Security Directory

P

Praxis am Martinsberg

praxis-am-martinsberg.ch

58

Praxis am Martinsberg is a small healthcare provider specializing in general internal medicine located in Switzerland. Operated since 2025 by Rehaklinik Dussnang AG, it offers comprehensive medical services including manual medicine, ultrasound, traffic and diving medicine, and home visits. The website targets local patients in the Gemeinde Fischingen area and positions itself as a trusted local medical practice with membership in Ärztenetz Thurgau and offering the Hausarztmodell. Technically, the website is built on Umbraco CMS with modern libraries such as jQuery, Bootstrap, and Google Maps API, providing a responsive and user-friendly experience. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though explicit security headers and policies are lacking. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve by publishing security policies and enhancing accessibility.

F

Fondation Oeuvre Notre-Dame

oeuvre-notre-dame.eu

63

The Fondation de l’Œuvre Notre-Dame is a historic non-profit organization dedicated to the preservation, restoration, and promotion of the Strasbourg Cathedral. The website serves as an educational and informational platform, offering rich multimedia content, historical insights, and visitor information. It also supports fundraising through a boutique and patronage programs. Technically, the site is built on WordPress with WooCommerce, employing modern web technologies and good SEO and accessibility practices. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy page found. WHOIS data is unavailable, limiting domain trust verification, but the professional presentation and content quality support legitimacy. Overall, the site is well-positioned as a trusted cultural heritage resource with room for improvement in transparency and security hardening.

N

NEDCON

nedcon.com

64

NEDCON is a manufacturing company specializing in storage and shelving solutions for industrial and commercial clients. The website presents a professional image with a clear focus on their core business offerings. The technical infrastructure is based on WordPress CMS with modern web technologies including Google Tag Manager and Cookiebot for consent management. The site is mobile optimized and includes SEO best practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and technical setup suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy documentation, security headers, and contact information to improve trust and compliance.

W

WHISKYTEMPEL

whiskytempel.de

47

WHISKYTEMPEL is a specialized German e-commerce retailer focusing on rare and premium spirits including whisky, rum, cognac, and armagnac. The website targets collectors and connoisseurs seeking limited edition and rare bottles from regions such as Japan, Scotland, and the Caribbean. The business operates a niche online store with international shipping capabilities, catering to a mature audience interested in fine spirits. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery 3.7.1, with a custom or proprietary e-commerce backend. The site is mobile optimized and SEO friendly, with proper meta tags and structured data for breadcrumbs and search actions. Hosting is provided via rzone.de nameservers, indicating a professional hosting environment. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is present. Contact information is not clearly provided, which may impact customer trust and compliance. Overall, WHISKYTEMPEL presents a professional and niche e-commerce platform with good technical foundations but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

C

CAMPUSERVICE GmbH

campuservice.de

63

CAMPUSERVICE GmbH is a professional service subsidiary of Goethe-Universität Frankfurt am Main, providing a broad range of services including event management, advertising, career services, academy training, campus shop operations, and administrative support. The website reflects a well-structured and professionally designed portal targeting students, university staff, companies, and regional partners. The business model focuses on supporting university-related activities and fostering collaboration with external stakeholders. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Colibri Page Builder, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the university affiliation, indicating legitimacy and trustworthiness.

O

Open-Access-Tage: Open Access Days

open-access-days.de

56

The Open-Access-Tage website serves as the central hub for the annual Open Access and Open Science conference in the German-speaking region. It provides comprehensive information about the event, including past conference documentation and resources for interested hosting institutions. The site targets academic and research institutions and individuals engaged in Open Access initiatives. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and is hosted on a reputable academic hosting provider (GWDG). The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is adequate with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its non-profit educational mission.

X

Xpress-pay

xpress-pay.com

66

Xpress-pay operates as a provider of digital bill payment tools targeting businesses seeking efficient online and mobile payment solutions. The website presents a professional and consistent brand image, emphasizing growth acceleration through their payment tools. The technical infrastructure is built on WordPress with Thrive Theme, integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and various email marketing platforms, indicating a mature digital marketing approach. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data and contact information slightly reduces trustworthiness but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to bolster trust and compliance.

