Security Directory

O

Our Community Foundation Ltd

givenow.com.au

66

GiveNow is a well-established Australian fundraising platform operated by Our Community Foundation Ltd, offering a comprehensive suite of donation and fundraising services tailored for small to medium-sized community organisations. The platform boasts over 20 years of expertise, a strong market position with significant funds raised, and a trusted reputation among thousands of Australian organisations. Technically, the website employs modern frameworks such as Bootstrap 5, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar, and is hosted on AWS infrastructure, ensuring robust performance and scalability. Security-wise, the site enforces HTTPS, implements key security headers, and follows best practices, although DNSSEC is not enabled and explicit security policies are not published. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility, making it a trustworthy platform for donors and organisations alike.

N

Nordisk Media Utveckling AB

nmugroup.com

53

Nordisk Media Utveckling AB operates the NMU Group website as a trusted Nordic domain registrar and IT service provider specializing in domain name registration, DNS management, hosting, IT security, and domain legal services. Established since 1999, the company positions itself as a proactive domain agency with a strong focus on security and personalized service, targeting businesses and organizations requiring comprehensive domain and digital brand management solutions. The website reflects a professional and consistent brand image with detailed service offerings and customer testimonials, reinforcing its market credibility. Technically, the website is built on WordPress with modern technologies including Bootstrap 5, jQuery, and performance optimizations such as lazy loading and caching plugins. It employs Google Tag Manager for analytics and marketing, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and DNSSEC services promoted, although the absence of explicit security headers and a vulnerability disclosure page suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency. However, the website content and business information are consistent and professional, mitigating immediate trust issues. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and support channels available. Overall, NMU Group presents a reliable and secure digital presence for domain and IT services in the Nordic region, with recommendations to enhance security headers, publish vulnerability disclosure information, and verify domain registration details to strengthen trust and compliance.

N

Nordisk Media Utveckling AB

nmugroup.se

53

Nordisk Media Utveckling AB operates the NMU Group website, providing comprehensive domain name registration, DNS, hosting, IT security, and domain legal services primarily targeting Nordic businesses and organizations. Established since 1999, the company positions itself as a trusted, accredited registrar and domain partner with a strong focus on security and personalized service. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, reinforcing its market position in the Nordic region. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as lazy loading and caching via WP Rocket. It integrates Google Tag Manager and Google Site Kit for analytics and marketing, with a cookie consent mechanism aligned with GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and promotes advanced DNS security features like DNSSEC and Anycast. However, it lacks visible HTTP security headers and a published security.txt file, which are recommended for enhanced security posture. The absence of WHOIS domain registration data raises concerns about domain legitimacy, despite the professional appearance and business credibility of the site. Overall, the website demonstrates a solid digital presence and security awareness but should address domain registration transparency and implement additional security headers to strengthen trust and compliance.

Mayfield Spine Surgery Center is a specialized outpatient healthcare provider focusing on minimally invasive spine surgery and pain management. The center is physician-owned, AAAHC Accredited, and Medicare Certified, positioning itself as a trusted provider with a patient-centric approach and high satisfaction ratings. The website reflects a mature business with detailed service descriptions, patient testimonials, and a professional digital presence. Technically, the site is built on WordPress with Elementor and uses modern web technologies, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements in security headers and DNSSEC are recommended. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-aligned with its healthcare business objectives.

Mobirise Ltd operates the Mobirise AI Website Generator, a technology platform that enables users to create professional websites easily using AI and drag-and-drop tools. The company targets a broad audience including small businesses, freelancers, bloggers, and e-commerce startups, positioning itself as a flexible and user-friendly alternative to other AI website builders. Technically, the website is built on modern frameworks like Bootstrap 5 and integrates analytics and advertising tools such as Google Tag Manager and Facebook Pixel. The security posture is solid with HTTPS and domain protections, though some headers and explicit security policies could be improved. Privacy compliance is adequate with clear privacy and terms pages, but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.

I

ILUNION

ilunionretail.com

60

ILUNION Tu Tienda operates a network of over 65 accessible retail stores located primarily in hospitals and strategic points across Spain. The business model emphasizes social responsibility, employing a workforce largely composed of people with disabilities and offering sustainable products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive privacy and cookie compliance mechanisms. Technically, the site uses Drupal CMS with modern libraries and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is good with HTTPS and reCAPTCHA protections, though some security headers are not detected and could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong brand association with Grupo Social ONCE and consistent content quality.

