Security Directory

A

Alexion Pharmaceuticals, Inc.

ultomiris.com

70

Alexion Pharmaceuticals, Inc. operates the ultomiris.com website as an official patient resource for ULTOMIRIS®, a prescription drug treating rare diseases such as NMOSD, gMG, aHUS, and PNH. The site provides comprehensive patient education, safety information, and personalized support programs, positioning Alexion as a specialized leader in rare disease pharmaceuticals. The website is well-branded, professionally designed, and targets patients and caregivers seeking treatment information and support. Technically, the site leverages modern frameworks like Bootstrap and Sitecore CMS, integrates analytics and advertising tools responsibly with consent mechanisms, and is hosted on AWS infrastructure. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear policies and cookie consent management. Overall, the site reflects a mature digital presence aligned with healthcare industry standards.

BENEFIT plus CZ, s.r.o. is a Czech-based tax, accounting, and consulting firm established in 1997, serving a diverse client base from small entrepreneurs to larger companies and non-profit organizations. The company emphasizes professional insurance coverage and is led by a certified tax advisor who is a member of relevant professional bodies. The website reflects a modest but functional digital presence built on WordPress, with basic navigation and content relevant to its business domain. However, the technical stack is outdated, posing potential security risks. The absence of privacy and cookie policies indicates a gap in compliance with modern data protection standards. Security posture is moderate with HTTPS enabled but lacking advanced security headers and updated software versions. The domain WHOIS data is missing, which reduces trustworthiness from a domain registration perspective but the website content and contact details appear consistent with a legitimate small business. Strategic improvements in security, compliance, and technical modernization are recommended to enhance trust and reduce risk.

R

RATP Dev Australia

ratpdevaustralia.com.au

66

RATP Dev Australia is a regional branch of the global RATP Dev group, specializing in the operation and maintenance of urban and intercity transportation systems. The company leverages the extensive experience of its parent, RATP Group, a major public transport operator with over a century of history. The website presents a professional image with detailed references to global operations, emphasizing expertise in automated metro systems and various transit modes. Technically, the site is built on Drupal 10 and integrates modern analytics tools with privacy-conscious configurations. Security posture is generally good with HTTPS and cookie consent implemented, though there is room for improvement in security headers and transparency of policies. WHOIS data is incomplete, which slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and branding.

R

RATP Dev

ratpdev.it

53

RATP Dev Italy is a subsidiary of the global RATP Dev group, specializing in operating and maintaining urban and intercity transportation systems across multiple continents. The company offers a wide range of transportation services including bus, tramway, rail, metro, sightseeing, mobility on demand, paratransit, and cable car operations. The website reflects a mature enterprise with a consistent brand and professional content targeting transportation authorities and the general public. Technically, the site is built on Drupal 10 with integration of Google Analytics, Matomo, and Google Maps API, indicating a modern digital infrastructure with moderate performance and good mobile optimization. Security posture is moderate with some privacy-conscious configurations in analytics but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

RATP Dev

ratpdevusa.com

64

RATP Dev USA operates as a regional branch of the global RATP Dev group, providing urban and intercity transportation services across multiple continents. The company offers a wide range of transit solutions including bus, tramway, paratransit, metro, rail, cable cars, and sightseeing services. Their market position is strong as one of the largest multi-modal urban public transit operators with over 120 subsidiaries in 17 countries. The website reflects a professional and consistent brand image targeting transit agencies and passengers. Technically, the website is built on Drupal 10 CMS and leverages modern web technologies including Google Analytics, Matomo for analytics, and Google Maps API for geolocation features. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics. However, some security best practices such as security headers are missing, and no explicit security or incident response policies are published. Security posture is adequate with HTTPS enabled and privacy-conscious analytics configurations, but the lack of WHOIS data and absence of privacy policy and contact information reduce trust. No signs of malware or phishing were detected. Overall, the site is safe and business-focused but would benefit from improved transparency and security disclosures. The risk assessment indicates moderate risk primarily due to missing WHOIS data and incomplete privacy and security disclosures. Strategic recommendations include publishing privacy and security policies, adding security headers, providing clear contact information, and establishing a vulnerability disclosure process.

