Security Directory

F

Framasoft

framagroupes.org

63

Framasoft is a French non-profit association founded in 2004, dedicated to popular education on digital challenges and the cultural commons. The Framagroupes service provides a free, ethical platform for creating and managing email discussion groups, emphasizing user privacy, data autonomy, and community moderation. The organization is funded primarily by donations and operates with transparency and a strong ethical stance against surveillance capitalism. Technically, the website uses modern web technologies including Vue.js and the Sympa mailing list software, hosted by Gandi SAS. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy, safe, and aligned with its mission of digital emancipation.

F

Framasoft

framalistes.org

63

Framasoft is a French non-profit organization providing ethical digital services, including Framalistes, a free mailing list platform focused on privacy and user autonomy. The organization is well-established with a domain age consistent with its founding and operates transparently with donation-based funding. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, it uses modern frameworks like Vue.js and the Sympa mailing list software, hosted by a reputable registrar, Gandi SAS. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and explicit security policies could be improved. Privacy compliance is strong with minimal tracking and clear terms of use. Overall, the site is trustworthy and serves a niche audience seeking ethical alternatives to commercial mailing list services.

A

Aquilenet

aquilenet.fr

59

Aquilenet is a small, non-profit associative Internet Service Provider based in the Aquitaine region of France. It focuses on providing open, neutral, and privacy-respecting Internet access to its members, leveraging open-source tools and community-driven values. The organization is registered with ARCEP and is a founding member of the Fédération FDN, reinforcing its credibility and commitment to ethical Internet services. The website serves as an information portal and access point to various member services including webmail, cloud storage, VPN, and more. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jCarousel for UI elements. It employs Piwik/Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized with a clear navigation structure, though accessibility features could be improved. No major CMS or hosting provider details are evident from the HTML content. From a security perspective, the site uses HTTPS URLs and does not expose sensitive data or vulnerable scripts. However, it lacks visible security headers and formal policies such as privacy or cookie policies, which are important for compliance and user trust. No forms collecting sensitive data are present on the homepage, reducing immediate risk. WHOIS data is unavailable, likely due to privacy protection or AFNIC policies, but the site content and affiliations suggest legitimacy. Overall, Aquilenet presents a trustworthy and community-focused ISP with a solid technical foundation but could enhance its compliance posture by publishing clear privacy and cookie policies and improving security headers. The risk level is low, but transparency improvements would benefit user trust and regulatory compliance.

M

Městské trhy, z.s.

vychodocesketrhy.cz

57

The website 'Farmářské trhy' represents a small, local non-profit organization named Městské trhy, z.s., focused on organizing farmers markets in Hradec Králové, Czech Republic. It serves as a community platform connecting local producers with residents and visitors, offering event schedules, vendor information, and community engagement activities. The site is built on the GoDaddy Website Builder platform, leveraging standard web technologies and third-party analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is adequate for a small community site, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and professionally presented, though it could benefit from enhanced security practices and more transparent contact information. No blocking or WAF mechanisms interfere with content access.

LUDdesign is a small Czech Republic-based business specializing in website creation and graphic design services, primarily serving clients in and around Trutnov. The website is minimalistic and currently under construction, providing basic contact information for two business owners along with their registration and banking details. The business model is service-based, charging hourly rates for design work. The domain has been registered since 2012, consistent with the business's stated history. Technically, the website is simple, built with basic HTML and CSS, hosted likely by Wedos, a Czech hosting provider. There is no evidence of advanced frameworks, CMS, or analytics tools. Mobile optimization and SEO are basic, and no security headers or HTTPS status could be confirmed from the data provided. From a security perspective, the site lacks critical elements such as a privacy policy, cookie consent, security headers, and incident response contacts. No forms or scripts were detected, reducing attack surface but also indicating limited functionality. The domain registration data aligns well with the website content, supporting legitimacy. No suspicious or malicious indicators were found. Overall, the website is low complexity and low risk but would benefit from implementing HTTPS, security headers, privacy and cookie policies, and improved technical and content quality to enhance trust and compliance.

T

Tubebdsm.org - Real BDSM Porn Videos

tubebdsm.org

57

Tubebdsm.org is an adult entertainment website specializing in BDSM and fetish video content. It offers streaming and downloadable videos categorized by various adult themes and fetishes. The site targets an adults-only audience interested in niche BDSM content. Technically, the site uses DataLife Engine CMS with common frontend libraries such as jQuery and Bootstrap, hosted behind Cloudflare DNS services. While HTTPS is enabled, the site lacks important security headers and privacy compliance documentation, which are critical for user trust and regulatory adherence. No contact or business information is provided, limiting transparency. Overall, the site functions as a niche adult content platform with moderate technical implementation but weak privacy and security posture.

