Security Directory

E

EVENTIM Slovenia

eventim.si

46

EVENTIM Slovenia operates a leading online ticket sales platform in Slovenia, offering tickets for over 3000 events annually including concerts, festivals, and sports. The website is well-structured with rich event content and uses modern web technologies such as jQuery, Swiper.js, and Google Tag Manager. Privacy and cookie policies are implemented with GDPR compliance, supported by a consent management platform. Security posture is solid with HTTPS enforced, though security headers and explicit incident response contacts are not evident. The domain registration is consistent with the business claims, showing a long-established presence since 2003. Overall, the website presents a professional and trustworthy e-commerce platform for event ticketing in Slovenia.

S

SVK

eventim.sk

49

Eventim.sk is a well-established online ticketing platform primarily serving Slovakia and nearby regions. It offers tickets for a wide range of events including concerts, sports, cultural shows, and festivals. The platform targets a broad audience interested in entertainment and cultural activities, positioning itself as a regional leader in ticket sales. The website features a professional design with good navigation and content relevance, supporting a positive user experience.

E

Eventim NO

eventim.no

52

Eventim NO operates a professional e-commerce platform specializing in ticket sales for a wide range of cultural, musical, theatrical, and sports events in Norway. The website is well-structured, providing users with easy navigation through event categories and locations, supported by personalized recommendations and editorial choices. The business targets Norwegian consumers seeking official and secure ticket purchasing options. Technically, the site employs modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Tag Manager for analytics, and uses a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some HTTP security headers could be improved. The absence of WHOIS data is due to privacy protection, which is justified for this commercial entity. Overall, the platform demonstrates a mature digital presence with good privacy and security practices.

E

Eventim NL

eventim.nl

55

Eventim NL operates as a leading online ticket sales platform in the Netherlands, specializing in live entertainment tickets including musicals, theater, concerts, cabaret, classical music, and family shows. The website positions itself as the official and secure ticket seller for the Dutch market, targeting a broad general audience interested in cultural and entertainment events. The business model focuses on e-commerce ticket retail with a comprehensive event catalog and user-friendly navigation.

C

CTS EVENTIM FRANCE

eventim.fr

49

CTS EVENTIM FRANCE operates a comprehensive online ticketing platform focused on concerts, theater, sports, and cultural events primarily targeting the French-speaking market. The website presents a professional and well-structured interface with clear navigation and a broad range of event categories. The business is positioned as a major player in the French entertainment ticketing sector, leveraging the CTS EVENTIM brand. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and performs moderately well. Security posture is strong with HTTPS enforced and consent mechanisms in place, though additional security headers and explicit security policies could enhance trust. WHOIS data is not publicly available, indicating privacy protection typical for commercial entities. Overall, the site is trustworthy, compliant, and professionally maintained.

B

Billetlugen DK

billetlugen.dk

49

Billetlugen.dk is a Danish e-commerce platform specializing in the sale of official tickets for a wide range of live events including concerts, sports, comedy, musicals, festivals, and theater. The website targets a broad audience interested in live entertainment within Denmark and offers a comprehensive catalog of events and venues. The business model is focused on online ticket sales, positioning Billetlugen as a key player in the Danish ticketing market with a medium-sized operational scale. The site branding is consistent and professional, supporting trust and user engagement.

E

Eventim BR

eventim.com.br

49

Eventim BR operates a large-scale e-commerce platform specializing in ticket sales for concerts, theater, musicals, festivals, sports, and other entertainment events primarily in Brazil. The website is well-positioned in the Brazilian market as a major ticketing service provider, offering extensive event listings and a user-friendly interface. The platform supports multiple languages and integrates mobile applications for Android and iOS, enhancing accessibility and user engagement. Technically, the website leverages modern web technologies including jQuery, Swiper.js, and Google Tag Manager, hosted on Akamai's infrastructure, ensuring reliable performance and scalability. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism implemented via ConsentManager CMP. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content detected.

