Security Directory

KNDS is a leading European defense manufacturer specializing in military land systems, formed by the association of Krauss-Maffei Wegmann and Nexter. The company operates globally with over 10,000 employees and a strong product portfolio including main battle tanks, armored vehicles, artillery, and advanced training solutions. Their market position is strong within the European defense sector, supported by a large order backlog and significant turnover. Technically, the website is built on modern frameworks such as React and Next.js, with privacy-conscious analytics via Matomo and comprehensive cookie consent management through Cookiebot. Security posture is good with HTTPS enforced and domain registration consistent with the business profile. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, secure, and compliant with GDPR, reflecting a mature and credible business entity.

S

SUPERKODERS s.r.o.

superkoders.cz

54

SUPERKODERS s.r.o. is a Czech-based technology company specializing in the development of custom websites, e-commerce platforms, and web/mobile applications. Founded in 2009, the company has established a strong market presence with a portfolio of successful projects and recognized clients. Their services include full-cycle development, accessibility audits, and coding of components and emails, targeting businesses seeking tailored digital solutions. The website reflects a professional and modern digital presence with comprehensive content and clear navigation.

E

EnviWeb s.r.o.

enviweb.eu

55

EnviWeb s.r.o. is a specialized public relations agency focused on environmental topics, ecology, and sustainability primarily serving clients in the Czech Republic. The company manages notable environmental projects such as Ukliďme Česko, Kam s ním?, and EKOkalendář, positioning itself as a niche leader in environmental communication. Their business model centers on providing comprehensive PR services including media relations, brand building, and content creation tailored to environmental and sustainability sectors. The website is built on a modern React and Next.js framework, indicating a contemporary technical infrastructure with good mobile optimization and user experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement in compliance and security posture. The domain WHOIS data is privacy protected by EURid, which is typical for EU domains, and no suspicious patterns were detected, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy image with moderate technical and security maturity.

S

shen zhen shi gong zhi yi ke ji you xian gong si

evercraft.co

44

EverCraft is a Chinese technology company specializing in engineering productivity tools, including version control software and online CAD visualization platforms. The company targets engineers and professionals requiring efficient file history management and CAD collaboration tools. Their product suite includes 追光Lite for file versioning, 追光看图 for CAD viewing and annotation, and 分形三维 for 3D CAD visualization. The company operates primarily in China, with hosting and domain registration consistent with local regulations and ICP licensing. Technically, the website is built using modern web technologies such as React and Next.js, hosted on Alibaba Cloud. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. The site uses Baidu Analytics for user tracking but lacks visible cookie consent mechanisms or privacy policies, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS but lacks important security headers and DNSSEC is not enabled. No forms or sensitive data collection points were detected on the homepage, reducing immediate risk. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests a low maturity in security governance. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

W

Waitwhile Inc.

waitwhile.com

65

Waitwhile Inc. is a technology company specializing in queue management, appointment scheduling, and customer journey management solutions. Established in 2017, the company serves over 50,000 locations worldwide and offers a comprehensive SaaS platform that integrates virtual waitlists, automation, communication, analytics, and resource management. The website demonstrates a strong market position with high customer satisfaction ratings and a clear focus on improving customer experience and operational efficiency for businesses. Technically, the website is built using modern frameworks such as Next.js and React, hosted on Google Cloud infrastructure with DNS managed by Google Domains. It employs best practices in web performance, mobile optimization, and SEO. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS, uses security headers, and employs domain registration protections. However, DNSSEC is not enabled, and explicit incident response or vulnerability disclosure policies are not publicly available, representing areas for improvement. Overall, the security posture is solid with room for enhancement. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enabling DNSSEC, publishing incident response policies, and enhancing transparency around security certifications to further build trust and compliance.

L

Lockton Finland Oy

lockton.com

68

Lockton Finland Oy is a subsidiary of Lockton Companies, a globally recognized independent insurance broker founded in 1966. The company specializes in providing a wide range of insurance and risk management services including cyber insurance, corporate risk, financial institutions insurance, and professional indemnity. The website reflects a mature and professional business presence targeting corporate clients primarily in Finland and Europe. Technically, the site is built using modern web technologies such as React and Next.js, with Material-UI for UI components, and integrates Google Tag Manager and cookie consent management for analytics and compliance. Security posture is strong with HTTPS enforced and security headers present, although explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain trust analysis but the overall professional presentation and compliance indicators suggest a legitimate and trustworthy business. Strategic recommendations include publishing a dedicated security policy, vulnerability disclosure, and incident response information to enhance transparency and trust.