T

Tubxporn.com - Best Porn Videos. Stream or Download Movies

tubxporn.com

39

Tubxporn.com is an adult entertainment website offering pornographic video streaming and free downloads. The site appears to serve a niche adult audience with a basic content offering and minimal on-site content, primarily redirecting users to a partner site. The technical infrastructure is simple, relying on standard web technologies and Google PageSpeed scripts, with moderate performance and basic mobile optimization. Security posture is weak due to lack of visible HTTPS confirmation, absence of security headers, and no privacy or cookie policies. The WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site lacks business transparency and compliance features, which increases risk for users and partners.

S

schülke

schuelke.com

51

schülke is a long-established company specializing in hygiene and preservation products, with a corporate philosophy focused on combating diseases and contamination. The website presents professional content targeting healthcare professionals and industries requiring hygiene solutions. Technically, the site is built on the Weblication® CMS platform, with a moderate level of performance and good mobile optimization. However, the security posture is weak due to lack of visible security headers and missing SSL configuration details. Privacy compliance is also lacking, with no privacy or cookie policies detected. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy. Overall, while the business content is credible and professional, the technical and security aspects require significant improvement to ensure trust and compliance.

E

Encavis

encavis.com

67

Encavis is a large European renewable energy company specializing in solar parks and wind farms, with over 3.8 GW installed capacity. The company targets institutional investors, energy-intensive companies, and partners such as landowners and project developers. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and recent business activities. Technically, the site uses modern web technologies including JavaScript libraries, consent management, and self-hosted analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response contacts. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and business legitimacy. Overall, the site is safe, trustworthy, and well-positioned in the renewable energy sector.

I

ISSA CZECH s.r.o.

cloverbooks.cz

56

Jazyková škola Cloverleaf Ostrava is a well-established language school operating since 1993, offering a broad range of language courses including English, Cambridge exam preparation, e-learning, and corporate training. The school targets a diverse audience including individuals, children, youth, and corporate clients, positioning itself as the largest language school in the Ostrava region. The website is professionally designed, mobile-optimized, and provides comprehensive information about courses, contact details, and policies. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Seznam Retargeting. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages are found. The absence of WHOIS data for the domain reduces trustworthiness slightly, but the overall business credibility remains high due to transparent contact information and professional presentation.

S

Severomoravské vodovody a kanalizace Ostrava a.s.

smvak.cz

63

Severomoravské vodovody a kanalizace Ostrava a.s. is a leading water utility company serving over one million residents in the Moravskoslezský and Olomoucký regions of the Czech Republic. The company provides high-quality potable water supply and wastewater treatment services, supported by a broad range of customer-focused offerings such as water meter management and consultation portals. The website reflects a professional and consistent brand image, with clear navigation and comprehensive service information. Technically, the site employs modern web technologies including Google Tag Manager and cookie consent mechanisms, ensuring GDPR compliance and user privacy awareness. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding security headers and publishing explicit security policies. The absence of WHOIS data is a notable gap, slightly reducing domain trustworthiness, but the association with the parent company Aqualia and visible certifications bolster credibility. Overall, the site is well-positioned to serve its audience with reliable information and services.

S

starstrinec

starstrinec.cz

55

The website 'starstrinec' is a small business or organization site primarily in the Czech language, built using the Wix.com Website Builder platform. The site lacks detailed business descriptions, contact information, and privacy or cookie policies, which limits its transparency and trustworthiness. Technically, the site uses standard Wix technologies and scripts, with moderate performance and good mobile optimization. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy and registration transparency. Security posture is basic, with no advanced security headers or policies detected, and privacy compliance is minimal due to missing policies. Overall, the site appears functional but lacks critical trust and compliance elements.

I

I love Hummus, s.r.o

ilovehummus.cz

53

I love Hummus, s.r.o is a Czech-based small enterprise specializing in the production and distribution of natural chickpea-sesame spreads (hummus) and related food products. Established in 2011, the company has developed a strong local market presence with over 600 retail outlets and partnerships with major chains such as Tesco and Makro. The business emphasizes natural ingredients, vegan and gluten-free products, and has expanded its portfolio under the Beavia brand to include fermented foods. Technically, the website employs modern web technologies including Bootstrap, jQuery, and tracking tools like Google Analytics and Adform, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the site is well-designed and functional but would benefit from enhanced privacy and security disclosures.

O

Obec Čeladná

celadna.cz

52

Obec Čeladná is the official municipal website for the village of Čeladná located in the Moravian-Silesian region of the Czech Republic. The site serves local residents and tourists by providing information about the municipality, local news, public notices, tourism opportunities including golf, spa, and hiking, and interactive virtual tours. The website positions itself as a modern, community-focused portal with a strong emphasis on regional tourism and public service. The domain has been registered since 2000, reflecting a stable and established online presence. Technically, the website employs modern web technologies including Bootstrap for responsive design, deferred JavaScript loading for performance, and Firebase Messaging integrated with Notifee for push notifications. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Hosting appears to be managed by a Czech provider (web4u.cz), consistent with the domain's nameservers. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, explicit security headers are not detected, and no cookie consent mechanism is present despite GDPR compliance documentation. No vulnerability disclosure or incident response contacts are provided. The WHOIS data is consistent and supports the legitimacy of the domain and its municipal purpose. Overall, the website is professional, trustworthy, and well-suited for its audience. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance standing.