N

numerik-ea

numerik-ea.fr

55

numerik-ea is a French digital agency specializing in accessible web solutions, certified as an entreprise adaptée, emphasizing inclusion of people with disabilities in digital professions. Founded in 2016 and part of the ctrla group, it offers services including digital accessibility audits, website creation and redesign, content management, and marketing campaigns such as newsletters and SMS. The agency targets organizations seeking inclusive digital services and positions itself as a pioneer in accessible digital agency services in France. The website is professionally designed, mobile-optimized, and SEO-friendly, built on WordPress with modern plugins and themes. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response policies. Privacy compliance is partially met with a clear privacy policy but no cookie consent mechanism. WHOIS data is unavailable, slightly reducing domain trustworthiness, but the professional presentation and client references support legitimacy. Overall, the site demonstrates a mature digital presence with room for security and privacy improvements.

O

Open-Access-Tage: Open-Access-Tage

open-access-tage.de

56

The Open-Access-Tage website serves as the central platform for the annual Open Access and Open Science conference in the German-speaking region. It provides extensive documentation of past events, program details, and organizational information, targeting academic institutions, libraries, and Open Access advocates. The site is hosted on servers managed by GWDG and built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Bootstrap for responsive design. The website demonstrates good content quality, clear navigation, and multilingual support, enhancing user experience for its target audience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and security best practices. Overall, the domain registration and hosting align well with the academic and non-profit nature of the conference, indicating a trustworthy and legitimate online presence.

budvidetnawebu.cz is a Czech small business specializing in website creation and redesign services primarily using WordPress. The company targets local small businesses and individuals seeking affordable and professional web development solutions. The website demonstrates a good level of digital maturity with modern technologies such as WordPress 6.8.3, Oxygen builder, and integration of analytics tools like Google Analytics and Microsoft Clarity. Cookie consent is managed via CookieYes, indicating awareness of GDPR requirements. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and well-optimized for performance and mobile devices.

RAK CZ a.s., operating under the brand Doktor House, provides specialized consulting services addressing complex real estate issues such as inheritance disputes, unclear property boundaries, and legal encumbrances. The company positions itself as a trusted expert in diagnosing and resolving 'diseases' affecting properties, targeting property owners and stakeholders primarily in the Czech Republic. The website is professionally designed using WordPress with modern plugins and frameworks, offering a user-friendly experience including a contact form secured by Google reCAPTCHA. However, the absence of WHOIS data and lack of explicit privacy and terms policies present trust and compliance gaps. Security posture is moderate with HTTPS and reCAPTCHA implemented but missing key security headers. Overall, the site is functional and credible but would benefit from enhanced transparency and security hardening.

G

Genethon

genethon.com

56

Genethon is a medium-sized non-profit organization specializing in the research and development of gene therapy treatments for rare diseases, including neuromuscular, liver, immune system, and eye disorders. The organization is positioned as a leading European entity in this specialized healthcare sector, supported by partnerships with recognized institutes such as AFM-Telethon and the Biotherapies Institute for Rare Diseases. Their website reflects a professional and content-rich platform aimed at patients, researchers, and healthcare professionals. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Matomo analytics, ensuring good SEO and privacy-respecting user tracking. The site is mobile-optimized and provides a clear navigation structure. Cookie consent mechanisms are implemented in compliance with GDPR, enhancing user privacy and transparency. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be investigated further. Overall, the website demonstrates a solid digital presence with good privacy and security practices but would benefit from enhanced transparency in security policies and verification of domain registration details.

I

IVAR CS

ivarcs.cz

59

IVAR CS is a Czech-based company specializing in manufacturing and distributing components for water, heating, and gas systems. The company targets professional installers and businesses in the plumbing and heating sectors, offering a comprehensive product catalog and technical support. The website reflects a medium-sized enterprise with recognized ISO certifications, indicating a commitment to quality and environmental standards. The digital presence is professional, with clear navigation and relevant content tailored to its industry audience. Technically, the site employs modern web technologies including jQuery, FontAwesome, and Google Analytics, and is built on a custom or framework-based CMS likely using the Nette Framework. Security measures such as HTTPS and standard security headers are implemented, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for business entities. Overall, the website is secure, compliant with GDPR, and suitable for its business purpose.

K

Keap

infusionsoft.app

65

Keap is a technology company specializing in CRM and marketing automation software targeted primarily at small businesses and entrepreneurs. The website analyzed is a secure login portal for Keap's SaaS platform, offering multiple authentication methods including email/password, Google, and Okta. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. The parent company is Thryv, Inc., which is referenced in the terms and privacy policy links. Technically, the site uses modern JavaScript libraries such as jQuery, Lodash, and Bootstrap, ensuring a responsive and functional user experience. Security practices include HTTPS enforcement, input validation, and multi-factor authentication support, although explicit security headers and cookie consent mechanisms are not evident in the provided data. The WHOIS lookup for the signin.infusionsoft.com subdomain failed as expected since subdomains are not separately registered; the main domain infusionsoft.com is established and legitimate. Overall, the site demonstrates a strong security posture and business credibility with minor areas for improvement in privacy compliance and security header implementation.