The SI Digital Framework website serves as the authoritative digital reference for the International System of Units (SI), operated under the auspices of the Bureau International des Poids et Mesures (BIPM). It provides key services including Permanent Digital Identifiers for SI units, prefixes, constants, and related metrology data, targeting scientific and metrology professionals globally. The platform is positioned as an official and trusted source for measurement standards and related digital tools. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, MathJax for mathematical rendering, and Google Fonts, ensuring a responsive and accessible user experience. Hosting is provided by Scaleway SAS, a reputable cloud provider. The site integrates Google Analytics for usage tracking but lacks visible cookie consent mechanisms, which may impact privacy compliance. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and important security headers like Content-Security-Policy and HSTS. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. These gaps suggest room for improvement in security posture and compliance. Overall, the website is professional, trustworthy, and well-aligned with its mission, but would benefit from enhanced privacy and security policies to meet modern compliance standards and improve user trust.

O

OIML – BIPM

worldmetrologyday.org

58

The World Metrology Day website is an authoritative resource managed by international metrology organizations BIPM and OIML, focusing on promoting the 2025 event celebrating the 150th anniversary of the Metre Convention. It targets the metrology community and related stakeholders by providing free communication resources and event information. The website is professionally designed with consistent branding and clear navigation, leveraging modern frontend technologies such as Bootstrap and Vue.js. Mobile responsiveness and user experience are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The site does not collect user data via forms and uses minimal tracking through AWStats. WHOIS data confirms the domain's legitimacy with consistent registration details and a long history. Overall, the website is a credible, well-maintained informational platform with moderate technical maturity and some room for improvement in privacy compliance and security hardening. There are no indications of malicious content or vulnerabilities, making it a safe and trustworthy resource for its audience.

I

ILUNION Economía Circular

ilunioneconomiacircular.com

54

ILUNION Economía Circular is a large Spanish company specializing in integrated waste management services with a strong commitment to sustainability and social impact. The company offers a range of services including treatment plants, waste management, transportation, and equipment rental. It is part of the Grupo Social ONCE, which enhances its market credibility. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and corporate values. Technically, the site uses Drupal CMS with modern libraries and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is missing or unavailable, which slightly reduces trust but the overall digital presence and association with a known parent company support legitimacy.

I

ILUNION

iluniontutienda.com

62

ILUNION Tu Tienda operates a network of over 65 accessible retail stores located primarily in hospitals and strategic points across Spain. The business model focuses on social impact by employing a workforce largely composed of people with disabilities and offering sustainable, socially responsible products. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their services, values, and partner ecosystem. Technically, the site uses Drupal CMS with modern libraries and integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and reCAPTCHA for security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS registration data for the domain is a notable concern, but the website's association with Grupo Social ONCE and ILUNION corporate entities supports its legitimacy. Overall, the site presents a trustworthy and professional digital presence aligned with its social enterprise mission.

I

ILUNION TextilCare

iluniontextilcare.com

66

ILUNION TextilCare is a large, well-established textile management service provider operating primarily in Spain with presence in Portugal and Colombia. The company offers services such as uniform renting, industrial laundry, and other textile-related solutions, focusing on sustainability and social inclusion under the Grupo Social ONCE umbrella. The website demonstrates a mature digital presence with modern technologies including Drupal CMS, Bootstrap, and integrated analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though no explicit security policy or incident response contacts are published. The domain WHOIS data is unavailable, which limits trust verification, but the website's professional content and branding mitigate concerns. Overall, the site is well-designed, accessible, and compliant with privacy regulations, serving a business audience effectively.

A

Agencia Local de Empleo y Formación (ALEF) Getafe

alefgetafe.org

61

ALEF Getafe is a local government agency dedicated to employment and training services in the municipality of Getafe, Spain. The agency provides a range of services including job placement, training courses, virtual campus access, and employer support. The website is professionally designed, well-structured, and targets job seekers and local businesses. It serves as a key resource for employment initiatives in the region, supported by official branding and certifications such as EFQM. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap 5 and jQuery. It uses HTTPS with Google reCAPTCHA v3 for form security and includes cookie consent mechanisms compliant with GDPR. While the site lacks some advanced security headers, it maintains a good security posture overall. The security posture is solid with enforced HTTPS and anti-bot measures, but could be improved by adding additional HTTP security headers and publishing a formal security policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website represents a trustworthy and professional local government service platform with moderate technical sophistication and good privacy and security practices. The lack of WHOIS data limits domain trust analysis but does not detract from the evident legitimacy of the agency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date software to mitigate risks.

I

inovura s.r.o.

inovura.cz

56

inovura s.r.o. is a Czech-based small technology company specializing in voice-controlled smart home systems tailored for physically handicapped users. Their business model focuses on modular, customizable home automation solutions that enhance accessibility and independence. The company collaborates closely with the SILOU HLASU association to provide user training and extend their service reach. The website reflects a professional and focused approach with clear business information and media references, positioning inovura as a niche player in assistive technology within the Czech market. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with mobile responsiveness and a cookie consent mechanism implemented. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate, and SEO and accessibility features are basic but adequate for the site’s scope. From a security perspective, the site uses HTTPS (assumed from external Google scripts and reCAPTCHA), includes Google reCAPTCHA on the contact form, and has a cookie consent banner, indicating some privacy awareness. However, the absence of security headers and a privacy policy page are notable gaps. The WHOIS data is missing, which reduces domain trust and raises questions about registration transparency. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and WHOIS transparency to enhance trust and reduce risk.

