Security Directory

I

Italian German Exhibition Company Mexico

industrialtransformation.mx

46

Industrial Transformation Mexico (ITM) is a prominent industry event organizer focusing on Industry 4.0, manufacturing, energy, and transportation sectors. The website serves as a comprehensive platform for event information, exhibitor profiles, conference programs, and sponsorship opportunities. It targets industry professionals, buyers, exhibitors, and students, positioning itself as a leading industrial event in Mexico with international reach. The technical infrastructure is modern, leveraging Astro and React frameworks, with integrated analytics and marketing pixels from major platforms such as Google, Facebook, TikTok, and LinkedIn. The site is well-designed, mobile-optimized, and provides a rich user experience with clear navigation and professional content. Security posture is strong with HTTPS and security headers, but lacks explicit privacy and cookie policies, which impacts privacy compliance. WHOIS data confirms the legitimacy of the domain and its alignment with the business identity. Overall, the site is credible and professional but should enhance privacy compliance and incident response transparency.

M

mission‹one› GmbH

mission-one.de

66

mission‹one› GmbH is a German digital agency specializing in email marketing, software engineering, and loyalty solutions. The company operates as part of the port-neo Group and serves business clients seeking to enhance customer dialog and marketing effectiveness. Their market position is supported by a professional website showcasing a broad portfolio of services and notable client partnerships. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes cookie consent mechanisms aligned with GDPR. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response information are lacking. Overall, the website reflects a mature digital presence with good privacy compliance and business credibility.

O

OBR služby, s.r.o.

obr-odpady.cz

41

OBR služby, s.r.o. is a small Czech company specializing in container transport, waste collection, recycling, and sale of construction materials. Operating since 1993, it serves the Kamenice region and surrounding areas with a focus on ecological waste disposal and material transport. The website presents clear business information, including phone contacts and physical address, and offers multiple service categories such as container rental, raw material purchase, and waste storage. The company maintains a local market position with a practical business model centered on transportation and waste management services. Technically, the website uses common JavaScript libraries like jQuery and Fancybox, along with Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and cookie consent mechanisms. No CMS or hosting provider details are evident. The website is well-structured with clear navigation and professional design, though SEO and accessibility could be improved. From a security perspective, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but no explicit security headers were detected in the provided data. There is no evidence of vulnerable libraries or exposed sensitive data. Privacy policy and terms of service pages exist, indicating some compliance with GDPR, but cookie consent is missing. WHOIS data is unavailable or privacy protected, which reduces transparency but is common for small businesses. No signs of WAF or blocking mechanisms were found, and the site content is safe and business-focused. Overall, the website is functional, professional, and trustworthy for its business scope, but improvements in security headers, privacy compliance (cookie consent), and technical modernization would enhance its posture and user trust.

M

Monivet s.r.o.

monivet.cz

39

Monivet s.r.o. is a Czech company specializing in the construction of wooden houses, specifically sruby (log houses) and roubenky (timber-framed houses) built on a turnkey basis. The company offers a range of complementary wooden structures such as garden altars, saunas, and dog houses. Their market position is that of a specialized small business with a focus on quality craftsmanship and traditional techniques. The website is professionally designed with good content relevance and clear navigation, targeting customers interested in wooden residential and garden buildings. Technically, the site uses legacy JavaScript libraries like jQuery 1.8.3, Google Analytics, and Google Tag Manager for tracking, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and updated libraries. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

T

Total Board Shop

totalboardshop.cz

56

Total Board Shop is a well-established retail business specializing in skateboarding and snowboarding equipment, streetwear, and custom textile printing services. Founded in 1994, it operates both a physical store in Prague and an online e-commerce platform. The company targets enthusiasts of skate and snow culture, offering a curated product range and supporting local talent. Technically, the website is built on WordPress with WooCommerce, utilizing modern JavaScript libraries and GDPR-compliant cookie management. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response details. Overall, the site is professional, user-friendly, and trustworthy, with good SEO and social media integration.

P

Printerka J&R s.r.o.

printerka.cz

43

Printerka J&R s.r.o. operates a niche event service business in the Czech Republic, specializing in instant photo printing devices for events such as corporate gatherings, weddings, festivals, and parties. The company offers both standalone photo printing solutions and integrated photo booths, targeting event organizers and agencies. The website presents a professional and consistent brand image with clear service descriptions and partner links, although it lacks detailed business founding information and comprehensive contact details. Technically, the site uses a moderate technology stack including jQuery, Google Fonts, Fancybox, Google Analytics, and Facebook Pixel, with good mobile optimization and SEO practices. However, the use of an outdated jQuery version and absence of security headers represent potential security risks. The security posture is adequate with HTTPS usage but could be improved by adding security headers and updating libraries. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap given GDPR requirements. Overall, the website is safe, accessible, and functional but would benefit from enhanced security and privacy measures to improve trust and compliance.

