Security Directory

Nomad Cafe is a small hospitality business focused on providing artisanal coffee and a nomadic lifestyle experience, targeting travelers and remote workers. The website presents a modern, well-designed interface with good mobile optimization and clear branding. The business plans to open a location in Portugal in 2025, indicating growth or expansion. Technically, the site uses standard web technologies and is hosted via Cloudflare, ensuring good performance and availability. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and compliance policies are absent, which is a notable gap. Overall, the site is professional but could improve in privacy, security, and contact transparency.

P

Peach-dev

peach-dev.cz

47

Peach-dev is a Czech-based small technology company specializing in custom mobile and web application development, UI/UX design, and related digital services. Founded in 2020, the company targets startups and businesses seeking tailored digital solutions, positioning itself as an innovative and youthful team with a portfolio of notable clients. The website is professionally designed using modern technologies such as the Astro framework, with a strong focus on user experience and mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and formal privacy and terms policies. Contact information is clearly presented, enhancing business credibility. Overall, Peach-dev demonstrates a mature digital presence suitable for its market niche.

L

Loftmyndum ehf.

map.is

55

Loftmyndum ehf. operates the website map.is, which provides an interactive map and aerial imagery services focused on Iceland. The site offers various map layers including planning, protected areas, weather, and webcams, targeting general users and educational institutions. The business model allows free use for individuals for non-commercial purposes while restricting commercial usage without permission. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, OpenLayers, and Proj4js, with Google Analytics integrated for visitor tracking. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No WHOIS data was found for the domain, which reduces trustworthiness but the website content and business information appear legitimate. Overall, the site is functional and trustworthy for its intended audience but could improve in security and privacy compliance.

H

Heineken

heineken.sk

67

Heineken's Slovakian website serves primarily as an age verification gateway, ensuring compliance with legal drinking age regulations before granting access to alcohol-related content. The site reflects the brand's global presence and commitment to responsible marketing. Technically, the site uses modern web standards with responsive design and Google Fonts integration, but lacks visible advanced frameworks or CMS indicators. Security posture is moderate; while HTTPS is implied, no explicit security headers or privacy policies are present on this page, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain legitimacy verification, but the strong brand presence and professional design mitigate concerns. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

I

Invelity

invelity.com

75

Invelity is a Slovak digital marketing agency specializing in SEO, PPC, social media advertising, Google Ads, Facebook Ads, web development, and marketing strategy consulting. The company targets businesses seeking to improve their online presence and marketing effectiveness within Slovakia. The website presents a professional design with consistent branding and clear service offerings, indicating a focused business model in the digital marketing sector. Technically, the website employs modern technologies including Google Tag Manager, Google Analytics, Cookiebot for consent management, Microsoft Clarity for user behavior analytics, and Google reCAPTCHA for form security. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS and uses reCAPTCHA, but lacks visible security headers and explicit security policies. The cookie consent mechanism is comprehensive and GDPR compliant, but no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the website scores moderately well in content quality, technical implementation, security posture, privacy compliance, and business credibility, but improvements are recommended in transparency and security best practices.

N

NSM Hydroizolácie s.r.o.

nsm.sk

10

NSM Hydroizolácie s.r.o. is a Slovak company specializing in hydroisolation services and construction chemicals, with a strong regional presence and over two decades of operational history. The company offers a broad range of services including foliové systémy, water tanks, sprayed isolations, bentonite isolations, and proof systems, targeting primarily B2B clients in construction and infrastructure sectors. Their market position is supported by ISO 9001 and ISO 14001 certifications and partnerships with recognized industry suppliers. Technically, the website is built on modern web technologies such as Vue.js, uses service workers for progressive web app capabilities, and integrates Google Analytics and Tag Manager for analytics. The site is mobile optimized and SEO friendly with a clear navigation structure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and has a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Global Services Slovakia s.r.o.

gsgroup.sk

10

Global Services Slovakia s.r.o. is a Slovak-based IT company specializing in the development and implementation of custom web information systems, online applications, eCommerce solutions, and web presentations. With over 18 years of market presence, the company serves a diverse clientele including industrial, financial, and tourism sectors, positioning itself as a reliable provider of tailored software solutions. Their business model focuses on delivering bespoke software development and consulting services, emphasizing quality and client satisfaction. The website reflects a professional and consistent brand image, showcasing client references and detailed service offerings.

