Security Directory

A

Advisa

advisa.fr

52

Advisa is a French e-commerce agency specializing in delivering performance-driven digital solutions for B2B and B2C markets. The company offers a comprehensive suite of services including strategy consulting, digital marketing, UX/UI design, development, and ongoing maintenance (TMA run). Positioned as an expert partner in leading e-commerce platforms such as Magento, PrestaShop, BigCommerce, and Shopify, Advisa targets professional clients seeking to boost their online business performance. The company is part of the Alliance Of Digital Builders (AODB) group, enhancing its service portfolio and market reach. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Gravity Forms, and integrates analytics tools such as Matomo and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security measures include HTTPS enforcement and use of Google reCAPTCHA v3 on forms, but the absence of security headers and published security policies suggests room for improvement. The security posture is solid but could be enhanced by adding explicit privacy and cookie policies, security.txt for vulnerability disclosure, and incident response contacts. The lack of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, Advisa presents a credible and professional digital presence with a focus on e-commerce performance enhancement.

Imki is a French technology company specializing in augmented creative AI solutions tailored for the luxury and fashion industries. Their bespoke AI tools integrate brand DNA to accelerate creative processes and product development, helping brands reduce time to market and minimize waste. The company is positioned as an innovative leader with recognized partnerships and awards, including the CES Innovation Award. Technically, the website is built on WordPress with modern plugins and scripts, hosted on AWS infrastructure, and demonstrates good SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS, secure hosting, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, Imki presents a professional, trustworthy, and compliant digital presence aligned with its business goals.

A

Anamnesia

anamnesia.com

47

Anamnesia is a specialized French company providing innovative interactive, multimedia, and audiovisual solutions for museums and exhibitions. With over 15 years of experience and a portfolio of more than 100 projects, the company positions itself as a trusted partner in the cultural sector, offering end-to-end services from feasibility studies to content adaptation and technology integration. The website reflects a professional and consistent brand image, targeting museum professionals and cultural institutions. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, ensuring good SEO and user experience. Security measures include HTTPS, reCAPTCHA on forms, and GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, reinforcing trust and legitimacy.

M

Museum Manufactory

museum-manufactory.com

51

Museum Manufactory is a French company specializing in the design and realization of innovative exhibition spaces and multimedia interactive mediation devices. With over 25 years of experience, it serves both public and private clients internationally, offering turnkey project services including consulting, project management, design, and innovation. The website is professionally designed, bilingual (French and English), and optimized for SEO and accessibility. Technically, it is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, hosted likely by Amenworld. Security posture is good with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security.txt or incident response policies are found. The domain registration is privacy protected but consistent with the business location and claims. Overall, the website presents a trustworthy and professional digital presence.

B

Bibliopolis

bibliopolis.com

65

Bibliopolis is a specialized technology provider focused on delivering tools and services for online bookstores, including inventory automation (BookRouter™), secure e-commerce hosting, and SEO/analytics integration. The company targets booksellers, rare book dealers, and used bookstores, positioning itself as a niche player with a portfolio of over 400 powered websites and longstanding industry involvement. The website demonstrates a professional design with clear navigation and mobile optimization, supported by modern technologies such as jQuery, Bootstrap, Zoho SalesIQ, Google Tag Manager, and New Relic monitoring. Security posture is strong with HTTPS enforcement and secure payment integrations, complemented by a cookie consent mechanism and privacy controls. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trust. No WAF or blocking mechanisms were detected, allowing full content accessibility.

A

Artlogic

artlogic.net

62

Artlogic is a well-established SaaS platform founded in 1997, specializing in providing comprehensive business management solutions tailored for galleries, artists, and collectors. The platform offers a suite of services including inventory management, sales CRM, marketing tools, websites, and payment processing, positioning itself as a key player in the art business software market with over 5,500 clients worldwide. The website reflects a professional and consistent brand image with excellent content quality and user experience, targeting art professionals and collectors globally. Technically, the website leverages a mature technology stack including jQuery, Google Analytics, Tag Manager, Facebook Pixel, and other marketing and tracking tools, hosted primarily on AWS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS (Artlogic CMS) underpinning its content management. Performance is moderate, with good use of modern web technologies and third-party integrations. From a security perspective, the site employs HTTPS with good SSL configuration, uses Google reCAPTCHA for form protection, and manages cookie consent effectively. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. DNSSEC is not enabled, which could enhance DNS security. No critical vulnerabilities or exposed sensitive data were detected. Overall, Artlogic presents a low-risk profile with strong business credibility and a solid technical foundation. Strategic recommendations include enabling DNSSEC, publishing clear security and privacy policies, and enhancing transparency around incident response and vulnerability disclosures to further strengthen trust and compliance.

