Security Directory

A

ATELIERS MECANIQUES DE SAUCOURT

ressorts-ams.com

57

ATELIERS MECANIQUES DE SAUCOURT (AMS) is a French manufacturer specializing in the production of industrial springs, offering both small and large series fabrication. Positioned regionally in Hauts-de-France and part of the QUARSOR SPRING SOLUTIONS group, AMS serves various industrial sectors including automotive, agriculture, medical, and luxury goods. Their website reflects a professional and consistent brand image, emphasizing certifications such as ISO9001 and IATF 16949, which reinforce their quality and reliability in manufacturing. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. The presence of Cookiebot for cookie consent and Google Analytics for traffic monitoring indicates a mature digital infrastructure with attention to privacy compliance. However, the absence of visible security headers and incomplete WHOIS data are notable gaps. From a security perspective, the site benefits from HTTPS encryption and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. The missing WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is secure and professional but could improve in transparency and security best practices. The overall risk assessment is moderate with recommendations focusing on domain registration verification, enhanced security headers, and clearer security policies. These improvements will strengthen AMS's digital trustworthiness and compliance posture.

E

Emmaüs International

emmaus-international.org

54

Emmaüs International is a large, established non-profit organization focused on fighting poverty and social exclusion with a presence in over 40 countries and approximately 450 groups. The website serves as a comprehensive platform for information about their history, actions, campaigns, and resources, targeting a general audience interested in humanitarian aid and social justice. The organization maintains a consistent brand image and active social media presence, enhancing trust and engagement. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses privacy-respecting analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, the hosting provider is not explicitly identified, and performance is moderate. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The malformed WHOIS data limits domain registration trust verification, though the website content and social signals support legitimacy. Overall, the site presents a professional and trustworthy front for Emmaüs International but would benefit from enhanced transparency in security policies and domain registration details to improve trustworthiness and compliance.

C

CV-Library Ltd

jobsmedical.co.uk

60

JobsMedical is a UK-based online job board specializing in medical and healthcare job listings. It targets a broad range of medical professionals including nurses, consultants, and healthcare assistants, offering services such as job search, CV registration, job alerts, and recruitment advertising. The platform is powered by CV-Library Ltd, a recognized recruitment service provider. The website is professionally designed with consistent branding and good content quality, catering specifically to the UK healthcare sector. Technically, the site employs modern JavaScript libraries, Google Analytics, and Bing tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and a published security policy. WHOIS data is unavailable due to a domain query error, but the domain appears legitimate and active. Overall, the site presents a trustworthy and professional platform for medical recruitment in the UK.

C

CV-Library Ltd

jobsretail.co.uk

61

JobsRetail is a UK-focused online job board specializing in retail sector employment opportunities. It aggregates thousands of retail job listings from various retailers and recruiters across the UK, providing job seekers with a dedicated platform to search and apply for retail jobs. The site is powered by CV-Library Ltd, a reputable recruitment service provider, which enhances its market credibility and reach. The platform targets retail job seekers and recruiters, offering services such as CV registration, job alerts, and recruitment advertising. Technically, the website employs a modern JavaScript stack including jQuery, Google Analytics, Bing UET, and Google Tag Manager for analytics and marketing. It uses asynchronous loading of scripts to optimize performance and includes mobile optimization and accessibility features. The site is served over HTTPS, ensuring secure data transmission. However, no explicit CMS or hosting provider information is discernible from the content. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. There is no evidence of exposed sensitive data or vulnerable libraries. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and no published security or incident response policies are found. The WHOIS lookup failed due to querying the 'www' subdomain instead of the root domain, limiting domain registration insights. Despite this, the site's association with CV-Library Ltd and professional presentation support its legitimacy. Overall, JobsRetail presents a professional, secure, and user-friendly platform for retail job seekers and recruiters in the UK. Strategic improvements could include publishing explicit security policies, enhancing security headers, and providing clearer contact information to bolster trust and compliance.

C

CV-Library Ltd

cv-library.ie

61

CV-Library.ie is a professional and well-established online job board focused on the Irish employment market. It offers a comprehensive platform for job seekers to search and apply for jobs, register CVs, and receive job alerts, while providing recruiters with tools to post jobs and search candidate databases. The website is well-branded, mobile-optimized, and provides extensive career advice content, positioning itself as Ireland's fastest growing job site. Technically, the site uses modern tracking and analytics technologies including Google Analytics, Bing Ads, and Force24, with good mobile responsiveness and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and published security policies. The absence of WHOIS data limits domain registration analysis, but the overall trust signals and professional presentation indicate a legitimate and credible business. Privacy compliance is strong with clear policies and consent banners. Overall, CV-Library.ie represents a mature digital platform with a strong market presence in Ireland's recruitment sector.