B

BurnIT, s.r.o.

dtonline.cz

40

DTonline.cz is a Czech fan portal dedicated to the collectible card game Doom Trooper from the Mutant Chronicles universe. Operated by BurnIT, s.r.o., the site provides a card catalog, tournament announcements and reports, a fan magazine, and a simple game. It targets Czech-speaking fans and players, serving as a community hub rather than a commercial enterprise. The website is modest in scale and content quality is good for its niche audience. Technically, the site uses standard web technologies including jQuery and Google Analytics, but lacks modern CMS or advanced frameworks. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance elements such as cookie and privacy policies. No social media presence or direct contact emails are provided, limiting user engagement channels. Overall, the site is legitimate and consistent with its stated purpose but would benefit from improved security and privacy practices.

M

Mikroregion Roketnice

roketnice.cz

50

Mikroregion Roketnice operates as a local government association representing eight municipalities in the Czech Republic, providing official information, documentation, and promoting regional tourism and cultural activities. The website serves residents, local officials, and visitors with relevant content and contact details. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and accessible user experience, with a cookie consent mechanism indicating GDPR compliance awareness. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit incident response policies. The absence of WHOIS data limits domain trust assessment, though the website content and structure suggest legitimacy as a government entity. Overall, the site is professional, accessible, and functional but would benefit from enhanced security practices and clearer domain registration transparency.

S

Synetix s.r.o.

synetix.cz

42

Synetix s.r.o. is a Czech Republic-based small technology company specializing in web design, internet shops, custom internet applications, and hosting services. Their website showcases a portfolio of client references across various industries, indicating a service-oriented business model focused on local and regional clients including municipalities and businesses. The company offers a proprietary CMS system and related modules, emphasizing tailored internet solutions and project maintenance. The website content is professional and well-structured, targeting business clients seeking comprehensive internet presence services. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and plugins like jCarousel and Lightbox, which may pose security risks due to outdated versions. The site is served over HTTPS and includes Google Analytics for visitor tracking, but lacks modern security headers and privacy compliance disclosures. Mobile optimization and accessibility are basic, with room for improvement in SEO and performance. From a security perspective, the site enforces HTTPS but lacks critical security headers and uses outdated libraries with known vulnerabilities. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and transparency, impacting overall trustworthiness. Overall, the website is functional and professional but requires updates to its technical stack, security posture, and privacy compliance to meet modern standards and enhance trust. Strategic improvements in these areas will reduce risk and improve user confidence.

M

Město Slavkov u Brna

slavkovak.cz

46

Slavkovak.cz is a local leisure and tourism portal operated by the city of Slavkov u Brna, Czech Republic. It provides residents and visitors with news, event listings, information on local associations, gastronomy, accommodation, and tourist destinations. The site serves as an official community resource with a focus on promoting local culture and tourism. The business model is informational and community-driven, supported by the city administration. The website is well-branded and consistent, targeting a general audience interested in local events and tourism. Technically, the site uses a modern tech stack including UIkit for UI components, jQuery, Google Tag Manager, Google Analytics, Facebook SDK, and mapping APIs from Mapy.cz and Leaflet. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. The presence of cookie consent and GDPR documentation indicates awareness of privacy compliance, though privacy policy details are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit vulnerability disclosure or incident response policies. No WHOIS data was found, which raises concerns about domain registration legitimacy, though the site content and footer indicate official city operation. Overall, the site is trustworthy but would benefit from improved transparency and security hardening. The risk assessment is moderate with recommendations to improve security headers, add terms of service and security policies, and verify domain registration status to enhance trust and compliance.

Ú

Újezdní úřad Březina

vojujezd-brezina.cz

47

The website vojujezd-brezina.cz serves as the official online presence for the Military Training Area Březina, a government-operated military district in the Czech Republic. It provides authoritative information regarding the military district's administration, access restrictions, safety protocols, and official announcements. The site targets a broad audience including the general public, visitors, government officials, and military personnel. Its business model is focused on public information dissemination and regulatory communication within a government context. Technically, the website employs a traditional HTML/CSS/JavaScript stack with the vismo CMS platform. It integrates Google Translate for multilingual support and maintains a moderate performance profile with basic mobile optimization and accessibility features. SEO and modern web practices are implemented at a basic level, with room for enhancement. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal security or incident response policy. Cookie policies exist but lack active consent mechanisms. No vulnerabilities or malicious content were detected, indicating a generally secure posture appropriate for a government informational site. Overall, the website is trustworthy and professional, though improvements in security headers, privacy compliance mechanisms, and mobile accessibility would enhance its digital maturity and user experience. The domain's WHOIS data confirms legitimacy and long-standing registration consistent with the site's official status.

V

Velitelství výcviku - Vojenská akademie

vavyskov.cz

64

Velitelství výcviku - Vojenská akademie ve Vyškově is a Czech government military educational institution focused on training and educating military personnel including active reserves, non-commissioned officers, and university students. The website serves as an official communication channel providing news, event information, and resources related to military training. The institution holds a key position in the Czech military education sector, offering specialized courses and exercises. Technically, the website is built on Drupal 7 with Bootstrap 3, featuring responsive design and moderate performance. It employs Matomo Analytics for visitor tracking and includes a cookie consent mechanism, though lacks a published privacy policy and terms of service. Security posture is good with HTTPS enforced but could be improved by adding security headers and updating CMS components. WHOIS data is unavailable, which slightly impacts trust but the official nature of the site and contact details support legitimacy. Overall, the site is professional, content-rich, and trustworthy for its intended audience.

