Security Directory

H

Helloworkplace

hellowork-group.com

60

Hellowork group is a well-established French company specializing in recruitment, education, and media services. Founded in 2000, it operates multiple platforms that connect job seekers, professionals, schools, and institutions. The company positions itself as a market leader in its sector, offering comprehensive solutions for human resources, education, and digital media. The website reflects a professional and consistent brand image with clear messaging targeting individuals and professionals seeking career and training opportunities. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular analytics tools such as Google Tag Manager and Piano Analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with efficient use of preloading and caching techniques. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and compliant with privacy regulations, making it a reliable platform for its users. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

A

AB S.A.

ab.pl

58

AB S.A. is a prominent distributor of IT, household appliances, consumer electronics, GSM products, and toys operating primarily in Poland and the Central and Eastern European region. The company is publicly listed on the Warsaw Stock Exchange since 2006 and serves over 16,000 business partners with a vast portfolio of nearly 100,000 products from more than 800 global brands, including its own proprietary brands. AB S.A. holds a leading market position in IT distribution within the CEE region, supported by a strong logistics and financial solutions infrastructure for partners. Technically, the website is built on a modern WordPress CMS platform with a well-implemented tech stack including Yoast SEO, Google Tag Manager, MailerLite for marketing automation, and various plugins for enhanced user experience and compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional and user-friendly interface. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit HTTP security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS domain registration data is a notable gap that slightly impacts trustworthiness but does not detract from the overall legitimacy supported by the company's public presence and awards. Overall, AB S.A. demonstrates a strong business and digital presence with good security and privacy practices. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

B

Bílý kruh bezpečí, z.s.

bkb.cz

46

Bílý kruh bezpečí, z.s. is a well-established Czech non-profit organization dedicated to providing professional, free, and confidential support to victims of crime and domestic violence. With over three decades of experience, it operates multiple regional offices across the Czech Republic and offers helpline services, counseling, and prevention projects. The website reflects a mature organization with a clear mission and target audience including victims, social workers, and law enforcement. Technically, the site uses modern web technologies such as jQuery, Foundation framework, and integrates Google Analytics with IP anonymization to respect user privacy. However, the absence of explicit privacy and terms of service pages and missing WHOIS data slightly reduce trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers. Overall, the site is accessible, professionally designed, and provides comprehensive contact information and social media presence, supporting its credibility.

C

Centrum pro rodinu a sociální péči z. s.

prorodiny.cz

54

Centrum pro rodinu a sociální péči z. s. is a well-established non-profit organization based in Ostrava, Czech Republic, dedicated to supporting families, relationships, individuals with disabilities, caregivers, and seniors. The organization offers a broad range of services including counseling, education, social support, and community engagement, with a strong focus on inclusivity and social welfare. Their website reflects a mature digital presence with rich content, active event calendars, and social media integration, positioning them as a trusted local entity in the social care sector. Technically, the website employs modern JavaScript libraries and Google Analytics with consent management, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern that slightly impacts trustworthiness, though the website content and social presence strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving its target audience effectively.

C

Centrum sociálních služeb Ostrava, o.p.s.

css-ostrava.cz

49

Centrum sociálních služeb Ostrava, o.p.s. is a well-established non-profit organization founded in 2006, providing a broad range of social services primarily in the Czech Republic. Their services focus on supporting families, children, and individuals in difficult social situations through shelters, crisis centers, family counseling, and social activation programs. The organization maintains a professional web presence with clear navigation and multiple physical locations integrated via Google Maps, enhancing accessibility for their target audience. The website encourages donations and donations with tax deduction benefits, indicating a transparent and community-focused business model. Technically, the website uses modern JavaScript libraries such as Swiper.js and Google Maps API, along with Google Tag Manager for analytics, reflecting a moderate level of digital maturity.

K

KAFIRA o.p.s.

kafira.cz

41

KAFIRA o.p.s. is a Czech non-profit organization dedicated to assisting people with visual impairments, with a history of over 20 years. The website reflects this mission clearly, targeting individuals with visual disabilities and offering support and community services. The organization appears to be well-established within its niche, focusing on social assistance rather than commercial activities. Technically, the website is built on WordPress, utilizing common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized and has a good design quality, though accessibility features could be enhanced further to better serve its target audience. Security-wise, the site uses HTTPS and has a basic SSL configuration, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data limits transparency but is not uncommon for non-profit entities using privacy protection services. Overall, the website is functional and professional but would benefit from improved privacy compliance and security hardening.

