Security Directory

Trupanion is a leading pet insurance provider specializing in comprehensive medical coverage for dogs and cats across the United States, Canada, and Puerto Rico. The company emphasizes unlimited payouts, direct payment to veterinarians at checkout, and coverage for hereditary and chronic conditions. Their market position is strong, supported by veterinarian endorsements and a large member base. The website is professionally designed, mobile-optimized, and rich in relevant content, providing a seamless user experience with clear navigation and trust signals such as customer testimonials and third-party reviews. Technically, the website employs modern technologies including Bootstrap, jQuery, Google Tag Manager, Optimizely for A/B testing, and Osano for consent management, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not clearly disclosed. The WHOIS data is unavailable or privacy protected, which reduces transparency regarding domain ownership and registration details. Despite this, the website's content quality, external trust signals, and professional presentation support its legitimacy. Overall, the site demonstrates a strong security and privacy compliance posture with room for improvement in explicit security disclosures and WHOIS transparency.

A

Aflac Medicare Supplement

aflacmedicaresupplement.com

73

The website www.aflacmedicaresupplement.com represents a Medicare Supplement insurance offering underwritten by Tier One Insurance Company, a subsidiary of Aflac Incorporated, and administered by Aetna Life Insurance Company. It targets Medicare beneficiaries seeking supplemental insurance to cover gaps in Original Medicare. The site provides quote request forms, prominently displays contact phone numbers, and uses trusted branding and official Medicare resources. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response information are absent. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and affiliation with reputable insurance entities. Overall, the site is functional, professional, and trustworthy from a user perspective but requires verification of domain registration to fully confirm legitimacy.

F

Fondation ICAM

fondation-feron-vrau-icam.fr

53

The Fondation Feron-Vrau is a well-established non-profit foundation based in France, dedicated to supporting students of the Icam engineering school through financing honor loans and backing educational and campus development projects. With over 40 years of history, it plays a critical role in fostering solidarity and diversity within the Icam community. The website reflects a professional and consistent brand image, targeting students, alumni, donors, and educational partners. Technically, the site is built on WordPress with modern libraries and analytics tools, showing good digital maturity and mobile optimization. Security posture is strong with HTTPS and consent management, though some security headers and explicit policies could be enhanced. Overall, the foundation's online presence is trustworthy and compliant with GDPR, supporting its mission effectively.

I

Institut des Techniques d'Ingénieur de l'Industrie d'Alsace

itii-alsace.fr

51

ITII Alsace is a specialized educational institute focused on training engineers for the industrial sector in the Alsace region of France. The website offers detailed information on apprenticeship programs for young people under 30, continuing education for salaried employees, and training services for companies. The business model revolves around providing industry-relevant educational services and facilitating apprenticeships. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Technical infrastructure includes modern web technologies and integration with Google Analytics and Tag Manager for analytics and marketing. From a security perspective, the website enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust verification, but the professional content and social media presence support legitimacy. Privacy and terms of service pages are not clearly found, indicating room for improvement in compliance. Overall, ITII Alsace presents a credible and professional online presence suitable for its educational mission. Strategic recommendations include enhancing security headers, publishing clear privacy and terms policies, and performing regular security audits to maintain compliance and trust.

Ö

Österbottens välfärdsområde

osterbottensvalfard.fi

66

Österbottens välfärdsområde is a regional government welfare organization in Finland providing comprehensive health, social, psychosocial, and emergency services to the Ostrobothnia region. The website serves as a digital portal offering access to various services including digital appointment booking, social welfare guidance, and emergency contacts. The organization is positioned as a key public sector entity with a strong regional presence and a focus on accessible, user-friendly digital services. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, ReadSpeaker for accessibility, and an embedded chatbot for user assistance. The site is well-optimized for mobile and accessibility standards, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure practices. Overall, the domain registration data aligns well with the website's identity, indicating a legitimate and trustworthy entity. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain security and compliance.

D

DAF

dafshop.com

54

DAFshop.com is the official online merchandise store for DAF Trucks, a subsidiary of PACCAR. The website offers a range of branded products including clothing, accessories, and miniatures targeted primarily at truck drivers and DAF enthusiasts in the Benelux and European markets. The site is built on Magento 1.9.4.5, integrating various marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot forms, reflecting a mature digital marketing approach. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some modern security headers and uses an older Magento version which may pose risks if not fully patched. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site’s branding and content align with official DAF and PACCAR identities. Overall, the site presents a professional e-commerce platform with good user experience and privacy compliance, but would benefit from technical and security updates to enhance trust and resilience.