Rakuten Kobo operates a leading global e-commerce platform specializing in digital reading products including eBooks, audiobooks, eReaders, and reading applications. The website targets a broad audience with a strong presence in Finland and worldwide, supported by a comprehensive catalog of over 6 million titles. The business model focuses on direct sales, subscription services (Kobo Plus), and hardware sales, positioning Kobo as a major player in the digital reading market under the Rakuten corporate umbrella. Technically, the site leverages modern web technologies such as React and Next.js, with a content management system powered by Builder.io and search capabilities enhanced by Algolia. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, providing an excellent user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in implementing and reporting security headers and publishing a dedicated security policy. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the site is trustworthy and professional, though the absence of WHOIS registration details is unusual but likely due to registry privacy restrictions. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

S

StartFast

startfast.cc

51

StartFast is a technology-focused company offering a dead-simple SaaS starter kit built on NextJS 14, targeting developers and entrepreneurs who want to rapidly build and deploy SaaS MVPs. The business model emphasizes a one-time payment with lifetime updates and a modern token-based pay-per-use pricing model, differentiating it from traditional subscription-based SaaS templates. The website is professionally designed with clear navigation, detailed product descriptions, and demo links, reflecting a mature digital presence. Technically, the site leverages modern frameworks and tools such as NextJS, TailwindCSS, Supabase, and Stripe for payments, alongside AI-powered content generation features in the Pro version. Security posture is solid with HTTPS enforced and secure payment integration, though explicit security headers and formal security policies are absent. Privacy compliance is partial, lacking cookie consent mechanisms despite the use of tracking scripts. Overall, the site is trustworthy and well-positioned in its niche, with room for improvement in privacy and security transparency.

M

Mast-Jägermeister SE

jaegermeister.com

62

Mast-Jägermeister SE operates the official website for Jägermeister, a globally recognized premium herbal liqueur brand established in 1935. The website serves as a comprehensive platform for brand storytelling, product information, and e-commerce, targeting adult consumers interested in nightlife and premium spirits. The company maintains a strong market position with consistent branding and a professional digital presence. Technically, the website leverages modern web technologies including React and Next.js, hosted on Vercel with Contentful CMS integration. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, includes an age gate to restrict underage access, and implements standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low-risk profile with strong business credibility and compliance with privacy regulations such as GDPR. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

A

ACC Belgium asbl

acc.be

49

ACC Belgium is a professional association dedicated to uniting and empowering communication agencies in Belgium. It offers a comprehensive suite of services including training programs, industry awards, tools, and platforms to support agencies and professionals in the marketing communication sector. The website is well-designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. The technical infrastructure leverages modern frameworks such as Next.js and React, with analytics implemented via Google Tag Manager and Plausible Analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, ACC Belgium presents a credible, professional, and trustworthy online presence with a strong focus on industry support and development.

B

Biesse

intermac.com

70

Biesse is a well-established international company specializing in manufacturing lines, machines, and components for the industrial processing of wood, glass, stone, polymers, and composites. The company targets industrial manufacturers and businesses in these sectors, positioning itself as a leader with a comprehensive product offering and a global presence. The website reflects a mature digital infrastructure built on modern technologies such as React and Gatsby, hosted on Netlify, with good performance and mobile optimization. Security posture is strong with HTTPS enforced, proper security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and market position.

H

Hotel & Therme AQUA DOME

aqua-dome.at

44

Hotel & Therme AQUA DOME is a premium alpine spa hotel located in the Ötztal valley, Tyrol, Austria. It offers a comprehensive wellness experience including thermal baths, spa treatments, fitness facilities, and culinary services. The business targets wellness tourists, couples, families, and singles seeking relaxation and alpine experiences. The website is professionally designed, mobile optimized, and provides clear navigation and booking options. Technically, it uses modern frameworks such as Next.js and React, with integrated consent management and advertising pixels. Security posture is good with HTTPS and consent mechanisms, though explicit security headers and incident response policies are not publicly documented. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's trust indicators and certifications support its legitimacy. Overall, the site demonstrates a mature digital presence aligned with hospitality industry standards.

I

Involve digital s.r.o.

involve.cz

50

Involve digital s.r.o. is a Czech-based small technology company specializing in front-end and back-end web development, as well as project takeover services. The company emphasizes a friendly and personal approach, maintaining long-term partnerships with clients and delivering agile projects of varying sizes. Their market position is supported by multiple client references and testimonials, indicating a trusted regional presence. Technically, the company employs modern frameworks such as Nette, Doctrine 2, Bootstrap 4, Foundation 6, and React, complemented by automated testing tools like Selenium and Cypress. Their infrastructure includes AWS for performance optimization, reflecting a mature digital environment. The website is well-designed, mobile-optimized, and SEO-friendly, showcasing professional content and clear navigation. From a security perspective, the site uses HTTPS and follows good coding practices, including automated testing and static code analysis. However, it lacks explicit security headers, published privacy and cookie policies, and incident response information, which are areas for improvement. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Overall, the website and business demonstrate a strong professional posture with moderate security and privacy compliance. Strategic enhancements in transparency and security policies would further strengthen their risk profile and client trust.