T

Technologické centrum Praha

horizontevropa.cz

43

The website www.horizontevropa.cz serves as the national information portal for the Horizon Europe program, providing comprehensive information, news, events, and services related to European research funding and innovation. It is operated by Technologické centrum Praha, a recognized entity supporting research and innovation in the Czech Republic. The portal targets researchers, project coordinators, consultants, and stakeholders interested in EU research programs. The business model focuses on informational and consultative services, positioning itself as a key national resource linked to European Commission initiatives. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses HTTPS with CSRF protection on forms, indicating a baseline of security best practices. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and professional design. However, explicit privacy and cookie policies are not clearly found, and no WHOIS data is available, which limits full trust assessment. From a security perspective, the site benefits from HTTPS encryption and CSRF tokens, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the strong affiliation with official Czech and EU institutions supports legitimacy. Overall, the website is a well-structured, professional portal with good content quality and user experience. Strategic improvements include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents. These steps would enhance compliance, trust, and security posture.

J

Jalios

jalios.com

62

Jalios is a technology company specializing in digital workplace solutions, including intranet platforms, collaboration tools, and knowledge management systems. The website presents a professional and modern interface targeting enterprises and organizations seeking to enhance their internal communication and digital collaboration capabilities. The company positions itself as an established player in the digital workplace market, primarily serving the French market. Technically, the website is built on WordPress using the Elementor framework, leveraging modern web technologies such as Google Fonts, Font Awesome, and Swiper.js for interactive elements. The site is mobile-optimized and implements cookie consent mechanisms, indicating awareness of privacy regulations. Performance is moderate, with lazy loading scripts and preconnect hints to optimize resource loading. From a security perspective, the site uses HTTPS with a good SSL configuration and basic security best practices like cookie consent. However, there is a lack of explicit security headers and no published security or incident response policies. The WHOIS data for the domain is missing or inaccessible, which raises some concerns about domain registration transparency but does not necessarily indicate malicious intent. Overall, the website is professional and trustworthy in appearance but would benefit from publishing clear privacy, terms of service, and security policies to enhance compliance and user trust. The domain registration inconsistency should be investigated further to ensure legitimacy.

S

Sdružení obcí Hlučínska

hlucinsko.eu

49

Sdružení obcí Hlučínska is a regional association of municipalities in the Hlučínsko area of the Czech Republic. The website serves as an official informational portal providing details about the member municipalities, regional projects, cultural events, tourism, and local services. It targets residents, tourists, and local government stakeholders, positioning itself as a key regional non-profit entity promoting community collaboration and regional development. The business model is focused on information dissemination and regional promotion rather than commercial activities. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries to provide a responsive and interactive user experience. The CMS appears to be a custom or proprietary system. The site is mobile-optimized and moderately performant, with basic SEO and accessibility features. HTTPS is enforced, but security headers are not explicitly detected in the provided data. From a security perspective, the site maintains a good posture with HTTPS and cookie consent mechanisms in place. However, it lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. The WHOIS data is privacy-protected, which is common and justified for this type of regional non-profit entity. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy, professionally maintained, and serves its regional informational purpose well. Strategic recommendations include enhancing security headers, publishing clear security policies, and improving SEO and accessibility further to strengthen digital maturity and trust.

V

VORLÍČEK - PLAST s.r.o.

radceprodum.cz

44

The website www.radceprodum.cz serves as an informational guide focused on helping customers select the right windows and doors for their homes. It is operated by VORLÍČEK - PLAST s.r.o., a Czech company with over 25 years of experience in the manufacturing and retail of windows, doors, and related products. The site targets homeowners and builders in the Czech Republic, providing detailed advice and technical information to support purchasing decisions. The business model centers on product education and brand promotion, positioning itself as a trusted regional player in the home improvement sector. Technically, the website employs modern web technologies including jQuery, Google Analytics, Smartlook, and cookie consent management via Orejime. The site is mobile-optimized with good SEO practices and moderate performance. While no CMS or hosting provider details are evident, the technical stack supports a professional user experience with animations and interactive elements. From a security perspective, the site enforces HTTPS and implements cookie consent with opt-in mechanisms for analytics and marketing cookies, demonstrating GDPR compliance. However, no explicit security headers were detected in the provided data, and no incident response or vulnerability disclosure information is available. The WHOIS data is missing or privacy-protected, limiting domain ownership verification and reducing trustworthiness somewhat. Overall, the website is professionally designed and content-rich, with good privacy compliance and moderate security posture. The main risks relate to the lack of WHOIS transparency and absence of explicit security policies or contact information. Strategic improvements in these areas would enhance trust and security posture significantly.