S

Spirit Radar - The next generation platform for rum and whisky collectors

spiritradar.com

66

Spirit Radar is a specialized online platform catering to rum and whisky collectors, providing comprehensive tools for tracking bottle prices, availability, auction data, and collection valuation. The platform targets collectors, investors, e-shops, bottlers, insurers, and brand representatives, positioning itself as a niche market leader with a substantial database and active user testimonials. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features. Security-wise, the site enforces HTTPS and uses anti-spam measures and cookie consent mechanisms; however, it lacks explicit security headers and a vulnerability disclosure policy. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve transparency and security practices.

L

LYNT services s.r.o.

lynt.cz

49

LYNT services s.r.o. operates as a premium PPC agency specializing in performance marketing with a monthly budget management exceeding 60 million CZK. Established in 2012, the company holds a prestigious Google Premier Partner status and boasts 15 years of experience. Their service portfolio includes PPC campaign management, business reporting, auditing, and international campaign expansion across more than 100 countries. The website reflects a mature digital presence with modern technologies such as WordPress, Bricks builder, and Cloudflare integration, ensuring fast performance and mobile optimization. Security measures are robust, including HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. Overall, the company demonstrates high business credibility and compliance with GDPR and cookie regulations.

R

Rehaklinik Tschugg AG

rehaklinik-tschugg.ch

59

Rehaklinik Tschugg AG is a specialized healthcare provider in Switzerland focusing on neurorehabilitation, Parkinson's disease, and epilepsy treatment. The clinic offers comprehensive inpatient and outpatient services, leveraging modern technologies such as the myReha digital therapy platform. It operates under the VAMED Schweiz group, indicating a strong organizational backing and network of related rehabilitation clinics. The website reflects a professional and patient-centered approach with clear communication channels and detailed service descriptions. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Matomo analytics, and is built on the Umbraco CMS platform. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. Overall, the website is well-designed, accessible, and trustworthy, serving its target audience effectively.

V

VAMED Management und Service Schweiz AG

vamed-rehazentrum.ch

59

VAMED Management und Service Schweiz AG operates two innovative outpatient rehabilitation centers in Switzerland, located in Seefeld and Zurich Airport. The centers provide a broad range of therapies including physiotherapy, medical training therapy, robotics, ergotherapy, speech therapy, and neurological and psychiatric consultations. The business targets patients requiring ambulatory rehabilitation and leverages modern technology and scientific methods to deliver effective treatments. The company is positioned as an innovative healthcare provider within the Swiss rehabilitation market, supported by its parent company VAMED. Technically, the website is built on the Umbraco CMS and uses a modern JavaScript stack including jQuery, Bootstrap, and Matomo analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.

R

Rehaklinik Zihlschlacht AG

rehaklinik-zihlschlacht.ch

61

Rehaklinik Zihlschlacht AG is a leading neurological rehabilitation clinic based in Switzerland, specializing in advanced therapies including robot-assisted rehabilitation, Parkinson's disease treatment, multiple sclerosis care, and early neurological rehabilitation. The clinic operates under the parent company VAMED Schweiz and maintains a strong market position with specialized centers and a comprehensive interdisciplinary approach. The website reflects a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Matomo analytics, and Google reCAPTCHA, ensuring a professional and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS enforcement and no critical vulnerabilities detected, though some improvements in security headers and incident response information are recommended. Overall, the website and business demonstrate high credibility, trustworthiness, and technical maturity suitable for their healthcare audience.

R

Rehaklinik Dussnang AG

rehaklinik-dussnang.ch

58

Rehaklinik Dussnang AG is a specialized healthcare provider in Switzerland focusing on geriatric and musculoskeletal rehabilitation. The clinic offers a comprehensive range of services including inpatient rehabilitation, cure stays, wellness, and telemedicine programs. It operates under the parent company VAMED Schweiz and maintains a strong market position with over 135 years of history and recognized certifications such as the Fracture Liaison Service (FLS). The website is professionally designed, multilingual, and provides clear navigation and detailed service information. Technically, the site uses modern frameworks and libraries, including Umbraco CMS, Bootstrap, jQuery, and Matomo analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and reCAPTCHA integration, though some security headers and policies could be improved. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supported by transparent WHOIS data consistent with the business identity.

