Security Directory

Myriad Media, Inc. is a small, established multimedia communications agency founded in 1997, specializing in the intersection of design, technology, and strategy. They serve a diverse clientele including private sector companies, government agencies, educational institutions, and nonprofits. Their key services include graphic design, custom application development, content management, responsive websites, branding, UX/UI design, and IoT solutions. The company holds relevant certifications such as 8(a) and Virginia SWaM, positioning them well for government contracting opportunities. Technically, the website employs modern web technologies including HTML5, CSS3, Bootstrap, jQuery, and various JavaScript libraries for UI enhancements. The presence of Sitefinity CMS and ASP.NET C# in portfolio descriptions suggests a robust backend infrastructure. The site is mobile optimized and demonstrates good design and navigation, though accessibility and SEO optimizations are basic. Hosting appears to be supported by AWS DNS services. From a security perspective, the domain is well-established with a long registration history and clientTransferProhibited status, indicating domain transfer protection. However, the site lacks DNSSEC, security headers, and explicit privacy or cookie policies, which are areas for improvement. No incident response or vulnerability disclosure information is provided. The contact information is clearly presented, including a company email and phone number, enhancing business credibility. Overall, the website is professional and trustworthy with good business credibility and technical implementation. Privacy compliance and security posture require enhancement to meet modern standards. There are no indications of adult or questionable content, and no WAF or blocking mechanisms interfere with content accessibility.

N

NPTE Final Frontier

npteff.com

55

NPTE Final Frontier is an online educational platform specializing in preparatory courses for the National Physical Therapy Exam (NPTE). The company offers a variety of services including video study courses, group discounts, scholarships, and free classes, targeting physical therapy students. The website is built on WordPress with a mature LMS infrastructure using LearnDash and WooCommerce, hosted by Automattic Inc. The technical setup is modern and functional, with good mobile optimization and user experience. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and focused on a niche educational market.

T

The Guthy-Jackson Charitable Foundation

guthyjacksonfoundation.org

58

The Guthy-Jackson Charitable Foundation is a well-established non-profit organization dedicated to funding research and advocacy for Neuromyelitis Optica (NMO), a rare autoimmune disease. Founded in 2008, the foundation has positioned itself as a leader in the healthcare non-profit sector, with a strong focus on patient support, research funding, and education. Their website reflects a professional and consistent brand image, targeting patients, caregivers, researchers, and advocates. The foundation leverages digital tools such as WordPress CMS, SEO plugins, and Google Analytics to maintain an effective online presence. Technically, the website is built on a modern WordPress platform with integrations for SEO and analytics, hosted with Cloudflare DNS and media assets served via AWS S3. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers are missing. The site includes a GDPR-compliant cookie consent mechanism, reflecting attention to privacy compliance. Security-wise, no critical vulnerabilities or blocking mechanisms were detected. The domain registration data is consistent with the organization's history and claims, enhancing trustworthiness. However, the absence of explicit privacy policy and terms of service pages in the analyzed content is a gap in compliance documentation. No incident response or vulnerability disclosure information is publicly available. Overall, the foundation's website is professional, trustworthy, and secure, with room for improvement in security headers and compliance documentation. Strategic recommendations include enabling DNSSEC, adding comprehensive privacy and terms pages, and implementing security headers to enhance protection and trust.

S

Sumaira Foundation

sumairafoundation.org

64

The Sumaira Foundation is a small, international non-profit organization dedicated to raising awareness, building community, supporting research, and advocating for patients affected by rare neuroimmune disorders such as Neuromyelitis Optica Spectrum Disorder (NMOSD) and Myelin Oligodendrocyte Glycoprotein Antibody-Associated Disease (MOGAD). The foundation operates a professional and well-structured website that serves as a hub for patient resources, research funding, and community engagement. Their market position is strong within the rare disease advocacy space, supported by partnerships with major pharmaceutical companies and community organizations. Technically, the website is built on WordPress with modern technologies including GiveWP for donations, Stripe for payment processing, and Google Tag Manager for analytics. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. The security posture is solid, though the site could benefit from publishing explicit security policies and incident response contacts. The absence of WHOIS data due to privacy protection is typical for non-profits and does not detract from the site's legitimacy. Overall, the foundation demonstrates a high level of professionalism, trustworthiness, and commitment to its mission. Strategic recommendations include enhancing transparency around security policies, adding vulnerability disclosure information, and continuing to monitor third-party integrations for security risks. These steps will further strengthen trust and compliance in an increasingly regulated environment.

