Security Directory

S

Somfy

somfy.de

67

Somfy is a well-established company specializing in motorized shading and smart home solutions, with a strong market presence in Germany and internationally. The website serves primarily B2C customers but also supports professional partners and installers. The company offers a comprehensive product range including motors, sensors, controls, and smart home integration, supported by an e-commerce platform and extensive customer support resources. Technically, the website uses modern JavaScript libraries, performance monitoring tools, and marketing integrations, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and secure session management, though some security headers could be improved and a formal security policy is absent. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and trust signals such as Trusted Shops certification.

S

Somfy

somfy.ch

69

Somfy is a well-established company specializing in motorized shading products and smart home automation solutions, targeting both private customers and professional partners. The website reflects a mature digital presence with comprehensive product offerings, multilingual support, and clear navigation tailored for the Swiss market. The company leverages modern web technologies and performance monitoring tools to ensure a fast and responsive user experience. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, although some security headers could be enhanced. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

S

Somfy

somfy.com.br

66

Somfy Brazil is a leading manufacturer and provider of motorized solutions for window coverings and smart home automation, serving both residential consumers and professional markets. The company offers a wide range of products including motors for blinds, curtains, awnings, gates, garage doors, and integrated smart home controls. The website is well-structured, professionally designed, and optimized for performance and mobile devices, reflecting a mature digital presence. The technical infrastructure leverages modern JavaScript frameworks, responsive design, and performance monitoring tools, hosted on a reliable CDN and infrastructure provider. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in explicit security policies and vulnerability disclosure. Overall, the domain registration and WHOIS data align well with the company's branding and history, supporting high legitimacy and trustworthiness.

S

Somfy

somfy.bg

66

Somfy Bulgaria operates as a localized branch of the international Somfy Group, specializing in motors, automation, and smart home solutions primarily for window coverings, gates, security, and energy efficiency. The website is professionally designed, well-structured, and targets both consumers and professionals in Bulgaria. It offers a comprehensive product catalog and support resources, reflecting a mature business model with strong market positioning in the smart home and energy sectors. Technically, the site uses modern JavaScript frameworks, CDN hosting via Akamai, and performance monitoring tools, ensuring fast and responsive user experience across devices. Security posture is solid with HTTPS and no visible vulnerabilities, though some advanced security headers and explicit cookie consent mechanisms could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

S

Somfy

somfybaltics.com

62

Somfy Baltics is a well-established company specializing in home automation solutions, including motorized blinds, gates, security systems, and smart home controllers. The company operates primarily in the Baltic region, offering a comprehensive product portfolio and professional support services. Their market position is strong, supported by over 50 years of experience and affiliation with the Somfy Group. The website reflects a mature digital presence with good content quality and user experience tailored to residential and commercial customers. Technically, the site uses modern web technologies and is optimized for mobile devices, though some accessibility improvements could be made. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from enhanced security headers. The absence of WHOIS registration data is a notable gap in transparency, warranting further verification. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Somfy

somfy.com.au

66

Somfy Australia operates as a leading provider of motorisation, automation, and smart home solutions focused on window coverings, gates, and related home automation products. The company is part of the global Somfy Group and targets Australian consumers and businesses seeking connected home technologies. Their website demonstrates a strong market position with comprehensive product offerings and support services. Technically, the site is built on a modern, custom platform with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though server-side security headers should be verified. Overall, the domain and website content align well, with privacy-protected WHOIS data typical for commercial entities. The site is trustworthy, professional, and compliant with privacy regulations.

S

Somfy

somfy.tn

64

Somfy Tunisia operates as a regional branch of the global Somfy Group, specializing in motorization and home automation products such as motorized shutters, blinds, garage doors, and smart home solutions. The website positions itself as a leader in the motorization market, targeting consumers in Tunisia with a B2C business model. The company benefits from a strong brand presence and a comprehensive product offering supported by expert services and local dealer networks. Technically, the website employs modern JavaScript frameworks, privacy management tools, and performance monitoring, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident, though some security headers and explicit security policies are absent. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