S

Svépomocná společnost Mlýnek, z. s.

klubmlynek.cz

53

Svépomocná společnost Mlýnek, z. s. is a small non-profit organization based in Ostrava, Czech Republic, dedicated to supporting individuals with mental illness. The organization focuses on enabling these individuals to lead meaningful and active lives within their natural environment through various supportive activities and services. The website reflects this mission with clear, relevant content and a consistent brand presence. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses Google Tag Manager but lacks important security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain raises concerns about transparency and legitimacy, although the website content and hosting appear legitimate. Overall, the site scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility, with room for improvement in transparency and security best practices.

C

Coinmate s.r.o

rr-moravskoslezsko.cz

43

Coinmate s.r.o operates a leading European cryptocurrency exchange platform, primarily serving the Czech and Slovak markets with unique EUR and CZK trading pairs. Founded in 2014, the company offers a range of services including quick buy, recurring buy via dollar-cost averaging, a professional trading platform integrated with TradingView, and API access for automated trading. The business positions itself as a secure and trusted exchange with a decade of operational history and a strong focus on compliance and customer support in English and Czech. Technically, the website is built on modern Angular framework with integrations for analytics and marketing tools, and it demonstrates good mobile optimization and SEO practices. Security-wise, Coinmate maintains an excellent posture with HTTPS enforcement, ISO 27001 certification, advanced custody infrastructure, and separation of client funds from operating expenses. However, explicit incident response and vulnerability disclosure policies are not publicly available, which could be improved. Overall, the website and business present a high level of professionalism, trustworthiness, and compliance suitable for a financial services provider in the cryptocurrency sector.

A

ANIMA VIVA z.s.

animaviva.cz

44

ANIMA VIVA z.s. is a Czech non-profit organization established in 2002, dedicated to providing social services and support to persons with disabilities, particularly those with mental and intellectual disabilities. The organization operates primarily in the Moravian-Silesian region and offers registered social services including social counseling, social rehabilitation, and employment opportunities through sheltered workplaces. Their mission focuses on social inclusion, improving quality of life, and destigmatizing disabilities. The website reflects this mission with relevant content and a clear target audience of disabled persons and their families. Technically, the website uses a modest technology stack including jQuery, bxSlider, lightbox, Google Analytics, and Google Tag Manager. It implements cookie consent mechanisms aligned with GDPR requirements and uses HTTPS for secure communication. However, the site lacks advanced security headers and accessibility features, and the performance and mobile optimization are basic. The absence of WHOIS data and explicit contact emails or phone numbers on the site slightly detracts from the overall trustworthiness. From a security perspective, the site shows good privacy compliance with GDPR statements and cookie consent but could improve by adding security headers and a vulnerability disclosure policy. No critical vulnerabilities or malware indicators were found. The missing WHOIS data is a concern and should be investigated to confirm domain legitimacy. Overall, ANIMA VIVA z.s. presents as a legitimate, mission-driven non-profit with a functional website that meets basic privacy and security standards. Strategic improvements in security posture, contact transparency, and technical modernization would enhance trust and user experience.

The Kraft Heinz Company website presents a comprehensive corporate presence for one of the world's largest food and beverage manufacturers. The company is positioned as a global leader with a strong portfolio of iconic brands, targeting consumers, investors, suppliers, and job seekers. The website content is professionally structured, providing detailed information about the company, its brands, investor relations, and career opportunities. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and linked official domains appear legitimate. Overall, the site scores well on content quality, technical implementation, and security posture, with room for enhancement in transparency and security disclosures.

