Security Directory

R

Robin Rendle

robinrendle.com

47

Robin Rendle's website serves as a personal professional portfolio and publishing platform for a British designer and writer based in San Francisco. The site highlights his current role at Apple and previous experience with notable tech companies, alongside his writing contributions to CSS-Tricks. The content is rich, well-structured, and targets an audience interested in design, typography, and front-end development. Technically, the site uses modern web standards with custom fonts and responsive design, hosted on a DNS provider NS1, and secured with HTTPS. However, it lacks some security headers and DNSSEC, which could be improved. The security posture is solid but could benefit from enhanced policies and disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy, professional, and well-maintained, with minor gaps in compliance and security best practices.

Jen Schuetz's website is a personal blog featuring journal entries, photography, and craft-related content. The site targets a general audience interested in lifestyle and personal reflections. The business model is that of a personal content creator with a niche audience, maintaining a consistent and professional online presence since 2012. The website is small in scale and does not represent a commercial enterprise or large organization. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Typekit fonts. It is hosted on NS1 DNS infrastructure and employs HTTPS with a valid SSL certificate, ensuring secure communications. The site is moderately optimized for performance and mobile devices, though accessibility and SEO features are basic. No CMS or major frameworks are detected, indicating a custom or static site. From a security perspective, the site enforces HTTPS but lacks advanced security headers and DNSSEC, which could enhance its security posture. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security best practices. No analytics or tracking scripts are present, minimizing privacy concerns. Overall, the website is safe, trustworthy, and professionally maintained as a personal blog. The main risks relate to compliance and security policy transparency. Strategic improvements in these areas would enhance trust and security posture.

Placing Technologies is a small-scale academic blog focused on geospatial technology and related research topics. The site publishes articles and commentary primarily aimed at researchers, GIS professionals, and technology enthusiasts interested in geographic information systems and mapping software. The business model centers on content publishing without evident commercial services or advertising. The website's market position is niche and specialized within the technology sector. Technically, the website uses basic HTML, CSS, and JavaScript without detectable CMS or advanced frameworks. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No analytics or tracking scripts are present, indicating minimal user tracking. Security features such as HTTPS and security headers are not evident from the provided data, suggesting room for improvement in security posture. From a security perspective, the site lacks published privacy, cookie, or terms of service policies, and no incident response or vulnerability disclosure mechanisms are visible. The WHOIS data is privacy protected or unavailable, which is common for small personal or academic sites but reduces transparency. No suspicious or malicious indicators were found. Overall, the security posture is basic and would benefit from implementing HTTPS, security headers, and compliance documentation. The overall risk is moderate given the site's academic nature and lack of sensitive data handling. Strategic recommendations include improving security configurations, publishing privacy and cookie policies, and enhancing mobile and accessibility features to improve user trust and compliance.

T

The Roof is on Phire

phirephoenix.com

10

The Roof is on Phire is a personal blog operated by Jenny, known online as phire or phirephoenix. The site focuses on thoughtful commentary across technology, politics, work culture, and social issues, supplemented by a political newsletter project called Show Up Toronto. The blog targets a general audience interested in these topics and operates on a content publishing model with newsletter subscriptions for community engagement. Technically, the site is built using the Jekyll static site generator, hosted on NearlyFreeSpeech.net, and employs modern web standards with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the site is safe, trustworthy, and professionally maintained, though improvements in security and privacy disclosures are recommended.

S

Susan Jean Robertson

susanjeanrobertson.com

8

Susan Jean Robertson's website is a personal blog showcasing her interests in sewing, knitting, reading, and journaling. The site serves as a digital home for personal content and curated links, targeting a general audience interested in these hobbies. The business model is primarily content publishing without commercial transactions or services. The website is small scale and niche, with consistent branding and good content quality.

D

Dave Rupert, LLC

daverupert.com

60

Dave Rupert, LLC operates a personal blog and podcast platform focused on web development and technology topics. The website serves a niche audience of developers and tech enthusiasts, providing blog posts, project showcases, and podcast content. The business model is centered on personal branding and content sharing, with a strong presence in the web development community. The site is well-positioned as a trusted personal brand with consistent content and active social media engagement. Technically, the website is built using modern web standards including HTML5, CSS3, JavaScript, and the Jekyll static site generator. It employs service workers for offline support and uses reputable hosting and DNS providers. The site is optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses service workers, but lacks DNSSEC and explicit security headers. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and contact information for security incidents represents compliance and operational gaps. The domain registration is transparent, consistent, and long-standing, supporting the site's legitimacy. Overall, the website is a well-maintained personal brand platform with good technical and content quality but could improve in privacy compliance and security best practices to enhance trust and regulatory adherence.