R

RATP Group

ratpgroup.com

58

RATP Group is a leading global urban transport operator, ranked third worldwide, providing comprehensive mobility services, infrastructure management, real estate, and safety solutions. The company serves cities and regions primarily in France but also internationally, supported by a large workforce and multiple subsidiaries. The website reflects a mature digital presence with a focus on sustainability and corporate social responsibility. Technically, the site uses modern frameworks such as React and Next.js, hosted on Akamai infrastructure, and integrates privacy-conscious analytics via Matomo. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

Via Transportation operates a comprehensive digital platform transforming public transit and shared mobility through software and operations. The company targets a broad audience including cities, transit authorities, operators, educational institutions, corporations, and healthcare providers. Their market position is strong with strategic partnerships such as with Waymo and Citymapper, offering a suite of services from microtransit to corporate shuttles. Technically, the website is built on HubSpot CMS, leveraging modern analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and domain protections, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though direct contact emails and phone numbers are not publicly listed, relying on forms for communication.

E

EFFIA

effia.com

65

EFFIA is a prominent parking service provider operating primarily in France and Belgium, offering parking space reservations and subscription plans across more than 500 locations. The company targets drivers and commuters seeking convenient and cost-effective parking solutions near city centers and train stations. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site is built on Drupal CMS and integrates modern tools such as Google Maps API, Didomi for consent management, and analytics platforms like Piano Analytics and Google Tag Manager. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS registration data for the domain www.effia.com raises some concerns about domain legitimacy, though the website content and business presence appear credible. Overall, the site scores well in content quality, technical implementation, and security, but could improve business credibility by providing more transparent domain registration and direct contact information.

A

ARTOIS MOBILITES

artois-mobilites.fr

47

Artois Mobilités is a regional public transportation authority in France managing the Tadao bus network and mobility initiatives focused on sustainable and innovative transport solutions. The website reflects an active organization with recent news updates, a clear focus on public service, and community engagement through newsletters and social media. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook SDK, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and contact transparency.

R

Registrant of reelup.io

reelup.io

68

ReelUp is a specialized SaaS company offering shoppable video solutions primarily targeting Shopify merchants and online retailers. Their platform enables e-commerce businesses to convert social media videos into interactive, shoppable content, enhancing customer engagement and boosting sales. The company is relatively new, founded in 2022, and operates from New Zealand. Their market position is niche but well integrated within the Shopify ecosystem, leveraging third-party tools like Judge.me for reviews and Microsoft Clarity for analytics. Technically, the website is built on Shopify using the Dawn theme, incorporating modern technologies such as React 18 and jQuery. The infrastructure is hosted on Shopify's CDN with Cloudflare DNS, ensuring good performance and mobile optimization. Analytics and marketing tools are well integrated, including Google Tag Manager and Microsoft Clarity, providing moderate user tracking capabilities. From a security perspective, the site enforces HTTPS and uses standard security practices, though it lacks DNSSEC and explicit security headers like CSP. There is no visible security policy or incident response contact, which are areas for improvement. Privacy compliance is basic, with no explicit privacy or cookie policies found on the homepage, though a cookie consent mechanism is implied. Overall, the website presents a professional and trustworthy front with good business credibility and technical maturity. The risk profile is low, but improvements in privacy transparency and security hardening are recommended to enhance trust and compliance.

M

Marina Strážnice

marinastraznice.cz

57

Marina Strážnice is a specialized marine service provider based in the Czech Republic, offering comprehensive boat maintenance, repair, and accessory sales. Their services cover outboard and inboard motor repairs, boat trailer servicing, marine oils and parts sales, boat painting, upholstery, electrical repairs, and custom boat furniture manufacturing. The company targets boat owners and operators seeking professional care for their vessels. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a solid digital presence for a small local business. Technically, the site is built on WordPress with Elementor and related plugins, leveraging modern web technologies and Google Analytics for user tracking. Security posture is good with HTTPS enabled, though security headers and privacy compliance measures are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy business. Strategic improvements include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure information to enhance compliance and trust.

