Security Directory

S

SuperSaaS

supersaas.com.br

53

SuperSaaS is a well-established SaaS company specializing in online appointment and reservation scheduling solutions, serving over 205,000 customers globally. The website is professionally designed, localized in Portuguese for the Brazilian market, and offers comprehensive information about its flexible scheduling software, integrations, and pricing models. The business targets small to medium enterprises and individual professionals across various sectors, providing a scalable and customizable platform with free and paid tiers. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations for Google Analytics and Tag Manager for performance and user behavior tracking. Hosting is managed via Amazon AWS infrastructure, ensuring reliable uptime and fast content delivery. The site is mobile-optimized and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS and follows best practices such as asynchronous script loading and no visible exposure of sensitive data. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected and could be improved. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms, and GDPR compliance is indicated. No direct contact emails or phone numbers are publicly listed, which may affect user trust slightly. Overall, the website presents a low-risk profile with high legitimacy, consistent WHOIS data, and strong trust signals from customer reviews and social media presence. Strategic recommendations include enhancing security header implementation, publishing a security policy or incident response page, and providing clearer contact channels for security and data protection inquiries.

S

SuperSaaS

supersaas.de

66

SuperSaaS is a well-established German-based SaaS company specializing in online appointment booking and scheduling solutions. With a mature domain since 2007 and a strong customer base exceeding 205,000 users worldwide, it offers a flexible, multilingual platform that integrates with popular calendars, payment gateways, and communication tools. The website is professionally designed, mobile-optimized, and rich in content, targeting businesses and organizations across various sectors seeking efficient scheduling solutions. The company emphasizes ease of integration, customization, and reliable service delivery.

The Forum National des Associations & Fondations website represents a well-established French event focused on the associative and social economy sectors. Organized by Les Echos Le Parisien Événements, the site promotes the 19th edition scheduled for November 2025 in Paris. The platform provides detailed event information, partner listings, speaker highlights, and replay content, targeting professionals and stakeholders in the non-profit sector. The website demonstrates consistent branding and a professional presentation aligned with its market position as a leading national event. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses Google Tag Manager for analytics and Didomi for GDPR-compliant consent management. The site is mobile-optimized with good SEO practices and moderate performance. No CMS or hosting provider is explicitly identified, but the infrastructure appears stable and professionally maintained. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies or incident response information. The domain WHOIS data shows a long-standing registration since 2005 with appropriate domain status protections, indicating legitimacy and stability. No WAF or blocking mechanisms are detected, and no vulnerabilities or exposed sensitive data are apparent. Overall, the website is safe, professional, and compliant with privacy regulations, serving its audience effectively. Recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to enhance trust and security posture.

P

port-neo.com

port-neo.com

50

port-neo.com is a German digital marketing and customer experience agency specializing in strategic consulting, e-commerce, user experience, and data management services. The website is professionally designed using WordPress and Elementor, targeting German-speaking businesses seeking enhanced customer experience solutions. The technical infrastructure is modern with HTTPS enabled, but lacks visible security headers and comprehensive privacy compliance features. The absence of WHOIS data raises some legitimacy concerns, although the website content appears professional and business-focused. Overall, the security posture is moderate with room for improvement in privacy policies and contact transparency.

D

Défi Azimut

defi-azimut.net

58

Défi Azimut is a specialized event organizer focused on the IMOCA sailing race, serving a niche audience of sailing professionals, enthusiasts, and media. The website provides comprehensive race information, rankings, media content, and partner engagement, positioning itself as a key player in the sailing sports event sector in France. Technically, the site uses modern web technologies with embedded multimedia content and a responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a notable anomaly that may require further verification to confirm domain legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in security transparency and contact information availability.

E

ExxonMobil

exxonmobil.de

64

ExxonMobil Germany operates as a regional branch of the global ExxonMobil Corporation, providing energy products such as natural gas, oil, lubricants, and chemical products with a focus on sustainability and low carbon solutions. The website targets a German-speaking audience including business partners, customers, and the general public interested in energy and environmental topics. The digital infrastructure is modern, leveraging Akamai CDN for hosting and Google Tag Manager for analytics, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforced and cookie consent managed via OneTrust, though explicit security policies and incident response information are not publicly detailed. Overall, the site reflects a mature corporate digital presence with room for enhanced transparency in security and privacy disclosures.

E

Esso S.A.F.

esso.fr

58

Esso S.A.F., a subsidiary of ExxonMobil, operates as a major energy company in France with a history dating back to 1902. The company specializes in purchasing crude oil on the international market, refining it in its French facilities, and marketing a broad range of petroleum products. The website serves as a corporate portal providing information about the company's business model, strategic priorities, governance, and sustainability efforts. The site is well-branded and consistent with ExxonMobil's global presence, targeting both general public and business stakeholders interested in energy products and corporate affairs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, hosted via Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. The lack of WHOIS data is a notable anomaly, reducing trust in domain registration transparency, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with basic privacy standards, though improvements in transparency and security documentation are recommended.