M

mCanvas

mcanvas.com

72

mCanvas is a digital advertising company specializing in immersive and interactive ad experiences across smart devices including mobile and connected TV platforms. The company positions itself as a premium provider of innovative advertising solutions that leverage sensor-based technology to enhance brand engagement and recall. Their website demonstrates a strong brand presence with client testimonials, prestigious awards, and partnerships with leading agencies and brands. Technically, the site is built on Webflow, uses modern analytics and consent management tools, and implements security best practices such as HTTPS and Google reCAPTCHA Enterprise. However, the absence of explicit privacy and terms of service pages and missing WHOIS domain registration data present compliance and trust challenges. Overall, the website is professional and well-designed, targeting brands and advertisers seeking advanced digital marketing solutions.

Z

Zákony pro lidi PLUS

zakonyprolidiplus.cz

61

Zákony pro lidi PLUS is a Czech Republic-based subscription legal information service providing comprehensive access to Czech laws, historical legal documents, international treaties, judicial decisions, and related legal resources. The website targets legal professionals, public administration, educational institutions, and students, offering tools such as note-taking, bookmarking, and English translations of key laws. The platform is positioned as a reliable and cost-effective legal research tool in the Czech market. Technically, the site employs modern web technologies including Bootstrap and Font Awesome, with a responsive design and moderate performance. Security posture is good with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. The WHOIS data is not publicly available, indicating privacy protection, which is common and justified for this type of service. Overall, the website is professional, trustworthy, and safe for general audiences.

O

Omnicado s.r.o.

omnicado.com

70

Omnicado s.r.o. operates a sophisticated e-commerce integration platform designed to streamline omnichannel selling and marketplace management for businesses primarily in Central and Eastern Europe. The company targets a broad audience including e-shops, distributors, manufacturers, and agencies, offering services such as product data synchronization, order management, and logistics support through modules like Omnicado Expedition. Their market position is supported by over 250 connected clients and extensive integration with popular marketplaces and e-commerce platforms. Technically, the website is built on Webflow CMS and leverages modern technologies including Google Tag Manager, Meta Pixel, Hotjar, and Cloudflare Turnstile captcha for security and analytics. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and bot protection mechanisms in place, though explicit security headers could be more visible. While the website content and business presence are professional and trustworthy, the absence of WHOIS registration data for the domain www.omnicado.com raises concerns about domain legitimacy and ownership transparency. This inconsistency warrants further verification to ensure full trustworthiness. Overall, the site presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing formal security and incident response policies, and resolving domain registration transparency issues to bolster trust and compliance.

The Havanna-Initiative website serves as a non-profit advocacy platform focused on ending the blockade against Cuba. It provides news, calls to action, press information, and contact options primarily through a contact form. The organization appears to be small and Germany-based, founded in 2020, with a clear mission targeting activists and supporters of Cuba. The website uses WordPress CMS with common web technologies such as jQuery and Font Awesome, hosted by Cronon GmbH. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is functional but basic in design and content quality, with moderate trustworthiness and no detected adult or explicit content.

teleSUR is a Latin American media organization providing news, multimedia content, and live streaming services primarily in Spanish. The website demonstrates a mature digital presence with a WordPress CMS, integration of multiple advertising and analytics platforms, and structured data for SEO. The site is well-designed with good navigation and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. WHOIS data is unavailable, which raises some legitimacy concerns but the accessible content and professional presentation mitigate immediate risks. Overall, the site serves a broad Spanish-speaking audience interested in regional and global news.