P

Paperton AB

paperton.com

51

Paperton AB is a Swedish company specializing in digital publishing solutions for magazines and newspapers, offering apps for iPhone, iPad, Android, and web platforms. Established in 2009, it serves publishers and readers by providing a platform to access digital magazines. The website reflects a niche media technology provider with a professional online presence and consistent branding. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google services for analytics and advertising, hosted on AWS infrastructure. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, and no visible privacy or cookie policies, indicating compliance gaps. The domain registration is consistent and trustworthy, with no privacy protection or suspicious WHOIS patterns. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

W

WPDreams

ajaxsearchpro.com

65

Ajax Search Pro is a specialized WordPress plugin developed by WPDreams, offering a customizable and efficient live search engine replacement for WordPress websites. The company positions itself as a niche leader in the WordPress plugin market, targeting website developers and administrators seeking enhanced search functionality. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Smart Slider 3, and is hosted behind Cloudflare DNS services, indicating a modern and scalable technical infrastructure. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. Security-wise, the site uses HTTPS with a good SSL configuration and domain status protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

S

Slovenská biblická spoločnosť

bibliaprenepocujucich.sk

53

The website 'Biblia pre nepočujúcich' is a non-profit project managed by the Slovenská biblická spoločnosť, providing biblical stories in Slovak sign language targeted at the deaf community in Slovakia. The project is educational and religious in nature, relying on donations for continuation. The site features video content, a sign language dictionary, and is designed with accessibility in mind, though some accessibility features could be improved. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, JW Player for video playback, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for tracking and analytics. The site is mobile optimized and has good SEO practices, but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and includes a CSRF token, but does not expose security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. No contact information for security incidents or data protection officers is provided. The domain uses privacy protection in WHOIS, which is justified for this non-profit. No vulnerabilities or suspicious patterns were detected. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and security posture.

B

Biblia.sk | Ekumenický preklad - Evanjelium podľa Marka 1. kapitola

biblia.sk

57

Biblia.sk is a Slovak online platform providing access to the ecumenical translation of the Bible, targeting Slovak-speaking Christian audiences. The site offers comprehensive biblical texts, including the Gospel of Mark chapter 1, with a clean, modern, and mobile-optimized interface. The platform is supported by related partners including an e-shop and a biblical society donation site. Technically, the site is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on AWS infrastructure with DNSSEC enabled, ensuring good performance and security. Security posture is strong with HTTPS and cookie consent mechanisms, though the absence of a privacy policy and terms of service pages limits full compliance visibility. Overall, the site is trustworthy, safe, and professionally maintained, serving a niche religious educational purpose.

The website giftlegacy.com is currently inaccessible beyond a Cloudflare security challenge page employing Turnstile captcha, which prevents direct content access and analysis. The domain is long-established, registered since 1999 via GoDaddy.com, LLC, with no privacy protection enabled. Due to the WAF challenge, no business, contact, or policy information is visible, limiting the ability to assess the company's market position, services, or compliance posture. The technical infrastructure includes Cloudflare as a security and performance provider, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to blocked content, but domain registration data suggests a stable and legitimate domain. Overall, the site requires removal or adjustment of WAF restrictions to enable proper content delivery and compliance transparency.

A

ADRA Network

adra.cloud

47

ADRA Network operates a donation platform focused on humanitarian aid campaigns such as disaster relief and COVID-19 response. The organization targets donors interested in supporting global aid efforts. The website is built on a WordPress CMS with WooCommerce for donation processing, enhanced by Elementor for design and Cloudflare for hosting and CDN services. The technical infrastructure is modern and supports multi-currency donations and multilingual content, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is professional and trustworthy but could improve transparency and security practices.