The website servicos.gov.br/editar is an official Brazilian government portal designed to allow public servants to access and edit government service information. It targets government employees and operates as a secure internal platform. The site uses HTTPS and integrates Google reCAPTCHA to protect against automated abuse. The technical infrastructure is basic but sufficient for its purpose, hosted on SERPRO servers, a trusted government IT provider. The site lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good, with secure forms and HTTPS, but could be improved by adding security headers and explicit policies. Overall, the site is trustworthy and safe, with no adult or questionable content.

PlayOnContent S.L. operates the PlayOncenter platform, an online video platform and multimedia content aggregator aimed at providing innovative solutions for audience targeting and content management. The website analyzed is an administrative login portal designed for authorized users to access platform management features. The business appears to be a small technology company focused on niche online video services. The website content is minimal but functional, primarily serving as a secure entry point for administrators. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Modernizr for feature detection. The site enforces HTTPS on its login form, but lacks advanced security headers and visible modern frameworks or CMS platforms. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site has a moderate posture with HTTPS enabled but lacks important security headers such as Content-Security-Policy and HSTS. The login form collects username and password but does not show additional protections like CAPTCHA or multi-factor authentication. No privacy or cookie policies are present, which is a compliance gap. WHOIS data is unavailable or missing, raising concerns about domain legitimacy and registration transparency. Overall, the site is functional but lacks comprehensive security and privacy measures. The absence of WHOIS data and privacy policies reduces trustworthiness. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance the platform's credibility and protect user data.

E

European Bioinformatics Institute

ebi.ac.uk

70

The European Bioinformatics Institute (EMBL-EBI) is a leading non-profit research organization specializing in bioinformatics and life sciences data services. As part of the European Molecular Biology Laboratory, it serves a broad scientific community by providing open access to biological data resources, research, and training. The website reflects a mature digital presence with comprehensive content, clear navigation, and a strong focus on scientific collaboration and education. Technically, the site employs modern web technologies including Alpine.js and a custom EMBL visual framework, ensuring good performance, accessibility, and SEO optimization. The presence of structured data (JSON-LD) enhances search engine understanding and user experience. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and a published security policy are absent. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, aligning with GDPR requirements. Business credibility is high, supported by detailed contact information, official affiliations, and consistent branding. However, the lack of WHOIS data limits domain registration trust analysis, though the overall legitimacy is strongly supported by the website content and organizational transparency. Overall, EMBL-EBI’s website is a professional, secure, and trustworthy platform that effectively supports its mission to advance bioinformatics research and data sharing.

E

ExxonMobil Corporation

exxonmobil.com

74

ExxonMobil Corporation is a leading global energy company focused on responsibly meeting the world's energy needs through pioneering research, technology, and sustainable solutions. The company operates across multiple sectors including energy supply, transportation fuels, industrial solutions, and materials for modern living. The website reflects a mature, enterprise-level business with a strong global presence and diversified brand portfolio including Mobil, Esso, and ExxonMobil Chemical. Technically, the website employs modern web technologies, is mobile optimized, and integrates privacy and cookie consent mechanisms effectively. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting ExxonMobil's market position as a reputable energy sector leader.

D

Destinace Brněnsko

destinace-brnensko.cz

53

Destinace Brněnsko is a destination management organization focused on promoting tourism and managing the Brno region and its surroundings. The website presents a professional image consistent with a small hospitality sector business, offering services related to regional tourism development and promotion. The technical infrastructure is based on the Wix platform, leveraging standard web technologies such as JavaScript, CSS, and HTML5, providing a moderate level of performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data and contact information reduces overall trust and business credibility. Strategic improvements in privacy compliance, security best practices, and transparency are recommended to enhance trust and compliance.

A

Avisos de Ocasión EL NORTE

avisosdeocasion.com

57

Avisos de Ocasión EL NORTE operates a regional online classifieds platform focused on real estate listings including sales, rentals, and transfers of houses, apartments, land, and commercial properties primarily in Monterrey, Mexico. The website offers a broad range of classified categories and integrates advertising services. The platform targets general consumers and real estate investors in the Monterrey metropolitan area. Technically, the site uses modern JavaScript libraries such as Slick Carousel and Google Tag Manager for analytics and marketing, with a responsive design optimized for mobile devices. However, the site lacks visible privacy and cookie policies and does not show security headers in the provided data, which are areas for improvement. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the professional content and clear contact information. Overall, the site is functional and trustworthy from a user perspective but requires enhancements in security and compliance documentation.