D

DAF Components

dafcomponents.com

67

DAF Components is a prominent supplier of powertrain components including engines, axles, and cabs, serving manufacturers of coaches, buses, and industrial vehicles globally. As part of the DAF Trucks group, it benefits from strong brand recognition and a comprehensive service network. The website reflects a professional corporate presence with rich content, multimedia, and clear navigation, targeting industry professionals and partners. Technically, the site employs modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. The lack of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given the strong brand and external link consistency. Overall, the site is well-structured, compliant, and trustworthy, supporting DAF Components' market position.

D

DAF bodybuilder information

dafbbi.com

69

DAF Bodybuilder Information is a specialized B2B portal providing essential technical and order-specific information for bodybuilders working with DAF trucks. It is part of the PACCAR group, a major player in the transportation industry. The website offers a suite of resources including specification sheets, 3D models, chassis drawings, and bodybuilder guidelines, targeting professional users in the truck manufacturing and modification sector. The site is well-branded, consistent with PACCAR and DAF corporate identity, and provides multilingual support.

D

DAF Used Trucks

dafusedtrucks.com

74

DAF Used Trucks operates as a professional platform offering used trucks with a focus on quality, expert service, and a one-year guarantee. The website targets businesses and fleet operators seeking reliable used vehicles. The platform is well-designed, mobile-optimized, and provides advanced filtering options to assist customers in finding suitable trucks. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Sitecore Cloud infrastructure, and integrates privacy compliance tools like OneTrust and analytics via Google Tag Manager and Google Analytics. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy despite the professional appearance and branding consistency of the website.

D

DAF Trucks N.V.

daf.com

69

DAF Trucks N.V. is a prominent European commercial vehicle manufacturer specializing in a comprehensive range of trucks including the DAF Euro 6 XF, CF, and LF series. As a wholly-owned subsidiary of PACCAR Inc., DAF maintains a strong market position with extensive dealer networks and related services such as used trucks sales, bodybuilder information, and component supply. The website reflects a mature digital presence with professional design, clear navigation, and localized market sites for global reach. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent management, indicating a commitment to privacy compliance and user experience. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could enhance its posture. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response contacts on the landing page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or protected, which is common for large enterprises but slightly reduces transparency. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security incidents.

P

PROBO-NB s.r.o.

probo-nb.cz

53

PROBO-NB s.r.o. operates a specialized e-commerce website focused on providing firefighting and safety equipment primarily to active firefighters and related professionals. The company positions itself as a niche supplier with a broad product range including protective clothing, firefighting tools, and technical devices. The website is professionally designed, mobile-optimized, and offers clear navigation and product information, supporting a positive user experience. Technically, the site leverages a custom e-commerce platform (BSSHOP), integrates Google Analytics and Tag Manager for tracking, and uses modern web technologies including JavaScript and jQuery. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not evident. The absence of WHOIS data limits domain trust verification, but the presence of clear contact information and privacy policies supports business credibility. Overall, the site is functional, secure, and compliant with GDPR, serving a well-defined market segment effectively.

K

KOBIT - THZ

kobit-thz.cz

57

KOBIT - THZ is a traditional Czech manufacturer specializing in the development and production of firefighting technology, including custom firefighting vehicle superstructures and accessories. The company operates as part of the KOBIT Holding group, indicating a stable industrial backing. Their website presents a professional image with clear business descriptions, contact information, and active social media channels. Technically, the site is built on the EasyWeb CMS platform, uses common web technologies such as jQuery and Font Awesome, and integrates Google Analytics and Tag Manager for tracking. However, the absence of WHOIS data and missing privacy and terms of service policies indicate gaps in transparency and compliance. Security posture is moderate with cookie consent implemented but lacking visible security headers and unknown SSL configuration. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance documentation.

T

TENTino.cz e-shop

tentino.cz

59

TENTino.cz is a Czech Republic based e-commerce business specializing in the manufacture and sale of professional party tents, folding tables, chairs, and tablecloths. The website targets customers seeking durable and versatile event equipment, positioning itself as a specialized provider with a broad selection of sizes and colors. The platform is built on the Shoptet e-commerce system and integrates multiple modern analytics and marketing technologies, including Google Analytics, Microsoft Clarity, and Facebook Pixel, with a consent management mechanism in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and contact information are lacking. The absence of publicly available WHOIS data suggests privacy protection, which is typical for small businesses but slightly impacts trust. Overall, the site presents a professional and trustworthy e-commerce presence with room for improvement in transparency and privacy documentation.