WVU Medicine is a leading healthcare provider in West Virginia, offering advanced medical services including heart, vascular, thoracic, cancer, pediatric, and neurological care. The organization positions itself as a premier healthcare network serving patients, medical professionals, and the community. The website reflects a mature digital presence with a professional design, clear navigation, and relevant content tailored to its audience. Technically, the site is built on WordPress with Bootstrap and uses modern libraries such as jQuery and Google Tag Manager for analytics and marketing. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

East Carolina Anesthesia Associates

ecaa.com

43

East Carolina Anesthesia Associates (ECAA) is a physician-owned anesthesiology practice operating primarily in the Southeastern United States, with over 50 locations across North Carolina and Southeast Virginia. The company focuses on delivering comprehensive anesthesia and pain management services, partnering with hospitals, surgery centers, and doctors' offices. Their market position is strong as one of the fastest growing anesthesiology practices in the region, emphasizing patient care and satisfaction. The website reflects a professional healthcare service provider with clear business focus and consistent branding. Technically, the site is built on WordPress, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by GoDaddy, with domain registration dating back to 2000, supporting the company's established presence. Security posture is adequate with HTTPS enabled and anti-spam measures in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is minimal, with no explicit privacy or cookie policies detected, which could be a compliance risk. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

G

GiveSmart

givesmart.com

64

GiveSmart is a nonprofit-focused fundraising software platform offering a comprehensive suite of tools including mobile bidding, silent auctions, virtual and hybrid fundraising, donor management, and nonprofit accounting. Positioned as a trusted partner with over 5,000 brands and $5.3+ billion raised, GiveSmart operates under the parent company Momentive Software. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive content tailored to nonprofit organizations. Technically, the site leverages WordPress CMS with modern frameworks and integrates multiple marketing and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. WHOIS data is unavailable, which slightly impacts trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen trust and compliance.

Y

YourMembership by Community Brands

yourmembership.com

67

YourMembership by Community Brands is a well-established SaaS provider specializing in association management software tailored for nonprofits, associations, and professional organizations. With over 25 years of experience and a client base exceeding 14,000 association professionals, the company offers a comprehensive suite of services including membership management, online communities, learning management, job boards, and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and rich content targeted at its core audience. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery, FontAwesome, and Wistia for video content. It employs advanced consent management via Osano and integrates analytics and monitoring tools like Google Tag Manager, 6Sense, and Sentry. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks some advanced security headers and explicit incident response or security policy disclosures. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial SaaS providers. No critical vulnerabilities or exposed sensitive data were detected. Overall, YourMembership demonstrates a strong business and technical foundation with good privacy compliance and security posture. Strategic improvements in security headers, incident response transparency, and direct contact information would enhance trust and compliance further.

T

TUTORIE

tutorie.cz

61

TUTORIE is an educational content provider based in the Czech Republic, offering knowledge sharing and educational services primarily targeting a general audience interested in learning. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. Social media presence on Facebook and Instagram supports community engagement. Technically, the site is moderately optimized with good mobile responsiveness and basic accessibility features. Security posture is moderate, with cookie consent mechanisms in place but lacking visible security headers and explicit security policies. WHOIS data is unavailable, which impacts domain trustworthiness and legitimacy assessment. Overall, the site presents a professional educational platform but would benefit from enhanced security and transparency measures.

The website presbariery.cz represents a Czech non-profit organization, Pražská organizace vozíčkářů, dedicated to promoting accessibility and barrier-free environments. The organization provides services such as accessibility mapping, consulting, educational seminars, and publishes related materials. Their target audience includes students, architects, designers, and people with disabilities, primarily within the Czech Republic. The website is well-branded and supported by governmental and municipal entities, indicating a strong local presence and trust. Technically, the website is built on Joomla CMS with a combination of jQuery, Mootools, and Bootstrap frameworks. It uses Google Analytics for visitor tracking and is hosted on Czech infrastructure consistent with the domain registration. The site shows moderate performance and basic mobile optimization. However, some JavaScript libraries are outdated, and no advanced security headers are detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were found, but improvements in security headers and privacy compliance are recommended. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy and security practices to improve compliance and user trust.

A

Alianza

alianza.com

58

Alianza operates as a cloud communications platform provider targeting service providers who are launching voice services or upgrading to next-generation solutions. The company positions itself as a cloud-native, carrier-grade platform designed to help service providers compete against OTT voice applications. The website is professionally designed, leveraging WordPress with modern plugins and technologies, and includes SEO and accessibility considerations. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. WHOIS data is unavailable, which reduces trust in domain legitimacy but the website content and branding suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and transparency.