W

Waterpik

waterpik.com

67

Waterpik is a leading brand in the oral health industry, specializing in water flossers, electric toothbrushes, and whitening products. The website presents a professional and consumer-focused platform, targeting individuals seeking dental care products. The brand is positioned as the #1 recommended by dental professionals, indicating strong market presence and trust. Technically, the website employs modern technologies such as Google Tag Manager for analytics and OneTrust for cookie consent, demonstrating a commitment to compliance and user experience. However, the absence of WHOIS data and registrant information raises questions about domain registration transparency. Security posture is moderate, with HTTPS implied but lacking explicit security headers in the provided data. Privacy compliance is basic, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

The website kangabell.com serves as a personal portfolio for Kay Belardinelli, an artist and web accessibility specialist. The site is minimalistic, focusing on presenting the individual's name, pronouns, and professional identity without additional business or contact information. The domain is well-established, registered since 2008, and hosted by DreamHost, indicating a stable digital presence. However, the site lacks critical business and compliance elements such as privacy policies, cookie consent mechanisms, and contact details, which limits its professional completeness. Technically, the website is built with standard HTML and CSS, utilizing custom fonts and a clean design. There is no evidence of modern frameworks, CMS platforms, or analytics tools. The site appears mobile-optimized and accessible, but performance and SEO optimizations are basic. Security posture is weak due to the absence of HTTPS confirmation and security headers, which poses risks for visitor trust and data protection. From a security perspective, no WAF or blocking mechanisms are detected, and no vulnerabilities or sensitive data exposures are apparent. However, the lack of HTTPS and security policies is a significant gap. The site does not collect user data or employ tracking, which reduces privacy risks but also limits business engagement capabilities. Overall, the website is safe and suitable for general audiences but requires improvements in security, privacy compliance, and business information transparency to enhance trustworthiness and professional credibility.

O

OTIDEA

otidea.cz

64

OTIDEA is a small Czech service provider operating since 2004, offering discreet solutions and rental services. The website is professionally designed using the Squarespace platform, featuring a modern and responsive layout with good navigation and content relevance. The technical infrastructure relies on Squarespace hosting and standard web technologies, providing moderate performance and basic accessibility features. Security posture is good with HTTPS and HSTS enabled, and a cookie consent mechanism is implemented, but lacks advanced security headers and explicit privacy or incident response policies. WHOIS data is missing, which reduces domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer business contact information.

E

ExxonMobil

exxon.com

69

ExxonMobil operates a comprehensive and professionally designed website focused on retail and commercial fuel products, including gasoline, diesel, and related rewards programs. The company is a global leader in the energy sector, targeting both general consumers and commercial clients with a broad portfolio of services. The website demonstrates a mature digital infrastructure leveraging modern technologies such as AWS hosting, Sitecore CMS, and advanced analytics and marketing tools. Security posture is strong with HTTPS enforcement, robust content security policies, and cookie consent mechanisms. However, explicit security policies and incident response information are not prominently published, representing an area for improvement. Overall, the website reflects a high level of professionalism, trustworthiness, and compliance with privacy regulations.

E

European Molecular Biology Laboratory

embl.org

68

The European Molecular Biology Laboratory (EMBL) is a prestigious intergovernmental research organization headquartered in Heidelberg, Germany, with multiple sites across Europe. Founded in 1974, EMBL focuses on fundamental molecular biology research, scientific services, training, and fostering collaboration across member states. The organization serves a broad audience including scientists, researchers, students, and industry partners, positioning itself as a leading European life sciences laboratory with global impact. Technically, the EMBL website is well-constructed using modern web technologies such as HTML5, CSS3, JavaScript, and Alpine.js. It employs CDNs for efficient content delivery and integrates Google Analytics for user behavior insights. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, explicit security headers and published security policies or incident response information are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, EMBL's website reflects a high level of professionalism, trustworthiness, and compliance, supporting its reputation as a leading scientific institution. The lack of WHOIS data due to privacy protection is consistent with the organization's profile and does not detract from its legitimacy.