The Pennsylvania Association of Nurse Anesthetists (PANA) is a professional membership organization representing over 3,500 certified registered nurse anesthetists and students in Pennsylvania. The association focuses on advocacy for patient safety, access to quality care, and the advancement of the nurse anesthesia profession. Their services include educational opportunities, professional development, events such as symposiums, and community giving campaigns. The website reflects a medium-sized, well-established healthcare association with a clear mission and target audience of healthcare professionals within the state. Technically, the website is built on the YourMembership CMS platform, utilizing a combination of Bootstrap, jQuery, YUI, and FontAwesome for UI and interactivity. It integrates Google Analytics, Google Tag Manager, and New Relic for performance monitoring and analytics. The site employs HTTPS with SSL encryption and includes bot protection via DataDome, indicating a moderate level of security maturity. However, some security best practices such as explicit security headers and cookie consent mechanisms are not evident. From a security perspective, the site demonstrates good baseline protections with encrypted login forms and bot mitigation. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data due to privacy protection is typical for organizations seeking to protect registrant information and does not detract from the site's legitimacy. Overall, the site maintains a professional and trustworthy presence suitable for its audience. Strategically, PANA should consider enhancing privacy compliance by implementing visible cookie consent banners and publishing detailed security and incident response policies. Improving security headers and accessibility compliance would further strengthen their security posture and user experience. These steps will help maintain trust and meet evolving regulatory requirements.

M

Mozilla

mozilla.com

72

Mozilla operates the Firefox web browser, a leading privacy-focused and open-source browser available across multiple platforms including Windows, Mac, Linux, Android, and iOS. The website serves as a central hub for downloading Firefox, learning about its features, and accessing support resources. Mozilla's non-profit status and commitment to internet health and privacy position Firefox as a trusted alternative to mainstream browsers. The site demonstrates a mature digital presence with excellent content quality, mobile optimization, and user experience. Technically, the site uses modern JavaScript frameworks, Sentry for error monitoring, and Google Tag Manager for analytics, reflecting a robust and well-maintained infrastructure. Security posture is strong with HTTPS enforced and privacy mechanisms like cookie consent banners implemented, though explicit security policies and incident response contacts are not published on the site. WHOIS data for the domain is unavailable, which is unusual but does not detract significantly from the site's legitimacy given Mozilla's global reputation and consistent branding. Overall, the site is professional, secure, and privacy-conscious, serving a broad audience effectively.

C

CV-Library LTD

cv-library.co.uk

64

CV-Library LTD operates one of the UK's largest independent job boards, offering a comprehensive platform for job seekers and recruiters. Founded in 2000, it provides services including job search, CV registration, job alerts, career advice, and a company directory. The website targets UK job seekers and recruitment professionals, maintaining a strong market position with over 123,000 live vacancies and more than 10,000 companies registered. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Amplitude analytics, and OneTrust for cookie consent management. It is well-optimized for mobile devices and accessibility, with structured data enhancing SEO. The site uses HTTPS with good SSL configuration, though some security headers could be improved. From a security perspective, the site follows best practices such as HTTPS enforcement and secure form handling. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, WHOIS data is unavailable due to domain naming rules errors, which slightly impacts trust but does not detract from the site's professionalism. Overall, CV-Library presents a secure, professional, and user-friendly platform with a solid business model and market presence. Strategic improvements in security headers and WHOIS transparency could further enhance trust and compliance.

A

ASP Events

asp.events

69

ASP Events is a specialized service provider focused on creating websites for conferences, shows, and exhibitions. Their market position is that of a niche event website specialist offering engaging, functional, and visually appealing online presences tailored for event organizers. The website demonstrates a good level of professionalism and targets event planners seeking dedicated web solutions. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Cookiebot for consent management, and custom CMS technology named SHOWOFF by ASP.events. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and policies are not visible. Privacy compliance is partially addressed via Cookiebot, but no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable due to query failure or privacy protection, which is common for small service providers and does not raise immediate concerns. Overall, the website is professional and trustworthy but could improve transparency by publishing privacy and security policies and providing clear contact information.

M

Media Business Insight (MBI) Ltd

broadcastsportawards.co.uk

59

The Broadcast Sport Awards website represents a well-established event brand under Media Business Insight (MBI) Ltd, a subsidiary of GlobalData. The site focuses on celebrating excellence in sports broadcasting and production, targeting industry professionals such as broadcasters, production companies, and rights holders. It offers event information, sponsorship opportunities, and showcases past winners and shortlists, positioning itself as a leading UK and Ireland sports television awards event. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Permutive for tracking, built on the SHOWOFF CMS platform by ASP.events. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and consistent branding. However, some improvements could be made in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner or explicit GDPR compliance indicators. Overall, the website is professional, trustworthy, and serves its business purpose effectively. Strategic enhancements in privacy and security policies would further strengthen its compliance and user trust.