A

Alexion

alexion.com

63

Alexion is a well-established pharmaceutical company specializing in rare disease therapies and research, operating as part of AstraZeneca Rare Disease. The website reflects a mature enterprise with a clear focus on delivering innovative treatments and patient support services globally. The content is professionally presented, targeting patients, caregivers, healthcare professionals, and researchers. Technically, the site uses modern web technologies, including Google Tag Manager and AWS DNS infrastructure, and is likely built on the Sitecore CMS platform. The website is mobile-optimized and accessible, with good SEO practices evident. Security posture is solid with HTTPS and domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is weak on the main page, lacking explicit privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

C

Accueil | Chamonix

chamonix.com

52

The website www.chamonix.com serves as the official tourism portal for the Vallée de Chamonix-Mont-Blanc in France. It provides comprehensive information and services including accommodation booking, activity reservations, restaurant finders, event calendars, and transport details. The site targets tourists and visitors interested in mountain and nature experiences, positioning itself as a key resource for destination marketing in the hospitality sector. Technically, the site is built on Drupal 10 CMS and employs modern JavaScript libraries such as Swiper.js and Litepicker, alongside analytics tools like Matomo, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent management implemented, though explicit security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism present but no explicit privacy policy detected in the provided content. The absence of WHOIS registration data is a concern but does not appear to affect the site's legitimacy based on content and external references. Overall, the site is professional, user-friendly, and trustworthy, serving its business purpose effectively.

C

Communauté de Communes Pays du Mont-Blanc

montenbus.fr

53

Montenbus is a local on-demand transport service operated by the Communauté de Communes Pays du Mont-Blanc, serving multiple communes in the Mont-Blanc region of France. The service targets residents, secondary residents, vacationers, and persons with reduced mobility, offering subscription-based access with flexible reservation options via phone and a dedicated mobile app. The website presents a professional and user-friendly interface with clear information on tariffs, service operation, and accessibility features. Technically, the site is built on WordPress using the Divi theme and integrates common plugins for SEO, analytics, and user interaction. Security posture is adequate with HTTPS enforced, though additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, supporting user trust. However, the absence of WHOIS registration data reduces domain transparency, which is a minor concern given the official nature of the service and partner endorsements.

The analyzed website content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. The page primarily contains embedded JavaScript and CSS for the Chrome offline T-Rex game, with no business-related content, contact information, or policies present. Due to the lack of accessible content, no meaningful business description or market positioning can be derived. The technical infrastructure is limited to client-side scripts for the offline game, with no server-side or hosting details available. Security posture cannot be fully assessed due to missing HTTPS and security headers information. Overall, the site is not functional for end users and lacks essential compliance and business credibility elements.

S

SM3A

riviere-arve.org

48

SM3A is a French public entity focused on managing watercourses and environmental protection for 93 communes across 13 intercommunalities in the Arve watershed. The website presents a professional and well-structured digital presence built on WordPress with Elementor and Yoast SEO, supporting good content quality and user experience. The organization provides key services including flood prevention, aquatic environment management, and maintenance of watercourses and related infrastructure. Social media presence on Facebook, LinkedIn, and YouTube supports community engagement. Technically, the site uses modern plugins and libraries, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CAPTCHA usage, but lacks some security headers and explicit incident response information. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the organization. Overall, the site is trustworthy, safe, and serves its public service mission effectively.

Centre de la Nature Montagnarde is a French non-profit organization established in 2005, specializing in nature education and activities in the Mont-Blanc region. The organization targets schools, the general public, professionals, and groups with children, offering a variety of educational programs, public events, naturalist courses, and professional training. Their business model revolves around membership fees, activity registrations, and partnerships with local entities. The website reflects a consistent and professional brand image with clear contact information and partner logos, supporting its credibility in the regional education and environmental sector. Technically, the website is built using WebAcappellaFx CMS with a modern but straightforward tech stack including HTML5, CSS3, JavaScript, and libraries such as Blueimp Gallery and Animate.css. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, representing a compliance gap with GDPR requirements. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the organization's history. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment is low, with no signs of malicious content or vulnerabilities. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and conducting regular security audits to maintain compliance and trust. These steps will enhance the site's security posture and regulatory adherence while reinforcing user trust.

