Security Directory

A

ai.mobirise.com

mobirise.ws

68

The website chatgpt.com/g/g-yg5WelQdV-ai-website-builder offers a free AI-powered website builder tool developed by ai.mobirise.com. It targets general users interested in creating websites easily by providing a generator that allows inputting site details in any language and downloading the generated site as a zip file for hosting anywhere. The site uses modern web technologies including React and Cloudflare DNS services, indicating a moderate level of digital maturity and performance optimization. Security posture is strong with HTTPS enabled and domain locked with multiple EPP status prohibitions, although DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is safe for general audiences and professionally presented but lacks some compliance and transparency features.

S

Sdružení obcí mikroregionu Valašské Klobucko

valasskeklobucko.cz

48

The website valasskeklobucko.cz serves as the official online portal for the Valašské Klobucko microregion, providing comprehensive information on tourism, local traditions, events, history, nature, accommodation, and gastronomy. It targets tourists and local residents interested in exploring or learning about the region. The business model is informational and promotional, typical for a government or non-profit regional entity. The site maintains a consistent brand presence and offers social media engagement channels to extend its reach. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics and Tag Manager for visitor tracking. It supports mobile optimization and basic accessibility features. The site includes a cookie consent mechanism compliant with GDPR requirements, enhancing user privacy controls. From a security perspective, the site enforces HTTPS and employs cookie consent with granular options. However, it lacks visible security headers such as CSP or HSTS, and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is moderate but could be improved with additional headers and documented policies. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include implementing security headers, publishing security and incident response policies, and continuous monitoring of third-party scripts. These steps will enhance the site's security maturity and user trust.

M

Město Vizovice

mestovizovice.cz

51

Město Vizovice operates as the official municipal government website for the town of Vizovice in the Czech Republic. It provides residents and visitors with comprehensive information about the town, including news, events, contact details, and virtual tours. The site emphasizes community engagement and local services, positioning itself as a trusted source of municipal information. The website targets local citizens, tourists, and stakeholders interested in the town's activities and services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and Google services such as reCAPTCHA and Tag Manager. The site is mobile-optimized, accessible, and performs moderately well. It integrates an AI chat widget to assist users, enhancing user experience. However, the CMS appears custom or based on the Nette framework, with no explicit commercial CMS detected. From a security perspective, the website uses HTTPS and Google reCAPTCHA to protect forms, but lacks published privacy and cookie policies, security headers, and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration, consistent with the municipal nature of the site. Overall, the website is professional, trustworthy, and well-maintained but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

M

Město Luhačovice

luhacovice.eu

10

The website www.luhacovice.eu serves as the official online presence for the town of Luhačovice in the Czech Republic, providing comprehensive information for residents and visitors including local news, cultural events, tourism, and municipal services. The site is well-structured, professionally designed, and targets both local citizens and tourists interested in wellness and cultural activities. The business model is focused on municipal communication and tourism promotion, positioning the site as a trusted source of local information. Technically, the site uses a custom CMS with standard web technologies such as HTML5, CSS, JavaScript, jQuery, and Tiny Slider for UI components. It is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Performance is moderate, with room for improvement in loading speed and modern security headers. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, it lacks advanced security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected, and the site maintains a good security posture for a municipal website. Overall, the website is a credible, safe, and professional municipal portal with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security posture.

C

CzechTourism

eden-czechtourism.cz

42

The website www.eden-czechtourism.cz serves as an official platform promoting the EDEN (European Destinations of Excellence) project coordinated by CzechTourism, a government agency. It highlights sustainable tourism destinations in the Czech Republic with a focus on accessibility and cultural heritage. The site is professionally designed with consistent branding and provides detailed information about winning destinations and project goals. However, it lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information on the main pages. Technically, the site uses legacy JavaScript libraries and basic SEO and accessibility features, with moderate performance and mobile optimization. Security posture is moderate with HTTPS usage implied but no visible security headers or advanced protections. Google Analytics is used for visitor tracking without visible consent mechanisms, indicating privacy compliance gaps. WHOIS data is unavailable, likely due to privacy protection, but the site’s affiliation with CzechTourism and European Commission projects supports its legitimacy.