P

PPJ s.r.o.

leano.cz

50

LEANO.cz is a Czech Republic-based price comparison platform specializing in pharmacy, cosmetic, and health-related products. Operated by PPJ s.r.o., the website offers consumers a way to find the best prices across multiple online pharmacies and cosmetic stores. The platform features extensive categorization, city-specific pharmacy listings, and editorial content such as reviews and articles to support informed purchasing decisions. The business model primarily revolves around affiliate marketing and providing a convenient shopping list feature for users. Technically, the website employs modern web technologies including jQuery, the Nette framework, Google Tag Manager, and MailerLite for marketing automation. It is well-optimized for mobile devices and includes SEO best practices such as structured data markup. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, the absence of WHOIS registration data and lack of explicit contact information or security policy pages slightly reduce trustworthiness. Overall, LEANO.cz presents a professional and user-friendly platform with moderate technical maturity and a solid security posture.

N

Nemocnice Vyškov, příspěvková organizace

nemvy.cz

61

Nemocnice Vyškov, příspěvková organizace, is a regional healthcare provider in the Czech Republic offering a wide range of medical services including inpatient and outpatient care, oncology, laboratories, radiodiagnostics, emergency services, and pharmacy. The website targets patients and the general public, providing comprehensive information about departments, patient services, and public information. The organization positions itself as a trusted regional healthcare institution with certifications such as Baby Friendly and others, enhancing its credibility. Technically, the website employs modern web technologies including Google Web Fonts and Font Awesome icons, with a responsive design optimized for mobile devices and accessibility. The site uses HTTPS with a good SSL configuration, though the Content-Security-Policy header is empty and could be improved. The site includes cookie consent mechanisms and privacy policies compliant with GDPR, reflecting a mature approach to privacy and user consent. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contact information and does not publish a security.txt file, which could enhance transparency and security posture. The absence of WHOIS data reduces trust in domain legitimacy, but the website content and structure suggest a legitimate public healthcare entity. Overall, the website is professional, well-structured, and trustworthy, with room for improvement in security header implementation and domain registration transparency. The risk level is moderate, primarily due to missing WHOIS data and minor security header gaps.

M

Městský úřad Vyškov

novyvyskov.cz

59

The website www.novyvyskov.cz serves as an official municipal information portal for the city of Vyškov, Czech Republic, focusing on urban development projects linked to the modernization of the railway infrastructure and related city improvements. It provides residents and stakeholders with detailed information about ongoing and planned construction projects, investment plans, and urban revitalization efforts. The site is positioned as a trusted source of local government communication and community engagement. Technically, the site is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, Leaflet.js for mapping, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good design and navigation clarity. However, a visible license error in the dynamic map component slightly detracts from the user experience. The site employs cookie consent mechanisms and maintains a comprehensive privacy policy, indicating a good level of privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks visible advanced security headers and explicit security or incident response policies. The absence of WHOIS data for the domain is a notable concern, reducing the overall trust score. Despite this, the official municipal branding and partner logos lend credibility to the site. No malicious or adult content is present, and the site appears safe for general audiences. Overall, the site is a well-constructed municipal information resource with moderate technical maturity and a generally good security posture. Addressing the WHOIS data gap, fixing the map license issue, and enhancing security headers would improve trust and security standing significantly.

T

Turistické informační centrum Vyškov

ticvyskov.cz

44

Turistické informační centrum Vyškov is a local government-operated tourist information center serving the city of Vyškov, Czech Republic. The website provides comprehensive information about local attractions, events, cultural and sports activities, and services for tourists. It targets visitors and tourists seeking guidance and information about the region. The business model is public service-oriented, focusing on promoting tourism and local culture. The site maintains a consistent brand presence with official city links and active social media channels.

M

Mateřská škola Jiříkovice

msjirikovice.cz

46

Mateřská škola Jiříkovice operates as a local preschool educational institution in the Czech Republic, providing early childhood education and related services such as childcare and school meals. The website serves primarily parents and guardians seeking information about the school, its operations, and events. The institution is positioned as a small, community-focused educational provider with a clear local presence and official contact details. Technically, the website is built on a CMS platform by Galileo Corporation, utilizing common web technologies like jQuery, Bootstrap, and Leaflet for maps. The site is mobile-optimized and accessible, with an accessibility certification indicating compliance with inclusive design standards. Security posture is moderate, with HTTPS in use and cookie consent implemented, but lacking explicit privacy policies and security headers. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security best practices are recommended.

ZŠ Jiříkovice is a small local primary school located in Jiříkovice, Czech Republic, providing education for the first stage of primary schooling. The institution offers additional services such as a school daycare, canteen, and extracurricular activities, targeting primarily parents and students in the local community. The website reflects a well-maintained digital presence with regular updates on school news and events, supporting effective communication with its audience. Technically, the site is built on WordPress with common libraries like jQuery and FontAwesome, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and privacy mechanisms are recommended. Overall, the site demonstrates a trustworthy and professional online representation of the school, with clear contact information and compliance with GDPR through a dedicated page. Strategic enhancements in privacy consent and security policies would further strengthen its compliance and user trust.