A

AutoEder s.r.o.

autoeder.cz

54

AutoEder s.r.o. operates as a reputable automotive dealership specializing in Toyota and Lexus vehicles, offering new and used cars, authorized servicing, financing, leasing, and additional automotive services primarily in the Czech Republic. The company maintains a strong market position with a professional online presence, targeting car buyers and owners seeking premium automotive brands. The website demonstrates a mature digital infrastructure built on WordPress, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, alongside comprehensive cookie consent management to ensure GDPR compliance. Security measures include HTTPS enforcement, reCAPTCHA on forms, and security headers, contributing to a robust security posture. However, the absence of publicly available WHOIS data and a formal security policy page limits full trust verification. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, supporting the company's credibility and customer engagement.

T

Teijin Aramid

teijinaramid.com

71

Teijin Aramid is a prominent manufacturer specializing in sustainable, high-performance aramid fibers and materials. The company positions itself as a leader in innovation and sustainability within the manufacturing sector, targeting industrial and business clients. The website reflects a professional B2B business model with a focus on sustainability and advanced material solutions. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Hotjar, Facebook Pixel, and Piwik PRO, indicating a mature digital infrastructure. The presence of a comprehensive cookie consent mechanism demonstrates attention to privacy compliance, although explicit privacy and terms of service policies were not detected in the provided content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but the lack of WHOIS data raises some concerns about domain registration transparency.

S

SKYMAN.CZ

skyman.cz

50

SKYMAN.CZ is a specialized e-commerce retailer focused on providing equipment for arboriculture, height work, and rescue climbing. The company offers a range of products including ropes, harnesses, helmets, winches, and distributes Castellari products. With over 20 years of experience, SKYMAN.CZ positions itself as a trusted provider in its niche market, also offering training and courses related to professional rope access and rescue techniques. The website is primarily in Czech with multilingual support, targeting professionals and enthusiasts in the vertical movement and arborist sectors. Technically, the website is built on the Upgates e-commerce platform and integrates modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and Ecomail tracking. It also features live chat support via SupportBox and an AI chatbot from Sensbot. The site is mobile-optimized and demonstrates good SEO practices, although explicit privacy and terms of service pages are not found. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small specialized retailers. Overall, SKYMAN.CZ presents a professional and trustworthy online presence with a solid technical foundation and marketing integration. To enhance trust and compliance, the company should consider publishing clear privacy and terms of service documents and improving security header implementation.

3

3MON Rescue

3monrescue.cz

52

3MON Rescue is a specialized company focused on fire protection, fire detection, and electromobility safety solutions primarily serving businesses and rescue organizations. Their innovative FireTec Concept positions them as a niche provider in the energy and transportation safety sectors within the Czech Republic. The website reflects a professional and consistent brand presence with clear targeting of firms and emergency responders. Technically, the site is built on WordPress with modern plugins and tracking tools like Google Tag Manager, offering moderate performance and good mobile optimization. However, the absence of WHOIS data limits domain legitimacy verification, and no explicit privacy or cookie policies were found, which impacts compliance posture. Security headers are not detected, suggesting room for improvement in security hardening. Overall, the site is accessible and safe, with no adult or questionable content detected.

M

Mototruck S.R.O.

mototruck.cz

46

Mototruck S.R.O. is a specialized manufacturer of fire-fighting vehicles catering to professional and volunteer fire protection units primarily in Central Europe. The company offers a range of light, medium, heavy, and special fire-fighting vehicles built on chassis from globally recognized brands. Their market position is niche but well-defined, focusing on quality and customization to meet demanding client requirements. The website is multilingual, targeting Czech, Polish, German, Spanish, Russian, and English-speaking audiences, reflecting a regional focus with international reach. Technically, the website is built on Joomla CMS with modern JavaScript libraries such as jQuery and plugins for enhanced user experience like Vegas slideshow and WOW.js animations. Google Tag Manager and Google reCAPTCHA are integrated for analytics and security respectively. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA on its contact form, reducing spam risks. However, it lacks advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security posture. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and contact information support its authenticity. Overall, the website presents a professional and trustworthy front for Mototruck S.R.O., with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, and ensuring regular CMS updates to mitigate vulnerabilities.

P

Pavliš a Hartmann, spol. s r.o.

phhp.cz

44

Pavliš a Hartmann, spol. s r.o. is a traditional Czech manufacturer specializing in firefighting and fire safety equipment, including hydrant systems, motor pumps, fire hoses, and related accessories. The company operates an e-commerce platform targeting firefighting professionals and rescue services primarily in the Czech Republic and Slovakia, with international customers as well. Their market position is that of an established medium-sized manufacturer with a strong local presence and growing international reach. Technically, the website employs modern web technologies such as Google Tag Manager, Bootstrap, and a proprietary CMS, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is addressed with accessible privacy and cookie policies, though GDPR compliance could be enhanced with more transparency. Overall, the website is professional, trustworthy, and well-maintained, but the lack of WHOIS data and some security best practices slightly reduce the trust score.