APSIS Lead operates as a technology-driven marketing platform specializing in lead management and marketing automation, providing users with a secure login portal. The website content is minimal, focusing primarily on user authentication without public-facing business or compliance information. The technical infrastructure leverages common web technologies including JavaScript, jQuery, Google Fonts, and tracking tools such as Google Analytics and ProspectEye. Hosting and domain registration are managed through reputable providers, with the domain established in 2015, aligning with the company's operational timeline. From a security perspective, the site employs basic best practices such as form POST methods and domain status locks to prevent unauthorized domain changes. However, it lacks DNSSEC, visible security headers, and explicit HTTPS enforcement details, indicating potential areas for security enhancement. Privacy and cookie policies are absent, which may impact GDPR compliance and user trust. No incident response or security contact information is provided, limiting transparency in security governance. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but notable gaps in privacy compliance and security hardening. The absence of contact information and policies reduces business credibility and user confidence. Strategic improvements in security headers, privacy disclosures, and user communication channels are recommended to elevate trust and compliance standards.

R

Regina Schneiderová

uzmrzlinare.cz

46

U Zmrzlináře is a small local ice cream business based in Valtice, Czech Republic, operating since 2019. The website serves as an informational portal providing contact details, location, and social media links to customers. The business targets local residents and visitors seeking ice cream services. The site uses a simple technical stack including Bootstrap and Google Tag Manager for analytics, hosted by WEDOS, a Czech hosting provider. The website is basic in design and content but functional for its purpose. Security posture is minimal with no advanced headers or policies detected, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and consistency.

S

Schloss Wilfersdorf

liechtenstein-schloss-wilfersdorf.at

60

Schloss Wilfersdorf is a cultural and hospitality business centered around the historic Wilfersdorf Castle, serving as a regional tourism landmark in Austria. The website presents the castle as a family-friendly destination offering events, exhibitions, and wine-related hospitality services such as a Heurigenbetrieb and Vinothek. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. While the technical infrastructure is modern and mobile-optimized, the website lacks critical privacy and security policies, contact information, and WHOIS transparency. Security posture is moderate with HTTPS enabled but missing key security headers and compliance documentation. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and transparency to improve trust and security.

The website mo-je.cz represents a small Czech business specializing in technical SEO and online profile management services for platforms such as Firmy.cz, Mapy.cz, and Google Search. The business targets other companies seeking to improve their online visibility through sustainable SEO practices rather than paid advertising. The site is professionally designed with clear navigation and relevant content, though it lacks comprehensive privacy and cookie policies. Technically, the site uses modern web technologies including Google Tag Manager, Google Fonts, and Font Awesome icons, and appears mobile-optimized with moderate performance. Security posture is adequate but could be improved by adding security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and raising questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

The website gdziepolek.pl is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha to verify human visitors. This prevents access to any substantive content, business information, or user-facing features. The domain is registered since 2014 with home.pl S.A., a reputable Polish registrar, indicating a legitimate and established presence. However, no privacy policies, cookie notices, terms of service, or contact information are visible in the provided HTML content. The technical infrastructure includes Cloudflare's security services, but no further technology stack or CMS details are discernible due to the blocking mechanism. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are observable. Overall, the site cannot be fully analyzed until the security challenge is passed.

Enel Senior is a Polish senior care home operated by Centrum Medyczne ENEL-MED Spółka Akcyjna, established in 2018. The website presents a professional and consistent brand focused on providing comfort, safety, and medical care to seniors in Warsaw. The business targets senior citizens and their families, offering a range of care and activity services. The domain age and WHOIS data align well with the business history, supporting legitimacy. Technically, the website uses modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is HTTPS secured with DNSSEC enabled, enhancing trust and security. Security posture is strong with cookie consent and privacy policies in place, though additional security headers and incident response information could improve the security maturity. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR requirements, making it a trustworthy platform for its audience.

M

MIELE d.o.o. Belgrade

miele.rs

63

Miele Serbia operates a professional and well-structured website targeting private consumers in Serbia, offering premium household appliances including washing machines, dryers, vacuum cleaners, and kitchen appliances. The site supports e-commerce through an online shop and provides information about physical stores and outlets. The company is a subsidiary or local branch of the global Miele brand, with a domain registered since 2008, indicating an established market presence. Technically, the website uses modern web technologies including JavaScript, Google Tag Manager, and CSS3, though it appears to be built on a custom or proprietary CMS without popular open-source CMS signatures. The site is moderately optimized for mobile and accessibility, with basic SEO practices in place. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR, but lacks advanced security headers and explicit security policies or incident response information. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its retail business model.

Miele is a premium brand specializing in household and professional appliances, offering products such as kitchen appliances, laundry care machines, vacuum cleaners, and cleaning products. The website targets consumers and professionals seeking high-quality, innovative appliances. The digital infrastructure is built on modern JavaScript frameworks including Nuxt.js and Vue.js, supported by a custom CMS, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the absence of explicit privacy and security policies suggests room for improvement in compliance and transparency. Overall, the website reflects a mature, professional online presence consistent with a large, reputable enterprise.