K

KAYHIL FREIGHT

kayhil.co.za

46

Kayhil Freight is a specialized logistics and freight delivery company operating primarily between South Africa and Lesotho. Established in 2008, the company has built a trusted market position with over two decades of experience, offering services such as import/export logistics, express delivery, and inhouse clearing. Their national footprint in South Africa and multiple branch locations support a broad customer base including businesses and individuals requiring reliable freight services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress using modern frameworks like Bootstrap and WPBakery Page Builder, ensuring good mobile optimization and SEO readiness. Integration of Google Analytics and social media links indicates a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and security hardening. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks DNSSEC and security headers, which are recommended for enhanced protection. There is no visible security policy or incident response information, and cookie consent mechanisms are absent, indicating compliance gaps especially regarding GDPR. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, Kayhil Freight's website is a good representation of their business with solid credibility and technical implementation. Strategic improvements in security policies, privacy compliance, and DNS security would strengthen their posture and trustworthiness further.

G

GreenTable

greentablelounge.cz

46

GreenTable is a newly established fine dining restaurant and event venue located in Prague, Czech Republic. The business focuses on offering a private and intimate dining experience with a capacity of 30 seats and a garden area. Their culinary offerings emphasize French and Mediterranean cuisine with seasonal ingredients, complemented by a curated wine selection. The restaurant also caters to corporate clients by providing event hosting services including wine tastings, private meetings, and corporate breakfasts. The website is professionally designed using WordPress with modern technologies such as Bootstrap and Splide.js, and it is hosted on AWS infrastructure. SEO and mobile optimization are well implemented, and the site includes structured data for enhanced search engine visibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the website reflects a credible and professional hospitality business with clear contact channels and social media presence.

K

key4events

key4events.com

70

Key4events is a French-based company specializing in IT solutions and services for event management, including physical, virtual, and hybrid events. Their flagship software suite, K4FUSION, integrates with third-party applications to streamline event operations, complemented by K4PROD event services and K4ACADEMY training initiatives. The company targets a diverse audience including scientific societies, PCOs, agencies, enterprises, associations, and institutional clients, positioning itself as an experienced player with over 20 years in the market. The website reflects a professional and consistent brand image with good content quality and clear navigation.

S

Solutions and Services, a.s.

ecoista.cz

56

Ecoista.cz is a Czech online platform dedicated to ecological transformation, sustainability, circular economy, and future energy and transport topics. Operated by Solutions and Services, a.s., it serves as a content publishing and community collaboration site targeting individuals interested in environmental issues within the Czech Republic. The website uses WordPress CMS with modern technologies such as Bootstrap 5 and jQuery, and integrates marketing and analytics tools including Google Tag Manager and Facebook Pixel. The site is well-structured, mobile-optimized, and provides a cookie consent mechanism compliant with GDPR principles, although explicit privacy and terms of service pages were not found in the provided content. Security posture is good with HTTPS enforced, but lacks some security headers and formal vulnerability disclosure mechanisms. WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective, but the website content and business information appear professional and legitimate. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy documentation and security best practices.

R

Regzone

regzone.cz

69

RegZone.cz is a professional domain registration and hosting service provider operating primarily in the Czech Republic. The company offers a broad portfolio of over 700 top-level domains including popular extensions such as .cz, .com, and .eu, complemented by free SSL certificates, email hosting, DNS management with DNSSEC, and domain parking services. The business is part of the larger ZONER a.s. group, which is a recognized player in the Czech internet services market. Their website is well-designed, mobile-optimized, and provides clear navigation and comprehensive customer support information. From a technical perspective, RegZone.cz employs modern web technologies including Bootstrap 5, jQuery, and Lightbox2, alongside Google Tag Manager and Google Analytics for tracking and analytics. The site enforces HTTPS and offers a granular cookie consent mechanism, demonstrating good privacy compliance. However, there is room for improvement in security headers and explicit security policy disclosures. Security posture is solid with free SSL certificates, DNSSEC support, and 24/7 technical support, but the absence of visible security headers and vulnerability disclosure mechanisms suggests opportunities for enhancement. The WHOIS data is unavailable from the provided source, which slightly impacts transparency but does not detract significantly from the overall trustworthiness given the company's accreditation and professional presentation. Overall, RegZone.cz presents a trustworthy, professional, and technically competent service offering in the domain registration and hosting sector, with strong compliance and customer focus. Strategic improvements in security policy transparency and WHOIS data availability would further strengthen their market position and customer trust.