T

TVVU s.r.o.

povodnovyportal.cz

46

TVVU s.r.o. operates the Povodňový portál, a specialized website dedicated to flood management solutions in the Czech Republic. The company provides digital flood plans, flood warning systems, monitoring services, and mobile flood barriers, targeting government agencies and emergency services. The website reflects a niche market position with strong partnerships with Czech hydrometeorological and water management institutions. Technically, the site uses a basic but modern tech stack including Google Analytics and Bootstrap-like CSS classes, hosted via WEDOS. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with no visible security headers and no incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

K

KTS Ekologie s.r.o.

kts-ekologie.cz

47

KTS Ekologie s.r.o. is a Czech company specializing in ecological waste management services, including waste collection, disposal, and compost sales. The company primarily serves municipalities, businesses, and citizens within the Czech Republic, positioning itself as a regional service provider with a focus on environmental sustainability. The website reflects a professional and consistent brand image, with clear contact information and integration of social media for community engagement. The presence of EU-funded projects further supports the company's legitimacy and public sector involvement. Technically, the website is built on Drupal 10 with Bootstrap 5, ensuring a responsive and modern user experience. The site loads with moderate performance and includes accessibility and SEO best practices, although some improvements could be made in accessibility and performance optimization. The hosting provider is inferred to be Webglobe based on DNS data, aligning with the domain registration information. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, there is a lack of visible security headers and no published security or incident response policies, which are areas for improvement. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent mechanism and vulnerability disclosure reduces compliance completeness. Overall, the security posture is moderate but could be enhanced with additional policies and technical controls. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include implementing cookie consent, publishing security policies, adding security headers, and conducting regular security audits to strengthen the security posture and compliance. These steps will enhance trust and protect both the company and its users.

G

Groupe Arcade-VYV

groupearcadevyv.fr

45

Groupe Arcade-VYV is a major French real estate group specializing in affordable and health-centered housing solutions. It operates as a leader in the Logement Santé sector, providing a comprehensive range of housing and residence services for families, seniors, youth, and vulnerable populations, including private sector involvement. The website reflects a mature digital presence with professional design, structured data, and integration of modern analytics tools such as Matomo and Google Tag Manager. However, the absence of explicit privacy and cookie policies, as well as missing WHOIS data, indicates areas for improvement in transparency and compliance. Security posture is generally good with HTTPS enabled, but lacks some security headers and formal vulnerability disclosure mechanisms. Overall, the website is trustworthy and well-positioned but would benefit from enhanced privacy compliance and security best practices.

M

Mutuelle Mare Gaillard

mutuelle-mmg.com

58

Mutuelle Mare Gaillard is a well-established mutual health insurance company based in Guadeloupe, France, with a history dating back to 1933. The company offers a broad range of health insurance products tailored for individuals, families, seniors, and professionals, emphasizing personalized service and regional presence in the Antilles-Guyane area. Their digital presence is modern, leveraging Next.js and React technologies, with a mobile-optimized website and active social media engagement. The website features clear navigation, professional design, and relevant content aligned with their business model. Security posture is solid with HTTPS enforcement and domain protection statuses, though there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Overall, the website reflects a credible and trustworthy business with good privacy compliance and user experience.

M

Mgen - Espace Public

mgen.fr

64

MGEN is a leading mutual insurance organization in France specializing in health, insurance, and retirement services primarily for public service agents, employees, students, and retirees. The website reflects a mature digital presence with comprehensive service offerings including health insurance, life insurance, savings plans, and various specialized insurance products. The site is well-branded and consistent with the parent company Groupe VYV, indicating a strong market position. Technically, the site uses Drupal CMS with modern frameworks like Bootstrap and integrates privacy and analytics tools such as TagCommander and Piano Analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. WHOIS data is unavailable due to AFNIC policies, but the site’s content and structure strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Harmonie Mutuelle

harmonie-mutuelle.fr

68

Harmonie Mutuelle is a large French mutual insurance company specializing in health insurance, provident schemes, and complementary retirement savings for individuals, entrepreneurs, companies, and the social and solidarity economy (ESS). It is part of the Groupe VYV and positions itself as a collective advancement mutual. The website is professionally designed, well-structured, and targets a broad audience including private individuals, entrepreneurs, public sector employees, and social economy actors. Key services include health mutual insurance, provident plans, and retirement savings products. The company maintains a strong market position in France with a clear brand identity and consistent messaging.