Z

ZAMA interiér s.r.o.

zamainterier.sk

65

ZAMA interiér s.r.o. is a Slovak company specializing in the design and manufacture of custom furniture with over 30 years of experience and more than 21,000 completed projects. The company targets consumers seeking tailored furniture solutions and operates multiple physical branches in Slovakia. Their business model focuses on direct customer engagement through design consultation, manufacturing, and installation services. The website reflects a mature market position with consistent branding and strong trust indicators such as customer testimonials and comprehensive contact information. Technically, the website is built on a modern Laravel Livewire framework with integration of popular JavaScript libraries and service workers, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although explicit security headers and incident response policies are not publicly documented. Overall, the website is professional, secure, and compliant with GDPR, supporting the company's credibility and operational transparency.

T

TAXON, s.r.o.

taxon.sk

53

TAXON, s.r.o. is a Slovak manufacturing company specializing in stainless steel furniture and gastronomic equipment, serving primarily the gastronomy sector with custom solutions. The company has a solid market position with over 16 years of experience and exports to more than 10 countries. Their website reflects a professional business with a clear product portfolio, multilingual support, and active social media engagement. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and reCAPTCHA, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is trustworthy and well-maintained, supporting the company's credibility and business operations.

K

KOLODOM s.r.o.

kolodom.com

73

KOLODOM s.r.o. is a Slovak company specializing in the manufacturing and sale of mobile and modular tiny houses designed for year-round living. Their product offerings include standard, luxury, and off-grid variants, catering to a diverse clientele seeking flexible and customizable housing solutions. The company emphasizes turnkey delivery and personalized configurations through an online configurator, positioning itself as a niche player in the modular housing market. The website reflects a professional and customer-focused approach with detailed product information, testimonials, and multiple contact channels. Technically, the website employs modern web technologies including Laravel Livewire, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. While HTTPS is enforced and CSRF protections are evident, the absence of certain security headers suggests room for improvement in security hardening. From a security perspective, the site demonstrates good practices such as secure forms and privacy compliance but lacks explicit incident response contacts and vulnerability disclosure mechanisms. The WHOIS data is unavailable, which slightly impacts trustworthiness; however, the website content and contact information appear legitimate and consistent with a professional business. Overall, KOLODOM's digital presence is solid with good content quality, technical implementation, and privacy compliance. Strategic enhancements in security headers and transparency around incident response would further strengthen their security posture and trustworthiness.

D

Devlev, s.r.o.

devlev.sk

63

Devlev, s.r.o. is a Slovak-based architecture and design firm specializing in architecture, urbanism, interior design, 3D scanning, and visualization services. Established in 2013, the company has completed over 500 projects, positioning itself as a reputable local service provider with a strong portfolio and positive client testimonials. The website reflects a professional and modern digital presence with clear navigation, comprehensive service descriptions, and active social media engagement. Technically, the site employs modern web technologies including Vue.js, Google Tag Manager, and service workers, ensuring good performance and mobile optimization. Security measures such as HTTPS, CSRF tokens, Google reCAPTCHA, and cookie consent mechanisms are implemented, though additional security headers and a formal security policy could enhance the posture further. Overall, the site demonstrates strong GDPR compliance and business credibility, making it a trustworthy platform for prospective clients.

P

PANT (spolek PANT)

eustory.cz

55

Eustory.cz is a Czech non-profit educational website dedicated to organizing a history competition for high school students with a European scope. The competition has been running since 2001 and is organized by the association PANT. The website serves as an information hub for the competition, providing resources, event details, and links to international partners. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and offering a responsive design suitable for mobile users. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and cookie consent mechanisms. Privacy policy is present and appears GDPR compliant, though cookie policy and terms of service are missing. The WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the site is professional, trustworthy, and well-positioned within its niche educational sector.

K

Karki s.r.o.

indickadiyalo.cz

44

Diyalo Restaurant is a small hospitality business specializing in authentic Indian and Nepalese cuisine located in Česká Lípa, Czech Republic. The company, legally registered as Karki s.r.o., was founded in 2023 and has quickly established a strong local presence, supported by excellent customer reviews and recognition from Restaurant Guru. The website provides comprehensive information about the restaurant's offerings, including dine-in, online ordering through multiple partners, and event hosting services. The digital infrastructure is built on standard web technologies with a focus on responsive design and user experience, though it lacks advanced security headers and privacy compliance documentation. Security posture is moderate with HTTPS usage but could be improved with additional headers and policies. Overall, the website is professional and trustworthy but should address privacy and security policy gaps to enhance compliance and user trust.

J

Jakub Kokeš

kotviacatechnika.sk

53

Jakub Kokeš operates a specialized anchoring technology business primarily serving construction and industrial sectors in Slovakia and the Czech Republic. The company offers a wide range of fastening products such as screws, anchors, rivets, and related accessories, complemented by professional consulting and logistical services including free delivery and material returns. The website reflects a regional market position with multiple branch offices and localized contact points, targeting professional contractors and businesses in the construction industry. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a custom or proprietary CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. SEO and accessibility are adequately addressed, though some advanced security headers are missing. From a security perspective, the site enforces HTTPS and anonymizes user IPs in analytics, demonstrating a baseline security posture. Cookie consent mechanisms comply with GDPR requirements, providing users control over tracking preferences. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a moderate risk profile. Strategic enhancements in security transparency and technical hardening would further strengthen its posture.