M

Miele

miele.lt

55

Miele Lithuania operates as a premium brand retailer and e-commerce platform specializing in household and professional appliances. The website presents a professional and well-structured digital presence with comprehensive product offerings, customer account management, and support features. The technical infrastructure leverages modern web technologies including OpenText CMS and SAP Hybris platform, with integration of Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain legitimacy verification, but the website content and branding strongly indicate a legitimate and established business. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in transparency of security and contact information.

M

Miele

miele.lv

57

Miele Latvia operates as a premium retailer and service provider of high-end household and commercial appliances. The website reflects a strong brand presence with localized content tailored for Latvian consumers and businesses. It offers a comprehensive product range, customer service options, and event information, positioning itself as a trusted market leader in the appliance sector. Technically, the site leverages modern web technologies including SAP Hybris, OpenText CMS, and integrates customer identity management via Gigya, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance measures such as cookie consent and GDPR-aligned privacy policies. No critical vulnerabilities or suspicious activities were detected, indicating a mature security culture. Overall, the site is professional, user-friendly, and trustworthy, supporting Miele's premium market positioning.

Miele is a premium household appliance brand operating in Italy, offering a wide range of kitchen, laundry, vacuum, and cleaning products. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. The technical infrastructure leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a responsive and performant user experience. Security posture is good with HTTPS enforced and resource preloading, but lacks explicit security headers and visible privacy or cookie policies. No signs of WAF or content blocking were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website is trustworthy and well-positioned in the retail and e-commerce sector for premium appliances.

Miele is a globally recognized premium brand specializing in household and commercial appliances, with a strong presence in Ireland. The website showcases a wide range of products including kitchen appliances, laundry care, vacuum cleaners, and cleaning accessories, targeting consumers and commercial clients seeking high-quality and reliable appliances. The business model focuses on manufacturing and retail, supported by comprehensive customer services such as product consultation, delivery, installation, and maintenance. The website is professionally designed with clear navigation and rich content, reflecting Miele's market position as a premium appliance provider. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, ensuring fast performance and excellent mobile optimization. The use of a custom CMS and modern web standards contributes to a seamless user experience. SEO and accessibility features are well implemented, supporting broad user engagement and discoverability. From a security perspective, the site enforces HTTPS and includes essential security headers, indicating a strong security posture. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and compliance.

Miele is a premium manufacturer and retailer of household and professional kitchen appliances, targeting consumers and professionals in Finland. The website showcases a broad product range including kitchen appliances, laundry care, and vacuum cleaners, emphasizing quality and innovation. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers in place, but lacks visible privacy and cookie policies, which impacts privacy compliance. Contact information is not explicitly visible in the provided content, limiting direct customer engagement channels. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

M

Miele (PTY) Ltd.

miele.co.za

51

Miele (PTY) Ltd. operates a premium home appliance retail website targeting the South African market. The site offers a comprehensive online shop, event information, and store locations, positioning itself as a trusted brand with a focus on quality and longevity of products. The website is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and responsive design elements, though mobile optimization is basic. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks some advanced security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the domain appears legitimate despite the absence of WHOIS registration details, likely due to privacy protection.

B

BizBox

bizboxadmin.com

21

BizBox operates a technology platform providing a secure login portal for business administration purposes. The website is primarily a login page with basic form validation and minimal content beyond the login functionality. The platform appears targeted at business users requiring access to administrative services, likely under a SaaS or subscription model. The domain is mature, registered since 2012, and hosted on AWS infrastructure, indicating a stable technical foundation. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Fonts, with DNS hosted on Amazon AWS servers. The site shows basic mobile optimization and accessibility but lacks advanced SEO and security headers. No CMS or frameworks are explicitly detected. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site uses a login form with client-side validation but lacks visible security headers and DNSSEC is not enabled. No privacy policy, terms of service, or incident response information is published, which limits transparency and compliance posture. Cookie usage is disclosed but without a consent mechanism. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is functional but basic, with moderate trustworthiness based on domain age and hosting. Key improvements include publishing privacy and security policies, enabling DNSSEC, adding security headers, and providing clear contact information to enhance compliance and user trust.