B

Bubble Group, Inc

valorimetre.com

67

Bubble Group, Inc operates Bubble.io, a leading no-code platform that enables users ranging from first-time founders to experienced engineers to build, design, and launch web applications rapidly without coding. The platform supports SaaS, marketplaces, and CRM applications hosted on Bubble's cloud infrastructure. The website content and metadata confirm a strong market position as a pioneer in visual programming and no-code development tools. Technically, the site leverages modern JavaScript libraries, Google Fonts, and animation frameworks, hosted on Cloudflare with robust SSL encryption. The presence of multiple analytics and marketing tools indicates a mature digital marketing strategy. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

C

Calizy

calizy.com

58

Calizy is a technology company specializing in intelligent online appointment scheduling and shared calendar solutions tailored for teams and companies, particularly in sectors such as insurance, financial services, subcontracting, and specialized distribution. The company offers a SaaS platform that integrates with major calendar and CRM systems to optimize appointment allocation, synchronization, and customer engagement. The website reflects a professional and consistent brand presence with detailed service descriptions and client trust indicators. Technically, the website is built on modern frameworks including Next.js and React, hosted on reputable providers with media assets served via DigitalOcean Spaces. The site employs multiple analytics and marketing tools such as Matomo, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, indicating a moderate level of user tracking. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and has some security best practices in place, but lacks explicit security headers and published security policies or incident response contacts. The domain registration is consistent and trustworthy, with no privacy protection masking ownership, and domain age aligns with the company's founding date. Overall, Calizy's website presents a solid business and technical foundation with room for improvement in privacy compliance documentation and security policy transparency. The risk level is moderate with no critical vulnerabilities detected.

M

MAIF

maif.fr

67

MAIF is a major French insurance company providing a wide range of insurance products and services for individuals, professionals, associations, and public entities. Their website offers comprehensive information on auto, home, health, life insurance, and financial products, along with online tools for quotes and personal account access. The company maintains a strong market position in France with consistent branding and a professional digital presence. Technically, the site uses modern web technologies including JavaScript frameworks, a CMS (Jahia), and personalization tools like Kameleoon. The website is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are not visible. WHOIS data is unavailable, which slightly impacts trust but the overall site quality and branding strongly support legitimacy. No WAF or blocking mechanisms were detected, allowing full content access.

The website amenworld.com currently presents an extremely minimalistic and non-informative front with only the text 'amen' visible. There is no metadata, no structured data, no contact information, and no visible business description or services. The domain is registered since 1999 with Network Solutions, indicating a long-standing registration, but the website itself lacks any meaningful content or digital maturity. Technically, the site does not demonstrate modern web practices, lacks HTTPS information, and shows no evidence of security or privacy compliance mechanisms. The security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present to indicate GDPR compliance. Overall, the site appears inactive or placeholder, resulting in a low trust and credibility score.

The website casino.ua is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents direct access to the site's content, limiting the ability to analyze business, security, and compliance details. The domain name strongly suggests the site operates in the gambling sector, targeting adult users. The technical infrastructure includes Cloudflare's security services, indicating a focus on protection against automated threats. However, no privacy policies, cookie consent mechanisms, terms of service, or contact information are accessible, which raises concerns about compliance and transparency. The security posture benefits from Cloudflare's WAF but lacks visible security headers or detailed SSL configuration data. Overall, the site presents a moderate legitimacy profile but requires content access for a full evaluation.

U

Unabridged Software

unabridgedsoftware.com

55

Unabridged Software is a US-based software consultancy specializing in custom software development primarily using Ruby on Rails and JavaScript. The company positions itself as a small but experienced consultancy with nearly a decade of client relationships and expertise across diverse industries. Their key services include blueprint sessions, full stack web development, technical consulting, and engineering management consulting. The website is professionally designed, mobile optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the website leverages modern technologies including Google Fonts, Google Analytics, and Netlify Identity for authentication, hosted likely on Netlify. The site performs moderately well with good SEO and accessibility basics but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. The use of Google Analytics indicates moderate user tracking without clear privacy disclosures. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of security headers and lack of incident response or vulnerability disclosure information reduce its security posture. The WHOIS data is missing or unavailable, which is inconsistent with the active website and reduces trustworthiness. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security transparency. Strategically, the company should prioritize implementing privacy and cookie policies with consent mechanisms, add security headers, publish incident response contacts, and clarify domain registration details to enhance trust and compliance.

S

Scire Pty Ltd

scire.au

63

Scire Pty Ltd operates a professional Australian journalism website focused on business news and analysis, with its flagship publication Capital Brief targeting founders, executives, investors, and policymakers. The company positions itself as a challenger to the existing media oligopoly in Australia by providing transparent, trustworthy, and practical journalism. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content, although it lacks comprehensive privacy and cookie policies. Technically, the site uses modern web standards and Google Fonts but does not employ advanced security headers or extensive analytics tracking. Security posture is adequate with HTTPS enabled but could be improved with additional headers and policies. WHOIS data is limited due to .au domain privacy restrictions, but the domain appears legitimate based on content and contact information. Overall, the site is a credible media outlet with moderate risk and room for compliance and security enhancements.

P

Play Fortune For Fun

playfortuneforfun.com

66

Play Fortune For Fun is a specialized online casino review and rating platform targeting adult gambling enthusiasts. The website offers curated casino reviews, bonus offers, and game guides to help users find the best online casinos. It positions itself as a trusted source with expert content authored by Victor Bagan, an experienced online gambling expert. The platform operates on WordPress CMS with a Laravel Nova backend, leveraging modern web technologies and SEO best practices. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. The domain is newly registered in 2024, which is inconsistent with the website's claimed content history dating back to 2020, suggesting a recent domain acquisition or rebranding. Overall, the site is professional and trustworthy but should improve compliance and security practices.