The website prekvaptericany.cz appears to be a small-scale local site with minimal content and no visible business or contact information. The domain is registered since 2016 under a Czech registrar and hosted on Forpsi servers, indicating a legitimate but modest online presence. The site uses modern frontend technology React and integrates Google Tag Manager for analytics, but lacks substantive content, privacy policies, or terms of service. Security posture is basic with HTTPS enabled but missing important security headers and no visible incident response or data protection policies. Overall, the site is accessible but provides limited information, which impacts trust and credibility.

J

Johnson & Johnson | Vision PRO

jnjvisionpro.com

68

Johnson & Johnson Vision Pro is a comprehensive online platform dedicated to eye care professionals, offering a wide range of products, educational resources, and expert support. The website reflects the strong market position of Johnson & Johnson in the healthcare and vision care sectors, targeting professionals who require cutting-edge solutions for myopia management, contact lenses, refractive surgery, ocular surface care, and cataract surgery. The platform supports business growth and patient care excellence through tools like online ordering, calculators, and virtual services such as LensAssist. Technically, the website is built using modern frameworks such as Next.js and React, integrated with Contentstack CMS, and employs advanced analytics and user engagement tools including Google Tag Manager, reCAPTCHA Enterprise, and WalkMe. The site demonstrates good performance, mobile optimization, and accessibility features, ensuring a professional user experience. From a security perspective, the site enforces HTTPS, uses security headers, and incorporates consent mechanisms for cookies, reflecting a mature security posture. However, the absence of publicly available WHOIS data is a notable anomaly, although the overall branding and content strongly support the site's legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

A

ASD - AeroSpace and Defence Industries Association of Europe

asd-europe.org

69

ASD - AeroSpace and Defence Industries Association of Europe is a leading European industry association representing aerospace, defense, security, and space sectors. The organization connects over 4,000 companies across 21 countries, providing advocacy, standards development, and networking services. Their website reflects a professional and comprehensive digital presence, targeting industry professionals and stakeholders. The site uses modern web technologies including Next.js and React, with privacy-conscious analytics via Matomo and a robust cookie consent mechanism powered by Cookiebot. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit security policies and incident response information are not publicly detailed. Overall, the domain appears legitimate and consistent with an established industry association, despite the lack of WHOIS data due to privacy protection. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust and compliance.

S

SUBmerge Baltic

submergebaltic.com

54

SUBmerge Baltic is a Latvian startup specializing in the development of dual-use autonomous underwater drones (AUVs) aimed at enhancing water safety and security. Their innovative approach leverages machine learning to calibrate navigation sensor data, significantly reducing drone costs and enabling scalable operations including kamikaze missions. The company offers two main products: the PIKE 1 ROV for large area water inspections and the PIKE AUV designed for extended dual-use operations with advanced navigation capabilities. The website presents a professional and consistent brand image with clear product descriptions and contact information, targeting organizations requiring underwater drone technology.

C

Clear Vision For You

clearvisionforyou.com

62

Clear Vision For You is a healthcare-focused website affiliated with Johnson & Johnson Vision, providing comprehensive information and resources about eye health treatments and vision care solutions. The site targets a general audience seeking education on conditions such as myopia, cataracts, dry eye, and laser vision correction, and offers tools like a 'Find a Doctor' feature to connect users with eye care professionals. The website is professionally designed with consistent branding and high-quality content, reflecting the stature of its parent company in the healthcare industry. Technically, the site leverages modern web technologies including React and Next.js frameworks, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent management. The content is well-structured, mobile-optimized, and accessible, ensuring a positive user experience. However, the absence of WHOIS data for the domain raises questions about domain registration transparency, although the website's content and external links strongly associate it with Johnson & Johnson Vision. From a security perspective, the site uses HTTPS and includes privacy and cookie policies indicating GDPR compliance. Nonetheless, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or suspicious content were detected, and the site maintains a good security posture overall. Overall, Clear Vision For You presents a trustworthy and authoritative resource for eye health information, but should enhance transparency around domain registration and strengthen security policies to further build user trust and compliance assurance.

