Security Directory

D

DNForum.com

dnforum.com

67

DNForum.com operates as an online community forum and marketplace dedicated to domain name trading, discussions, appraisals, and related services. The platform targets domain investors, buyers, sellers, and industry professionals, offering a structured environment with active user engagement and verified members. The website leverages XenForo forum software and modern web technologies, providing a good user experience with mobile optimization and clear navigation. Security practices include HTTPS enforcement, CSRF protection, and secure cookies, though explicit security headers and policies are not evident. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the active content and community suggest operational legitimacy. Privacy and cookie policies are not found, indicating compliance gaps.

A

Api Restauration

apirecrute.com

71

Api Restauration is a well-established French family-owned company specializing in collective catering services with a large workforce and extensive operations. The website serves as a recruitment portal highlighting company values, history, and employee testimonials. The technical infrastructure is modern, leveraging the Teamtailor platform, with good mobile optimization and video content integration. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is missing, which slightly impacts trust but the website content and branding are professional and consistent.

V

Connexion Visimodif

visimodif.fr

37

The website visimodif.fr serves primarily as an administration login portal for Visimodif, likely related to Visicod.com. The site is minimalistic, focusing on user authentication for internal or administrative users, with no public-facing business descriptions or contact information. The domain is well-established, registered since 2010 with OVH, a reputable French registrar, indicating a stable presence. Technically, the site uses standard web technologies including HTML5, CSS, and JavaScript with jQuery and validation plugins, hosted on OVH infrastructure. Mobile optimization is adequate, but accessibility and SEO features are basic. Security posture is moderate; while client-side validation is implemented, there is no visible HTTPS enforcement or security headers in the provided HTML content, and no advanced security policies or incident response information is available. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is functional but lacks comprehensive security and privacy measures, and public business information is minimal.

I

IPcost

ipcost.com

61

IPcost.com is a specialized online service providing users with detailed information about their public IP addresses, including IPv4 and IPv6 detection, geolocation on a world map, and additional network details such as ISP, ASN, and VPN/proxy detection. The website targets general internet users who need quick and free access to IP-related data, positioning itself as a niche informational tool in the technology sector. The business model is primarily ad-supported, with Google Adsense integrated for monetization. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Leaflet.js library for interactive map rendering. It uses Google Tag Manager and Google Adsense for analytics and advertising. The site is hosted on infrastructure likely provided by Hetzner Online GmbH, inferred from IP geolocation data. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. From a security perspective, the site benefits from HTTPS encryption and domain transfer lock status, enhancing trustworthiness. However, it lacks DNSSEC, explicit security policies, incident response contacts, and a cookie consent mechanism, which are important for compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and privacy compliance are recommended. Overall, IPcost.com is a legitimate, moderately mature service with a solid technical foundation and clear business purpose. Strategic enhancements in privacy compliance, security transparency, and DNS security would improve its risk posture and user trust.

C

CPS Test - Check your clicks per second

cpstest.click

64

The website cpstest.click offers a free online service focused on measuring and training users' mouse click speed, primarily targeting gamers and casual users interested in improving their click rate. The site provides multiple click speed tests, reaction time tests, and related gaming tools, supported by advertising revenue through Google Adsense and related ad services. The content is well structured, multilingual, and optimized for mobile devices, providing a good user experience with clear navigation and relevant gaming-related content. From a technical perspective, the site uses modern web technologies including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and DoubleClick for analytics and advertising. The domain is registered with a reputable registrar and uses Cloudflare DNS, but lacks DNSSEC and explicit security headers, which are areas for improvement. The site is served over HTTPS, ensuring encrypted communication. Security posture is moderate; while HTTPS is enforced and domain transfer protection is enabled, the absence of DNSSEC and security headers reduces the overall security maturity. Privacy compliance is basic, with a privacy policy and terms of service present, but no visible cookie consent mechanism despite use of tracking scripts. Contact information is limited to a contact form with no direct emails or phone numbers, which may affect user trust. Overall, the website is a legitimate, small-scale online gaming utility with a moderate security and privacy posture. Strategic improvements in security headers, DNSSEC implementation, and privacy compliance would enhance trust and security. The site is safe for general audiences with no adult or questionable content detected.