P

Požární bezpečnost s.r.o.

vyzbrojna.cz

59

Požární bezpečnost s.r.o. operates the largest e-commerce platform in the Czech Republic specializing in firefighting equipment, protective gear, and related safety products. The company targets firefighters, rescue services, and safety professionals primarily in the Czech and Slovak markets. Their business model focuses on online retail complemented by services such as outsourcing fire protection and safety management, equipment servicing, and technical engineering support. The website reflects a mature business with a strong market position and a comprehensive product catalog.

F

Front AI

rechanneld.com

60

Rechanneld is a product offered by Front AI, specializing in AI-assisted customer service channel management. The company operates primarily in the Nordic region, providing automated 24/7 customer service solutions with a strong focus on conversational AI. Their market position is solidified by multiple successful projects and a high customer satisfaction score (NPS97). The website presents a professional and consistent brand image, targeting businesses seeking to optimize their customer service channels through AI-driven strategies and tools. The business model is subscription-based SaaS with tiered offerings suitable for small to enterprise-level clients. Technically, the website is built on WordPress with modern SEO and analytics integrations including Yoast SEO, Google Tag Manager, and ActiveCampaign. Hosting appears to be on AWS infrastructure. The site is mobile-optimized and performs moderately well, though some accessibility features are basic. Security posture is good with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a privacy policy linked on the parent company domain, but no cookie consent mechanism is present. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, improvements are recommended in DNS security, security headers, and incident response transparency. No contact emails or phone numbers are explicitly provided on the site, which may affect user trust and support accessibility. Overall, the site is professional and trustworthy with room for enhancement in privacy and security practices. The risk level is moderate-low with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing cookie consent, enhancing DNS security, publishing security policies, and improving contact information availability to strengthen trust and compliance.

M

Mostbet

mostbet-czech.bet

53

Mostbet Česká republika is an online gambling platform licensed under Curaçao jurisdiction, offering a wide range of services including sports betting, online casino games, poker, and esports betting. The platform targets Czech players with localized content, multiple language support, and generous bonus programs. The business model revolves around attracting and retaining players through bonuses, loyalty programs, and mobile applications for Android and iOS. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a moderate to high level of business credibility. Technically, the website is built on WordPress with modern technologies such as FontAwesome and Google Tag Manager for analytics. It supports mobile platforms well and includes structured data for SEO. Performance is moderate with good accessibility and SEO optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though some security headers are missing and no explicit security or incident response policies are published. The domain WHOIS data is limited due to unsupported TLD WHOIS and privacy protection, but the domain expiry date is valid and recent, supporting legitimacy. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Privacy compliance is basic with no explicit privacy or cookie policies found, which is a notable gap. Overall, Mostbet Czech Republic presents a legitimate and professional gambling service with room for improvement in privacy compliance and security header implementation. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and establishing clear incident response contacts to improve trust and compliance.

U

ui42 s.r.o

ui42.sk

56

ui42 s.r.o is a well-established Slovak marketing and digital agency with approximately 28 years of experience, offering comprehensive online business solutions. The company positions itself as a one-stop shop for digital marketing services, targeting businesses seeking to enhance their online presence and marketing effectiveness. Their website reflects a professional and consistent brand image, supported by structured data and social media presence on Facebook and Instagram. Technically, the website employs modern tools such as Google Tag Manager, Cookiebot for GDPR compliance, Matomo, and Hotjar for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses reCAPTCHA for bot protection, with room for improvement in explicit security headers. Overall, the website is accessible, well-structured, and compliant with privacy regulations, though explicit contact information and terms of service pages are not readily found in the analyzed content.

O

Osobnyudaj.sk

osobnyudaj.sk

55

Osobnyudaj.sk is a Slovakian service provider specializing in GDPR compliance and cybersecurity consulting, targeting businesses and organizations within Slovakia. The company positions itself as a trusted partner with over 13,000 satisfied clients, offering scalable services and AI-powered advisory tools to help clients navigate data protection requirements effectively. The website reflects a professional and consistent brand image with a focus on data protection and digital security services. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern tracking and analytics tools such as Google Analytics and PixelYourSite integrated. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security-wise, the website enforces HTTPS and includes cookie consent mechanisms, but lacks explicit privacy policy and terms of service pages, which are recommended for full compliance and transparency. No critical vulnerabilities or suspicious indicators were detected, and WHOIS data aligns well with the business claims, supporting domain legitimacy. Overall, Osobnyudaj.sk demonstrates a solid digital presence with room for improvement in privacy disclosures and contact transparency.