R

Rob Weychert

robweychert.com

45

Rob Weychert's website serves as a personal portfolio and blog showcasing his work in art and design, alongside his interests in film, music, and archival data. The site targets a general audience interested in creative and cultural content, positioning Rob as an independent artist with a niche following. The business model revolves around content sharing, project showcasing, and product sales via a linked shop. Technically, the site is built with modern HTML, CSS, and JavaScript, featuring good mobile optimization and accessibility, though no CMS or hosting provider is explicitly identified. Security posture is moderate with HTTPS assumed but lacking explicit security headers and privacy policies, which are recommended for compliance and trust. The WHOIS data is missing, which slightly reduces trustworthiness, but the professional presentation and active content mitigate concerns. Overall, the site is well-designed and user-friendly but would benefit from enhanced privacy and security disclosures.

J

Jeremy Keith

adactio.com

62

Adactio.com is the personal website of Jeremy Keith, a seasoned web developer and author based in Brighton, England. The site serves as a hub for his professional content including a journal, curated links, articles, notes, and information about his projects and speaking engagements. It targets web developers and technology enthusiasts interested in web standards, development practices, and digital culture. The business model centers on personal branding and content publishing with a strong reputation in the web development community. Technically, the site uses modern web standards including HTML5, CSS3, JavaScript, and progressive web technologies such as service workers and IndieAuth protocols. The site is fast, mobile-optimized, and accessible, with a clean and professional design.

Mark Llobrera's website serves as a personal portfolio and content hub showcasing his professional work, blog posts, reading log, and film log. Mark is a seasoned developer and writer with over 25 years of experience, currently a Senior Engineering Director at Upstatement. The site targets a general audience interested in his professional insights and personal content. Technically, the site is built using Eleventy, a modern static site generator, hosted likely on Netlify, and employs HTTPS with a clean, responsive design optimized for mobile and accessibility. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is minimal with no visible privacy or cookie policies, and no contact information is provided for privacy or security concerns. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

B

Build

buildconf.com

52

Build is a niche design festival focused on web designers and creative professionals, held annually in Belfast with a history dating back to 2009. The website provides comprehensive event information including schedules, speaker bios, workshops, and venue guides, supported by reputable sponsors such as Mailchimp, Dropbox, and GitHub. The site targets a specialized audience interested in design culture and community engagement. Technically, the website uses modern web standards including HTML5, CSS3, JavaScript, and integrates third-party services like Typekit fonts and Foursquare widgets. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. However, no CMS or hosting provider details are evident, and accessibility features are basic. From a security perspective, the site lacks HTTPS confirmation and security headers in the provided data, and no privacy or cookie policies are present. The WHOIS lookup failed to return domain registration details, raising concerns about domain legitimacy or current registration status. No forms or data collection mechanisms are present, reducing immediate data exposure risks. Overall, the site is professionally designed and content-rich but has gaps in security and privacy compliance. The domain status uncertainty suggests caution for transactional use. Strategic improvements in security posture and privacy transparency are recommended.

S

Smashing Magazine

smashingmagazine.com

70

Smashing Magazine is a well-established online publication focused on web design, front-end development, UX, and accessibility. It serves a professional audience of developers, designers, and front-end engineers by providing high-quality articles, books, workshops, and a membership community. The website demonstrates a strong market position with a large subscriber base and active community engagement. Technically, the site uses modern web technologies, including service workers, web fonts, and integrates Google Analytics for user insights. The design is professional, mobile-optimized, and accessible, providing an excellent user experience. Security posture is good with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. Privacy compliance is basic, with a cookie banner present but no clear privacy policy found in the provided content. WHOIS data is unavailable, which slightly reduces trust but is likely due to privacy protection. Overall, the site is credible and trustworthy with room for improvement in transparency and security disclosures.

T

Tim Bourguignon

devjourney.info

53

The website devjourney.info hosts the Software Developers Journey podcast, a niche inspirational podcast focused on sharing the career journeys and life stories of software developers worldwide. The host, Tim Bourguignon, is an experienced software engineer and engineering leader. The podcast targets software developers and aspiring developers seeking motivation and insights into the profession. The business model relies on content creation and listener donations via Patreon. The site is small-scale and personal in nature, with a consistent brand and high-quality content. Technically, the site is built using Jekyll, a static site generator, with modern web technologies including HTML5, CSS, JavaScript, Google Fonts, and Font Awesome. It integrates a third-party podcast player from Buzzsprout and links to major podcast platforms. The site is moderately performant and mobile-optimized, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site does not expose sensitive data or collect personal information via forms, which reduces risk. However, no security headers or privacy/cookie policies are present, indicating gaps in compliance and security best practices. The WHOIS data is privacy protected and incomplete, but consistent with a legitimate personal podcast site. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the site is a well-maintained personal podcast platform with good content quality and technical implementation but would benefit from improved privacy compliance and security hardening to enhance trust and regulatory adherence.