B

Belgian Society of Pathology VZW/ASBL

bwpcongress.be

52

The Belgian Week of Pathology website represents a well-established professional event organized by the Belgian Society of Pathology, targeting pathologists and healthcare professionals primarily in Belgium. The site provides comprehensive information about the congress, including program details, abstract submission guidelines, venue, and organizational contacts. The business operates as a non-profit entity focused on education and professional development within the healthcare sector. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, and FontAwesome, with backend indications of Laravel usage. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and includes CSRF protection and a GDPR-compliant cookie consent mechanism, though lacks explicit security headers and a published security policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature security posture for its size and scope. Overall, the website scores well on content quality, privacy compliance, and business credibility, with room for improvement in security headers and incident response transparency.

W

Webglobe

savana.cz

42

Webglobe is a well-established Czech technology company specializing in domain registration, webhosting, email services, and server infrastructure solutions. The company targets both individual and business customers seeking reliable online presence services. Their website reflects a professional and consistent brand image, showcasing a broad portfolio of hosting and domain services with strong customer testimonials and references. Technically, the site is built on WordPress with modern frameworks and libraries, optimized for performance and mobile responsiveness. Security posture is good with HTTPS and some security best practices, though explicit security headers and privacy compliance mechanisms are lacking. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional presentation and market presence. Strategic recommendations include enhancing privacy compliance, adding explicit security headers, and publishing security and incident response policies to improve trust and compliance.

D

Digi-work

digi-work.com

62

Digi-work is an independent digital agency based in Brussels specializing in crafting unique websites and applications to drive digital transformation for businesses. Their portfolio includes diverse projects for European organizations and local clients, emphasizing AI-driven solutions, CMS, CRM, ERP, and eCommerce platforms. The company positions itself as a strategic partner for businesses seeking to leverage technology for growth and efficiency. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Analytics and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization, SEO practices, and user experience design, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, along with a cookie consent mechanism compliant with GDPR. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. The absence of WHOIS data is notable but does not detract significantly from the site's legitimacy given the professional content and social proof. Overall, Digi-work presents a credible and professional digital agency with a solid technical foundation and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen trust and compliance.

Ú

Ústřední vojenská nemocnice Praha (ÚVN)

uvn.cz

64

Ústřední vojenská nemocnice Praha (ÚVN) is a prominent military hospital in Prague, Czech Republic, providing specialized healthcare services, education, and research primarily for military personnel and the general public. The website reflects a well-structured institutional presence with comprehensive information about departments, clinics, and services. The hospital holds certifications related to quality and safety, reinforcing its credibility in the healthcare sector. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and integrates analytics and translation services, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly evident. The absence of WHOIS data limits domain trust assessment, but the website content and structure strongly suggest legitimacy. Overall, the site is professional, accessible, and compliant with privacy regulations, serving its audience effectively.

Medilyst s.r.o. is a Czech Republic based company specializing in professional education focused on vascular access. The company operates a website that provides information about educational events, a forum for professional communication, and contact details. The website is well-structured, professionally designed, and targets healthcare professionals and specialized medical workplaces. The domain has been registered since 2011, indicating a stable and established business presence. Technically, the website uses modern frontend technologies such as Bootstrap 5 and FontAwesome, hosted on websupport.cz infrastructure. The site is mobile optimized and provides a cookie consent mechanism, reflecting good privacy compliance practices. Security posture is adequate with HTTPS enforced, though security headers are not explicitly detected and no incident response or security policy pages are found. Overall, the website is trustworthy, safe, and professionally maintained, with room for improvement in security best practices and transparency.

W

Webglobe

wy.sk

50

Webglobe is a well-established Slovak technology company specializing in domain registration, webhosting, email services, and server infrastructure solutions. The company targets individuals and businesses seeking reliable online presence services, boasting over 120,000 satisfied clients and a strong market position in Slovakia and neighboring regions. Their website reflects a professional and consistent brand image with comprehensive service offerings and client testimonials. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and policies are not evident. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, Webglobe presents a trustworthy and professional digital presence with room for improvement in privacy and security transparency.

A

AISM | Associazione Italiana Sclerosi Multipla

aism.it

61

AISM (Associazione Italiana Sclerosi Multipla) is a well-established Italian non-profit organization dedicated to supporting individuals affected by multiple sclerosis. The website serves as a comprehensive resource offering information, support services, research funding, and advocacy. It targets patients, caregivers, volunteers, and researchers primarily within Italy. The organization maintains a strong market position as a leading association in its sector, supported by a large-scale operation and a professional digital presence. Technically, the website is built on Drupal 9 with modern front-end frameworks like Bootstrap 5 and integrates various third-party libraries for enhanced user experience, including Owl Carousel and Leaflet for maps. The site is mobile-optimized, accessible, and employs Google Tag Manager and CookieHub for analytics and cookie consent management, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and provides cookie consent mechanisms, indicating a solid security posture. However, it lacks a publicly available security policy or incident response contact, which are recommended for enhanced transparency and readiness. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is trustworthy, professionally designed, and compliant with GDPR requirements. It effectively balances user experience, accessibility, and security, making it a reliable platform for its audience.