P

Proemion

proemion.com

57

Proemion is a specialized technology company focused on telematics solutions for mobile machines and industrial assets. Their offerings include hardware gateways, cloud platforms, and analytics tools designed to provide real-time monitoring and predictive insights for OEMs, dealers, and equipment owners. The company positions itself as a trusted partner in the industrial telematics market with a strong international presence supported by multilingual website content and professional branding. Technically, the website is built on the Neos CMS platform using modern PHP frameworks and integrates multiple analytics and marketing tools with a strong emphasis on privacy compliance through Usercentrics consent management. Security posture is solid with HTTPS and strict Content-Security-Policy headers, though additional headers could enhance protection. The absence of WHOIS registration data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, Proemion demonstrates a mature digital presence with good security and privacy practices, serving a B2B industrial technology market.

E

EnviWeb s.r.o.

enviweb.cz

68

EnviWeb.cz is a Czech environmental news and information portal operated by EnviWeb s.r.o., established since 1999. It serves as a leading source for environmental news, CSR, climate change, education, and professional ecology events in the Czech Republic. The website targets municipalities, businesses, environmental professionals, and the general public interested in ecological topics. The business model is primarily content-driven with advertising and event promotion revenue streams. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for analytics and cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is privacy-protected, limiting domain registration transparency.

JIC INMEC is a European innovation agency based in the Czech Republic focused on supporting startups and entrepreneurs from ideation through scaleup stages. The agency offers incubation, acceleration, mentoring, and investor connection services to foster business growth and innovation. Their market position is strong regionally with international outreach, supported by partnerships with universities and European networks. Technically, the website is built on Kentico CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are absent. WHOIS data is unavailable, limiting domain registration trust verification, but the website content and business signals indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

6

6DHUB

6dhub.cz

51

6DHUB.cz is a Czech media platform established in 2016, specializing in technology, business innovation, leadership, and science content. The site targets professionals and enthusiasts interested in these sectors within the Czech Republic. It operates a content publishing business model supported primarily by advertising revenue. The platform uses Joomla CMS with the K2 component and integrates modern web technologies such as Bootstrap, jQuery, Google Analytics, and Cookiebot for analytics and consent management. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a technical perspective, the website demonstrates moderate performance with good mobile optimization and SEO practices. The security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with privacy and cookie policies present but lacking detailed GDPR compliance indicators. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is professionally designed, content-rich, and safe for general audiences. It does not exhibit any adult or questionable content. The domain registration and hosting align well with the website's purpose and audience. Strategic improvements could focus on enhancing security headers, publishing detailed security and incident response policies, and expanding privacy compliance transparency.

S

Scuk.cz

scuk.cz

61

Scuk.cz is an e-commerce platform specializing in the sale of local farm products including bakery items, meats, dairy, fruits, and vegetables primarily serving the Czech Republic market. The platform connects local farmers directly with consumers, offering delivery and pickup options, as well as wholesale services. The website demonstrates a professional and consistent brand presence with a clear focus on local and fair-priced farm goods. Technically, the site is built on modern web technologies such as React and Apollo GraphQL, with integrations for analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and content relevance. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, though some security headers and policies are missing. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Overall, Scuk.cz presents a solid digital presence with room for improvement in security documentation and WHOIS transparency.

G

GFF s.r.o.

gffgroup.cz

55

GFF s.r.o. is a Czech investment group focused on strengthening future value by supporting innovative projects and talented individuals primarily in technology, agriculture, innovation, development, and services sectors. The company operates a professional website built on WordPress, employing modern web technologies and performance optimizations such as WP Rocket, Cloudflare DNS, and GDPR-compliant cookie management. The site is well-structured, mobile-optimized, and provides clear business and contact information, including legal disclosures and privacy policies. Security posture is solid with HTTPS enforced, anti-spam measures, and cookie consent mechanisms, though explicit security headers and incident response details are not publicly disclosed. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, the website reflects a credible, medium-sized investment firm with a good digital presence and compliance with privacy regulations.

C

Communauté de communes du Pays de Barr

paysdebarr.fr

45

The website www.paysdebarr.fr serves as the official portal for the Communauté de communes du Pays de Barr, a regional community organization in Alsace, France. It provides comprehensive information on local tourism, economic development, cultural heritage, and community services across 20 communes. The site targets residents, tourists, and local businesses, promoting the region's viticulture, heritage sites, and local economy. The business model is that of a public community portal aimed at information dissemination and regional promotion. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Maps API for interactive maps, Piwik PRO and Google Analytics for visitor tracking, and Facebook SDK for social media integration. It employs a cookie consent management system (Tarteaucitron) to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS and manages cookie consent effectively, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present, which could be enhanced to improve transparency and trust. The WHOIS data is not publicly available, indicating privacy protection, which is typical for such public-facing community websites. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Pays de Barr community, with strong content quality and compliance with privacy standards. Strategic improvements could focus on enhancing security headers and publishing detailed security and incident response policies.