C

Convertall

convertall.com

55

Convertall is a well-established online file conversion service founded in 1999, offering free conversion of various file types including audio, video, images, documents, ebooks, and more. The service emphasizes user privacy by encrypting data with AES-256 and deleting files after conversion, alongside a commitment to eco-friendly operations. The website is professionally designed with excellent content quality and clear navigation, targeting general internet users needing secure and versatile file conversion tools. Technically, the site uses modern JavaScript, is hosted by OVH sas, and employs Cloudflare DNS, with good SSL configuration and fast performance. Security practices include encrypted file transfer and data deletion, but lack DNSSEC and security headers. Privacy compliance is supported by a comprehensive privacy policy and terms of service, though no cookie consent mechanism is present despite use of Google Tag Manager for analytics. Overall, the site is trustworthy and professional with strong business credibility and user trust signals.

I

International Union for Conservation of Nature and Natural Resources

iucnredlist.org

63

The IUCN Red List website represents a globally recognized non-profit organization dedicated to assessing and communicating the conservation status of species worldwide. It serves a diverse audience including researchers, conservationists, policymakers, and the general public. The site offers comprehensive data and resources to support biodiversity conservation efforts and policy development. The organization has a strong market position as the authoritative source for species threat assessments, supported by a broad partnership network and a long history dating back to 1964. Technically, the website employs modern web technologies including HTTPS, JavaScript, and Google Analytics, ensuring good performance, mobile optimization, and accessibility. The infrastructure appears robust with no signs of blocking or WAF interference, and the site uses secure forms with CSRF protection. However, explicit security headers and a cookie consent mechanism could be improved. From a security perspective, the site demonstrates a strong posture with HTTPS enforcement and secure data handling practices. No vulnerabilities or exposed sensitive data were detected. Privacy policies are comprehensive and GDPR compliant, though a visible cookie consent banner is absent. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website is professional, trustworthy, and well-maintained, with high content quality and clear business credibility. Strategic recommendations include enhancing security header implementation, adding a cookie consent mechanism, publishing a vulnerability disclosure policy, and providing incident response contact details to further strengthen trust and compliance.

G

Gravitec.net

gravitec.net

57

Gravitec.net is a technology company specializing in automated web push notification services designed to enhance customer engagement, increase website traffic, and improve user retention. Established in 2016, the company has positioned itself as a market leader with over 40,000 websites and 15,000 companies leveraging its platform. Key services include AI-powered notification content generation, campaign automation, detailed analytics, and seamless integrations with popular platforms such as WooCommerce, Shopify, and WordPress. The technical infrastructure of Gravitec.net is robust, utilizing a modern tech stack with extensive use of JavaScript-based analytics and marketing tools including Google Analytics, Mixpanel, Microsoft Clarity, Hotjar, and Visual Website Optimizer. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Security best practices are observed with HTTPS enforcement, security headers, and CAPTCHA-protected forms, although a dedicated security policy page and incident response contacts are not currently published. From a security perspective, Gravitec.net maintains a strong posture with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. The domain registration data is consistent with the business claims, supporting the legitimacy and trustworthiness of the entity. Overall, Gravitec.net presents a professional, secure, and user-friendly platform with a strong market position in the web push notification space. Strategic recommendations include enhancing transparency with a dedicated security policy, publishing vulnerability disclosure information, and continuous monitoring of third-party scripts to maintain security integrity.

B

Startseite

bne.nrw

50

The website www.bne.nrw serves as the official state portal for Education for Sustainable Development (BNE) in North Rhine-Westphalia, Germany. It provides comprehensive information, news, events, and resources related to sustainable education initiatives supported by the NRW state government. The portal targets educational institutions, sustainability actors, and the general public interested in sustainable development. It is positioned as a trusted government-backed platform facilitating engagement and knowledge sharing in the sustainability education sector. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, and integrates Matomo for privacy-conscious analytics. The site demonstrates good mobile responsiveness, accessibility, and SEO practices. Cookie consent mechanisms are implemented to comply with privacy regulations. However, no explicit security headers were detected in the HTML source, suggesting room for improvement in security hardening. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy protected or unavailable, which is common and justified for this type of government-related portal. The site lacks explicit security policies or incident response contacts, which could be enhanced to improve transparency and readiness. Overall, the website is a well-maintained, professional, and trustworthy portal with strong business credibility and good privacy compliance. Strategic recommendations include implementing security headers, publishing a security policy, and providing explicit security contact information to further strengthen the security posture and user trust.