A

Affinity Fundraising Registration

afrportal.com

53

The website afrportal.com hosts a customer login portal titled 'Affinity Fundraising Registration' for the Affinity Single Portal® service. The portal appears to be designed for customers to access fundraising management services. The domain was registered in early 2022 and is currently active with Cloudflare DNS services. The site uses basic web technologies including HTML, CSS, JavaScript, and jQuery, with a slider captcha (QapTcha) implemented to prevent automated login attempts. The content is minimal and focused solely on login functionality without additional business or policy information. From a technical perspective, the site employs standard web technologies but lacks advanced security headers and visible HTTPS enforcement details in the provided data. The use of Cloudflare DNS and a reputable registrar adds some trustworthiness. However, the absence of privacy, cookie, or terms of service policies, as well as lack of contact information, limits the site's compliance and transparency. Security posture is moderate with some anti-bot measures but missing critical security headers and no visible multi-factor authentication. The domain registration data is consistent with the business purpose and shows no suspicious patterns. Overall, the site is functional but basic, with room for improvement in security, privacy compliance, and user trust signals. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, improving form security, and providing clear contact information to enhance trust and compliance.

I

InsiderData360

insiderdata360online.com

45

InsiderData360 operates a proprietary dashboard platform, likely focused on data analytics or business intelligence services. The website serves primarily as a login portal for authorized users to access the dashboard. The business appears to be a small technology company founded around 2018, with claims of proprietary technology protected by patents. The platform targets business users requiring data insights and dashboard services. Technically, the website uses modern web technologies including Bootstrap, Chartist.js, Moment.js, and integrates Calendly for scheduling. The site is basic in design and functionality, optimized for desktop and mobile with minimal content beyond the login form. Security posture is moderate but lacks advanced protections such as security headers, CSRF tokens, and CAPTCHA on login forms. No privacy or cookie policies are present, indicating limited compliance with privacy regulations. The domain registration is consistent and stable, supporting legitimacy. Overall, the site is functional but could benefit from enhanced security and compliance measures.

S

STORCK Česká republika, s.r.o.

storck.cz

60

STORCK Česká republika, s.r.o. operates as a regional subsidiary of the international Storck group, specializing in the manufacturing and distribution of confectionery products in the Czech Republic. The website serves as a corporate portal providing brand information, product news, and consumer services. The company maintains a consistent brand presence with multiple official brand pages linked and a clear focus on consumer engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and asynchronous loading for performance and user experience. The site is mobile optimized and includes accessibility features, ensuring broad usability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response information are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and brand association. Overall, the site is well-maintained, GDPR compliant, and trustworthy for general audiences.

V

VIF

vifsports.cz

58

VIF is a Czech-based sports eyewear brand founded in 2020, offering a range of sport-specific glasses and accessories primarily through an e-commerce platform. The company supports professional sports initiatives such as a women's cycling team and a youth sports incubator, positioning itself as a leader in the Czech sports retail market. Technically, the website is built on the Shoptet platform, leveraging modern tracking and marketing technologies with a good level of privacy compliance and security best practices. The absence of WHOIS data limits domain trust assessment but the website content and business presence appear professional and credible. Security posture is strong with HTTPS and security headers, though no explicit security or incident response policies are published. Overall, the site provides a good user experience with clear navigation, responsive design, and comprehensive cookie consent mechanisms.

H

Hotel Imperial *****

spa-hotel-imperial.cz

66

Hotel Imperial is a luxury hospitality business located in Karlovy Vary, Czech Republic, with a rich tradition dating back to 1912. The hotel offers a wide range of services including accommodation in various room categories, wellness and spa treatments, gastronomy through multiple restaurants and cafés, and event hosting facilities. The website reflects a well-established market position targeting luxury travelers and wellness guests. Technically, the website employs modern web technologies such as lazy loading, Google Analytics, Facebook Pixel, and a custom booking form, ensuring a smooth user experience with mobile optimization and good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data is a notable gap that slightly reduces trustworthiness but does not detract significantly from the overall professional presentation. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve business credibility and compliance.

DELUXEA a.s. is a Czech Republic-based luxury travel agency specializing in tailor-made exotic vacations and tours since 1995. The company positions itself as a premium service provider with extensive personal travel experience and a strong reputation supported by thousands of client reviews and high ratings. Their website offers comprehensive travel services including hotel bookings, flight arrangements, and personalized travel consulting, targeting affluent travelers seeking bespoke holiday experiences. Technically, the website employs modern JavaScript frameworks, integrates multiple marketing and analytics tools, and provides a responsive, well-structured user experience. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though lacks a publicly available security policy or incident response details. The absence of WHOIS data reduces transparency and trust slightly, but overall the business credibility remains high based on content quality and trust signals. Strategic recommendations include publishing security and incident response policies and improving domain registration transparency.