L

Ligue Nationale Belge de la Sclérose en Plaques

ms-sep.be

58

The Ligue Nationale Belge de la Sclérose en Plaques is a well-established Belgian non-profit organization dedicated to supporting individuals affected by multiple sclerosis. Founded in 1958, it serves as a national federation responsible for medical information dissemination, advocacy, and coordination with community leagues. The website reflects a professional and accessible digital presence, leveraging WordPress with modern frameworks like Bootstrap and incorporating accessibility and GDPR compliance features. The site provides clear contact information, multilingual support, and relevant programs and news updates, positioning it as a trusted resource in the healthcare non-profit sector. Technically, the website uses a mature CMS platform with standard plugins for SEO, analytics, and cookie management. It employs HTTPS with good SSL configuration and integrates Google reCAPTCHA for form security. Accessibility tools and cookie consent mechanisms are implemented, enhancing user experience and compliance. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and security governance. From a security perspective, the site demonstrates solid baseline protections but lacks advanced security headers and formal vulnerability disclosure channels. No WAF or blocking mechanisms interfere with access, and no vulnerabilities or suspicious patterns were detected. WHOIS data confirms the domain's legitimacy and long operational history, reinforcing trust. Overall, the website is a credible, well-maintained platform serving a specialized healthcare audience with good technical and privacy practices. Strategic enhancements in security policy publication and incident response readiness would further strengthen its posture.

B

BD (Becton, Dickinson and Company)

bd.com

79

BD (Becton, Dickinson and Company) is a leading global medical technology company dedicated to advancing healthcare worldwide by providing innovative medical devices, laboratory equipment, and healthcare solutions. The company operates as a large multinational enterprise with a strong presence in the healthcare sector, targeting healthcare professionals and institutions globally. Their website reflects a professional and comprehensive digital presence, showcasing their commitment to healthcare advancement and compliance with privacy regulations. Technically, the website leverages modern frameworks such as Bootstrap 5, jQuery, and Adobe Helix, hosted likely on Akamai CDN, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although there is room for improvement in publishing explicit security policies and vulnerability disclosure channels. Overall, BD's website demonstrates high professionalism, trustworthiness, and compliance, supporting their market position as a healthcare industry leader.

J

Jihomoravská zdravotní, a.s.

sanatoriumpalava.cz

62

Sanatorium Pálava is a large-scale, specialized rehabilitation healthcare project in the South Moravian Region of the Czech Republic, operated by Jihomoravská zdravotní, a.s. The website presents a modern, well-structured digital presence with clear information about the project timeline, services, and team. The business is positioned as a unique regional healthcare provider with EU co-financing and government backing. Technically, the site uses WordPress with the Divi theme, modern JavaScript libraries, and GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

K

Kite Medical Information

kitemedinfo.com

44

Kite Medical Information operates as an online medical resource providing scientific information about Gilead products, primarily targeting US healthcare professionals and patients. The website serves as an educational platform offering access to product-related scientific data without providing medical advice. The business is positioned as a niche healthcare information provider with a medium-sized operational scale, founded in 2019 and associated with Gilead Sciences. The website branding is consistent and professional, reflecting its healthcare industry focus. Technically, the website is built on WordPress with modern technologies including Bootstrap 5, Yoast SEO, and Google Analytics for tracking. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protections. However, DNSSEC is not enabled, and no explicit security policies or incident response contacts are published. Google Analytics is implemented with opt-out capabilities, but privacy and cookie policies are absent, indicating gaps in compliance. No vulnerabilities or suspicious patterns were detected in the domain registration or site content. Overall, the website presents a trustworthy and professional front for healthcare information but would benefit from enhanced privacy compliance, security policy transparency, and DNS security improvements to strengthen its security posture and regulatory adherence.

Unie porodních asistentek, z. s. (UNIPA) is a Czech non-profit professional organization dedicated to supporting midwives and students of midwifery. Established in 2005, it plays a significant role in advancing the profession through education, advocacy, and providing psychological and informational support. The organization targets midwives, students, and parents, positioning itself as a trusted authority in the Czech midwifery sector. The website reflects a professional and consistent brand image with comprehensive content and active engagement through social media and partner collaborations. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and plugins for SEO and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

U

Universidad de La Laguna

ull.es

56

Universidad de La Laguna is a public higher education institution based in Spain, offering a wide range of academic programs, research opportunities, and cultural services. The website serves students, faculty, researchers, and the public with multilingual content and comprehensive institutional information. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and some best practices, but lacks certain security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the domain appears legitimate and consistent with a public university, though WHOIS data is unavailable due to registrar restrictions. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve trust and compliance.

