Security Directory

L

Lawyer Monthly

lawyer-monthly.com

55

Lawyer Monthly is a UK-based legal news magazine providing comprehensive coverage of various legal sectors including personal injury, criminal law, employment, family law, and immigration. The website targets legal professionals and individuals seeking legal advice and news. It operates as an online publication with a focus on delivering expert insights, legal advice, and sector-specific news. The site maintains a consistent brand presence and offers multiple channels for user engagement including social media and newsletters. Technically, the website is built on WordPress using the Oxygen Builder framework, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and YouTube APIs. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent and privacy compliance are well implemented, reflecting GDPR adherence. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registrant data is a concern for domain transparency, though the website content and professional presentation suggest legitimate operations. Overall, Lawyer Monthly presents a professional and trustworthy online presence with good content quality and privacy compliance. However, domain registration transparency issues warrant further verification to fully establish trustworthiness.

P

Planetárium Ostrava

planetko.cz

57

Planetárium Ostrava is an educational and cultural institution affiliated with the Mining-Geological Faculty of the Technical University of Ostrava. It provides a wide range of astronomy and natural science educational programs, cultural events, and interactive exhibits targeting visitors of all ages, including schools and the general public. The website reflects a professional and consistent brand image with clear navigation and rich content focused on its mission. Technically, the website is built on the MySUITU CMS platform and leverages modern web technologies such as YouTube IFrame API, jQuery, Swiper.js, and Google Tag Manager. The site is hosted likely by Active24, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy standards, though it would benefit from enhanced security policies and accessibility improvements.

M

Mary's Meals Australia

marysmeals.org.au

57

Mary's Meals Australia is a well-established non-profit organization dedicated to providing nutritious school meals to children in impoverished communities. The website reflects a strong market position within the global charitable sector, serving over 3 million children daily. Their key services include fundraising, volunteer engagement, and awareness campaigns, supported by a consistent and professional brand presence. Technically, the site is built on Drupal 10, leveraging modern web technologies and third-party integrations such as Google Tag Manager and PayPal for donations. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers could be improved. WHOIS data is limited due to privacy policies but does not raise concerns about legitimacy. Overall, the site demonstrates high trustworthiness and professionalism.

I

Institut One Health

institut-one-health.fr

50

Institut One Health is a French public health and research institute established in 2023, focused on emerging infectious diseases and integrated within national and European health strategies. It offers training, expertise, and decision support services primarily targeting public health professionals, researchers, and policymakers. The website reflects a professional and consistent brand image aligned with its institutional mission. Technically, the site is built on WordPress with a modern theme and includes standard analytics tools. Security posture is adequate with HTTPS and domain protections, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security disclosures.

B

Bandzone.cz

bandzone.cz

50

Bandzone.cz is a well-established Czech online community platform dedicated to music bands, DJs, MCs, and their fans. Founded in 2005, it hosts profiles for over 35,000 groups and 180,000 fans, offering music streaming, downloads, concert listings, videos, and promotional services. The platform integrates ticket sales via SMS Ticket and promotes music education partners, positioning itself as the largest Czech music community online. Technically, the site uses a custom CMS with a mix of legacy and modern technologies including jQuery, Firebase, Google Analytics, and Facebook Pixel. While the site is functional and professionally designed, it uses an outdated jQuery version which poses security risks. Security posture is moderate with HTTPS enabled and basic privacy compliance via cookie consent, but lacks explicit security headers and published security policies. Overall, the website is credible and trustworthy for its audience but would benefit from technical and security updates.

F

Fondation Lemarchand

fondationlemarchand.org

55

Fondation Lemarchand is a French non-profit foundation dedicated to supporting associative projects focused on nature preservation and social aid, particularly for children in social care. Established in 2017, it has supported over 874 projects and 364 associations, positioning itself as a reputable actor in the non-profit environmental and social sector. The website provides comprehensive information about its mission, projects, and partner associations, targeting donors, associations, and the general public interested in environmental and social causes. Technically, the site uses a moderate tech stack including jQuery, Modernizr, Google Maps API, and YouTube embeds, hosted by OVH sas. The site is mobile-optimized with good navigation and content quality.

C

Chiesi Farmaceutici S.p.A

chiesi.com

70

Chiesi Farmaceutici S.p.A is a large, globally recognized pharmaceutical company based in Italy, with over 80 years of experience specializing in respiratory, neonatology, and rare diseases. The company operates a professional corporate website primarily in Italian, offering detailed information about its therapeutic areas, research and development, partnering opportunities, and sustainability initiatives. The website demonstrates a mature digital presence with modern technologies such as Bootstrap, jQuery, Swiper.js, and Matomo analytics, alongside a robust cookie consent mechanism via OneTrust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are not evident. WHOIS data is unavailable, which is unusual but the website content and branding strongly indicate legitimacy. Overall, the site is well-structured, accessible, and trustworthy, targeting healthcare professionals, partners, and patients.