U

Université de Strasbourg

unistra.fr

55

Université de Strasbourg is a prominent French public university offering extensive educational programs, research activities, and international collaborations. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting students, researchers, and academic partners. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, ensuring good performance and mobile optimization. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data is notable but likely due to AFNIC policies; however, the website's content and partner affiliations strongly support its legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with minor penalties for privacy compliance and WHOIS transparency.

U

Univention GmbH

univention.de

57

Univention GmbH is a well-established German technology company specializing in open source Identity and Access Management (IAM) solutions, primarily targeting the education sector and public administration. With over 20 years of experience and managing 35 million identities, the company offers scalable, secure, and integrated IAM products such as Nubus, UCS@school, and UCS. Their business model focuses on providing software solutions, support, training, and integration services to organizations seeking digital sovereignty and efficient IT management. The website reflects a mature market position with strong trust signals and a professional presentation. Technically, the website is built on WordPress with modern plugins and tools including WPBakery Page Builder, Gravity Forms, and Matomo for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured data enhancing discoverability. Privacy compliance is robust, featuring a cookie consent mechanism and a detailed privacy policy. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure or security.txt file. These gaps represent opportunities for improvement in transparency and readiness. Overall, the security posture is strong with no evident vulnerabilities or risks. The domain WHOIS data aligns well with the company's profile, showing consistent registration details and domain age appropriate for the business history. No privacy protection is used in WHOIS, which supports transparency. The website is fully accessible without WAF or blocking mechanisms, enabling thorough analysis. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure process, and providing data protection officer contact details to enhance compliance and trust. These steps will strengthen the company's security culture and customer confidence while maintaining its leadership in open source IAM solutions.

D

Dobříšské listy Online

dlonline.cz

46

Dobříšské listy Online is a regional news media portal serving Dobříš and its surrounding areas in the Czech Republic. Established in 2017, it provides local news, cultural updates, sports, and community information primarily targeting residents of the region. The website is built on WordPress and leverages popular plugins such as Yoast SEO, Contact Form 7, and Cookie Law Info to enhance SEO, user interaction, and privacy compliance. The site maintains a consistent brand presence with a clear logo and social media integration, notably on Facebook. From a technical perspective, the website uses a modern CMS platform with standard plugins and scripts, including Google Analytics for traffic monitoring. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place. However, there is no explicit security policy or incident response information publicly available, and security headers are not detected, which could be improved to enhance protection against common web threats. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, the website presents a trustworthy and professional regional news service with good content quality and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen the site's security and user trust.

L

Linop

linop.fr

41

Linop is a professional graphic and digital design service operated by Pauline Le Gal, offering art direction, web design, and training services primarily targeting entrepreneurs, associations, and artists in France. The website presents a well-structured portfolio with clear contact options and integrates GDPR-compliant cookie consent mechanisms. Technically, the site is built on WordPress with modern plugins and hosted by Infomaniak Network SA, ensuring reliable infrastructure. Security posture is good with HTTPS enabled and no evident vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

The website vykup-aut.cz operates as a service provider specializing in the purchase of used cars for cash across the Czech Republic. It positions itself as an experienced player with over 10 years in the market, targeting individuals and businesses seeking to sell their vehicles quickly and professionally. The business model is straightforward, focusing on offering competitive prices and a professional approach to car buying. The website content is primarily in Czech and tailored to the local market. Technically, the site is built on WordPress, utilizing common plugins such as Contact Form 7, Cookie Notice, and Slider Revolution. The site is served over HTTPS with a good SSL configuration, but lacks some advanced security headers. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is supported by the All in One SEO plugin, and cookie consent mechanisms are in place, indicating some level of privacy compliance. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and detailed privacy policies. No direct contact information or incident response contacts are found, which could impact user trust and compliance. The WHOIS data is unavailable, suggesting privacy protection or lack of public registration details, which reduces transparency and trustworthiness. Overall, the website presents a professional and functional platform for used car buying in the Czech Republic but would benefit from enhanced transparency, security policies, and contact information to improve trust and compliance.

P

Panský dvůr Dolní Počernice

pddp.cz

42

Panský dvůr Dolní Počernice is a small hospitality business based in the Czech Republic offering a range of services including a restaurant, pizzeria, brewery, spa, pension, and event hosting. The website presents a professional and consistent brand image targeting local and regional visitors interested in leisure and dining experiences. The business model focuses on integrated hospitality services under one brand, positioning itself as a local provider with multiple offerings. Technically, the website is built on WordPress using the Foundation framework, jQuery, and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, but lacks advanced security headers and a visible privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is safe for general audiences and provides a good user experience with clear navigation and relevant content.