C

Cosmos

tuinterfaz.mx

57

Tu Interfaz de Negocios is a well-established Mexican digital media platform focused on delivering industry news, analysis, and articles primarily targeting professionals and stakeholders in the industrial and economic sectors of Mexico. The website is affiliated with Cosmos Online, a recognized media group with over 60 years of history, which strengthens its market position and credibility. The platform offers a variety of content including news on investment, industrial activity, economy, finance, technology, and regulatory matters, supported by a consistent publishing schedule and active social media presence. Technically, the website employs a modern but straightforward technology stack including Bootstrap for responsive design, jQuery for interactivity, and integrates Google Analytics and OneSignal for analytics and push notifications respectively. The site is mobile-optimized and SEO-friendly with proper meta tags and structured data (JSON-LD) for enhanced search engine visibility. However, it lacks some advanced security headers and a cookie consent mechanism, which are recommended for improved security and privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration, but could benefit from implementing additional HTTP security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and terms of service present but no explicit GDPR compliance indicators or cookie consent banners. Overall, the website presents a moderate risk profile with good business credibility and content quality but room for improvement in security and privacy practices. Strategic recommendations include enhancing security headers, implementing cookie consent, and improving incident response visibility to strengthen trust and compliance.

The website www.artic.edu is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This challenge page prevents extraction of meaningful business or content data. The domain WHOIS query returned no registration data, indicating either a privacy-protected or unregistered domain status, which limits trust and legitimacy assessment. The technical infrastructure includes Cloudflare security services but lacks visible security headers or SSL configuration details. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. Overall, the site appears to be protected by a strong WAF but lacks transparency and accessible content for analysis.

C

Conductrics

conductrics.com

61

Conductrics is a technology company offering a unified customer experience platform that integrates A/B testing, machine learning predictions, and customer surveys to help enterprises optimize customer satisfaction and behavior. The website presents a professional and consistent brand image with clear navigation and relevant content targeting businesses seeking advanced experimentation tools. Technically, the site uses modern web technologies including Bootstrap and JavaScript libraries, with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy or recent registration status. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

I

Internet Domain Service BS Corp

ip-api.com

59

IP-API.com is a well-established provider of IP geolocation services, offering a free API for non-commercial use and a paid pro service for commercial customers. The company has been operational since 2012 and serves over a billion requests daily, positioning itself as a reliable and popular choice in the IP geolocation market. The website is professionally designed, mobile-optimized, and provides clear documentation and API endpoints in multiple formats, targeting developers and businesses requiring IP location data. Technically, the site uses modern web technologies including AJAX and Bootstrap, and benefits from a fast Anycast network infrastructure ensuring low latency worldwide. Security-wise, the site enforces HTTPS and has domain transfer protections, but lacks DNSSEC and explicit security headers, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact is available via email and a contact form, but no phone or social media presence is evident. Overall, the site is trustworthy and professional but could enhance security and privacy transparency.

M

Musing Studio

musing.studio

53

Musing Studio is a small technology company focused on providing digital platforms for artists to share their work without relying on traditional social media channels. Their key offering includes the Write.as editor and several related subdomains for notes, mood, social, and task management. The website is professionally designed with clear navigation and good mobile optimization, reflecting a niche market position targeting creative individuals seeking privacy and simplicity in content sharing. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and Matomo analytics for user tracking. The SSL configuration is excellent, ensuring secure HTTPS connections, though the site lacks several recommended security headers and formal privacy or cookie policies. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are needed in compliance and incident response transparency. Overall, the domain registration is privacy protected, which is typical for small tech startups, and no suspicious WHOIS patterns were detected. The site is safe for general audiences with no adult or questionable content.

M

Musing Studio

submit.as

59

Submit.as is a specialized SaaS platform designed to facilitate simple writing submissions and reviews for online publications, particularly those using Write.as and Ghost. It targets writers, bloggers, and independent publishers seeking a no-signup, distraction-free submission process. The platform is part of the Musing Studio suite, which includes related services like Write.as and Snap.as, positioning it well within a niche market focused on privacy and open web publishing. Technically, the website employs modern web standards with a clean design, uses Piwik/Matomo for privacy-conscious analytics, and integrates well within its ecosystem. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and formal policies such as terms of service and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, but could improve compliance and security transparency.

C

Canned Dragons

canneddragons.net

51

Canned Dragons is a personal weblog authored by Robert Rackley, focusing on topics such as faith, noise, and technology. The site aggregates thoughts from independent blogs and social media, aiming to celebrate the early days of blogging. It operates as a small-scale content publishing platform with a niche audience interested in personal reflections and tech commentary. The website is built on the Ghost CMS platform, leveraging modern web technologies including Google Fonts and FontAwesome icons. Analytics are implemented via Tinylytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance mechanisms. The absence of WHOIS data raises concerns about domain registration legitimacy, although the site content appears genuine and safe. Overall, the site is functional and well-designed but would benefit from enhanced privacy and security practices.