M

Město Frenštát pod Radhoštěm

mufrenstat.cz

46

Město Frenštát pod Radhoštěm operates an official municipal website serving residents and visitors with comprehensive information about city administration, public notices, social services, events, and urban planning. The website positions itself as a trusted government portal with a clear focus on community engagement and transparency. The target audience includes local citizens and tourists seeking official information and services. The business model is a public service platform funded and operated by the city government. Technically, the website uses a custom CMS (vismo®), integrates Google Analytics and Tag Manager with GDPR-compliant consent mechanisms, and supports accessibility and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and well-maintained, reflecting a mature digital presence for a municipal government entity.

M

Magistrát města Třince

trinecko.cz

57

The website www.trinecko.cz serves as the official online presence of the statutory city of Třinec, Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, and community news. The site targets residents, visitors, and local businesses, offering a centralized platform for municipal communication and citizen engagement. The business model is typical for government entities, focusing on transparency, service delivery, and public information dissemination. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google reCAPTCHA for form security and includes a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. However, it lacks visible HTTP security headers and does not publish a dedicated security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust verification, but the official nature and consistent branding of the site support its legitimacy. Overall, the website is a well-maintained municipal portal with strong content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and security posture.

V

VAVRYS CZ s.r.o.

vavrys.cz

48

VAVRYS CZ s.r.o. operates the website www.vavrys.cz as an authorized distributor of high-quality sports and outdoor apparel and equipment. Established in 1991, the company targets both retail customers and business partners, offering a range of exclusive brands through their e-commerce platform and B2B portal. The website reflects a professional retail business with a focus on sportswear and outdoor gear in the Czech and Slovak markets. Technically, the website employs modern web technologies including HTTPS, Google Analytics, and Azure CDN hosting. The site is mobile-optimized with good navigation and content quality. Cookie consent mechanisms are implemented with granular user controls, demonstrating attention to privacy compliance, although a formal privacy policy page is missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, the absence of security headers and lack of published security policies or vulnerability disclosure mechanisms indicate room for improvement. The missing WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. Overall, the website presents a solid business presence with moderate technical maturity and a good security baseline. Strategic improvements in privacy documentation, security headers, and domain registration transparency would enhance trust and compliance.

D

D&AD

dandad.org

72

D&AD is a well-established non-profit organization dedicated to stimulating, enabling, and celebrating creative excellence in design and commercial creativity. The website serves as a comprehensive platform for their awards programs, educational courses, creative community engagement, and industry insights. The organization targets creative professionals, agencies, and students globally, positioning itself as a leader in the creative media sector. Technically, the website employs modern web technologies including JavaScript modules, CSS, and integrates marketing and analytics platforms such as HubSpot and Google Analytics. The site is mobile-optimized and provides a professional user experience with clear navigation and rich multimedia content. Security-wise, the website enforces HTTPS, uses cookie consent mechanisms, and loads scripts from reputable sources, indicating a good security posture. However, the absence of explicit privacy policy and contact information for security or incident response are areas for improvement. Overall, the website is trustworthy and professionally maintained, with privacy protection applied to WHOIS data, which is typical for organizations of this nature.

A

Alumont Holding a.s.

alumont.cz

43

Alumont Holding a.s. is a Czech-based company specializing in construction openings fillings, metal and wood manufacturing, construction services, and vehicle rental with hydraulic arms. The company targets B2B clients in the construction and manufacturing sectors within the Czech Republic. The website is built on WordPress and demonstrates a moderate level of digital maturity with a professional design and good mobile optimization. However, the technical infrastructure lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data and privacy policies reduces the overall trustworthiness and compliance posture. Strategic improvements in security practices, privacy policy implementation, and transparent contact information are recommended to enhance credibility and regulatory compliance.

S

Sport et neige

sportetneige.com

66

Sport et Neige is a specialized retail business focused on cross-country skiing and Nordic walking equipment, operating both online and through a physical store in Pontarlier, France. Established in 1977, it offers a wide range of products including skis, clothing, and accessories for men, women, and children. The website is well-structured, professionally designed, and targets enthusiasts of endurance sports in the Jura region and beyond. Technically, the site uses modern frameworks such as UIkit and Swiper, with a cookie consent mechanism implemented via tarteaucitron. Security posture is generally good with HTTPS enforced, though some security headers are missing and an outdated jQuery version is used. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy perception. Overall, the site presents a trustworthy and professional front for a niche sports retail business.