J

jfnetwork GmbH

jfnet.de

43

jfnetwork GmbH is a medium-sized German IT service provider specializing in intelligent process and IT solutions, consulting, integrated SaaS solutions, and e-commerce/database applications primarily for the automotive and fashion industries. With over 25 years of experience and a strong project portfolio, the company positions itself as a trusted partner in these sectors. The website reflects a professional and consistent brand image with clear contact information and business focus. Technically, the site is built on WordPress with modern libraries such as jQuery, Bootstrap, and Swiper.js, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, supporting the company's market position.

Nousu Games is a small-scale event organizer specializing in functional fitness competitions held in Vantaa, Finland. The website provides detailed event information, registration links, and partner acknowledgments, targeting fitness athletes and enthusiasts. The technical infrastructure is based on WordPress with Elementor, leveraging modern web technologies and Google Analytics for visitor tracking. While the site is well-structured and visually consistent, it lacks critical privacy and security policy disclosures, which impacts compliance and trust. Security posture is moderate with HTTPS enforced but missing security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

P

PUR-IZOLACE s.r.o.

pur.cz

50

PUR-IZOLACE s.r.o. is a specialized Czech company providing thermal and waterproof insulation solutions using sprayed and cast polyurethane and polyisocyanurate foams. Established in 1991, the company has a strong market presence with over 3 million square meters of insulated surfaces. Their services include technical consulting, project documentation, material selection, and on-site application using advanced Gusmer technology. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with Elementor and integrates multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the business content and contact information indicate legitimacy.

Č

ČeskýVýrobek s.r.o.

ceskyvyrobek.eu

43

ČeskýVýrobek s.r.o. operates a certification and protective trademark program called Český výrobek, which supports verified Czech manufacturers by providing a recognizable mark of Czech origin. The organization helps Czech companies grow by enhancing product trust, visibility, and marketing support. The website is built on WordPress, hosted likely on Cloudways, and employs modern technologies including Google Tag Manager and GDPR-compliant cookie management. Security posture is strong with HTTPS and consent mechanisms, though some security headers could be improved. WHOIS data is unavailable, but the website's professional presentation and trust signals support legitimacy. Overall, the site is well-structured, compliant, and serves its business purpose effectively.

Z

ZIA - Zentraler Immobilien Ausschuss

zia-innovationsradar.de

52

The ZIA-Innovationsradar website serves as a leading platform for innovative solutions in the German real estate sector, focusing on sustainability, digitalization, and investment themes. It is positioned as a key resource for industry professionals, investors, and academics interested in real estate innovation. The site presents well-structured content with a modern design, leveraging technologies like Tailwind CSS and Swiper.js to deliver a responsive and user-friendly experience. However, the technical infrastructure lacks visible advanced CMS or analytics integrations, indicating a relatively straightforward implementation. From a security perspective, the website uses HTTPS and is hosted on a known provider (kasserver.com), but lacks explicit security headers and visible privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of contact information and incident response channels further limits the security posture. WHOIS data is minimal, with no registrant details, which slightly reduces domain trustworthiness. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy compliance, security best practices, and transparent contact information to improve trust and regulatory adherence.

E

Eventim FI

lippu.fi

47

Lippu.fi is a Finnish online ticket sales platform operated by Eventim FI, offering tickets for a wide range of events including concerts, sports, theatre, and festivals. The website is well-structured with comprehensive event categories and location filters, targeting Finnish event attendees. The platform integrates modern technologies such as jQuery and Google Tag Manager, and supports mobile and accessibility features. Security posture is solid with HTTPS enforcement and GDPR-compliant consent management, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, Lippu.fi presents a professional and trustworthy e-commerce service in the Finnish entertainment market.

G

Galera Bet

galerabet.com

57

Galera Bet is an online gambling platform primarily serving the Brazilian market, offering casino games and sportsbook betting services. The website is built on the Playtech platform and leverages Cloudflare for DNS and likely CDN services, ensuring reliable performance and security. The site is designed for Portuguese-speaking adult users in Brazil, with a focus on gambling entertainment. Technical infrastructure includes modern JavaScript frameworks and monitoring tools such as New Relic, indicating a mature digital presence. However, explicit privacy and terms of service documents are not found, which may impact compliance and user trust. Security posture is generally good with HTTPS and Cloudflare usage, but could be improved by publishing clear security policies and enhancing security headers. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.