H

Health Resources & Services Administration

organdonor.gov

77

The website organdonor.gov is an official U.S. government platform managed by the Health Resources & Services Administration (HRSA) under the Department of Health & Human Services. It serves as a comprehensive resource for organ, eye, and tissue donation information, targeting both the general public and healthcare professionals. The site provides educational content, registration guidance, statistics, and professional outreach materials, positioning itself as a trusted authority in the organ donation space. Technically, the site is built on Drupal 10 and leverages modern web technologies including the US Web Design System, Google Analytics, and YouTube integration. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The hosting environment is consistent with government infrastructure, ensuring reliability and security. From a security perspective, the site enforces HTTPS and employs several best practices, though explicit security headers like X-Frame-Options were not confirmed. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy linked from the site, though a cookie consent mechanism is not evident. The WHOIS data is unavailable due to privacy typical for .gov domains, but the domain's legitimacy is supported by consistent branding and authoritative content. Overall, organdonor.gov presents a professional, secure, and trustworthy online presence with minor areas for improvement in cookie consent and explicit security header implementation. It effectively fulfills its mission as a government resource for organ donation awareness and education.

Shen Yun Performing Arts is a globally recognized performing arts company specializing in classical Chinese dance and music performances. The company tours extensively, reaching audiences in over 20 countries and 200 cities annually. Their business model centers on ticket sales for live shows that celebrate and revive traditional Chinese culture. The website is professionally designed, mobile-optimized, and rich in content, providing comprehensive information about performances, ticketing, and audience reviews. Technically, the site employs modern web technologies including React, Google Tag Manager, and multiple analytics platforms, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and security headers, though the absence of public WHOIS data slightly reduces domain trustworthiness. Overall, the site demonstrates a mature digital presence with effective marketing and analytics integration, supporting a reputable cultural enterprise.

M

MAMA AI

themama.ai

61

MAMA AI is a technology company specializing in AI-driven solutions for industries such as insurance claims processing, IT helpdesk ticket resolution, and virtual recruitment. The company positions itself as a trusted partner with a focus on simplifying AI adoption for businesses, supported by a presence in media and a portfolio of satisfied clients. The website is built on a WordPress platform using the Avada theme, integrating marketing and analytics tools such as HubSpot and Google Analytics, indicating a moderate level of digital maturity. Security measures include HTTPS and reCAPTCHA, but lack advanced security headers and published policies, suggesting room for improvement in security posture and privacy compliance. Overall, the website presents a professional image with moderate trustworthiness but would benefit from enhanced transparency and security practices.

O

KIM – KONGRES INTEGROVANÉ MEDICÍNY – Oficiální webové stránky Kongresu integrované medicíny.

openmedicine.cz

58

The website openmedicine.cz serves as the official platform for the 10th annual Congress of Integrated Medicine (KIM) held in Prague, Czech Republic. It targets medical professionals interested in integrated and alternative medicine disciplines such as acupuncture and homeopathy. The site provides event information, registration links, and partner details, positioning itself as a niche event organizer within the healthcare sector. The domain age and WHOIS data support the legitimacy and consistency of the business. Technically, the site is built on WordPress using Elementor and standard web technologies like jQuery and Bootstrap. It is hosted likely in the Czech Republic with HTTPS enabled, ensuring basic security. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, it lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS but does not publish security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies and security headers lowers the overall security posture. Overall, the website is functional, professional, and trustworthy for its purpose but would benefit from enhanced privacy compliance, security best practices, and transparency in contact and policy disclosures to improve user trust and regulatory adherence.

The website www.dub.cz represents the Duchovní universita Bytí, an organization focused on spiritual philosophy and the teachings of Josef Zezulka, particularly in the field of Biotronika and alternative medicine. It serves a niche audience interested in spiritual education, events, and community engagement primarily in the Czech Republic but with multilingual support for international visitors. The site offers lectures, concerts, video content, and publications, positioning itself as a small but dedicated non-profit educational entity. Technically, the website employs a moderate technology stack including jQuery, bxSlider, Google Tag Manager, and reCAPTCHA, ensuring basic interactivity and security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data reduces transparency and trust slightly, but the active and professional nature of the site, along with partner references, supports its legitimacy. Overall, the site is functional, moderately secure, and serves its community well, though it would benefit from enhanced privacy and security disclosures.