U

Under Engineering Ltd

noti.st

48

Notist is a specialized platform designed to help public speakers build and maintain a permanent portfolio of their speaking engagements, including slides, feedback, and related media. The business operates on a freemium SaaS model offering free and Pro accounts with a 14-day trial, targeting public speakers and event organizers. The company behind Notist is Under Engineering Ltd, with a domain age consistent with its founding in 2008, indicating a stable market presence in the niche of public speaking technology solutions. The website content is professional, well-structured, and focused on its core audience.

S

Smashing Media AG

smashingconf.com

64

SmashingConf is a well-established provider of online workshops focused on front-end development and UX design, targeting designers and web developers seeking practical, live training sessions. The company operates a professional and user-friendly website offering multiple workshops, video recordings, and membership discounts, positioning itself as a reputable educational resource in the web development community. Technically, the website is built with modern web standards, hosted on Netlify, and optimized for performance and accessibility, providing a seamless user experience across devices. Security-wise, the site enforces HTTPS and employs domain transfer protections, though it lacks DNSSEC and explicit security headers, indicating room for improvement in hardening its security posture. Privacy compliance is partially addressed with a privacy policy and terms of service, but the absence of a cookie consent mechanism and explicit GDPR indicators suggests further enhancements are needed. Overall, the website demonstrates high business credibility and technical maturity with minor gaps in privacy and security best practices.

HTML Recipes is a small-scale educational website created by Stephanie Eckles that provides accessible, well-structured HTML snippet examples for web developers and designers. The site encourages community contributions and is positioned as a niche resource for front-end development education. The technical infrastructure is modern and lightweight, leveraging HTML5, CSS, SVG, and JavaScript with privacy-respecting analytics via plausible.io. Accessibility and semantic HTML best practices are well implemented, contributing to a positive user experience and mobile optimization. Security posture is generally good with HTTPS usage and secure form practices, but lacks explicit security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is present, indicating room for maturity in security governance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

S

Stephanie Eckles

buttonbuddy.dev

55

ButtonBuddy is a specialized web tool created by Stephanie Eckles to assist web developers and designers in creating accessible button color palettes that comply with WCAG contrast standards. The website offers an interactive generator and educational content focused on accessibility best practices, targeting a niche audience within the front-end development community. The project is small-scale, open source, and community-oriented, with a strong emphasis on semantic HTML, modern CSS, and accessibility. Technically, the site is built using modern web technologies including Eleventy as a static site generator, Parcel for bundling, and JavaScript for interactivity. It employs minimal external dependencies and integrates plausible.io for privacy-focused analytics. The site demonstrates excellent mobile optimization, accessibility, and SEO fundamentals, with fast performance and clean code. However, explicit security headers are not detected, and privacy and cookie policies are absent, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data or collect personal information via forms, reducing risk. The absence of security headers and formal privacy documentation lowers the security posture score. The domain registration is privacy protected but consistent with the project’s scope and founding date, indicating legitimacy. No WAF or blocking mechanisms are detected, and the content is safe and professional. Overall, ButtonBuddy is a well-executed, trustworthy resource for accessibility-focused developers, with room to enhance privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to strengthen trust and compliance.

M

ModernCSS.dev

stylestage.dev

57

Style Stage is a niche community-driven project focused on showcasing modern CSS techniques through contributed stylesheets. Maintained by Stephanie Eckles, it serves as an educational and inspirational platform for CSS practitioners of all skill levels. The project is open source, hosted on Netlify, and uses modern web technologies including 11ty and PostCSS. The website is well-designed, accessible, and optimized for mobile devices, reflecting a high level of technical maturity for a small community project. Security posture is generally good with no forms collecting sensitive data and use of HTTPS assumed, but lacks explicit security headers and formal privacy or cookie policies. The absence of vulnerability disclosure and incident response information suggests room for improvement in security governance. Overall, the site is trustworthy, professional, and safe for general audiences.

LearnFromSteph.dev is an educational website offering a beginner-friendly web development video course created by ThinkDoBeCreate. The platform focuses on teaching essential web development skills such as HTML, CSS, accessibility, responsive design, and version control through a structured series of short videos. The business targets novice learners seeking to build and launch websites without prior coding experience. The site integrates YouTube for video hosting and uses plausible.io for privacy-conscious analytics, reflecting a modern and privacy-aware technical infrastructure. However, the absence of published privacy and cookie policies, as well as contact information, indicates gaps in compliance and user trust facilitation. Security posture is moderate with no detected security headers or forms collecting user data, but SSL status is unknown from the provided data. Overall, the website is professionally designed, mobile-optimized, and accessible, making it a trustworthy educational resource with room for improvement in privacy and security transparency.