C

Capgemini

capgemini.no

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology expertise with deep sector knowledge. The company targets enterprise clients seeking to innovate and transform their business operations digitally. The website reflects a mature digital presence with a professional design, comprehensive content, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern JavaScript frameworks like React, supported by marketing and analytics tools such as Pardot and Google Tag Manager. Security posture is robust, with HTTPS enforced and multiple security headers implemented, alongside clear privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the overall legitimacy of the site. Strategic recommendations include maintaining up-to-date security practices and enhancing incident response visibility.

N

Personlige Navneskilt, Høydemålere & Strikketilbehør i Tre – Håndlaget i Norge

nostenett.no

61

Nøstenett.no is a Norwegian e-commerce website specializing in handcrafted wooden products such as personalized nameplates, height charts, and knitting accessories. The business targets a general audience interested in personalized gifts and craft supplies, positioning itself as a niche artisan retailer within Norway. The website demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and customer chat integration. Security measures include CSRF token implementation in forms, but lack explicit security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the site appears legitimate and functional with a good user experience and mobile optimization, but would benefit from enhanced transparency and security practices.

V

Vinofil Vinkurs

vinforedrag.no

52

Vinofil Vinkurs is a Norwegian small business specializing in wine education through in-person and digital courses, targeting both corporate and private clients. The website presents a professional and consistent brand image with clear offerings such as wine courses at workplaces, private homes, and gift cards. The business is newly established in 2023, and the domain registration aligns with this timeline. The site leverages modern web technologies and analytics tools but lacks critical privacy and security disclosures, which impacts compliance and trustworthiness. No blocking or WAF mechanisms hinder content access, allowing full analysis.

G

Gutta på Haugen

gutta.no

59

Gutta på Haugen is a well-established Norwegian gourmet food retailer, operating both a physical delicatessen store in Oslo and an e-commerce platform serving customers across Norway. The website reflects a mature business with a focus on quality food products and a loyal customer base. Their digital infrastructure includes modern tracking and marketing tools, with a CMS platform customized for retail needs. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Privacy policies and cookie consent mechanisms are present and localized in Norwegian, supporting GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, with moderate technical performance and good mobile optimization.

B

beIN MENA

bein.com

64

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

U

Uhelný mlýn

uhelnymlyn.cz

40

Uhelný mlýn is a Czech Republic-based small business operating a multifunctional event space, contemporary art gallery, and design loft. The website presents the business as a local cultural venue with a focus on events and art exhibitions. The digital infrastructure is built on WordPress with integration of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is professional and functional, but could improve transparency and security documentation.

M

MASMOVIL

masmovil.com

67

MASMOVIL is a major Spanish telecommunications company offering mobile telephony, fiber optic internet, fixed telephony, and television services. The company targets general consumers and businesses in Spain with a business model focused on simple, flexible tariffs and competitive pricing. The website reflects a strong market position with clear branding and comprehensive service offerings. Technically, the site is built on modern frameworks such as Next.js and React, integrated with Contentful CMS and various marketing and payment platforms, ensuring a robust and scalable digital presence. Security posture is solid with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear contact information. However, WHOIS data is inaccessible, limiting domain legitimacy verification.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

J

Journées d'Octobre

journees-octobre.fr

46

Journées d'Octobre is a regional event organizer based in Mulhouse, France, specializing in hosting an annual artisan and creator fair alongside the Folie'Flore floral show. The event attracts a large audience and features numerous exhibitors, restaurants, and entertainment stages, positioning itself as a key cultural and commercial event in the Alsace region. The website effectively promotes the event with detailed information, imagery, and structured data for enhanced search engine visibility. Technically, the site uses modern JavaScript libraries like jQuery, integrates Google Analytics and Facebook Pixel for marketing, and employs HTTPS with a valid SSL certificate, ensuring secure user connections. However, the absence of explicit security headers and limited contact information slightly reduce the security posture. The WHOIS data is unavailable, which is common for .fr domains but reduces transparency. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security policies and contact transparency.