DigitalBerry is a small Polish technology company specializing in designing dedicated internet solutions such as CMS, ERP, CRM systems, online stores, websites, and web/mobile applications. The website content is primarily marketing-focused, targeting businesses seeking custom internet solutions. The company presents itself as a service provider with a modest online presence and limited content depth. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and the Slick Carousel library for UI elements. The site shows basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. There is no evidence of a CMS or hosting provider from the provided data. From a security perspective, the site does not disclose any security policies, incident response contacts, or certifications. There is no visible enforcement of HTTPS or security headers, which lowers the security posture. No privacy or cookie policies are present, indicating poor privacy compliance. Contact information is provided clearly, but no active forms or user data collection mechanisms are enabled. Overall, the website is functional but basic, with moderate trustworthiness. The lack of privacy and security policies, combined with minimal content and no active user engagement features, suggests room for improvement in professionalism and compliance. The domain WHOIS data is consistent with the business claims, supporting legitimacy but no privacy protection is used.

A

Amgen

amgen.cz

10

Amgen Česká republika is the Czech Republic branch of Amgen, a global biotechnology company focused on developing innovative medicines for serious illnesses. The website serves as a corporate informational portal targeting healthcare professionals and patients in the Czech market. It highlights Amgen's commitment to scientific innovation and patient care. Technically, the site employs modern web technologies including HTTPS, Content Security Policy, and cookie consent mechanisms to ensure security and privacy compliance. The presence of Google Tag Manager and Cookiebot indicates a mature approach to analytics and GDPR compliance. Security posture is solid with HTTPS and CSP headers, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible and professionally designed. Overall, the website reflects a trustworthy and compliant corporate presence with good technical and security practices.

I

INISOFT s.r.o.

inisoft.sk

53

INISOFT s.r.o. is a specialized software development company focused on environmental and waste management solutions, primarily serving clients in Slovakia and the Czech Republic. Their flagship product, ENVITA, supports legislative compliance and operational efficiency in waste evidence and reporting. The company also offers training, consulting, and customer support, positioning itself as a trusted partner in the environmental sector. The website reflects a mature digital presence with clear business information, active news updates, and strong customer engagement. Technically, the site employs modern web technologies including structured data and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness.

I

Ing. Zuzana Balková EKO-IN®

eko-in.sk

47

EKO IN, operated by Ing. Zuzana Balková, is a Slovak-based environmental consultancy and training provider specializing in legislative compliance, audits, and support related to environmental and waste management laws. The website presents a professional and focused business offering services primarily to Slovak businesses and individuals seeking expertise in environmental legislation. The site is well-structured with clear navigation and modern frontend technologies, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, security headers, and analytics transparency, which impacts its overall security and compliance posture. No blocking or WAF mechanisms were detected, indicating full accessibility. Contact information is clearly provided, but no phone numbers or social media links are present.

U

Urząd Miasta Torunia

torun.pl

56

The website www.torun.pl is the official online presence of the City of Toruń, Poland. It serves as a comprehensive portal for residents, tourists, and businesses, providing extensive information on city governance, cultural events, tourism, education, sports, and development initiatives. The site is well-structured with clear navigation and consistent branding, reflecting its role as a trusted government resource. The content is primarily in Polish, targeting local and regional audiences, with links to English tourism resources.

F

Fundacja Polskiego Godła Promocyjnego Teraz Polska

terazpolska.pl

10

Fundacja Polskiego Godła Promocyjnego Teraz Polska is a well-established non-profit foundation founded in 1991, dedicated to promoting Polish business, products, services, and innovations through quality certification and promotional marks. The website serves as an informational and promotional platform targeting Polish businesses, municipalities, and consumers interested in Polish quality standards. The foundation holds a reputable market position as a recognized promoter of Polish business excellence. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, and various social media tracking pixels, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility improvements could be made. Security-wise, the website uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with no indications of malicious activity or content safety concerns.