T

The PUB

thepub.cz

60

The PUB is a hospitality business operating a chain of pubs primarily in Prague, Czech Republic, with additional locations in Berlin and Bucharest. The business focuses on providing a unique beer experience including self-service beer taps, master bartenders, and beer pouring schools, complemented by food offerings. The website reflects a medium-sized, established hospitality brand with a consistent and professional digital presence. Technically, the site uses common JavaScript libraries such as jQuery and GSAP, and integrates multiple Google Analytics and Tag Manager instances for tracking. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The domain is long-standing and registered with a Czech registrar, consistent with the business claims. Overall, the website is well designed and functional but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

Sběratelské zbraně s.r.o. is a Czech Republic-based small retail business specializing in the sale of collectible firearms, primarily from the World War I and II eras. The company operates a niche market model focusing on individual customer consultations and custom orders, emphasizing personalized service rather than a traditional storefront. Their website reflects this business model with detailed product listings, contact information, and legal disclaimers. Technically, the site is built on WordPress using modern frameworks such as Foundation CSS and integrates Google Analytics and reCAPTCHA for analytics and security. While the site is well-structured and SEO-optimized, it lacks some advanced security headers and cookie consent mechanisms, which could be improved for better compliance and security posture. The absence of WHOIS data for the domain is a notable concern, reducing domain trustworthiness despite the professional appearance and clear business information on the site.

N

NIOBLU

jafracosmetics.cz

45

NIOBLU.cz is a Czech Republic based e-commerce website specializing in cosmetics inspired by Ayurveda and rich in natural ingredients. The site offers a wide range of skincare, makeup, body, hair care, and fragrance products, targeting general consumers interested in natural and Ayurvedic cosmetics. The website features club offers, customer testimonials, and detailed product categorization, indicating a well-structured retail business with a focus on customer engagement and loyalty. Technically, the site uses modern web technologies including jQuery, Google Fonts, Google Tag Manager, and integrates marketing and analytics tools such as MailerLite and Smartsupp Live Chat. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses consent mechanisms for analytics and advertising, but lacks visible security headers and explicit incident response information. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and trust signals suggest a legitimate business. Overall, the site scores well on content quality and privacy compliance but should improve domain transparency and security headers to enhance trust and security posture.

Půjčovna RK, operated by Autocentrum RK cb s.r.o., is a small vehicle rental business based in České Budějovice, Czech Republic. The company specializes in renting personal cars and motorhomes for both business and recreational purposes. Their offerings include short-term and long-term rentals with additional customer benefits such as free parking during rental periods. The website is professionally designed, providing clear vehicle listings and contact information, targeting local customers seeking reliable vehicle rental services. Technically, the website is built on WordPress CMS using common plugins such as Contact Form 7 and Responsive Lightbox, styled with the Foundation CSS framework. It employs Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and loads with moderate performance. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes CAPTCHA protection on its contact form, indicating basic security awareness. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and security best practices. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a trustworthy and professional front for a local vehicle rental business but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and customer trust.

AUTO Kralovice s.r.o. operates a professional used vehicle dealership in the Czech Republic, offering a broad range of automotive services including sales of cars, motorcycles, utility vehicles, trailers, financing options, insurance, servicing, and ecological vehicle disposal. The company targets consumers seeking quality used vehicles and related services, positioning itself as a reliable local provider with a comprehensive service portfolio. The website is built on WordPress with modern technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and privacy policies indicate room for improvement. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and professional. Overall, the site demonstrates moderate digital maturity with opportunities to enhance compliance and security posture.

R

RAK CZ a.s.

rak.cz

45

RAK CZ a.s. is a well-established Czech real estate company operating since 1990, specializing in property sales, rentals, management, auctions, consulting, and development. The company positions itself as a professional and comprehensive real estate partner offering unique and individualized client services. Their market presence is supported by quality management audits and membership in recognized real estate associations. Technically, the website is built on WordPress with modern plugins and frameworks, including Yoast SEO, Google Analytics, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website content and business information are consistent and professional. Overall, the site demonstrates good content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy platform for real estate services in the Czech Republic.