C

Clear Vision For You

jjvision.com

62

Clear Vision For You is a healthcare-focused website operated under the Johnson & Johnson Vision brand, providing comprehensive information and resources related to eye health, vision correction, and treatments such as myopia management, contact lenses, laser vision correction, dry eye treatment, and cataract surgery. The site targets a general audience seeking trusted eye care information and facilitates finding local eye doctors. Technically, the site is built on modern web technologies including Next.js and React, with integrations for analytics and cookie consent, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, but the strong branding and professional content support legitimacy. Overall, the site demonstrates a mature digital presence aligned with enterprise healthcare standards.

F

Fibery

fibery.io

74

Fibery is a technology company offering a modular SaaS platform designed to replace scattered business tools with a unified, customizable company operating system. Their platform targets startups, product companies, software development firms, and digital agencies, providing features such as no-code app creation, flexible database schemas, collaborative documents, and AI-powered automation. Fibery positions itself as a niche player with a strong emphasis on customization and integration, supported by a tiered subscription model including free and enterprise plans. Technically, Fibery employs modern web technologies including React and Next.js, hosted on AWS infrastructure. The website demonstrates excellent performance, mobile optimization, and SEO practices, with comprehensive structured data enhancing search visibility. Privacy-respecting analytics and minimal tracking are used, reflecting a mature digital strategy. From a security perspective, Fibery maintains a strong posture with HTTPS enforcement, SOC 2 certification, GDPR compliance, and advanced platform permissions. However, there is room for improvement in publishing explicit vulnerability disclosure policies and incident response contacts. No critical vulnerabilities or exposures were detected in the analysis. Overall, Fibery presents a professional, trustworthy, and technically sound online presence with a solid business foundation. Strategic recommendations include enhancing transparency around incident response and cookie consent mechanisms to further strengthen compliance and user trust.

The website belegger.tijd.be is a professional financial advisory and media platform operated by Mediafin, targeting Dutch-speaking investors in Belgium. It offers stock advice, market insights, portfolio tools, and financial news with a subscription-based business model. The site is well-branded and consistent with Mediafin's corporate identity. Technically, it leverages modern web technologies including React and Adobe Experience Manager CMS, with integrations for advertising, analytics, and consent management. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent mechanisms in place. No critical vulnerabilities or suspicious content were detected. WHOIS data is restricted, typical for .be domains, but the domain's legitimacy is supported by the professional content and Mediafin branding. Overall, the site presents a trustworthy and mature digital presence for financial media services.

De Belegger is a Belgian media brand specializing in independent stock market advice and investment insights. It targets individual investors and financial market participants seeking expert guidance to optimize their portfolios. The business operates on a subscription model offering premium content, newsletters, and a magazine. The website is professionally designed, mobile-optimized, and integrates modern web technologies including React, Adobe Experience Manager CMS, and various advertising and analytics platforms. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent management. However, some areas such as explicit security policies and incident response contacts could be improved. WHOIS data is restricted due to .be domain policies but shows no suspicious indicators. Overall, the site presents a trustworthy and credible platform for financial advice.

J

Johnson & Johnson | Vision PRO

tecnisodysseyiol.com

70

Johnson & Johnson Vision Professional operates a comprehensive website dedicated to the TECNIS Odyssey™ intraocular lens product line, targeting eye care professionals and surgeons. The site provides detailed product information, clinical data, safety instructions, and multimedia testimonials, reinforcing its position as a leading healthcare provider in ophthalmic surgical solutions. The website leverages modern web technologies including Next.js, React, and Contentstack CMS, ensuring a responsive and accessible user experience. Security measures such as HTTPS, Google reCAPTCHA Enterprise, and cookie consent mechanisms are implemented, reflecting a mature security posture. However, the absence of WHOIS data limits domain registration transparency, though the strong corporate branding and external trusted links support legitimacy. Overall, the site demonstrates high professionalism, good privacy compliance, and effective user engagement tools.

C

CARAVANA

caravana.de

52

CARAVANA operates as a German online marketplace specializing in the sale of motorhomes and caravans, connecting buyers with dealers across Germany. The platform offers tools such as smart filters, a configurator, and dealer finder to facilitate the purchase process for end consumers interested in recreational vehicles. The website is professionally designed with a consistent brand presence and targets the transportation sector within Germany. Technically, the site is built using modern frameworks like Next.js and React, hosted on webgo.de infrastructure, and employs Matomo for analytics. While the site demonstrates good content quality and user experience, it lacks visible privacy and cookie policies, explicit contact information, and security headers, which are important for compliance and trust. The security posture is moderate with HTTPS usage implied but could be improved by adding security headers and incident response information. Overall, the domain appears legitimate with consistent hosting and no suspicious WHOIS data, but the absence of key compliance documents and contact details suggests room for improvement in privacy and security transparency.