U

Uniwersytet Mikołaja Kopernika

umk.pl

61

Uniwersytet Mikołaja Kopernika w Toruniu is a prominent public university in Poland, offering higher education and research services. The website serves multiple audiences including prospective students, current students, researchers, staff, and alumni. It highlights academic excellence initiatives and international partnerships, positioning itself as a major educational institution in the region. The site content is well-structured, professionally designed, and consistent with university branding. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with good mobile optimization and accessibility features. However, no advanced frameworks or CMS were detected. Performance is moderate with proper SEO meta tags and clear navigation. The absence of visible security headers and cookie consent mechanisms suggests room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS as implied by Open Graph URLs, but lacks explicit security headers and published security policies. No forms collecting sensitive data were found, reducing immediate risk exposure. The WHOIS data is missing, which is unusual and reduces domain trustworthiness. No WAF or blocking mechanisms were detected, and no adult or questionable content is present, making the site safe for general audiences. Overall, the website is credible and professional but would benefit from enhanced security practices, transparent privacy and cookie policies, and verification of domain registration details to improve trust and compliance.

P

Polskie Sieci Elektroenergetyczne S.A.

pse.pl

65

Polskie Sieci Elektroenergetyczne S.A. (PSE) operates as the national electricity transmission system operator in Poland, managing over 15,000 km of high-voltage lines and 109 substations. The company ensures reliable electricity transmission and system stability across the country. The website serves as a comprehensive portal for stakeholders, providing real-time system data, reports, news, consultations, and business partner resources. The site demonstrates a mature digital infrastructure leveraging modern web technologies and analytics tools, with a focus on transparency and user engagement. Security posture is strong with HTTPS enforcement and privacy compliance, though explicit security policies and incident response contacts could be enhanced. Overall, PSE's website reflects a professional, trustworthy, and well-maintained digital presence aligned with its critical national role.

Z

Zambelli Holding GmbH

zambelli.com

56

Zambelli Holding GmbH is a medium-sized manufacturing company based in Germany specializing in metal system solutions across multiple sectors including roof drainage, building envelopes, shelving systems, caravaning, heating technology, and industrial metalworking. The company maintains a professional and well-structured website that targets business customers and industry professionals, showcasing its diverse product and service offerings. The website demonstrates consistent branding and good content quality, supporting the company's established market position. Technically, the website is built on modern web standards with responsive design, leveraging technologies such as HTML5, CSS3, JavaScript, and Adobe Typekit fonts. The CMS identified is Contao, which supports structured content management. Performance and mobile optimization are good, though accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and there is no visible cookie consent mechanism, which could impact GDPR compliance. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and business information appear legitimate. Overall, the website presents a professional and trustworthy digital presence for Zambelli Holding GmbH, with recommendations to improve privacy compliance and security headers to enhance user trust and regulatory adherence.

J

Jakub Kokeš CZ, s.r.o.

kotevnitechnika.cz

52

Jakub Kokeš CZ, s.r.o. operates a specialized e-commerce and informational website focused on providing high-quality anchoring technology and fastening materials primarily for construction professionals such as roofing specialists and craftsmen in the Czech Republic and Slovakia. The company offers a broad product range including screws, dowels, anchors, rivets, and accessories, complemented by expert consulting and free services like delivery and pull tests. The website demonstrates a consistent brand presence with multiple physical branch locations, enhancing customer trust and accessibility. From a technical perspective, the website employs modern web technologies including JavaScript, Google Tag Manager, and analytics tools, with a responsive design optimized for mobile devices. SEO and navigation are well implemented, although some accessibility features could be improved. The site uses HTTPS with strong SSL configuration, but lacks some recommended security headers, which could be enhanced to improve security posture. Security-wise, the site shows good privacy compliance with a clear cookie consent mechanism and GDPR-aligned privacy policy. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are important for mature security governance. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and transparency are advised. Overall, the website is professional, trustworthy, and well-suited for its target audience. The absence of WHOIS data due to privacy protection is noted but does not detract significantly from legitimacy given the comprehensive contact information and business details. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to strengthen trust and compliance.

The website https://dach-checker.de/login serves as a login portal for CREATON GmbH's visualization service. It targets business users or clients who require access to specialized visualization tools or services. The site is branded consistently with CREATON GmbH and provides a basic but functional interface for user authentication. However, the site lacks comprehensive business information, privacy policies, and contact details, which limits transparency and user trust. Technically, the site uses standard HTML5, CSS, and JavaScript with a CSRF token implemented in the login form, indicating some security awareness. The absence of security headers and explicit HTTPS confirmation in the HTML content suggests room for improvement in security posture. The site does not employ external analytics, advertising, or tracking technologies, which reduces privacy concerns but also limits marketing insights. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks visible security best practices such as HTTP security headers and privacy compliance indicators. The WHOIS data is minimal but does not raise immediate red flags. Overall, the site scores moderately on content quality, technical implementation, and security posture but scores low on privacy compliance and business credibility due to missing policies and contact information. Strategic recommendations include implementing and publishing privacy and cookie policies, enhancing security headers and HTTPS enforcement, providing clear contact and business information, and adding vulnerability disclosure and incident response details to improve trust and compliance.