P

PQINA

pqina.nl

60

PQINA is a small technology company based in the Netherlands, specializing in designing and building high-performance, responsive web components primarily for image and video editing and file uploading. Their product suite includes JavaScript libraries such as Pintura Image Editor, FilePond uploader, and Flip counter plugin, alongside online services like CropGuide and Edit • Photo/Video editors. The company maintains an active blog with technical articles, indicating ongoing development and engagement with the developer community. The website is professionally designed with excellent content quality and clear navigation, targeting web developers and businesses needing advanced web components and editing tools. Technically, the website employs modern web standards including JavaScript, CSS, and HTML5, with good mobile optimization and accessibility. The site uses HTTPS and includes SEO-friendly meta tags and social media integration. Analytics are handled via Simple Analytics, reflecting a privacy-conscious approach with minimal user tracking. However, some security best practices such as DNSSEC and security headers are not implemented, and there is no cookie consent mechanism, which may impact compliance with privacy regulations. From a security perspective, the site shows a basic but solid posture with no detected vulnerabilities or exposed sensitive data. The WHOIS data confirms a consistent and legitimate domain registration dating back to 2015, aligning with the business maturity. No security policies or incident response contacts are published, which could be improved to enhance trust and readiness. Overall, the site is trustworthy, professional, and technically sound, with room for improvement in privacy compliance and security hardening. The overall risk is low, but strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, publishing security policies, and enhancing GDPR compliance to strengthen the security and privacy posture further.

A

Antithesis Operations LLC

antithesis.com

74

Antithesis Operations LLC operates a sophisticated autonomous software testing platform designed to identify and reproduce bugs in complex distributed systems, with a focus on fintech, blockchain, databases, and cloud infrastructure sectors. The company positions itself as an innovative leader in autonomous testing, providing deterministic simulation testing that enhances software reliability and reduces time-to-resolution for critical bugs. Their website reflects a mature, professional business with strong trust signals including customer testimonials and SOC 2 Type 2 certification. Technically, the website employs modern JavaScript frameworks, analytics tools such as PostHog and HubSpot, and is hosted with Amazon Registrar, indicating a robust digital infrastructure. The site is well-optimized for mobile devices, has good SEO practices, and offers a seamless user experience. However, there is room for improvement in DNS security and cookie consent mechanisms. From a security perspective, the company demonstrates good practices with HTTPS enforcement, domain status protections, and a dedicated security manifesto page. The absence of DNSSEC and explicit security headers, as well as lack of a vulnerability disclosure policy, represent minor gaps. The contact form is well-validated and includes anti-bot measures, enhancing security posture. Overall, Antithesis presents a low-risk profile with a strong business and technical foundation. Strategic improvements in DNS security, privacy compliance, and vulnerability disclosure would further enhance their security maturity and trustworthiness.

P

PayIDPokies

payid-pokies.net

69

PayIDPokies operates as an affiliate and informational platform specializing in Australian online casinos that accept PayID as a payment method. The website provides detailed casino reviews, payment guides, and affiliate links to gambling sites, targeting Australian players interested in fast and secure PayID transactions. The business model relies on affiliate revenue generated from referrals to casino platforms. Technically, the site is built on WordPress with common web technologies such as jQuery and LiteSpeed caching, offering a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and SSL encryption but lacks advanced security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. The WHOIS data is not publicly available, indicating privacy protection, which is common in this industry but reduces transparency. Overall, the site presents a moderate risk profile with good content quality and business credibility but could improve in privacy compliance and security best practices.

E

Ecma International's TC39

tc39.es

55

Ecma International's TC39 is a specialized standards organization focused on the development and maintenance of the JavaScript (ECMAScript) language specification. The website serves as a hub for developers, implementers, and academics to access meeting agendas, proposals, and specification documents. The organization holds a strong market position as the authoritative body for JavaScript standards, with a clear focus on community collaboration and open development. Technically, the website is well-constructed using modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts enhancing typography. The site is mobile-optimized, fast-loading, and accessible, providing a professional user experience. However, there is room for improvement in security headers and explicit privacy and cookie policies. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The absence of explicit security headers and vulnerability disclosure mechanisms suggests an opportunity to strengthen the security posture. No signs of blocking or WAF interference were detected, indicating full accessibility. Overall, the website is trustworthy and professional, with strong business credibility linked to Ecma International. The lack of contact information and privacy policies slightly reduces privacy compliance scores but does not significantly impact overall trust. Strategic recommendations include enhancing security headers, publishing clear privacy and cookie policies, and providing contact channels for security incidents.

Getty.edu is the official website for the Getty museums and library located in Los Angeles, providing rich resources for visual art and cultural heritage. The site targets a broad audience including art enthusiasts, researchers, and the general public interested in cultural education. It offers access to museum exhibitions, library resources, and free research tools, positioning itself as a leading non-profit educational institution in the arts sector. The website branding and content quality are excellent, reflecting a mature and professional digital presence. Technically, the site utilizes modern JavaScript frameworks such as Vue.js and Nuxt.js, along with multiple third-party analytics and marketing tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Twitter Universal Website Tag. The site is mobile optimized and performs moderately well, though accessibility features could be enhanced. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No vulnerability disclosure or incident response information is published, and no contact information is readily available in the scanned content. The absence of WHOIS data is unusual for an established .edu domain, raising some transparency concerns, though the overall trustworthiness remains high due to the site's content and institutional nature. Overall, Getty.edu is a high-quality, trustworthy educational resource with strong content and branding but would benefit from improved privacy compliance, security headers, and transparency in domain registration details.