Cubainformacion.tv is a Spanish-language media website focused on delivering news, videos, and political commentary related to Cuba and Latin America. It serves a niche audience interested in Cuban affairs, solidarity movements, and political developments. The site offers a mix of video content, news articles, radio broadcasts, and campaign promotions, positioning itself as a specialized media outlet in this domain. Technically, the website uses a custom CMS named Cubainformacion Publishing System, integrates modern video playback technologies such as Video.js and YouTube iframe API, and employs Google Analytics with IP anonymization for user tracking. The site is mobile-optimized and features a consistent branding approach with good content quality and navigation clarity. Security-wise, the site uses HTTPS and includes CSRF tokens but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain ownership verification, but the website content and technical setup appear legitimate and professional. Overall, the site is safe for general audiences and does not contain adult or explicit content.

F

Freundschaftsgesellschaft BRD-Kuba e.V.

fgbrdkuba.de

64

Freundschaftsgesellschaft BRD-Kuba e.V. is a well-established non-profit solidarity organization founded in 1974, focusing on fostering relations and support for Cuba within Germany. The website serves as an informational platform targeting individuals and groups interested in solidarity activities. Technically, the site is built on WordPress using the Divi theme and enhanced with the Rank Math SEO plugin, hosted likely by 1&1 IONOS. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration, though it lacks some security headers and formal privacy and cookie policies. Security posture is moderate with room for improvement in transparency and incident response readiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

The website pomahejukrajine.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content or business information from being retrieved or analyzed. The page presented is a standard Cloudflare block page requesting cookie enablement and indicating that the visitor has been blocked due to triggering security rules. The domain WHOIS data is suspicious, showing a creation date in the future (May 20, 2025), which undermines the legitimacy and trustworthiness of the domain. No business, contact, or policy information is available, and no technical or security headers can be assessed from the blocked content.

G

Generální ředitelství Hasičského záchranného sboru ČR

hzscr.cz

61

The Hasičský záchranný sbor České republiky (Fire Rescue Service of the Czech Republic) is a government agency responsible for protecting lives, health, and property from fires and other emergencies. It operates under the Ministry of the Interior and coordinates integrated rescue efforts across the country. The website serves as an official information portal providing news, public safety advice, organizational details, and educational resources. It targets Czech residents, emergency responders, and government officials. Technically, the site uses standard web technologies including jQuery and Google Analytics, with a focus on accessibility and compliance with GDPR through cookie consent and privacy policies. Security posture is solid with HTTPS and Content Security Policy headers, though some improvements are recommended such as updating legacy libraries and adding additional security headers. The domain WHOIS data is not publicly available, likely due to registry privacy policies, but the domain is a trusted government domain (.gov.cz) with consistent branding and content. Overall, the site is professional, trustworthy, and serves an essential public safety function.

P

Plesk

plesk.com

73

Plesk is a leading provider of web hosting control panel software designed to build, secure, and manage websites and applications in cloud environments. The company targets a broad audience including developers, content managers, agencies, IT administrators, and web hosting providers. Their business model revolves around software licensing, extensions, and partnerships with major cloud infrastructure providers. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation. Technically, the site is built on WordPress with modern plugins and integrates advanced marketing and analytics tools such as Google Tag Manager, Hotjar, and VWO. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA protections on forms, although explicit security policies and incident response information are not publicly detailed. The WHOIS data is notably absent or private, which is unusual for a well-known brand but does not currently detract significantly from the site's legitimacy. Overall, Plesk's website demonstrates a high level of professionalism and technical maturity suitable for its market position.

AlwaysInDemand.com is a specialized educational and career awareness platform focused on promoting HVAC industry careers and providing scholarship opportunities through the HVAC HERO Scholarship program. The website is operated by the EGIA Foundation, a non-profit entity, and targets students and individuals interested in entering the HVAC trade. The platform offers resources, a trade school directory, and scholarship application information, positioning itself as a niche resource in the energy and education sectors. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Google Analytics, and Facebook Pixel for tracking and analytics. Hosting appears to be on Amazon AWS infrastructure, indicated by the DNS servers. The site is mobile optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as clientDeleteProhibited status. However, it lacks DNSSEC and security headers like CSP or HSTS, which are recommended for enhanced security. No privacy or cookie policies are explicitly presented, and no consent mechanisms are detected, which may pose compliance risks. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the website is professionally designed and trustworthy with moderate security posture and some compliance gaps. Strategic improvements in privacy policy publication, cookie consent, and security header implementation would enhance the site's security and compliance standing.

