Security Directory

M

Mocha

mochajs.org

64

Mocha is an established open source JavaScript testing framework designed for Node.js and browser environments. It offers flexible asynchronous testing capabilities, parallel test execution, and extensible reporting. The project is community-driven, supported by sponsors and backers, and hosted on GitHub. The website serves as a comprehensive documentation and community hub for developers using Mocha. Technically, the site is well-structured, performant, and mobile-optimized, leveraging modern web technologies and Matomo analytics for user tracking. However, it lacks formal privacy and cookie policies, contact information, and explicit security policies, which are areas for improvement. The domain registration is consistent and appropriate for the project's age and nature, indicating legitimacy and trustworthiness.

T

ThinkDoBeCreate - Stephanie Eckles

moderncss.dev

62

ModernCSS.dev is a specialized educational website authored by Stephanie Eckles under the ThinkDoBeCreate brand, focusing on modern CSS solutions and frontend development techniques. The site offers a rich collection of articles, tutorials, and resources aimed at frontend developers and CSS enthusiasts, positioning itself as a niche expert content provider with strong author credibility and community endorsements. Technically, the site is built using the Eleventy static site generator, leveraging modern web standards including HTML5, CSS3, and JavaScript, with excellent mobile optimization and fast performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. The site uses minimal tracking via Plausible Analytics and monetizes through Carbon Ads and BuySellAds, maintaining a good balance between user experience and advertising. Overall, the website is trustworthy, professional, and well-maintained, though it could improve compliance by adding privacy and cookie policies and enhancing security headers.

Z

Zwan

myzwan.com

53

The website represents Zwan, a company specializing in the manufacturing and distribution of ambient meat products including luncheon meat, cocktails, hotdogs, and vegetarian options. The site is professionally designed using WordPress and the Divi theme, featuring structured data and a cookie consent mechanism. The business targets consumers and business customers interested in premium quality meat products and recipes. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and Google reCAPTCHA for form security. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled and form protections, but lacks security headers and explicit privacy policies. Overall, the site is functional and business-focused but would benefit from improved transparency and security practices.

De Nigris 1889 operates a multilingual brand website with a language selection gateway directing users to Italian, USA, and global versions of their site. The company appears to be established since 2014 and targets a general audience with a professional and consistent brand presentation. The technical infrastructure includes WordPress CMS hosted on GoDaddy with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The website is mobile optimized and presents a good user experience with clear navigation. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no explicit GDPR compliance indicators. No contact or incident response information is provided, limiting trust and transparency. Overall, the site is safe and suitable for general audiences with no adult or explicit content detected.

C

Cirio 1856

cirio1856.com

62

Cirio 1856 is a well-established Italian food company specializing in authentic tomato products, fruits, and vegetables. The website presents a professional and comprehensive digital presence, targeting both consumers and business clients including food service professionals. The company emphasizes quality, sustainability, and organic product lines, supported by multiple country-specific domains indicating international market reach. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall website content and structure support legitimacy. Privacy compliance is strong with GDPR-aligned policies and consent banners.

Y

Home -

yuton.rs

47

The website www.yuton.rs represents a Serbian-based food product distributor operating under the Gaston Grupa umbrella. The company offers a variety of food products including tuna, seafood, fruits, vegetables, olives, oils, vinegars, pasta, rice, and specialty items. The site targets retail and wholesale buyers in Serbia and neighboring regions, positioning itself as a regional distributor within a larger group of related brands. The business is relatively new, with domain registration in early 2023, consistent with the company's recent establishment. From a technical perspective, the website uses several JavaScript libraries including multiple versions of jQuery, jQuery UI, and plugins for UI enhancements such as sliders and lightboxes. The site is moderately optimized for performance and mobile use but shows room for improvement in accessibility and SEO. The CMS or hosting provider is not explicitly identified. The website is accessible without any WAF or security challenges. Security posture is moderate; HTTPS is enabled but no DNSSEC or security headers are present. Multiple jQuery versions loaded may introduce vulnerabilities. No privacy or security policies are published, though a cookie consent banner is implemented, indicating some GDPR awareness. Contact information is clearly provided, enhancing business credibility. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security policies. Strategic improvements in security headers, privacy documentation, and script management are recommended to enhance trust and compliance.