S

swissporTON

creaton.ua

55

swissporTON is a roofing materials manufacturer and distributor focused on high-quality ceramic and cement roof tiles, membranes, and roofing accessories. The company targets roofing professionals, distributors, architects, and end customers primarily in Ukraine and Europe. The website is professionally designed, content-rich, and well-structured, providing detailed product information and resources for professionals. Technically, the site uses modern web technologies including Google Tag Manager and Swiper.js, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. WHOIS data is unavailable, reducing transparency and trustworthiness from a domain registration perspective. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy compliance and security disclosures.

S

swissporTON

creaton.pl

55

swissporTON is a reputable manufacturer and distributor of roofing materials, specializing in ceramic and cement roof tiles, roofing accessories, and integrated photovoltaic systems. The company targets professional builders, distributors, architects, and individual investors primarily in Poland and Europe. The website reflects a mature digital presence with comprehensive product information, professional design, and clear navigation. Technically, the site uses modern web technologies and integrates popular analytics and marketing tools while maintaining good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable publicly, consistent with .pl domain privacy norms, and does not raise legitimacy concerns. Overall, swissporTON presents a trustworthy and professional business with a solid online presence.

W

W.A.G. payment solutions, a.s.

cvs-mobile.com

52

W.A.G. payment solutions, a.s., operating under the Eurowag brand, is a leading European provider of integrated mobility and payment solutions focused on the transportation sector. The company offers a comprehensive suite of services including fleet management telematics, fuel cards, toll payment solutions, tax refund services, and eMobility options. Their recent integration of CVS Mobile enhances their fleet management capabilities with advanced real-time tracking and route planning, positioning them strongly in the European transport market. The website reflects a mature digital presence with multi-language support and country-specific offerings, targeting fleet operators and logistics managers across Europe. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager for analytics and tracking, and intl-tel-input for phone input handling. The site is well-optimized for mobile devices, accessible, and fast-loading, demonstrating a high level of digital maturity. The presence of comprehensive legal, privacy, and cookie policies indicates a strong commitment to compliance and user privacy. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation, regulatory disclosures, and trust signals support a strong security posture. Overall, the website presents a low-risk profile with robust business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing an incident response page, and adding a vulnerability disclosure policy to further strengthen security transparency and resilience.

F

Franceinfo

francetvinfo.fr

10

Franceinfo is a prominent French public news media website providing real-time news updates, live information, and multimedia content such as photos, videos, and tweets. It targets a general audience interested in current events and live news coverage. The website demonstrates a high level of digital maturity with modern web technologies, mobile optimization, and strong branding consistency. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are not clearly presented in the HTML content. The absence of WHOIS data is likely due to registry privacy policies and does not detract significantly from the site's legitimacy given its public media status. Overall, Franceinfo is a trustworthy and professional news platform with room for improvement in privacy and security disclosures.

S

SPL-XDEMAT

spl-xdemat.fr

47

SPL-XDEMAT is a French public local company established in 2012 by multiple departmental governments to provide digital dematerialization services tailored for local authorities. The company offers a suite of applications and services including administrative document management, electronic signatures, public procurement platforms, and citizen communication tools. The website reflects a mature regional service provider with a strong focus on government clients and compliance with French regulations. Technically, the site uses standard web technologies such as jQuery and JavaScript, with a responsive and accessible design optimized for mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. The absence of WHOIS data limits domain legitimacy verification but the professional presentation and official departmental partnerships support trustworthiness.

S

SPL-XDEMAT

maelis.info

47

Maelis.info is the official website for the MAELIS application, a service provided by SPL-XDEMAT aimed at facilitating local community engagement through a smartphone app. The app offers practical information, alerts, incident reporting, and access to local public services and associations. The website is professionally designed with clear navigation and mobile optimization, targeting French local government citizens and community members. The business model focuses on providing a digital platform for local government communication and citizen participation. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery and AOS for animations. It supports mobile platforms with links to iOS and Android app stores. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common but reduces transparency. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with no signs of malicious content or suspicious behavior. Strategic recommendations include implementing security headers, adding cookie consent, improving privacy disclosures, and providing clear contact information for security incidents to enhance trust and compliance.