P

Pojišťovací kancelář Plzeň

allianzplzen.cz

43

The website www.allianzplzen.cz represents a local insurance agency operating in Plzeň, Czech Republic, affiliated with the Allianz brand. It offers insurance brokerage services and provides contact points for local customers seeking insurance solutions. The site is designed to serve a regional audience with clear navigation to contact representatives and office locations. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Toolset Maps, with Google Analytics and Tag Manager integrated for visitor tracking. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, ensuring secure communication. However, the absence of WHOIS data and lack of explicit privacy and terms of service pages indicate areas for improvement in transparency and compliance. Security headers are missing, which could be enhanced to improve security posture. Overall, the website is professional and trustworthy in appearance but would benefit from improved compliance documentation and security hardening.

H

HP Fyzioclinic s.r.o.

hpfyzioclinic.cz

43

HP Fyzioclinic s.r.o. operates a specialized physiotherapy and rehabilitation center primarily serving athletes and patients requiring musculoskeletal therapy in the Czech Republic. The website presents a professional image with detailed team profiles and service descriptions, positioning itself as a local healthcare provider. The business model focuses on delivering specialized health services with a small-scale operation. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Carousel, and Foundation framework. It uses HTTPS and integrates Google Analytics and Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses nonce tokens in AJAX calls, but it lacks important security headers such as Content-Security-Policy and HSTS. There is no visible privacy or cookie policy, which raises compliance concerns especially under GDPR. The absence of WHOIS data for the domain reduces trust and raises questions about domain legitimacy. Overall, the website is functional and professional but would benefit from improved privacy compliance, enhanced security headers, and transparent domain registration information to strengthen trust and security posture.

C

Cyber Création

cybercreation.fr

40

Cyber Création is a small, established French web and print communication agency based in Ormes near Reims, operating since 1998. The company specializes in graphic design, website creation including intranet and e-commerce solutions, and print production services. Their website reflects a professional and consistent brand image, targeting local businesses and organizations seeking digital and print communication solutions. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism and privacy policy.

U

UniWIRE Solution, s. r. o.

uniwire.cz

52

UniWIRE Solution, s. r. o. is a Czech-based small IT and security services company specializing in visual identity creation, installation of camera and security systems, electrical installations, and IT services. The company targets schools, businesses, and general clients seeking comprehensive IT and security solutions. Their market position appears regional with a focus on quality and reliability, supported by client references and a portfolio of completed projects. The website is built on WordPress using modern technologies such as Bootstrap and Smart Slider 3, with good mobile optimization and user experience. Security posture is solid with HTTPS and Google reCAPTCHA integration, though lacking some advanced security headers and formal privacy documentation. The absence of WHOIS data reduces domain trust but the website content and business information are professional and credible.

N

Neftis

neftis.com

61

Neftis is a well-established digital agency based in Lorraine, France, specializing in web creation, SEO, digital marketing, hosting, and professional training. With over 20 years of experience and a medium-sized team, the company serves businesses and organizations seeking comprehensive digital communication solutions. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site uses modern analytics tools such as Google Analytics, Piwik PRO, and Microsoft Clarity, and is built on the FlexIT CMS platform. It is mobile-optimized and employs HTTPS with good SSL configuration, ensuring secure user interactions. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact information support the company's credibility. No critical security vulnerabilities or adult content were detected, and privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism.

The website www.grandreims.fr serves as the official digital presence of the Communauté urbaine du Grand Reims, a large regional government entity in France. It provides comprehensive information and services related to community news, urban planning, environment, business development, and mobility for residents, businesses, and visitors. The site is well-structured, professionally designed, and targets a broad audience within the Grand Reims territory. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by the official nature and content quality of the site.

V

Ville et Eurométropole de Strasbourg

strasbourg.eu

64

The website www.strasbourg.eu serves as the official digital portal for the City and Eurométropole of Strasbourg, France. It provides comprehensive information and services to residents, tourists, professionals, students, and other stakeholders. The site features news, event calendars, administrative procedures, cultural content, and community engagement tools, positioning itself as a central hub for local government communication and citizen interaction. Technically, the site is built on the Liferay CMS platform with modern web technologies including React and Alloy UI, ensuring a responsive and accessible user experience. Security measures such as HTTPS enforcement, security headers, and cookie consent mechanisms are in place, reflecting a mature security posture. However, explicit privacy policy and terms of service pages are not clearly identified, and contact information is not prominently displayed, which are areas for improvement. Overall, the site is trustworthy, professionally maintained, and aligned with its public service mission.