N

Nubium Development SE

nubium.cz

52

Nubium Development SE is a Czech-based technology company founded in 2013, specializing in comprehensive web application solutions including cloud storage, CDN, video encoding, cybersecurity, and Linux systems management. The company positions itself as a leader in high-load applications and data distribution networks, targeting businesses across various industries seeking scalable and secure digital infrastructure. The website reflects a professional and consistent brand image with clear service offerings and a focus on sustainability. Technically, the website employs standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with a moderate performance profile and good mobile optimization. However, there is a lack of advanced security headers and no visible CMS or hosting provider information. SEO and accessibility are basic but adequate for the site’s scope. From a security perspective, the site uses HTTPS (assumed from URL), but lacks explicit security headers and published security policies. No vulnerability disclosure or incident response contacts are provided, which could be improved to enhance trust and compliance. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Overall, the website is safe, professional, and business-focused with no adult or questionable content. The domain WHOIS data aligns well with the company’s stated information, supporting legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding incident response information to strengthen security posture and regulatory compliance.

T

TKK spol. s.r.o.

truhlarstvitkk.cz

30

The website represents TKK spol. s.r.o., a small Czech woodworking and art business operating locally in České Budějovice. The business offers carpentry services and artistic painting and sculpture, targeting local customers interested in craftsmanship and art. The website content is minimal but relevant, with basic branding and navigation. Technically, the site uses legacy technologies such as jQuery 1.7.2 and Bootstrap CSS, hosted likely via WEDOS, a Czech hosting provider. The site lacks HTTPS and modern security headers, which poses security risks. Privacy and cookie policies are absent, and no contact information is directly provided on the homepage, limiting user trust and compliance. Google Analytics is used without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is functional but requires modernization and security improvements.

F

FUJIFILM Corporation

fujifilm.com

74

FUJIFILM Corporation is a globally recognized enterprise specializing in imaging, healthcare, and industrial products. The company operates a comprehensive global network of subsidiaries and offices, providing a wide range of products including films, digital cameras, medical systems, graphic arts, and life science products. The website reflects a mature, professional digital presence with strong branding consistency and extensive regional localization. Technically, the site employs modern web technologies, including Google Tag Manager and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. Security posture is robust with HTTPS enforcement and standard security headers, though the absence of a public security policy or vulnerability disclosure page suggests room for improvement. Overall, the website is trustworthy, well-maintained, and aligned with the company's global stature.

Z

ZONER software, a.s.

zoner.sk

59

ZONER software, a.s. operates the website zoner.sk, offering a comprehensive photo and video editing software suite targeted primarily at consumers, businesses, and educational institutions in Slovakia and the Czech Republic. The company holds a strong market position as a leading Czech photo software provider, evidenced by the prestigious EISA PHOTO SOFTWARE 2025-2026 award. Their business model revolves around software sales and subscriptions, supported by a rich content ecosystem including tutorials, user testimonials, and additional photo-related services such as cloud storage and merchandise.

A

Avager s.r.o.

pagio.cz

60

Avager s.r.o. is a Czech-based company specializing in B2B and enterprise e-commerce solutions, focusing on digitalizing business processes and accelerating online commerce. Their proprietary Avager Business Platform offers scalable, secure, and fast e-commerce capabilities tailored for demanding enterprise clients. The company targets manufacturing firms, wholesalers, and various industries including automotive, agriculture, and services. With over 15 years of specialization, Avager holds a strong market position supported by a portfolio of top clients and multilingual platform support. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates Matomo and Google Tag Manager for analytics, and uses Statamic CMS. The site is well-optimized for mobile and SEO, with a professional and consistent design. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

A

Académie royale de Belgique

lacademie.tv

9

lacademie.tv is a French-language academic video platform affiliated with the Académie royale de Belgique, providing access to lectures, conferences, and scholarly content primarily targeting academics, students, and the interested public. The platform is supported by multiple reputable academic and cultural partners, positioning it as a niche educational media provider in Belgium. Technically, the website uses modern web standards with responsive design and JavaScript libraries such as Swiper.js for UI components. The hosting is via OVH sas, a known registrar and hosting provider. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. The domain is currently expired, posing a risk to service continuity. Privacy compliance is weak, with no cookie consent mechanism and limited GDPR indicators. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is professional and trustworthy but requires domain renewal and enhanced privacy and security measures.