Brights Advisory s.r.o. is a Czech Republic based consulting firm specializing in strategy, process, IT, risk, and business architecture with over 15 years of experience. They serve corporate clients primarily in finance, energy, and real estate sectors, offering expert consulting and innovation project facilitation. The website presents a professional image with detailed case studies and client references, indicating a strong market position within their niche. Technically, the website uses basic technologies including an outdated jQuery version and lacks modern security headers or privacy policies, which are areas for improvement. The security posture is moderate with no visible critical vulnerabilities but missing DNSSEC and security headers. Contact information is clearly provided, but privacy and cookie policies are absent, impacting compliance. Overall, the site is trustworthy and professional but would benefit from technical and compliance enhancements.

C

Crea Industria

creaindustria.com

48

Crea Industria is a specialized Mexican advertising agency focusing on B2B digital marketing and lead generation for industrial and technical companies. With over 25 years of experience and more than 100 satisfied clients, the company offers a comprehensive suite of services including web development, digital marketing strategies, SEO, and data analysis tailored to industrial sectors. Their market position is that of a niche expert agency with a strong local presence in Mexico. Technically, the website employs modern frontend technologies such as Bootstrap 5.3.3, Google Fonts, and various JavaScript libraries, with integration of Google Analytics and Mouseflow for user behavior tracking. The site is mobile optimized and well-structured, providing a good user experience. Security-wise, the site uses HTTPS and CAPTCHA on forms but lacks DNSSEC and explicit security headers, which are recommended improvements. Privacy compliance is basic with a privacy policy available but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

W

WhatIsMyBrowser.com

whatismybrowser.com

67

WhatIsMyBrowser.com is a specialized technology website providing users with detailed information about their web browsers, operating systems, and device settings. Founded in 2010, it serves a broad audience ranging from general internet users to technical support professionals by offering browser detection, version checking, and troubleshooting guides. The site also provides developer tools and APIs for user agent parsing, positioning itself as a niche player in the browser information and diagnostics market. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data to deliver a responsive and accessible user experience. Affiliate marketing, particularly with NordVPN, supplements its revenue model. Security-wise, the site enforces HTTPS and maintains a security statement page but lacks some advanced security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, although the website content and branding appear professional and trustworthy. Overall, the site demonstrates a solid technical foundation and business model but could improve in privacy compliance and domain registration transparency.

O

Orine

orine.one

56

Orine is a newly established Czech technology company specializing in customized information systems tailored for small and medium businesses (SMB). The website presents a minimalistic design focused on providing contact information and remote support services. The business targets SMBs seeking bespoke IT solutions, positioning itself as a niche provider in the Czech market. The domain was registered recently in March 2024, consistent with a startup or new venture. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS. Hosting is provided via websupport.sk with DNS servers aligned accordingly. The site is accessible over HTTPS but lacks DNSSEC and security headers, indicating room for improvement in security hardening. Performance and mobile optimization are basic, with no detected analytics or tracking technologies. From a security perspective, the site has a moderate posture with HTTPS enabled but missing critical security headers and no visible privacy or cookie policies, which impacts GDPR compliance. Contact information is clearly provided, but no incident response or security policy details are available. The domain registration data aligns well with the website's claims, showing no suspicious patterns, but the overall digital maturity is low. Overall, Orine's website is functional but minimal, with significant opportunities to enhance security, privacy compliance, and content richness to build trust and professionalism. Strategic improvements in these areas will support better market positioning and regulatory adherence.

A

Adam Trnka

trnka.one

58

Adam Trnka's website serves as a personal portfolio showcasing his expertise as a technology enthusiast, product manager, consultant, creative, and cameraman. The site highlights his experience in digitalizing business needs, video production, and technology development. The business operates primarily as a small-scale service provider targeting clients who require IT consulting, product management, and creative video services. The website is professionally designed with clear contact information and a consistent brand image, though it lacks formal privacy and cookie policies. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Fonts. It is mobile optimized and presents a good user experience. However, there is no evidence of advanced security headers or HTTPS enforcement visible in the provided data, which limits the security posture. No analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and transparency. The website itself does not show signs of malicious content or vulnerabilities but lacks formal security and privacy documentation. The contact information is clearly presented, supporting business credibility. Overall, the website is a functional and professional personal portfolio with moderate technical maturity and security posture. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

The domain ckpalava.cz currently hosts only a Webnode placeholder error page indicating the domain is available for registration and website creation. There is no active business content, contact information, or privacy and security policies present. The website is hosted on the Webnode platform with content delivered via Cloudfront CDN. The technical infrastructure is basic and lacks modern security headers or SSL configuration details visible in the content. The absence of business information and compliance documentation indicates the domain is not currently in active commercial use.