A

ADRA Connections

adraconnections.org

55

ADRA Connections is a small US-based non-profit organization affiliated with the Adventist Development and Relief Agency (ADRA). It focuses on organizing volunteer service trips and providing scholarships to student volunteers, targeting individuals and groups interested in faith-based humanitarian service. The website is built on Squarespace and integrates social media and video content to engage its audience. While the site uses HTTPS and includes tracking tools like Google Analytics and Facebook Pixel, it lacks comprehensive privacy and cookie policies and has minimal security headers, indicating room for improvement in privacy compliance and security hardening. The WHOIS data is privacy protected, which is common for non-profits, and no suspicious patterns were detected. Overall, the website presents a professional and trustworthy image with good content quality and business credibility but should enhance its privacy and security posture.

S

Stoneweg Asset Management SA

stoneweg.com

57

Stoneweg Asset Management SA is a global alternative investment group specializing in Real Assets, established in 2015 and headquartered in Geneva, Switzerland. The company operates 23 offices worldwide across Europe, the US, and Singapore, and is part of the SWI Group. Stoneweg offers investment product structuring, mandate management, and experiential ventures in sectors such as sport, culture, entertainment, and gastronomy. The website reflects a professional and comprehensive digital presence with strong branding and trust indicators such as INREV membership and PRI signatory status. Technically, the website is built on WordPress using modern technologies including Bootstrap, jQuery, and Mapbox GL JS for interactive maps. SEO is enhanced by Yoast SEO plugin, and privacy compliance is robust with GDPR cookie consent mechanisms and privacy policies clearly presented. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced, anti-spam measures, and email obfuscation, though HTTP security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS domain registration data is a concern for domain trust but does not detract from the overall legitimacy of the business presence. Overall, Stoneweg's website demonstrates a mature digital infrastructure supporting its business model, with recommendations to enhance security headers and incident response disclosures to further strengthen trust and compliance.

The website www.databaze-strategie.cz serves as the official national portal for strategic and conceptual documents in the Czech Republic, operated under the auspices of the Ministry for Regional Development (Ministerstvo pro místní rozvoj ČR) and supported by the National Network of Healthy Cities of the Czech Republic. It provides a comprehensive database of strategic documents at international, national, regional, and local levels, targeting public administration entities, municipalities, and professionals involved in strategic planning. The platform acts as a key tool for cohesion policy and strategic governance in the country. Technically, the site employs a modern JavaScript stack including jQuery, jQuery UI, Select2, and integrates analytics via Google Analytics and Matomo. It uses HTTPS and includes cookie consent mechanisms compliant with GDPR. The site is moderately optimized for performance and mobile use, with basic accessibility features. However, no CMS or hosting provider details are evident, and some security headers are missing. From a security perspective, the site demonstrates good baseline practices such as HTTPS and cookie consent but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data is a concern, reducing trustworthiness despite the official nature of the content. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is a reliable government resource with good content quality and moderate technical maturity. Strategic recommendations include improving security headers, publishing security and incident response policies, enhancing mobile and accessibility compliance, and verifying domain registration details to strengthen trust and compliance.

M

Ministerstvo pro místní rozvoj ČR

projektovezamery.cz

62

The website projektovezamery.cz serves as an official information system for project intents managed by the Czech Republic's Ministry of Regional Development (Ministerstvo pro místní rozvoj ČR). It provides authenticated access to project data via national identity systems such as JIP, NIA, and ISDS, targeting government officials and stakeholders involved in regional project planning. The platform is positioned as an authoritative government resource with a focus on transparency and centralized project management. Technically, the site is built using modern web technologies including React and Webpack, delivering a moderate performance experience with basic mobile optimization and accessibility features. The site lacks advanced SEO and comprehensive metadata but maintains a consistent and professional government branding. Hosting and SSL details are not explicitly provided but HTTPS usage is implied. From a security perspective, the website employs national authentication mechanisms but lacks visible security headers and published security or privacy policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of privacy and cookie policies, as well as contact information, reduces privacy compliance scores. The WHOIS data is consistent with the website's government affiliation, showing no suspicious patterns and a domain age appropriate for the service. Overall, the site is trustworthy and serves its government function adequately but would benefit from enhanced privacy compliance, security header implementation, and improved user contact options to strengthen its security posture and user trust.