L

Les Trésors de l'Académie Royale de Belgique - Bibliothèque & Archives

tresorsdelacademie.be

10

Les Trésors de l'Académie Royale de Belgique is a cultural and educational institution representing the library and archives of the Royal Academy of Belgium. The website provides access to extensive collections of books, archives, artistic heritage, and historical documents, targeting researchers, academics, and the general public interested in Belgian heritage. It maintains a professional online presence with clear navigation and institutional partnerships, reflecting its role as a specialized academic resource. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and Swiper.js for interactive content. Hosted by OVH, it employs HTTPS with valid SSL certificates ensuring secure communication. However, it lacks visible security headers and advanced accessibility features, and no CMS or analytics tools are explicitly detected, indicating a relatively simple but functional technical infrastructure. From a security perspective, the site enforces HTTPS but lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for GDPR compliance and user trust. No forms or sensitive data collection points are present on the homepage, reducing immediate risk exposure. The absence of incident response contacts and data protection officer information suggests room for improvement in security governance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to align with best practices and regulatory requirements.

K

Kambojabet

yoanderoeck.com

7

Kambojabet operates as an online gaming and betting platform primarily targeting the Indonesian market, offering various gambling services including live casino, sports betting, slots, and poker. The website positions itself as a leading and legally recognized service in Indonesia, with a focus on small-stake betting. Technically, the site uses standard web technologies with Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. The site is mobile-optimized and includes structured data for SEO and social media integration. Security posture is weak due to missing policies, lack of security headers, and suspicious WHOIS data. Overall, the site presents moderate risk due to gambling content and questionable domain legitimacy.

A

Alice Savoie

frenchtype.com

54

Alice Savoie operates a professional portfolio website showcasing her work as an independent French type designer. The site presents a curated collection of type design projects and research, targeting design professionals and typography enthusiasts. The business model centers on personal branding and promotion of design services. The website is hosted on OVH sas and built using the Cargo Collective platform, leveraging modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and policies. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is trustworthy and legitimate, with consistent domain registration data and no suspicious indicators.

P

Philippe Tytgat

philippetytgat.fr

42

Philippe Tytgat's website serves as a personal portfolio showcasing graphic design services including identity, event, illustration, edition, signage, and typography. The site targets a general audience interested in creative design work, positioning itself as a niche individual designer portfolio. The business appears to be a small-scale operation founded in 2020, with a consistent and professional branding approach. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Slick Carousel, hosted by OVH. The site is moderately optimized for mobile devices and has a good user experience with clear navigation and relevant content. Security posture is basic, with no advanced security headers or policies detected, and no privacy or cookie policies present, indicating room for improvement in compliance and security best practices. No contact information or social media links are explicitly provided, which may limit user engagement and trust. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and clearer contact channels.

É

Éloïsa Pérez

eloisaperez.fr

52

Éloïsa Pérez is a graphic designer and researcher specializing in book design, typography, and educational tools, with a focus on pedagogy and learning processes. The website serves as a portfolio and research platform showcasing projects, workshops, and publications primarily targeting educational institutions and design communities in France. The business operates as a small entity with a niche market position emphasizing academic and practical design research. Technically, the website uses standard HTML, CSS, and JavaScript with jQuery and Google Analytics integration, hosted by OVH. While the site is content-rich and professionally presented, it lacks privacy and cookie policies, and security headers are not detected, indicating areas for compliance and security improvement. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website demonstrates good professionalism and trustworthiness but should enhance privacy compliance and security posture.

R

Rafael Ribas

rafaelribas.com

52

Rafael Ribas is a Paris-based professional specializing in art direction and graphic design, with a focus on type design, branding, and editorial projects. The website serves as a portfolio showcasing collaborations with notable clients such as Louis Vuitton and Musée d’Orsay, positioning the business as a niche creative service provider in the design industry. The target audience includes design professionals and clients seeking high-quality art direction and custom typography services. The business model is primarily service and portfolio-based, emphasizing creative output and client engagement. Technically, the website employs modern frontend technologies including Bootstrap 4 and jQuery, hosted by OVH sas. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. No CMS or advanced platforms are detected, indicating a custom or static site approach. External links to collaborators and partners in the design field enrich the ecosystem. From a security perspective, the site uses HTTPS and has domain locking enabled, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No forms or user input fields reduce attack vectors, and no analytics or tracking scripts indicate minimal user tracking. However, the absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Overall, the website is professional and trustworthy with good business credibility and content quality. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence, supporting long-term trust and risk mitigation.