M

Ma planète BIO

maplanetebio.com

60

Ma planète BIO is a regional event organizer focused on organic agriculture, sustainable living, and related cultural activities in South Alsace, France. The website promotes an annual event held at Parc Expo Mulhouse, targeting enthusiasts and professionals interested in organic farming and eco-friendly lifestyles. The business is relatively new, founded in 2022, and operates primarily in French. The website provides event information, exhibitor details, conference schedules, and visitor guidance, positioning itself as a key regional player in the organic agriculture event space. Technically, the website uses a combination of jQuery, Bootstrap, Owl Carousel, and cookie management via tarteaucitron.js. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is hosted by OVH sas, a reputable hosting provider, and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website presents a professional and trustworthy front for a niche event business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

E

Eiffage Infra-Bau SE

eiffage-infra.de

47

Eiffage Infra-Bau SE is a large, well-established infrastructure construction company with over 150 years of experience, operating primarily in Germany and Europe. The company offers a broad range of construction and engineering services including infrastructure, rail, noise protection, and specialized construction sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and comprehensive organizational information. The technical infrastructure is modern and includes GDPR-compliant cookie consent and analytics via Google Tag Manager. Security posture is good with HTTPS enforced and basic security best practices observed, though some HTTP security headers could be improved. Contact information and multiple company locations are clearly provided, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

R

Redback Solutions

rb.com.au

55

Redback Solutions is a well-established digital marketing and web design agency based in Newcastle, Australia, operating since 1999. The company offers a comprehensive range of services including web design and development, ecommerce solutions, SEO, digital marketing, and creative content production. Their market position is strong, supported by multiple industry partnerships and awards such as the 2025 Australian Web Awards. The website reflects a professional and trustworthy digital presence targeting businesses seeking digital growth and online results. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and live chat services, demonstrating a mature digital infrastructure. Performance and mobile optimization are good, with SEO best practices well implemented. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and credible with room for improvement in privacy and security transparency.

P

PlanetHoster

planethoster.live

57

PlanetHoster Forums is an official community platform supporting PlanetHoster's web hosting services. It serves as a hub for customers to discuss maintenance, outages, reviews, tutorials, and technical support. The forum is well-structured, bilingual (primarily French), and actively maintained with thousands of discussions and messages. The website uses modern web technologies including XenForo CMS, jQuery, FontAwesome, and integrates Google Analytics and Tag Manager for analytics. HTTPS is enforced with a valid SSL certificate, and forms include CSRF tokens, indicating a good security baseline. However, some security headers are missing, and no explicit security or incident response policies are published on the forum site. Privacy and terms of service pages are present and linked, showing attention to compliance. The WHOIS data is privacy protected but consistent with an active and legitimate domain. Overall, the site demonstrates a professional and trustworthy presence with a strong community focus.

U

UP&KO

alfieformation.fr

46

Alfie Formation is a French digital marketing training organization founded in 2020 and operating under the legal entity UP&KO. The company offers personalized and actionable digital marketing training programs delivered by a network of over 220 experts across France. Their business model includes matching clients with suitable trainers, organizing training sessions, and facilitating up to 100% financing through OPCO, supported by their QUALIOPI certification. The website is professionally designed, well-structured, and optimized for SEO, targeting professionals and companies seeking digital marketing skills development. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and HubSpot. Security posture is solid with HTTPS, hCaptcha for forms, and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site presents a credible, professional, and user-friendly platform for digital marketing education.

L

LWS

lws-hosting.be

60

LWS is a well-established French web hosting and domain registration company founded in 1999, offering a broad range of services including shared hosting, VPS, dedicated servers, WordPress optimized hosting, email solutions, and cloud storage. The company targets individuals, professionals, and agencies seeking reliable and affordable web presence solutions. Their market position is strong with over 680,000 hosted sites and 800,000 registered domains, supported by ISO 27001 certified datacenters in France. Technically, the website demonstrates a mature digital infrastructure using modern JavaScript libraries, Google Tag Manager, Bing Ads tracking, and cookie consent mechanisms. The site is fast, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. Hosting is self-managed with servers located in France, emphasizing data sovereignty and security. From a security perspective, LWS enforces HTTPS, implements daily backups, and operates ISO 27001 certified datacenters. However, explicit security headers like CSP and HSTS are not detected, and no public vulnerability disclosure or incident response contacts are published, indicating areas for improvement. The WHOIS data for the domain is restricted, which is common for .be domains but slightly reduces transparency. Overall, LWS presents a professional and trustworthy web presence with strong business credibility and technical implementation. The risk profile is low, with recommendations to enhance security headers and publish clearer security policies to further strengthen trust and compliance.