I

Icam

icam-strasbourg.eu

56

Icam is a well-established French engineering school with multiple campuses across France and international partnerships. The institution offers a broad range of engineering education programs, including preparatory cycles, specialized engineering degrees, professional training, and international double degrees. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to prospective students, professionals, and partner companies. Technically, the site is built on WordPress with modern analytics and marketing integrations, including consent management compliant with GDPR. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of educational institution. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

L

Le Cnam Grand Est

cnam-grandest.fr

58

Le Cnam Grand Est is a well-established regional educational institution specializing in professional higher education and training across Alsace, Champagne-Ardenne, and Lorraine. It offers a variety of accessible learning modalities including alternance, in-person, and distance education, targeting students, professionals, and organizations. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its historical legacy dating back to 1794. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given its official certifications and professional presentation. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

F

Fédération Nationale des Offices Municipaux du Sport

fnoms.org

60

The Fédération Nationale des Offices Municipaux du Sport (FNOMS) is a French national federation dedicated to supporting local sports offices and promoting sport for all. The organization provides a wide range of services including legal advice, communication tools, training, and coordination of funding campaigns. The website reflects a well-established non-profit entity with a clear mission to develop sport-santé actions accessible to all publics. The federation positions itself as a central hub for sports organizations and local communities in France, offering resources and advocacy to its members. Technically, the website is built on WordPress and leverages modern web technologies such as the UKit CSS framework, jQuery, and Google Analytics for tracking. It employs a comprehensive cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized, accessible, and features a professional design with clear navigation, enhancing user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent with high privacy settings. However, explicit security headers are not detected, and no dedicated security or incident response policies are publicly available. The WHOIS data is privacy protected, which is common and justified for non-profit organizations. Overall, the site demonstrates a solid security posture with room for improvement in security header implementation and incident response transparency. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts. These steps will further strengthen the federation's digital trust and compliance posture.

Winamax operates a professional online sports betting platform targeting the German market, offering a wide range of sports and leagues for betting, including live betting and VIP programs. The website is well-branded, consistent, and provides a good user experience with modern technical infrastructure including React and jQuery, hosted on AWS. Security posture is strong with HTTPS and implied security headers, though explicit privacy and terms of service documents were not found in the provided content. The platform uses cookie consent mechanisms and tracking tools such as Google Analytics and Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate and trustworthy, catering to adult users interested in sports betting.

R

Racing Club de Strasbourg Alsace

destination-racing.eu

50

The website destination-racing.eu serves as the official digital platform for the Racing Club de Strasbourg Alsace's stadium renovation project, providing detailed information about the extension and modernization of Stade de la Meinau. It targets supporters and local community members, offering updates on construction phases, new services, and ticketing access. The site leverages a modern WordPress infrastructure with Elementor and Jet plugins, ensuring a visually appealing and responsive user experience. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and privacy compliance. The absence of WHOIS data limits domain registration insights, but the website's branding, social media presence, and content quality strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-positioned to engage its audience effectively.

P

Pohjanmaan hyvinvointialue

pohjanmaanhyvinvointi.fi

68

Pohjanmaan hyvinvointialue is a Finnish public sector entity responsible for social and healthcare services and emergency services in the Pohjanmaa region. As one of Finland's 21 welfare areas, it provides a comprehensive range of services including digital appointment booking, social welfare guidance, and emergency care. The website is professionally designed, multilingual, and targets residents and service users in the region. It reflects a strong public service orientation with clear communication channels and compliance with regulatory requirements. Technically, the website is built on WordPress with modern web technologies such as Google Tag Manager for analytics, ReadSpeaker for accessibility, and an embedded chatbot for user assistance. The site is mobile-optimized, accessible, and performs well with good SEO practices. Security measures include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration is transparent and consistent with the organization's identity, enhancing trustworthiness. The site complies with GDPR and provides comprehensive privacy and cookie policies. Overall, the risk level is low, and the site serves as a reliable digital front for the welfare area's services. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining transparency in privacy practices to uphold user trust and regulatory compliance.

S

Standpunkte – Das Chef-Magazin der norddeutschen Metall- und Elektroindustrie

standpunkte.online

61

Standpunkte.online is a newly launched German online magazine serving the northern German metal and electrical industry professionals and executives. The website provides industry news and digital magazine content tailored to this niche sector. The business model is focused on media publication with a regional and industry-specific target audience. The site is built on WordPress CMS, leveraging modern plugins and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Cookie consent mechanisms are implemented, reflecting GDPR compliance awareness. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers are missing. No privacy policy or terms of service were found, which is a compliance gap. Overall, the website is professional, safe, and functional but would benefit from enhanced privacy documentation and additional security hardening.