S

Státní fond životního prostředí ČR

opst.cz

63

The website represents the official online presence of the Operační program Spravedlivá transformace, a Czech government-backed funding program focused on supporting regions affected by the transition away from coal energy. Managed by the State Environmental Fund of the Czech Republic, the program offers substantial financial resources to regional projects in energy, research, innovation, and social development. The site serves as a comprehensive portal for information, application submission, and updates related to the program. Technically, the site is built on WordPress with modern design and responsive features, integrating Google Analytics for minimal user tracking and employing cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. The domain registration is consistent with the program's timeline and official nature, hosted by reputable Czech providers. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

S

Smartbrain

smartbrain.com.br

63

Smartbrain is a Brazilian technology company specializing in portfolio consolidation and management solutions tailored for financial professionals such as wealth managers, family offices, and financial consultants. The company offers a suite of products including Advisor Enterprise, Advisor PRO, AppConnect, Prospect, and API/Open Finance integrations, positioning itself as a key player in the Brazilian financial technology sector. Their website reflects a professional and consistent brand image with a clear focus on B2B SaaS solutions for investment management. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted on AWS infrastructure, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is adequate with clear privacy and cookie policies, though explicit consent mechanisms could be enhanced. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

P

PayRewards

payrewards.com

50

PayRewards is a business payments platform that enables companies to earn rewards points on every business expense, including payments made via credit card, ACH, or wire transfer. The platform supports payments to any vendor, even those that do not accept credit cards, and offers a rewards program with points redeemable for flights, hotels, and gift cards. The company targets business owners and medium-sized enterprises in the United States, positioning itself as a secure and flexible payment solution with enhanced rewards capabilities. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools such as Google Tag Manager, Optimizely, and LiveChat. Security posture is strong, with PCI DSS compliance, ISO 27001 certification, tokenized payment data, and automatic fraud detection. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

L

Lead Booster Pro

leadboosterpro.io

54

Lead Booster Pro is a SaaS company specializing in lead generation and funnel building tools designed to double conversion rates for businesses without increasing ad spend. The platform offers a multi-path form builder, analytics, and integrations to optimize lead capture and conversion. Positioned as an alternative to Typeform, it targets businesses seeking smarter, conversion-optimized funnels. The website is built on WordPress with Elementor and optimized for SEO and mobile use. It employs modern marketing and analytics tools including Google Ads and Plausible Analytics. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial with cookie consent implemented but no visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and well-branded, suitable for a small technology startup launched in 2024.

I

Integsoft, Inc.

integrationeye.com

60

Integration Eye is a modular software product developed by Integsoft, Inc., focused on API monitoring, logging, and security. The product targets businesses and developers requiring robust API management and security solutions. The website presents detailed product features, modular architecture, and transparent pricing, positioning itself as a niche provider in the technology sector. The company emphasizes on-premise and private cloud deployment options, catering to customers with strict data privacy requirements. Technically, the website leverages a modern technology stack including Java, Mule Runtime, XML configurations, and popular web libraries such as jQuery and FontAwesome. It integrates analytics and marketing tools like Google Analytics and Hotjar, indicating a mature digital presence. The site is well-structured, mobile-optimized, and provides comprehensive documentation and demos, reflecting good digital maturity. From a security perspective, the site uses HTTPS and implements CSRF tokens and cookie consent mechanisms, demonstrating basic security hygiene. However, the absence of explicit security headers and a published security policy or incident response contact reduces its security posture. The missing WHOIS domain registration data is a significant concern, potentially impacting trust and legitimacy. Overall, the website is professional and content-rich but requires improvements in domain registration transparency and enhanced security practices to strengthen trust and compliance.