S

Stephanie Eckles

12daysofweb.dev

54

12 Days of Web is a niche educational website created by Stephanie Eckles that offers a year-end series of tutorials and articles focused on fundamental web technologies such as HTML, CSS, and JavaScript. The site targets web developers and enthusiasts seeking to deepen their understanding of modern web development techniques. The business model centers around content publishing with an email subscription service for daily updates during December, supported by open-source sponsorship and donations. The website maintains a consistent brand and provides quality content with clear navigation and good user experience. Technically, the site is built using the Eleventy static site generator, leveraging modern web standards including HTML5, CSS3, and JavaScript. It uses Plausible Analytics, a privacy-focused analytics platform, and includes accessibility and SEO best practices. The site performs well with fast loading times and mobile optimization. However, no explicit hosting provider or advanced platform integrations are identified. From a security perspective, the site uses HTTPS as implied by external script sources, but lacks explicit security headers such as Content-Security-Policy or HSTS. Forms use POST methods with basic anti-bot hidden fields, but no published security policies or incident response contacts are available. Privacy and cookie policies are absent, representing compliance gaps. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional with a strong focus on educational content. The domain registration data aligns well with the website's author and content, supporting legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding vulnerability disclosure information to enhance compliance and security posture.

Stephanie Eckles operates a professional personal website focused on front-end software engineering, education, and community engagement. The site offers a wide range of high-quality educational resources including tutorials, courses, open source projects, and speaking engagements. The target audience primarily consists of front-end developers and learners interested in modern CSS and web development techniques. The business model revolves around content creation, sponsorships, consulting, and educational services. Technically, the site is built using modern web standards and the Eleventy static site generator, optimized for performance, accessibility, and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and DNSSEC. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site and its operator.

The website timothygu.me is a personal site and blog for Tiancheng "Timothy" Gu, focusing on technology topics and personal experiences. It serves as a portfolio and content hub with blog posts dating back to 2014-2015. The site is hosted on GitHub Pages using a Jekyll theme, leveraging modern web technologies such as Google Fonts and Font Awesome. Analytics are implemented via Google Analytics and Tag Manager, indicating moderate user tracking. The site is mobile optimized and well-structured, providing a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and formal privacy or cookie policies, which reduces its compliance posture. The domain is privacy protected but consistent with the personal nature of the site and its age aligns with the content timeline. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the site demonstrates good technical implementation and business credibility for a personal website but falls short on privacy compliance and security best practices. Strategic improvements in policy disclosures and security headers would enhance trust and compliance.

C

Online Kasina pro Česke Hrace ᑕ❤️ᑐ Nejlepší Online Casino CZ

casinopointcz.com

56

The website casinopointcz.com is a Czech language online casino review and affiliate platform targeting Czech players interested in online gambling. It provides detailed casino reviews, bonus offers, game guides, and payment method information. The site is professionally designed with good mobile optimization and uses modern analytics tools such as Google Analytics and Microsoft Clarity. However, it lacks visible privacy, cookie, and terms of service policies, as well as direct contact information, which impacts its privacy compliance and business credibility scores. The WHOIS data for the domain is unavailable or the domain is unregistered, which raises concerns about domain legitimacy despite the active and professional website presence. Security posture is generally good with HTTPS enabled but could be improved by adding security headers and formal security policies. Overall, the site serves its niche well but should improve transparency and compliance to enhance trust and security.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content for the domain 'chromewebdata' is inaccessible or blocked. No business-related content, metadata, or contact information is present, making it impossible to assess the company's market position, services, or technical infrastructure. The page appears to be a default browser error page rather than a functional website. From a technical perspective, the page includes embedded JavaScript and CSS related to the Chrome offline dinosaur game, but no external resources, analytics, or security headers are detected. The security posture is minimal due to lack of HTTPS and security policies. Privacy compliance and business credibility cannot be evaluated due to absence of relevant content. Overall, the website is non-functional or blocked, resulting in a low AI score and no actionable business or security insights. For accurate analysis, access to the actual website content is required.

P

Printerka J&R s.r.o.

printerka.sk

42

Printerka J&R s.r.o. operates a specialized event service business in Slovakia, providing photobooth and instant photo printing solutions for corporate events, weddings, parties, and festivals. The company positions itself as a regional leader with over a decade of experience and a professional online presence. Their website is well-structured, visually appealing, and targets event organizers and agencies seeking photo printing services. Technically, the site uses standard web technologies including jQuery, Google Analytics, and Facebook Pixel, but relies on an outdated jQuery version which may pose security risks. The site is HTTPS enabled and uses asynchronous loading for analytics, contributing to moderate performance and good mobile optimization. Security posture is adequate but could be improved by adding security headers and updating libraries. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information is limited to contact forms without direct emails or phone numbers, which may impact user trust. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

Vojenské lesy a statky ČR, s.p. is a Czech state-owned enterprise with a long tradition exceeding 80 years, specializing in the management of military forests and related activities. The organization offers a variety of services including forest management, sale of firewood and surplus assets, recreational accommodations, and high-quality game meat sales. The website targets the general public, business partners, and government entities, positioning itself as a key player in forestry and land management within the Czech Republic. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with embedded multimedia content such as YouTube videos. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. No CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks visible security headers, explicit cookie consent mechanisms, and published security policies or incident response contacts. The absence of WHOIS data reduces domain trust slightly but the overall digital footprint and content quality support legitimacy. Overall, the website is professional, content-rich, and trustworthy with moderate technical and security maturity. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its posture and user trust.