A

ASEAG

aseag.de

49

ASEAG is the largest mobility service provider in Aachen and the surrounding StädteRegion Aachen, Germany. The company offers comprehensive public transportation services including timetable information, ticket sales, and customer support. The website reflects a well-established public transport business with a clear focus on serving local residents and visitors. ASEAG maintains a strong digital presence with integrated journey planners and departure monitors, leveraging partner services such as auskunft.avv.de. The site is built on TYPO3 CMS and incorporates modern web technologies and analytics tools such as Matomo and Google Tag Manager, ensuring a robust technical infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, ASEAG's website demonstrates professionalism, good user experience, and compliance with privacy regulations, positioning it as a trustworthy and credible transportation service provider.

S

Sparkasse Gelsenkirchen

sparkasse-gelsenkirchen.de

70

Sparkasse Gelsenkirchen operates as a regional financial institution providing a broad range of banking and financial services to private and corporate customers. The website reflects a mature digital presence with comprehensive product offerings including accounts, loans, investments, insurance, and real estate services. The bank holds a strong market position locally, supported by multiple industry awards and a consistent brand image. Technically, the site is built on a modern CMS platform (likely Adobe Experience Manager), with good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

GELSEN-NET Kommunikationsgesellschaft mbH

gelsen-net.de

64

GELSEN-NET Kommunikationsgesellschaft mbH is a regional telecommunications provider based in Gelsenkirchen, Germany, with over 40 years of experience. The company specializes in delivering fiber optic internet, telephony, TV, and tailored IT solutions to private customers, businesses, and the housing industry within the Emscher-Lippe region. Their market position is strong regionally, supported by personalized service and a comprehensive product portfolio. Technically, the website is built on TYPO3 CMS, integrates modern tracking and marketing tools like Google Tag Manager and Ads, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not published. Overall, the website is professional, accessible, and trustworthy, reflecting a mature digital presence aligned with business goals.

M

Meteored

meteored.com

69

Meteored is a weather forecasting service providing worldwide animated weather maps, satellite imagery, radar data, air quality, pollution, and hurricane tracking. The platform targets meteorology enthusiasts and the general public seeking detailed weather information. It offers multi-language support and mobile applications across major platforms, enhancing accessibility and user engagement. The website demonstrates a good level of professionalism with consistent branding and quality content focused on weather services. Technically, the site employs modern web technologies including JavaScript, WebGL, and integrates Google Tag Manager and advertising services. The site is mobile optimized and provides a moderate performance experience. SEO practices are well implemented with appropriate meta tags and structured navigation. From a security perspective, the website enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the trust score. Overall, Meteored presents a reliable and professional weather information service with good technical and privacy compliance. Strategic improvements in domain registration transparency and security policy disclosures would enhance trust and security posture.

T

TFGpl sp. z o.o.

ebutik.pl

70

eButik.pl is a well-established Polish online boutique specializing in women's fashion, offering a broad range of clothing categories including plus size and seasonal collections. The company, TFGpl sp. z o.o., has been operating since 2003, positioning itself as a trusted retailer with a focus on quality, style, and affordability. The website demonstrates strong digital maturity with a modern e-commerce platform (IdoSell Shop), comprehensive privacy and cookie policies, and integration of advanced marketing and analytics tools such as Google Analytics, Facebook Pixel, and TrustMate reviews. Security posture is robust with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the site provides an excellent user experience with mobile optimization and clear navigation, supported by credible business information and positive customer feedback.

W

Westdeutsche Zeitung

wz.de

64

Westdeutsche Zeitung is a German regional news media company providing digital news content through a website that offers both advertising-supported free content and a paid subscription model called WZ+. The website targets a general audience interested in regional and current news. The technical infrastructure includes modern web technologies such as custom web components, web fonts, and Cloudflare for DNS and hosting services. Google Tag Manager is used for analytics and tracking, with a clear consent mechanism for GDPR compliance. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Overall, the site is functional and compliant but could improve in security transparency and technical SEO. The domain WHOIS data shows Cloudflare nameservers but lacks detailed registrant information, which is common but limits full trust assessment. No adult or explicit content is present, making the site safe for general audiences.