I

Integsoft, Inc.

integsoft.com

58

Integsoft, Inc. is a specialized technology company focused on Java-based system integration, API monitoring, and security solutions. Their offerings include custom Java development, system integration using Mule ESB, single sign-on with Keycloak, Big Data analytics, and their proprietary modular product Integration Eye®. The company targets enterprise clients across diverse sectors such as insurance, energy, banking, healthcare, automotive, and transportation. The website reflects a professional and consistent brand image with strong client testimonials and partnerships with MuleSoft and Red Hat, indicating a solid market position in their niche. Technically, the website employs a modern technology stack including JavaScript libraries like jQuery, Bootstrap framework, and various UI components such as LayerSlider and Owl Carousel. Integration with Google Analytics and Hotjar indicates moderate user tracking for analytics and user experience improvements. The site is mobile-optimized and accessible with good SEO practices. However, some security best practices like security headers are not evident, and privacy and cookie policies are missing, which could impact compliance. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response information. The absence of WHOIS data for the domain raises some legitimacy concerns, though the professional presentation and contact details mitigate this risk. Overall, the site is safe, trustworthy, and well-designed but would benefit from enhanced privacy and security disclosures. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing security and incident response contacts, adding security headers, and verifying domain registration details to improve trust and compliance.

B

Blackrook Media

blackrookmedia.com

66

Blackrook Media is a UK-based broadcast and production consultancy established in 2011, specializing in television programme production, online content creation, media coaching, and strategic consultancy. The company serves a diverse global client base including broadcasters, corporate clients, and content creators. Their leadership team comprises experienced former executives from ITV and BBC, positioning them as a reputable player in the media industry. The website reflects a professional and content-rich digital presence, leveraging WordPress with modern themes and plugins to deliver a good user experience across devices. Security posture is adequate with HTTPS enabled and secure forms, though there is room for improvement in security headers and published policies. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information, client testimonials, and consistent branding.

M

mba.com

mba.com

65

mba.com is the official platform operated by the Graduate Management Admission Council (GMAC) that provides comprehensive resources for prospective MBA and business master's candidates. The website offers exam registration, preparation materials, business school program exploration, and event information, positioning itself as a leading resource in graduate business education. The platform is well-branded, professionally designed, and targets early to experienced professionals and undergraduates interested in business education. Technically, the site uses modern web technologies including Angular and Sitecore CMS, integrates Google Analytics and advertising services, and maintains good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be enhanced. Privacy compliance is evident with clear privacy and cookie policies and GDPR considerations. The WHOIS data is unavailable, likely due to privacy or registry restrictions, but the domain's legitimacy is supported by strong branding and consistent business information. Overall, mba.com represents a mature, trustworthy, and well-maintained educational platform with moderate tracking and advertising practices.

A

Association of MBAs

associationofmbas.com

64

The Association of MBAs (AMBA) operates as a leading global accreditation and membership organization specializing in MBA and postgraduate management education. It serves business schools, students, graduates, and partners worldwide, providing accreditation services, hosting events, and offering networking and insights. The website reflects a mature, professional organization with a strong market position in the education sector. Technically, the site uses modern web technologies including React and Google Analytics, hosted on DigitalOcean with CDN support, delivering a responsive and well-structured user experience. Security posture is adequate with HTTPS and domain protection measures, though lacking advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service policies. Overall, the site is trustworthy and professional but could improve transparency and security documentation to enhance compliance and user trust.

A

AMBA & BGA

amba-bga.com

66

AMBA & BGA is a well-established international accreditation and membership organization focused on postgraduate business education. With over 50 years of experience, it serves business schools, students, and graduates globally by providing accreditation services, hosting events, and fostering a quality assurance network. The website demonstrates a mature digital presence with modern technologies such as React and DigitalOcean hosting, complemented by Google Analytics and Tag Manager for analytics and marketing. Security posture is strong with HTTPS, registrar locks, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The website newton.tv is currently a minimal placeholder site with no substantive content or business information. It appears to be a parked domain primarily serving advertising scripts from third-party domains. The domain is registered through a privacy protection service, Super Privacy Service LTD c/o Dynadot, which obscures registrant details and reduces transparency. There is no visible privacy policy, cookie policy, terms of service, or contact information on the site. Technically, the site uses basic JavaScript and external ad/tracking scripts but lacks modern security headers and HTTPS information. The overall security posture is weak, with potential privacy and tracking concerns due to unknown third-party scripts. The site does not appear to be blocked by any WAF or security challenge but is functionally minimal and not professionally developed. The domain age is relatively recent (2020), and the use of privacy protection is not justified by any visible business presence. Overall, the site scores low on content quality, security, privacy compliance, and business credibility.