P

Pintura Labs

edit.video

63

Edit.video is a free online video editor demo website powered by Pintura Labs, a technology company specializing in image and video editing tools. The site offers a privacy-focused, no-ads, no-tracking, no-account-required video editing experience directly in the browser. It targets general users seeking quick and private video editing without watermarks or intrusive elements. The business model is supported indirectly by companies purchasing Pintura licenses, enabling this demo to remain free and open. Technically, the website is well implemented using modern web technologies including JavaScript, HTML5, CSS3, and the Pintura video editor framework. It supports mobile and desktop platforms with good performance and basic accessibility features. The site uses HTTPS exclusively and employs privacy-first analytics, avoiding cookies and tracking scripts. However, explicit security headers and formal security policies are not published. From a security perspective, the site demonstrates strong privacy practices by not collecting personal data or requiring accounts. The absence of security headers and incident response information is a minor gap. No vulnerabilities or suspicious elements were detected. The domain WHOIS data is privacy protected, which is typical for small tech demos, and no suspicious registration patterns were found. Overall, the website is trustworthy, professionally designed, and well suited for its purpose as a demo tool. Strategic recommendations include adding security headers, publishing a security policy and incident response contacts, and clarifying cookie usage to further enhance trust and compliance.

D

Duckyard BV

edit.photo

63

Edit.photo is a free online photo editing web application operated by Duckyard BV, a Netherlands-based company founded in 2017. The website offers a fast, privacy-focused photo editor with no ads, popups, cookies, or account requirements, targeting general users seeking simple image manipulation in-browser. The service is powered by Pintura Labs, a commercial product provider, which finances the free offering indirectly. The website is well-structured with clear navigation, privacy, and terms pages, and uses modern web technologies including service workers and Cloudflare DNS for hosting and performance optimization. Security posture is strong with HTTPS enforced, no tracking cookies, and minimal data collection, although some security headers could be improved. WHOIS data is consistent with the business claims, showing a legitimate and transparent registration. Overall, the site demonstrates a good balance of usability, privacy, and security for its niche.

C

CropGuide B.V.

crop.guide

59

CropGuide B.V. operates a specialized SaaS platform providing image cropping and editing tools that integrate seamlessly with popular NoCode platforms and JavaScript libraries. The service targets website owners and developers seeking to improve user-uploaded photo quality by enabling client-side cropping, resizing, and orientation correction. The website is professionally designed, mobile-optimized, and offers clear navigation with demos and detailed documentation, positioning CropGuide as a niche but trusted player in the image editing technology market. Technically, the website employs modern web technologies including JavaScript, CSS3, and HTML5, with integrations for Crisp chat and Simple Analytics for user engagement and minimal tracking. The platform emphasizes privacy by performing all image processing client-side, ensuring no image data is transmitted to CropGuide servers. Performance is fast, and the site is accessible across modern browsers and devices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response plan. No vulnerability disclosure or security.txt file is present, and cookie consent mechanisms are absent, which may impact compliance. The WHOIS data is unavailable due to TLD restrictions, but the website's professional presentation and trust signals mitigate concerns about legitimacy. Overall, CropGuide demonstrates a strong business and technical foundation with room for improvement in formal security policies and privacy compliance mechanisms. Strategic enhancements in these areas would further strengthen trust and regulatory adherence.

A

AŽD Praha s.r.o.

azd.cz

54

AŽD Praha s.r.o. is a leading Czech company specializing in the manufacturing and supply of security and control systems for transportation, focusing primarily on railway and road transport sectors. The company offers a broad range of products and services including telecommunications, automation technologies, system integration, and training. Their market position is strong within the Czech Republic and they maintain a professional online presence with comprehensive information about their offerings and corporate policies. Technically, the website employs modern web technologies such as Vue.js for chatbot functionality, Google reCAPTCHA for form security, and LinkedIn Insight for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional content and compliance indicators. Overall, the website reflects a well-established business with a focus on transportation technology and security solutions.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) that appears when a webpage fails to load or is inaccessible. This page includes the offline dinosaur game and related scripts but contains no actual website content, business information, or external links. Consequently, no privacy, cookie, or terms of service policies are present, and no contact or security policies are available. The technical infrastructure is limited to Chromium's internal JavaScript and canvas-based game implementation. Security posture cannot be fully assessed due to the nature of the content, but no obvious vulnerabilities or sensitive data exposure are detected. Overall, this is not a public-facing website but an internal browser error page, and thus the risk assessment is minimal with no business credibility or privacy compliance to evaluate.