A

Atmo Auvergne-Rhône-Alpes

atmo-auvergnerhonealpes.fr

58

Atmo Auvergne-Rhône-Alpes operates as a regional air quality observatory providing comprehensive monitoring, data visualization, pollution alerts, and expert services to the Auvergne-Rhône-Alpes region in France. The organization targets citizens, public authorities, and businesses, positioning itself as a trusted public service entity with strong regional ties and partnerships. The website is built on a modern Drupal 9 CMS platform, leveraging mapping technologies like Leaflet and Mapbox GL, and incorporates privacy-conscious analytics via Matomo and cookie management through Tarteaucitron. Security posture is solid with HTTPS and privacy compliance, though explicit security headers and incident response information are not evident. The absence of WHOIS data limits domain trust assessment, but the professional presentation, official partnerships, and comprehensive content strongly indicate legitimacy. Overall, the website demonstrates a mature digital presence aligned with its public service mission.

The website todofp.es serves as the official Spanish government portal for Formación Profesional (Vocational Training). It provides comprehensive information about educational offerings, how and where to study, accreditation, and related news. The platform targets students, educators, and professionals interested in vocational education in Spain, positioning itself as a trusted and authoritative source backed by the Ministry of Education, Formación Profesional y Deportes. The content is well-structured, professionally presented, and consistent with government branding. Technically, the site uses a traditional web stack with jQuery, Google Custom Search, and Twitter widgets. It is served over HTTPS, includes cookie consent mechanisms, and demonstrates good mobile optimization and accessibility. However, some security best practices such as security headers are not evident, and no advanced frameworks or CMS are detected. Performance is moderate, with room for optimization. From a security perspective, the site shows a basic but adequate posture with HTTPS and cookie consent. No vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of WHOIS data limits domain registration analysis, but the domain's alignment with official government content and branding supports legitimacy. Privacy policies and terms of service are present and GDPR compliant. Overall, todofp.es is a credible, safe, and professionally maintained government educational resource. Strategic improvements could include enhancing security headers, publishing explicit security policies, and improving technical performance to further strengthen trust and compliance.

I

Instituto Nacional de tecnologías educativas y formación del profesorado

intef.es

57

INTEF (Instituto Nacional de Tecnologías Educativas y Formación del Profesorado) is a Spanish government entity under the Ministry of Education and Vocational Training focused on advancing educational methodologies through digital transformation and teacher training. It offers a broad range of digital educational resources, training programs, and initiatives aimed at improving digital competence in schools across Spain. The website serves as a central hub for these resources and initiatives, targeting educators, students, families, and educational institutions nationwide. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Owl Carousel, enhanced with Google reCAPTCHA and Matomo analytics for security and user behavior insights. The site is well-optimized for SEO and mobile devices, with good accessibility features and professional design. HTTPS is enforced, and basic security best practices are observed, though some security headers could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure mechanisms are not present, which could be enhanced to improve trust and security readiness. Overall, INTEF presents a trustworthy, professional, and well-maintained digital presence consistent with its role as a national educational institution. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and providing clearer contact channels for security incidents to further strengthen its security posture and compliance.

U

uvex group

uvex.com

69

uvex group is a well-established manufacturer specializing in safety, sports, and eyewear products with a global footprint. The company operates multiple subsidiaries and brands, serving industrial clients and sports enthusiasts alike. Their business model combines manufacturing with direct online sales and B2B partnerships, positioning them as a significant player in the manufacturing sector in Germany and internationally. The website reflects a professional corporate presence with clear branding and comprehensive product offerings.

A

Agence nationale du Sport

agencedusport.fr

59

Agence nationale du Sport is the official French national agency dedicated to the development and support of sports activities, high performance athletes, and territorial sport projects. It operates under the French Ministry of Sports and provides funding, governance, and coordination services to sports federations, athletes, and local authorities. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with government standards. Technically, the site is built on Drupal CMS with modern libraries and frameworks, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. WHOIS data is not available, likely due to privacy protection, which is justified for a government-related domain. Overall, the site is trustworthy, professional, and compliant with GDPR regulations.