R

Rehaklinik Seewis AG

rehaklinik-seewis.ch

61

Rehaklinik Seewis AG is a well-established rehabilitation clinic located in Switzerland, specializing in cardiological, psychiatric-psychosomatic, and internistic-oncological rehabilitation services. The clinic operates within a familial atmosphere and is part of the VAMED Schweiz network, which enhances its market position and trustworthiness. The website reflects a professional healthcare service provider with clear communication of services, patient focus, and career opportunities. The target audience primarily includes patients requiring specialized rehabilitation and healthcare professionals seeking employment. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Umbraco CMS, with integrations such as Matomo analytics and Google Maps API, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

V

VAMED Management und Service Schweiz AG

vamed.ch

61

VAMED Management und Service Schweiz AG operates as a leading provider of rehabilitation services in Switzerland, managing multiple specialized clinics and ambulatory centers. The company positions itself as a comprehensive healthcare service provider with a strong focus on neurological, musculoskeletal, cardiological, and oncological rehabilitation. Their website reflects a professional and well-structured digital presence, targeting patients, healthcare professionals, and partners within the Swiss healthcare market. The business model centers on delivering specialized rehabilitation care with an emphasis on innovation and patient-centered services. Technically, the website employs modern web technologies including jQuery, Bootstrap, Matomo analytics, and Google Maps API, integrated within an Umbraco CMS environment. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature approach to privacy and user consent. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing vulnerability disclosure information. The domain registration data aligns well with the business claims, showing consistency and legitimacy. The website is free from WAF blocking or content restrictions, allowing full content access and analysis. Social media and partner links further reinforce the company's credibility and market presence.

C

Canadian Spa International®

canadian-spa.com

41

Canadian Spa International® is a medium-sized company based in the Czech Republic specializing in the manufacturing and distribution of home and commercial spas, whirlpools, swim spas, and heat pumps. The company emphasizes innovation and quality, offering unique patented technologies and extended warranties. Their market position is that of a premium and innovative spa manufacturer targeting consumers and commercial clients interested in wellness products. The website is built on WordPress with modern JavaScript libraries and tracking tools, providing a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and no security headers were detected, which could be improved to enhance security posture. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website scores well in content quality and business credibility but needs improvements in privacy compliance and security best practices.

Z

Zdravotní klaun

zdravotniklaun.cz

58

Zdravotní klaun is a Czech non-profit organization dedicated to bringing joy and laughter to children in hospitals and geriatric patients in senior homes since 2001. The website reflects a mature digital presence with a professional design and consistent branding. It leverages TYPO3 CMS and integrates multiple modern frontend libraries and accessibility tools to enhance user experience. The organization uses comprehensive cookie consent mechanisms and integrates major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Microsoft telemetry to monitor and optimize its outreach and engagement. However, the absence of WHOIS data and explicit privacy policy pages introduces some concerns regarding domain legitimacy and full privacy compliance. Overall, the website demonstrates a good security posture with HTTPS enforcement and standard security practices, but could improve by adding more security headers and explicit privacy documentation.

SV Online, operated by RAK CZ a.s., provides a specialized online voting platform (Signum24.cz) designed for homeowners associations in the Czech Republic. The platform addresses challenges of low attendance at meetings by enabling legally binding remote voting with enhanced security features such as two-factor authentication. The website is built on WordPress with modern front-end frameworks and integrates Google Analytics and reCAPTCHA for user interaction and security. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. The site lacks published privacy and cookie policies, which impacts compliance with GDPR and related regulations. Overall, the business appears niche-focused with a clear value proposition but should improve transparency and compliance documentation.

I

il capitano ristorante

ilcapitano.cz

58

il capitano ristorante is a well-established Mediterranean restaurant located in Prague, Czech Republic, known for its quality ingredients, fresh seafood, and excellent steaks. The website reflects a professional and consistent brand image, supported by multiple industry recognitions such as Tripadvisor Certificates of Excellence and Restaurant Guru recommendations. The business targets a general audience seeking authentic Italian dining experiences near the city center. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. The absence of WHOIS data is a notable gap, slightly reducing domain trustworthiness but not impacting the visible business legitimacy. Overall, the site presents a trustworthy and user-friendly digital presence for the restaurant.