A

Autodesk

autodesk.fr

74

Autodesk is a globally recognized leader in design and manufacturing technology, offering a comprehensive suite of software solutions for architecture, engineering, construction, manufacturing, and entertainment industries. The website reflects a mature digital presence with professional design, multilingual support, and extensive use of modern web technologies. The technical infrastructure includes advanced monitoring and analytics tools such as Dynatrace, Tealium, and Qualtrics, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security and privacy policies are not clearly presented in the provided content. Overall, Autodesk's website demonstrates a high level of professionalism and trustworthiness, consistent with its market position as an enterprise technology provider.

A

Autodesk

autodesk.de

63

Autodesk is a globally recognized leader in design and manufacturing software, serving professionals across architecture, engineering, construction, manufacturing, and entertainment sectors. The company offers a comprehensive suite of 3D design and engineering tools that empower innovators worldwide. Their market position is strong, supported by a large enterprise footprint and a history dating back to 1982. Technically, Autodesk's website demonstrates a mature digital infrastructure leveraging modern web technologies such as Adobe Experience Manager, React-based micro frontends, and advanced monitoring via Dynatrace. The site is optimized for performance, accessibility, and SEO, reflecting a high level of digital maturity. From a security perspective, Autodesk employs robust measures including HTTPS, comprehensive security headers, and compliance with industry standards like ISO 27001 and SOC 2. Incident response and vulnerability disclosure processes are publicly documented, indicating a proactive security posture. Overall, Autodesk's website and digital presence reflect a trustworthy, professional, and secure enterprise platform. The absence of WHOIS data is consistent with privacy protection practices common among large corporations. The risk profile is low, with recommendations focusing on continuous security updates and monitoring.

A

Autodesk

autodesk.co.nz

73

Autodesk is a global leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The company operates an enterprise-grade website that showcases its products and services with a professional and modern design. The website targets professionals and enterprises seeking advanced 3D design, engineering, and entertainment software solutions. Autodesk's market position is strong, supported by a comprehensive portfolio and a large global customer base. Technically, the website leverages modern web technologies including JavaScript, CSS3, and HTML5, integrated with Adobe Experience Manager CMS and advanced analytics and tag management tools such as Dynatrace and Tealium. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Autodesk employs HTTPS with strong SSL configurations, security headers, and content security policies. The site uses secure cookie attributes and third-party monitoring tools to maintain security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, Autodesk's website demonstrates a high level of professionalism, security, and compliance, consistent with its enterprise stature. The domain is longstanding and privacy protected, which is justified given the company's size and brand. Strategic recommendations include enhancing public security disclosures and maintaining vigilant updates to third-party components.

A

Autodesk

autodesk.com.au

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals and enterprises across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack, including advanced analytics and tag management tools, and a robust content management system (Adobe Experience Manager). The website reflects a mature digital infrastructure with excellent performance, mobile optimization, and accessibility. Security posture is strong, with HTTPS enforcement, comprehensive security headers, and publicly available security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and a designated Data Protection Officer. Overall, Autodesk's website and digital footprint demonstrate a high level of professionalism, trustworthiness, and business credibility.

A

Autodesk

autodesk.co.uk

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack including Adobe Experience Manager CMS, advanced analytics, and performance monitoring tools. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting Autodesk's enterprise-grade digital maturity. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Autodesk's website reflects a high level of professionalism, trustworthiness, and business credibility consistent with its market position.