P

PETA Shopping Guide

petashoppingguide.com

64

The PETA Shopping Guide website serves as a comprehensive platform promoting vegan and cruelty-free companies, offering exclusive coupons and fostering partnerships to support animal welfare. Affiliated with the reputable non-profit organization PETA, the site targets consumers seeking ethical shopping options. The business model focuses on listing and endorsing companies that contribute financially to PETA, enhancing their market position as a trusted ethical shopping resource. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Swiper.js, ensuring good SEO optimization, mobile responsiveness, and user experience. The site employs HTTPS and integrates Google Analytics and Tag Manager for tracking, reflecting a mature digital infrastructure. However, some security headers are missing, and cookie consent mechanisms are absent, indicating areas for compliance improvement. From a security perspective, the site demonstrates good practices with secure forms and no visible vulnerabilities. The absence of WHOIS data raises transparency concerns but does not detract significantly from the site's trustworthiness due to strong branding and affiliation. Overall, the site is professional, secure, and user-friendly, though enhancements in privacy compliance and domain transparency are recommended. Strategically, the site should focus on implementing security headers, cookie consent banners, and publishing security and incident response policies to strengthen compliance and user trust. These improvements will align the site with best practices and regulatory requirements, ensuring sustained credibility and security.

E

Ekonomické stavby s.r.o.

ekonomicke-stavby.sk

66

Ekonomické stavby s.r.o. operates a website focused on economical construction solutions, targeting businesses and individuals interested in cost-effective building options. The company appears to be a small regional player in the real estate or construction sector in Slovakia. The website's digital infrastructure includes modern JavaScript libraries such as jQuery and Swiper, along with analytics and marketing tools like Google Tag Manager, Microsoft Clarity, and Cookiebot for cookie consent management. The site is mobile-optimized and uses HTTPS, indicating a baseline level of technical maturity. However, the content is minimal, primarily focused on cookie consent, with no visible privacy policy, terms of service, or direct contact information, which limits transparency and user trust. Security posture is moderate with HTTPS enabled but lacks visible security headers and published security policies. The extensive use of third-party advertising and tracking services suggests a high level of user tracking, which is partially mitigated by the cookie consent mechanism. Overall, the website is functional but would benefit from enhanced privacy and security disclosures and improved content richness to increase user trust and compliance.

T

TBG Metrostav

tbg-metrostav.cz

55

TBG Metrostav is a leading supplier of concrete and related construction materials in the Prague region, offering a comprehensive range of products including fresh concrete mixes, pumping services, and rental equipment. The company targets construction professionals and developers, positioning itself as a market leader with a strong local presence. The website is built on WordPress with modern technologies and includes tracking and analytics tools such as Google Analytics and New Relic, indicating a mature digital infrastructure. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting the company's credibility and trustworthiness.

M

Můj dům krok za krokem

mujdumkrokzakrokem.cz

50

Můj dům krok za krokem is a Czech platform dedicated to guiding users through the process of building family houses. It offers a comprehensive database of over 35,000 verified suppliers and more than 11,500 customer reviews, helping users find trustworthy construction companies and materials. The site also provides educational content, architectural inspirations, and a podcast studio, positioning itself as a leading resource in the Czech construction and real estate market. Technically, the website is built on WordPress with modern technologies such as Tailwind CSS, jQuery, and various analytics and marketing tools, ensuring a responsive and SEO-optimized experience. Security-wise, the site enforces HTTPS and uses cookie consent management, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data limits domain trust verification, but the professional content and technical setup suggest legitimacy. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

OnlineFundraising is a Danish company specializing in providing comprehensive fundraising payment solutions tailored for non-profit organizations. Their platform supports multiple payment methods including MobilePay, SMS, and payment cards, and integrates with CRM systems and telemarketing services. The company has a strong market presence with over 200 organizations using their services and has been recognized with the Gazelle 2024 award, indicating growth and business success. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and integrations such as Google Tag Manager and Mailchimp, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though the absence of a public security policy and incident response details suggests room for improvement. Overall, the website is professional, trustworthy, and well-optimized for its target audience, with no signs of malicious content or blocking mechanisms.