I

Institut pro TCIM/CAM, z. ú.

mkz2021praha.cz

53

The website www.mkz2021praha.cz serves as the official portal for the International Health Congress 2021 held in Prague, focusing on traditional, complementary, and integrative medicine (TCIM). It provides extensive information about the congress, including participant profiles, event recordings, publications, and a dedicated information platform called Platforma 2020 Praha. The site targets healthcare professionals, researchers, and the general public interested in TCIM, positioning itself as a niche but reputable organizer in the healthcare non-profit sector. Technically, the website employs a modern but straightforward tech stack including jQuery, bxSlider, simpleLightbox, Google reCAPTCHA, and Google Tag Manager for analytics. It is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. The site uses HTTPS and includes anti-bot measures on forms, but lacks advanced security headers and explicit cookie consent mechanisms. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data reduces transparency and trust slightly. Privacy compliance is basic, with a privacy policy implied on the contact page but no dedicated cookie or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and content-rich, supporting its mission to disseminate TCIM knowledge. Strategic improvements in security headers, privacy transparency, and WHOIS data availability would enhance trust and compliance.

L

La Tribune

latribune.fr

70

La Tribune is a prominent French economic and financial news media outlet providing comprehensive coverage of economic, financial, and business news both in France and internationally. The website targets French-speaking professionals and the general public interested in economic affairs, offering news, analysis, and exclusive information. The business model is primarily based on media publishing with revenue streams from subscriptions and advertising. The site demonstrates a strong market position as an established media brand in France. Technically, the website is built on modern web technologies including Next.js and React, with integration of advanced consent management tools like Didomi and analytics platforms such as Piano Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website employs HTTPS with strong SSL configurations and security headers, alongside GDPR-compliant consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, La Tribune presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include enhancing transparency around security policies and providing clear contact channels for security and privacy concerns to further strengthen trust and compliance.

한

한국과학기술원 (KAIST)

kaist.ac.kr

56

KAIST is a prestigious national science and technology university in South Korea, established to foster scientific talent and conduct advanced research aligned with national policies. The website reflects its institutional stature, providing comprehensive academic, research, and campus life information targeted at students, researchers, and stakeholders. The domain is longstanding and registered transparently under the institution's name, reinforcing its legitimacy. Technically, the website employs common web technologies such as jQuery and Bootstrap, with moderate performance and good mobile responsiveness. However, it lacks modern security headers and DNSSEC, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly found, indicating a gap in compliance with modern privacy standards. Security-wise, the site uses HTTPS and does not expose sensitive data, but could benefit from publishing incident response contacts and vulnerability disclosure policies. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to strengthen its digital maturity. The risk assessment is low given the institutional nature and absence of suspicious elements, but strategic improvements in privacy and security policies are recommended to maintain trust and compliance.

K

Kutnohorská Mincovna

kutnohorskamincovna.cz

51

Kutnohorská Mincovna is a small Czech Republic-based business dedicated to reviving and celebrating the historical royal mint of Kutná Hora. The company focuses on producing investment-grade gold and silver coins, bullion bars, corporate minting services, and collector's editions that honor Czech traditions and history. The website is professionally designed with good content quality and clear navigation, targeting investors and collectors interested in precious metals and Czech heritage. Technically, the site uses modern front-end libraries including Bootstrap, FontAwesome, and Google Tag Manager for analytics and marketing. The hosting leverages Amazon Cloudfront for widget delivery. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trustworthiness. Overall, the site is safe, compliant with GDPR, and provides a positive user experience with room for security and contact information improvements.

K

Kutnohorská Mincovna

khm.cz

50

Kutnohorská Mincovna is a Czech-based business dedicated to reviving and celebrating the historical royal mint traditions of Kutná Hora. The company offers investment-grade precious metals including gold and silver coins, bullion bars, and commemorative collector's editions. Their market position is niche, targeting investors and collectors interested in Czech heritage and precious metals. The website demonstrates a moderate level of digital maturity, utilizing modern web technologies such as Bootstrap, FontAwesome, and Google Tag Manager, with embedded YouTube content and cloudfront-hosted widgets. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response policies. The absence of WHOIS data limits domain trust verification, though the website content and social media presence support legitimacy. Overall, the site is professionally designed, mobile-optimized, and provides relevant content for its audience.

D

Dorik, Inc.

dorik.io

70

Dorik, Inc. operates an AI-powered website building platform designed to enable users without design or coding experience to create websites quickly and affordably. The company positions itself as a flexible and user-friendly SaaS provider in the technology sector, targeting individuals and small to medium businesses. The website demonstrates a modern technical infrastructure with extensive use of JavaScript analytics and marketing tools, hosted and registered through reputable providers such as Cloudflare. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks published security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

D

Dorik, Inc.

dorik.com

61

Dorik, Inc. operates an AI-powered website building platform designed to enable users without design or coding experience to create professional websites quickly and affordably. Positioned as a flexible and user-friendly SaaS solution, Dorik targets individuals and businesses seeking efficient website creation tools. The company was founded in 2020 and maintains a professional online presence with consistent branding and active social media channels. Technically, the website employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Mixpanel, Microsoft Clarity, Facebook Pixel, and ProfitWell, indicating a mature digital infrastructure. Hosting and domain management are handled via Cloudflare, ensuring reliable performance and security. Security posture is generally good with HTTPS enabled and domain transfer protections in place; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is currently weak due to missing privacy and cookie policies, which poses a risk for GDPR and other regulations. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