ASTON - služby v ekologii, s.r.o. is a Czech Republic based company specializing in ecological services and waste recycling with a history dating back to 1993. The company operates multiple regional offices and serves over 350 customers with a broad portfolio of services including hazardous waste disposal, recycling, legislative support, and environmental remediation. The website reflects a professional and consistent brand presence with detailed service descriptions and contact information. Technically, the site uses modern web technologies such as Google Tag Manager and Google Fonts, and is mobile optimized with good SEO practices. However, the absence of privacy and cookie policies and lack of WHOIS data limit the site's compliance and trustworthiness. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the site is functional and informative but would benefit from enhanced privacy compliance and domain legitimacy verification.

GEOSAN GROUP a. s. is a well-established Czech construction company specializing in general contracting for residential, civil, industrial, environmental remediation, water management, and transportation projects. The company positions itself as a financially stable and reputable player with nationwide operations. Their website reflects a professional digital presence with clear navigation, good mobile optimization, and detailed information about their certifications and references. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and the Nette framework for form handling. Security posture is adequate with HTTPS and secure forms, but lacks advanced security headers and published incident response policies. Privacy compliance is demonstrated through a cookie consent mechanism and a privacy policy page. Overall, the website is trustworthy and business-focused, though WHOIS data is unavailable, which slightly impacts domain trust evaluation.

O

Obec Lhota u Vsetína

lhotauvsetina.cz

46

The website lhotauvsetina.cz serves as the official online presence for the municipality of Lhota u Vsetína in the Czech Republic. It provides residents and visitors with local news, official announcements, event calendars, waste collection schedules, and contact information for municipal offices. The site is designed to support community engagement and transparency in local governance. The business model is that of a governmental municipal service portal, targeting local residents and stakeholders. The domain is well-established since 2007, reinforcing its legitimacy and trustworthiness. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor analytics, with a clear cookie consent mechanism in place to comply with GDPR requirements. The site is mobile-optimized and provides basic accessibility features, although there is room for improvement in security headers and SEO. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security headers like CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's purpose and geographic location, indicating a trustworthy domain registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a professional and trustworthy digital presence for the municipality, with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.

R

Ridgidgear

ridgidgear.eu

57

Ridgidgear is a small-sized e-commerce retailer specializing in branded promotional products, primarily under the RIDGID brand. The website offers a range of products including textiles, giveaways, and accessories targeted at businesses and professionals seeking promotional merchandise. The platform is built on Shopware 6, indicating a modern e-commerce infrastructure with basic to moderate performance and mobile optimization. The site presents a professional design with clear navigation and consistent branding, although some SEO and accessibility features could be improved. Security posture is solid with HTTPS and standard security headers implemented, but lacks published security policies and incident response information. Privacy compliance is partial, with a privacy policy present but no explicit cookie policy or GDPR compliance indicators visible. Contact information is limited to an email address without phone or physical address details. Overall, the site appears legitimate and trustworthy but could enhance transparency and compliance to improve user trust and regulatory adherence.

P

ProfiSMS s.r.o.

stopsms.cz

60

ProfiSMS s.r.o. operates the StopSMS platform, a specialized service for automated opt-out management from marketing SMS campaigns primarily targeting the Czech and Slovak markets. The company provides a professional solution that integrates toll-free phone lines, microsite domains, and API connectivity to ensure compliance with Czech data protection laws and the latest interpretations by the ÚOOÚ. The website reflects a focused B2B SaaS business model with a niche market position, supported by clear branding and client references. Technically, the site employs modern front-end technologies including Bootstrap, jQuery, and Google services such as reCAPTCHA and Analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and spam protection on forms, although explicit security policies and incident response information are not publicly detailed. Overall, the domain registration data and website content are consistent, indicating a legitimate and stable business entity.

J

Jastrząb Post

jastrzabpost.pl

56

Jastrząb Post is a Polish media website specializing in celebrity news, gossip, and entertainment content. Established in 2013, it serves a general audience interested in Polish and international celebrity culture. The site offers news articles, event coverage, interviews, and video content, monetized primarily through advertising networks. The website is hosted by OVH SAS and uses modern web technologies including React and JavaScript frameworks. It is optimized for both desktop and mobile platforms with a moderate performance profile. Security-wise, the site enforces HTTPS but lacks some recommended security headers, and no explicit privacy or cookie policies were found in the provided content. The domain registration data is consistent with the business profile, indicating legitimacy and stability.

M

MEMOIO

memoio.com

64

MEMOIO is a German-based company offering a secure B2B messaging platform designed for businesses to communicate easily and securely across devices. The website positions MEMOIO as a trusted, German-made solution for professional communication between customers, colleagues, and partners. The business appears to be small-sized, founded in 2014, with a focus on technology and secure communication services. Technically, the website uses modern web technologies including JavaScript and Electron for desktop app support, with a moderate performance profile and basic mobile optimization. Security posture is adequate but could be improved by hardening the Content-Security-Policy and adding additional security headers. Privacy compliance is partially addressed with a privacy policy present, but lacks cookie consent mechanisms. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but has room for improvement in security and privacy compliance.