S

Sandrine Nugue Studio

sandrinenugue.com

48

Sandrine Nugue Studio is a small independent design studio specializing in type design, lettering, and graphic design services. The website serves primarily as a portfolio showcasing various projects including publications, signage, pictograms, and performance scores. The target audience includes design professionals, artists, and clients interested in typography and graphic design. The business model is focused on creative services and portfolio presentation, with a market position as a niche player in the typography and graphic design space. Technically, the website is built with standard HTML5, CSS3, and JavaScript, hosted by OVH sas. It features responsive images and a clean, well-structured design optimized for mobile devices. However, it lacks advanced frameworks or CMS platforms and does not use analytics or marketing tools. Performance is moderate with good mobile optimization and basic accessibility. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no privacy or cookie policies, and no incident response or vulnerability disclosure information is provided. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, appropriate for the business type. Overall, the website is professional and trustworthy but has gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's credibility and reduce risk.

F

Fanette Mellier

fanettemellier.com

61

Fanette Mellier's website serves as a professional portfolio showcasing graphic design and printed matter projects, including exhibitions, books, and objects. The business appears to be a small creative entity based in France, with a domain registered since 2006, indicating a well-established presence. The site content is rich in artistic projects and external references to partner sites and social media, targeting a general audience interested in graphic arts. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on alwaysdata.com with HTTPS enabled, ensuring secure access. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy and compliance features are lacking, with no visible privacy or cookie policies, GDPR compliance statements, or contact information, which could pose compliance risks. Overall, the site is professionally designed with good user experience but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance.

F

François Chastanet

francoischastanet.com

56

François Chastanet's website serves as a professional and academic portfolio highlighting his expertise in architecture, graphic and type design, with a focus on urban lettering, graffiti, and calligraphy. The site showcases extensive content including lectures, publications, workshops, and documentary projects, targeting designers, academics, and cultural researchers. Technically, the site uses basic HTML, CSS, and jQuery, hosted by Gandi SAS, with moderate performance and basic mobile optimization. Security posture is limited, lacking DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. The domain is well-established since 2008, consistent with the professional content and history presented. Overall, the site is trustworthy and content-rich but would benefit from improved security and privacy compliance.

P

PeopleGoal

peoplegoal.com

73

PeopleGoal is a well-established HR software platform founded in 2014, offering customizable solutions for employee performance management, engagement, and talent development. Positioned as a SaaS provider, it serves businesses seeking to improve productivity and culture through flexible goal setting, feedback, and survey tools. The company is a subsidiary of ProProfs, a recognized software provider with multiple related product offerings. The website demonstrates strong branding, professional design, and comprehensive content targeting HR professionals and business decision-makers. Technically, the website uses modern web technologies including Google Tag Manager for analytics, Cloudflare for DNS and likely CDN services, and optimized web fonts. The site is mobile responsive, accessible, and performs well with fast loading times. SEO best practices are evident through structured data and meta tags. However, no explicit CMS was detected. Security posture is solid with HTTPS enforced, domain locking via registrar status codes, and no visible sensitive data exposure. The absence of DNSSEC is a minor gap. The site lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and business credible. Privacy and cookie policies are not explicitly found, which impacts privacy compliance scoring. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include publishing clear privacy and cookie policies with consent mechanisms, enabling DNSSEC, and adding security and incident response disclosures to improve compliance and user trust.

E

Empire Hall

empire-hall.cz

9

Empire Hall is a historic event venue located in the Slovanský dům building in Prague, offering elegant Art Deco style spaces for corporate conferences, concerts, weddings, and private parties. The venue caters to a diverse audience including corporate clients and event organizers, with a capacity of up to 900 guests. The website is professionally designed using the Tilda CMS platform, featuring responsive design, client-side form validation, and integration with social media and 3D virtual tours. However, the absence of publicly available WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site presents a trustworthy and professional image suitable for its hospitality industry niche.

C

Classic Barber Shop

classicbarbershop.cz

44

Classic Barber Shop is a small, established barbershop located in the center of Prague, specializing in professional hair and beard grooming services. The business emphasizes quality customer care, premium and classic cosmetic products, and offers additional services such as workshops and gift vouchers. The website supports online booking through a third-party platform and maintains active social media profiles. Technically, the site uses modern tracking and analytics tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers. Overall, the site is professional and trustworthy but could improve privacy transparency and security hardening.