Č

Česká pošta

kredit-ds.cz

59

The website kredit-ds.cz/payment is an official service portal operated by Česká pošta, the Czech postal service, providing a platform for users to top up credit for their data mailboxes. The site targets Czech individuals and businesses who use electronic government communication services. It offers payment options including payment by card and domestic bank transfer, with clear instructions and official branding. The website is well-structured, mobile-optimized, and provides essential contact information, enhancing user trust and accessibility. Technically, the site is built using modern web technologies including React and Material-UI, ensuring a responsive and user-friendly interface. While performance is moderate, the site lacks some advanced SEO and accessibility features. Security practices include HTTPS and form validation, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. From a security perspective, no critical vulnerabilities or malware indicators were found. However, the lack of WHOIS data due to privacy protection limits domain registration transparency. The site aligns with GDPR requirements through its privacy policy, but cookie consent is missing. Overall, the site demonstrates a solid security posture for a government service but should enhance transparency and compliance features. The overall risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and publishing security policies to strengthen user trust and regulatory compliance. The site’s legitimacy is high given its association with Česká pošta and consistent branding.

Č

Česká pošta, s.p.

datovy-trezor.cz

65

Česká pošta, s.p. operates the Datový trezor service, a supplementary digital mailbox capacity service for existing data mailboxes in the Czech Republic. The website provides a secure, government-backed platform for ordering and managing this service, targeting both individual and business users who require secure digital communication. The site is well-branded with official logos and provides clear contact information, terms, and privacy policies, reflecting a mature digital service offering from a national postal authority. Technically, the site leverages modern web technologies including React and Liferay, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though some improvements in vulnerability disclosure and incident response transparency could be made. Overall, the site is trustworthy and professional, though the lack of WHOIS data limits domain registration trust analysis.

The EGIA Foundation is a U.S.-based non-profit organization established in 2017, dedicated to strengthening the HVAC industry workforce by providing scholarships, training, research, and recruitment resources. The foundation targets young people pursuing HVAC careers, contractors, educators, corporations, and nonprofits, positioning itself as a key player in HVAC workforce development. The website reflects a professional and consistent brand with clear messaging and a focus on community and industry collaboration. Technically, the site is built on WordPress with WooCommerce and uses modern analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the foundation.

HVAC Distributor University is a specialized educational platform launched in late 2024, focused on providing training and development resources for HVAC distributors and their sales teams. The platform offers a variety of services including online courses, live training sessions, resource libraries, and membership packages. It is affiliated with EGIA, a recognized industry association, which enhances its credibility and market positioning. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. Technically, the site is built on WordPress, hosted by Nexcess, and uses modern web technologies such as jQuery and FontAwesome. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced, but the absence of DNSSEC and security headers slightly reduces the overall security score. Privacy compliance is partial; a comprehensive privacy policy is linked but no cookie consent mechanism is present. Contact information is clearly provided, including phone, email, and physical address, supporting business credibility. Overall, the website presents a trustworthy and professional front for its business model, with minor technical and compliance enhancements recommended.

F

FigPii

figpii.com

63

FigPii is a technology company providing an all-in-one conversion rate optimization platform that integrates A/B testing, heatmaps, session recordings, and polls & surveys. The platform targets e-commerce brands, CRO agencies, and SaaS companies seeking to improve user experience and increase revenue. The website is professionally designed with clear navigation, calls to action, and multimedia demonstrations, reflecting a mature digital presence. Technically, the site employs modern analytics and tracking technologies such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, hosted likely on AWS with Cloudflare services. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and clearer contact information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, FigPii presents as a credible SaaS provider with room for improvement in privacy and transparency.

V

VisualCraft GmbH

visualcraft.ch

55

VisualCraft GmbH is a small, professional design and multimedia studio based in Bern, Switzerland, specializing in UX/UI design, branding, graphic design, photography, videoproduction, and motion design. The company targets businesses and organizations seeking high-quality digital experiences and brand presentation. Their website showcases a well-structured portfolio and clear service offerings, positioning them as a niche creative agency in the Swiss market. Technically, the website is built on WordPress using Elementor and integrates modern web technologies such as Lottie animations and Google Analytics, reflecting a mature digital infrastructure. Security-wise, the site employs HTTPS with strong SSL configuration and security headers, although it lacks a dedicated security policy or incident response information. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies, including a consent mechanism. Overall, the website demonstrates high professionalism, good technical implementation, and solid business credibility, with minor areas for improvement in security transparency and accessibility.