W

WeselMarketing GmbH

weselmarketing.de

69

WeselMarketing GmbH operates the official tourism and city marketing website for the city of Wesel, Germany. The website provides comprehensive information about cultural attractions, natural sites, events, travel planning, and local services aimed at tourists, visitors, and residents. The business is positioned as a key promoter of Wesel's tourism sector, leveraging digital channels to enhance visitor engagement and city branding. The site is well-structured, professionally designed, and offers multilingual support, reflecting a mature digital presence. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including JavaScript libraries and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and employs a robust cookie consent mechanism compliant with GDPR standards. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses session cookies appropriately. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with room for improvement in formal security documentation and incident readiness. The domain registration data aligns with the business location and sector, supporting legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

W

WeselMarketing GmbH

wesel-tourismus.de

69

WeselTourismus.de is the official tourism website for the city of Wesel, Germany, managed by WeselMarketing GmbH. The site provides comprehensive information about local culture, nature, events, and travel planning, targeting tourists and local visitors. It features a professional design with clear navigation and multilingual support (German, English, Dutch). The website uses Drupal CMS and integrates Google Tag Manager for analytics and marketing purposes. Cookie consent mechanisms are implemented in compliance with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is clearly provided, including phone, email, and physical addresses. No terms of service or explicit security policies were found. Overall, the site is trustworthy, well-maintained, and serves as a reliable resource for tourism in Wesel.

L

Level Access

essentialaccessibility.com

69

Level Access is a leading enterprise provider specializing in digital accessibility solutions, offering a comprehensive platform for testing, remediation, and compliance reporting to ensure organizations meet global accessibility standards such as WCAG and Section 508. Their target audience includes businesses and government entities seeking to improve digital inclusivity and meet regulatory requirements. The company leverages a mature technical infrastructure built on WordPress CMS, enhanced with performance and marketing tools like NitroPack, HubSpot, and Cookiebot, demonstrating a high level of digital maturity and user experience optimization. Security posture is strong with HTTPS enforcement, multiple security headers, and privacy compliance mechanisms, although explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the website reflects a professional, trustworthy, and well-established business with a strong market position in the accessibility technology sector.

I

Invitae

invitae.com

67

Invitae is a healthcare company specializing in genetic testing services, offering DNA testing solutions integrated with medical practices. The company partners with Labcorp to enhance its service delivery, positioning itself as a significant player in the genetic testing market. The website reflects a professional healthcare service provider with a focus on improving patient care through DNA-based insights. Technically, the website uses modern web technologies including Next.js, Adobe Launch, and analytics tools such as Amplitude and New Relic, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed privacy policies are not evident in the provided content. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional presentation and partnerships. Strategic recommendations include enhancing security header implementation, publishing comprehensive privacy and security policies, and improving contact transparency for security and privacy inquiries.

R

Rankai

rankai.ai

61

Rankai is a newly founded AI-powered SEO agency focused on delivering high-quality SEO services to startups and SMBs at a competitive price point. The company leverages a hybrid approach combining human SEO expertise with AI-driven content creation and optimization to generate significant organic traffic growth for clients. Backed by reputable investors such as OpenAI, Andreessen Horowitz, Y Combinator, and Microsoft, Rankai positions itself as an innovative player in the SEO technology space. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics, Plausible, PostHog) and customer engagement (Intercom). The site is well-optimized for performance, mobile responsiveness, and SEO best practices, reflecting a mature digital infrastructure for a startup. Hosting is via GoDaddy, with domain privacy protection enabled. From a security perspective, the site uses HTTPS and follows basic security best practices but lacks advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a clear privacy policy and terms of service but no cookie consent mechanism. WHOIS data indicates a legitimate startup with privacy protection justified by business type. Overall, Rankai presents a professional, trustworthy, and technically sound online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas will strengthen trust and regulatory adherence.

L

Learning Technologies Group

ltgplc.com

65

Learning Technologies Group (LTG) is a well-established leader in the digital learning and talent management sector, serving large organizations globally. The company offers a broad portfolio of learning technologies and talent solutions, supported by a strong brand presence and multiple industry awards. The website reflects a mature business with clear market positioning and a focus on innovation in workplace learning. Technically, the site is built on WordPress, hosted on AWS, and employs modern web technologies including Google Tag Manager and CookieYes for analytics and privacy compliance. Security posture is solid with HTTPS enforced and bot management via Cloudflare, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and a consent mechanism. Overall, LTG's website demonstrates professionalism, trustworthiness, and a good balance of business and technical maturity.