M

Megève

megeve.fr

10

The website represents the official municipal portal for the Commune of Megève, France, providing residents, seasonal workers, tourists, and professionals with comprehensive information about local government services, news, and community resources. It holds a strong market position as the authoritative source for municipal information and services in Megève. The site is well-structured, bilingual (French and English), and offers multiple user engagement points including contact forms, newsletters, and social media links. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, Elementor, and WP Rocket, indicating a mature digital infrastructure. Performance and mobile optimization are good, with accessibility features implemented. Analytics are managed via Google Tag Manager, with cookie consent mechanisms in place, reflecting compliance with privacy regulations. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers suggests room for improvement. The lack of WHOIS data limits domain trust analysis, but the domain's alignment with official municipal branding and contact information supports legitimacy. Overall, the website is a reliable, professional municipal platform with good content quality and user experience. Strategic recommendations include enhancing security headers, maintaining plugin updates, and monitoring for any suspicious external content to ensure ongoing trust and compliance.

A

American Heart Association

heart.jobs

11

The American Heart Association operates a comprehensive career portal at heart.jobs, providing employment opportunities within a leading non-profit healthcare organization focused on cardiovascular health and stroke prevention. The website is well-branded, professionally designed, and targets job seekers interested in healthcare, advocacy, fundraising, research, and related fields. The organization holds a strong market position as a trusted non-profit with multiple certifications and awards, including recognition by Forbes and Diversity Inc. The technical infrastructure leverages modern JavaScript frameworks (Nuxt.js), Google Tag Manager for analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and clear warnings against fraudulent job offers, though some security headers could be improved. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the site reflects a mature digital presence aligned with the organization's mission and audience.

A

American Stroke Association

stroke.org

11

The American Stroke Association website serves as a comprehensive resource dedicated to stroke awareness, education, and support. As a division of the American Heart Association, it holds a strong market position in the healthcare non-profit sector, targeting stroke survivors, caregivers, healthcare professionals, and the general public. The site offers extensive information on stroke symptoms, risk factors, recovery, and prevention, alongside volunteer and donation opportunities. Technically, the website employs modern web technologies including Sitecore CMS, Bootstrap, Coveo search, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements key security headers, and provides cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, though it could enhance transparency by publishing dedicated security and vulnerability disclosure information.

F

FREE WORK

freeworkenvelopa.cz

42

The website 'FREE WORK' appears to be a small business or personal project hosted on the Wix platform. The site content is minimal and primarily serves as a basic online presence with branding elements but lacks detailed business descriptions, contact information, or comprehensive policies. Technically, the site uses Wix's standard infrastructure, including Google Tag Manager and CookieYes for cookie management, indicating some level of digital maturity. However, the absence of privacy and cookie policies, security headers, and contact details suggests limited compliance and security posture. The site is accessible without any WAF or security challenges, but the lack of WHOIS data and registrant information reduces trustworthiness. Overall, the site is functional but basic, with significant room for improvement in security, compliance, and business credibility.

Banka CREDITAS a.s. is a Czech bank established in 1996, originally as a credit union and licensed as a bank since 2016. It offers a range of financial services including savings accounts, loans, investment products, and corporate financing primarily targeting Czech companies and expanding into Western Europe. The bank is part of the CREDITAS Group, a Czech investment group with interests in financial services, energy, and real estate. The website is professionally designed, mobile-optimized, and provides comprehensive business and contact information. Technically, it uses modern web technologies and a proprietary CMS (Solidpixels). Security posture is good with HTTPS enforced and secure forms, though explicit security headers and published security policies are lacking. Privacy compliance is partial with a cookie consent mechanism but no clear privacy policy page found. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high.

Z

Zrůst Trailers, s.r.o.

elektromobily-carello.cz

9

Elektromobily Carello, operated by Zrůst Trailers, s.r.o., is a Czech manufacturer specializing in electric utility vehicles with over 40 years of experience. Their product range includes electric three-wheelers, compact electric cars, and electric transporters designed for municipal, commercial, and industrial use. The company emphasizes reliability and supports state subsidies for electric vehicles, positioning itself as a trusted partner in the electromobility sector. The website presents detailed product information with images and contact details, targeting businesses and municipalities interested in electric transport solutions. Technically, the website is built on WordPress using Elementor, with standard web technologies and Google Fonts. It is mobile optimized and provides a good user experience, although SEO and accessibility could be improved. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. No WHOIS data is available, likely due to privacy protection, but the website content and contact information suggest legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