S

SWISS ELEMENTIC

swisselementic.com

56

SWISS ELEMENTIC operates an innovative Drive-in Boatwash service in Switzerland, offering boat hull cleaning up to 16 meters in length directly in the water. The company positions itself as a pioneer in the Swiss market with a focus on ecological and efficient boat maintenance, reducing the need for harmful antifouling paints and improving fuel efficiency. Their business model includes direct service offerings with booking and subscription options, targeting boat owners seeking convenient and environmentally friendly cleaning solutions. The website is professionally designed using WordPress with modern page builders and includes multilingual support, social media integration, and a cookie consent mechanism, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. No privacy policy or terms of service documents were found, which is a compliance gap. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy.

S

Swiss Design Association

swiss-design-association.ch

44

The Swiss Design Association is a professional membership organization based in Switzerland that supports design professionals through legal advice, insurance consulting, and advocacy. It is recognized by the Swiss Federal Office of Culture, indicating a reputable position within the cultural and design sector. The website provides information about awards, events, membership benefits, and a directory of designers, targeting primarily design professionals and organizations within Switzerland. Technically, the website uses a mature technology stack including jQuery, Backbone.js, Google Analytics, and reCAPTCHA v3, running on Craft CMS. The site is mobile optimized with good navigation and consistent branding. Security posture is solid with HTTPS and anti-bot protections, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

L

Leofoto Schweiz

leofoto.ch

52

Leofoto Schweiz operates as a specialized e-commerce retailer focusing on high-quality carbon tripods and photography accessories, targeting professional photographers and enthusiasts in Switzerland. The company emphasizes product durability and quality, supported by a 10-year warranty, positioning itself as a niche market leader in its segment. The website is built on WordPress with WooCommerce, leveraging modern web technologies and SEO tools to enhance user experience and visibility. Security measures include HTTPS and reCAPTCHA, but lack explicit security policies and comprehensive privacy compliance mechanisms. Overall, the site demonstrates a solid business presence with room for improvement in privacy and security transparency.

D

Duotones LLC

duotones.ch

49

Duotones LLC is a specialized UX and interaction design agency based in Bern, Switzerland, founded in 2016. The company focuses on delivering user experience design, interaction, and interface design services for digital media and products such as web and app design. Their client portfolio includes reputable Swiss organizations like Swisscom, PostFinance, and Universität Zürich, positioning them as a trusted player in the Swiss UX market. The website reflects a professional and consistent brand image with comprehensive service offerings including innovation workshops, digital transformation consulting, and prototyping. Technically, the website is built on WordPress 5.8.12 with modern JavaScript libraries such as Three.js and GSAP, and uses Yoast SEO for optimization. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Google Analytics and Google Tag Manager are used for analytics with IP anonymization enabled. Performance is moderate with good SEO and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no formal security or incident response policies are published. Privacy compliance is strong with clear privacy and cookie policies. Contact is primarily via a contact form, with no direct email or phone numbers publicly listed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, suitable for its business domain. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security and user experience posture.

D

DESIGN FESTIVAL BERN

designfestival.ch

41

Design Festival Bern is a well-established cultural event organizer focused on design exhibitions, conferences, workshops, and open studios in Bern, Switzerland. Celebrating its 10-year anniversary in 2025, it targets creatives, design professionals, and cultural enthusiasts. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, it is built on WordPress with Elementor and integrates modern tools such as Google Analytics, reCAPTCHA, and MailerLite for marketing and security. The site is secured with HTTPS and includes GDPR-compliant privacy and cookie policies, although explicit security policies and incident response information are absent. Overall, the website demonstrates a mature digital presence with moderate to good performance and security posture.

Atelier Richner Visuelle Gestaltung is a small Swiss visual design atelier specializing in the development and production of advertising materials. The company emphasizes a creative and competent approach, targeting businesses and clients seeking professional visual communication services. The website reflects a modest but professional digital presence with clear contact information and a social media link to Instagram. Technically, the site uses legacy JavaScript libraries such as jQuery 1.11.2, which introduces potential security risks. The site is mobile responsive and well structured but lacks modern security headers and privacy compliance documentation. Security posture is moderate due to HTTPS usage but diminished by outdated libraries and missing security headers. Overall, the website is functional and trustworthy but would benefit from updates to security practices and privacy policies to enhance compliance and user trust.