R

Rudy Lis

skleprl.pl

60

Rudy Lis is a Polish e-commerce retailer specializing in photography and video equipment, targeting photographers, filmmakers, streamers, and content creators such as TikTokers and YouTubers. The business offers product sales alongside consulting, project design, installation, and training services. The website is built on the Shoper platform and hosted by nazwa.pl, with a modern but basic technical infrastructure including Google Analytics and reCAPTCHA for security. The domain is newly registered in May 2024, consistent with a recently launched business. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are not present, indicating compliance gaps. Overall, the site provides a professional user experience with good navigation and mobile optimization but requires improvements in privacy compliance and security best practices.

H

Handpan s.r.o.

neo-handpan.cz

53

Handpan s.r.o., operating the website neo-handpan.cz, is a small Czech company specializing in the artisanal production of NEO handpans, unique handcrafted musical instruments. The business is led by Jiří Káš, who personally manufactures the instruments and offers workshops and courses. The company has a strong local presence and is recognized by Czech musicians and media. Technically, the website is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance mechanisms. The site does not expose sensitive data and shows no signs of vulnerabilities. Overall, the business is credible and trustworthy, but it should improve privacy and cookie policies to enhance compliance and user trust.

O

OMAX Holding s.r.o.

befity.cz

56

Befity.cz is a Czech online magazine dedicated to promoting an active lifestyle through fitness, health, nutrition, and psychological well-being content. Operated by OMAX Holding s.r.o., the site maintains a strong market position within the Czech media landscape, supported by partnerships with related media brands such as bety.cz and prostreno.cz. The platform offers a mix of editorial content, product testing, and advertising services, targeting a general adult audience interested in health and fitness. Technically, the site employs modern JavaScript libraries and ad technologies, with a custom CMS backend. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from additional security headers and explicit incident response documentation. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for its audience.

L

Les Amis de la Terre France

amisdelaterre.org

51

Les Amis de la Terre France is a well-established non-profit environmental organization founded in 1970, dedicated to protecting the environment, climate, and human rights through investigation, awareness, advocacy, and civil disobedience. The website reflects a mature digital presence with active campaigns, local group news, and donation capabilities, targeting a general audience interested in environmental activism. Technically, the site is built on WordPress with modern JavaScript libraries, optimized for performance and mobile responsiveness, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and reCAPTCHA v3 implemented, though some security headers could be improved. Privacy compliance is evident with a privacy policy and cookie consent mechanism, but no explicit terms of service or security policy pages were found. WHOIS data is unavailable, which slightly reduces trust but the overall site professionalism and content quality support legitimacy.

R

renault

renault.es

69

Renault España operates as the official Spanish website for Renault, a major automotive manufacturer offering a wide range of vehicles including electric, hybrid, and commercial models. The site targets general consumers in Spain interested in purchasing new vehicles, providing detailed vehicle information, configuration options, and stock availability. The website demonstrates a high level of digital maturity with modern technologies such as React, optimized images, and integration of Google Analytics and Tag Manager for analytics and marketing purposes. Security measures are robust with HTTPS enforcement and security headers, alongside a cookie consent mechanism ensuring compliance with privacy regulations. However, explicit privacy policies, terms of service, and clear contact information are not found in the provided content, representing areas for improvement. Overall, the site is professional, trustworthy, and well-optimized for user experience.

G

Gic

recargagic.com

62

Gic is a Spanish company specializing in the installation and management of electric vehicle charging points, serving individual consumers, businesses, and public sectors. The company positions itself as a national leader with a strong reputation and high customer satisfaction. Their digital presence is built on a WordPress platform with multilingual support and SEO optimization, reflecting a moderate to good level of technical maturity. The website includes comprehensive privacy and cookie policies with active consent mechanisms, indicating good privacy compliance. Security posture is adequate with HTTPS enabled but lacks advanced HTTP security headers, suggesting room for improvement. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position effectively.

WhistleblowerSoftware.com is a professional SaaS provider specializing in whistleblowing systems designed for organizations ranging from 50 to over 10,000 employees. The company, branded as Formalize, offers a secure, GDPR-compliant platform with ISAE 3000 certification and end-to-end encryption, positioning itself as a leading solution in the whistleblowing software market. The website reflects a mature digital presence with a modern tech stack hosted on AWS and utilizes Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The integration of multiple analytics and marketing tools indicates a data-driven approach to customer engagement and business growth. Security posture is solid with HTTPS enforced and domain registration consistent with the business profile, although DNSSEC is not enabled and some security headers appear absent. No explicit privacy policy or terms of service were found in the provided content, which is a notable gap in compliance documentation. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in explicit security and compliance disclosures.

