Security Directory

G

Google

v8.dev

58

The V8.dev website represents Google's V8 JavaScript and WebAssembly engine, a critical open source technology powering major platforms like Chrome and Node.js. The site provides comprehensive technical content aimed at developers and technology professionals, showcasing Google's leadership in high-performance JavaScript engine development. The website is well designed, fast, and optimized for multiple platforms, reflecting a mature digital infrastructure. From a security perspective, the site benefits from Google's robust hosting and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. However, explicit security headers and incident response information are not present, representing areas for improvement. Privacy compliance is strong due to linkage to Google's official privacy policies, though no cookie consent mechanism is detected. Overall, the website is highly credible, trustworthy, and professional, with clear alignment between domain registration and business identity. The absence of contact information and security policy details slightly limits transparency but does not detract significantly from the site's reliability. Strategic recommendations include enhancing security headers, adding incident response contacts, and implementing cookie consent to further strengthen compliance and trust.

L

Left Logic

ffconf.org

53

FFConf is a well-established UK-based web development conference organized by Left Logic, a small Brighton development company specializing in Node.js and front-end technologies. The conference focuses on curated sessions about the future of the web, targeting web developers and technology enthusiasts. The website reflects a professional and consistent brand with a clear event history dating back to 2009. The business model centers on event organization, community engagement, and content dissemination through talks, articles, and job listings. Technically, the website is custom-built without a CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. It uses Plausible Analytics for privacy-conscious visitor tracking and is hosted behind Cloudflare DNS and CDN services. The site is mobile optimized, accessible, and performs well with good SEO practices. However, some security enhancements such as DNSSEC and security headers are missing. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks explicit security headers and cookie consent mechanisms, indicating partial GDPR compliance. No direct contact emails or phone numbers are provided, limiting direct communication channels. No vulnerability disclosure or incident response policies are publicly available. Overall, the security posture is moderate with room for improvement. The overall risk assessment is low given the nature of the site as an informational and event platform with no sensitive transactions. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent for GDPR compliance, and publishing security and incident response policies to enhance trust and compliance.

E

Every Layout

every-layout.dev

59

Every Layout is a specialized educational platform focused on teaching resilient and modern CSS layout techniques. It offers a paid book, custom layout components, and free educational content aimed primarily at web developers and designers. The website demonstrates a strong market position within its niche, supported by testimonials from industry professionals and usage by reputable organizations such as the BBC and W3C. Technically, the site employs modern web standards including Web Components, service workers for offline access, and integrates Stripe for secure payment processing. The design is professional, mobile-optimized, and accessible, providing an excellent user experience. Security posture is solid with HTTPS and secure payment integration, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, with minor areas for improvement in privacy and security transparency.

G

Google

flutter.dev

70

Flutter.dev is the official website for Flutter, an open source multi-platform app development framework maintained by Google LLC. The site targets developers and software engineers, offering comprehensive resources to build, test, and deploy applications across mobile, web, desktop, and embedded platforms from a single codebase. The website reflects Google's strong market position in developer tools and frameworks, supported by a large global community and integration with Google's ecosystem services such as Firebase and Google Ads. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Alpine.js, and integrates Google services like Google Analytics and Tag Manager for analytics and tracking. The site is hosted on Google Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security best practices are observed with HTTPS enforcement and use of Google reCAPTCHA on forms, although explicit security headers are not visible in the HTML content. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, linking to Google's comprehensive privacy and cookie policies, and providing a cookie consent mechanism. However, the site lacks explicit incident response contact details and a public vulnerability disclosure page. Overall, the website is highly trustworthy, professional, and secure, reflecting Google's standards. Strategically, Flutter.dev serves as a critical platform for Google to engage the developer community, promote its cross-platform framework, and integrate with its broader cloud and advertising ecosystem. The site’s design, content quality, and technical implementation support a high level of user trust and engagement.

F

Filament Group, Inc.

filamentgroup.com

55

Filament Group, Inc. is a specialized UI design studio focused on creating intuitive, accessible, and resilient websites and web applications. Established since 2001, the company has built a strong reputation through collaborations with notable clients such as Boston Globe, LEGO, and vineyard vines. Their core competencies include responsive design, accessibility, and scalable UI design systems, targeting clients who prioritize exceptional user experience. The website reflects a professional and consistent brand image with high-quality content and multimedia presentations. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with references to Bootstrap for UI components. The site is well-optimized for mobile devices and accessibility, demonstrating good SEO practices. However, there is no evidence of a CMS or hosting provider details. Performance appears fast with no broken elements detected. From a security perspective, the site lacks explicit security headers and privacy-related policies such as privacy and cookie policies, which are critical for compliance with regulations like GDPR. No forms collecting sensitive data are present, reducing immediate risk, but the absence of incident response contacts and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is missing, which raises concerns about domain registration transparency, although the business legitimacy is supported by the website content and client portfolio. Overall, the website scores well on content quality, technical implementation, and business credibility but falls short on privacy compliance and some security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