The website egako.eu represents the professional monthly publication 'Geodetický a Kartografický Obzor' (GaKO), a peer-reviewed journal focused on geodesy, cartography, and cadastral matters primarily serving professionals in the Czech Republic and Slovakia. The publication has a long historical legacy dating back to 1913 and is recognized in official research registries. The website provides access to current and archived issues, primarily in Czech, with an English alternate page available. The business model centers on specialized scientific publishing with electronic distribution since 2013. Technically, the site is built on WordPress 5.3.20, utilizing jQuery and several JavaScript plugins such as Nivo Slider. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site uses HTTPS, but no advanced security headers were detected, and some JavaScript libraries are outdated, posing potential security risks. From a security perspective, the site lacks explicit privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms. Tracking is limited to Histats.com, indicating minimal user tracking. No adult or questionable content is present, and the site is accessible without WAF or security challenges. WHOIS data shows the domain is registered to Gransy s.r.o., a Czech company, consistent with the website's content and audience. Overall, the site is a credible and professional resource within its niche but would benefit from improved security practices, updated technical components, and enhanced privacy compliance to strengthen trust and regulatory adherence.

A

Appinium | Salesforce Video Solutions

appinium.com

69

Appinium is a specialized technology company offering a native Salesforce enterprise content enablement platform focused on video and multimedia tracking across marketing, sales, service, and learning domains. The company positions itself as a niche leader integrating deeply with Salesforce to provide actionable insights and engagement tracking. The website reflects a professional B2B SaaS business model targeting enterprises leveraging Salesforce for content distribution and enablement. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and user engagement tools such as Google Analytics, Hotjar, and Qualified chat. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though formal security policies and headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

T

Twilio

twilio.com

74

Twilio is a leading cloud communications platform that provides APIs for messaging, voice, video, email, and customer engagement. Positioned as a leader in the CPaaS market, Twilio serves a broad audience including developers, enterprises, and startups. The website reflects a mature, enterprise-grade platform with comprehensive product offerings and strong branding consistency. Technically, the site leverages modern analytics, consent management, and performance monitoring tools, built on Adobe Experience Manager CMS, ensuring fast, accessible, and SEO-optimized user experience. Security posture is robust with HTTPS enforcement, multiple security headers, and compliance with major standards such as ISO 27001 and PCI DSS. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Although WHOIS data is unavailable, the website's trust signals and business credibility remain high, indicating a legitimate and well-established entity.

The website at b2b.lgsupport.com is a business-to-business support portal likely operated by LG Corporation or its affiliates. It serves as a platform for LG's business customers and partners to access support services, product information, and service management tools. The site leverages a modern technology stack centered around Salesforce Lightning Web Components, integrating multiple payment providers such as Stripe, PayPal, and Adyen, indicating a mature digital infrastructure. Despite the advanced technical implementation and strong security practices like a strict Content-Security-Policy and use of reCAPTCHA, the absence of WHOIS registration data for the domain raises questions about domain registration transparency. No privacy, cookie, or terms of service policies were detected in the provided content, which may impact compliance and user trust. Overall, the site appears legitimate and enterprise-grade but would benefit from improved transparency and privacy compliance documentation.

L

LG Suomi

lge.com

67

LG Suomi operates as the Finnish regional website for LG Electronics, a global leader in consumer electronics and home appliances. The website offers a comprehensive product catalog including TVs, audio/video equipment, home appliances, and IT products, targeting Finnish consumers and businesses. The site reflects LG's strong market position in OLED TV technology and smart home appliances, providing detailed product information and customer support resources. Technically, the website is built on modern frameworks such as Bootstrap and leverages advanced analytics and marketing tools including Google Tag Manager and Adobe DTM. It is hosted on a robust CDN infrastructure, likely Akamai, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and inferred security headers, though explicit security policies and incident response information are not published. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality, supporting LG's brand reputation in Finland.