S

Slunečnice Food s.r.o.

jidelnaslunecnice.cz

51

Jídelna Slunečnice is a small-scale food service business operating in Brno, Czech Republic, with a focus on providing affordable and honest meals, particularly targeting seniors and the local community. The business offers onsite meal pickup, meal delivery services, and an online ordering system, positioning itself as a community-oriented social dining provider. The website is professionally designed, mobile-optimized, and provides clear information about services and contact details, although it lacks phone contact information. Technically, the website is built on the Webnode platform, leveraging Amazon Cloudfront CDN for hosting and Google Tag Manager for analytics. The site uses HTTPS, ensuring secure communication, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. From a security perspective, the site shows basic good practices such as HTTPS usage and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The privacy policy is present and appears GDPR compliant, but cookie consent is missing. Overall, the security posture is moderate but could be improved with additional headers and compliance features. The overall risk assessment indicates a generally trustworthy and functional website for a local food service business, but the missing WHOIS data and lack of cookie consent reduce trust and compliance scores. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and verifying domain registration details to enhance credibility and compliance.

M

Město Třebíč

trebic.cz

49

The website www.trebic.cz serves as the official digital presence of the city of Třebíč, Czech Republic. It provides comprehensive information and services for residents, tourists, and local businesses, including municipal news, event updates, electronic citizen services, and urban development projects. The site is well-structured and targets a broad audience interested in local government and community activities. Technically, the site uses a custom CMS platform (Vismo) and integrates several Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate. The website is mobile-optimized, accessible, and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it lacks visible security headers and does not publish formal security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and security posture. Overall, the website is trustworthy and professional, with clear contact information and official branding. The absence of WHOIS data limits domain trust assessment but does not detract from the site's legitimacy as a government portal. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to strengthen security and compliance.

V

Vinařství Málek Valtice s. r. o.

malekvaltice.cz

57

Vinařství Málek Valtice s. r. o. operates a historic wine cellar and accommodation business located in Valtice, Czech Republic, a renowned wine tourism destination. The company offers wine cellar tours, tastings, event hosting, and accommodation in both rooms and modern apartments. Their market position is that of a specialized local hospitality provider catering primarily to tourists and wine enthusiasts visiting the South Moravia region. The website reflects a professional and consistent brand image with good content quality and clear service descriptions. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It uses modern web technologies including JavaScript and CSS, and is served over HTTPS ensuring secure communication. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured content. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent banner, demonstrating some compliance with privacy regulations. However, it lacks explicit security headers and published privacy or security policies, which are important for comprehensive security posture. The absence of WHOIS data reduces domain trust verification, though the website content and business details appear legitimate and professional. Overall, the website presents a trustworthy and professional front for a small hospitality business with moderate technical maturity and security posture. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and trustworthiness.

I

IndyMotion

indymotion.fr

48

IndyMotion is an independent French-language PeerTube instance offering free and unlimited video hosting access primarily to individuals and organizations with a non-profit focus. The platform leverages the open-source PeerTube technology to provide decentralized video streaming and live chat capabilities. The website presents a consistent brand and clear business purpose, targeting the French-speaking community interested in alternative video hosting solutions. Technically, the site uses modern web technologies including Angular and PeerTube version 7.3.0, hosted on Scaleway infrastructure in France. The platform supports advanced video streaming features such as HLS and WebRTC, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and transparency. The site is safe for general audiences with no adult or explicit content detected.

The website bewanted.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page, which prevents access to any substantive content. As a result, no direct business information, contact details, or policies are available for analysis. The domain is registered since 2012 with GoDaddy and uses Cloudflare for DNS and security, indicating a mature and legitimate registration. However, the lack of accessible content limits the ability to assess the company's market position, services, or compliance posture. Technically, the site relies on Cloudflare's security infrastructure but lacks DNSSEC and visible security headers in the provided HTML snippet. Privacy and cookie policies are not found, and no contact or incident response information is available. The site does not expose any adult or explicit content and appears safe in terms of content safety.