M

Mocha

mochajs.org

64

Mocha is an established open source JavaScript testing framework designed for Node.js and browser environments. It offers flexible asynchronous testing capabilities, parallel test execution, and extensible reporting. The project is community-driven, supported by sponsors and backers, and hosted on GitHub. The website serves as a comprehensive documentation and community hub for developers using Mocha. Technically, the site is well-structured, performant, and mobile-optimized, leveraging modern web technologies and Matomo analytics for user tracking. However, it lacks formal privacy and cookie policies, contact information, and explicit security policies, which are areas for improvement. The domain registration is consistent and appropriate for the project's age and nature, indicating legitimacy and trustworthiness.

T

ThinkDoBeCreate - Stephanie Eckles

moderncss.dev

62

ModernCSS.dev is a specialized educational website authored by Stephanie Eckles under the ThinkDoBeCreate brand, focusing on modern CSS solutions and frontend development techniques. The site offers a rich collection of articles, tutorials, and resources aimed at frontend developers and CSS enthusiasts, positioning itself as a niche expert content provider with strong author credibility and community endorsements. Technically, the site is built using the Eleventy static site generator, leveraging modern web standards including HTML5, CSS3, and JavaScript, with excellent mobile optimization and fast performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. The site uses minimal tracking via Plausible Analytics and monetizes through Carbon Ads and BuySellAds, maintaining a good balance between user experience and advertising. Overall, the website is trustworthy, professional, and well-maintained, though it could improve compliance by adding privacy and cookie policies and enhancing security headers.

Městský společenský dům v Kolíně operates as a local cultural center in Kolín, Czech Republic, offering concerts, balls, exhibitions, and venue rental services. The website targets local community members and visitors interested in cultural events, positioning itself as a key venue for social and cultural gatherings. The business model centers on event hosting and space rental, serving a small-sized organization with a focus on hospitality and cultural activities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript with MooTools and jQuery libraries, and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and provides a cookie consent mechanism, indicating some level of privacy awareness. However, no CMS or advanced frameworks are detected, and performance is moderate. From a security perspective, the site lacks visible security headers and a published privacy policy, which are areas for improvement. The WHOIS data is missing, reducing transparency and trustworthiness. No blocking or WAF mechanisms are detected, and no critical vulnerabilities are apparent from the provided data. The cookie consent banner and clear contact information are positive security and compliance indicators. Overall, the website is functional and serves its business purpose well but would benefit from enhanced security practices, privacy policy publication, and improved WHOIS transparency to increase trust and compliance.

E

Ekofond SPP, n.o.

ekofondspp.sk

48

Ekofond SPP is a Slovak non-profit organization dedicated to environmental sustainability, carbon footprint reduction, and social responsibility. The website presents a professional and well-structured platform focused on promoting environmental projects and educational initiatives. The organization has an established market presence since 2007 and targets a general audience interested in energy and sustainability. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and a comprehensive cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is trustworthy and compliant with GDPR, with clear privacy and cookie policies. Recommendations include enhancing security headers, publishing terms of service and incident response contacts, and improving accessibility features.

C

Cofidis S.A. Sucursal en España

cofidis.es

72

Cofidis S.A. Sucursal en España operates as a prominent financial services provider specializing in consumer credit, personal loans, and insurance products tailored to the Spanish market. With over 30 years of experience and a strong market presence, Cofidis offers flexible and personalized financial solutions including direct credit, personal loans, payment protection insurance, dental insurance, and installment purchase financing. The company targets general consumers seeking accessible credit options without changing banks, positioning itself as a trusted financial partner in Spain. Technically, the website demonstrates a mature digital infrastructure leveraging modern JavaScript libraries, Google Tag Manager, and multiple marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly with extensive use of structured data (JSON-LD) to enhance search engine visibility and user experience. The loan simulator is interactive and well-integrated, indicating a robust front-end implementation. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit published security policies, incident response contacts, or vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, Cofidis.es presents a professional, trustworthy, and user-friendly online presence consistent with a large financial institution. The absence of WHOIS data due to query restrictions is mitigated by strong on-site business information and contact details. Strategic recommendations include publishing formal security and incident response policies and establishing a vulnerability disclosure program to further strengthen security posture and customer confidence.