S

Sparkasse Krefeld

sparkasse-krefeld.de

69

Sparkasse Krefeld is a regional financial institution in Germany offering a comprehensive range of banking and financial services including online banking, accounts, loans, investments, insurance, and private banking. The website targets both private and corporate customers with a strong emphasis on secure online services and customer support. The site is well-branded, professionally designed, and provides extensive information and navigation options for its users. Technically, the website is built on a modern CMS platform (likely Adobe Experience Manager), uses HTTPS, and includes accessibility and SEO best practices. Security posture is strong with session management, cookie consent, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

Zoofreunde Krefeld e.V. is a well-established non-profit association dedicated to supporting the Krefeld Zoo through memberships, donations, and sponsorship programs. With over 50 years of history, the organization plays a vital role in enhancing animal welfare and zoo infrastructure. The website reflects a professional and consistent brand image, targeting zoo visitors, animal lovers, and local community members interested in supporting the zoo. Technically, the site is built on TYPO3 CMS, hosted via Rheinmedia, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policy and incident response information. The presence of Meta Pixel tracking is disclosed and controlled via consent. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

D

Decathlon Outdoor

decathlon-outdoor.com

56

Decathlon Outdoor operates a digital platform focused on providing free access to thousands of outdoor routes for walking, cycling, and snowshoeing primarily in France and its overseas territories. The platform targets outdoor enthusiasts and tourists seeking detailed itineraries with maps and voice navigation. The website is built using modern JavaScript frameworks such as Nuxt.js and integrates analytics and consent management tools like Amplitude and Didomi, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage implied, but lacks visible security headers and comprehensive privacy policy documentation, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and consistent branding support the platform's legitimacy. Strategic recommendations include enhancing security headers, publishing clear privacy policies, and improving WHOIS transparency to strengthen trust and compliance.

S

Sinsay

sinsay.com

70

Sinsay operates as an international online fashion retailer targeting women, men, and children across 19 countries. The website serves as a country selector landing page, directing users to localized stores. The business model is e-commerce retail with a focus on affordable fashion. The site demonstrates consistent branding and a professional presentation, indicating a mature market presence. Technically, the website employs modern JavaScript frameworks and third-party services such as Cookiebot for consent management, New Relic for monitoring, and Google Tag Manager for analytics. Hosting is provided via Akamai, suggesting a robust content delivery infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, HTTPS is enforced, and a comprehensive cookie consent mechanism is in place, supporting GDPR compliance. However, no explicit security headers were detected in the HTML content, and no direct contact information for security or incident response was found. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the professional appearance and functionality of the site. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, transparency of contact information, and WHOIS data availability would enhance trust and security posture.

Deutsche Tierpark-Gesellschaft e.V. is a German non-profit organization dedicated to supporting and promoting zoological parks and animal parks. The website serves as an informational and engagement platform for zoo visitors, members, and supporters. It offers event information, organizational details, and resources related to zoological parks. The organization operates within a niche non-profit sector with a clear focus on animal parks in Germany. Technically, the website is built on WordPress, utilizing modern web technologies including JavaScript, PHP, and integrations with Google services such as Google Fonts, Google Maps, and YouTube embeds. The site employs a professional cookie consent mechanism compliant with GDPR, and uses plugins like Real Cookie Banner Pro and Formidable Forms to manage privacy and user interactions. Hosting is provided by rzone.de, with appropriate SSL and security headers in place, indicating a good level of technical maturity. From a security perspective, the website enforces HTTPS, implements security headers, and maintains privacy compliance with a clear cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response information, which could enhance trust and preparedness. Overall, the security posture is solid but could benefit from formalized policies and incident response contacts. The overall risk assessment is low, with the website presenting a trustworthy and professional front for the non-profit organization. Strategic recommendations include adding explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party integrations to mitigate potential risks. These steps will strengthen compliance, security posture, and user trust over time.

S

Stadt Wuppertal

wuppertal.de

63

The website www.wuppertal.de serves as the official digital presence of the city government of Wuppertal, Germany. It provides comprehensive information and services related to citizen services, culture, education, economy, tourism, politics, and administration. The site targets residents, tourists, businesses, and cultural enthusiasts, positioning itself as a central hub for municipal information and interaction. The business model is that of a public sector entity delivering government services and information digitally. Technically, the website is built on the Sitepark CMS platform, leveraging modern web technologies including responsive design, SVG icons, and privacy-focused analytics via Matomo. Hosting and DNS are managed through Cloudflare, ensuring performance and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs DNSSEC, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and minimal user tracking. However, explicit security policies and incident response contacts are not prominently available, which could be improved. Overall, the website reflects a mature digital infrastructure appropriate for a large municipal government entity. It balances user experience, privacy, and security effectively, supporting its role as a trusted source of official information and services.