I

IQS Group a.s.

iqsgroup.cz

58

IQS Group a.s. is a Czech Republic-based technology company specializing in nanotechnology, optical security, and 3D printing solutions. The company operates internationally, providing innovative products and technologies primarily for counterfeit protection, nanostructured optics, and medical applications. Their market position is that of an innovative leader with a medium-sized business model focused on B2B clients such as luminaire manufacturers and security document producers. The website reflects a professional and consistent brand image with clear communication of their subsidiaries and services. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins for enhanced user experience and GDPR compliance. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are consistent with the company's location and business age. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and the company holds multiple ISO certifications including ISO 27001 for information security. No critical vulnerabilities or exposed sensitive data were detected. However, some security headers could be improved, and incident response contact details are not explicitly provided. Overall, the website and business demonstrate a strong security posture, good privacy compliance, and high business credibility. The risk level is low, but recommendations include enhancing security headers and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

C

CBS spol, s.r.o.

malovanemapy.sk

43

CBS spol, s.r.o. operates the website malovanemapy.sk, specializing in the creation and sale of hand-painted maps tailored for municipalities, microregions, sports centers, hotels, and resorts primarily in Slovakia. Their unique business model combines traditional artistic craftsmanship with modern technology to produce accurate and visually appealing maps that serve both tourists and local residents. The company leverages sponsorship and advertising partnerships to support the costly production process, enhancing community involvement by including local children in the artwork. The website reflects a niche market position with a strong local cultural focus and trust signals such as testimonials and FSC certification.

B

Bureau des Congrès de l'Eurométropole de Metz

congres-metz.com

58

The website congres-metz.com serves as the official online presence for the Bureau des Congrès de l'Eurométropole de Metz, promoting Metz as a prime destination for business events, conferences, and seminars. It targets business professionals and event planners, offering comprehensive information on venues, accommodations, catering, and sustainable event practices. The site is well-positioned regionally, emphasizing accessibility and eco-responsibility. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and cookie consent, ensuring a robust digital infrastructure. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and includes integrity checks on scripts, reflecting a good security posture. However, the absence of WHOIS registration data and explicit contact information slightly detracts from its trustworthiness. Overall, the site is professional, user-friendly, and compliant with privacy regulations, making it a reliable resource for its audience.

O

Offshore Energy

offshore-energy.biz

66

Offshore-Energy.biz is a specialized media platform dedicated to the offshore energy sector, focusing on the energy transition and sustainable maritime solutions. The website provides news, industry insights, and event information targeting professionals and stakeholders in the offshore and maritime energy industries. Established around 2020, it serves as a niche information hub with a consistent brand presence and a professional content offering. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and CookieYes for consent management. It employs Google Tag Manager and integrates multiple analytics and advertising services, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, but lacks visible security headers and explicit privacy and terms of service pages in the provided content. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial media sites. Overall, Offshore-Energy.biz presents a professional and trustworthy platform with good privacy compliance and extensive tracking transparency. Strategic improvements in security headers, privacy policy publication, and incident response contact details would enhance its security posture and compliance standing.

A

Aquitaine Blue Energies

aquitaine-blue-energies.fr

37

Aquitaine Blue Energies (ABE) is a regional association founded in 2021, focused on promoting and developing offshore wind and marine renewable energy sectors in the Nouvelle-Aquitaine region of France. The organization acts as a cluster to federate local companies and professionals around a common economic development project in the marine energy field. The website reflects a professional and consistent brand presence with clear messaging about its mission, values, and activities. Technically, the site is built on WordPress with modern plugins and themes, hosted by OVH, and demonstrates good SEO and mobile optimization. Security posture is adequate with HTTPS and no obvious vulnerabilities, but lacks published security policies and vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, including a company email and physical address in La Rochelle, along with active social media channels on Twitter and LinkedIn. Overall, the site is trustworthy and serves its business purpose well but should improve compliance and security transparency.