C

Cofidis

cofidis.sk

72

Cofidis Slovakia operates as a financial services provider specializing in consumer credit products such as unsecured loans, installment purchases, car loans, insurance, and eco-loans. The website targets Slovak consumers and offers an online loan calculator to facilitate loan amount and repayment term selection. The company appears to be well-established in the Slovak market with a professional online presence. Technically, the website uses modern JavaScript libraries including jQuery and Underscore.js, served via e-i.com CDN infrastructure, and supports HTTPS for secure communications. However, it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. No social media or direct contact emails were found in the provided content, though a contact page is linked. Overall, the site is functional and professional but could improve privacy compliance and security posture.

C

Cofidis SA

cofidis.fr

74

Cofidis is a well-established French financial services company specializing in online consumer credit, personal loans, credit refinancing, and credit insurance. With over 35 years of experience and a strong market presence in France, Cofidis offers a comprehensive range of financing solutions tailored to individual customer needs. The website reflects a mature digital infrastructure with modern technologies, responsive design, and extensive content that supports user engagement and trust. The integration of third-party review platforms like Trustpilot and visible certifications further enhance credibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in France and does not detract from the site's legitimacy. Overall, Cofidis demonstrates a strong business and digital maturity with good compliance to privacy regulations and user experience standards.

C

Cofidis

cofidis.be

63

Cofidis Belgium operates as a financial services provider specializing in consumer credit and loan products, targeting French and Dutch speaking customers in Belgium. The website is bilingual and designed to guide users to their preferred language section. The business appears to be an established player in the Belgian consumer credit market, offering personal loans and financial solutions. The website infrastructure relies on HTTPS and uses a CDN for resource delivery, with JavaScript libraries such as jQuery for interactivity. However, the site lacks visible privacy and cookie policies and does not provide direct contact information on the landing page, which may impact user trust and compliance perception. Security posture is moderate with HTTPS enabled but missing visible security headers and incident response contacts. WHOIS data is restricted, showing privacy protection, which is common for financial entities but limits transparency. Overall, the site is functional and professional but could improve in privacy compliance and user trust signals.

S

Sector s.r.o.

onlinegamesector.com

55

Onlinegamesector.com is a small-scale online gaming portal operated by Sector s.r.o., offering a broad selection of free browser games including flash, Unity 3D, HTML5, and multiplayer games. The site targets casual gamers seeking entertainment and relaxation. The business model is primarily advertising-supported, leveraging Google Adsense and tracking services such as Google Analytics and Quantcast. The website demonstrates moderate digital maturity with a functional design, basic mobile optimization, and standard SEO practices. However, the use of outdated JavaScript libraries and lack of visible security headers indicate technical debt and potential security risks. The absence of publicly available WHOIS data raises concerns about domain registration transparency, although the site itself appears legitimate and professionally maintained. Privacy compliance is minimal, with no dedicated privacy or terms of service pages, but a cookie consent mechanism is implemented via Quantcast CMP.

Č

Česká basketbalová federace

cz.basketball

10

CZ.BASKETBALL is the official website of the Czech Basketball Federation, serving as the primary digital platform for basketball news, competitions, clubs, and national team information in the Czech Republic. The site targets basketball players, fans, coaches, referees, and other stakeholders, providing comprehensive schedules, results, and federation-related content. It maintains a strong market position as the authoritative source for Czech basketball information. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics for tracking, uses web fonts with FontFaceObserver, and is optimized for mobile devices. The site is served over HTTPS, ensuring secure communications, though there is room for improvement in security headers and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS and cookie consent mechanisms, but lacks explicit security policies, incident response contacts, and advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with cookie consent present but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and well-branded, with a good user experience and relevant content. Strategic improvements in security policies, privacy documentation, and accessibility would enhance its compliance and security posture.

V

Vojenské lesy a majetky SR, š.p.

vlm.sk

63

Vojenské lesy a majetky SR, š.p. is a Slovak state enterprise responsible for the ecological management of forest and agricultural lands within military training areas. The organization operates through a general directorate and multiple branch offices, providing services such as forestry management, agricultural activities, water management, and public education. The website reflects a professional government portal with clear contact information and compliance with privacy regulations. Technically, the site uses modern web technologies including Bootstrap and Cookiebot for consent management, ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

Aglo Solutions s.r.o. is a Slovakian technology company specializing in custom web applications, website and e-shop development, online marketing, and server management services. Established in 2003, the company has over 15 years of experience and serves more than 400 clients, positioning itself as a trusted local provider with ISO 9001 certification indicating a commitment to quality management. Their website reflects a professional and consistent brand image targeting businesses seeking tailored digital solutions. Technically, the site is built on the SysCom CMS platform, uses modern web technologies, and integrates Google Analytics for traffic insights. The site is mobile optimized and provides clear navigation and content relevant to its audience. Security-wise, the website uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and incident response disclosures, which are recommended for enhanced security posture. Overall, the domain registration details are consistent with the business claims, supporting the legitimacy and trustworthiness of the company.