I

InPost sp. z o.o.

inpost.pl

71

InPost sp. z o.o. operates a comprehensive parcel delivery and logistics platform primarily serving individual customers and businesses in Poland. The company is a market leader in parcel lockers (Paczkomat®) and courier services, offering a wide range of shipping options including international shipments and fulfillment services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses Drupal CMS, integrates Google Tag Manager and Didomi for consent management, and employs modern JavaScript frameworks. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data confirms domain legitimacy and long-term operation since 2006. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

U

Réducteur de lien / Minimiseur d'URL [Raccourcir un lien]

urlz.fr

9

URLz.fr is a French-language URL shortening service established in 2011, providing users with a free tool to reduce long URLs for easier sharing on social media platforms. The website monetizes through multiple advertising networks and integrates a consent management platform to comply with GDPR requirements. The technical infrastructure includes Cloudflare DNS, OVH hosting, and various third-party ad and tracking scripts, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks explicit security headers and formal security policies. Privacy compliance is basic, with no dedicated privacy or terms of service pages found. Overall, the site is functional and moderately trustworthy but would benefit from enhanced transparency and security hardening.

P

Pulsor Agency

pulsor.agency

58

Pulsor Agency is a specialized digital agency focused on creating world-class, data-driven landing pages tailored for unique projects. The website presents a professional and modern design, emphasizing high perceived value and client testimonials to establish credibility. The agency targets businesses or individuals seeking premium landing page solutions, positioning itself as a premium service provider in the technology sector. Technically, the site leverages Webflow CMS, GSAP animations, and Swiper.js for interactive content, hosted likely on Webflow's infrastructure, delivering fast performance and good mobile optimization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and no privacy or cookie policies are present, which is a compliance gap. The WHOIS data is unavailable or malformed, limiting domain trust analysis and reducing overall legitimacy score. Tracking is implemented via Humblytics, but no consent mechanism is evident. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.

This website is a Cloudflare Access login portal for NerdWallet's staging environment, designed to provide secure authentication for authorized users via Okta SSO. The page itself contains minimal content, primarily focused on user login and identity verification, with no public-facing business information or marketing content. The technical infrastructure leverages Cloudflare's security platform and Okta's identity management, indicating a mature approach to access control and user authentication. However, the lack of publicly accessible content, privacy policies, or contact information limits the ability to fully assess the business or compliance posture from this page alone. Security is strong due to enforced HTTPS and integration with trusted identity providers, but the page is effectively blocked to unauthorized users, restricting content visibility and SEO benefits.

V

Visicod

visicod.com

60

Visicod is a French digital communication agency specializing in bespoke website creation, SEO and SEA services, and personalized client support. Established since 2008, it serves artisans, small and medium enterprises across France with a focus on clear, effective digital solutions. The website demonstrates a professional and modern digital presence with strong client testimonials and transparent service offerings. Technically, the site uses modern web technologies, includes cookie consent mechanisms, and integrates Google Analytics for performance tracking. Security posture is good with HTTPS and privacy compliance, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection or recent registration, but the website content and structure indicate a legitimate and trustworthy business. Overall, Visicod presents a credible and professional digital agency profile with room for minor technical security enhancements.

P

Pilsner Urquell

pilsner-urquell.cz

46

Pilsner Urquell is a historic and well-established beer brand originating from the Czech Republic, with a founding year of 1842. The website serves as a marketing and informational platform targeting adult consumers, enforcing strict age verification to comply with legal requirements for alcohol promotion. The brand maintains a consistent and professional online presence with clear branding and user engagement features such as cookie consent and analytics tracking. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel, ensuring effective marketing and user behavior analysis. The website is secured with HTTPS and includes mechanisms to protect underage users from accessing restricted content. However, the absence of WHOIS data and lack of explicit security and incident response policies represent gaps in transparency and security posture. Overall, the site is professionally designed and functional, but could improve in areas of security documentation and contact availability.

The website carsat-sudest.fr is a regional portal for CNAV, the French national social security organization responsible for retirement insurance for salaried workers. The domain is legitimately registered to CNAV since 2010, reflecting a well-established government entity. However, the website content is currently inaccessible, presenting only a 400 Bad Request error page citing an 'Unknown locale' issue. This prevents any meaningful user interaction or access to services. The site lacks privacy, cookie, or terms of service policies, and no contact information or external links are present in the provided HTML content. Technically, the site uses basic HTML, CSS, and JavaScript but shows no evidence of modern frameworks, CMS, or security headers. The meta robots tag forbids indexing, further limiting visibility.