O

Oregon Symphony

orsymphony.org

74

Oregon Symphony is a well-established regional symphony orchestra with a long history dating back to 1896. The organization offers world-class concerts primarily serving the Portland and Salem, Oregon areas. Their website serves as the official source for ticket sales and information about their performances, targeting music enthusiasts and the general public interested in cultural events. The business model is typical of non-profit performing arts organizations, focusing on community engagement and ticketed events. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Tag Manager, Cookiebot for consent management, and Braze for marketing automation. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is mobile-optimized with good SEO practices, though no explicit CMS was detected, suggesting a custom or proprietary platform. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. Cookie consent is implemented, indicating awareness of privacy regulations, but no explicit privacy policy or terms of service were found in the provided content. No vulnerability disclosure or incident response information is published, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and serves its audience well. Strategic improvements in security headers, DNSSEC, and publishing privacy and security policies would strengthen its security posture and compliance readiness.

T

The Accessibility Project

a11yproject.com

57

The A11Y Project is a well-established community-driven initiative focused on making digital accessibility easier through educational content, resources, and community engagement. The website serves as a hub for accessibility professionals, developers, and designers, offering workshops, checklists, and spotlight features. It operates as a small non-profit entity with a strong reputation in the accessibility space. Technically, the site is built using modern static site generation technology (Eleventy) and hosted on Netlify, ensuring fast performance and excellent mobile optimization. Accessibility is a core focus, reflected in the site's design and content structure. Security posture is good with HTTPS enforced and no exposed sensitive data, though some improvements are recommended such as adding security headers and a cookie consent mechanism. The absence of WHOIS data is unusual but does not detract significantly from the site's trustworthiness given its community presence and transparency. Overall, the site scores well in content quality, technical implementation, and business credibility, making it a reliable resource in its domain.

C

CloudCannon

cloudcannon.com

71

CloudCannon is a New Zealand-based technology company founded in 2009, offering a Git-powered Jamstack CMS platform designed for marketers and developers. The platform enables teams to manage static websites with visual editing capabilities, integrating tightly with Git workflows and supporting multiple static site generators. Positioned as a niche leader in the Jamstack CMS market, CloudCannon targets digital agencies, enterprises, and development teams seeking scalable, secure, and performant website management solutions. The website demonstrates excellent content quality, professional design, and clear navigation, reflecting a mature and trustworthy business. Technically, the site leverages modern JavaScript libraries, Google Analytics, and Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, CloudCannon presents a credible and professional online presence with room to enhance privacy and security transparency.

G

Google

v8.dev

58

The V8.dev website represents Google's V8 JavaScript and WebAssembly engine, a critical open source technology powering major platforms like Chrome and Node.js. The site provides comprehensive technical content aimed at developers and technology professionals, showcasing Google's leadership in high-performance JavaScript engine development. The website is well designed, fast, and optimized for multiple platforms, reflecting a mature digital infrastructure. From a security perspective, the site benefits from Google's robust hosting and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. However, explicit security headers and incident response information are not present, representing areas for improvement. Privacy compliance is strong due to linkage to Google's official privacy policies, though no cookie consent mechanism is detected. Overall, the website is highly credible, trustworthy, and professional, with clear alignment between domain registration and business identity. The absence of contact information and security policy details slightly limits transparency but does not detract significantly from the site's reliability. Strategic recommendations include enhancing security headers, adding incident response contacts, and implementing cookie consent to further strengthen compliance and trust.

G

Just a moment...

gsap.com

55

The website gsap.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to the actual website content, limiting the ability to analyze business details, policies, or contact information. The domain is well-established, registered since 2001 with a reputable registrar, MarkMonitor Inc., and uses Cloudflare for DNS and security services. The lack of visible content and policies on the challenge page means no privacy, cookie, or terms of service information can be confirmed. The technical infrastructure relies on Cloudflare's security and performance features, but no further technical or security details are available due to blocking.

L

Left Logic

ffconf.org

53

FFConf is a well-established UK-based web development conference organized by Left Logic, a small Brighton development company specializing in Node.js and front-end technologies. The conference focuses on curated sessions about the future of the web, targeting web developers and technology enthusiasts. The website reflects a professional and consistent brand with a clear event history dating back to 2009. The business model centers on event organization, community engagement, and content dissemination through talks, articles, and job listings. Technically, the website is custom-built without a CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. It uses Plausible Analytics for privacy-conscious visitor tracking and is hosted behind Cloudflare DNS and CDN services. The site is mobile optimized, accessible, and performs well with good SEO practices. However, some security enhancements such as DNSSEC and security headers are missing. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks explicit security headers and cookie consent mechanisms, indicating partial GDPR compliance. No direct contact emails or phone numbers are provided, limiting direct communication channels. No vulnerability disclosure or incident response policies are publicly available. Overall, the security posture is moderate with room for improvement. The overall risk assessment is low given the nature of the site as an informational and event platform with no sensitive transactions. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to enhance trust and compliance.