C

Cluster Industrial

clusterindustrial.com.mx

25

Cluster Industrial is a Mexican-based digital platform focused on providing leading information and specialized content for the mobility and industrial sectors. The company positions itself as a key player in transforming the industrial landscape in Mexico through its digital platform, strategic events, and expert content. The website reflects a professional and consistent brand image targeting industry professionals and stakeholders in Mexico. Technically, the site is built on the Ghost CMS platform, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although the absence of visible privacy and cookie policies indicates room for compliance improvement. Overall, the site is trustworthy and well-structured but would benefit from enhanced privacy and legal disclosures to improve user trust and regulatory compliance.

Q

qiwio.io

qiwio.io

55

The website ww25.qiwio.io is a domain parking page primarily serving advertising content with minimal actual business information or user engagement features. The site lacks meaningful content, contact details, or clear business identity, indicating it is likely used for domain monetization rather than active commercial operations. The technical infrastructure relies on basic HTML, CSS, and JavaScript with Google Adsense and Bodis advertising networks integrated. Security posture is weak with no advanced headers or privacy mechanisms, and WHOIS data is unavailable, reducing trustworthiness. Overall, the site presents a low-risk profile but offers limited value or credibility as a business entity.

I

Italian German Exhibition Company Mexico

igeco.mx

47

IGECO Mexico is a medium-sized event organization company specializing in industrial transformation, environmental technology, and energy sector trade fairs primarily in Mexico and Latin America. The company organizes key events such as Industrial Transformation Mexico, Americas’ Mobility of the Future, and RE+ Mexico, positioning itself as a leading promoter of industrial and environmental innovation events with strong international partnerships. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting industrial and energy sector professionals. Technically, the website is built using the Astro framework, leveraging modern web technologies with good performance and mobile optimization. The site is well-structured with valid HTML and CSS, though it lacks some advanced accessibility features. Security posture is strong with HTTPS enforced and standard security headers present, and no visible vulnerabilities or exposed sensitive data were detected. However, the site lacks a cookie policy and consent mechanism, terms of service, and published security or incident response policies, which are important for compliance and trust. Contact information is limited to an email and physical address, with no phone numbers or social media links explicitly provided. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

L

Lu'nivers Production

luniversproduction.com

56

Lu'nivers Production is a small photography and video service provider specializing in ceremonies, corporate events, and sports events. The website is professionally designed using the Wix platform, offering a good user experience and clear navigation. However, the technical infrastructure is basic, relying on Wix's standard technologies without advanced customizations. Security posture is moderate but lacks important security headers and documented policies. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are missing, which impacts compliance with GDPR and other regulations. Overall, the website serves its business purpose but requires improvements in security, privacy, and legitimacy transparency to enhance trust and compliance.

M

moskova-europe

moskova-europe.com

63

Moskova Europe operates as a niche e-commerce retailer specializing in surf and action sports apparel, targeting European surfers and enthusiasts. The company offers a range of products including underwear, clothing, Jiu-Jitsu gear, and surf accessories, with a focus on comfort and quality validated by the action sports community. The business leverages Shopify as its e-commerce platform, integrating marketing and analytics tools such as Klaviyo and Yotpo to enhance customer engagement and sales performance. The website is professionally designed, mobile-optimized, and supports multiple languages, primarily French, English, and Spanish.

I

ICODIA

icodia.com

52

ICODIA is a French technology company specializing in secure, high availability hosting solutions including shared, dedicated, and virtual servers. With over 25 years of experience and ISO 27001 certification, ICODIA positions itself as a reliable regional hosting provider focused on quality service and personalized support. Their offerings include cloud hosting, email services, backup, and IT management, targeting businesses and developers seeking robust infrastructure. Technically, the website is well-structured with moderate performance and basic mobile optimization, hosted on their own datacenter in Brittany, France. Security posture is strong with ISO 27001 certification and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and business-focused with clear contact information and social media presence.

S

SFR

sfr.fr

60

SFR is a major French telecommunications company offering a wide range of services including fiber and ADSL internet, 5G mobile plans, smartphones, TV packages, and home security solutions. The website reflects a mature digital presence with comprehensive product information, customer reviews, and clear navigation tailored to both consumers and business clients. Technically, the site uses modern web technologies including Django, asynchronous JavaScript, and optimized media formats, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be enhanced and a security.txt file added. Privacy compliance is well addressed with clear policies and consent mechanisms. WHOIS data is unavailable due to AFNIC restrictions, which slightly impacts trust but is typical for French domains. Overall, the site is professional, trustworthy, and well-optimized for its market.

foundation-laserie.fr is a domain owned by a user of Kifdom, a domain marketplace platform operated by KifCorp. The website serves as a placeholder indicating the domain is not for sale and promotes Kifdom's domain sales services. The technical infrastructure uses modern frontend technologies such as Livewire and Alpine.js, with good mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and privacy policies. No forms or contact information are provided, limiting user engagement and compliance. WHOIS data is transparent and consistent with the website's purpose, showing a legitimate domain registration with a valid expiry date. Overall, the website is functional but minimal, with room for improvement in privacy, security, and business transparency.