A

Allianz - Slovenská poisťovňa, a.s.

allianzsp.sk

68

Allianz - Slovenská poisťovňa, a.s. operates a professional insurance website targeting private individuals and entrepreneurs in Slovakia. The company offers a broad range of insurance products including property, car (including electric and older vehicles), travel, life, and business insurance. The website reflects a strong market position as part of the global Allianz Group, with consistent branding and clear service offerings. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the site is trustworthy, well-structured, and provides a good user experience with moderate performance and good mobile optimization.

P

People in Need (implied from domain and cookie providers)

jedensvetonline.cz

65

Jeden svět online is a Czech Republic-based online streaming platform dedicated to showcasing the best films from the Jeden svět human rights festival. Founded in 2021, it serves a niche audience interested in human rights and cultural content, providing access to festival films across the country. The platform leverages modern web technologies including JavaScript frameworks, Video.js for media playback, and integrates third-party services such as Google Tag Manager and Facebook Pixel for analytics and marketing. Cookiebot is used to ensure GDPR-compliant cookie consent management, reflecting a commitment to privacy compliance. Security posture is solid with HTTPS enforced and use of CSRF tokens, though some security headers could be explicitly confirmed and enhanced. No critical vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns well with the business profile. Overall, the website presents a professional and trustworthy digital presence with good content quality and user experience.

F

Funding Centre

fundingcentre.com.au

65

Funding Centre is an Australian-based organization providing a comprehensive grants database and fundraising capacity building services primarily targeting not-for-profits, schools, businesses, government entities, and individuals. The website offers subscription-based membership plans granting access to a rich database of live grants, fundraising tools, and resources, positioning itself as a leading platform in the Australian fundraising ecosystem with over 20 years of experience. The parent company, Our Community, supports the platform, enhancing its credibility and market presence. Technically, the website employs modern web technologies including Bootstrap 4, FontAwesome, Google reCAPTCHA v3, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices and moderate performance, with room for improvement in accessibility and explicit security header implementation. From a security standpoint, the site enforces HTTPS and integrates bot protection via reCAPTCHA. However, it lacks explicit security headers and a visible security or incident response policy. Privacy compliance is partially addressed with a comprehensive privacy policy hosted on the parent domain, but no cookie consent mechanism is present. WHOIS data is privacy-protected, which is typical for such organizations, and no suspicious patterns were detected. Overall, the website presents a professional, trustworthy, and functional platform with moderate technical maturity and a solid business model. Strategic improvements in privacy compliance and security transparency would enhance its risk posture and user trust.

E

EDELRID

edelrid.de

65

EDELRID is a well-established German company specializing in mountain sports, climbing, and occupational safety equipment with a history spanning over 160 years. The website serves both sports enthusiasts and professional users, offering a broad catalog of products and training services. The company maintains a strong market position with a focus on quality and innovation. Technically, the website is built with modern web technologies, including JavaScript frameworks and consent management tools, hosted on Cloudflare infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

L

LEONI Group

leoni.com

61

LEONI Group is a global enterprise specializing in innovative cable and wiring systems primarily for the automotive and mobility sectors. The company positions itself as a key player shaping the future of mobility through advanced manufacturing solutions. Their website reflects a professional corporate presence with a focus on product offerings such as low and high voltage wiring harnesses and integrated system solutions. Technically, the website is built on TYPO3 CMS and employs Cookiebot for GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response contacts. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and improving contact transparency to bolster trust and compliance.

O

Orange France

orange.fr

65

Orange France operates a comprehensive telecommunications portal offering mobile, internet, TV, and streaming services primarily targeting the French market. The website demonstrates a strong market position as a leading telecom operator with a wide range of consumer offerings and a professional digital presence. The technical infrastructure utilizes modern web technologies including JavaScript libraries for carousels and sliders, and structured data for SEO and business information. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is limited in visible content with no clear privacy or cookie policies detected. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency in privacy and security disclosures. The absence of WHOIS data limits domain legitimacy verification but does not detract significantly from the brand's credibility given its established presence.