Heyduk, Musil & Strnad, operating under HMS Design, is a well-established graphic design studio based in the Czech Republic, with a history dating back to 2000 and a domain registered since 2005. The company specializes in brand development, visual identity, and a broad range of creative services including logos, graphic manuals, annual reports, campaigns, and web design. Their portfolio and award recognition position them as a reputable player in the creative design market. Technically, the website employs modern web technologies such as lazy loading and carousel sliders, ensuring good performance and mobile optimization. However, the site lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and social media presence, but could benefit from enhanced security and compliance features.

S

SuperSaaS

supersaas.cz

63

SuperSaaS.cz is a Czech localized version of the SuperSaaS online booking and reservation system, offering a flexible SaaS platform for various service providers and businesses. The website demonstrates a mature market presence with over 205,000 customers worldwide and integrates multiple payment and calendar services to enhance user experience. The platform targets small to medium businesses and individual professionals seeking efficient scheduling solutions. Technically, the site employs modern web technologies, including asynchronous JavaScript, SVG graphics, and Google Analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. However, WHOIS data is unavailable, limiting domain registration transparency. Overall, the site is professional, trustworthy, and well-optimized, with minor recommendations for enhanced security headers and incident response documentation.

Šroubárna Kyjov, spol. s r.o. is a well-established Czech manufacturing company specializing in the production of fastening materials such as screws, nuts, and forgings primarily for the automotive and railway industries. Founded in 1950, the company has grown to become the largest European manufacturer of railway screws and maintains a strong export presence across multiple countries. The website reflects a professional corporate presence with clear product offerings and export markets. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Owl Carousel, and implements a comprehensive cookie consent mechanism compliant with GDPR standards. Security posture is moderate with HTTPS implied and cookie consent in place, but lacks explicit security headers and incident response contact information. Overall, the website is well-structured, mobile-optimized, and trustworthy, supporting the company's market position and business credibility.

M

Mountfield HK, a.s.

hchk100.cz

42

The website www.hchk100.cz serves as the official platform commemorating the 100th anniversary of hockey in Hradec Králové, operated by Mountfield HK, a.s. It provides rich historical content, event information, collectible merchandise, and community engagement opportunities targeted primarily at hockey fans and local sports enthusiasts. The site is well-structured with multimedia elements and modern front-end technologies, delivering a good user experience and mobile responsiveness. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS data reduce its overall trustworthiness and compliance posture. Security measures such as security headers are not evident, and while HTTPS is implied, explicit SSL configuration details are unavailable. The site uses Google Analytics for user tracking but lacks visible consent mechanisms, indicating privacy compliance gaps. Overall, the website is professional and content-rich but requires improvements in security, privacy, and transparency to enhance trust and compliance.

C

Car Talk Store

shamelesscommerce.com

59

The Car Talk Store is an official e-commerce platform offering merchandise related to the popular NPR show Car Talk. The website is currently password protected and undergoing maintenance, with a simple email notification form for interested customers. The business operates on the Shopify platform, leveraging its e-commerce and analytics infrastructure. The site demonstrates basic content quality and branding consistency but lacks comprehensive privacy and cookie policies. Security posture is moderate with HTTPS enforced but missing advanced security headers and DNSSEC. The domain is well aged and registered consistently, supporting business legitimacy. Overall, the site is functional but would benefit from enhanced privacy compliance and security hardening.

U

Unison Computing

unison-lang.org

55

Unison Computing operates the website unison-lang.org, promoting the Unison programming language, a statically-typed, functional language designed for distributed programming and modern software development. The company positions itself as a public benefit corporation focused on innovative developer tools and cloud services. The website is well-designed, content-rich, and targets developers interested in functional programming and distributed systems. Technically, the site uses modern web technologies including Google Fonts, Plausible Analytics, Algolia search, and interactive JavaScript libraries, delivering a fast and accessible user experience. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are missing. The WHOIS data is unavailable due to query failure or privacy protection, but the domain and website appear legitimate and professional. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

M

Musing Studio

write.as

50

Write.as is a privacy-focused minimal blogging platform operated by Musing Studio, founded in 2015 and based in the United States. The platform emphasizes distraction-free writing, privacy, and ease of publishing, supporting anonymous and multi-identity blogging with integration into federated social networks like Mastodon. It offers subscription plans for individual prolific writers and teams, with features such as custom domains, ActivityPub federation, and email subscriptions. The website is professionally designed with clear navigation and consistent branding, targeting writers and privacy-conscious users. Technically, Write.as uses modern web technologies including HTML5, CSS3, JavaScript, and leverages the open source WriteFreely platform. The site is fast, mobile-optimized, and SEO-friendly. Analytics are handled via Matomo, reflecting a privacy-conscious approach. However, no cookie consent mechanism was detected, which may impact compliance in some jurisdictions. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. Security headers are not explicitly detected, and no public security policy or incident response information is available. There is no vulnerability disclosure policy or security.txt file published. Overall, the security posture is good but could be improved with additional transparency and controls. The domain registration data is consistent with the business claims, showing a legitimate and stable registration with no privacy protection masking ownership. The domain age aligns with the company's founding date, supporting trustworthiness. Social media presence and partner domains further reinforce legitimacy. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to enhance compliance and trust.