M

Marktplatz Design und Software GmbH

marktplatz-agentur.de

61

Marktplatz Design und Software GmbH is a well-established German digital agency founded in 1999, specializing in innovative web and app development solutions. The company serves a diverse clientele including medium-sized businesses, institutions, and municipalities, offering a broad range of services from website creation and app development to corporate design and online marketing. Their portfolio includes proprietary digital products such as BIWAPP and KatS-Plan, positioning them as both a service provider and product innovator in the technology sector. Technically, the website leverages modern web technologies including Webflow CMS, Google reCAPTCHA for form security, Matomo for analytics, and GSAP for animations, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Security measures include HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit HTTP security headers are not detected. From a security perspective, the site demonstrates good practices with secure forms and privacy compliance, but lacks a published security policy or incident response contact, which could enhance trust and preparedness. The absence of WHOIS data limits domain registration trust verification, but the professional presentation and detailed business information mitigate concerns. Overall, the website presents a professional, trustworthy, and user-friendly digital presence with strong business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to further strengthen trust and compliance.

P

PICO

pico-interactive.com

62

PICO is a leading virtual reality company specializing in all-in-one VR headsets and immersive interactive experiences. Founded in 2015, PICO has established a strong market presence, particularly in China and globally, offering a range of consumer and enterprise VR products. Their business model includes hardware sales, software platforms, developer support, and community engagement, targeting both end consumers and enterprise clients. The website reflects a mature digital presence with comprehensive product information, localized content, and active marketing efforts. Technically, the website is built on modern frameworks such as React and leverages advanced analytics and marketing tools including Google Analytics, TikTok Pixel, and Facebook Pixel. The hosting infrastructure appears to be managed by ByteDance-related services, ensuring fast performance and good mobile optimization. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, PICO's website demonstrates a high level of professionalism, security, and privacy compliance, supporting its position as a reputable VR technology provider. Strategic recommendations include enhancing transparency around security policies, incident response, and vulnerability disclosure to further strengthen trust and compliance.

M

MWAY DIGITAL GmbH

relution.io

10

Relution.io is the online presence of MWAY DIGITAL GmbH, offering privacy-compliant and platform-independent Unified Endpoint Management (UEM) and Mobile Device Management (MDM) software targeted at school authorities, public administrations, and enterprises. The website is professionally designed using modern web technologies such as Gatsby and React, hosted likely on AWS infrastructure, and incorporates standard analytics and cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit privacy and security policies are not found in the provided content. The domain registration data is consistent with the business claims, indicating a legitimate and established company founded in 2012. Overall, the website demonstrates good technical maturity and business credibility but would benefit from enhanced privacy and contact transparency.

S

STACKIT

stackit.de

67

STACKIT is a German cloud service provider offering enterprise-grade cloud infrastructure, colocation, and managed solutions with a strong emphasis on data sovereignty, EU compliance, and stability. The company targets businesses within Germany and the EU, providing tailored cloud services including consulting and user awareness training. Their market position is that of a trusted German cloud alternative, supported by ISO 27001 certification and GDPR compliance. Technically, the website is built on WordPress with modern SEO and privacy tools such as OneTrust and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy-by-default cookie settings, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, accessible, and trustworthy, with no signs of blocking or malicious content.

Jefferson is a large integrated enterprise focused on healthcare, education, and insurance services primarily serving Pennsylvania and New Jersey. The website presents a professional and consistent brand image highlighting its three main business units: Jefferson Health, Thomas Jefferson University, and Jefferson Health Plans. The site targets residents, students, patients, and insurance customers in the region. Technically, the site is built on Adobe Experience Manager with modern analytics tools like Google Tag Manager and Adobe Data Layer, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy policies are lacking. WHOIS data is privacy protected, which is reasonable for this type of organization. Overall, the site is trustworthy and well-maintained but could improve transparency around privacy and security policies.

H

Health Partners Plans

healthpartnersplans.com

62

Health Partners Plans, Inc. is a regional healthcare insurance provider offering Medicaid, CHIP, Medicare Advantage, and Individual and Family health plans. Affiliated with Jefferson Health and Thomas Jefferson University, it serves a broad audience including families, children, and seniors, focusing on whole-person health coverage. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site uses Adobe Experience Manager CMS and integrates multiple modern analytics and tracking tools such as Microsoft Clarity, Crazy Egg, Google Tag Manager, and Freshpaint, indicating a mature digital infrastructure. Mobile optimization and SEO practices are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks some recommended security headers and explicit incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was detected despite tracking scripts in use. WHOIS data is unavailable, which slightly reduces trust but the strong affiliation with known healthcare entities supports legitimacy. Overall, the website is professional, secure, and trustworthy with room for improvement in privacy and security transparency.