G

Google LLC

adventistmission.cz

71

The analyzed website is a consent management page hosted on the subdomain consent.youtube.com, part of the YouTube platform owned by Google LLC. It serves as an interface for users to manage privacy and cookie consent in compliance with regulations such as GDPR. The page is professionally designed, mobile-optimized, and uses modern web technologies consistent with Google's standards. It integrates with Google APIs and employs Material Design components for UI consistency. Security is robust with HTTPS enforced and multiple security headers present, reflecting a mature security posture. No vulnerabilities or suspicious activities were detected. The domain is a subdomain of youtube.com, which is a well-established and trusted domain owned by Google, ensuring legitimacy. Overall, the site demonstrates high technical maturity, strong security practices, and good privacy compliance, although explicit links to privacy policies or contact information are not present on this specific page.

The website omworldfinals.com currently displays a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. There is no accessible business or contact information, privacy or cookie policies, or any other content that would provide insight into the company's operations or services. The domain is registered with NameCheap since 2021 and hosted on SiteGround, but the lack of accessible content severely limits the ability to assess the business or technical maturity. The site uses basic HTML and CSS with Google Fonts but no advanced frameworks or analytics are detected. Security posture is weak due to missing DNSSEC and absence of security headers, although HTTPS status cannot be confirmed from the content. Overall, the site is inaccessible for meaningful analysis and presents a low trust profile.

P

Pivovarna Laško Union d.o.o.

union-experience.si

41

Pivovarna Laško Union d.o.o. operates a well-established brewery business in Slovenia with a rich history spanning over 160 years. The website serves as a comprehensive platform promoting their brewery tours, events, product offerings, and brand experiences, targeting adult consumers interested in beer and related hospitality services. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website employs modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit security policies and headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Královská věnná města

vennamesta.cz

56

Královská věnná města is a cultural and historical regional initiative representing nine Czech towns historically gifted by Czech kings to their queens. The website serves as an informational portal promoting tourism, local events, and cultural heritage in these towns. It targets families, schools, seniors, and active visitors interested in history and regional tourism. The business model focuses on regional promotion and cultural engagement rather than commercial sales. Technically, the site is built on OctoberCMS, uses modern web standards, and integrates Mapy.cz for mapping. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced HTTP security headers and incident response disclosures. WHOIS data is missing, which raises some legitimacy concerns, but the professional content and official social media presence support trustworthiness. Overall, the site is a well-maintained regional cultural portal with moderate technical maturity and good privacy compliance.

A

Aspit AS

aspit.no

49

Aspit AS is a Norwegian small-sized company specializing in healthcare journal systems, primarily serving musculoskeletal therapists, psychologists, and psychiatrists in Norway. Their key offerings include the Physica and Psykbase journal systems, supported by dedicated customer portals. The company emphasizes local development in Seljord and green, secure data hosting within Norway. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for analytics and consent management, hosted on a green-certified data center. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the website and WHOIS data align well, indicating a trustworthy and legitimate business presence.

YunoHost is an open-source, volunteer-driven non-profit project founded in 2012 that provides an easy-to-use system for self-hosting digital services on personal or organizational servers. It targets individuals, small organizations, and associations seeking to control their own digital infrastructure with minimal technical knowledge. The platform offers a variety of applications including mail hosting, cloud storage, social networks, and more, emphasizing privacy, decentralization, and digital sovereignty. The website reflects a consistent brand and community-oriented approach with multilingual support and active donation campaigns. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, using fonts like Source Sans 3 and icon sets such as Font Awesome. It is hosted by OVH sas, a reputable provider, and the domain is well-established since 2012. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No CMS or major frameworks are explicitly detected. The site lacks advanced security headers and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site uses HTTPS and has domain status protections against unauthorized transfers or deletions. However, it lacks explicit security headers and cookie consent mechanisms, and no vulnerability disclosure or incident response contacts are published. No sensitive data exposure or vulnerabilities are evident in the content. The overall security posture is moderate but could be enhanced by adopting best practices such as enabling DNSSEC, adding security headers, and publishing clear privacy and security policies. Overall, YunoHost presents a trustworthy and professional presence consistent with its open-source community-driven mission. The site is safe, free of adult or questionable content, and provides clear information about its services and community. Strategic recommendations include improving privacy compliance, enhancing security configurations, and publishing vulnerability disclosure information to strengthen trust and security culture.

L

LogTech

logtech.cz

60

LogTech is a Czech Republic-based company specializing in the integration of logistics technologies, including conveyors, sorting systems, software, and robotics, aimed at optimizing warehouse operations. The company leverages nearly three decades of experience to provide tailored automation and material handling solutions supported by comprehensive service and technical support. Their website reflects a professional and consistent brand presence targeting industrial and logistics sectors seeking efficiency improvements. Technically, the website employs modern web standards with responsive design, Google Fonts, and SVG icons, ensuring good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. From a security and compliance perspective, the site includes GDPR and cookie policies with consent mechanisms, but lacks visible incident response contacts, vulnerability disclosure, or security certifications. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy despite the professional site content and clear company contact information. Overall, the website is functional, professional, and privacy-conscious but would benefit from enhanced security practices and domain registration transparency to improve trust and compliance.