L

LWS

lws-hosting.ca

64

LWS is a well-established French web hosting company with a strong presence in Canada, offering a wide range of hosting services including domain registration, VPS, WordPress hosting, and cloud storage. Founded in 1999, it hosts over 680,000 websites and operates 4500 servers in France, emphasizing performance, security, and customer support. The company targets individuals, enthusiasts, and businesses seeking reliable and affordable web hosting solutions. Technically, the website employs modern technologies such as jQuery, Google Tag Manager, and integrates cookie consent mechanisms, ensuring GDPR compliance. The hosting infrastructure is self-managed with ISO 27001 certified datacenters in France, providing robust security and data protection. Security posture is strong with HTTPS enforced, daily backups, and secure data centers, though some security headers could be improved and a security.txt file added. The website is professional, mobile-optimized, and SEO-friendly, with extensive trust signals including customer reviews and certifications. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, though the overall business credibility remains high.

S

SEMNAUT

semnaut.com

43

SEMNAUT operates as a SaaS platform focused on SEO project management, targeting SEO professionals, agencies, freelancers, and e-retailers. The platform offers features such as position tracking, action management, automated reporting, SEO alerts, and suggestions to improve SEO performance. The website is professionally designed, with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with modern plugins and analytics tools, including Matomo and Google Tag Manager, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks some security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

C

ChatVusyon | Der einfache KI-Chatbot für deine Webseite

chatvusyon.ai

61

ChatVusyon.ai is a small technology company offering an AI chatbot solution designed to enhance website customer support, lead generation, and ensure GDPR compliance. The website is professionally designed using modern tools such as Framer and integrates multiple third-party analytics and marketing technologies including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. While the technical infrastructure is modern and the website is mobile optimized with good SEO practices, there are notable gaps in privacy compliance and security best practices. No privacy or cookie policies are present, and no contact information or security policies are published, which may impact user trust and regulatory compliance. The domain registration uses privacy protection, which is common for startups but reduces transparency. Overall, the website presents a functional and professional front but requires improvements in privacy, security headers, and contact transparency to enhance trust and compliance.

W

whos.amung.us Inc.

amung.us

64

whos.amung.us Inc. operates a web analytics platform offering free and pro-tier real-time visitor statistics and heatmap widgets for websites and blogs. The service targets website owners and bloggers seeking immediate insights into visitor behavior without requiring account registration. The company positions itself as an established player in the web analytics market, with a business model centered on free widget usage complemented by paid Pro features. The website content is professionally designed, consistent, and supported by mentions in reputable technology media outlets, indicating moderate market trust and recognition. Technically, the website employs a modern JavaScript technology stack including jQuery, Bootstrap, Fancybox, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and moderate performance. However, accessibility features are basic and no CMS or hosting provider details are evident. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and no explicit security policies are published. From a security and compliance perspective, the site lacks explicit cookie consent mechanisms and GDPR compliance indicators, which could pose privacy compliance risks. The absence of WHOIS data due to privacy protection reduces transparency but is common for this business type. No incident response or vulnerability disclosure policies are found, limiting the security maturity visibility. Overall, the site is safe with no adult or questionable content, but improvements in privacy compliance and security transparency are recommended. Strategically, whos.amung.us should enhance its privacy and security disclosures, implement cookie consent, and publish incident response and vulnerability disclosure policies to strengthen trust and compliance. Technical modernization focusing on accessibility and security headers would further improve the security posture and user experience.

I

Iskra d.d.

iskra.eu

10

Iskra d.d. is a well-established industrial company specializing in intelligent industrial solutions and electrotechnical products. With over 80 years of history and a workforce of approximately 1650 employees, Iskra serves a broad international market across energy, transportation, manufacturing, and telecommunications sectors. Their product portfolio includes capacitors, low voltage switchgear, measuring instruments, power automation, batteries, antenna systems, and traffic solutions. The company maintains a strong market position supported by subsidiaries and partnerships across Europe, including Croatia and North Macedonia. Technically, the website is built on a modern CMS platform (BCMS) with integration of popular technologies such as Bootstrap, Google Analytics, and JivoSite chat. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some technical improvements are recommended, particularly in security headers and accessibility compliance. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics, but lacks visible security headers and explicit security or incident response policies. Cookie consent mechanisms are implemented, indicating awareness of privacy compliance, though a dedicated privacy policy page was not found. The domain WHOIS data is privacy protected, which is typical for European companies, and no suspicious patterns were detected. Overall, Iskra presents a credible and professional online presence with moderate technical maturity and room for security enhancements. Strategic recommendations include strengthening security headers, publishing comprehensive privacy and security policies, and enhancing accessibility features to align with best practices and regulatory requirements.