L

Matmut Stadium : Le stade mythique au coeur de Lyon | Lyon events

louevents.fr

64

The website www.gl-lyonevents.com presents information about the Matmut Stadium, a historic and iconic stadium located in Lyon, France. The site appears to serve as an event and venue information platform, targeting visitors and event organizers interested in the stadium and related events. The business model is focused on event promotion and providing venue details, catering primarily to a general audience interested in sports and cultural events in Lyon. The website is built on Drupal 10, leveraging modern web technologies such as lazy loading for images, Matomo for analytics, and Google Tag Manager for marketing. The site is mobile optimized and includes accessibility features, contributing to a good user experience and SEO optimization. However, the absence of visible privacy policies, terms of service, and contact information limits the site's transparency and trustworthiness. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible security headers and detailed security policies. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about the legitimacy and ownership of the domain. Overall, the website is functional and professionally designed but would benefit from improved transparency and security practices to enhance trust and compliance.

A

Association On passe à l'acte

onpassealacte.fr

47

On passe à l'acte is a French non-profit media platform dedicated to showcasing positive social and environmental initiatives through documentaries, interviews, and educational content. Founded in 2010, it operates with a cooperative business model and relies on donations and community support. The website targets a general audience interested in social innovation and sustainability. Technically, the site uses modern web technologies including the Foundation CSS framework, jQuery, and integrates Google Analytics and Facebook Pixel for tracking. Hosting is provided by Infomaniak Network SA, a reputable Swiss provider. Security posture is moderate with HTTPS enforced but lacks some recommended security headers and explicit privacy compliance mechanisms such as cookie consent banners. The WHOIS data is transparent and consistent with the business profile, indicating legitimacy. Overall, the website is professional, content-rich, and trustworthy but could improve in privacy compliance and security best practices.

T

Tomáš Korec

selenagrill-odtoma.cz

57

The website represents a small family-run catering business based in Jihlava, Czech Republic, specializing in grilled meats and whole pig roasting services for events such as weddings, parties, and corporate gatherings. The company emphasizes quality and tradition, offering a full-service catering experience including delivery, grilling, serving, and cleanup. The business targets local and regional customers primarily within the Vysočina region and Prague. The website content is well-structured, visually consistent, and provides clear contact information and social media links, supporting customer engagement and trust. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery and YouTube for embedded video content. The site is mobile-optimized with good performance and basic accessibility features. SEO is basic but sufficient for a small business. Security is adequate with HTTPS enforced and a cookie consent banner implemented; however, the absence of security headers and privacy policy pages indicates room for improvement in compliance and security posture. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The site lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is unavailable, which reduces domain legitimacy confidence but does not necessarily indicate malicious intent given the business nature. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved privacy and security documentation. Strategically, the business should focus on publishing privacy and terms of service policies, implementing security headers, and establishing a vulnerability disclosure process to enhance compliance and customer trust. These steps will also improve the website's security posture and regulatory alignment, particularly with GDPR requirements.

L

LOU Rugby

lourugby.fr

10

LOU Rugby is a professional rugby club based in France, operating an official website that serves as a hub for news, ticketing, merchandise, business partnerships, and event information. The website targets rugby fans and stakeholders, providing up-to-date content and branded experiences. The digital infrastructure is built on Drupal 8, integrating modern web technologies such as Matomo for analytics and Google DFP for advertising, alongside a cookie consent mechanism to address privacy requirements. The site demonstrates good mobile optimization and user experience, with consistent branding and clear navigation. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or terms of service pages, which are recommended for compliance and trust. WHOIS data is unavailable, likely due to privacy protection, but the domain and content appear legitimate and consistent with the business purpose. Overall, the website is professional and trustworthy, with room for improvement in privacy transparency and security hardening.

A

Aktivní ČESKO

aktivnicesko.cz

42

Aktivní ČESKO is a Czech Republic-based non-profit multisector platform dedicated to promoting regular physical activity and a healthy lifestyle. The organization collaborates with various non-profit and commercial entities to advocate for physical activity as a key component of personal health and state preventive and therapeutic care. The website serves as a hub for event announcements, educational content, and partnership information, targeting a broad general audience interested in health and wellness. Technically, the website is built on WordPress using modern plugins such as Elementor, Yoast SEO, and event management tools. It integrates third-party services like Google Tag Manager, Facebook Pixel, YouTube API, and a donation widget from darujme.cz, indicating a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly but could improve accessibility features. From a security perspective, the site uses HTTPS and some best practices but lacks comprehensive security headers and explicit privacy and cookie policies, which are critical for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business profile, showing a legitimate and consistent registration. Overall, Aktivní ČESKO presents a professional and trustworthy online presence with room for improvement in privacy compliance and security hardening to enhance user trust and regulatory adherence.