P

Pojez

pojez.cz

43

Pojez.cz is a regional gastronomy platform focused on connecting consumers with top restaurants, cafes, local farms, and food producers in the Moravskoslezský region of the Czech Republic. The website offers curated listings, event promotions, and an interactive map to enhance user engagement and discovery. The business operates as a niche platform serving local gastronomy enthusiasts and tourists, positioning itself as a trusted regional guide. Technically, the site is built on WordPress with modern frameworks like Bootstrap and Leaflet for maps, supported by SEO tools such as Yoast and tracking via Google Tag Manager and Adform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence appropriate for a small regional business, with room for improvement in security headers and explicit privacy and incident response policies.

G

Gilead Sciences, Inc.

gilead.com

67

Gilead Sciences, Inc. is a leading biopharmaceutical company focused on innovative therapies in HIV, liver disease, cancer, and inflammation. The company operates globally with a strong pipeline and extensive clinical programs. Their website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, investors, and researchers. The business model centers on research, development, and commercialization of transformative medicines. Technically, the website is built on modern frameworks including Bootstrap 5 and uses Sitecore CMS, supported by a variety of JavaScript libraries and APIs for video and analytics integration. The site is mobile-optimized, accessible, and SEO-friendly, demonstrating a high level of digital maturity. Security posture is solid with HTTPS enforced and privacy mechanisms in place, including cookie consent and privacy policies. However, explicit security headers and incident response information are not publicly documented, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data for the domain is unusual and should be verified through official channels. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure details.

P

Penta Hospitals CZ

pentahospitals.cz

10

Penta Hospitals CZ is a major healthcare operator in the Czech Republic, managing a broad network of acute and subsequent care hospitals, social care homes, ambulatory services, and home healthcare. As part of the larger Penta Hospitals International group, it holds a strong market position with multiple subsidiaries and a comprehensive service offering. The website reflects a mature digital presence with professional design, clear navigation, and extensive content about their services and history. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates advanced SEO and privacy tools such as Yoast SEO and Cookiebot. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data slightly reduces trust but does not detract from the overall legitimacy and professionalism of the organization. Privacy compliance is well addressed, with a comprehensive GDPR policy and cookie management. Overall, the site demonstrates a high level of business credibility and digital maturity.

A

Aliance pro telemedicínu a digitalizaci zdravotnictví a sociálních služeb

atdz.cz

54

The website represents the Aliance pro telemedicínu a digitalizaci zdravotnictví a sociálních služeb, a Czech non-profit platform dedicated to supporting the digital transformation of healthcare and social services. It serves as a collaborative hub for stakeholders including technology providers, healthcare and social service providers, industry representatives, and individual experts. The alliance actively partners with government ministries, health insurers, and regional authorities to promote digitalization projects and initiatives. The site content is professionally presented, targeting a specialized audience in the healthcare digitalization sector within the Czech Republic. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, and Slick Carousel, ensuring responsive design and moderate performance. Security measures include HTTPS enforcement and Google reCAPTCHA integration for form protection. However, the absence of security headers and privacy/cookie policies indicates areas for improvement in compliance and security hardening. Analytics usage is moderate with Google Analytics, but privacy compliance is weak due to missing policies. From a security perspective, the site shows a good baseline with encrypted connections and form protections but lacks comprehensive security policies, incident response contacts, and vulnerability disclosure mechanisms. The missing WHOIS data raises concerns about domain registration transparency, although the website's professional nature suggests legitimate operations. Overall, the website scores well in content quality, technical implementation, and security posture but requires enhancements in privacy compliance and domain legitimacy verification. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, establishing a vulnerability disclosure policy, and verifying domain registration details to strengthen trust and compliance.

B

Bc. Petr Vyhnálek

tvorime-aplikace.cz

45

The website 'Tvoříme aplikace' represents a small Czech technology business led by Bc. Petr Vyhnálek, specializing in custom software development including mobile applications, web applications, database systems, and Linux server management. The business targets clients needing complex, cross-platform JAVA applications and offers services tailored especially for non-profit organizations. The website is professionally designed with clear navigation and detailed service descriptions, reflecting over 20 years of experience. Technical infrastructure includes modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and privacy compliance documentation. Contact information is comprehensive, but absence of privacy and cookie policies is a compliance gap. WHOIS data is unavailable, limiting domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is functional, professional, and safe for general audiences.