I

ISTRABENZ PLINI d.o.o.

istrabenzplini.hr

11

Istrabenz plini d.o.o. is a Croatian energy company specializing in the supply of technical gases, LPG in bottles and tanks, natural gas, and innovative energy solutions. As part of the international SIAD Group, it holds a strong market position in Croatia, serving households, industrial clients, and public institutions. The company emphasizes sustainability and modern energy technologies. The website reflects a mature digital presence built on WordPress with modern SEO and user experience practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Contact and business information is transparent and comprehensive, supporting trust and credibility.

I

Intra Lighting

intra-lighting.com

10

Intra Lighting is a globally recognized provider of architectural luminaires and smart lighting solutions, positioning itself as a significant player in the lighting market. The company targets professional audiences such as architects, lighting designers, and commercial clients, offering B2B manufacturing and distribution services. The website reflects a professional and consistent brand image with multi-language support, enhancing its global reach. Technically, the site leverages a mature technology stack including DotNetNuke CMS and AngularJS, integrated with modern analytics and marketing tools managed through Google Tag Manager. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements in security headers and accessibility could be made. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website's professional presentation and compliance features suggest a trustworthy business. Overall, the site demonstrates good digital maturity and business credibility with moderate technical and security robustness.

I

Impol

impol.si

33

Impol is a well-established Slovenian aluminum manufacturing group with a strong presence in Europe and the USA. The company specializes in producing a wide range of aluminum products serving diverse industries such as automotive, pharmaceutical, food, transport, and aerospace. Their market position is strong, being the 6th largest Slovenian exporter and a leader in aluminum rod production in Europe. The website reflects a mature digital presence with multilingual support, detailed product and industry information, and a focus on sustainability and innovation. Technically, the site uses WordPress with modern libraries and integrates Google Analytics and Tag Manager for tracking, alongside a comprehensive cookie consent mechanism. Security posture is good with HTTPS and reCAPTCHA in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

GIC

gic.si

43

GIC is a well-established Slovenian construction company specializing in a wide range of building and infrastructure services, including industrial, commercial, and residential projects. With over 33 years of experience and more than 1000 completed projects, they maintain a strong market position as experts in their field. Their integrated business model includes in-house laboratories, concrete plants, and quarries, enabling comprehensive project management and execution. The website reflects a professional and modern digital presence, leveraging technologies such as Bootstrap, Leaflet, and Google Tag Manager for analytics and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

F

Fragmat

fragmat.eu

54

Fragmat is a medium-sized manufacturing company specializing in insulation solutions for modern construction and related industries. The company holds a leading market position in Slovenia and is recognized across Europe for its high-quality thermal insulation, waterproofing, radiant heating, and packaging products. The website reflects a professional business with clear product offerings and references to significant projects, targeting construction professionals and industry clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers and explicit security policies are absent. The domain WHOIS data is privacy protected by EURid, which is typical for European domains and justified for this business type. No suspicious patterns were found. Contact information is transparent and consistent with the company brand. Privacy and cookie policies are present and indicate GDPR compliance. Overall, Fragmat's digital presence is solid, supporting its business credibility and market position. Security and privacy practices are adequate but could be enhanced with additional policies and technical controls.

D

Dunapack Packaging

dunapack-packaging.com

66

Dunapack Packaging is a large European manufacturer specializing in customized corrugated cardboard packaging solutions, operating 24 plants across 12 countries. The company is part of the Prinzhorn Group and emphasizes sustainability and circular economy principles in its business model. The website is professionally designed, multilingual, and provides comprehensive information about products, locations, and corporate values. Technically, the site is built on TYPO3 CMS with modern front-end frameworks and integrates Google Tag Manager and analytics tools with user consent mechanisms. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly but the overall corporate presence and transparency mitigate concerns. Contact information is clear and extensive, supporting business credibility.