E

Every Layout

every-layout.dev

59

Every Layout is a specialized educational platform focused on teaching resilient and modern CSS layout techniques. It offers a paid book, custom layout components, and free educational content aimed primarily at web developers and designers. The website demonstrates a strong market position within its niche, supported by testimonials from industry professionals and usage by reputable organizations such as the BBC and W3C. Technically, the site employs modern web standards including Web Components, service workers for offline access, and integrates Stripe for secure payment processing. The design is professional, mobile-optimized, and accessible, providing an excellent user experience. Security posture is solid with HTTPS and secure payment integration, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, with minor areas for improvement in privacy and security transparency.

G

Google

flutter.dev

70

Flutter.dev is the official website for Flutter, an open source multi-platform app development framework maintained by Google LLC. The site targets developers and software engineers, offering comprehensive resources to build, test, and deploy applications across mobile, web, desktop, and embedded platforms from a single codebase. The website reflects Google's strong market position in developer tools and frameworks, supported by a large global community and integration with Google's ecosystem services such as Firebase and Google Ads. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Alpine.js, and integrates Google services like Google Analytics and Tag Manager for analytics and tracking. The site is hosted on Google Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security best practices are observed with HTTPS enforcement and use of Google reCAPTCHA on forms, although explicit security headers are not visible in the HTML content. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, linking to Google's comprehensive privacy and cookie policies, and providing a cookie consent mechanism. However, the site lacks explicit incident response contact details and a public vulnerability disclosure page. Overall, the website is highly trustworthy, professional, and secure, reflecting Google's standards. Strategically, Flutter.dev serves as a critical platform for Google to engage the developer community, promote its cross-platform framework, and integrate with its broader cloud and advertising ecosystem. The site’s design, content quality, and technical implementation support a high level of user trust and engagement.

F

Filament Group, Inc.

filamentgroup.com

55

Filament Group, Inc. is a specialized UI design studio focused on creating intuitive, accessible, and resilient websites and web applications. Established since 2001, the company has built a strong reputation through collaborations with notable clients such as Boston Globe, LEGO, and vineyard vines. Their core competencies include responsive design, accessibility, and scalable UI design systems, targeting clients who prioritize exceptional user experience. The website reflects a professional and consistent brand image with high-quality content and multimedia presentations. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with references to Bootstrap for UI components. The site is well-optimized for mobile devices and accessibility, demonstrating good SEO practices. However, there is no evidence of a CMS or hosting provider details. Performance appears fast with no broken elements detected. From a security perspective, the site lacks explicit security headers and privacy-related policies such as privacy and cookie policies, which are critical for compliance with regulations like GDPR. No forms collecting sensitive data are present, reducing immediate risk, but the absence of incident response contacts and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is missing, which raises concerns about domain registration transparency, although the business legitimacy is supported by the website content and client portfolio. Overall, the website scores well on content quality, technical implementation, and business credibility but falls short on privacy compliance and some security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

G

Glitch

glitch.com

59

Glitch is a technology platform focused on providing simple, powerful, and free tools for web app creation and hosting. It has a strong community orientation and offers resources for developers and hobbyists to build and share web projects. The platform recently ended its project hosting service as of July 8, 2025, but continues to support redirects and promotes alternative development workflows such as GitHub Codespaces. The website is professionally designed with consistent branding and good user experience, targeting developers and web creators. Technically, it uses modern JavaScript frameworks like React, integrates analytics and A/B testing tools, and is hosted under Fastly's infrastructure. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security headers are not detected. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Incident response contact is provided via [email protected], indicating a responsible approach to abuse handling. Overall, the site is trustworthy and well-positioned in its niche but would benefit from enhanced privacy disclosures and security hardening.

N

Nordhealth Oy

nordhealth.design

60

Nordhealth Oy operates the Nord Design System website, providing a comprehensive design system tailored for healthcare and veterinary software development. The company, founded in 2021 and based in Finland, offers a suite of design tokens, web components, CSS frameworks, themes, iconography, and Figma toolkits to enable coherent and efficient software design and development. The website reflects a professional and modern digital presence, targeting software developers and designers in the healthcare sector. The market position is niche but well-defined, focusing on specialized design solutions for healthcare and veterinary applications. Technically, the website is built using the Eleventy static site generator, hosted likely on AWS infrastructure, and employs modern web technologies including JavaScript ES modules and service workers. The site is optimized for performance, mobile responsiveness, and accessibility, with good SEO practices. Analytics are implemented via Fathom Analytics, emphasizing minimal user tracking and privacy. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as client update, delete, and transfer prohibitions. However, DNSSEC is not enabled, and no explicit security headers were detected. Privacy compliance is lacking, with no visible privacy or cookie policies, which is a notable gap. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website demonstrates a strong professional and trustworthy presence with a solid technical foundation. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance trust and regulatory adherence.