V

Veolia India

veolia.in

66

Veolia India is a subsidiary of the global Veolia Group, specializing in environmental services such as water treatment, hazardous waste management, and carbon capture solutions. The company operates in India with a strong focus on sustainability and ecological transformation, serving industrial and governmental clients. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about their services and corporate responsibility. Technically, the site is built on Drupal CMS, integrates modern consent management tools like Didomi, and uses Google Tag Manager and HubSpot for analytics, indicating a well-managed digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not publicly available. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

K

KOMA FAMILY

koma-family.cz

46

KOMA FAMILY is a well-established group specializing in modular construction with over 30 years of experience. Their business model includes modular building design, manufacturing, rental services, and an e-commerce platform for related products. The company targets businesses and organizations worldwide seeking modular construction solutions. The website is professionally designed, multilingual, and provides clear information about their services and subsidiaries. Technically, the site is built on Craft CMS with modern web standards, responsive design, and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and CSRF protections, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data due to privacy protection slightly reduces transparency but does not significantly impact overall legitimacy given the professional presentation and consistent branding. Overall, the site demonstrates a mature digital presence suitable for its industry and audience.

P

PRESTADD

prestadd.fr

53

PRESTADD is a French certification label dedicated to technical service providers in the live performance and event sectors, emphasizing sustainable development and corporate social responsibility (CSR). The website presents a clear business model focused on guiding companies through a structured labeling process with three progressive levels, supported by an auto-diagnostic tool and personalized consulting services. The company positions itself as a pioneer in this niche market, offering recognized certification and visibility to its certified members. Technically, the website is hosted by OVH and uses modern web technologies including JavaScript and Google Analytics for user tracking. The site is mobile-optimized with good SEO practices and a professional design, although some accessibility features could be improved. The absence of a CMS or major frameworks suggests a custom or lightweight implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security governance. Overall, PRESTADD's website reflects a credible and professional business with a solid market position in the French event services sector. Strategic recommendations include enhancing privacy compliance, implementing security headers, and establishing formal incident response channels to strengthen trust and regulatory adherence.

A

AstraZeneca

astrazeneca.fr

64

AstraZeneca France operates as a regional branch of the global biopharmaceutical company AstraZeneca, focusing on research, development, production, and commercialization of prescription medicines across key therapeutic areas including oncology, cardiovascular, respiratory, vaccines, and rare diseases. The website targets French residents, patients, healthcare professionals, and stakeholders, providing comprehensive information about the company's products, innovation strategies, and corporate social responsibility initiatives. The site is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, JavaScript libraries like jQuery, and analytics platforms such as Matomo and Adobe Analytics. Tag management is handled via Tealium, and security is enhanced through Cloudflare services including rate limiting and bot management. The site employs HTTPS with strong SSL configuration and cookie consent mechanisms, demonstrating compliance with GDPR and French data protection regulations. Security posture is robust with no evident vulnerabilities or exposed sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options should be verified. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the site maintains high trustworthiness and professionalism. Strategically, AstraZeneca France should continue to monitor third-party scripts for vulnerabilities, enhance transparency around incident response and security policies, and ensure all forms are secured against common web threats. These measures will strengthen compliance and user trust in an increasingly regulated healthcare digital environment.

D

Drukzo

drukzo.be

10

Drukzo is an established online printing service platform targeting the Belgian market, offering a wide range of affordable and quality print products such as flyers, brochures, posters, and banners. It operates under the parent company Helloprint, a recognized global print platform, which strengthens its market position and credibility. The website is professionally designed, mobile-optimized, and provides a user-friendly e-commerce experience with clear navigation and search capabilities. The presence of multiple language and country versions indicates a mature digital presence tailored to regional audiences. Technically, the site leverages modern web technologies including Vue.js, Contentful CMS, and integrates analytics and marketing tools such as Google Analytics, Segment, and Trustpilot for customer feedback and performance monitoring. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. WHOIS data is restricted, typical for privacy protection, but the domain and website content align with a legitimate business. Overall, Drukzo presents a trustworthy and professional online printing service with room for enhanced security transparency.

H

Herpain Group

herpainrse.com

54

The Herpain Group website presents a well-established real estate company with a strong focus on sustainability and corporate social responsibility. The company emphasizes quality, performance, and responsibility in its real estate projects and has been operating for over 86 years. The website content is professional and consistent with the company's values and market positioning. Technically, the website uses modern web standards with HTTPS and a privacy-respecting analytics tool, but lacks some security headers and privacy compliance documentation. The absence of contact information and privacy policies reduces transparency and user trust. Security posture is moderate with room for improvement in DNS security and security headers. Overall, the website is legitimate and trustworthy but would benefit from enhanced privacy and security practices.