B

KOPEC

behydokopcu.cz

51

KOPEC is a Czech website dedicated to a series of uphill running races in Prague and its surroundings. The site provides race results, event information, rules, statistics, and community engagement features such as a guestbook and polls. The target audience is local runners and sports enthusiasts interested in these events. The website is built on WordPress with a variety of plugins to support social media integration, galleries, and mobile navigation. The design is functional and moderately consistent with the brand, offering good user experience and navigation clarity. Technically, the site uses modern web technologies including Bootstrap and jQuery, with a WordPress CMS platform. Performance is moderate, and mobile optimization is good. However, accessibility and SEO optimizations are basic. Security posture shows HTTPS usage but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the security posture is average with room for improvement in policy transparency and technical security controls. The domain WHOIS data is consistent and legitimate, supporting the trustworthiness of the site. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

T

ThePrime.cz

theprime.cz

48

ThePrime.cz is a specialized subscription-based news portal focused on the Czech and Slovak real estate markets, operated by journalist Robert McLean. It provides market news, investment insights, event information, and multimedia content targeting real estate professionals and investors in the region. The business model centers on subscription revenue and content delivery through a WordPress-based platform. Technically, the website employs a modern WordPress CMS with various plugins for analytics, payment processing, and content management. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implementation. Security posture is adequate with HTTPS and cookie consent mechanisms, but could benefit from enhanced security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the website's regional focus and business age. Overall, the site presents a professional and trustworthy presence in its niche market.

M

Mittelstand-Digital Zentrum Zukunftskultur

digitalzentrum-zukunftskultur.de

42

Mittelstand-Digital Zentrum Zukunftskultur is a German organization dedicated to supporting small and medium-sized enterprises (SMEs) in their digital transformation journey, focusing on building future-proof corporate cultures. The center offers a variety of services including workshops, events, practical examples, and media resources, all aimed at fostering digital responsibility, sustainability, and the adoption of artificial intelligence technologies. It operates as part of the nationwide Mittelstand-Digital network and is funded by the German Federal Ministry for Economic Affairs and Energy (BMWK), positioning it as a trusted partner for SMEs in Germany. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted on Hetzner servers. SEO is well-implemented with Yoast SEO Premium, and the site is mobile-optimized with good performance. Analytics are handled via Matomo with privacy-respecting configurations such as DoNotTrack and disabled cookies, reflecting a strong commitment to user privacy. From a security perspective, the site enforces HTTPS and employs anti-spam measures on forms, but lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the website presents a professional, trustworthy, and content-rich platform for its target audience of German SMEs. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and vulnerability disclosure policies to further strengthen trust and compliance.

Paris Digital Lab is a specialized digital innovation program affiliated with CentraleSupélec, focused on empowering digital entrepreneurs and recruiting top software engineering talents from leading universities. The program facilitates rapid development of Minimum Viable Products through intensive sprints involving student teams and corporate partners. The website reflects a professional and consistent brand image, targeting students, executives, and companies interested in digital transformation and open innovation. Technically, the site is built on WordPress with modern front-end frameworks and integrates Google reCAPTCHA for form security. However, some security best practices such as DNSSEC and security headers are missing, and privacy compliance could be improved with explicit cookie and privacy policies. Overall, the site is well-positioned in its niche with a solid business model and credible digital presence.

G

Gymnázium Kadaň

gymka.cz

45

Gymnázium Kadaň is a well-established secondary educational institution in the Czech Republic offering comprehensive study programs including eight-year and four-year tracks, language exam preparation, and extracurricular activities. The website reflects a professional and modern digital presence built on WordPress with various plugins enhancing user experience and content delivery. Privacy and cookie policies are clearly presented with an active consent mechanism, demonstrating compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities in the site content. The site is trustworthy and targets students, parents, and the educational community effectively.

M

Mezinárodní Montessori škola Olomouc, z.ú.

montessoriolomouc.cz

49

Mezinárodní Montessori škola Olomouc, z.ú. is a small, specialized educational institution based in the Czech Republic, offering Montessori preschool and primary education with bilingual English-Czech instruction. The school is accredited by the Association Montessori Internationale and the Czech Ministry of Education, positioning it as a reputable niche player in the local education sector. The website provides comprehensive information about its educational philosophy, programs, and contact details, targeting parents seeking quality Montessori education for children aged 1.5 to 15 years. Technically, the site is built on WordPress with common plugins and integrates Google Analytics and Tag Manager for tracking. It is mobile-optimized and SEO-friendly with good content quality and navigation. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal security policies. The domain is aged appropriately but currently expired, which poses a risk to continuity. Overall, the site is trustworthy and professional but would benefit from improved security practices and domain renewal.