T

Teamwork

teamwork.com

76

Teamwork is a well-established SaaS company specializing in project and resource management software designed for busy teams. The company offers a comprehensive suite of tools including project management, resource allocation, collaboration, time tracking, and helpdesk solutions. Positioned strongly in the technology sector, Teamwork targets business teams and project managers globally, with a focus on improving productivity and workflow efficiency. The website reflects a mature digital presence with professional branding and clear messaging aligned with its business objectives. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a fast, responsive, and accessible user experience across devices. The infrastructure appears robust with good SEO practices and performance optimizations. Security measures are well implemented, including HTTPS enforcement and multiple security headers, although explicit security policies and incident response details are not publicly disclosed. From a security standpoint, the site demonstrates strong baseline protections but lacks transparency in vulnerability disclosure and incident response readiness. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional web presence and external trust signals. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, Teamwork presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure programs to enhance trust and compliance further.

R

restartuj s.r.o.

fanonline.cz

38

FANonline.cz is a Czech cultural and entertainment website operated by restartuj s.r.o., providing event listings, club and cinema information, and contests primarily targeting the Prague region. The site serves as a local media platform with advertising partnerships and a modest user base. Technically, the website uses basic JavaScript and jQuery libraries along with Google Analytics for tracking. The site lacks modern CMS indications and shows limited mobile optimization and accessibility features. Security posture is weak due to missing HTTPS confirmation and absence of security headers or privacy policies. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, although the presence of company contact information partially mitigates trust issues. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

O

OMAX Holding s.r.o.

bety.cz

48

Bety.cz is a Czech online magazine primarily targeting women and mothers, offering lifestyle content including horoscopes, recipes, discussions, and product testing. Operated by OMAX Holding s.r.o., the site has a solid market position within the Czech media sector, focusing on family and women's interests. The website demonstrates a mature digital presence with structured data, social media integration, and a comprehensive content offering. Technically, it employs modern JavaScript frameworks and ad management tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and consent management, though lacking explicit security headers and incident response information. The absence of WHOIS registrant data reduces domain trust verification but does not detract significantly from the overall legitimacy given the business transparency and policy disclosures.

B

BEST OF NATURE

bestofnature.cz

61

Best of Nature is a small Czech Republic-based retailer specializing in natural plant-based oils and wellness products, including aromatherapy and traditional herbal remedies. The company operates an e-commerce platform complemented by physical exhibitions and events to engage customers directly. Their market position is niche, targeting consumers interested in natural health and wellness. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern frontend technologies such as Vue.js and FontAwesome, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is strong with a comprehensive GDPR policy and cookie management. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site scores well in content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy platform for its target audience.

The website justformen.cz represents FACTUM CZ, s.r.o., a company specializing in men's hair and beard coloring products, positioning itself as a global leader in this niche. The site offers detailed product information and a contact form for wholesale inquiries, targeting male consumers interested in grooming products. The technical infrastructure is based on standard web technologies with moderate performance and good mobile optimization, hosted likely by Active24 with a CMS platform inferred as WebSupport Sitebuilder. Security measures include HTTPS and hCaptcha integration, but lack advanced security headers and formal privacy or terms policies, indicating room for compliance improvement. Overall, the site is legitimate, professionally presented, and safe for general audiences.

R

Radůzy Recepty.com

raduzyrecepty.com

37

Radůzy Recepty.com is a Czech-language culinary website offering over 3600 recipes, cooking ideas, inspirations, contests, and step-by-step cake decoration guides. It targets cooking enthusiasts primarily in the Czech Republic, providing a niche content platform with community discussion features and user-generated content sections. The business model appears to be content-driven with monetization through advertising and affiliate partnerships. Technically, the site is built on the Estranky.cz CMS platform, utilizing legacy JavaScript libraries such as jQuery 1.12.4 and Google services for analytics and advertising. While the site is accessible and content-rich, it lacks modern technical optimizations and comprehensive privacy or security policies. Security posture is moderate with outdated libraries and missing security headers, and WHOIS data is unavailable, raising some legitimacy concerns. Overall, the site provides valuable culinary content but would benefit from technical and security improvements.

The website natural-sport.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks direct access to its content. This prevents extraction of business details, contact information, policies, or any other substantive content. The domain is registered since 2008 with REG-WEDOS and uses Cloudflare for DNS and security services. Due to the blocking, the technical infrastructure appears to leverage modern security mechanisms, but the actual website content and business model cannot be assessed. The security posture benefits from Cloudflare's protection, but the lack of accessible content limits further evaluation. Overall, the site is low in transparency and business credibility from the accessible data.