O

OMS Production s.r.o.

omsfoundation.cz

9

OMS Foundation, operated by OMS Production s.r.o., is a Czech non-profit foundation dedicated to helping people in difficult life situations through financial support and project activities. The website presents a clear mission with calls for donations and transparent bank account information, targeting a general audience interested in charitable giving. The foundation appears to be a small-sized entity founded in 2019, with consistent branding and a professional online presence. Technically, the website uses a simple but effective stack including jQuery 2.2.2 and Google Analytics for tracking. It is hosted by Active24, a known Czech hosting provider. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. No CMS or advanced frameworks are detected, indicating a custom or lightweight implementation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, and no contact emails or physical addresses are provided, limiting transparency. Overall, the website is functional and trustworthy for its purpose but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

V

V24 Media s.r.o.

v24media.cz

10

Vogue CS, operated by V24 Media s.r.o., is a leading fashion magazine serving the Czech and Slovak markets, offering both print and digital content. The website provides comprehensive information about the company, subscription options, advertising pricelists, and contact details for key personnel. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it leverages modern frameworks such as React and Next.js, with integrated cookie consent management via Cookiebot and analytics through Google Tag Manager. Security measures include HTTPS enforcement and standard security headers, though explicit security policy and incident response contacts are not publicly detailed. Overall, the site presents a trustworthy and professional image suitable for its media industry audience.

K

Klub svobodných matek z.s

klubsvobodnychmatek.cz

38

Klub svobodných matek z.s is a Czech non-profit organization dedicated to supporting single-parent families across the Czech Republic. The organization provides financial, material, legal, and informational assistance to help single parents and their children manage daily challenges. Their services include aid for food, housing costs, school supplies, summer camps, and clothing through their Oděvní banka program. They also offer a free helpline and legal online advice. The website reflects a well-established entity with a clear mission and consistent branding, supported by testimonials and active social media channels. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as jQuery and Swiper.js. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility. The hosting and domain registration are consistent with a Czech-based non-profit organization, with no suspicious indicators. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable compliance gap. Tracking is implemented via Leadhub pixels, indicating moderate user tracking. Overall, the website is professional and trustworthy for its intended audience but should enhance privacy compliance and security best practices to improve its security posture and regulatory adherence.

N

Nehoříme, konec cigaretám - nikotin zdravěji bez kouření

nehorime.cz

55

The website www.nehorime.cz is an independent Czech language online magazine focused on providing information about alternatives to smoking and healthier nicotine consumption methods. It covers topics such as nicotine pouches, heated tobacco products, e-cigarettes, and offers guidance on quitting smoking. The site targets adult smokers seeking less harmful alternatives and aims to educate and support them in their transition. Technically, the site is built on ASP.NET Web Forms with Bootstrap 3.4.1, jQuery, and other modern JavaScript libraries, ensuring good mobile responsiveness and user experience. Security-wise, the site uses HTTPS but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional content and partner links indicate legitimate operation. Overall, the site is a valuable resource in its niche but should enhance privacy compliance and security practices.

Městský společenský dům v Kolíně operates as a local cultural center in Kolín, Czech Republic, offering concerts, balls, exhibitions, and venue rental services. The website targets local community members and visitors interested in cultural events, positioning itself as a key venue for social and cultural gatherings. The business model centers on event hosting and space rental, serving a small-sized organization with a focus on hospitality and cultural activities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript with MooTools and jQuery libraries, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and provides a cookie consent mechanism, indicating some level of privacy awareness. However, no CMS or advanced frameworks are detected, and performance is moderate. From a security perspective, the site lacks visible security headers and a published privacy policy, which are areas for improvement. The WHOIS data is missing, reducing transparency and trustworthiness. No blocking or WAF mechanisms are detected, and no critical vulnerabilities are apparent from the provided data. The cookie consent banner and clear contact information are positive security and compliance indicators. Overall, the website is functional and serves its business purpose well but would benefit from enhanced security practices, privacy policy publication, and improved WHOIS transparency to increase trust and compliance.

C

CVVZ

cvvz.cz

51

CVVZ is a non-profit organization that hosts an annual event focused on youth resilience, wellbeing, and experience exchange in Kolín, Czech Republic. The event features lectures, workshops, and volunteer opportunities, supported by regional authorities and national partners. The website demonstrates a good level of professionalism with consistent branding and clear navigation, targeting youth, volunteers, and educators. Technically, the website uses modern web technologies including ES modules, Bootstrap, and Google Fonts, with a moderate performance profile and good mobile optimization. However, there is no explicit CMS or hosting provider information. Security headers are not detected, and privacy and cookie policies are missing, indicating areas for improvement in compliance and security posture. The security posture is moderate with HTTPS usage implied but lacking visible security headers and vulnerability disclosures. The absence of WHOIS data is a concern for domain legitimacy, though the website content and partner endorsements suggest a legitimate and trusted organization. Overall, the site is safe for general audiences and does not contain any adult or explicit content. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

Z

Zahradnictví Hruška, Velim u Kolína

hruska-skolky.cz

56

Zahradnictví Hruška Velim u Kolína is a small retail business specializing in the sale of fruit trees, ornamental plants, and garden accessories, with additional services in garden design and realization. The company has a long-standing presence since 1991, serving local gardening enthusiasts and customers. The website reflects a professional and consistent brand image with a focus on product catalog and gardening advice. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and integrates Google Tag Manager and Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and incident response information. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is safe, well-maintained, and compliant with basic privacy regulations.