L'Echo is a well-established Belgian francophone media organization specializing in economic, political, financial, and cultural news. Founded in 1881 and operating under the parent company Mediafin, it holds a leading position in the Belgian media landscape. The website offers a broad range of services including real-time news, market data, podcasts, and subscription-based content, targeting a general audience interested in business and finance. The presence of subsidiaries like Mon Argent and Sabato further diversifies its media offerings. Technically, the website employs modern web technologies such as React, Google Tag Manager, and Adobe Experience Manager CMS, ensuring a responsive and accessible user experience. The site integrates advanced consent management via Didomi and uses multiple advertising and analytics platforms, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and uses monitoring tools like Dynatrace. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit security headers and incident response information are not publicly detailed, suggesting room for improvement in transparency and security posture. Overall, L'Echo presents a trustworthy and professional online presence with strong business credibility and compliance. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen its security maturity.

R

Rakuten TV

rakuten.tv

9

Rakuten TV is a media streaming platform providing on-demand video content to a general audience. The website is built using modern web technologies including React and integrates advanced error monitoring via Rollbar. The platform is hosted on a CDN infrastructure, likely Amazon CloudFront, ensuring global content delivery. The site enforces strong security policies such as Content-Security-Policy and HTTPS, reflecting a mature security posture. However, the absence of visible privacy and cookie policies, as well as contact information, indicates gaps in privacy compliance and user transparency. The WHOIS data is unavailable, suggesting privacy protection which is typical for large commercial entities. The site currently blocks access from anonymous VPNs, indicating business logic controls to prevent unauthorized access or content licensing violations.

U

UNICOM Engineering

unicomengineering.com

74

UNICOM Engineering presents itself as a leading value-added system integration and OEM integration partner, offering design, integration, logistics, and support services primarily targeting ISVs and OEMs worldwide. The website is professionally designed using modern technologies such as React and Gatsby, with a responsive and user-friendly interface. However, the absence of WHOIS registration data and domain age information raises questions about the domain's legitimacy or recent acquisition. Security posture is weak due to lack of visible security headers, policies, and HTTPS verification in the provided data. Privacy compliance is minimal with no detected privacy or cookie policies. Overall, the site is business-focused and safe but requires improvements in security and compliance transparency.

DBtune is a technology company specializing in AI-powered automated tuning of PostgreSQL databases. Their platform dynamically optimizes database server parameters to improve performance, reduce costs, and increase productivity for a wide range of workloads and machine sizes. The company targets enterprises and database professionals seeking to enhance PostgreSQL efficiency without manual tuning effort. Their market position is supported by reputable clients and positive testimonials, positioning DBtune as a leading innovator in database performance optimization. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Google Cloud infrastructure with DNS managed by Google Domains. The site employs advanced analytics tools including Microsoft Clarity, HubSpot, and Google Analytics, indicating a mature digital marketing and user tracking strategy. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of technical maturity. From a security perspective, the site enforces HTTPS with domain status locks to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response information are published, and no vulnerability disclosure program or security.txt file is found. Overall, the security posture is solid but could be enhanced with additional transparency and DNS security. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. The domain registration is consistent with the business profile, showing a stable and legitimate presence since 2018. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

B

BRANDED

branded-agency.com

67

BRANDED is a UK-based brand creation and implementation agency founded in 2018. The company positions itself as an award-winning agency delivering bright ideas and scalable brand solutions to a professional clientele. Their key services include brand creation, implementation, and management, supported by a strong portfolio of major clients and over 350 awards. The website reflects a mature digital presence built on modern technologies such as Gatsby and React, with a headless WordPress CMS backend. The site is fast, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present and GDPR compliant, with moderate user tracking via Google Analytics and LinkedIn Insight Tag. No direct contact emails or phone numbers are published, relying on contact forms and HubSpot meetings integration. The company holds a Certified B Corporation certification, enhancing trust and sustainability credentials. Overall, the website and domain registration details indicate a legitimate, professional business with a strong market position in branding services.

De Tijd is a leading Flemish financial newspaper and digital media platform based in Belgium, providing comprehensive news coverage in finance, economy, politics, and business. Established in 1968 and owned by Mediafin, it serves a professional audience with subscription-based content and advertising revenue. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, Adobe Experience Manager CMS, and advanced ad management tools. It employs robust GDPR-compliant consent management and integrates multiple analytics and marketing platforms. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. WHOIS data is restricted due to .be domain policies but aligns with a legitimate, privacy-conscious media entity. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.