E

EXHOBBY LIMITED

exhobby.com

68

EXHOBBY LIMITED operates a professional e-commerce platform specializing in remote control hobby products including planes, boats, trucks, and accessories under the VOLANTEXRC brand. The company targets hobbyists primarily in Europe and globally, offering localized storefronts and free shipping from US stock. The website is built on Shopify, leveraging a modern tech stack with multiple marketing and analytics integrations, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site presents a trustworthy and professional retail experience with room for enhanced transparency in security and privacy disclosures.

A

AvalonKing

avalonking.com

69

AvalonKing is a specialized e-commerce business focused on providing high-quality automotive ceramic coating products directly to consumers. Established in 2017, the company has positioned itself as a leading provider of DIY ceramic coating kits with a strong reputation supported by thousands of positive customer reviews. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive product information. The business targets automotive enthusiasts and vehicle owners seeking durable and effective car protection solutions. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries and multiple marketing and analytics integrations, ensuring a robust digital presence and good performance. Security posture is strong with HTTPS enforced, domain registration consistent and stable, and privacy compliance evident through detailed policies and consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online store.

P

PHYSICS TODAY

physicstoday.org

65

Physics Today is a reputable publication operated by the American Institute of Physics, serving the physics community with news, analysis, and career resources. The website demonstrates a mature digital infrastructure with modern web technologies, including MathJax for scientific notation, and integrates comprehensive privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

S

STUDENTS

spsnational.org

66

The SPS website serves as a comprehensive resource for physics students, operated under the American Institute of Physics umbrella. It provides news, educational content, event information, and opportunities for student involvement, positioning itself as a key platform for the physics student community. The affiliation with AIP lends credibility and trust to the site, reinforcing its role in the educational and non-profit sector. Technically, the website employs modern web technologies including JavaScript, Web Components, and a CMS platform (Brightspot). It integrates Google Tag Manager for analytics and Osano for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively. However, explicit security headers and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to privacy protection is common for organizations but limits domain trust analysis. Overall, the security posture is solid but could benefit from additional transparency and policy disclosures. The overall risk assessment is low, with the site appearing legitimate, professional, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and implementing a security.txt file to improve transparency and trust.

S

Sensitech Inc.

sensitech.com

74

Sensitech Inc. is a well-established company specializing in supply chain visibility solutions, particularly focusing on real-time temperature monitoring and cold chain logistics for industries such as life sciences, food, and industrial sectors. The company operates under the parent organization Carrier Global Corporation, indicating a strong market position and corporate backing. Their website reflects a mature digital presence with comprehensive product and solution offerings, targeting business customers requiring advanced supply chain monitoring technologies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services like Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. The use of Carrier CMS suggests a tailored content management approach. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy and regulatory compliance. However, explicit security headers are not clearly visible in the provided data, and no dedicated security or incident response policies are published on the site. The WHOIS data for the domain is unavailable or not found, which is unusual for a company of this stature but does not detract significantly from the overall trustworthiness given the strong branding and parent company association. Overall, Sensitech's website demonstrates a high level of professionalism, technical maturity, and compliance with privacy standards, making it a trustworthy and credible source for its target audience. Strategic improvements in publishing explicit security policies and ensuring WHOIS transparency could further enhance trust and security posture.

P

Pivovarna Laško Union d.o.o.

pivovarnalaskounion.com

58

Pivovarna Laško Union d.o.o. is the largest beer and beverage producer in Slovenia, with a rich 200-year tradition in brewing. The company emphasizes sustainability and social responsibility, positioning itself as a leader in the Slovenian beverage market. Their website reflects a professional and modern digital presence, showcasing their brands and corporate values. Technically, the site is well-implemented with modern HTML5 and CSS, mobile responsiveness, and a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and age verification for alcohol content, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data are consistent with the business claims, supporting legitimacy and trustworthiness.

A

A1 Slovenija

a1.si

64

A1 Slovenija is a leading private telecommunications provider in Slovenia, offering a wide range of communication services including mobile subscriptions, prepaid packages, triple play bundles, and devices. The company serves over 700,000 users with a strong market presence and a workforce of more than 500 employees. Their website reflects a mature digital infrastructure with modern technologies such as Liferay CMS, Vue.js, and various accessibility and analytics tools. The site is well-optimized for SEO, mobile-friendly, and compliant with GDPR regulations, including a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Overall, the domain registration and business information align well, indicating a trustworthy and legitimate enterprise.