W

WEBHOUSE, s.r.o.

brandyszamek.cz

47

Zámek Brandýs nad Labem is a cultural heritage site and tourist attraction located in the Czech Republic, showcasing Renaissance architecture and historical significance related to the Habsburg dynasty. The website serves as an informational and promotional platform offering details on tours, events, weddings, and ticketing. The business operates primarily in the hospitality and government sectors, targeting tourists and visitors interested in history and culture. The domain is well-established since 2008, supporting the site's credibility. Technically, the website uses a CMS platform called Vismo, with standard web technologies including HTML5, CSS, and JavaScript. It incorporates Google Translate for multilingual support but lacks advanced performance optimizations and accessibility features. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and good content quality. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies exist but are basic and lack active consent mechanisms. Contact information is comprehensive, enhancing trustworthiness. No incident response or security policy pages were found. Overall, the website is safe, professional, and trustworthy, with a moderate security posture and good business credibility. Recommendations include enhancing security headers, implementing cookie consent, and improving privacy disclosures to align with best practices and GDPR compliance.

NOVA Performance Paragliders is a well-established manufacturer specializing in innovative performance paragliders since 1989. The company holds a strong market position in the transportation and outdoor sports manufacturing sector, offering a wide range of certified paragliding equipment including gliders, harnesses, parachutes, and accessories. Their website reflects a professional and consistent brand image with comprehensive product information and certifications, targeting paragliding enthusiasts and pilots globally. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as JavaScript and SVG graphics. It demonstrates good mobile optimization, SEO practices, and a cookie consent mechanism, indicating a mature digital presence. However, some security best practices like HTTP security headers and explicit incident response contacts are not evident. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR. The risk level is low, but improvements in security headers and incident response transparency are recommended to enhance security posture and trust further.

Deník N operates as a reputable Czech news media outlet providing fast and reliable news updates across various categories including politics, economy, culture, and sports. The website demonstrates a solid market position within the Czech Republic's media landscape, targeting a general audience interested in current affairs. Technically, the site leverages modern web technologies such as React and integrates privacy and advertising SDKs to manage user consent and deliver personalized content. The presence of HTTPS and security headers indicates a good security posture, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service reduces overall compliance confidence. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy transparency and security documentation.

M

Mega Fitness

mega-fitness.eu

54

Mega Fitness is a small fitness club located in Prague, Czech Republic, offering personal training, nutrition planning, and body diagnostics. The business operates in a local market with a family-friendly atmosphere and provides a fully equipped gym facility. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. Contact information is clearly presented, supporting business credibility. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy and security practices.

W

wowyup

wowyup.agency

45

The website wowyup.agency represents a small digital agency offering services such as digital marketing, product photography, and web presentations. The site is minimalistic with limited content and lacks detailed business or contact information, which constrains its market positioning and trust signals. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, jQuery, Bootstrap, and some animation libraries like Velocity.js and PhotoSwipe for galleries. However, the site lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak due to absence of visible security headers and no evidence of HTTPS enforcement from the provided data. Privacy and cookie policies are missing, and no contact or incident response information is available, which impacts compliance and user trust. WHOIS data is privacy protected by Identity Digital, which is common for small agencies but limits transparency. Overall, the site is functional but basic, with room for significant improvements in security, compliance, and business credibility.

G

Groupe JVS

groupe-jvs.fr

48

Groupe JVS is a French software publishing group specializing in IT solutions for public sector organizations, particularly local and territorial collectivities. With over 40 years of experience, the group operates through five subsidiaries offering tailored software and digital services to facilitate the digital transformation of public services. Their market position is solid within the French public sector, supported by a network of 14 regional agencies and a portfolio of innovative solutions aimed at improving citizen engagement and administrative efficiency. Technically, the website is built on Drupal CMS and integrates modern analytics and marketing tools such as Matomo and HubSpot. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a notable concern, reducing the overall trust score despite the professional appearance and business legitimacy of the site. Overall, Groupe JVS presents a professional and credible digital presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details to ensure ongoing trustworthiness.

M

MerchantPro

merchantpro.com

66

MerchantPro is a SaaS eCommerce platform provider offering a comprehensive suite of tools for merchants to create, manage, and grow online shops and marketplaces. With over 15 years of experience and more than 5000 merchants worldwide, the company positions itself as a stable and scalable solution for businesses of all sizes. The website reflects a professional and modern digital presence, emphasizing performance, security, and customer support. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and LinkedIn Insight for analytics and marketing, with responsive design and good SEO practices. Security posture is solid with HTTPS and secure cookie settings, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, but no direct company contact emails or phone numbers are provided, relying instead on contact forms and social media channels.