I

Integrity Watch Česká republika

integritywatch.cz

45

Integrity Watch Česká republika is a specialized transparency platform focused on monitoring the financial activities of Czech political parties from 2017 to 2022. It provides detailed visualizations and data tables to promote political transparency and accountability. The platform is affiliated with Transparency International Czech Republic, enhancing its credibility and trustworthiness. Technically, the website uses modern JavaScript libraries such as D3.js and dc.js for interactive data visualization and is hosted on DigitalOcean, indicating a reliable infrastructure. However, the site lacks explicit privacy and cookie policies, and no contact information is provided, which may affect user trust and compliance. Security-wise, the site uses HTTPS but lacks visible security headers and incident response contacts, suggesting room for improvement in security posture. Overall, the website is professional, content-rich, and trustworthy for its target audience but should enhance privacy compliance and security transparency to improve its overall risk profile.

A

Azimut

azimut.net

61

Azimut is a French technology company specializing in custom digital solutions including interactive kiosks, software platforms, and dynamic digital signage. With over 30 years of experience, they serve a diverse clientele including enterprises, public sector entities, and cultural ticketing points of sale. Their website reflects a mature digital presence with professional design, client testimonials, and certifications that support their market credibility. Technically, the site employs modern web technologies and includes a cookie consent mechanism, indicating awareness of privacy compliance, though explicit privacy and terms policies are not found. Security posture is generally good with HTTPS and tracking tools in place, but lacks some security headers and incident response disclosures. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, Azimut presents as a credible and established digital solutions provider in the French market.

S

Sector s.r.o.

webhry.cz

36

Webhry.cz is an online gaming portal operated by Sector s.r.o., targeting Czech and Slovak audiences with a wide variety of free online games including flash, HTML5, and Unity-based titles. The site offers categorized game listings, user account features, and integrates advertising as its primary revenue model. The technical infrastructure leverages common web technologies such as jQuery, Google Analytics, and Google Adsense, with a consent management platform for cookie compliance. While the site is accessible over HTTPS and includes basic security practices, it uses outdated JavaScript libraries and lacks visible privacy and terms of service pages, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the presence of company contact information and consistent branding supports legitimacy. Overall, the site provides a good user experience with family-friendly content and moderate technical maturity.

meteoblue AG operates a professional weather forecasting platform offering detailed meteorological data including forecasts, radar, satellite imagery, and weather warnings. The company targets a broad audience from general users to professionals requiring precise weather data. The website demonstrates a mature digital presence with multilingual support, structured data, and integration of modern web technologies such as Google Tag Manager and Google Ads for analytics and advertising. Security posture is good with HTTPS enforced, though explicit security headers could be improved. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency. Overall, the site is professional, trustworthy, and technically sound.

D

Destinační agentura České středohoří, o.p.s.

stredohori.cz

48

The website stredohori.cz serves as a comprehensive regional tourism portal for the České středohoří area in the Czech Republic. It provides detailed information about local attractions, events, accommodations, and services, targeting tourists and visitors interested in cultural, outdoor, and recreational activities. The site is operated by Destinační agentura České středohoří, o.p.s., a small regional destination management organization established in 2011. The business model focuses on promoting regional tourism and supporting local service providers through information dissemination and event promotion. From a technical perspective, the website employs modern web technologies including Google Fonts, Google Analytics, and Google Tag Manager, with a responsive design optimized for mobile devices. The site is hosted likely by Wedos, consistent with the domain registrar information. Performance is moderate with good SEO and basic accessibility features. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Security posture is solid with HTTPS enforced and a cookie consent mechanism that complies with GDPR requirements. However, the site lacks explicit privacy policy and terms of service pages, as well as published security policies or incident response contacts. No security headers were detected in the HTML content, which could be improved to enhance security. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy and professional, with a clear focus on regional tourism promotion. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and providing explicit incident response contacts to improve compliance and security maturity.

B

BurnIT, s.r.o.

dtonline.cz

40

DTonline.cz is a Czech fan portal dedicated to the collectible card game Doom Trooper from the Mutant Chronicles universe. Operated by BurnIT, s.r.o., the site provides a card catalog, tournament announcements and reports, a fan magazine, and a simple game. It targets Czech-speaking fans and players, serving as a community hub rather than a commercial enterprise. The website is modest in scale and content quality is good for its niche audience. Technically, the site uses standard web technologies including jQuery and Google Analytics, but lacks modern CMS or advanced frameworks. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance elements such as cookie and privacy policies. No social media presence or direct contact emails are provided, limiting user engagement channels. Overall, the site is legitimate and consistent with its stated purpose but would benefit from improved security and privacy practices.

