, with no explicit privacy or cookie policies detected, and no consent mechanisms for cookies, which could pose compliance risks. Overall, the website is trustworthy, professional, and serves its target audience effectively. Strategic improvements in privacy compliance and security hardening would enhance its risk posture and user trust.

M

Mircem

mircem.fr

45

Mircem is a French national reference center specializing in rare inflammatory diseases of the brain and spinal cord. The organization focuses on data registry, public and professional education, and therapeutic guidance, positioning itself as a key healthcare resource within France and Europe through affiliations with Brain Team and the European Reference Network. The website reflects a professional healthcare entity targeting patients, families, and medical professionals, with content primarily in French and an English language option. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various plugins for SEO, multilingual support, and forms. Hosting is provided by Infomaniak Network SA, a reputable provider. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is trustworthy, well-branded, and serves its niche effectively.

M

MG Holistic Society

mgholisticsociety.org

60

MG Holistic Society is a small non-profit organization dedicated to supporting adults living with Myasthenia Gravis and other autoimmune disorders through holistic education, advocacy, community engagement, and fundraising. The organization emphasizes natural and holistic wellness approaches, aiming to empower its community with knowledge about healthy lifestyles, mental wellness, and supplement support. Their market position is niche, focusing on a specific health condition with a holistic wellness approach. Technically, the website is built using GoDaddy Website Builder and hosted by GoDaddy.com, LLC, featuring modern web fonts and service worker support for progressive web app capabilities. The site is mobile optimized with good navigation and content quality. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and compliance measures.