E

Estetica India

estetica-india.com

39

Estetica India is a specialized online hair magazine serving the Indian beauty and hairdressing industry with rich content including articles, news, videos, and digital magazine editions. The website targets hair professionals, salon owners, distributors, and beauty enthusiasts, positioning itself as a leading media outlet in this niche. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and plugins for enhanced user engagement such as WhatsApp chat and push notifications. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved security and compliance measures.

E

EPSA Innovation

sogedev.com

59

EPSA Innovation, formerly known as Sogedev, is a French consulting firm specializing in public funding advisory services for companies, particularly in innovation and research financing such as Crédit Impôt Recherche (CIR) and Crédit Impôt Innovation (CII). The company holds a strong market position as one of the top referenced experts by the Médiation des entreprises and operates multiple offices across France and internationally in Brazil. Their business model focuses on assisting companies in securing public financial aids and optimizing innovation-related tax credits. The website is professionally designed, content-rich, and targets French SMEs and larger enterprises seeking funding solutions. Technically, the website uses a modern but somewhat dated JavaScript stack including jQuery 1.9.1, Google Tag Manager, and Pardot for marketing automation. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and incident response documentation. Privacy compliance is basic with a privacy and cookie policy present, including consent mechanisms. The WHOIS data for the domain www.sogedev.com is missing, which raises some concerns about domain transparency and registration legitimacy. However, the website branding and content clearly indicate affiliation with EPSA, a known entity, mitigating some risk. No adult or questionable content is present, making the site safe for general audiences. Overall, EPSA Innovation presents a credible and professional online presence with moderate technical maturity and a good security baseline. The main risk area is the lack of WHOIS transparency and some missing security best practices. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving privacy compliance documentation.

E

Endesa X

endesax.com

69

Endesa X is a prominent energy services provider operating primarily in Spain, focusing on innovative energy solutions including mobility, home automation, and digital energy management. The company is positioned as a subsidiary or brand under the Enel Group, a major multinational energy corporation. The website reflects a mature digital presence with professional design, clear navigation, and localized Spanish content targeting individuals, businesses, and public administrations. Technically, the site leverages Adobe Experience Manager CMS and integrates advanced analytics and monitoring tools such as Adobe Launch and Dynatrace, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, potentially due to privacy protection or data unavailability, which slightly impacts trustworthiness. Overall, the site is safe, professional, and compliant with GDPR, but could improve transparency in security and contact information.

N

National Alopecia Areata Foundation

naaf.org

51

The National Alopecia Areata Foundation (NAAF) is a well-established non-profit organization dedicated to supporting individuals affected by alopecia areata, a common autoimmune disease causing hair loss. The foundation provides a comprehensive range of services including education, support groups, research funding, advocacy, and awareness campaigns. Their website reflects a strong market position as a leading resource in the alopecia community, targeting patients, families, medical professionals, and researchers. The organization leverages digital platforms effectively to engage its audience and facilitate donations and community involvement. Technically, the website is built on WordPress with modern plugins and frameworks such as Visual Composer, Gravity Forms, and Swiper.js. It integrates key marketing and analytics tools including Google Tag Manager and Facebook Pixel, enabling moderate user tracking and data collection. The site demonstrates good performance, mobile optimization, and accessibility, with a professional design and clear navigation enhancing user experience. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid security posture. However, there is no publicly available security policy or vulnerability disclosure program, which could be improved to enhance transparency and incident response readiness. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility to further strengthen trust and security culture.

M

Musée national et domaine du château de Pau

chateau-pau.fr

56

The Château de Pau website represents the official digital presence of the Musée national et domaine du château de Pau, a French national museum under the Ministry of Culture. The site offers comprehensive information about the museum's history, collections, exhibitions, events, and visitor services, targeting a broad audience including tourists, educators, researchers, and cultural professionals. The business model is government-funded, focusing on cultural preservation and public education. The museum maintains a strong market position as a recognized heritage site with partnerships with national cultural organizations.

M

Krby a kamna

mojekrby.cz

60

The website www.mojekrby.cz is a Czech e-commerce platform specializing in the sale of fireplaces, stoves, and related accessories. It targets residential customers and craftsmen seeking heating solutions. The business operates a niche retail model with a clear product catalog and online shopping capabilities, including user registration and newsletter subscription. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Swiper.js, and Google Analytics for tracking and marketing. Technically, the site uses the K2 e-shop system and integrates several third-party services including Google Tag Manager and Packeta for logistics. Performance is moderate with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though no advanced security headers or explicit security policies are published. The absence of WHOIS registration data is a concern for domain legitimacy and trust. Overall, the site presents a professional and trustworthy front for its business, but the lack of publicly available domain registration details and direct contact information slightly reduces its credibility. There are no indications of malicious content or security vulnerabilities in the visible content. Strategic improvements in security transparency and contact information disclosure would enhance trust and compliance.