N

NEWTON University

newton.today

64

NEWTON TODAY is a content hub affiliated with NEWTON University, providing news, interviews, articles, and videos related to the university's activities and academic community. The website targets current and prospective students, faculty, and stakeholders interested in educational content and university events. The business model centers on educational content publishing and university promotion, positioning itself as a medium-sized educational institution in the Czech Republic. Technically, the website uses Solidpixels CMS, Google Tag Manager, and modern web fonts, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enabled, though the absence of security headers suggests room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. WHOIS data is privacy protected, which is typical and justified for this type of institution. Overall, the website is professional, trustworthy, and safe for general audiences.

E

EUREGNIA s.r.o.

euregnia.cz

62

EUREGNIA s.r.o. is a Czech-based professional services company specializing in tax advisory, accounting, economic consulting, payroll, and document digitization services primarily serving businesses and entrepreneurs in the Uherské Hradiště region. The company positions itself as a trusted regional expert with memberships in relevant professional associations and a focus on professionalism, discretion, and liability insurance. The website is well-structured, mobile-optimized, and uses modern web technologies such as Bootstrap, jQuery, and Owl Carousel to deliver a good user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms implemented. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, although the website content and business information appear consistent and professional. Security posture is moderate with HTTPS usage and cookie consent but lacks explicit security headers and incident response information. Overall, the website presents a credible and professional business front with room for improvement in security and transparency.

K

Komora daňových poradců České republiky

kdpcr.cz

49

Komora daňových poradců České republiky is a professional chamber representing tax advisors in the Czech Republic. The organization provides certification exams, educational courses, publications, and professional advocacy services. The website targets tax advisors, accounting professionals, students, and clients seeking tax advisory services. It holds a leading market position within the Czech tax advisory sector. Technically, the website uses a custom CMS with MooTools JavaScript framework, integrates Google Tag Manager, reCAPTCHA, and YouTube APIs, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and presents content in Czech with good design and navigation. Security posture is solid with HTTPS and reCAPTCHA usage, though security headers are not explicitly detected. WHOIS data is missing, which slightly reduces domain trust, but the website content and legal disclosures support legitimacy.

T

Technologický Park Brno, a.s.

technologypark.cz

49

Technology park Brno (Technologický Park Brno, a.s.) operates a technology-focused business park in Brno, Czech Republic, providing office and commercial rental spaces primarily targeting technology and innovation companies. The park leverages its strategic location near major transport routes and multiple university faculties to offer a collaborative environment for research, development, and business growth. The website is professionally designed, featuring multimedia content such as virtual tours and an interactive map of available spaces, enhancing user engagement and business transparency. Contact channels are comprehensive, including email, phone, and a secure contact form with anti-spam measures. Social media integration further supports community engagement and marketing efforts.

R

Rödl & Partner

roedl.cz

64

Rödl & Partner is a well-established international professional services firm with a strong presence in the Czech Republic, offering legal, tax, audit, and consulting services. The website reflects a mature digital presence built on Microsoft SharePoint, with a focus on professional content and client engagement. The technical infrastructure is stable, leveraging modern JavaScript libraries and privacy-conscious analytics (Matomo). Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be improved. The absence of WHOIS data slightly impacts trust but the overall brand and content quality support legitimacy. Strategic recommendations include enhancing security headers, adding explicit incident response info, and improving accessibility.

A

AUDIT Brno, spol. s r.o.

auditbrno.cz

44

AUDIT Brno, spol. s r.o. is a Czech Republic based professional services company specializing in audit, accounting, tax advisory, payroll, and consulting services primarily targeting businesses, municipalities, and non-profit organizations. The company offers statutory audits, financial statement audits for mergers, tax consulting, payroll processing, and legal-economic advisory services. The website is well-structured, professionally designed, and provides clear service descriptions and contact information, supporting a strong regional market position in the finance sector. Technically, the website runs on WordPress with common plugins such as Yoast SEO and Easy Image Gallery, leveraging jQuery for client-side scripting. The site is mobile-optimized and SEO-friendly but lacks explicit security headers and privacy/cookie policies, which are important for compliance and trust. No forms or tracking scripts were detected, indicating minimal data collection. Security posture is moderate with HTTPS implied but no visible advanced security headers or incident response information. The absence of WHOIS data is a concern for domain legitimacy and trust, though the website content and contact details appear professional and consistent with a legitimate business. Overall, the website presents a low-risk profile but should improve privacy compliance, security headers, and domain registration transparency to enhance trust and security posture.