Z

ZRŮST Trailers, s.r.o.

lorries-privesy.cz

46

The website www.lorries-privesy.cz represents ZRŮST Trailers, s.r.o., a small Czech company specializing in the sale and rental of various trailers including motorcycle trailers, car carriers, construction trailers, flatbed trailers, and boat trailers. The company has a stable market presence with over 7 years of experience and offers high-quality, safe trailers under the LORRIES brand. The site is professionally designed using WordPress and Elementor, with clear navigation and mobile optimization. Privacy and cookie policies are implemented with user consent mechanisms, reflecting GDPR compliance. Security posture is good with HTTPS and no visible vulnerabilities, though additional security headers and incident response info could improve it. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's legitimacy. Overall, the site is a trustworthy and professional digital presence for a niche transportation business.

C

CarbonTear

carbontear.cz

10

CarbonTear is a small Czech Republic based company specializing in luxury caravans, offering custom-made caravans with 100% handmade production in the EU and a caravan rental service. The company targets customers in the Czech and Slovak markets who seek high-quality, bespoke caravans. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to privacy. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is good with HTTPS and consent mechanisms, but could be improved by adding security headers and incident response information.

Č

Člověk v tísni

skutecnydarek.cz

61

The website skutecnydarek.cz operates as an e-commerce platform for charitable gifts affiliated with the non-profit organization Člověk v tísni. It targets a Czech-speaking audience, offering original charitable gifts that support people in need. The site is professionally designed with consistent branding and good content quality, reflecting a medium-sized non-profit entity with a clear mission. Technically, the site employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Microsoft Clarity for analytics, and Stripe for payment processing. The presence of HTTPS and cookie consent mechanisms indicates a mature digital infrastructure. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security headers could be confirmed. Privacy compliance is good with a detailed cookie policy and consent banner, but no explicit privacy policy or terms of service pages were detected in the provided content. The absence of WHOIS data limits domain trust analysis, but the website's content and technology usage suggest legitimacy. Overall, the site is a trustworthy, well-maintained charitable e-commerce platform with room for improvement in transparency and security documentation.

R

Regionální rozvojová agentura jižní Moravy

morava-napoleonska.cz

43

Morava Napoleonská is a regional tourism website focused on promoting historical and cultural sites related to Napoleonic battles in Moravia, Czech Republic. The site offers visitors information on locations, events, videos, and personalized itineraries to explore the region's rich European history. The platform targets history enthusiasts and tourists interested in cultural heritage, positioning itself as a niche informational resource supported by regional partners. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and integrates Google Analytics and Facebook social plugins. While the site includes a cookie consent mechanism, it lacks explicit privacy policy and terms of service pages, and no direct contact information is provided. Security posture is moderate with room for improvement, especially regarding modernizing libraries and implementing security headers. WHOIS data is unavailable, which reduces domain trust verification, but partner logos and content quality suggest legitimacy. Overall, the website is functional and informative but would benefit from enhanced security, privacy compliance, and transparency.

Moravská národní obec is a small non-profit organization dedicated to promoting Moravian culture, history, and traditions. The website serves as a hub for news, events, and initiatives related to Moravia, targeting local communities and cultural enthusiasts. The organization maintains an active presence through social media channels such as Facebook and YouTube, and provides educational and cultural content primarily in Czech. The website is built on WordPress with common plugins for event management and media galleries, reflecting a moderate level of digital maturity.

P

Projekt Austerlitz

austerlitz.org

59

Projekt Austerlitz is a cultural and historical initiative dedicated to commemorating the Battle of Austerlitz and related Napoleonic events through reenactments, educational content, and public events. The project has established partnerships with regional government bodies, tourism organizations, and media outlets, indicating a recognized presence in the cultural heritage sector in the Czech Republic. The website serves as an official portal for event information, historical articles, and partner engagement, targeting history enthusiasts and the general public interested in Napoleonic history. Technically, the website is built on an older version of WordPress (4.9.1) with legacy JavaScript libraries such as jQuery 2.0.3 and Fancybox 2.1.5. While the site uses HTTPS, it lacks modern security headers and employs outdated software versions, which may expose it to security vulnerabilities. The site is moderately optimized for performance and mobile use but could benefit from modernization and improved accessibility features. From a security perspective, the site has no visible privacy or cookie policies, no incident response or security policy disclosures, and no contact information for security or data protection officers. The WHOIS data is unavailable or malformed, limiting domain trust verification. Despite these gaps, the site does not show signs of malicious activity or blocking by WAFs, and the content is safe and appropriate for general audiences. Overall, Projekt Austerlitz presents a credible cultural project with room for improvement in technical security, privacy compliance, and transparency. Strategic enhancements in these areas would strengthen trust and protect both the project and its visitors.