S

Stallergenes Greer Foundation

stallergenesgreer-foundation.org

62

The Stallergenes Greer Foundation is a recently established non-profit organization (founded in 2023) under the aegis of Fondation de France, dedicated to advancing allergy research, supporting academic initiatives, and promoting climate action related to allergies. The foundation is governed by a Board of Trustees comprising a Managing Board and a Scientific Board with recognized experts in allergy and immunology. The website presents comprehensive information about its mission, governance, focus areas, and science awards, targeting researchers, healthcare professionals, and patients concerned with allergies and environmental health. Technically, the website is built on Drupal 10 with Bootstrap 5 and uses modern web technologies such as jQuery and FontAwesome. It is mobile-optimized and accessible, with good SEO practices. The domain is registered with CSC Corporate Domains, Inc. and shows consistency with the foundation's founding date and business claims. No blocking or WAF mechanisms are detected, and the website content is fully accessible. From a security perspective, while HTTPS is implied, there is no evidence of DNSSEC or security headers in the provided data, which are recommended for enhanced security. Privacy and cookie policies are present and appear GDPR compliant, but no explicit security policy or incident response information is found. Contact information is limited to an official email address and LinkedIn profile, with no phone or physical address provided. Overall, the website is professional, trustworthy, and well-structured, with minor security and compliance improvements recommended to enhance trust and protection. The risk level is low, but implementing DNSSEC, security headers, and publishing a security policy would strengthen the security posture.

P

Pro Neziskovky

pro-neziskovky.cz

41

Pro Neziskovky is a small Czech-based IT service provider specializing in custom software development and IT consultancy for non-profit organizations. The business offers tailored information systems, social service evidence software, web counseling, Linux server management, and mobile app development. The website is professionally designed with clear navigation and good mobile optimization, reflecting over 20 years of experience. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Technically, the site uses modern front-end technologies but lacks visible security headers and analytics tools. Overall, the security posture is moderate with room for enhancements in policy publication and security best practices.

S

Stallergenes Greer UK

stallergenesgreer.co.uk

56

Stallergenes Greer UK is a specialized healthcare company focused on allergen immunotherapy and allergy treatment products. The company operates as part of the Stallergenes Greer Group, providing a comprehensive range of diagnostic and therapeutic solutions for allergic diseases. Their website reflects a professional and consistent brand presence targeting healthcare professionals and patients in the UK. Technically, the site is built on Drupal 10 with modern frontend technologies including Bootstrap 5 and Google Maps integration, offering good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting a medium-sized healthcare business profile.

A

Atlas předsudků

atlaspredsudku.cz

39

Atlas předsudků is a Czech Republic based educational and informational website focused on debunking prejudices and misinformation about foreigners and integration within the country. The site is funded by the European Union and the Czech Ministry of Interior, positioning it as a government-backed public awareness campaign. It offers interactive quizzes, detailed factual content, and multimedia resources to educate the general public on migration and integration topics. The target audience is the Czech general public interested in social issues and combating misinformation. Technically, the website uses modern web technologies including Bootstrap 5 and Google Analytics, with a cookie consent mechanism that respects user privacy by default denying ad and analytics cookies. The site is hosted on a Czech hosting provider and uses a domain registered in 2020, consistent with its recent campaign nature. Security posture is moderate with room for improvement in security headers and incident response transparency. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the website is professional, trustworthy, and serves an important social function with good content quality and user experience.

N

National Bingo Week

nationalbingoweek.co.uk

43

National Bingo Week is a UK-based initiative dedicated to celebrating the game of bingo through a week-long series of events involving both physical bingo clubs and online bingo platforms. The website serves as a central hub for information, event promotion, and community engagement, targeting bingo enthusiasts across the UK. The business model focuses on event promotion and fostering a community around bingo, leveraging partnerships with bingo associations and clubs. The site is positioned as a unifying campaign with growing momentum since its launch in 2021.

B

Přihlášení - Klientská zóna

bnet-internet.info

60

The website bnet-internet.info/sign/in is a client login portal primarily designed for user authentication into a client zone, likely for an internet service provider or similar service. The site uses modern frontend technologies such as Bootstrap 5, jQuery, and the Nette framework for form validation and AJAX handling. The content is minimal, focused solely on login functionality, with no visible business or contact information, privacy policies, or terms of service. The domain WHOIS data is unavailable, indicating privacy protection or unsupported TLD, which reduces transparency and trustworthiness. No WAF or blocking mechanisms are detected, and the site is fully accessible.

E

European University Association

eua.be

69

The European University Association (EUA) is a well-established non-profit organization representing over 900 universities across Europe. The website serves as a comprehensive platform for advocacy, events, publications, and membership services targeted at higher education institutions and stakeholders. The site is professionally designed, mobile-optimized, and includes accessibility features, reflecting a mature digital presence. Technically, it leverages Joomla CMS with modern front-end libraries and integrates multiple analytics and marketing tools while maintaining good security practices such as HTTPS and cookie consent mechanisms. However, it lacks explicit published security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, secure, and aligned with its educational mission.

M

MeDitorial s.r.o.

cls.cz

58

Česká lékařská společnost Jana Evangelisty Purkyně (ČLS JEP) is a prominent non-profit professional association representing medical doctors, pharmacists, and healthcare workers in the Czech Republic. The organization provides a broad range of services including organizing medical societies and clubs, publishing medical journals, hosting conferences and events, and maintaining a centralized member registry. The website reflects a well-established entity with a large membership base and strong partnerships with governmental and healthcare institutions. The site content is professionally curated, targeting medical professionals and stakeholders in the healthcare sector.