D

Département de la Meuse

meuse.fr

48

The Département de la Meuse website serves as the official digital presence of the regional government authority for the Meuse department in France. It provides comprehensive public service information, news, event listings, and resources for residents and local partners. The site is well-structured, primarily targeting local citizens and stakeholders, and offers services such as social support, cultural activities, tourism, and administrative procedures. The business model is governmental, focusing on public administration and community engagement. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, supplemented by modern JavaScript libraries like jQuery, Parsley.js for form validation, and Tarteaucitron.js for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The presence of a cookie consent mechanism and a comprehensive privacy policy indicates a mature approach to GDPR compliance. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks explicit HTTP security headers and a published security.txt file. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data slightly reduces trust but is mitigated by the official nature of the domain and consistent branding. Overall, the security posture is solid but could be improved with additional headers and incident response information. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enhancing HTTP security headers, publishing a security.txt file, providing incident response contacts, and adding a terms of service page to improve legal clarity and user trust.

D

DLA Grand-Est

dla-grandest.org

10

DLA Grand-Est is a regional non-profit organization dedicated to supporting social utility structures in the Grand Est region of France. The website presents a professional and well-structured platform offering information about their services, including accompaniment for social utility employers, training for volunteers, and calls for service providers. The organization positions itself as a key regional player in social and employment development within the non-profit sector. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, FontAwesome for icons, and Google Analytics for visitor tracking. The site is mobile-optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. The presence of a cookie consent banner and a comprehensive privacy policy indicates good privacy compliance. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. However, no explicit security headers were detected, and there is no visible security policy or incident response contact information. The WHOIS data is unavailable due to a malformed request or privacy restrictions, which slightly reduces trust in domain legitimacy but does not outweigh the professional presentation and compliance indicators. Overall, the website is a credible and professional platform for a regional non-profit organization with a good security posture and privacy compliance. The main risk is the lack of WHOIS transparency and absence of explicit security policies, which should be addressed to enhance trust and security maturity.

The website 'Acheter Responsable GE' is a regional platform dedicated to promoting goods and services from the Social and Solidarity Economy in the Grand Est region of France. It serves as a directory, resource hub, and event organizer for businesses and organizations interested in responsible purchasing. The platform is supported by regional public entities and managed by the Chambre Régionale de l'Economie Sociale et Solidaire Grand Est, indicating a strong regional presence and trustworthiness. Technically, the site uses a Flexit CMS, integrates Google Analytics and Tag Manager for tracking, and is served over HTTPS, ensuring secure communication. However, the absence of visible privacy and cookie policies and lack of security headers suggest areas for improvement in privacy compliance and security posture. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency, but the professional content and public entity support mitigate some of these concerns. Overall, the site presents a good user experience with clear navigation and relevant content for its target audience.

B

Bílý kruh bezpečí, z. s.

linka-pomoci.cz

10

The website www.116006.cz represents a Czech Republic-based non-profit social service operated by Bílý kruh bezpečí, z. s., providing free, 24/7 telephone crisis support to victims of crime and domestic violence. The site is professionally designed, mobile-optimized, and offers clear navigation to key service areas such as domestic violence, stalking, and victims' rights. The technical infrastructure is based on WordPress with Foundation CSS and includes Google Analytics for visitor tracking. Security posture is solid with HTTPS enabled and cookie consent implemented, though security headers and explicit privacy policies are lacking. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the apparent legitimacy of the organization. Overall, the site is trustworthy, safe, and well-positioned to serve its target audience effectively.

B

Bílý kruh bezpečí, z.s.

domacinasili.cz

43

The website www.domacinasili.cz serves as an informational and support platform dedicated to victims of domestic violence in the Czech Republic. It is operated by the non-profit organization Bílý kruh bezpečí, z.s., which provides crisis telephone help, psychological support, legal and social counseling, and public awareness resources. The site is well-branded and targets individuals affected by or concerned about domestic violence, offering practical advice and contact information for assistance. Technically, the website is built on WordPress and uses modern web technologies including jQuery and Google Analytics for tracking. It employs HTTPS for secure communications and includes a cookie consent banner to comply with basic privacy regulations. The site is mobile-optimized and presents a clear navigation structure, although some accessibility features could be improved. From a security perspective, the site benefits from HTTPS but lacks visible security headers and a published privacy policy page, which are important for compliance and user trust. No WHOIS data was retrievable, which limits domain registration trust analysis. No forms collecting personal data were found on the homepage, reducing immediate data protection concerns. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment indicates a trustworthy and professional non-profit website with some gaps in privacy compliance and domain transparency. Strategic recommendations include publishing a comprehensive privacy policy, implementing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.