M

Meta

facebook.fr

74

Facebook, accessible via the fr-fr.facebook.com subdomain, is a leading social networking platform operated by Meta Platforms, Inc. The website serves the French-speaking audience in France, providing a localized interface for users to connect, share, and communicate. As part of Meta's extensive ecosystem, Facebook maintains a dominant market position with a broad range of services including messaging, video content, and advertising solutions. The platform's business model is primarily advertising-based, leveraging extensive user data to deliver targeted ads. The website's content is professionally presented, with clear navigation and strong branding consistent with Meta's corporate identity. Technically, the website employs modern web technologies such as React and BigPipe for efficient content delivery and dynamic user experiences. The site is optimized for performance and mobile responsiveness, ensuring accessibility across devices. Security is robust, with HTTPS enforced, secure cookies, and standard security headers like HSTS. The login form includes anti-CSRF tokens and secure input handling, reflecting good security practices. Privacy and cookie policies are comprehensive and GDPR compliant, demonstrating Meta's commitment to regulatory adherence. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. While no explicit incident response or vulnerability disclosure pages are found, the overall security framework appears mature. The website integrates multiple analytics and marketing tools, including Meta Pixel and Google Analytics, enabling extensive user tracking balanced with privacy compliance. No adult or questionable content is present, making the site safe for general audiences. Overall, Facebook's French site is a high-quality, secure, and professionally managed platform aligned with Meta's global standards. It effectively serves its target audience with a reliable and trustworthy user experience, supported by a mature technical infrastructure and strong business credibility.

H

Hurricane Electric

he.net

61

Hurricane Electric is a well-established Internet backbone and colocation provider founded in 1995, offering global IP Transit, Layer 2 transport, colocation, dedicated servers, and IPv6 certification services. The company targets ISPs, enterprises, and network operators seeking reliable and scalable Internet infrastructure. Their market position is strong, supported by a large IPv6 deployment and global network presence. Technically, the website uses standard web technologies with Google Analytics and Google Ads integrated for tracking and marketing. The site is moderately optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is moderate; while HTTPS is implied, no DNSSEC or security headers are enabled, and no explicit security policies or incident response contacts are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the domain WHOIS data confirms legitimacy and long-term operation, enhancing trust. Strategic improvements in security headers, DNSSEC, and privacy compliance would strengthen the security and compliance posture.

Manpower France operates as a leading recruitment and temporary staffing agency in France, providing a wide range of employment services including permanent and fixed-term contracts. The company is part of the global ManpowerGroup, which enhances its market position and credibility. The website is professionally designed, targeting job seekers and employers with clear navigation and comprehensive service offerings. The content is primarily in French, reflecting its local market focus. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. Security best practices are observed with HTTPS enforcement and appropriate security headers, although there is room for improvement in accessibility and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is readily available, including a dedicated Data Protection Officer email, enhancing trust and compliance. Overall, the website presents a low risk profile with a solid business credibility and technical foundation. The main limitation is the absence of WHOIS data, which is likely due to registry policies but should be monitored. Strategic recommendations include establishing a public vulnerability disclosure policy and enhancing accessibility features.

Eline GmbH operates a professional e-commerce website targeting the electrical and information technology trade sector in Germany. The company offers specialized products such as inspection stickers, inspection protocols, advertising materials, and printed matter. Founded in 1991, the business leverages a Shopify platform with a modern technical infrastructure including JavaScript frameworks, hCaptcha for form security, and GDPR-compliant cookie consent mechanisms. The website is well-structured, mobile-optimized, and integrates social media channels to enhance customer engagement. Security posture is solid with HTTPS enforced and basic protections in place, though improvements in security headers and DNSSEC are recommended. Overall, the site presents a trustworthy and professional online presence with no critical vulnerabilities detected.

N

NETINERA

netinera-tickets.de

62

NETINERA operates a digital platform and app for the Deutschland-Ticket, a nationwide public transportation subscription in Germany. The company is a major player in the German regional transport sector, operating multiple subsidiary brands. The website provides comprehensive information about ticketing options, app usage, and subscription management, targeting private customers, students, apprentices, and employers. Technically, the site uses modern web standards, is hosted behind Cloudflare, and implements HTTPS with strong security headers. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-optimized for its audience.

M

metronom Eisenbahngesellschaft mbH

der-metronom.de

56

metronom Eisenbahngesellschaft mbH operates regional passenger rail services connecting key northern German states including Niedersachsen, Hamburg, and Bremen. The company positions itself as a reliable regional transport provider with a focus on customer service, real-time travel information, and sustainable mobility. Their business model centers on providing scheduled train services, ticketing solutions, and substitute bus services during infrastructure works. The website reflects a medium-sized enterprise with consistent branding and a strong regional presence supported by partnerships with local transport authorities and the parent company Netinera. Technically, the website employs modern web technologies including Progressive Web App features, service workers, and integrates third-party widgets for travel planning. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured content. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR. Overall, the website is professional, trustworthy, and well-suited for its audience. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.