O

Obecní knihovna v Zastávce

knihovnazastavka.cz

57

Obecní knihovna v Zastávce operates as a local public library serving the community of Zastávka, Czech Republic. The website provides information about the library's services, including book lending, a reader portal, e-books, and a return box for after-hours book returns. The library is municipally operated and targets local residents including adults, students, and children. The site is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for hosting and content delivery. It employs HTTPS and a cookie consent mechanism to enhance security and privacy compliance. However, the absence of a privacy policy and WHOIS data limits full trust verification. The website is well-structured, mobile-optimized, and provides clear contact information, contributing to a positive user experience.

O

Obec Zastávka

zastavka.cz

54

Obec Zastávka operates as a local government entity serving approximately 2,500 residents in the Brno-venkov district of the Czech Republic. The website provides comprehensive municipal information including news, public notices, official documents, and community services. The site is well-structured, accessible, and includes features such as weather updates and map integration to enhance user experience. The business model focuses on public service and information dissemination to local citizens and visitors. Technically, the website is built on WordPress CMS using the LSVR TownPress theme, with integrations of Google Maps and OpenWeatherMap APIs. It employs modern web technologies including jQuery and responsive design, ensuring good performance and mobile optimization. Accessibility is addressed through a dedicated toolbar offering contrast and font adjustments. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. While explicit security headers and incident response policies are not published, no critical vulnerabilities or exposures were detected. The domain registration is consistent and longstanding, supporting the site's legitimacy. Overall, the website demonstrates a solid digital presence for a municipal government, balancing usability, compliance, and security. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

B

Bridgy

brid.gy

63

Bridgy is a specialized technology service that connects websites to social media platforms, enabling functionalities such as likes, reposts, mentions, and cross-posting. The service targets website owners and social media users seeking to integrate their web presence with social media interactions. The business operates as a small, niche player with an open-source approach, evidenced by its GitHub presence and transparent service offerings. The website is well-branded and consistent, with a clear focus on social media integration technology. Technically, the website employs standard web technologies including HTML5, CSS with Bootstrap for responsive design, and JavaScript. Hosting appears to be managed via Google Cloud DNS infrastructure. The site is mobile-optimized and structured for good SEO, though accessibility features are basic. Performance is moderate, with no major technical issues detected in the provided content. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected in the provided data, indicating room for improvement. The absence of privacy, cookie, and terms of service policies reduces privacy compliance scores. No contact information or incident response details are provided, limiting transparency. No vulnerabilities or suspicious content were found. Overall, Bridgy presents a trustworthy and professional web service with a solid technical foundation but could enhance its security posture and privacy compliance by adding relevant policies, security headers, and contact information. The risk level is low, but improvements in these areas would strengthen user trust and regulatory compliance.

C

Cyberplace

cyberplace.social

67

Cyberplace.social is an independent Mastodon social media server focused on cybersecurity, fandom, video games, and technology communities. It operates within the fediverse, providing a decentralized platform for users interested in these topics. The site is administered by a known individual, Kevin Beaumont (@GossiTheDog), and maintains an active user base of approximately 937 monthly active users. The platform leverages Mastodon version 4.4.7 and modern web technologies such as React and ES modules, ensuring a contemporary user experience with mobile optimization and good navigation clarity. From a technical perspective, the site demonstrates moderate performance and basic SEO and accessibility features. It uses HTTPS, but no explicit security headers were detected in the provided data, suggesting room for improvement in security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service pages. No contact emails or phone numbers are publicly listed, which is common for federated social platforms prioritizing user privacy. The security posture is adequate but could be enhanced by implementing recommended security headers, publishing security policies, and improving privacy compliance. The WHOIS data is privacy protected, which is typical for social media platforms, and does not raise immediate legitimacy concerns given the known administrator and active community. Overall, Cyberplace.social presents as a legitimate, niche social media platform with a focus on cybersecurity and related interests, but with opportunities to strengthen its security and privacy posture.

B

BootstrapMade

bootstrapmade.com

68

BootstrapMade is a specialized provider of free and premium Bootstrap templates and themes, catering primarily to web developers, startups, and businesses seeking professional and responsive website designs. Established in 2013, the company has built a strong market presence with over 9 million downloads and a broad portfolio of templates across multiple industries. Their business model revolves around offering both free templates with footer credits and premium templates with advanced features and dedicated support, supplemented by a visual Bootstrap Template Builder for premium users. Technically, the website is built on modern web standards using Bootstrap 5, HTML5, CSS3, and JavaScript, hosted and protected by Cloudflare infrastructure. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. Analytics and tracking are implemented via Google Tag Manager and Cloudflare Insights, reflecting a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS and hosting, providing a solid SSL configuration. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not visibly implemented, and no public security policy or incident response contacts are provided. Forms use secure POST methods, and no sensitive data exposure or vulnerabilities were detected in the HTML content. Overall, BootstrapMade presents a trustworthy and professional online presence with high-quality content and technical maturity. The absence of direct contact emails or phone numbers is mitigated by a contact form. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