L

LadyGeekGeek Web Design

ladygeekgeek.com

34

LadyGeekGeek Web Design is a small freelance web design business based in Holywood and Belfast, Northern Ireland, specializing in bespoke, accessible, and responsive WordPress websites. The company has a strong market position serving local and international clients, including notable organizations such as Queen's University Belfast and Belfast Film Festival. The website showcases a professional portfolio and detailed service offerings, emphasizing user experience and content strategy. Technically, the site is built on WordPress, hosted by BigWetFish, and optimized for performance, mobile responsiveness, and accessibility. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

L

L'aéronef

aeronef.fr

59

L'aéronef is a non-profit cultural association based in Lille, France, specializing in organizing concerts and music-related cultural projects. Established in 2016, it holds a reputable position in the regional cultural scene, supported by partnerships with governmental and cultural institutions. The website serves as a platform for event promotion and ticketing, targeting a general audience interested in music and culture. Technically, the site is built on Drupal 11, employs Matomo for analytics, and uses modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and token-based ticketing, though explicit security policies and cookie consent mechanisms are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and privacy mechanisms are recommended.

T

TPF Consultores

tpf.pt

51

TPF Consultores is a well-established Portuguese consulting company specializing in project design and supervision, primarily in the energy and transportation sectors. With over 45 years of experience and a significant workforce, the company positions itself as a leader in infrastructure consulting and project management. Their website reflects a professional and consistent brand image, targeting business and public sector clients internationally. Technically, the website employs modern web technologies and tracking tools, including Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and some recommended security headers, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

Libuše Dlabola Pražáková is an artist based in Semily, Czech Republic, showcasing her paintings and art cycles through a professionally designed portfolio website. The site targets art enthusiasts and potential collectors, providing a clear presentation of her work and contact details for inquiries. The business model is focused on promotion and potential sales of artwork, with a niche local/regional market position. Technically, the website uses Materialize CSS framework, Google Fonts, and Material Icons, delivering a responsive and visually appealing experience. The site performs moderately well with good mobile optimization and basic accessibility features. However, there is no detected CMS or hosting provider information, and no advanced technical frameworks are used. From a security perspective, the site lacks important security headers and privacy-related policies, which lowers its security posture. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the legitimate content and contact information. No forms or tracking scripts are present, minimizing data collection risks but also indicating limited user engagement features. Overall, the website is a good quality artist portfolio with moderate technical maturity and low security compliance. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

S

Sharp Type

sharptype.co

67

Sharp Type is a specialized global digital type foundry offering custom and retail typefaces for various design applications including print, digital, and environmental design. The company targets designers, brands, and publications seeking high-quality and multiscript font solutions. The website demonstrates a mature technical infrastructure built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the website presents a professional and trustworthy digital presence with a high level of content quality and user experience.

K

KOMETA

kometa.xyz

64

KOMETA is an independent type design studio specializing in progressive retail and custom typefaces. Founded in 2022, the company operates a professionally designed website showcasing their retail font collections and bespoke typography services. The target audience includes designers, studios, and brands seeking unique and expressive fonts. The business model focuses on retail font sales and custom typography projects, positioning KOMETA as a niche player in the type foundry market. Technically, the website is built using modern frameworks such as Nuxt.js and is hosted via Cloudflare, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain registrar protections, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

C

Cargo

cargocollective.com

61

Cargo is a technology company operating a site builder platform tailored for designers and artists. The platform focuses on enabling creatives to showcase their work and connect with potential clients and peers. The business operates in a niche market segment with a clear target audience and offers key services including site building tools, templates, and a community network. The website is professionally designed with good content relevance and user experience, although it lacks explicit privacy and cookie policies. Technically, the site uses modern JavaScript frameworks, including React, and is hosted on Amazon AWS infrastructure. Analytics and advertising tools such as Google Tag Manager and Reddit Ads Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Overall, the site is legitimate and functional but could improve compliance and security transparency.

Z

Zlatá Firma

zlatafirma.eu

58

Zlatá Firma is a Slovak business award platform recognizing top-rated companies based on customer reviews aggregated from reliable sources such as Google Maps and Facebook. The platform promotes these companies by listing them and allowing them to use the Zlatá Firma logo and marketing packages. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its target audience of Slovak businesses and customers. Technically, the site uses modern JavaScript and Google Tag Manager for analytics and marketing, with HTTPS enforced ensuring secure communications. However, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced privacy compliance. The WHOIS data is privacy protected by EURid, which is typical for EU domains, and no suspicious patterns were detected, supporting the legitimacy of the domain. Overall, the site presents a moderate to good security posture with room for improvement in privacy and security best practices.