L

Landesverkehrsgesellschaft Niedersachsen mbH (LNVG)

mobilotsin-niedersachsen.de

43

MOBILOTSIN is a regional initiative under the Landesverkehrsgesellschaft Niedersachsen mbH (LNVG) focused on supporting municipalities and counties in Lower Saxony, Germany, with innovative mobility concepts and the traffic transition. The website presents a professional and consistent brand image, offering services such as consulting, qualification courses, and events. The target audience primarily includes local government entities and stakeholders involved in mobility management. The digital infrastructure is built on the ProcessWire CMS with modern JavaScript libraries enhancing user experience. The site is mobile-optimized and well-structured, providing clear navigation and relevant content including event listings and newsletter subscription. From a security perspective, the website uses HTTPS and does not expose sensitive data in the HTML content. However, there is no evidence of advanced security headers or published security policies, and no cookie consent mechanism is present, which could be improved for better compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Contact information is clearly provided, enhancing business credibility. WHOIS data shows consistent domain registration with no privacy protection, aligning with the website's governmental affiliation. Overall, the website demonstrates a solid technical foundation and business credibility with room for improvement in privacy compliance and security best practices. The content is safe and appropriate for a general audience, with no adult or questionable material detected.

M

MDCV Distribution

mdcvpro.fr

72

MDCV Distribution operates a professional B2B e-commerce platform specializing in the sale of wines from Provence to hospitality professionals such as cavistes and restaurants in France. The website offers competitive pricing, free delivery for orders over 500€, and promotional gifts for first-time customers, positioning itself as a niche regional wine distributor. The site is built on the Shopify platform using a modern, responsive theme, ensuring a good user experience across devices. It integrates multiple marketing and analytics tools, including Klaviyo and Google Tag Manager, to support customer engagement and business intelligence. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers, contributing to a robust security posture. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent banner, and GDPR adherence indicators. However, the absence of publicly available WHOIS data due to registry privacy policies limits transparency regarding domain ownership. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance trust. Overall, MDCV Distribution presents a professional and secure online presence suitable for its target B2B audience. The site demonstrates good technical maturity and privacy compliance, though it would benefit from enhanced transparency in domain registration and explicit security policies. Strategic recommendations include publishing security and incident response policies, implementing a vulnerability disclosure program, and maintaining regular audits of third-party integrations to mitigate risks.

ICTUS o.p.s. is a Czech non-profit organization established in 2007, dedicated to supporting individuals recovering from stroke through rehabilitation and therapeutic stays in the Krkonoše region. The website communicates the organization's mission clearly and provides information about upcoming therapeutic stay dates and services. The target audience primarily includes stroke survivors and their families seeking rehabilitation support. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons, with a simple slideshow and basic mobile optimization. However, it lacks advanced frameworks or CMS platforms and does not implement modern security headers or privacy policies. Security posture is moderate with HTTPS assumed but no explicit security headers or privacy compliance mechanisms in place. No forms or analytics scripts are present, reducing data exposure risks but also limiting user engagement tracking. Overall, the website is functional and professional but could benefit from enhanced security and compliance features.

N

Nadační fond Čas je mozek

nfcasjemozek.cz

42

Nadační fond Čas je mozek is a Czech non-profit organization dedicated to stroke awareness, education, and patient rehabilitation support. The foundation educates the public on stroke symptoms and the importance of timely emergency response, organizes fundraising events, and provides financial aid to stroke survivors. The website reflects a focused mission with clear content and active social media engagement. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Analytics, with a cookie consent mechanism implemented. However, the absence of a privacy policy and security headers indicates room for improvement in privacy and security compliance. The WHOIS data is missing, which limits domain trust verification, but the website content and contact information support legitimacy. Overall, the site is well-structured and professional, serving a clear non-profit healthcare mission.

N

Nadační fond Čas je mozek

casjemozek.cz

44

The website www.casjemozek.cz represents a Czech non-profit initiative named 'Čas je mozek' focused on educating the public about stroke symptoms, prevention, and treatment. Founded in 2015, it is affiliated with reputable Czech medical societies, providing authoritative content and organizing charitable events. The site offers extensive educational resources, patient stories, and news updates, targeting the general public and healthcare professionals in the Czech Republic. Technically, the site uses modern web technologies including JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly reduce its trustworthiness. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response contacts. Overall, the site is a credible and valuable resource for stroke awareness but would benefit from enhanced transparency and security best practices.