O

One by Allegro

onedelivery.cz

63

One by Allegro is a logistics and parcel delivery service operating primarily in the Czech Republic and internationally, affiliated with the Allegro brand. The company offers multiple delivery methods including courier delivery, self-service parcel boxes (One Box), and pickup points (One Point), targeting e-shops, businesses, and individual recipients. The website is professionally designed, mobile-optimized, and provides shipment tracking capabilities. Technically, the site uses modern web technologies and Allegro's proprietary frameworks, with good SSL and basic security headers. However, it lacks explicit privacy and cookie policies, and no incident response or security contact information is provided, which are areas for improvement. The domain registration is recent but consistent with the business launch, and the WHOIS data aligns with the website's claims, supporting legitimacy. Overall, the site demonstrates a moderate to good security posture and business credibility but should enhance privacy compliance and transparency.

A

AREON s.r.o.

kamenynaburni.cz

66

The website www.kamenynaburni.cz represents a professional real estate development project named 'Kameny Na Burni' located in Slezská Ostrava, Czech Republic. The business behind the project is AREON s.r.o., a small-sized real estate developer under the parent company ALUMONT HOLDING a.s. The site offers detailed information about new apartments for sale, including visualizations, construction updates, and contact options. The target audience is potential home buyers seeking premium residential properties in a quiet urban setting. Technically, the website employs modern web technologies such as Svelte, JavaScript ES modules, and integrates Google Analytics and CookieScript for tracking and consent management. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms and contact forms with explicit consent checkboxes. However, explicit security headers and detailed security policies are absent, and WHOIS data for the domain is missing, which slightly reduces trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced transparency in domain registration and security disclosures.

A

AL Pergoly s.r.o.

al-pergoly.cz

76

AL Pergoly s.r.o. is a Czech manufacturer specializing in high-quality aluminum bioclimatic pergolas, offering free measurement and installation services across the Czech Republic. The company positions itself as a local expert in custom pergola manufacturing with a focus on quality and customer service. The website reflects a professional and consistent brand image, targeting residential and commercial customers interested in durable outdoor structures. Technically, the website leverages modern web technologies including AWS hosting, JavaScript frameworks, and cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS and Content-Security-Policy headers implemented, though additional headers could enhance protection. Privacy compliance is addressed through a comprehensive cookie consent mechanism, aligning with GDPR requirements. Overall, the website is well-structured, user-friendly, and trustworthy, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing more explicit business contact details to improve transparency and compliance.

altMBA LLC operates a niche online leadership workshop aimed at professionals and leaders seeking transformative development experiences. The website presents a clean, focused message emphasizing its 9 years of operation and global alumni network. The business model centers on delivering leadership education and fostering an alumni community, positioning itself as a specialized provider in the education sector. The site is simple and static, with minimal interactive features and no evident e-commerce or complex platform integrations. Technically, the website uses basic HTML5, CSS, and JavaScript with embedded video content. There is no evidence of a CMS or advanced frameworks, and hosting details are limited to DNS provider information. Performance and mobile optimization are basic but adequate for the site's scope. SEO and accessibility features are minimal, and no analytics or tracking technologies are detected, indicating a low digital maturity level. From a security perspective, the site lacks critical security headers and does not indicate HTTPS usage, which is a significant concern. The absence of privacy, cookie, and terms of service policies suggests compliance gaps with GDPR and other privacy regulations. Contact information is limited to a single email address, with no phone or physical address provided. The domain registration is stable and consistent with the business history, supporting legitimacy. Overall, the security posture is weak and requires improvements to protect user data and enhance trust. The overall risk assessment highlights the need for immediate implementation of HTTPS, security headers, and privacy policies to meet modern security and compliance standards. Strategic recommendations include enhancing security configurations, adding comprehensive privacy and cookie policies, and improving transparency with users. These steps will strengthen the website's trustworthiness and align it with best practices in security and privacy.

E

ExxonMobil

exxonmobil.co.uk

72

ExxonMobil is a leading global energy company with a significant presence in the United Kingdom, particularly in the offshore oil and gas sector. The website highlights its joint operations in the North Sea and emphasizes its commitment to sustainability and community investment. The digital infrastructure is modern, leveraging advanced web technologies and compliance tools such as OneTrust for cookie consent and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting the company's enterprise-level stature. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not prominently published. Overall, the website represents a mature digital presence consistent with a major multinational corporation.