N

Networm Studio

networm.cz

41

Networm Studio is a small Czech-based group of freelancers specializing in custom web development, SEO optimization, e-commerce solutions, and social media marketing. Operating since 2005, they focus on personalized client solutions rather than templated websites, targeting businesses seeking tailored online presence. The website is built on WordPress with common technologies like Bootstrap, jQuery, and Google reCAPTCHA, indicating a moderate level of technical maturity. Security posture is adequate with HTTPS and anti-bot measures but lacks advanced security headers and formal privacy policies. WHOIS data is unavailable, which limits domain trust verification, but the website content and contact information appear professional and consistent with a legitimate business. Overall, the site is safe, well-structured, and serves its business purpose effectively.

D

Danone s.r.o.

danonesutaze.sk

52

Danone s.r.o. operates the website www.danonesutaze.sk as a promotional platform for Danone product contests targeting Slovak consumers. The site aggregates current and past contests, providing users with opportunities to participate and win prizes. The business model focuses on consumer engagement and brand promotion within the retail sector in Slovakia. The website is professionally designed using WordPress with Oxygen Builder, featuring responsive design and clear navigation. It integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and cookie consent management. Security posture is strong with HTTPS enforced and appropriate security headers present. Privacy compliance is well addressed with comprehensive cookie and privacy policies linked and a consent mechanism implemented. Contact information is clearly provided, enhancing business credibility. No critical security or content safety issues were detected, and the domain registration data aligns well with the business identity, indicating legitimacy.

I

inREAL realitná kancelária, s.r.o.

inreal.sk

45

inREAL realitná kancelária, s.r.o. is a Slovakian real estate agency specializing in property sales and searches across a wide range of locations in Slovakia. The website serves as a platform for clients to browse property listings and contact the agency for real estate services. The company targets individuals and businesses interested in real estate transactions within Slovakia, positioning itself as a local real estate service provider. The website features a professional design with clear navigation and mobile responsiveness, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with HTTPS enabled ensuring secure communications. However, there is room for improvement in security headers and privacy policy transparency. The security posture is moderate, with email obfuscation and cookie consent mechanisms implemented, but lacking explicit security policies or incident response contacts. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

Living MS is a healthcare information website focused on Multiple Sclerosis, providing educational content, support resources, and service information for MS patients and their families. The site is branded and operated by Merck GmbH, a pharmaceutical company, indicating a strong market position in healthcare and patient support. The platform targets German-speaking users in Austria and offers comprehensive information on MS symptoms, diagnosis, therapies, and living with the disease. It also provides a dedicated service line for medication injection device replacement. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, supported by modern analytics tools like Google Tag Manager and Adobe Analytics. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Cookie consent and privacy compliance are well implemented, reflecting adherence to GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, and no security.txt or incident response contacts are provided. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a professional, trustworthy, and compliant digital presence for a healthcare information service. The lack of WHOIS data limits domain trust verification, but the strong branding and external partnerships support legitimacy. Strategic recommendations include enhancing security headers, adding vulnerability disclosure information, and maintaining regular security audits.

P

PEŠEK Machinery s.r.o.

pesekm.com

50

PEŠEK Machinery s.r.o. is a Czech-based manufacturing company specializing in the development and production of special machines and fixtures for industrial automation, serving sectors such as automotive, energy, and transportation. The company emphasizes craftsmanship, quality, and unique engineering solutions, with a market presence spanning multiple European countries. Their website reflects a professional and well-structured digital presence, supporting their business model with clear product offerings and contact channels. Technically, the site uses modern web technologies including niCMS, Video.js, and Google Tag Manager, with good mobile optimization and SEO practices. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent management, though additional security headers could enhance protection. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid security posture and compliance with GDPR, supporting a positive risk profile.

A

Australasian Division of the International Academy of Pathology

iap-aus.org.au

52

The Australasian Division of the International Academy of Pathology operates a professional website serving pathology professionals and members in Australasia. The site provides information on annual scientific meetings, master classes, grants, and other educational resources, positioning itself as a regional non-profit professional association. The business model focuses on member services, education, and professional development within the healthcare sector. Technically, the website is built on WordPress with the Divi theme, utilizing modern JavaScript libraries and Google Fonts, and integrates Matomo analytics and reCAPTCHA for security and tracking. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS and some security best practices, though DNSSEC is not enabled and no advanced security headers were detected. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, with no blocking or WAF interference detected.

O

OLÚp Predná Hora

olup-prednahora.sk

40

OLÚP, n. o. Predná Hora is a well-established non-profit specialized psychiatric healthcare institution in Slovakia, founded in 2006. The organization offers a range of services including inpatient and outpatient psychiatric care, family therapy, and aftercare treatments. The website reflects a professional and trustworthy presence with comprehensive information targeted at patients and interested parties. It maintains a consistent brand identity and demonstrates compliance with GDPR and cookie regulations, enhancing user trust. The institution also actively engages users through social media channels and a dedicated mobile application.