B

Bidding Fox technologies, s.r.o.

bidding-audit.sk

55

Bidding Fox technologies, s.r.o. operates the bidding-audit.sk website, providing free bidding audits to e-commerce businesses to optimize their product offers on price comparison platforms. The company is positioned as a niche service provider in Slovakia and the Czech Republic, leveraging technology and data analytics to improve bidding efficiency. The website is built on a modern React framework, integrates Google Analytics and Tag Manager for tracking, and uses CookieHub for GDPR-compliant cookie consent management. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the site demonstrates good technical maturity and business credibility with professional design and clear content.

P

Philipp Veller

vellip.berlin

57

Philipp Veller operates a professional web development portfolio website based in Berlin, targeting clients seeking frontend and backend web development services. The site showcases a variety of projects including web apps for NGOs, government platforms, and AI tools, positioning Philipp as a skilled freelance developer in the technology sector. The technical infrastructure leverages modern frameworks such as React and Gatsby, with content managed via Sanity.io, ensuring a performant and mobile-optimized user experience. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, the website is trustworthy, professional, and well-structured, suitable for attracting clients in the German market.

P

Popeyes

popeyeschicken.cz

52

The website represents Popeyes, a restaurant chain specializing in chicken products, targeting customers in the Czech Republic. The site is built using modern web technologies such as React and Webpack, with integration of LaunchDarkly for feature management. However, the content is minimal with loading placeholders visible, indicating incomplete or dynamically loaded content. There is a lack of visible privacy, cookie, or terms of service policies, and no contact information is provided, which impacts user trust and compliance. Security headers and SSL configuration details are not evident from the provided data, suggesting room for improvement in security posture. The WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the website is accessible but lacks comprehensive content and compliance features, resulting in a moderate risk profile.

D

Direct Parcel Distribution SK s. r. o.

dpdmojkurier.sk

59

Direct Parcel Distribution SK s. r. o., operating under the brand DPD Slovakia, is a medium-sized transportation company specializing in parcel delivery and courier services within Slovakia and internationally. The website 'Môj Kuriér' serves private individuals and business customers, offering streamlined parcel shipment ordering, tracking, and payment on delivery options. The company is part of the larger Geopost group, reinforcing its market position as a leading logistics provider in the region. The website content is well-structured, professionally designed, and provides clear navigation and relevant information for its target audience. Technically, the website employs modern web technologies including React and Google Tag Manager, with additional cookie consent management via TrustCommander. The site is mobile-optimized and demonstrates good SEO practices. While performance is moderate, the site is accessible and includes essential metadata. However, no explicit CMS or hosting provider details were identified. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and an explicit security policy page. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced by implementing additional HTTP security headers and providing incident response contact details. Privacy compliance is strong with GDPR-aligned policies and consent mechanisms. The absence of explicit contact emails or phone numbers on the main page is noted but social media channels provide indirect contact avenues. The domain WHOIS data aligns well with the business identity, supporting legitimacy and trust. Strategically, the company should focus on enhancing security transparency and incident response readiness, while maintaining its strong privacy compliance and user experience. The website effectively supports the business model and market positioning, contributing to a trustworthy and professional online presence.

L

Love Ciabatta

love-ciabatta.be

71

Love Ciabatta is a small hospitality business operating a sandwich shop, bakery, and breakfast restaurant located in Brussels, Belgium. Established in 2017, it offers delivery, takeaway, and reservation services, targeting local residents and visitors. The website reflects a consistent brand image with good content quality and clear navigation. Technically, it is built on a modern React framework hosted on OVH, leveraging CentralApp's SaaS platform, and includes analytics via Pirsch. Security posture is good with HTTPS and basic security practices, though some HTTP headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained.

C

Château Moderne

chateau-moderne.be

69

Château Moderne is a recently established hospitality business located in Brussels, Belgium, offering a coffee shop, eatery, cafeteria, and cocktail bar experience. The venue emphasizes social dining with a terrace overlooking the city and Royal Palace, catering to a general audience seeking quality food and beverages. The business operates with a modern digital presence, including online reservations and event hosting capabilities. Technically, the website is built on a React framework hosted by OVH and utilizes CentralApp Studio platform services, integrating analytics and marketing tools such as Google Tag Manager and Pirsch Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

C

Café Boudin

cafeboudin.be

71

Café Boudin is a specialty coffee shop and restaurant located in central Brussels, offering a variety of freshly roasted coffees, home-made pastries, and vegetarian-friendly menus. The business targets coffee enthusiasts and customers seeking quality, inclusive food options such as vegan and gluten-free dishes. The website is built on a modern React-based platform provided by CentralApp Studio and hosted via OVH, featuring good design quality and user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit policies could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a trustworthy small hospitality business with a clear market position and professional online presence.