N

Nailpro Czech – Šampionát v nail designu a nail artu

nailproczech.com

59

Nailpro Czech is a niche website dedicated to organizing and promoting nail design and nail art championships in the Czech Republic. The site targets professionals and enthusiasts in the nail art industry, providing event information and competition details. The business operates primarily as an event organizer within the beauty and personal care sector, with a focus on the Czech market. The domain has been active since 2017, indicating a stable presence in its niche. Technically, the website is built on the WordPress platform, utilizing standard web technologies such as PHP, JavaScript, and CSS. Hosting is provided by WEDOS Internet, a reputable Czech hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices appear adequate with proper meta tags and structured content. From a security perspective, the website employs HTTPS, ensuring encrypted communication. However, it lacks advanced security headers and DNSSEC is not enabled, which could expose it to certain DNS-related risks. No explicit security policies or incident response mechanisms are publicly documented. The cookie policy with consent mechanism is present, but privacy and terms of service policies are missing, indicating partial compliance with privacy regulations. Overall, the website is functional and professionally presented but would benefit from enhanced security measures and improved privacy compliance. Strategic recommendations include implementing comprehensive privacy and terms policies, enabling DNSSEC, adding security headers, and providing clear contact information to improve trust and compliance.

C

Colruyt

colruyt.be

72

Colruyt is a leading Belgian retail supermarket chain focused on offering the lowest prices for a wide range of products. The website serves as a digital storefront providing product information, promotions, recipes, and store locators primarily targeting Dutch-speaking customers in Belgium and Luxembourg. The site is built on modern web technologies including Vue.js and Adobe Experience Manager, with performance and mobile optimization considered good. Security posture is strong with HTTPS enforced and monitoring via Dynatrace, though explicit security headers and public security policies are absent. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy. WHOIS data is restricted by the .be registry, which is common but reduces transparency. Overall, the website is professional, trustworthy, and well-positioned in the retail market.

S

STIB-MIVB

stib-mivb.be

59

STIB-MIVB is the primary public transportation operator in Brussels, providing metro, tram, and bus services. Their website offers comprehensive travel planning tools, ticket purchasing options, and real-time service updates, targeting residents and visitors in the Brussels region. The site is multilingual and designed with accessibility in mind, reflecting a mature digital presence. Technically, the website uses modern frameworks such as Bootstrap and integrates third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. The WHOIS data is unavailable due to registry restrictions, but the domain and content strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's public service mission.

B

Belfius Bank

belfius.be

69

Belfius Bank is a 100% Belgian bankinsurer providing financial solutions to individuals, entrepreneurs, and public or social profit institutions. The website targets investors and financial analysts with dedicated sections for company profile, press releases, reports, results, ratings, and debt issuance. The site is professionally designed with multi-language support and a clear focus on compliance and user experience. Technically, the site uses modern web technologies including JavaScript, CSS, and integrates OneTrust for cookie consent management, indicating a mature approach to privacy and GDPR compliance. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible advanced security headers or explicit security policies. WHOIS data is restricted due to DNS Belgium policies, which is typical for .be domains, but the domain appears legitimate and consistent with the business claims. Overall, the site is professional, trustworthy, and compliant with privacy regulations, suitable for its financial services audience.

T

Telenet

telenet.be

78

Telenet is a major Belgian telecommunications provider offering a range of residential and business services including high-speed internet, mobile telephony, and digital TV. The website is professionally designed, well-branded, and targets both residential customers and businesses in Belgium. The technical infrastructure leverages modern web technologies such as Adobe Experience Manager CMS, Adobe DTM for tag management, Dynatrace for performance monitoring, and OneTrust for cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and incident response information are not evident. The absence of WHOIS data reduces transparency but is consistent with .be domain privacy policies. Overall, the website is trustworthy and professionally maintained, with room for improvement in explicit security disclosures and contact information availability.

E

EVENT media s.r.o.

neonrun.cz

44

Neon Run, operated by EVENT media s.r.o., is a well-established Czech event organizer specializing in themed night running events such as the Mizuno Neon Run. The company has been active since 2014 and maintains a professional online presence with clear event information, partner listings, and registration links. Their target audience includes runners and sports enthusiasts primarily in the Czech Republic. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and a cookie consent mechanism, hosted on VAS Hosting. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and cookie consent is implemented, but the absence of explicit security headers and incident response policies suggests room for improvement. Overall, the website is trustworthy and compliant with GDPR, though it lacks a visible terms of service and vulnerability disclosure policy.