L

Liikuttajat Oy

liikuttajat.fi

53

Liikuttajat Oy operates a Finnish-language e-commerce and event management platform designed to simplify online sales of products, services, and events for businesses, associations, and clubs. The company positions itself as a user-friendly, comprehensive solution with features such as sales automation, booking calendars, and secure payment methods. The website is built on WordPress with Elementor and integrates SEO and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR compliance mechanisms in place, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

E

ESTRAMBÒTIC

estrambotic.cat

47

ESTRAMBÒTIC operates a specialized website offering outdoor escape room and group orientation games primarily targeting municipalities, educational centers, associations, and private groups in Spain. The business leverages theatrical and technological elements, including web apps, to deliver immersive and personalized experiences. The company has a consistent brand presence and active social media channels, supporting its market positioning as a local experiential activity provider. Technically, the website is built on WordPress with Elementor and uses modern plugins for SEO and GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and reCAPTCHA, but could be improved by enabling DNSSEC and adding security headers and incident response information. Privacy compliance is strong with a comprehensive cookie policy and consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

S

Slovenská vegánska spoločnosť

veganskaspolocnost.sk

55

Slovenská vegánska spoločnosť is a Slovak non-profit organization dedicated to promoting the benefits of a plant-based diet and vegan lifestyle. Established in 2016, it serves as an advocacy and educational platform offering resources such as podcasts, petitions, membership programs, and certification services (notably the V-Label). The organization targets the general public interested in ethical, environmental, and health aspects of veganism. Their website reflects a consistent brand identity and provides a well-structured user experience with clear navigation and relevant content.

V

Vegan Society Luxembourg A.S.B.L.

vegansociety.lu

47

Vegan Society Luxembourg is a small non-profit organization dedicated to promoting veganism in Luxembourg and Europe through education, events, and community engagement. Their website offers membership options, donation capabilities, and resources to support their mission. The organization maintains an active social media presence and provides clear contact information, enhancing their community outreach and trustworthiness. Technically, the website is built on WordPress using popular plugins such as WooCommerce and Elementor, delivering a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and visible incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trust. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

U

Udruženje Sloboda za životinje

sloboda-za-zivotinje.org

43

Udruženje Sloboda za životinje is a Serbian non-profit organization dedicated to animal rights, vegan lifestyle promotion, and education on plant-based nutrition. Established in 2003, it has a strong presence in Serbia with a focus on creating a world free from animal exploitation and suffering. The organization engages in direct animal aid, educational campaigns, volunteer programs, and operates an online store for promotional products. Their website reflects a mature digital presence using WordPress and Elementor, with multilingual support and social media integration. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in DNSSEC and security headers are recommended. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations.

P

ProVeg International

proveg.org

66

ProVeg International is a medium-sized international non-profit organization dedicated to promoting healthy and sustainable diets through plant-based foods. The organization collaborates with governments, NGOs, and stakeholders to advocate for action plans supporting plant-based diets. The website reflects a professional and consistent brand image with excellent content quality and clear messaging targeted at governments and NGOs interested in sustainability and health. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, hosted behind Cloudflare DNS. It employs a consent management platform (Usercentrics) for cookie compliance and integrates marketing tools like HubSpot and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site uses HTTPS with good SSL configuration and domain registration protections. However, DNSSEC is not enabled, and some common security headers are not explicitly present. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent but no explicit privacy or terms of service pages found. Overall, the website is trustworthy and professional with a solid security posture for a non-profit. Strategic improvements in privacy policy transparency and enhanced security headers would further strengthen compliance and trust.

P

ProVeg International

proveg.com

50

ProVeg International is a medium-sized international non-profit organization dedicated to promoting healthy and sustainable diets through plant-based foods. The organization collaborates with governments, NGOs, and stakeholders to advocate for action plans supporting plant-based diets, positioning itself as a leader in the non-profit advocacy sector focused on sustainability and health. The website reflects a professional and consistent brand image with good content quality and clear messaging aimed at governments and NGOs. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and uses Cloudflare for DNS. It employs Usercentrics for cookie consent, indicating awareness of GDPR compliance. The site is mobile-optimized and uses SEO best practices including Yoast SEO. Performance is moderate with good accessibility features. From a security perspective, the site uses HTTPS with domain locking status flags and cookie consent mechanisms. However, it lacks explicit published security policies, incident response plans, and vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include publishing privacy and security policies, enabling DNSSEC, and adding vulnerability disclosure information to enhance trust and compliance.