H

Health and Safety Authority

hsalearning.ie

66

The Health and Safety Authority (HSA) operates the hsalearning.ie platform, providing free, accessible online health and safety awareness courses targeted at workers, employers, educators, and students in Ireland. The platform leverages the Moodle LMS to deliver structured educational content, supporting workplace safety and compliance. The website is professionally designed with consistent branding and clear navigation, emphasizing accessibility and user experience. Privacy and cookie policies are comprehensive and GDPR compliant, supported by Cookiebot for consent management. Technically, the site uses modern web technologies including Moodle, YUI, jQuery, and FontAwesome, hosted by Hosting Ireland with a secure HTTPS configuration. Security posture is solid with room for improvement in DNSSEC and security headers. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business history, indicating legitimacy and trustworthiness.

BeSMART.ie is an official online platform developed by the Health & Safety Authority of Ireland to assist businesses in creating safety statements and conducting risk assessments. The website targets Irish businesses across multiple sectors including agriculture, construction, and other industries, providing tailored health and safety compliance resources. It holds a strong market position as a government-backed authoritative resource, supporting over 300 business types with sector-specific guidance. Technically, the website employs a modern tech stack including jQuery, Foundation CSS framework, and various JavaScript libraries for UI enhancements and cookie management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent is implemented with granular user controls, reflecting good privacy compliance practices. From a security perspective, the site enforces HTTPS, uses CSRF tokens on login forms, and integrates cookie consent mechanisms. However, it lacks DNSSEC and some advanced security headers, and does not publish a security policy or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, BeSMART.ie presents a trustworthy, professional, and secure platform suitable for its government service role. Strategic improvements in security headers, DNSSEC, and transparency around security policies would further enhance its posture and user trust.

Z

Zlín Film Workshops

zfw.cz

65

Zlín Film Workshops is a small Czech Republic-based business specializing in film education and workshops, including camera, sound, lighting, and photography training. The website is professionally designed using the Wix platform and targets film professionals and enthusiasts seeking practical training. The business operates in a niche media education sector with a regional focus. Technically, the website uses Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structured data indicate legitimacy. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security best practices.

K

Koredge

amenothes.com

58

Koredge is a well-established French digital agency and ESN with over 25 years of experience, specializing in custom web development, digital marketing, and bespoke application solutions. They serve a diverse clientele across sectors such as transportation, tourism, sport, healthcare, and public administration, positioning themselves as a trusted partner for digital transformation and growth. Their business model combines strategic consulting with technical execution, offering tailored digital solutions including e-commerce, UX/UI design, and hosting services. Technically, the website is built on WordPress with modern frameworks and plugins like Yoast SEO, Google Tag Manager, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile-optimized, SEO-friendly, and uses structured data for enhanced search visibility. Multimedia content such as videos and client testimonials enhance user engagement. From a security perspective, the site enforces HTTPS and uses asynchronous loading for tracking scripts, but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies and missing WHOIS domain registration data reduce overall trust and compliance posture. Overall, Koredge presents a professional and credible digital presence with strong business and technical foundations. The main risks relate to incomplete privacy compliance and lack of domain registration transparency. Strategic improvements in security headers, privacy disclosures, and WHOIS data transparency are recommended to enhance trust and regulatory compliance.

M

Mayfield Brain & Spine

mayfieldclinic.com

56

Mayfield Brain & Spine is a well-established healthcare provider specializing in neurological and spine care with a history dating back to 1937. The organization operates multiple locations across Cincinnati, Dayton, and Northern Kentucky, offering specialized services including brain tumor care, neurovascular services, spine care, interventional pain management, and physical therapy. Their market position is strong as a regional leader with a comprehensive care team and partnerships with related healthcare organizations. The website reflects a professional and patient-focused business model targeting individuals seeking expert neurological and spine treatment in the region. Technically, the website employs modern web technologies such as Bootstrap and Piwik PRO analytics, providing a responsive and accessible user experience with good SEO practices. However, some improvements in security headers and privacy compliance could enhance their digital maturity. Security posture is solid with HTTPS and domain transfer protections, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy standards, though cookie consent and detailed security policies are absent. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing comprehensive privacy and security policies to improve compliance and user trust.