S

Studio Modern Creative

studiomc.cz

45

Studio Modern Creative is a Czech-based digital agency specializing in web development, e-commerce solutions, branding, and artificial intelligence integration. The company targets businesses and professionals seeking modern, responsive websites and online shops, supported by digital marketing and email campaigns. Their market position is that of an established small enterprise with a consistent brand and a professional online presence. Technically, the website uses modern frameworks such as Bootstrap and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the website content and partner ecosystem support trustworthiness. Overall, the site is professional, compliant with GDPR, and provides clear contact channels.

Joe FIT is a Czech Republic-based fitness and bodybuilding center offering modern gym facilities, professional trainers, and personalized training and nutrition plans. The website presents a professional and welcoming environment targeting fitness enthusiasts of all levels. The business operates a small-scale fitness center with a focus on health, conditioning, and weight loss support. Technically, the website uses modern front-end technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for analytics and marketing. The site is mobile-optimized and includes a cookie consent mechanism, but lacks a published privacy policy and terms of service, which are important for compliance. Security posture is moderate with HTTPS enabled but missing explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is functional and professional but would benefit from improved compliance documentation and enhanced security practices.

S

Story by Jakub

storybyjakub.com

10

Story by Jakub is a Czech-based motivational and health awareness platform centered around Jakub Žák, an athlete and speaker who promotes cardiovascular health and personal development through motivational lectures, charity projects, and media content. The website serves a niche audience interested in health, motivation, and sports, leveraging partnerships with notable organizations such as Cardion and Toyota Brno. Technically, the site is built on WordPress with modern plugins and integrates analytics and social media effectively, though it lacks some privacy compliance elements such as explicit privacy and cookie policies. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and formal policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

O

Onestar Press

bookmachine.info

51

Book Machine is a niche website focused on typography and publishing resources, powered by Onestar Press. It offers downloadable font and typography PDFs, targeting designers and publishing professionals. The website is hosted on the Cargo Collective platform and uses modern web technologies including HTTPS and YouTube embeds. However, it lacks comprehensive privacy, cookie, and terms of service policies, which impacts its compliance posture. Security headers are absent, though no critical vulnerabilities were detected. The WHOIS data is privacy protected, which is common for small businesses, and the domain appears legitimate based on website content and contact information. Overall, the site is functional but could improve in privacy compliance and security best practices.

S

SOMFY Group

somfy-group.com

68

SOMFY Group is a global leader in home and building automation, specializing in motorization and control solutions for openings and closures. The company operates in over 59 countries and emphasizes sustainability and digital innovation. Their website reflects a mature digital presence with comprehensive corporate content, including annual reports and sustainability initiatives. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and tracking tools, hosted likely via Akamai CDN. Security posture is good with HTTPS enforced and a dedicated cybersecurity reporting channel, though explicit security headers are not detected. Privacy compliance is strong with clear cookie consent and privacy policies in French, aligned with GDPR. The domain WHOIS data is unavailable, which slightly reduces trust but the overall site professionalism and content quality support legitimacy.

NMO Brasil is a Brazilian non-profit organization dedicated to supporting patients with Neuromyelitis Optica (NMO) and raising public awareness about this serious neurological condition. The website serves as a hub for patient stories, educational content, and advocacy efforts, positioning the organization as a key player in the Brazilian healthcare advocacy space for NMO. The site is built on WordPress using the Elementor page builder, hosted by Locaweb, and integrates multimedia content such as YouTube videos and augmented reality experiences to engage visitors. While the technical infrastructure is modern and the site is mobile-optimized, there are gaps in privacy and security compliance, including the absence of privacy and cookie policies and missing security headers. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

T

The Insight Group

insightgroup.com.au

62

The Insight Group is a well-established Australian executive search firm specializing in leadership recruitment across education, non-profit, government, and commercial sectors. With over 30 years of experience and membership in the global Kestria alliance, the company offers tailored executive search services supported by a global network. The website presents a professional and comprehensive digital presence with rich multimedia content and clear business messaging. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and YouTube integration, ensuring good mobile responsiveness and user experience. SEO and accessibility are well addressed, though performance is moderate. Security posture is adequate with HTTPS implied, but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the security posture is solid but could be improved by publishing incident response policies, vulnerability disclosure, and enhancing privacy compliance. The domain WHOIS data is privacy-protected but consistent with a legitimate business. No critical vulnerabilities or suspicious indicators were found, supporting a high trust level for the website and business. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving contact information visibility to strengthen trust and compliance.