A

AVF (Association Végétarienne de France)

vegetarisme.fr

59

The Association Végétarienne de France (AVF) is a well-established French non-profit organization dedicated to promoting vegetarianism and supporting the transition to plant-based diets. The website serves as a comprehensive platform offering educational resources, advocacy campaigns, community engagement, and an online shop. AVF maintains a strong digital presence with multiple related domains and active social media channels, reinforcing its position as a key player in the vegetarian advocacy space in France. Technically, the website is built on a modern WordPress CMS with WooCommerce integration for e-commerce capabilities. It employs a variety of contemporary web technologies including Bootstrap, jQuery, Leaflet.js for maps, and Google services for analytics and tag management. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect forms. While some standard security headers are not explicitly visible, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data limits domain registration trust assessment, but the website's content and business information support its legitimacy. Overall, AVF's website is a professional, content-rich platform with a solid security posture and good privacy practices. It effectively supports the organization's mission and community engagement efforts.

G

Gradsko društvo Crvenog križa Valpovo

crvenikrizvalpovo.hr

42

Gradsko društvo Crvenog križa Valpovo is a local branch of the Croatian Red Cross focused on humanitarian aid, blood donation, social support, and community health initiatives. The organization serves the local community in Valpovo, Croatia, providing essential services to vulnerable populations and coordinating volunteer efforts. Their website reflects a well-established non-profit with consistent branding and clear communication of their mission and services. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and Swiper.js, hosted by CARNET, a reputable Croatian academic network. The site is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. Security-wise, the site uses HTTPS and common security plugins but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

L

Lietuvos kultūros institutas

lithuanianculture.lt

43

Lietuvos kultūros institutas (LKI) is a Lithuanian government-funded cultural institute established in 2015 under the Ministry of Culture. Its primary mission is to promote Lithuanian culture internationally through various projects, literary dissemination, and cultural attaché partnerships. The website serves as an official portal providing news, project information, and resources for cultural stakeholders and the public. The site is well-branded, consistent, and targets cultural institutions, artists, and international partners. Technically, the site is built on WordPress with modern plugins and libraries, hosted by a Lithuanian provider, and optimized for accessibility and mobile use. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a professional government entity with high trustworthiness and good digital maturity.

A

Association des Agences Marketing et Communication | MarkCom

markcom.lu

56

MarkCom is a well-established non-profit association representing 29 leading marketing and communication agencies in Luxembourg since 1995. The organization promotes excellence, best practices, training, and advocacy for agencies and advertisers. The website is professionally designed, mobile-optimized, and rich in relevant content including events, tools, and news updates. Technically, the site is built on WordPress with modern plugins and performance optimizations, hosted via EuroDNS. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration and hosting details align with the business profile, indicating legitimacy and trustworthiness.

R

Research Luxembourg

researchluxembourg.org

63

Research Luxembourg is a collaborative initiative representing major public research institutions in Luxembourg, supported by the Ministry of Higher Education and Research. The website serves as a portal for research news, career opportunities, and industry collaborations, positioning itself as a key national research platform. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a professional and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response information could be improved. Overall, the domain and website present a trustworthy and credible presence aligned with public research objectives.

L

Luxinnovation

luxinnovation.lu

79

Luxinnovation is Luxembourg's national innovation agency dedicated to empowering companies to innovate and fostering a sustainable and digital economy. The website reflects a mature digital presence with comprehensive content targeting startups, businesses, and research organizations. The technical infrastructure leverages modern web technologies, including Tailwind CSS, Alpine.js, Kentico CMS, and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent implemented but lacking a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

K

Kampus Hybernská

kampushybernska.cz

59

Kampus Hybernská is a cultural and educational hub located in Prague, focusing on fostering creativity, innovation, and academic collaboration. The website showcases a variety of events including lectures, performances, exhibitions, and workshops aimed at students, artists, researchers, and the general public. The platform is supported by partnerships with the Prague city government and Charles University, enhancing its credibility and community impact. Technically, the site is built on Webflow with modern JavaScript libraries and includes analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers in place, complemented by GDPR-compliant privacy and cookie policies. However, the absence of WHOIS data limits domain trust verification. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a medium-sized educational and cultural institution.