Brána do Čech is a regional tourism portal focused on promoting the Ústecký region of Czechia. It provides visitors with comprehensive information about local attractions, events, accommodations, and leisure activities. The website targets tourists and regional visitors seeking travel guidance and cultural experiences. The business model is informational and promotional, aiming to enhance regional tourism visibility. Technically, the website employs a range of JavaScript libraries including jQuery, bxSlider, and Magnific Popup, alongside Google Analytics and Facebook SDK for tracking. The site shows moderate performance and basic mobile optimization. However, the use of an outdated jQuery version and lack of modern security headers indicate areas for improvement in technical maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms or direct data collection mechanisms were detected, reducing immediate data exposure risks. The absence of WHOIS data limits domain trust verification, though the content and external links suggest legitimacy. Overall, the site is functional and content-rich but would benefit from enhanced security practices, privacy compliance, and domain transparency to improve trustworthiness and user confidence.

E

Ekofond SPP, n.o.

ekofondspp.sk

48

Ekofond SPP is a Slovak non-profit organization dedicated to environmental sustainability, carbon footprint reduction, and social responsibility. The website presents a professional and well-structured platform focused on promoting environmental projects and educational initiatives. The organization has an established market presence since 2007 and targets a general audience interested in energy and sustainability. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and a comprehensive cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is trustworthy and compliant with GDPR, with clear privacy and cookie policies. Recommendations include enhancing security headers, publishing terms of service and incident response contacts, and improving accessibility features.

D

Dokobit

dokobit.com

76

Dokobit is a technology company specializing in electronic document signing services within the European Union, leveraging compliance with eIDAS and GDPR regulations. The company offers a SaaS platform with API solutions for signing, identification, and sealing, targeting businesses and individuals requiring legally binding electronic signatures. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive compliance documentation. Technically, Dokobit utilizes modern analytics and marketing tools integrated with a robust consent management framework, hosted on AWS infrastructure. Security posture is strong with HTTPS enforcement, domain locking, and certifications such as ISO 27001 and QTSP status, although DNSSEC is not enabled and no public security.txt was found. Overall, Dokobit presents a trustworthy and professional service with a solid market position in the EU e-signature space.

Institut Curie is a prestigious French non-profit organization specializing in cancer research, treatment, and education. Established in 1909, it holds a leading position in Europe for oncology services and scientific research. The website reflects this stature with comprehensive content targeting patients, researchers, and healthcare professionals. The institution's digital presence is built on modern web technologies including Nuxt.js and Tailwind CSS, ensuring a responsive and performant user experience. Privacy compliance is well addressed with clear cookie consent mechanisms and privacy policies in French. Security posture is strong with HTTPS enforcement and security headers, though a dedicated security policy and incident response information are absent. Overall, the website is professional, trustworthy, and aligned with the organization's mission.

C

Cofidis S.A. Sucursal en España

cofidis.es

72

Cofidis S.A. Sucursal en España operates as a prominent financial services provider specializing in consumer credit, personal loans, and insurance products tailored to the Spanish market. With over 30 years of experience and a strong market presence, Cofidis offers flexible and personalized financial solutions including direct credit, personal loans, payment protection insurance, dental insurance, and installment purchase financing. The company targets general consumers seeking accessible credit options without changing banks, positioning itself as a trusted financial partner in Spain. Technically, the website demonstrates a mature digital infrastructure leveraging modern JavaScript libraries, Google Tag Manager, and multiple marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly with extensive use of structured data (JSON-LD) to enhance search engine visibility and user experience. The loan simulator is interactive and well-integrated, indicating a robust front-end implementation. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit published security policies, incident response contacts, or vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, Cofidis.es presents a professional, trustworthy, and user-friendly online presence consistent with a large financial institution. The absence of WHOIS data due to query restrictions is mitigated by strong on-site business information and contact details. Strategic recommendations include publishing formal security and incident response policies and establishing a vulnerability disclosure program to further strengthen security posture and customer confidence.