E

EVENT media s.r.o.

winter-run.cz

44

WinterRUN is a Czech Republic-based event organizer specializing in winter running races held across multiple cities. The company operates a well-structured website providing race schedules, registration links, results, galleries, and news updates. The business targets runners and sports enthusiasts, leveraging partnerships with notable sponsors and media outlets to strengthen its market position. Founded in 2014, WinterRUN maintains a medium-sized operation with consistent branding and a professional online presence. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is provided by VAS Hosting, with a moderate performance profile and good mobile optimization. The site includes cookie consent mechanisms compliant with GDPR, although some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent with express consent. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests an opportunity to enhance trust and compliance. The WHOIS data aligns well with the business information, supporting legitimacy. Overall, WinterRUN presents a trustworthy and professional digital footprint with good content quality and business credibility. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.

The website at yfdpco2.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an embedded iframe from an external domain. There is no visible business information, contact details, or user-facing content, which severely limits the ability to assess the business or its offerings. The domain WHOIS data is suspicious due to a future creation date (March 2025), which is inconsistent with the current timeline and raises concerns about the legitimacy or accuracy of the registration data. The site lacks fundamental privacy and cookie policies, security headers, and DNSSEC, indicating a low maturity level in security and compliance. Overall, the site appears to be a placeholder or ad-serving page rather than a fully developed business website.

E

European Commission - Employment, Social Affairs and Inclusion

pesnetwork.eu

72

The European Network of Public Employment Services (PES Network) is an official initiative under the European Commission's Employment, Social Affairs and Inclusion domain. It serves as a collaborative platform for public employment services across EU member states and associated countries, aiming to improve labor market efficiency and support EU employment policies. The website is professionally designed using Drupal 10 and the European Commission's design system, ensuring accessibility, mobile optimization, and clear navigation. Security posture is strong with HTTPS, cookie consent, and no exposed vulnerabilities detected. However, WHOIS data is unavailable due to EURid privacy policies, which is typical for EU institutional domains. Overall, the site demonstrates high trustworthiness and professionalism, serving a broad European governmental and public audience.

Synerjob is a non-profit organization established in 2007 to foster collaboration between regional employment agencies in Belgium, including ACTIRIS, ADG, Bruxelles Formation, Forem, and VDAB. The website serves as an informational portal providing multilingual content about the association's mission, members, documents, events, and statistics. The business model focuses on regional labor market synergy and information sharing among government entities. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript with jQuery and Bootstrap, and integrates Google Tag Manager for analytics. The site is moderately optimized for mobile and accessibility with basic SEO practices. Security posture is moderate with no explicit security headers detected and no visible HTTPS status in the provided data, though Google Tag Manager scripts load over HTTPS. Privacy compliance is basic, with a cookie consent banner present but no privacy policy or terms of service found. No contact information or forms are present on the homepage HTML. The domain WHOIS data is consistent with the organization's founding date and business purpose, registered with a reputable registrar since 2007, supporting legitimacy. Overall, the website is professional and safe for general audiences but could improve in privacy transparency and security best practices.

B

Vercel Security Checkpoint

bsnsports.com

52

The website bsnsports.com is currently inaccessible beyond a Vercel Security Checkpoint page that verifies the visitor's browser. This indicates the presence of a Web Application Firewall (WAF) or security mechanism blocking direct access to the site's actual content. Due to this, no business-related content, contact information, or policies are available for review. The domain itself is long-established, registered since 1997 with GoDaddy.com, LLC, suggesting legitimacy and maturity. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. Technically, the site is hosted on Vercel, using JavaScript and SVG for the checkpoint interface, but no further technology or CMS details are available. Security posture cannot be fully evaluated, but the presence of a security checkpoint suggests some level of protection is in place. Overall, the site scores very low on content quality and privacy compliance due to the blocked state, and strategic recommendations focus on enabling legitimate access and publishing essential policies.