E

ekolo.cz s.r.o.

ekolo.cz

47

Ekolo.cz s.r.o. operates a leading Czech e-commerce and physical retail platform specializing in electric bicycles and related accessories. Established in 2007, the company has built a strong market position with over 18 years of experience, offering a wide range of products including over 700 e-bike variants from 16 manufacturers. Their services include sales, rental, and servicing of e-bikes, targeting cycling enthusiasts and urban commuters primarily in the Czech Republic. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site leverages modern JavaScript libraries such as Swiper.js, Google Tag Manager, and integrates security features like Google reCAPTCHA to protect user interactions. Hosting is inferred to be on DigitalOcean with CDN support for performance. Security posture is strong with HTTPS enforced and secure form handling, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. Contact information is transparent and includes multiple channels. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

L

Luxembourg - Let's Make It Happen (LMIH)

lmih.lu

47

Luxembourg - Let's Make It Happen (LMIH) is an official government-backed platform designed to inspire and connect actors involved in promoting Luxembourg internationally. The website offers a rich selection of multimedia tools, branding guidelines, and partnership opportunities to support the promotion of Luxembourg's values and talents. It targets both national and international audiences including ministries, public administrations, businesses, and associations. The platform is positioned as a central resource for Luxembourg's national branding efforts, leveraging modern web technologies and a multilingual approach to maximize reach and engagement. Technically, the website is built on WordPress 6.8.1 with a modern tech stack including Yoast SEO, jQuery, Select2, Swiper.js, and Matomo analytics for privacy-conscious tracking. It employs HTTPS with good SSL configuration and integrates Google reCAPTCHA v2 for form security. Accessibility features and SEO optimizations are well implemented, contributing to a positive user experience across devices. However, explicit privacy and cookie policy pages are not detected in the provided content, which is a compliance gap. From a security perspective, the site follows best practices such as HTTPS enforcement and CAPTCHA protection on forms. The use of Matomo analytics and Axeptio cookie consent indicates a privacy-aware approach. Nonetheless, the absence of security headers and vulnerability disclosure policies suggests room for improvement in security posture. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a professional, trustworthy, and well-structured platform aligned with its government branding mission. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure mechanism to enhance compliance and security maturity.

M

Molfar Intelligence Firm

molfar.com

70

Molfar Intelligence Firm is a Ukrainian private intelligence agency specializing in OSINT investigations and business consulting across finance, government, law, and IT sectors. Established in 2012 and operational since 2019, the firm serves a global clientele with expertise in over 60 countries, focusing on markets such as CIS, USA, UK, China, and Israel. Their key offerings include background checks, litigation support, risk consulting, market research, strategic communication, military intelligence, and OSINT training through their institute. Technically, the website is built on Webflow with modern JavaScript libraries and analytics tools, hosted with Cloudflare DNS, and employs HTTPS with domain transfer lock for security. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. Security posture is strong with no critical vulnerabilities detected, though DNSSEC is not enabled. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

H

heap studio

heap.lu

50

Heap studio is a small creative digital agency based in Luxembourg specializing in web development, design, branding, and consulting services. The company positions itself as a success-oriented studio focused on delivering purposeful and targeted results for clients, primarily businesses and organizations seeking digital creative solutions. Their portfolio showcases a variety of projects emphasizing brand identity, UX/UI design, and front-end and back-end development. Technically, the website is built on WordPress with modern tools such as Yoast SEO and GSAP animations, hosted by Infomaniak, a reputable provider. The site demonstrates good mobile optimization, SEO practices, and a professional design, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in compliance and security transparency.

A

Associazione Nazionale Ufficiali Aeronautica

anua.it

58

The Associazione Nazionale Ufficiali Aeronautica (ANUA) is a non-profit organization dedicated to supporting members of the Italian Air Force and promoting their interests. The website serves as an information hub with news, events, and resources for its members and the broader Aeronautica Militare community. It maintains a professional online presence with consistent branding and regularly updated content. Technically, the site is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site is trustworthy and well-maintained, serving its niche audience effectively.

C

Crème fraîche

creme-fraiche.lu

59

Crème fraîche is a Luxembourg-based video contest platform targeting young people aged 12 to 30, focusing on promoting creativity and film-making through organized contests and events. The website provides detailed information about contest editions, winners, and related cultural activities, positioning itself as a niche media and cultural event organizer in Luxembourg. The platform leverages modern web technologies including Drupal 10 and Alpine.js to deliver a responsive and engaging user experience, optimized for mobile devices and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible platform. Overall, the website demonstrates good professionalism and trustworthiness, supported by active social media channels and clear business focus.

F

Festival des Cabanes

cabanes.lu

56

The Festival des Cabanes website represents a youth-focused architecture competition organized in Luxembourg, targeting young people aged 12 to 26. The event is supported by recognized local organizations such as the Service national de la jeunesse and the Ordre des Architectes et Ingénieurs-conseils, positioning it as a niche cultural and educational initiative. The website content is professionally presented, with clear information about the event, its objectives, and timelines, supporting good user engagement and trust. Technically, the site is built on WordPress with modern front-end technologies and is mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is trustworthy and well-suited for its purpose but would benefit from enhanced privacy compliance and security hardening.