T

TrueAnal | Welcome to the Best Hardcore Anal Site

trueanal.org

59

TrueAnal.org is an adult entertainment website specializing in hardcore anal pornography featuring exclusive content and popular pornstars. The site operates on a subscription and content distribution model, targeting adult viewers seeking explicit anal-themed videos. The platform uses DataLife Engine CMS with common web technologies such as jQuery, Bootstrap, and Font Awesome, hosted behind Cloudflare DNS services. While the site offers good content quality and user experience with clear navigation and mobile optimization, it lacks critical privacy and cookie policies, which are compliance gaps. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No business contact emails or phone numbers are publicly available, limiting business credibility. Overall, the site is functional and consistent with its niche but requires improvements in privacy compliance and security hardening.

P

POWERPLAY MANAGER, s.r.o.

powerplaymanager.com

60

POWERPLAY MANAGER, s.r.o. operates the PowerPlay Manager online sports management game platform, offering free-to-play management games for hockey, soccer, handball, and basketball. The platform targets sports enthusiasts globally, providing multilingual support and live game broadcasts. The business model relies on free access with advertising and partnerships. Technically, the site uses a traditional web stack with jQuery and related libraries, integrates Facebook login, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS and cookie management, though some security headers are missing and incident response information is absent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

T

Těhotenství od A do Z | Těhotenství.cz

tehotenstvi.cz

45

The website www.tehotenstvi.cz is a Czech language informational portal focused on pregnancy, conception, childbirth, postpartum care, and baby care. It offers a wide range of articles, calculators, and online counseling services targeting pregnant women and parents. The site is well-structured with clear navigation and regularly updated content, positioning it as a reputable resource in the Czech healthcare and parenting media sector. Technically, it is built on Drupal 9 with modern front-end libraries and integrates multiple advertising and analytics services. The site uses HTTPS with good SSL configuration but lacks some security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data for the domain is missing, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site demonstrates a moderate to good security posture and privacy compliance, with recommendations to enhance security headers and explicit cookie consent. The content is safe for general audiences with no adult or explicit material detected.

W

WANET s.r.o.

wanet.cz

55

WANET s.r.o. is a Czech Republic-based IT company specializing in external network management, website creation, SEO optimization, and smart home technology development. The company offers tailored IT services with a focus on individual client needs and provides 24/7 monitoring and security for managed networks. Their product portfolio includes smart IP weather stations and home automation systems, positioning them as a niche technology provider in their regional market. Technically, the website uses a basic but functional stack including jQuery and custom JavaScript, with a cookie consent mechanism implemented for compliance. However, the absence of a privacy policy and terms of service pages, along with missing WHOIS domain registration data, reduces overall trust and compliance posture. Security practices include CAPTCHA on contact forms but lack visible security headers and confirmed HTTPS status. Overall, the website is accessible, professionally presented, and content-rich, but improvements in security and compliance documentation are recommended.

W

WANET s.r.o.

warioweather.com

57

WarioWeather, operated by WANET s.r.o., provides IP weather stations designed for smart homes, precision agriculture, and intelligent building management. Their product offers integrated weather data collection, forecasting, and device control capabilities accessible via web interfaces. The company targets niche markets requiring precise environmental monitoring and automation. Technically, the website uses standard web technologies including jQuery and Google Analytics, with basic mobile optimization and cookie consent mechanisms in place. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, impacting overall trust. Strategic improvements in security headers, contact transparency, and domain registration verification are recommended to enhance credibility and compliance.

The website bayhilldentalteam.com is currently inaccessible due to a Cloudflare security block page, which prevents access to any actual website content or business information. The domain is registered through GoDaddy.com, LLC since 2016 with a valid expiry in 2026, indicating a stable and legitimate registration consistent with a dental practice business. However, no metadata, contact information, privacy policies, or business descriptions are available for analysis due to the block. The technical infrastructure includes Cloudflare as a DNS and security provider, but no further technical or CMS details can be determined. Security posture cannot be fully assessed given the lack of accessible content and headers. Overall, the site is currently non-functional for analysis and scores very low on AI scoring metrics due to the block.