A

Analog Office

analogoffice.net

53

Analog Office is a niche personal blog dedicated to analog and hybrid analog-digital productivity and organizational methods. The site offers detailed, practical advice on paper planners, checklists, filing systems, and managing life with analog tools, targeting individuals who appreciate or want to adopt analog productivity techniques. The website is hosted on the micro.blog platform and built with the Hugo static site generator, leveraging modern web technologies such as Google Fonts, Font Awesome, and Highlight.js for code syntax highlighting. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact emails or phone numbers are publicly listed, but a contact form is available. The domain registration is consistent, legitimate, and appropriate for the business age and scope.

D

DadReadsRomance

dadreadsromancebooks.online

59

DadReadsRomance is a niche personal blog dedicated to reviewing romance books from a father's perspective. The site offers detailed book reviews, reading lists, and interactive features such as voting on future reviews. It targets general audiences interested in romance literature and parenting viewpoints. The business model is content-driven with engagement through email subscriptions and social media. Technically, the site is built on the Write.as platform, leveraging modern web technologies and CDN services, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is trustworthy and professionally presented but could improve in privacy and security best practices.

82MHz is a personal blog operated by an individual named Andreas, focusing on topics such as retro technology, music, books, and cultural commentary. The website serves a niche audience interested in these subjects and offers blog posts, RSS feeds, and photo sharing links. The domain is relatively new, registered in 2023, and hosted via Manitu DNS servers. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without a known CMS or advanced frameworks. Security posture is minimal with no detected security headers or privacy policies, and no evidence of HTTPS enforcement was found in the provided data. Contact is primarily via an obfuscated email and a Mastodon social profile link. Overall, the site is safe, with no adult or explicit content, and presents a moderate level of professionalism and trustworthiness.

J

Joel's Homepage

joelchrono.xyz

61

Joelchrono.xyz is a personal blog operated by an individual named Joel from Mexico, focusing on technology, free software, gaming, and personal hobbies such as origami. The site serves a niche audience interested in these topics and supports itself through donations via PayPal, Liberapay, Ko-fi, and Monero. The website is built using Jekyll and hosted with modern infrastructure, featuring good mobile optimization and accessibility. The site integrates with the Fediverse and IndieWeb communities, enhancing its social presence. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript, with minimal external dependencies. It employs HTTPS and domain locking features to secure the domain, but lacks DNSSEC and explicit security headers. Analytics are minimal and privacy-respecting, with no intrusive tracking or advertising. However, the site does not provide privacy or cookie policies, which is a compliance gap. From a security perspective, the site demonstrates basic good practices such as HTTPS and domain transfer protections but could improve by enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure policy. No forms collect sensitive data, reducing attack surface. The domain registration details align well with the website content, indicating legitimacy. Overall, the site is a well-maintained personal blog with moderate security posture and good technical implementation but lacks formal privacy and security documentation. Strategic improvements in compliance and security headers would enhance trust and protection.

M

Musings from a Tangled Mind

musingsfromatangledmind.com

60

Musings from a Tangled Mind is a personal blog established in 2013, offering humorous and reflective content on everyday life, family, books, and social issues. The site is hosted on WordPress.com and leverages standard WordPress technologies including Jetpack and Gutenberg. The blog targets a general audience interested in lifestyle and social commentary. Technically, the site is well-structured with good mobile optimization and moderate performance, but lacks advanced security headers and DNSSEC. Security posture is adequate with HTTPS enforced and domain locks in place, but privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is safe, trustworthy, and professionally maintained but could improve compliance and security practices.

M

Musing Studio

remark.as

59

Remark.as is a specialized commenting platform designed to enhance conversations around Write.as blogs and other websites supporting open web protocols like ActivityPub and Webmentions. It positions itself as a privacy-conscious, human-centric alternative to traditional social media comment systems, emphasizing context and choice in conversation modes. The business operates within the technology sector, under the parent company Musing Studio, and targets bloggers and readers seeking thoughtful engagement tools. Technically, the website uses modern web standards, integrates with the Write.as ecosystem, and employs privacy-respecting analytics (Piwik/Matomo). The site is well-designed, mobile-optimized, and provides clear navigation and content relevant to its niche.