V

Valstybės įmonė Registrų centras

registrucentras.lt

61

Valstybės įmonė Registrų centras is the official Lithuanian government enterprise responsible for managing national registries including business entities, real estate cadastre, and family-related records. The organization provides a broad range of services to businesses, families, and government entities, positioning itself as the authoritative source for registry data in Lithuania. The website reflects a mature digital presence with modern technologies such as React and Material UI, ensuring a responsive and accessible user experience. Integration of analytics and user behavior tracking tools like Google Tag Manager and Hotjar indicates a focus on continuous improvement and user engagement. Security posture is robust with HTTPS enforcement and multiple security headers, although the absence of WHOIS data is a notable gap. Privacy policies and GDPR compliance are clearly addressed, reinforcing trust and regulatory adherence. Overall, the site demonstrates a high level of professionalism and reliability, suitable for its critical government function.

B

Bidding Fox technologies, s.r.o.

pricing-audit.sk

55

Pricing Audit is a Slovak-based service operated by Bidding Fox technologies, s.r.o., offering free pricing audits to e-commerce businesses to optimize their product pricing on comparison platforms like Heureka. The company is positioned as a niche provider with a focus on pricing strategy and automation, supported by related services such as Pricing Fox. The website is built as a modern React single-page application, hosted on Gigaserver.cz with DNSSEC enabled and HTTPS enforced, indicating a solid technical foundation. Privacy compliance is addressed with GDPR policies and cookie consent mechanisms. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and well-structured for its target audience.

P

Pix4D SA

pix4d.com

73

Pix4D SA is a leading enterprise specializing in photogrammetry and drone mapping software solutions. Their website showcases a comprehensive suite of products designed for professional users in surveying, mapping, agriculture, construction, energy, and public safety sectors. The company offers both desktop and cloud-based processing tools, along with data capture applications and hardware integrations such as RTK devices. The website content is rich, well-structured, and targets professional audiences with clear product descriptions and use cases. Technically, the website is built using modern web technologies including React and Gatsby, ensuring fast performance and excellent mobile optimization. Integration with analytics and marketing platforms like Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag indicates a mature digital marketing infrastructure. The site employs HTTPS and cookie consent mechanisms, reflecting good privacy compliance practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. The absence of WHOIS registrant data reduces transparency but does not significantly detract from the site's legitimacy given the professional branding and external references. Overall, Pix4D's website presents a professional, trustworthy, and technically sound digital presence with minor gaps in explicit security disclosures. Strategic recommendations include publishing security policies, incident response details, and enhancing security headers to further strengthen trust and compliance.

Supplyframe is a well-established global engineering network specializing in Design-to-Source Intelligence solutions that empower manufacturers, suppliers, and procurement professionals in the electronics industry. The company offers a suite of software products aimed at optimizing new product introductions, strategic sourcing, quoting, and digital marketing to a global engineering audience. With a strong market position supported by partnerships with major industry players and a parent company Siemens, Supplyframe demonstrates a mature business model focused on B2B SaaS and digital platform services. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. The presence of analytics and marketing tools such as Google Analytics, HubSpot, and Clearbit indicates a data-driven approach to user engagement and marketing. Privacy and cookie compliance mechanisms are implemented effectively, reflecting awareness of GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and some security headers, although there is room for improvement by enabling DNSSEC and additional headers like CSP and HSTS. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business history and domain age, supporting legitimacy and trustworthiness. Overall, Supplyframe's website reflects a professional, secure, and compliant digital presence suitable for its enterprise audience. Strategic recommendations include enhancing DNS security, publishing explicit security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

Q

Query Digital, s.r.o.

query.cz

63

Query Digital, s.r.o. is a Czech Republic-based web studio specializing in the development, operation, and consulting of web applications. The company serves a business clientele, including notable brands, and positions itself as a small but professional and trusted service provider in the technology sector. Their website reflects a modern, well-structured digital presence built on Next.js and React, with strong mobile optimization and user experience. Privacy and cookie policies are clearly presented and GDPR compliant, enhancing trust. Security posture is good with HTTPS and consent mechanisms, though some security policy documentation and incident response contacts are missing. WHOIS data is unavailable, which slightly impacts domain trust but does not detract from the professional appearance and business legitimacy of the site.

B

Bidding Fox technologies, s.r.o.

pricing-audit.cz

57

Pricing Audit is a Czech-based small business specializing in providing free pricing audits for e-commerce shops, particularly those using price comparison platforms like Heureka.cz. The service offers detailed reports highlighting pricing issues and recommendations to improve competitiveness. The website is professionally designed using modern web technologies such as React and integrates analytics and cookie consent tools to ensure GDPR compliance. The business operates under the parent company Profitak group, s.r.o., and maintains a consistent brand presence with related services like Pricing Fox. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks published security policies or incident response contacts. Overall, the website is trustworthy, well-structured, and targets Czech and Slovak e-commerce markets effectively.