M

MODX

modxcloud.com

69

MODX is an established open source content management framework that empowers developers and publishers to build highly customizable digital experiences without the bloat of traditional CMS platforms. With over 20 years of history and a strong global community, MODX offers a flexible platform supported by commercial services including cloud hosting and selective content staging. The website reflects a mature business with a clear focus on technology and developer-centric solutions. Technically, the site employs modern web standards, including responsive design, accessibility features, and integration with analytics and error monitoring tools such as Segment and Sentry. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosure mechanisms are not publicly documented. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, MODX presents a professional, secure, and user-friendly web presence aligned with its market position as a leading open source CMS framework.

W

Web & Media a.s.

builder.cz

40

Builder.cz is a Czech online information portal focused on programming and development topics, operated by Web & Media a.s. The site offers articles, tutorials, and forums targeting programmers and developers interested in languages such as PHP, ASP, JavaScript, Delphi, and C++. It is part of a broader media group with several related projects in graphics, photography, printing, and Apple product communities. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Adsense for advertising and AddThis for social sharing. The site is served over HTTPS but lacks advanced security headers and cookie consent mechanisms, which impacts privacy compliance. No WHOIS data was available, which reduces domain trustworthiness, though the website content and related projects indicate a legitimate business. Contact is available via email and a contact form, but no phone numbers or physical addresses were found. Overall, the site is professionally maintained with good content quality and moderate technical implementation.

W

Web & Media a.s.

mujipod.cz

40

MUJiPOD.cz is a Czech language online portal dedicated to Apple iPod, iTunes, and related MP3 player news, tips, and product reviews. Operated by Web & Media a.s., the site targets Apple enthusiasts and users seeking information and community engagement. The website features regularly updated content, a newsletter subscription, and social media integration, positioning itself as a niche media outlet within the Czech technology and media sector. Technically, the site employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, with monetization through Google Adsense and social sharing via AddThis. The CMS identified is WMpublic, a multi-editor system. While the site is functional and moderately optimized, there is room for improvement in mobile responsiveness, accessibility, and security headers implementation. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating partial compliance with modern security and privacy standards. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for media websites. Overall, MUJiPOD.cz presents a professional and trustworthy online presence with moderate technical maturity and basic privacy compliance. Strategic improvements in security headers, GDPR cookie consent, and mobile optimization would enhance its security posture and user trust.

M

MODX

modx.com

70

MODX is a well-established technology company specializing in a custom content management system platform that emphasizes speed, security, and creative freedom. With over 20 years of history, MODX positions itself as a flexible and secure alternative to legacy CMS platforms, targeting web developers, digital agencies, and businesses seeking tailored digital experiences. The company offers open source CMS software, managed cloud hosting, selective content staging, and commercial support services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, Font Awesome 6, and integrates analytics and error monitoring tools such as Segment and Sentry. The platform is hosted on MODX Cloud, a managed hosting service, and the site demonstrates fast performance, mobile optimization, and good accessibility. SEO practices are evident through proper meta tags and structured content. From a security perspective, the site enforces HTTPS, uses domain status protections, and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not publicly available, and DNSSEC is not enabled. No vulnerabilities or exposed sensitive data were detected in the content analysis. Overall, MODX.com presents a trustworthy and professional digital presence with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, publishing detailed security and incident response policies, and enhancing security headers to further strengthen the security posture.

H

Herpain Urbis

herpain.be

48

Herpain Urbis is a real estate development company operating in Belgium, focusing on office, residential, and commercial real estate sectors. The company is part of the Herpain family group and has an established market presence supported by a domain registered since 1998. The website provides basic information about the business but lacks detailed contact or compliance documentation. Technically, the site uses standard web technologies with HTTPS enabled, but it lacks advanced security headers and comprehensive privacy or cookie policies. Social media presence is active on major platforms, supporting brand visibility. Security posture is moderate with room for improvement in policy transparency and technical safeguards. Overall, the website is functional but could benefit from enhanced compliance and security features to improve trust and user confidence.

T

Thomas Bouville

thomasbouville.fr

45

Thomas Bouville is an independent graphic designer based in Lille, France, specializing in typography, visual identity, website design, and edition. The website serves as a professional portfolio showcasing various projects primarily in graphic design and typeface creation. The target audience includes design professionals and clients seeking specialized graphic design services. The business operates as a small independent entity with a niche focus on typography and visual identity. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Adobe Typekit fonts, and the Slick Carousel library. The site is mobile optimized and well-structured, providing a good user experience and professional design quality. However, there is a lack of detected security headers and no visible privacy or cookie policies, which are compliance gaps. The WHOIS data for the domain is not available, which raises concerns about domain registration legitimacy and trustworthiness. Overall, the website is professional and trustworthy in content but would benefit from improved security and privacy compliance measures.