P

PPF a.s.

ppf.eu

74

PPF Group is a well-established international investment group founded in 1991 in the Czech Republic, operating in 25 countries across Europe, North America, and Asia. The company manages a diversified portfolio spanning telecommunications, media, financial services, e-commerce, real estate, biotechnology, and mobility sectors. Their website reflects a mature digital presence with comprehensive corporate information, news, and insights targeted at investors, partners, and the general public. Technically, the website is built on modern frameworks such as Next.js and React, leveraging DatoCMS for content management and integrating Google services like reCAPTCHA Enterprise and Tag Manager for security and analytics. The site demonstrates excellent performance, mobile optimization, and SEO practices, ensuring a smooth user experience. From a security perspective, the site enforces HTTPS, employs security headers, and uses CAPTCHA to protect forms, indicating a strong security posture. However, there is no publicly available security policy or incident response contact, which could be improved. Privacy and cookie policies are present and comprehensive, showing good compliance with GDPR requirements. Overall, the website is professional, trustworthy, and secure, with no signs of malicious activity or content blocking. The domain WHOIS data is privacy protected, which is common for European domains, and does not raise immediate concerns. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing incident response transparency.

B

Bestsport, a.s.

o2arena.cz

72

O2 arena, operated by Bestsport, a.s., is a premier multifunctional venue and convention center located in Prague, Czech Republic. It offers a diverse program of cultural and sporting events and provides rental spaces for various types of events. The venue is well-positioned in the hospitality and entertainment sectors, supported by a strong brand presence and partnerships with reputable companies including its parent company PPF Group. The website reflects a mature digital infrastructure built on WordPress, leveraging modern JavaScript libraries and analytics tools to deliver a fast, accessible, and user-friendly experience. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection, and the site maintains high trust and professionalism.

O

O2 Czech Republic a.s.

o2knihovna.cz

58

O2 Knihovna is a digital content platform operated by O2 Czech Republic a.s., offering a wide range of e-books, audiobooks, e-magazines, ringtones, and applications primarily targeting Czech-speaking consumers. The platform leverages modern web technologies and integrates advanced analytics and consent management tools to ensure compliance with privacy regulations. The website demonstrates a professional design and user-friendly navigation, supporting a secure login process via SMS verification. Despite the absence of WHOIS data, the strong brand presence and official social media links reinforce its legitimacy. Security practices are sound with HTTPS enforcement and secure forms, though there is room for improvement in publishing explicit security policies and vulnerability disclosures.

Oneplay is a Czech Republic-based streaming service offering a wide range of entertainment content including movies, series, sports, exclusive content, and live TV with replay and recording features. The platform targets a general audience interested in online video entertainment and positions itself as a regional player in the media streaming market. The website demonstrates a modern technical infrastructure utilizing JavaScript frameworks, Google Tag Manager for analytics, and privacy SDKs to manage user consent. However, the absence of publicly available WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and privacy compliance. Security posture is moderate with HTTPS enabled and no obvious vulnerabilities, but missing security headers and incident response information suggest room for improvement. Overall, the site is functional and professional but would benefit from enhanced compliance and trust signals to improve business credibility and user confidence.

F

Flying Bisons

flyingbisons.com

71

Flying Bisons is a well-established digital consulting and delivery firm founded in 2015, specializing in helping businesses drive digital transformation and accelerate growth through a broad range of services including UX research, digital strategy, product design, branding, development, and data analytics. The company targets ambitious brands and startups seeking to create world-class digital products and experiences. Their market position is strong, supported by a high Clutch rating and a portfolio of notable clients such as KFC, IKEA, and Burger King. Technically, the website is built with modern web technologies, uses Cloudflare DNS, and integrates advanced tracking and analytics tools like Google Tag Manager and Sentry for error monitoring. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and some security best practices in place, though DNSSEC is not enabled and some security headers are not explicitly found. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and adding vulnerability disclosure information to enhance trust and compliance.

P

Panattoni Development Europe sp .z o.o.

panattoni.sa

56

Panattoni Development Europe sp .z o.o. is a leading global industrial real estate developer, recognized as the largest logistics developer in Europe since 2017. The company has expanded its operations to the Middle East, establishing a presence in Riyadh, Saudi Arabia. Their business model focuses on development, capital deployment, and providing comprehensive real estate services with a strong emphasis on sustainability and green-certified industrial spaces. The website reflects a professional and well-structured digital presence, targeting investors and industrial real estate clients with clear navigation and rich content.