F

Fruit servis, s.r.o.

fruitservis.cz

43

Fruit servis, s.r.o. is a well-established Czech company specializing in the supply of fresh fruit, vegetables, and dairy products primarily targeting schools and wholesale customers. The company supports national programs promoting healthy eating among children and offers additional educational and gastro services. The website is built on a modern WordPress platform using Elementor, providing a good user experience with clear contact information and trust signals such as testimonials and partner logos. However, the site lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enabled and secure forms, but missing security headers and vulnerability disclosure mechanisms are noted. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

Z

Zařízení školního stravování Matiční dům

maticni.cz

41

Zařízení školního stravování Matiční dům is a contributory organization affiliated with the Moravian-Silesian Region, providing school catering services primarily for students and staff of the associated educational institution. The website serves as an information portal for meal menus, ordering, and contact details, targeting the local school community. The site is built on WordPress with standard plugins and offers a functional, well-structured user experience with clear navigation and mobile optimization. Technically, the site uses modern WordPress 6.6.4 with jQuery and several plugins for content display and gallery management. HTTPS is enforced, ensuring secure communication. However, the site lacks advanced security headers and a published privacy policy, which are important for compliance and trust. No analytics or advertising scripts were detected, indicating minimal user tracking. Security posture is moderate with good SSL configuration and cookie consent mechanisms but missing security.txt and incident response information. The absence of WHOIS data limits domain trust assessment, though the website content and regional government affiliation support legitimacy. Overall, the site is safe, professional, and suitable for its educational audience. Recommendations include publishing a privacy policy and terms of service, implementing security headers, adding a security.txt file, and verifying domain registration details to enhance trust and compliance.

S

Stavební škola

stavebniskola.cz

63

Stavební škola is a Czech educational institution specializing in construction-related vocational and maturitní studies. Established in 2007, it offers a range of four-year and three-year study programs in architecture, water management, transport construction, and various crafts. The website serves prospective students, current students, and the public with detailed program information, event announcements, and school activities. The institution maintains a solid regional presence in the education sector with a focus on practical skills and lifelong learning.

V

Website Visitor Tracking - Monitor Site Traffic & Boost Conversions

visitortracking.com

54

VisitorTracking.com is a technology-focused SaaS platform specializing in website visitor tracking and conversion optimization analytics. The website is built on WordPress with Elementor and integrates third-party services such as Outseta for membership management and Rewardful for affiliate marketing. The platform targets website owners and marketers seeking detailed visitor insights to boost conversions. The site presents a professional design with good SEO optimization and structured data, although it lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the website is functional and credible but requires improvements in privacy compliance and security transparency to enhance trustworthiness and regulatory adherence.

I

Institut Européen de Coopération et de Développement

iecd.org

54

The Institut Européen de Coopération et de Développement (IECD) is a French non-profit organization established in 1988, focused on international solidarity and development projects across 18 countries. Their core mission involves supporting human, economic, and social development through education, entrepreneurship, and professional training. The organization holds public utility recognition and maintains a professional web presence with comprehensive content and clear navigation. IECD targets development partners, donors, and beneficiaries globally, positioning itself as a reputable NGO with a medium organizational size. Technically, the website is built on WordPress 6.8.3 using the Enfold theme and integrates modern plugins such as Yoast SEO and Complianz GDPR for compliance. The site employs Google Analytics and Tag Manager for analytics and tracking, with cookie consent mechanisms in place. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 on forms, alongside cookie consent management. However, explicit security headers like CSP and X-Frame-Options are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a strong compliance posture with GDPR and cookie regulations, a trustworthy business profile, and a solid technical foundation. Recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security and compliance posture.

K

Kloovis

kloovis.com

51

Kloovis is a French startup founded in 2020 that provides an innovative platform to help distribution and construction sector actors transform their surplus and unsold products into donations. The platform offers comprehensive services including material analysis, beneficiary identification, donation agreement drafting with electronic signature, logistics management, and donation tracking with official documentation. The company positions itself as a sustainability-focused solution reducing waste and costs while providing tax benefits. Technically, the website is built on WordPress with WooCommerce and uses modern plugins such as Yoast SEO and Slider Revolution. The site is well-structured, mobile-optimized, and includes SEO best practices. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

S

Salon LES THERMALIES

thermalies.com

43

Salon LES THERMALIES operates as a leading organizer of wellness and health events focused on water-based therapies and well-being in France, with key events scheduled in Paris and Lyon for 2026. The website presents a professional and consistent brand image, supported by active social media channels and association with SPAS Organisation, a recognized entity in the sector. The business model centers on event organization and visitor engagement through free entry and dedicated exhibition sites. Technically, the website is built on a modern WordPress CMS platform using Elementor and SEO plugins, ensuring good SEO and mobile responsiveness. Analytics are implemented via Google Analytics and Facebook Pixel, indicating moderate user tracking. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. WHOIS data is missing, which raises some legitimacy concerns, though the website's professional presentation and external partnerships mitigate this risk. Overall, the site is functional and credible but would benefit from enhanced transparency and security practices.