Q

Queer Communications GmbH

queer.de

53

Queer Communications GmbH operates queer.de, a well-established German online magazine serving the LGBTI community with news, culture, entertainment, and event information. The website targets the queer community and allies, providing diverse content including interviews, TV tips, podcasts, and galleries. The business model relies on advertising, affiliate marketing, and newsletter subscriptions, positioning queer.de as a niche media leader in Germany. Technically, the site employs standard web technologies with a focus on responsive design and GDPR-compliant cookie management. Hosting appears to be with Your-Server.de, and analytics are handled via Piwik (Matomo), reflecting a moderate digital maturity. Security posture is solid with HTTPS and content security policies, though additional headers could enhance protection. No critical vulnerabilities or adult content were detected, and privacy compliance is well addressed. Overall, queer.de presents a professional, trustworthy, and user-friendly platform with room for incremental security and compliance improvements.

R

remspace

remspace.cz

52

remspace.cz is a professional Czech online magazine and communication platform focused on the real estate and construction sectors. It provides industry news, articles, and organizes conferences and discussion events, targeting professionals and stakeholders in urban planning, development, and real estate markets. The website is well-branded, content-rich, and maintains a consistent presence with partners and social media channels. Technically, the site is built on WordPress with modern performance optimizations and uses Google Tag Manager for analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some HTTP security headers are missing. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation supports legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant.

E

ENOÉ, créateur d'énergie

enoe-energie.fr

66

Enoé is a French renewable energy producer specializing in green and local energy solutions. The company manages the entire value chain from design to maintenance, positioning itself as a key player in the energy transition sector in France. Their website reflects a professional and consistent brand image with a focus on sustainability and expertise in renewable energy production. The digital infrastructure is based on WordPress with SEO optimization via the All in One SEO plugin, and integrates marketing and analytics tools primarily from HubSpot and social media platforms. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and structured data support legitimacy. Overall, the site is well-designed and user-friendly but would benefit from enhanced security and privacy compliance measures.

H

Helexia Agri

helexia-agri.com

45

Helexia Agri is a French company specializing in the development, construction, and operation of photovoltaic agricultural hangars and roof renovations. Established since 2006, it serves farmers across France by offering new hangars or roof renovations in exchange for the exploitation of their roofs for solar energy production. The company is positioned as a specialist in agricultural photovoltaic infrastructure with a medium-sized footprint and affiliation to the Helexia Group. The website is professionally designed using WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and WHOIS transparency are lacking. Overall, the site is trustworthy and business credible but would benefit from improved transparency in domain registration and privacy policies.

B

BayWa r.e.

baywa-re.fr

68

BayWa r.e. is a well-established international renewable energy company specializing in solar, wind, bioenergy, and energy trading. The company operates globally with a strong presence in France, offering comprehensive services from project development to operation and maintenance. Their website reflects a professional and consistent brand image, targeting businesses and stakeholders in the energy sector. The business model focuses on renewable energy solutions and energy trading, positioning BayWa r.e. as a key player in the sustainable energy market. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, ensuring good performance, mobile optimization, and accessibility. The use of Google Tag Manager and CookieFirst indicates a mature approach to analytics and privacy compliance. Security measures including HTTPS and security headers are properly implemented, contributing to a strong security posture. While the WHOIS data is not publicly available, likely due to privacy protection, the website's professionalism and comprehensive policies suggest legitimacy. However, the absence of a public security policy or incident response page indicates areas for improvement. Overall, the site is secure, compliant with GDPR, and trustworthy, with recommendations to enhance transparency around security and incident handling.

S

Solutions 30

solutions30.com

68

Solutions 30 is a technology solutions provider established in 2009, offering services related to new technologies. The website is built on WordPress using the Divi theme and hosted with AWS DNS services. The digital infrastructure is moderately optimized with basic mobile responsiveness and SEO features. Security posture is average, with HTTPS enabled but lacking advanced security headers and policies. No explicit privacy or cookie policies were found, indicating potential compliance gaps. Overall, the website presents a professional but basic online presence with room for improvement in privacy, security, and contact transparency.

S

Sunforwatt

sunforwatt.com

62

Sunforwatt is a French photovoltaic energy solutions provider specializing in serving agricultural, industrial, and tertiary sectors. Established since 2008, the company offers comprehensive services from technical and financial studies to installation, compliance, commissioning, and ongoing maintenance of photovoltaic systems. Their market position is that of an experienced niche player with a growing footprint in renewable energy projects for businesses. Technically, the website is built on Webflow with modern front-end technologies and integrates Google Tag Manager for analytics. The site is well designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and the contact form relies on a third-party service without visible advanced protections. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy in content but requires improvements in security and compliance transparency.