The website officialticketcenter.com is currently inaccessible due to a Cloudflare security block page, preventing access to any actual business content or metadata. The domain is registered since 2000 with GoDaddy.com, LLC, indicating a longstanding presence, but no further business details can be extracted from the blocked page. The technical infrastructure includes Cloudflare as a security and hosting provider, but no CMS or additional technologies are detectable due to the block. Security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates some level of protection. No privacy, cookie, or terms of service policies are available, and no contact information or business credentials are visible. Overall, the site is currently not analyzable beyond the domain registration data and the Cloudflare block indication.

H

HARBOR INN SEAFOOD CHARLOTTE

sunriseoptometry.com

56

Harbor Inn Seafood Charlotte is a small, family-owned seafood restaurant located in Charlotte, North Carolina. The business focuses on providing fresh, wild-caught seafood at family-friendly prices, serving both lunch and dinner menus with options for carry-out and online ordering. The website is professionally designed using the Squarespace platform, featuring clear navigation and mobile optimization. The business targets local seafood lovers and families, positioning itself as a favorite in the Charlotte area. Technically, the website leverages Squarespace CMS with integrated Google Analytics and Tag Manager for visitor tracking. The site uses HTTPS with a good SSL configuration but lacks advanced security headers. Performance is moderate with good mobile responsiveness. However, privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms. From a security perspective, the site shows basic good practices such as HTTPS enforcement but lacks security headers and incident response information. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy. Overall, the site is functional and professional but would benefit from improved privacy compliance and enhanced security measures.

V

Visiting Nurses Association of America (V.N.A.A.)

eaglesmereairmuseum.org

60

The website represents the Visiting Nurses Association of America (V.N.A.A.) as featured within the Young Survival Coalition's platform, a nonprofit organization focused on supporting young women diagnosed with breast cancer. The business operates as a national association advocating for community-based nonprofit home health and hospice providers, offering services such as advocacy, education, and collaboration. The target audience includes patients, healthcare providers, and supporters within the nonprofit healthcare sector. The website is well-branded and consistent with a clear mission and service offering. Technically, the website is built on FusionCMS and integrates modern analytics and tracking tools including Google Analytics, Google Tag Manager, and Facebook Pixel. It uses HTTPS with good SSL configuration, and the site is mobile-optimized with good accessibility and SEO practices. However, some security headers are missing, and there is no visible cookie consent mechanism despite the use of tracking scripts, which could be improved for privacy compliance. From a security perspective, the site demonstrates a solid posture with no exposed sensitive data or vulnerabilities detected in the HTML content. The lack of explicit security policies or incident response contacts is a gap. The WHOIS data is unavailable or protected, which is typical for nonprofits, and does not raise immediate concerns. The domain appears legitimate and consistent with the organization's online presence. Overall, the website is professional, trustworthy, and serves its nonprofit advocacy purpose effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and user trust.

Storybuilt is a small design and development collective specializing in modern architecture and spatial storytelling. The company focuses on creating sustainable, modern structures that merge form and function, targeting clients interested in contemporary architectural solutions. The website reflects a professional and consistent brand image with a modern design and clear navigation, although it lacks explicit contact details beyond a contact form. Technically, the site uses standard web technologies with Cloudflare DNS and CDN services but lacks advanced security headers and DNSSEC. Security posture is moderate with HTTPS enabled and domain status protections in place, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security practices.

Mountain State Beverage operates as a regional distributor specializing in wine and craft beer, with a focus on brands like Laughing Dog Brewing. The website serves primarily as a promotional platform for their craft beer offerings and brand partnerships. The technical infrastructure is based on WordPress with the Divi theme, leveraging common plugins for SEO, social sharing, and analytics. The site is hosted behind Cloudflare DNS and uses HTTPS, indicating a baseline of security and performance. However, the absence of privacy and cookie policies, lack of security headers, and missing contact information reduce the overall trust and compliance posture. The site content is professionally presented with good design and navigation, targeting mature audiences interested in craft beer. Overall, the website is functional and credible but requires improvements in privacy compliance and security best practices.