C

Cofidis

cofidis.sk

72

Cofidis Slovakia operates as a financial services provider specializing in consumer credit products such as unsecured loans, installment purchases, car loans, insurance, and eco-loans. The website targets Slovak consumers and offers an online loan calculator to facilitate loan amount and repayment term selection. The company appears to be well-established in the Slovak market with a professional online presence. Technically, the website uses modern JavaScript libraries including jQuery and Underscore.js, served via e-i.com CDN infrastructure, and supports HTTPS for secure communications. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. No social media or direct contact emails were found in the provided content, though a contact page is linked. Overall, the site is functional and professional but could improve privacy compliance and security posture.

C

Cofidis Magyarország

cofidis.hu

58

Cofidis Magyarország operates as a prominent financial services provider specializing in personal loans, debt consolidation, retail financing, and vehicle leasing within Hungary. The website offers a comprehensive suite of loan products with detailed terms, representative examples, and an online application process, targeting Hungarian consumers seeking flexible and accessible financial solutions. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website leverages modern frameworks such as Bootstrap and integrates analytics tools like Google Analytics and Hotjar, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates good compliance with privacy regulations and provides clear contact channels, primarily via a prominently displayed phone number. The domain registration data aligns well with the business claims, supporting the legitimacy of the entity.

C

Cofidis SA

cofidis.fr

74

Cofidis is a well-established French financial services company specializing in online consumer credit, personal loans, credit refinancing, and credit insurance. With over 35 years of experience and a strong market presence in France, Cofidis offers a comprehensive range of financing solutions tailored to individual customer needs. The website reflects a mature digital infrastructure with modern technologies, responsive design, and extensive content that supports user engagement and trust. The integration of third-party review platforms like Trustpilot and visible certifications further enhance credibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in France and does not detract from the site's legitimacy. Overall, Cofidis demonstrates a strong business and digital maturity with good compliance to privacy regulations and user experience standards.

C

Cofidis

cofidis.be

63

Cofidis Belgium operates as a financial services provider specializing in consumer credit and loan products, targeting French and Dutch speaking customers in Belgium. The website is bilingual and designed to guide users to their preferred language section. The business appears to be an established player in the Belgian consumer credit market, offering personal loans and financial solutions. The website infrastructure relies on HTTPS and uses a CDN for resource delivery, with JavaScript libraries such as jQuery for interactivity. However, the site lacks visible privacy and cookie policies and does not provide direct contact information on the landing page, which may impact user trust and compliance perception. Security posture is moderate with HTTPS enabled but missing visible security headers and incident response contacts. WHOIS data is restricted, showing privacy protection, which is common for financial entities but limits transparency. Overall, the site is functional and professional but could improve in privacy compliance and user trust signals.

S

Sector s.r.o.

onlinegamesector.com

55

Onlinegamesector.com is a small-scale online gaming portal operated by Sector s.r.o., offering a broad selection of free browser games including flash, Unity 3D, HTML5, and multiplayer games. The site targets casual gamers seeking entertainment and relaxation. The business model is primarily advertising-supported, leveraging Google Adsense and tracking services such as Google Analytics and Quantcast. The website demonstrates moderate digital maturity with a functional design, basic mobile optimization, and standard SEO practices. However, the use of outdated JavaScript libraries and lack of visible security headers indicate technical debt and potential security risks. The absence of publicly available WHOIS data raises concerns about domain registration transparency, although the site itself appears legitimate and professionally maintained. Privacy compliance is minimal, with no dedicated privacy or terms of service pages, but a cookie consent mechanism is implemented via Quantcast CMP.

S

Sector s.r.o.

vibe.sk

43

Vibe.sk is a Slovak music and entertainment website operated by Sector s.r.o., focusing on providing music news, music videos, and artist profiles primarily for Slovak and international audiences. The site offers categorized music content by genre and style, targeting general music enthusiasts. It maintains a moderate market position as a regional media portal with consistent branding and regular content updates. Technically, the site uses a mix of JavaScript libraries including jQuery, Google Analytics, Google Adsense, and Video.js for media playback, with a custom or sector.sk-based CMS platform. The website is served over HTTPS and includes cookie consent mechanisms compliant with GDPR, but lacks visible security headers and explicit security or incident response policies. No contact emails or phone numbers are publicly listed, which may impact user trust and support accessibility. Overall, the site is functional with good content quality and moderate technical implementation, but could improve security posture and compliance transparency.