E

ExxonMobil

exxonmobil.it

73

ExxonMobil's Italy corporate website presents a professional and comprehensive digital presence focused on the company's energy, lubricants, and chemical business sectors. The site targets a broad audience including business partners, customers, and potential employees, emphasizing sustainability, innovation, and corporate responsibility. The website is well-branded and consistent with ExxonMobil's global corporate identity. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and OneTrust for cookie consent, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and vulnerability disclosure information are absent. The WHOIS data for the subdomain is unavailable, which is typical for corporate subdomains managed under a parent domain. Overall, the site demonstrates a mature digital infrastructure with a high level of professionalism and trustworthiness.

O

Online Apotheke Europa B.V.

diskrete-apotheke24.de

49

The website diskrete-apotheke24.de operates as an online pharmacy specializing in the sale of erectile dysfunction medications such as Viagra, Cialis, and Levitra. It targets adult male customers primarily in Germany and Europe, offering discreet, legal, and duty-free pharmaceutical products. The business model is e-commerce focused, with an emphasis on convenience, privacy, and customer satisfaction. The site presents itself professionally with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies including Bootstrap and Google Fonts, and is hosted behind Cloudflare DNS for performance and security. However, there is no evidence of advanced CMS or extensive third-party integrations. Security posture is moderate; while HTTPS is implied, no explicit security headers or incident response policies are visible. Privacy compliance is basic with cookie consent implemented and a privacy policy linked in the impressum page. Overall, the site is functional and trustworthy for its niche but could improve security and compliance transparency.

P

Portaflex s.r.o.

portaflex.cz

56

Portaflex s.r.o. is a Czech Republic based company specializing in the supply and custom manufacturing of building plastics, fittings for doors and gates, and advertising materials. Established since 1997 with a domain registered since 2001, the company serves primarily B2B clients in construction, industrial, and advertising sectors. Their key offerings include lamella curtains, swing gates, sanitary partitions, ventilated facades, and CNC machining services. The website reflects a stable regional player with consistent branding and clear product/service descriptions. Technically, the site uses ISSA CMS with Bootstrap and Google Tag Manager, providing a moderately fast and mobile-optimized experience. Security posture is good with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Privacy compliance is adequate with a linked cookie and privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences.

S

SATJAM, s.r.o.

satjam.cz

57

SATJAM, s.r.o. is a well-established Czech manufacturer specializing in lightweight metal roofing products, including roof coverings, gutters, trapezoidal sheets, and related accessories. The company holds national quality certifications such as Česká kvalita and Zlatá taška, underscoring its market leadership and product excellence. Their website targets construction professionals and end customers seeking durable and modern roofing solutions, offering a comprehensive product range and expert support. Technically, the website is built on ISSA CMS, employs modern web standards, and integrates multiple analytics and marketing tools like Google Analytics (Universal and GA4), Google Tag Manager, and Seznam retargeting, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts, suggesting room for improvement in transparency and security posture. Overall, the domain's WHOIS data confirms legitimacy and long-term operation, supporting trust in the business. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining compliance with evolving privacy regulations.

S

SuperSaaS

supersaas.se

60

SuperSaaS is a well-established Swedish technology company providing a versatile and customizable online booking system tailored for a wide range of industries and business sizes. The platform supports appointment scheduling, resource booking, and integrates with popular payment gateways and third-party services, serving over 190,000 customers globally. The website reflects a mature digital presence with comprehensive content, strong branding, and multilingual support. Technically, the site employs modern web standards, is mobile-optimized, and uses reputable analytics tools. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the exact subdomain is noted but does not detract from the overall legitimacy given the brand's global footprint and consistent domain usage. Overall, SuperSaaS presents a trustworthy and professional online presence with strong market positioning in the SaaS booking system niche.

S

SuperSaaS

supersaas.dk

60

SuperSaaS is a Danish-based SaaS company providing a comprehensive online booking and scheduling platform tailored for a wide range of industries and use cases. The website demonstrates a mature digital presence with extensive content, multiple language support, and integration capabilities with popular services such as Google Calendar, Microsoft 365, PayPal, Stripe, and Zoom. The platform targets businesses and organizations seeking to automate appointment scheduling, payment processing, and resource management, positioning itself as a flexible and user-friendly solution with a strong global customer base exceeding 205,000 users. Technically, the website employs modern web standards including HTML5, CSS, and JavaScript, with asynchronous loading of analytics and tracking scripts such as Google Tag Manager and Google Analytics. The site is mobile-optimized and accessible, featuring SVG graphics and video content to enhance user engagement. Security is well-handled with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and a public security policy are absent. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. However, the lack of WHOIS data for the domain supersaas.dk limits the ability to fully verify domain legitimacy and registrant information, which slightly impacts trust assessment. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. The absence of direct contact emails or phone numbers on the homepage is noted but does not significantly detract from overall credibility. Overall, SuperSaaS presents a professional, trustworthy, and technically sound online presence suitable for its business model. The main risk lies in the unavailable WHOIS data, which should be addressed to improve transparency and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and providing clearer company contact information to further strengthen user confidence and compliance posture.