D

D.A.S. právní ochrana

das.cz

70

D.A.S. právní ochrana is a Czech-based legal protection insurance provider with over 20 years of market presence, offering a range of legal insurance products tailored for private individuals, employees, families, and drivers. The company operates under the ERGO Versicherung Aktiengesellschaft pro ČR umbrella, providing comprehensive legal services and insurance packages with clear pricing and accessible customer support. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Alpine.js, Swiper.js, and various analytics and marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, the absence of a publicly accessible privacy policy and WHOIS data transparency slightly reduce trust levels. Overall, the site demonstrates a mature digital presence suitable for its industry and audience.

E

Reboots – Masážní nohavice pro úlevu a regeneraci nohou ❤️

e-reboots.cz

45

The website e-reboots.cz is an e-commerce platform specializing in massage pants designed to aid in leg recovery and muscle regeneration. The business targets athletes and individuals seeking enhanced physical recovery, positioning itself as a niche player in the wellness and sports retail sector within the Czech Republic. The site features product listings, video content, and endorsements from sports professionals, enhancing its market credibility. Technically, the site is built on WordPress with WooCommerce, leveraging common web technologies such as jQuery and various plugins for UI and marketing integrations. The site is mobile optimized and SEO friendly, with structured data implemented via Yoast SEO. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and formal incident response information. Privacy compliance is weak due to missing privacy and cookie policies, which poses a risk for GDPR adherence. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security practices.

L

Lakehouse Turbo

lakehouseturbo.com

63

Lakehouse Turbo is a technology-focused company offering a cloud-based solution to optimize Databricks investments by reducing compute costs and enabling high concurrency scaling. The website is professionally designed, leveraging WordPress and modern web technologies, and integrates privacy compliance tools such as Cookiebot. The business appears to be a specialized service under the Exasol brand, targeting data professionals and enterprises using Databricks. The technical infrastructure is mature with good SEO and accessibility practices. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable concern, impacting domain transparency and trust. Overall, the website is functional, secure, and privacy-conscious but would benefit from enhanced business transparency and formal security documentation.

K

Komora daňových poradců České republiky

kdpcr.cz

49

Komora daňových poradců České republiky is a professional chamber representing tax advisors in the Czech Republic. The organization provides certification exams, educational courses, publications, and professional advocacy services. The website targets tax advisors, accounting professionals, students, and clients seeking tax advisory services. It holds a leading market position within the Czech tax advisory sector. Technically, the website uses a custom CMS with MooTools JavaScript framework, integrates Google Tag Manager, reCAPTCHA, and YouTube APIs, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and presents content in Czech with good design and navigation. Security posture is solid with HTTPS and reCAPTCHA usage, though security headers are not explicitly detected. WHOIS data is missing, which slightly reduces domain trust, but the website content and legal disclosures support legitimacy.

E

Exasol

exastaging.com

69

Exasol is a technology company specializing in a high-performance analytics engine designed to modernize data warehouses, accelerate analytics, optimize cloud costs, and enable governed AI/ML workloads. The company targets data professionals including database masters, data scientists, and analytics accelerators, positioning itself as a scalable and cost-effective solution provider in the analytics and AI space. The website reflects a mature digital presence with comprehensive content, customer stories, and industry-specific solutions, indicating a medium-sized enterprise with a strong market position. Technically, the website is built on WordPress hosted on AWS infrastructure, utilizing modern web technologies such as Google Tag Manager, Cookiebot for consent management, and Plyr for video playback. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, with structured data enhancing search visibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers and vulnerability disclosure information could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Business credibility is supported by professional content, customer testimonials, and consistent branding. WHOIS data confirms domain legitimacy and appropriate registration history. Overall, Exasol's website demonstrates a strong digital maturity and security posture suitable for its business model. Strategic recommendations include enabling DNSSEC, adding security headers, publishing vulnerability disclosure policies, and providing incident response contacts to further enhance trust and security readiness.

O

Obec Palkovice

palkovice.cz

57

Obec Palkovice operates as a municipal government portal serving the residents and visitors of Palkovice and Myslík in the Czech Republic. The website provides comprehensive local information including official announcements, event calendars, citizen services, and contact details. It positions itself as a trusted source of community information and public service facilitation. Technically, the site is built as a modern Angular single-page application, integrating Google services such as Analytics, Tag Manager, Maps, and YouTube APIs, indicating a moderate level of digital maturity. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers or published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is credible and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

C

Creative Review

creativereview.co.uk

73

Creative Review is a well-established media publication focused on the creative industries including advertising, photography, film, design, music, and fashion. The website offers rich editorial content, subscription options, and partnerships, positioning itself as a key player in the creative media market in the United Kingdom. The site employs a modern technical infrastructure based on WordPress, enhanced with advanced analytics and advertising technologies such as Google Tag Manager, Adobe DTM, DoubleClick, and Tinypass for paywall management. The website is well-optimized for SEO, mobile responsive, and provides a professional user experience with consistent branding and high-quality content. Security posture is strong with HTTPS enforced and some security best practices observed, though explicit security headers and formal policies like privacy and terms of service are missing or not detected in the provided content. The WHOIS data query was performed incorrectly on the subdomain, resulting in no registrar or registrant information, which limits domain trust verification. Overall, the website is safe, professional, and credible, but would benefit from improved transparency on privacy and security policies.