P

Patrick Hofmann IT-Solutions

p-hofmann.de

36

Patrick Hofmann IT-Solutions is a small, specialized IT service provider based in Berlin, focusing on WordPress development, web design, security, and server management. The company offers a comprehensive range of services including WordPress maintenance contracts, web hosting, e-commerce consulting, automation with AI, API programming, and progressive web apps. The website positions the business as a reliable and competent partner for clients seeking professional IT solutions in the local market. Technically, the website is built on WordPress using the Enfold theme and several well-known plugins such as Contact Form 7 and Mailster. The site is mobile-optimized, has good SEO practices, and includes modern web technologies like HTML5 and JavaScript. Hosting details are not explicit, but the use of anycast DNS suggests a focus on performance and reliability. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with Google Analytics opt-out functionality. The contact form is protected by a captcha and requires explicit privacy consent. However, additional security headers and a published security policy or incident response contacts are absent, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The business demonstrates a solid digital presence with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

P

PUMA Europe GmbH

puma.com

72

PUMA Europe GmbH operates a professional e-commerce platform targeting the Finnish market under the global PUMA brand, a leading sportswear company founded in 1948. The website offers footwear, apparel, and accessories with a strong focus on performance and lifestyle products. The platform is built on Salesforce Commerce Cloud, integrating advanced personalization and analytics tools such as Emarsys and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, strong branding consistency, and compliance with GDPR, supporting a high trustworthiness rating.

C

Crownpeak Technology, Inc

attraqt.com

67

Crownpeak Technology, Inc offers Fredhopper, an advanced AI-powered product discovery solution designed to enhance e-commerce experiences for enterprise retailers and brands, particularly in fashion and beauty sectors. The platform provides intelligent merchandising, personalized recommendations, and AI-driven search capabilities that significantly boost conversions and average order values. The website demonstrates a mature digital presence with integrations across major e-commerce platforms such as Shopify and Salesforce Commerce. Technically, the site employs modern tracking and marketing technologies, robust consent management, and enforces HTTPS with security headers, reflecting a strong security posture. However, the absence of WHOIS registration details slightly reduces trust but is mitigated by the professional site content and branding. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

F

FTV Prima

cnnprima.cz

58

FTV Prima operates the CNN Prima NEWS website, a leading Czech news media outlet providing trustworthy, fast, and clear news coverage for a broad audience. The site offers live TV streaming, news articles, video content, and a mobile app, targeting general audiences in the Czech Republic. The business is positioned as a major player in the Czech media industry with consistent branding and a comprehensive content offering. Technically, the website uses modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. The site is mobile-optimized, accessible, and integrates multiple trusted third-party services for analytics and advertising. Performance is moderate with good SEO and accessibility practices. Security posture is strong with HTTPS enforced, consent management, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers should be verified and a security.txt file or incident response contact could enhance transparency. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website presents a low risk profile with high professionalism and trustworthiness. The lack of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and maintaining regular audits of third-party scripts.

D

Deník Referendum

denikreferendum.cz

59

Deník Referendum is an independent Czech media outlet founded in 2009, focusing on political, social, and climate-related journalism without paywalls or oligarch influence. The website is well-structured, uses modern web technologies including Svelte, and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, and Facebook Pixel. The site implements a comprehensive cookie consent mechanism, allowing users granular control over cookie categories. Security posture is strong with HTTPS enforced and Cloudflare Bot Management in place, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, content-rich, and trustworthy, serving a Czech-speaking audience interested in independent journalism.

F

Fédération Française de Football

cnf-clairefontaine.com

68

The Centre National du Football Clairefontaine website is a professionally maintained portal representing the French Football Federation's prestigious football training center. It offers a variety of services including training programs, facility rentals, and group visits targeting enterprises, football clubs, associations, and the general public. The site is well-branded and aligned with the federation's identity, featuring partner logos from reputable companies. Technically, the site employs modern web technologies, including Google Analytics, Google Tag Manager, and a GDPR-compliant cookie consent mechanism, hosted on AWS infrastructure. Security posture is adequate with HTTPS enforced and reCAPTCHA integration, though security headers and incident response information are lacking. Overall, the website is trustworthy and compliant with privacy regulations, with room for improvement in security transparency and technical hardening.

P

PUMA Europe GmbH

puma.cz

72

PUMA Europe GmbH operates a professional e-commerce platform targeting the Czech market and broader European region, offering footwear, apparel, and accessories under the globally recognized Puma brand. The company is a large enterprise with a long history dating back to 1948 and is part of the Puma SE group. The website reflects a mature digital presence with advanced personalization and marketing technologies integrated, including Salesforce Commerce Cloud and Emarsys. The site is well-structured, mobile-optimized, and provides comprehensive business and contact information, enhancing user trust and engagement. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit incident response contacts and vulnerability disclosure policies could be improved. Overall, the domain and website demonstrate high legitimacy and professionalism consistent with a global retail brand.