M

M A R L O T E C H s.r.o

trustpay.eu

61

Finby, operated by M A R L O T E C H s.r.o, is a Slovakia-based payment solutions provider specializing in secure, scalable cross-border payment services tailored for European e-commerce businesses. The company offers a comprehensive suite of services including card payments, local payment methods, business accounts, and an innovative merchant portal, positioning itself as a niche player in the European payment processing market. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Hosting infrastructure leverages Microsoft Azure DNS, ensuring reliability and performance. Security posture is strong with HTTPS enforcement, PCI DSS certification, and GDPR-compliant cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Finby demonstrates a high level of business credibility and technical maturity, making it a trustworthy partner for e-commerce payment processing.

C

ConnectAd Realtime Inc

connectad.io

64

ConnectAd Realtime Inc operates a supply-side platform focused on empowering publishers and advertisers with advanced optimization, global demand access, and sustainability initiatives. The company positions itself as a transparent and innovative player in the digital advertising technology sector, targeting a global audience with a medium-sized business footprint founded in 2016. The website infrastructure is built on WordPress with modern marketing and analytics integrations such as HubSpot and Usercentrics for consent management. Security posture is solid with HTTPS, domain transfer protection, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, accessible, and trustworthy with no blocking or WAF interference detected.

The domain wpimg.pl is registered since 2011 with a reputable Polish registrar AZ.pl Sp. z o.o. However, the website content is completely empty, containing no metadata, no visible text, no forms, no scripts, and no external links. This indicates the site is either inactive, a placeholder, or blocked. There are no privacy, cookie, or terms of service policies present, nor any contact information or security policies. The technical infrastructure cannot be assessed due to lack of content, and no security headers or SSL configuration details are available. The domain registration data is consistent and legitimate, but the absence of website content severely limits any meaningful analysis.

P

Pure Altitude

pure-altitude.com

63

Pure Altitude is a French skincare and spa brand specializing in products made from mountain plants, founded in 2007 and operating primarily through an e-commerce Shopify platform. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Judge.me for customer reviews. The business targets consumers interested in natural and environmentally respectful skincare products. Technically, the site leverages Shopify's infrastructure and modern web technologies, ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and domain registration protections, though some security headers could be improved and explicit security policies published. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site presents a trustworthy and professional online presence consistent with its business claims.

Look Cycle is a specialized manufacturer and retailer of carbon bicycles and automatic pedals, targeting cycling enthusiasts and professionals across road, track, gravel, and e-bike segments. The company positions itself as a leader in automatic pedal technology with a comprehensive product catalog and a professional online presence. The website demonstrates a mature digital infrastructure with modern analytics and marketing tools integrated, including Google Tag Manager, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is well-optimized for mobile and accessibility, with clear navigation and rich content. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not detract significantly from the overall trustworthiness given the professional site and compliance with privacy regulations. Strategic recommendations include enhancing transparency around security and incident response, verifying domain registration details, and expanding direct contact information to improve business credibility and user trust.

T

Tadao

tadao.fr

61

Tadao operates as a regional public transportation network serving the Artois and Gohelle sectors in France, providing bus schedules, route planning, traffic updates, and on-demand transport services. The website reflects a medium-sized organization with a clear focus on user accessibility and service information, supported by a parent company, Transdev, a known global transport operator. The digital infrastructure is modern, leveraging JavaScript frameworks, cookie consent management, and analytics tools, with a CMS platform (ActiPAGE) generating the site content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security best practices like explicit security headers and incident response information could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies in French, aligned with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned in its market niche.