F

Friedrichstadt

friedrichstadt.de

59

The website www.friedrichstadt.de serves as a tourism and cultural promotion platform for the town of Friedrichstadt in Schleswig-Holstein, Germany. It highlights local attractions such as canal tours and city walks, targeting tourists and visitors interested in nature and cultural experiences. The site is built on TYPO3 CMS and employs Cookiebot for cookie consent management, indicating a basic level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which limits full compliance and transparency. Technically, the site shows moderate performance and good mobile optimization but lacks visible security headers and advanced security policies. The domain is hosted by netcup GmbH, consistent with the German location, and shows no signs of blocking or WAF interference.

T

Thomann

thomann.de

60

Thomann is a leading European e-commerce retailer specializing in musical instruments and related accessories. The website serves a broad international audience with multiple language and country-specific versions, positioning itself as Europe's largest music retailer. The platform offers a wide range of products including guitars, drums, studio equipment, lighting, and PA systems, supported by strong customer service features such as a 30-day money-back guarantee and a 3-year warranty. Technically, the website employs modern web technologies including JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

C

Commissariat aux Assurances

caa.lu

61

The Commissariat aux Assurances website serves as the official regulatory authority for the insurance sector in Luxembourg. It provides comprehensive information and resources for insurance operators, consumers, and stakeholders, including regulatory documents, circulars, and consumer alerts. The site is professionally designed with clear navigation and bilingual support (French and English), targeting industry participants and the general public interested in insurance regulation. Technically, the website employs a modern but straightforward technology stack including jQuery and tarteaucitron.js for cookie consent management. The site is accessible, mobile-optimized, and includes SEO best practices. However, no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the official .lu domain and professional content support legitimacy. Google Analytics is used with user consent, indicating privacy awareness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility to further strengthen trust and compliance.

The website at thrive-production.fr is a default landing page hosted and managed by IONOS SE, a well-known European web hosting and domain registration provider. The site currently serves as a placeholder indicating the domain is registered and accessible, but no custom business content or branding is present. The page promotes IONOS services such as domain registration, web hosting, virtual servers, and website building tools, targeting individuals and businesses seeking to establish an online presence. The domain is newly registered in 2023 and is consistent with IONOS's domain management practices. Technically, the site uses standard HTML5, CSS3, and JavaScript without any detected CMS or advanced frameworks. The hosting provider is IONOS SE, and the site shows moderate performance and good mobile optimization. However, SEO optimization is poor due to missing meta tags and structured data. No analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by IONOS hosting), but no security headers are detected in the HTML content. The form present uses POST method but no advanced security or privacy policies are visible. No vulnerabilities or exposed sensitive data were found, but the absence of privacy and cookie policies and security headers lowers the security posture score. Overall, the site is safe with no adult or questionable content. The lack of custom content and policies suggests it is a placeholder rather than an active business site. Strategic recommendations include adding privacy and cookie policies, implementing security headers, improving SEO metadata, and providing clear contact information to enhance trust and compliance.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

LTDesign.sk is a small Slovakian web design and e-commerce development service provider operated by Ing. Ján Chudý. The company offers affordable website and e-shop creation services targeting small businesses and individuals in the local market. The website is minimalistic, providing basic contact information and branding but lacks comprehensive content and policies. Technically, the site uses standard HTML5 and CSS3 with Google Fonts but does not demonstrate advanced frameworks or CMS usage. The absence of HTTPS and security headers indicates a weak security posture, and no privacy or cookie policies are present, which may impact compliance with GDPR regulations. Overall, the site is functional but basic, with room for significant improvements in security, privacy, and content richness.

L

Landesinnungsverband Sachsen-Anhalt der Elektrohandwerke

elektrohandwerk-sachsen-anhalt.de

38

The Landesinnungsverband Sachsen-Anhalt der Elektrohandwerke is a regional industry association representing electrical trades in the German state of Sachsen-Anhalt. The website serves as an information hub for professionals, businesses, and stakeholders in the electrical, energy, and related sectors, offering details on industry events, training, membership, and sector news. It positions itself as a key regional player facilitating networking, education, and industry standards. Technically, the site is built on TYPO3 CMS, employs modern web standards, and is hosted with reputable DNS providers. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks some security headers and formal security policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

F

Fachverband Elektro- und Informationstechnik Sachsen/Thüringen

elektro-sachsen-thueringen.de

38

The Fachverband Elektro- und Informationstechnik Sachsen/Thüringen is a regional trade association representing electrical and information technology craftsmen and companies in the German states of Saxony and Thuringia. The website serves as a professional platform offering information about the association, upcoming events, employee training, and member services. It targets electrical trade professionals and companies seeking industry support and networking. The business model focuses on member representation, training, and industry promotion within the regional market. Technically, the website is built on TYPO3 CMS, hosted on Strato servers, and integrates modern marketing and analytics tools such as Usercentrics CMP, Google Tag Manager, and TikTok Pixel. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with consent management, reflecting good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the association's credibility and member engagement.