Z

Združenje Manager

zdruzenje-manager.si

51

Združenje Manager is a well-established Slovenian non-profit association dedicated to supporting management professionals through events, knowledge sharing, and networking. The website reflects a professional and consistent brand presence with clear business information and active social media engagement. Technically, the site is built on SilverStripe CMS, uses modern JavaScript libraries, and integrates analytics tools like Google Analytics and Microsoft Clarity with privacy considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the site is trustworthy, accessible, and serves its target audience effectively.

T

The Institute of Leadership

leadership.global

10

The website leadership.global is operated by The Institute of Leadership and focuses on providing leadership skills development, career progression resources, and professional recognition services. The site targets professionals seeking to enhance their leadership capabilities and advance their careers. The business model centers on education and professional development within the leadership sector. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern technologies including Cookiebot for cookie consent management, Google Tag Manager for analytics, and ShareThis for social sharing. The site is mobile optimized and includes accessibility features, although no specific CMS or hosting provider was identified. Performance is moderate with proper SEO meta tags and Open Graph data enhancing visibility. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not evident, and no published security or incident response policies were found. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is safe, professional, and compliant with basic privacy regulations, but could improve by publishing privacy and security policies, adding security headers, and providing clear contact information for incident response.

C

Confédération Nationale des Cadres

cnc-nck.be

56

The website represents the Confédération Nationale des Cadres, a Belgian trade union focused on defending the rights of cadres and participating in social elections. The organization positions itself as a neutral alternative syndicate for Belgian cadres, targeting a specialized audience within Belgium. The website is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard polyfills for browser compatibility. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and compliance.

R

RMC BFM ADS

rmcbfm-ads.com

55

RMC BFM ADS is a prominent French advertising agency specializing in the commercialization of advertising spaces for major media brands such as BFM and RMC. Positioned as the third largest private TV advertising agency in France, it offers a comprehensive portfolio of advertising solutions across television, radio, digital platforms, and local channels. The company targets advertisers and businesses seeking to enhance brand visibility and performance through multi-channel campaigns. The website reflects a professional and consistent brand image with clear service offerings and a focus on digital-first advertising strategies. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data for SEO. It is mobile-optimized with good navigation clarity and moderate performance. The presence of cookie consent mechanisms and detailed privacy policies indicate a commitment to GDPR compliance. However, no explicit security policies or incident response information are published, which could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and vulnerability disclosure information suggests room for enhancement in security posture. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and consistent branding. Overall, RMC BFM ADS presents a trustworthy and professional online presence suitable for its business domain. Strategic improvements in security transparency and WHOIS data availability would further strengthen its credibility and compliance posture.

N

NextRadioTV

rmcbfmplay.com

69

RMC BFM PLAY is a French media streaming platform operated by NextRadioTV, offering live and replay video content from channels such as RMC Découverte, RMC Story, BFMTV, and BFM Business. The platform targets a general French-speaking audience interested in news, entertainment, and discovery programs. The website demonstrates a professional design and consistent branding aligned with its parent company. Technically, it leverages modern web technologies including Angular and integrates advanced consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the site is trustworthy and compliant with GDPR, but the absence of WHOIS registration data and explicit contact information slightly reduces transparency.

J

Judoverse

judoverse.org

65

Judoverse.org is a website dedicated to a judo-themed NFT project, offering digital collectibles related to the sport of judo. The site targets NFT enthusiasts and fans of judo, leveraging blockchain technology to create unique digital assets. The business appears to be a small-scale, recently founded entity (2022) focusing on niche digital collectibles. The website features SVG animations and a clean, modern design but lacks comprehensive textual content and detailed business descriptions. Technically, the site uses Cloudflare DNS, Google Fonts, and Google Analytics, with HTTPS enabled, ensuring basic security and performance standards. However, DNSSEC is not enabled, and security headers are missing, which could be improved to enhance security posture. The security posture is moderate, with no critical vulnerabilities detected, but the absence of privacy and cookie policies, as well as incident response contacts, indicates gaps in compliance and security transparency. Contact is primarily through an external Discord link, with no direct company emails or phone numbers provided. Overall, the site is functional and moderately secure but would benefit from enhanced privacy compliance and security best practices.