Ú

Újezdní úřad Březina

vojujezd-brezina.cz

47

The website vojujezd-brezina.cz serves as the official online presence for the Military Training Area Březina, a government-operated military district in the Czech Republic. It provides authoritative information regarding the military district's administration, access restrictions, safety protocols, and official announcements. The site targets a broad audience including the general public, visitors, government officials, and military personnel. Its business model is focused on public information dissemination and regulatory communication within a government context. Technically, the website employs a traditional HTML/CSS/JavaScript stack with the vismo CMS platform. It integrates Google Translate for multilingual support and maintains a moderate performance profile with basic mobile optimization and accessibility features. SEO and modern web practices are implemented at a basic level, with room for enhancement. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal security or incident response policy. Cookie policies exist but lack active consent mechanisms. No vulnerabilities or malicious content were detected, indicating a generally secure posture appropriate for a government informational site. Overall, the website is trustworthy and professional, though improvements in security headers, privacy compliance mechanisms, and mobile accessibility would enhance its digital maturity and user experience. The domain's WHOIS data confirms legitimacy and long-standing registration consistent with the site's official status.

N

Nemocnice Vyškov, příspěvková organizace

nemvy.cz

61

Nemocnice Vyškov, příspěvková organizace, is a regional healthcare provider in the Czech Republic offering a wide range of medical services including inpatient and outpatient care, oncology, laboratories, radiodiagnostics, emergency services, and pharmacy. The website targets patients and the general public, providing comprehensive information about departments, patient services, and public information. The organization positions itself as a trusted regional healthcare institution with certifications such as Baby Friendly and others, enhancing its credibility. Technically, the website employs modern web technologies including Google Web Fonts and Font Awesome icons, with a responsive design optimized for mobile devices and accessibility. The site uses HTTPS with a good SSL configuration, though the Content-Security-Policy header is empty and could be improved. The site includes cookie consent mechanisms and privacy policies compliant with GDPR, reflecting a mature approach to privacy and user consent. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contact information and does not publish a security.txt file, which could enhance transparency and security posture. The absence of WHOIS data reduces trust in domain legitimacy, but the website content and structure suggest a legitimate public healthcare entity. Overall, the website is professional, well-structured, and trustworthy, with room for improvement in security header implementation and domain registration transparency. The risk level is moderate, primarily due to missing WHOIS data and minor security header gaps.

T

Turistické informační centrum Vyškov

ticvyskov.cz

44

Turistické informační centrum Vyškov is a local government-operated tourist information center serving the city of Vyškov, Czech Republic. The website provides comprehensive information about local attractions, events, cultural and sports activities, and services for tourists. It targets visitors and tourists seeking guidance and information about the region. The business model is public service-oriented, focusing on promoting tourism and local culture. The site maintains a consistent brand presence with official city links and active social media channels.

T

TVVU s.r.o.

povodnovyportal.cz

46

TVVU s.r.o. operates the Povodňový portál, a specialized website dedicated to flood management solutions in the Czech Republic. The company provides digital flood plans, flood warning systems, monitoring services, and mobile flood barriers, targeting government agencies and emergency services. The website reflects a niche market position with strong partnerships with Czech hydrometeorological and water management institutions. Technically, the site uses a basic but modern tech stack including Google Analytics and Bootstrap-like CSS classes, hosted via WEDOS. While the site is accessible and professionally presented, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with no visible security headers and no incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

B

Bubble Group, Inc

valorimetre.com

67

Bubble Group, Inc operates Bubble.io, a leading no-code platform that enables users ranging from first-time founders to experienced engineers to build, design, and launch web applications rapidly without coding. The platform supports SaaS, marketplaces, and CRM applications hosted on Bubble's cloud infrastructure. The website content and metadata confirm a strong market position as a pioneer in visual programming and no-code development tools. Technically, the site leverages modern JavaScript libraries, Google Fonts, and animation frameworks, hosted on Cloudflare with robust SSL encryption. The presence of multiple analytics and marketing tools indicates a mature digital marketing strategy. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

S

Scire Pty Ltd

scire.au

63

Scire Pty Ltd operates a professional Australian journalism website focused on business news and analysis, with its flagship publication Capital Brief targeting founders, executives, investors, and policymakers. The company positions itself as a challenger to the existing media oligopoly in Australia by providing transparent, trustworthy, and practical journalism. The website is well-designed, mobile-optimized, and provides clear navigation and relevant content, although it lacks comprehensive privacy and cookie policies. Technically, the site uses modern web standards and Google Fonts but does not employ advanced security headers or extensive analytics tracking. Security posture is adequate with HTTPS enabled but could be improved with additional headers and policies. WHOIS data is limited due to .au domain privacy restrictions, but the domain appears legitimate based on content and contact information. Overall, the site is a credible media outlet with moderate risk and room for compliance and security enhancements.