A

AB S.A.

ab.pl

58

AB S.A. is a prominent distributor of IT, household appliances, consumer electronics, GSM products, and toys operating primarily in Poland and the Central and Eastern European region. The company is publicly listed on the Warsaw Stock Exchange since 2006 and serves over 16,000 business partners with a vast portfolio of nearly 100,000 products from more than 800 global brands, including its own proprietary brands. AB S.A. holds a leading market position in IT distribution within the CEE region, supported by a strong logistics and financial solutions infrastructure for partners. Technically, the website is built on a modern WordPress CMS platform with a well-implemented tech stack including Yoast SEO, Google Tag Manager, MailerLite for marketing automation, and various plugins for enhanced user experience and compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional and user-friendly interface. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit HTTP security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS domain registration data is a notable gap that slightly impacts trustworthiness but does not detract from the overall legitimacy supported by the company's public presence and awards. Overall, AB S.A. demonstrates a strong business and digital presence with good security and privacy practices. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

V

Valabre

valabre.com

49

Valabre is a French public institution specializing in civil security training, research, new technologies, and prevention against major natural and technological risks. The organization serves as a central hub for professional training in civil security, conducting research programs, and developing innovative technologies to support risk management and emergency response. The website reflects a well-established entity with a clear focus on public safety and education, targeting professionals and public agencies involved in civil security and risk prevention. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and performance optimization tools. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is limited due to the absence of clear privacy and cookie policies. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and social media presence. Overall, Valabre's digital presence is professional and trustworthy, with room for improvement in privacy disclosures and security transparency.

E

Eiffage

eiffage.ca

63

Eiffage Canada operates as a multiskilled construction group focused on sustainable infrastructure development and local economic contribution. The company is part of the larger Eiffage Group, a well-established European construction and engineering conglomerate. Their Canadian website emphasizes quality, health and safety, environmental responsibility, and strong corporate values. The site targets construction industry clients, local communities, and suppliers in Canada, offering services in maintenance, rehabilitation, and new construction works. Technically, the website is built on the Jahia CMS platform, utilizing modern JavaScript libraries such as jQuery and APIs from YouTube and Vimeo for media integration. It employs Google Analytics and TagCommander for analytics and marketing, alongside OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and displays a security alert warning users about impersonation attempts, reflecting a proactive security posture. However, the absence of WHOIS data for the domain www.eiffage.ca is a notable anomaly, though the website content and external links strongly associate it with the legitimate Eiffage Group. No critical vulnerabilities or exposed sensitive data were detected. Overall, Eiffage Canada's website presents a professional, secure, and compliant digital presence aligned with its business objectives. The main risk lies in the missing WHOIS data, which should be investigated further to ensure domain registration transparency and trustworthiness.

E

Eiffage

eiffage-aevia.com

56

Eiffage Ævia is a specialized subsidiary of the Eiffage Group focused on the conservation, maintenance, and improvement of civil engineering infrastructure and heritage. The company offers both services and products tailored to the construction and repair of civil engineering works, leveraging specialized equipment and in-house developed systems. The website reflects a professional B2B orientation targeting infrastructure professionals and stakeholders in the energy, transportation, and real estate sectors. Technically, the site uses modern JavaScript libraries, integrates Google reCAPTCHA for form security, and employs OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and visible security alerts, though some security headers are missing and no explicit incident response contacts are published. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the strong branding and affiliation with the reputable Eiffage Group mitigate these concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

I

Impol

impol.si

33

Impol is a well-established Slovenian aluminum manufacturing group with a strong presence in Europe and the USA. The company specializes in producing a wide range of aluminum products serving diverse industries such as automotive, pharmaceutical, food, transport, and aerospace. Their market position is strong, being the 6th largest Slovenian exporter and a leader in aluminum rod production in Europe. The website reflects a mature digital presence with multilingual support, detailed product and industry information, and a focus on sustainability and innovation. Technically, the site uses WordPress with modern libraries and integrates Google Analytics and Tag Manager for tracking, alongside a comprehensive cookie consent mechanism. Security posture is good with HTTPS and reCAPTCHA in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.