A

ABNMO - Associação Brasileira de Neuromielite Óptica

abnmo.org

48

ABNMO - Associação Brasileira de Neuromielite Óptica is a Brazilian non-profit organization dedicated to supporting patients with Neuromyelitis Optica (NMO/NMOSD), promoting awareness, education, and research. The website serves as a hub for community engagement, offering blogs, podcasts, videos, and event information to patients, families, and healthcare professionals. It positions itself as a specialized association within the healthcare sector in Brazil, relying on donations and community participation to fund its initiatives. Technically, the website is built on WordPress using Elementor and integrates modern SEO and accessibility tools such as Yoast SEO and Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is adequate with HTTPS enforced, though some security headers are not explicitly detected, and privacy compliance could be improved by adding explicit policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a privacy policy, cookie consent mechanism, and vulnerability disclosure reduces compliance and transparency. WHOIS data is privacy protected or unavailable, which is common for non-profits, but the website content and branding indicate legitimacy and trustworthiness. Overall, the website is a credible and professional platform for its target audience but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

G

GLOBAL ASSISTANCE a.s.

globalassistance.cz

59

GLOBAL ASSISTANCE a.s. is a Czech-based company specializing in comprehensive assistance services including car, medical, home, legal, and concierge assistance. Founded in 2004 and part of the Vienna Insurance Group since 2014, it serves motorists and business clients primarily in Europe. The website reflects a professional and consistent brand presence with clear service offerings and contact channels. Technically, the site uses modern web technologies including Google Fonts, YouTube API, Facebook Pixel, Google Analytics, and is built on the Solidpixels CMS platform. It is well-optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data is a minor concern but does not significantly detract from the overall trustworthiness given the company's certifications and parent company affiliation.

M

MyGame AS

mygame.no

65

MyGame AS operates a digital platform focused on streaming and producing Norwegian sports content, leveraging automated camera technology and intelligent systems to deliver over 10,000 matches from grassroots to elite levels. Positioned as Norway's largest sports producer, the company targets sports players and fans within the Norwegian market. The website is built on a modern WordPress CMS with the Divi theme, integrating multiple analytics and tracking tools such as Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and cookie consent implemented, though explicit security headers and policies are absent. The domain registration is recent but consistent with the company's new business launch, and no blocking or WAF mechanisms interfere with content access.

A

Apiday

apiday.com

73

Apiday is a technology company offering a SaaS platform focused on sustainability and ESG data management for forward-thinking organizations. Their platform enables building sustainability databases and processing ESG requests efficiently to help clients achieve sustainability goals. The website is professionally designed, leveraging modern web technologies including Webflow CMS, HubSpot marketing tools, Cookiebot for compliance, and Matomo for analytics. The technical infrastructure is solid with HTTPS enforced and multiple third-party integrations for marketing and analytics. Security posture is good with cookie consent and bot protection via Cloudflare Turnstile, though explicit security headers could be improved. The absence of WHOIS data limits domain trust assessment, but website content and technical setup indicate a legitimate business. Privacy compliance is well addressed with cookie consent mechanisms, though explicit privacy policy and terms of service pages were not detected. Overall, the site presents a professional and trustworthy digital presence in the sustainability technology sector.

E

Exasol

exasol.com

72

Exasol is a technology company specializing in high-performance analytics engines designed to modernize data warehouses, accelerate analytics, and enable governed AI/ML models. The company positions itself as a trusted provider for global enterprises seeking cost-effective and reliable data analytics solutions. Their website reflects a mature digital presence with strong SEO, structured data, and multimedia content to engage their target audience of enterprise data professionals. Technically, the website is built on WordPress with integrations including Google Tag Manager, Cookiebot for consent management, and marketing/analytics tools such as HubSpot and Hotjar. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS and uses Cloudflare services for bot management. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The privacy compliance is good with a cookie consent mechanism, but the absence of a visible privacy policy and terms of service reduces compliance confidence. Overall, the website is professional, secure, and trustworthy with minor gaps in explicit policy disclosures. Strategic enhancements in transparency and security documentation would further strengthen their risk posture and user trust.