W

Winning Group a.s.

winninggroup.cz

45

Winning Group a.s. is a Czech investment company focused on advancing its portfolio of firms primarily in manufacturing, construction, real estate, hospitality, and premium food sectors. The company positions itself as a strategic partner ready for long-term growth and acquisitions, targeting investors and industry professionals. The website reflects a mature digital presence with multilingual support and comprehensive corporate content including annual reports and press releases. Technically, the site is built on WordPress with modern JavaScript libraries and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and WHOIS transparency are areas for improvement. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

S

Solar Energy Industries Association

seia.org

71

The Solar Energy Industries Association (SEIA) is a well-established national trade association founded in 1974, dedicated to advancing the solar energy industry in the United States. It represents over 1,200 member companies and focuses on policy advocacy, research, education, and industry growth to promote clean energy solutions. The website reflects a professional and authoritative presence with excellent content quality and clear messaging targeted at industry stakeholders, policymakers, and communities interested in solar energy. Technically, the site is built on WordPress, enhanced with performance optimization tools like NitroPack, and integrates modern analytics and marketing technologies including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted via Cloudflare, ensuring robust infrastructure and security.

S

Sailors for the Sea

sailorsforthesea.org

59

Sailors for the Sea is a well-established non-profit organization founded in 2004, dedicated to ocean conservation through community engagement, education, and advocacy. Powered by Oceana, it offers programs such as Clean Regattas, environmental lesson plans for kids, and campaigns addressing plastic pollution and species protection. The website is built on WordPress with modern plugins and technologies, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

A

AstraZeneca

astrazeneca-us.com

71

AstraZeneca US operates as a major biopharmaceutical company focusing on delivering innovative medicines primarily in oncology and biopharmaceuticals. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare providers, and other stakeholders. The technical infrastructure leverages modern web technologies, including Adobe Experience Manager CMS, AWS hosting, and advanced analytics tools such as Adobe Analytics and Tealium. The site is well-optimized for mobile and accessibility, with clear navigation and professional branding. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. While explicit security headers were not fully confirmed, the use of reputable third-party services and absence of exposed sensitive data suggest a strong security posture. The lack of WHOIS data limits domain registration verification, but the overall trust signals and branding consistency support legitimacy. Overall, AstraZeneca US demonstrates a robust digital and security posture suitable for a large healthcare enterprise. Strategic improvements could focus on enhancing transparency around security policies and incident response, as well as verifying and publishing vulnerability disclosure information.

S

Státní fond životního prostředí ČR

modernizacni-fond.cz

67

The website represents the official portal of the State Environmental Fund of the Czech Republic (SFŽP ČR), focusing on the Modernization Fund which supports energy and environmental projects. It serves a broad audience including businesses, municipalities, and households, providing detailed information about funding programs, project successes, and future plans. The site is well-branded, consistent, and linked to trusted government and EU resources. Technically, it is built on WordPress with modern plugins and frameworks, offering good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and some security plugins in use, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves as a critical government resource for environmental funding in the Czech Republic.

P

Peecho B.V.

peecho.com

67

Peecho B.V. operates a professional print on demand platform specializing in custom photo books, magazines, wall art, and business stationery. The company targets creatives, self-publishers, enterprises, and app/platform developers, offering API integration and a global print network to enable fast, sustainable, and localized printing and drop shipping. Peecho is positioned as a trusted player with over 1 million users and 1,000+ companies, and is part of the Prodigi Group, enhancing its market credibility. Technically, the website is built on Webflow CMS with modern technologies including Google Tag Manager, reCAPTCHA, Weglot for translations, and Cloudflare for hosting and CDN services. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. Security best practices are observed with HTTPS, CAPTCHA protection on forms, and cookie consent mechanisms, though explicit security headers and policies could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR compliance indicators. However, the absence of WHOIS data and domain registration details introduces some uncertainty about domain legitimacy, though the professional web presence and business information mitigate this concern. Overall, Peecho presents a low-risk, credible business with a mature digital infrastructure and good privacy and security practices. Strategic improvements in publishing security policies and enhancing WHOIS transparency would further strengthen trust and compliance.

Design by Ewa is a specialized small business focused on providing custom web design and graphic design services tailored to dog and cat breeders, kennels, catteries, and the equestrian industry. The company has a long-standing presence since 2001 and offers a range of services including website packages, logo design, magazine publication, and advert design. Their market position is that of a niche specialist with a professional and artistically driven approach. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing security headers and unknown SSL configuration, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.