Snap.as is a minimalist photo sharing platform operated under Musing Studio, focusing on providing users with a clean, distraction-free environment to upload and share photos and galleries. The service targets photographers, hobbyists, families, and clients who value simplicity and privacy. The website is well-branded and consistent with the broader suite of related services offered by Musing Studio, including Write.as and Submit.as. The platform emphasizes privacy by avoiding ads and pop-ups, and it supports flexible captions and clean photo albums.

D

Data & Design Group

data-and-design.org

53

The Data & Design Group is an interdisciplinary academic research group affiliated with the University of Colorado Boulder, focusing on using design to understand and reimagine socio-technical systems. Their work emphasizes accessibility in data analysis, data ethics, and interactive visualization tools. The website reflects a small, specialized academic entity with a clear research focus and target audience of researchers, students, and activists interested in data ethics and design. Technically, the website is built using the Jekyll static site generator with modern JavaScript libraries such as jQuery and Moment.js. The site demonstrates good design quality, mobile optimization, and SEO practices, though performance is moderate. Hosting appears to be via NameCheap, with no advanced security configurations like DNSSEC enabled. No privacy or cookie policies are present, and no contact emails or phone numbers are provided, limiting user engagement and compliance transparency. From a security perspective, the site uses a domain status that prevents unauthorized transfers but lacks DNSSEC and visible security headers. There is no evidence of HTTPS enforcement or vulnerability disclosure mechanisms. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the academic nature and lack of sensitive data collection, but the site should enhance privacy compliance and security configurations to build trust and meet regulatory expectations.

G

Geri Coady

hellogeri.com

50

Geri Coady is a Canadian-British illustrator, designer, and author specializing in graphic design, print production, and culturally inspired illustration projects, notably 'Geri Draws Japan'. The website serves as a professional portfolio showcasing selected works, interviews, and a personal shop. The business operates in a niche creative sector with a small scale and a focused target audience interested in Japanese culture and art. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, with Google Fonts integration. It is hosted on servers indicated by the name servers guru.net.uk, though the exact hosting provider is not identified. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited to an email address, with no phone or physical address provided. Social media links are present and consistent with the brand. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

J

JS Bin

jsbin.com

49

JS Bin is a well-established online collaborative JavaScript debugging and code editing platform founded in 2008. It serves developers and programmers by providing a live pastebin environment supporting HTML, CSS, JavaScript, and various preprocessors. The platform operates on a freemium business model with options for Pro upgrades and donations, positioning itself as a niche tool in the web development ecosystem. Technically, JS Bin leverages modern web technologies including HTML5, CSS3, JavaScript, jQuery, and CodeMirror editor, hosted on Amazon AWS infrastructure. It integrates Google Analytics and Google Tag Manager for user tracking and performance monitoring. Security-wise, the site enforces HTTPS, uses sandboxed iframes for output isolation, and maintains a clientTransferProhibited domain status, indicating domain transfer restrictions. However, DNSSEC is not enabled, and no explicit security headers or vulnerability disclosure mechanisms are present, which are areas for improvement. Privacy compliance is basic with a privacy policy and terms of service available but lacks cookie consent mechanisms and detailed GDPR compliance indicators. Overall, JS Bin presents a professional, trustworthy, and technically sound platform with moderate security posture and room for enhanced privacy and security practices.

CSS Zen Garden is a niche educational and inspirational website focused on demonstrating the power and beauty of CSS-based web design. Founded in 2003, it serves primarily web designers and developers by showcasing various CSS designs that can be applied to a consistent HTML structure. The site offers downloadable sample files, resources, and a platform for community participation, positioning itself as a respected resource in the web design community. Technically, the site uses modern HTML5 and CSS3 standards with responsive design principles and is hosted on DreamHost. The site is accessible, well-structured, and optimized for mobile and accessibility standards, though performance is moderate. Security-wise, the domain is stable and legitimate with a long registration history and transfer protections, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. No forms or data collection mechanisms are present, minimizing privacy risks. Overall, the site is trustworthy and professional but could improve compliance and security posture.

D

Dave Shea

daveshea.com

42

Dave Shea's website is a personal portfolio showcasing a curated selection of web design projects spanning from 2002 to present. The site targets web designers, developers, and digital creatives interested in design inspiration and resources. The business model is primarily a personal brand and portfolio presentation without direct commercial transactions. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager for visitor tracking. Hosting is provided by DreamHost, and fonts are served via Adobe Typekit. The site demonstrates good design quality, clear navigation, and moderate performance with basic mobile optimization. Security posture is moderate; while the domain is secured with clientTransferProhibited status and uses HTTPS, DNSSEC is not enabled and no security headers are detected. Privacy compliance is low due to absence of privacy and cookie policies or consent mechanisms. Contact information is limited to a contact form and social media links without explicit emails or phone numbers. Overall, the site is trustworthy and professional but could improve in security and privacy compliance.