Т

ТОВ "АІН"

ain.ua

72

AIN.ua is a leading Ukrainian online media platform specializing in IT, business, startups, and investment news. Established in 1999, it holds a strong market position as the oldest and most trusted media outlet in its niche within Ukraine. The website offers a wide range of content including news articles, analytical reports, interviews, and special projects targeting IT professionals, entrepreneurs, investors, and the broader business community. Its business model primarily revolves around digital publishing supported by advertising and sponsored content. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, Microsoft Clarity for analytics, and Facebook Pixel for marketing. It uses asynchronous loading for performance optimization and is mobile-optimized with good SEO practices. The platform appears to be custom-built without reliance on common CMS platforms, indicating a tailored infrastructure. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and uses several tracking and advertising scripts responsibly. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly declared, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Contact information is limited but includes a feedback email for technical issues. Overall, AIN.ua presents a professional, trustworthy, and content-rich platform with a solid security posture and compliance framework. Strategic recommendations include enhancing security headers, publishing a formal security policy, and expanding contact channels to improve incident response readiness and user trust.

K

Kappa Data

kappadata.eu

68

Kappa Data is a value-added distributor specializing in innovative network connectivity, security, and IoT solutions. Established in 1998 and operating across five countries with 75 employees, the company serves resellers and end customers by providing technical support and knowledge sharing. The website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and providing good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are present, indicating basic GDPR compliance. Overall, the site is trustworthy and well-maintained, supporting the company's regional market position.

I

Ingroup

ingroup.lu

48

Ingroup is a prominent marketing and digital solutions provider based in Luxembourg, operating through multiple specialized brands that offer comprehensive communication, advertising, branding, media, and distribution services. The company positions itself as a major player in the Greater Region, targeting businesses seeking to maximize their visibility and impact through integrated 360° solutions. The website reflects a professional and consistent brand image with clear navigation and regularly updated news content. Technically, the site is built on WordPress with modern plugins and libraries, hosted by OVH, and optimized for mobile and SEO. Security measures include HTTPS, Google reCAPTCHA on contact forms, and a robust cookie consent mechanism, although some security headers and policies could be improved. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

E

Empat.tech

empat.tech

70

Empat.tech is a Ukrainian-based technology company specializing in custom software and mobile app development services, targeting startups and enterprises globally. Established in 2013, the company has completed over 300 projects across 23 markets, serving clients including Fortune 500 companies and Y Combinator alumni. Their service portfolio includes mobile app development, fintech software, product development, and dedicated developer hiring, positioning them as a trusted partner in the technology sector. The website reflects a professional and consistent brand image with strong trust signals such as client testimonials, press mentions, and industry recognitions.

C

Cactus

cactus.lu

58

Cactus is a well-established retail supermarket chain based in Luxembourg, offering a broad range of products including fresh food, household goods, and additional services such as restaurants, home delivery, and customer loyalty programs. The website is professionally designed using Drupal 10 and incorporates modern frontend technologies and analytics tools, indicating a mature digital presence. Security posture is moderate with HTTPS usage and anonymized IP tracking in analytics, but lacks explicit security headers and published privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness from a registration perspective, though the website content and branding strongly suggest a legitimate business. Overall, the site provides a good user experience with clear navigation and mobile optimization.

T

The Lawfare Institute

lawfaremedia.org

69

The Lawfare Institute operates a professional, non-profit multimedia platform dedicated to providing in-depth, non-partisan analysis on national security law and policy. The website offers a rich mix of articles, podcasts, videos, and research projects, positioning itself as a trusted source in its niche. Technically, the site is built on the Sitefinity CMS, leveraging modern JavaScript libraries and CDN hosting to ensure fast, responsive, and accessible user experiences. Security posture is strong with HTTPS enforced and sandboxed embedded content, though some security headers could be improved. Privacy compliance is moderate, with a privacy/support page present but no explicit cookie or terms of service pages detected. Overall, the site demonstrates high professionalism and trustworthiness, supported by its affiliation with the Brookings Institution. WHOIS data is unavailable, likely due to privacy protection, but this is consistent with the organization's profile.