A

ara shoes

ara-shoes.sk

49

ara shoes operates an official e-commerce platform specializing in premium women's footwear and accessories in the Czech Republic. The website showcases a well-structured product catalog with clear branding and a focus on quality and customer convenience, including free shipping and in-store pickup options. Technically, the site is built on PrestaShop with modern frontend technologies and includes structured data for SEO benefits. Security measures include HTTPS and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is addressed through a cookie consent banner and a basic cookie policy page. However, the absence of WHOIS data and explicit contact information limits full trust assessment. Overall, the site presents a professional and functional online retail experience with moderate technical and security maturity.

L

Lee Cooper

leecooper.com

64

Lee Cooper is a historic British denim brand with a legacy dating back to 1908. The website presents the brand's heritage and identity but is hosted on the Wix platform with minimal content and lacks critical business and security information. The technical infrastructure relies on Wix's CMS and standard web technologies but includes suspicious external scripts from unknown domains, raising potential security concerns. The absence of WHOIS registration data for the domain www.leecooper.com is a significant red flag, suggesting possible domain registration issues or privacy obfuscation. Security posture is basic with no advanced headers or policies detected, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site appears functional for brand marketing but requires improvements in security, compliance, and legitimacy transparency.

C

CAPRICE

capriceshoes.com

63

CAPRICE is an established international footwear retail brand operating an e-commerce platform targeting primarily women and men interested in fashionable shoes and accessories. The website is built on a modern e-commerce platform (Salesforce Commerce Cloud) and supports multiple country and language versions, indicating a mature digital presence. The site offers a wide range of products including seasonal collections and innovative footwear technologies. Technically, the site uses modern JavaScript libraries, tag management, and A/B testing tools, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is basic with a cookie consent banner but lacks visible privacy and terms of service pages. Overall, the site is professional and trustworthy with moderate tracking and analytics in place.

T

Tamaris

tamaris.com

61

Tamaris.com is the official online shop for the Tamaris brand, specializing in women's shoes, handbags, and jewellery. The website targets fashion-conscious women primarily in Finland and other European markets. It operates on a mature e-commerce platform (Salesforce Commerce Cloud) with a comprehensive product catalog and user-friendly navigation. The site integrates multiple marketing and analytics tools to enhance customer engagement and conversion. Security measures such as HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms are in place, though DNSSEC is not enabled, representing a minor security gap. The domain's WHOIS data confirms a long-standing and legitimate presence since 1999, reinforcing trust in the brand.

S

Sempleo Corporate

sempleo.com

67

Sempleo Corporate is a French web agency specializing in affordable turnkey website creation services primarily targeting small municipalities, associations, and small businesses. Founded in 1995, the company offers subscription-based web packages starting at 15€/month, emphasizing simplicity, all-inclusive support, and French-based solutions. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web technologies including Bootstrap, Firebase, and Matomo analytics, with a strong focus on privacy compliance through explicit cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though lacking explicit security policies or incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business content and trust indicators suggest a legitimate operation. Strategic recommendations include enhancing security headers, publishing incident response information, and improving domain registration transparency.

D

Danscentrum Sverige

danscentrum.se

7

Danscentrum Sverige is a specialized expert organization focused on the professional dance sector in Sweden. The organization engages in national and international projects, collaborations, and networks to improve working conditions, infrastructure, and understanding of the art form. The website is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard polyfills for compatibility. The technical infrastructure is moderate in performance and mobile optimization, but lacks advanced SEO and accessibility features. Security posture is weak due to missing security headers, absence of privacy and cookie policies, and no visible contact information for security incidents. The domain WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the website presents professional content but requires improvements in security, privacy compliance, and business credibility to enhance trust and compliance.

The website etreassociazione.it is currently inaccessible beyond a security challenge page that performs browser integrity checks and automatic redirects. The domain is registered since 2009 with DNSSEC enabled, indicating a legitimate registration. However, the website content is minimal and outdated, referencing legacy CMS versions Joomla 1.5 and WordPress 2.5, which are known to have multiple security vulnerabilities. No business, contact, or policy information is visible, limiting the ability to assess the company's operations or compliance posture. The presence of a BitNinja.IO security check suggests some level of protection against attacks, but the lack of updated software and visible policies is a concern. Overall, the website's technical infrastructure appears dated and the user experience is poor due to the blocking mechanism.