C

Criss Cross by Triad

crisscross.sk

53

Criss Cross by Triad is a Slovak media team operating within the creative agency TRIAD, specializing in media planning, buying, and campaign optimization with a strong creative integration. The company targets Slovak businesses seeking innovative and effective media solutions, leveraging a multi-channel approach including online, radio, TV, OOH, and influencer marketing. Their market position is strong locally, supported by award-winning campaigns and a reputation for creativity and efficiency. Technically, the website employs modern frameworks such as Bootstrap 5, jQuery, and AOS, hosted on Websupport with DNSSEC and HTTPS enabled, reflecting a mature digital infrastructure. Security posture is solid with encrypted connections and cookie consent mechanisms, though additional security headers and formal policies could enhance protection. Overall, the site is professional, well-branded, and compliant with GDPR through linkage to the parent company's privacy policy. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible online presence.

S

Stallergenes Greer

stallergenesgreer.com

64

Stallergenes Greer is a global biopharmaceutical leader specializing in allergen immunotherapy for the diagnosis and treatment of allergies. The company operates internationally with a strong presence in multiple countries and offers a comprehensive portfolio of allergy-related products and services. Their website reflects a professional and well-structured digital presence, leveraging modern web technologies such as Drupal 10 and Bootstrap 5 to deliver a responsive and accessible user experience. The site includes detailed corporate information, scientific research focus, and patient-oriented content, supporting their market position as a trusted healthcare provider. Security-wise, the website employs cookie consent mechanisms and external link warnings but lacks visible advanced security headers, indicating room for improvement in security hardening. The absence of WHOIS registration data introduces a minor trust concern, though the overall digital footprint and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving transparency around domain registration.

S

State Common Entrance Test Cell

mahacet.org

55

The State Common Entrance Test Cell website serves as the official portal for the Government of Maharashtra's CET Cell, responsible for conducting entrance examinations and managing admissions for professional courses in the state. It provides comprehensive information and resources for candidates, educational institutions, and stakeholders, including notices, admission schedules, and government resolutions. The site is well-branded with government logos and seals, reinforcing its official status. Technically, the website is built on WordPress using Elementor and several addons, leveraging Bootstrap for responsive design. It employs modern web technologies and integrates Google Tag Manager for analytics. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some advanced security headers and does not publish a security.txt or incident response information. The absence of privacy and cookie policies is a notable compliance gap. WHOIS data is unavailable, which slightly impacts trust but the official government branding and content mitigate this concern. Overall, the website is a credible and functional government portal with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

P

Pros&Cons

pros-cons.sk

56

Pros&Cons is a Slovakia-based consulting firm specializing in helping CEOs and businesses innovate and grow their marketing efforts. The company offers a range of services including business consulting, marketing strategy development, brand building, innovation workshops, and educational coaching. It targets executives, marketing teams, and organizations seeking growth and transformation. The firm is part of the Devin Band group, which includes several partner companies in advertising, IT, media buying, and agency management software. The website presents a professional image with detailed team profiles and testimonials, indicating a credible market position in the consulting sector. Technically, the website is built on WordPress 5.7.1 using modern libraries such as Bootstrap 5, jQuery, AOS for animations, and Slick Carousel for testimonials. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. However, there is no evidence of advanced analytics or tracking, suggesting minimal user tracking and a privacy-conscious approach, albeit without formal privacy or cookie policies. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Overall, the security posture is adequate but could be improved with additional policies and headers. The overall risk assessment is low, with recommendations to implement privacy and cookie policies, add security headers, and provide incident response contacts to enhance trust and compliance. The website is safe for general audiences and does not contain any adult or questionable content.

S

Sankofanomics

sankofanomics.com

9

Sankofanomics is an online community and marketplace platform that offers a variety of services including forums, housing listings, job and gig postings, and a marketplace for buying and selling products. The platform targets diverse community groups such as creative, professional, lifestyle, and tech-oriented individuals, aiming to provide a localized and integrated social commerce experience. The website demonstrates a consistent brand presence and good content quality with clear navigation and a modern design. Technically, the site uses a modern frontend stack including Bootstrap 5, jQuery, SweetAlert2, and Font Awesome, hosted on GoDaddy infrastructure. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. From a security perspective, the site shows some strengths such as domain status locks and HTTPS usage but has vulnerabilities including missing DNSSEC and security headers. The WHOIS data presents an anomaly with a future domain creation date, which raises questions about domain legitimacy or data accuracy. No explicit contact emails or phone numbers are provided, and privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, Sankofanomics appears to be a functional and moderately secure community marketplace platform with room for improvement in security practices, privacy compliance, and domain legitimacy verification. Strategic enhancements in these areas will improve trust and operational resilience.