B

Bidding Fox technologies, s.r.o.

bidding-audit.cz

65

Bidding Audit is a Czech-based technology company specializing in providing free bidding audit services to e-commerce businesses using price comparison platforms such as Heureka and Zboží. The company operates under Bidding Fox technologies, s.r.o., a small-sized entity founded in 2021 and part of the Profitak group. Their key offerings include detailed bidding audit reports and automated bidding tools aimed at improving product offer competitiveness and advertising efficiency. The website is professionally designed with good content relevance and clear navigation, targeting Czech and Slovak markets. Technically, the site uses modern React-based SPA architecture with integrated analytics and cookie consent mechanisms, ensuring GDPR compliance. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies or incident response disclosures.

S

Scite LLC

scite.ai

67

Scite LLC operates a sophisticated AI-powered research platform designed to enhance the discovery, understanding, and evaluation of scientific literature. Leveraging a unique Smart Citation Index, the company provides researchers, universities, publishers, and corporations with tools to assess the reliability and context of citations. Founded in 2018 and now part of Research Solutions, Scite has established a strong market position with over 1.3 billion citations indexed and partnerships with major academic publishers. The platform offers a subscription-based SaaS model with free trials and organizational licensing, targeting a global research audience.

U

University of California Press

ucpress.edu

63

University of California Press is a well-established academic publisher affiliated with the University of California. The website serves as a platform for promoting scholarly books, journals, and publishing services targeting academics, researchers, students, librarians, and authors. The site demonstrates a strong market position within the academic publishing sector, offering a wide range of disciplines and resources. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Google Analytics and Tag Manager for tracking. The design is professional, mobile-optimized, and accessible, providing a positive user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though privacy compliance could be improved by adding cookie consent mechanisms and explicit terms of service. Overall, the website is trustworthy and credible, reflecting the reputation of its parent institution.

M

Najrýchlejčí optický internet a televízia ZADARMO - M.S. Profi

msprofi.sk

46

MS Profi is a Slovakian professional services website established in 2005, offering services targeted primarily at local Slovak audiences. The website is built on WordPress CMS with modern JavaScript frameworks such as React, indicating a moderate level of digital maturity. Hosting is provided by Forpsi, a known Slovak hosting provider, which aligns with the domain registration data. The website implements HTTPS and cookie consent mechanisms but lacks visible privacy policies and terms of service, which are critical for compliance and user trust. Security headers are not detected, suggesting room for improvement in security posture. No contact emails or phone numbers are explicitly provided, which may impact user trust and business credibility.

C

Coordinator ODIS s.r.o.

odis.cz

52

Coordinator ODIS s.r.o. is a regional public transportation coordinator serving the Moravian-Silesian Region in the Czech Republic. The company provides comprehensive services including timetables, fare and tariff information, updates on transportation changes, maps, and practical travel information. The website targets public transportation users in the region and supports digital ticketing through an e-shop and a mobile app called ODISapp. The company is positioned as a key regional transportation service provider with strong ties to local government entities.

M

MOL Group

molcampus.hu

65

MOL Campus is the corporate headquarters of MOL Group, Hungary's leading energy company. The website showcases the building as a symbol of sustainability and innovation, offering visitor experiences such as the SkyDeck and various employee services. The site is well-designed, mobile-optimized, and uses modern web technologies including Next.js and React. It integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel with appropriate cookie consent mechanisms. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website reflects a mature digital presence aligned with MOL Group's corporate identity and sustainability commitments.

S

Sky

skyaccessibility.sky

71

Sky Accessibility is a dedicated platform by Sky, a leading UK and Ireland media and telecommunications company, focused on ensuring all products and services are inclusive and accessible to customers with various impairments. The website offers detailed information on accessibility features, support services, and collaborations with recognized organizations to enhance user experience for people with disabilities. The platform is well integrated with Sky's corporate ecosystem, reflecting a strong market position and commitment to accessibility. Technically, the website leverages modern web technologies including React and Next.js, supported by Contentstack CMS and Adobe Launch for analytics and tag management. The site demonstrates good performance, mobile optimization, and excellent accessibility compliance, aligning with its mission. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent management platform. From a security perspective, the site uses HTTPS with a strong SSL configuration and includes consent management scripts. While explicit security policies and incident response contacts are not found, no vulnerabilities or security issues are evident in the content. The WHOIS data confirms the domain's legitimacy and consistency with Sky's corporate identity. Overall, Sky Accessibility presents a professional, trustworthy, and user-focused digital presence with strong compliance and technical maturity. Strategic improvements could include publishing explicit security policies and vulnerability disclosure information to further enhance trust and security posture.