Harvest Group SA is a Swiss-based international commodities merchant specializing in agricultural products such as wheat, corn, soy, and barley. The company provides comprehensive services including international logistics, financing, risk management, and advisory services, positioning itself as a key player in global commodity trading and supply chain management. The website reflects a medium-sized enterprise with a professional online presence and consistent branding. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript with the Slick Carousel library for UI elements. The site is hosted under a reputable registrar and DNS provider, with HTTPS enabled ensuring secure communications. Mobile optimization and navigation clarity are good, though accessibility features are basic and SEO optimization is moderate. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC. There is no visible security policy or incident response information, and no cookie consent mechanism is implemented, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy and professional, with clear contact information and business details. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

I

International Judo Federation

judobase.org

60

The International Judo Federation (IJF) operates Judobase.org, a comprehensive and authoritative platform dedicated to judo sports enthusiasts worldwide. The website serves as the official source for competition results, athlete rankings, event calendars, and multimedia content related to IJF-sanctioned events. It targets a global audience including athletes, coaches, officials, and fans, positioning itself as a key resource in the judo sports ecosystem. The business model is primarily federation-driven, supported by sponsorships and partnerships, with a medium-sized operational scale and a history dating back to at least 2007. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site is well-optimized for performance and mobile devices, with a clean and professional design that facilitates excellent user experience and navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security policy page, which are areas for improvement. Privacy and cookie policies are present and appear comprehensive, indicating a reasonable level of GDPR compliance. Contact information is clearly provided with official domain emails, enhancing trustworthiness. Overall, Judobase.org demonstrates a strong security posture and high business credibility, with no signs of suspicious activity or content safety concerns. The lack of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, implementing explicit cookie consent mechanisms, and publishing a formal security incident response policy to further strengthen compliance and user trust.

S

Sangel Systemtechnik GmbH

helulight.de

48

The website helulight.de represents HELU Connectivity Solutions Bielefeld GmbH, formerly known as Sangel Systemtechnik GmbH, a medium-sized German company specializing in intelligent lighting concepts, cable assemblies, and LED industrial luminaires. The company is part of the HELUKABEL Group, which enhances its market position and product portfolio. The site targets industrial manufacturers and machine builders, offering B2B solutions for process visualization and industrial lighting. Technically, the website is built on the Shopware CMS platform with modern JavaScript and Bootstrap frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is moderate with a privacy policy linked on a partner domain but no dedicated cookie or terms of service pages on the site itself. Overall, the site is professional, trustworthy, and safe for general audiences.

The website onlinekonfigurator.biz serves as a specialized web configurator tool associated with TE Connectivity Corporation, a large US-based technology enterprise. The site provides a technical interface likely intended for business partners or internal users to configure products or services. The content is minimal and focused on functionality rather than marketing or customer engagement. The technical infrastructure relies on custom JavaScript and PHP backend handlers, with no visible use of common CMS or third-party analytics tools. The site lacks public-facing privacy, cookie, or terms of service policies, and no contact information is provided, which limits transparency and user trust. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing compliance policies. The domain registration is consistent with the corporate entity and shows no suspicious patterns, indicating legitimacy.

T

Tree of the year – Explore the trees with the most interesting stories

treeoftheyear.org

54

The website 'Tree of the Year' is dedicated to the European Tree of the Year competition, showcasing trees with interesting stories from various national rounds. The site targets a general audience interested in environmental and nature-related content. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, and includes Google Tag Manager for analytics. The site is mobile-optimized and presents content in a professional and consistent manner. Security posture is adequate with HTTPS enabled, but lacks security headers and detailed privacy or cookie policies. WHOIS data is incomplete, which impacts trustworthiness. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

D

Dôvera zdravotná poisťovňa, a.s.

dovera.sk

63

Dôvera zdravotná poisťovňa, a.s. is a leading public health insurance provider in Slovakia, offering comprehensive health insurance services to insured persons, payers, and healthcare providers. The company has a strong market position with a large customer base and provides various benefits, claims processing, and customer support services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site uses a custom open-source framework (Cyclone3) and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook SDK, Exponea, and OneTrust for consent management. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit security policy and incident response pages are not publicly available. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

V

Viessmann

viessmann.sk

65

Viessmann Slovakia operates a comprehensive website focused on climate solutions including heating, cooling, ventilation, and energy management. The company is a well-established enterprise with a strong market position in the energy sector, offering a wide range of products and services tailored to both residential and commercial customers. The website reflects a high level of professionalism, with excellent content quality, clear navigation, and consistent branding. Technically, the site uses modern frameworks and technologies such as Adobe Experience Manager, Google Tag Manager, and Usercentrics for consent management, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the domain registration and WHOIS data align well with the business claims, supporting the legitimacy and trustworthiness of the site.