D

DAT – CON d.o.o.

dat-con.com

51

DAT – CON d.o.o. is a medium-sized technology company specializing in defense and security products, including advanced surveillance systems, anti-drone technology, thermal and SWIR cameras, pan-tilt units, and specialized software solutions. The company targets government agencies and security organizations, positioning itself as a niche player in the defense technology sector. The website presents a professional and consistent brand image with detailed product offerings and a clear focus on innovation and quality. Technically, the website is built on WordPress using the Avada theme and includes modern plugins such as Yoast SEO and Slider Revolution. Google Analytics and Tag Manager are used for analytics and marketing purposes. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and explicit privacy and cookie policies. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks security headers and incident response contact information. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer domain registration transparency.

Č

Čazmatrans - Nova d.o.o.

cazmatrans.hr

53

Čazmatrans - Nova d.o.o. is a Croatian transportation company specializing in bus services within Croatia and international routes. The website provides an online ticket purchasing platform targeting general travelers and commuters. The company has a medium-sized presence with multiple subsidiaries and a well-established market position since 2012. The website is professionally designed with good navigation, mobile optimization, and relevant content focused on transportation services. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google services like Tag Manager and Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, cookie consent implemented, and secure payment logos displayed, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

Crowe LLP is a large, established public accounting and consulting firm specializing in audit, tax, and consulting services for public and private entities. The website reflects a mature digital presence with comprehensive service descriptions, industry insights, and a strong emphasis on client engagement. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, Google Tag Manager, and TrustArc for privacy compliance, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is notable but does not detract from the professional presentation and trustworthiness of the site. Overall, Crowe LLP demonstrates a high level of digital maturity and compliance with privacy regulations.

C

Comark - Project Logistics Company

comark-logistics.com

50

Comark is a specialized project logistics company based in Slovenia, focusing on the transportation and packing of cargo worldwide. The company offers a range of services including project cargo handling, heavy and oversized transport, government and defence logistics, cargo packing, permits and escorts, and relocation and assembly. With over 25 years of experience in oversize load logistics and ISO 9001:2015 certification, Comark positions itself as a reliable and knowledgeable partner in complex logistics projects. The website reflects a professional and consistent brand image targeting businesses requiring specialized logistics solutions globally. Technically, the website is built on WordPress using a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and WPML for multilingual support. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security measures include HTTPS, reCAPTCHA for forms, and cookie consent mechanisms; however, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. The security posture is solid but could be enhanced by implementing DNSSEC, security headers, and publishing a formal security policy and incident response contacts. Privacy compliance is basic but present, with clear cookie and privacy policies and GDPR compliance indicators. Contact information is comprehensive and clearly presented, enhancing business credibility. No signs of malicious activity or suspicious domains were found, and the domain registration details align well with the business claims, supporting legitimacy. Overall, Comark's digital presence is professional and trustworthy, with good business credibility and moderate technical maturity. Strategic improvements in security and privacy transparency would further strengthen their posture and trustworthiness.

C

Coface

coface.si

62

Coface Slovenia is a leading credit insurance and risk management company supporting business growth by offering credit insurance, debt collection, and business information services. Established in 1946 and part of the global Coface Group, it serves a broad B2B audience across Slovenia and internationally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information. Technically, the site uses modern frameworks such as Symfony and is hosted on AWS infrastructure, with integrations for consent management and analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, GDPR compliant, and well-optimized for SEO and accessibility.

C

Claus Møller Consulting

clausmoller.com

52

Claus Møller Consulting is a small, specialized consulting and training organization focused on developing General Business Excellence for companies, teams, and individuals. Their services emphasize improving productivity, relationships, quality, leadership, and management at multiple organizational levels. The company is well established with a domain registered since 2002 and operates primarily from Slovenia. The website is professionally designed using WordPress with Divi theme and integrates e-commerce and learning management systems to support their training offerings. Technically, the site employs modern web technologies and third-party services such as Google Analytics, Zoho SalesIQ, and social media tracking pixels, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy policy or terms of service found. Overall, the website presents a trustworthy and professional image with room for improvement in security and privacy transparency.