Security Directory

R

Romantik® Hotels & Restaurants

romantikhotels.com

56

Romantik® Hotels & Restaurants is a well-established hospitality brand operating across Europe, offering over 220 unique hotels and culinary experiences. The website provides comprehensive booking services, loyalty programs, and gift vouchers, targeting travelers seeking romantic and unique stays. The digital infrastructure is built on Silverstripe CMS with integrated booking engines (Dirs21 and Synxis), supported by Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and consent mechanisms in place, though explicit security policies and incident response details are absent. The missing WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website content and contact information appear professional and trustworthy. Overall, the site demonstrates a mature digital presence with good user experience and compliance practices.

B

Big Shock s.r.o.

bigshock.cz

50

Big Shock s.r.o. operates the official website for the Big Shock energy drink brand, offering a range of energy beverages, ice teas, coffees, energy bars, sugars, and branded merchandise. The site targets consumers primarily in the Czech Republic and serves as an e-commerce platform with promotional content and social media integration. The company positions itself as a prominent player in the energy drink market with a strong brand presence and active marketing campaigns. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, OneSignal for push notifications, and reCAPTCHA for bot protection. The site is mobile optimized with responsive design and uses HTTPS with appropriate security headers, indicating a good level of digital maturity. However, some accessibility features and explicit privacy policy documentation are lacking. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of security headers, and bot mitigation. No critical vulnerabilities or exposed sensitive data were detected. The absence of a dedicated privacy policy and contact information for security or incident response reduces compliance maturity. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial brands. Overall, the website is professionally designed, secure, and functional for its business purpose. Strategic improvements in privacy documentation, contact transparency, and accessibility would enhance compliance and user trust. The risk profile is moderate with no immediate security concerns but room for governance enhancements.

O

OLD HEROLD, s.r.o.

oldherold.sk

49

OLD HEROLD, s.r.o. is a traditional Slovak distillery specializing in the production of high-quality alcoholic beverages, including the patent-protected Borovička JUNIPERUS and various fruit brandies such as Bošácka Slivovica, Hruškovica, and Marhuľovica. The company targets adult consumers and maintains a strong brand presence with consistent messaging and professional website design. The website enforces age verification to comply with legal requirements for alcohol sales and consumption. Technically, the site is built on WordPress, leveraging popular plugins for SEO, analytics, and cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforcement, security headers, and a comprehensive cookie consent mechanism. However, the absence of explicit contact information, terms of service, and security policies suggests areas for improvement in transparency and compliance. Overall, the website reflects a reputable business with a focus on traditional product quality and regulatory adherence.

V

VINO-KLUB

vino-klub.cz

73

Vino-klub.cz is a Czech Republic based luxury online wine retailer specializing in wines from Czechia, Moravia, and international sources. Established in 2006, the company operates a Magento-based e-commerce platform offering thematic wine collections targeting mature wine consumers. The website demonstrates a good level of digital maturity with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for cookie consent management. SEO is enhanced by structured data (JSON-LD) and proper meta tags. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is partial, with cookie consent mechanisms present but no explicit privacy policy or terms of service found in the provided content. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

A

Aller Media Denmark

aller.dk

73

Aller Media Denmark is a leading Danish media publisher specializing in magazines and weekly publications, including well-known titles such as BILLED-BLADET, SE og HØR, and Familie Journal. The company operates with a strong market position in Denmark, offering content creation, event management, and commercial partnerships. Their digital presence is built on a WordPress platform enhanced with modern front-end technologies like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. The website includes comprehensive GDPR-compliant privacy and cookie policies, leveraging Cookiebot for consent management. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site reflects a mature digital infrastructure aligned with business needs and regulatory requirements.

Q

Questback

questback.com

66

Questback is a well-established technology company specializing in feedback and survey solutions with over 24 years of experience. Their platform offers comprehensive feedback systems, insights dashboards, and reporting tools targeted primarily at organizations seeking to optimize their operations through data-driven feedback. The company maintains a professional online presence with consistent branding and a focus on privacy and compliance, including GDPR adherence and ISO 27001 certification. Technically, the website is built on WordPress with modern SEO and analytics integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but overall the business credibility remains high based on website content and trust signals. Strategic recommendations include enhancing transparency around security policies and domain registration details to further strengthen trust.

D

Outil de veille sur la formation dédié aux OF - Digiforma Veille

digiforma-veille.com

57

Digiforma Veille operates a specialized monitoring tool dedicated to training organizations, focusing on providing relevant information and updates in the education sector. The website is built on WordPress with Elementor, integrating modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for bot protection. The site demonstrates good design quality, mobile optimization, and SEO practices, making it accessible and user-friendly for its target audience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security measures are adequate with HTTPS and bot protection, but the lack of explicit privacy policies and contact information limits compliance and user trust. Overall, the site is safe and professional but would benefit from enhanced transparency and security documentation.

Digiformag is a French online magazine specializing in professional training, targeting training organizations and professionals in the education sector. It offers news, articles, and a community platform called OF Connect, positioning itself as a reference source in its niche. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and uses modern tools such as Yoast SEO, WP Rocket, and various analytics and tracking services including Google Analytics, Hotjar, and Facebook Pixel. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and branding suggest a legitimate business. Overall, Digiformag demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity.

D

Digiforma

digiforma.com

62

Digiforma is a French company founded in 2016 specializing in SaaS software solutions for training management targeted at training organizations and centers. Their platform facilitates administrative document management including training agreements, programs, evaluations, and attendance tracking. The website demonstrates a mature digital presence with professional design, strong SEO, and multi-language support. The technical infrastructure is based on WordPress with Elementor and Gravity Forms, integrated with modern analytics and marketing tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Plausible Analytics for privacy-focused tracking. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information is absent. The domain WHOIS data is unavailable, which slightly reduces trustworthiness but the overall business credibility remains high based on content and structured data.

X

Xcruiter

xcruiter.no

49

Xcruiter is a Norwegian-based technology company founded in 2023 that provides an AI-powered recruitment platform designed to streamline and enhance the hiring process for businesses. Their solution focuses on lead generation, smart advertising, and automation to connect companies with quality candidates efficiently. The company targets businesses looking to improve recruitment outcomes and job seekers interested in new opportunities. The website demonstrates a professional and consistent brand presence with clear messaging and calls to action. Technically, the site is built on WordPress using the Themway theme and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, Hotjar, and Microsoft Clarity, indicating a mature digital marketing strategy. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, reflecting awareness of GDPR requirements. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response policies are absent. The domain registration aligns well with the company's founding date and business claims, supporting legitimacy. Overall, the website is well-constructed, secure, and business-focused, suitable for its target audience.

D

Domains By Proxy, LLC (registrant proxy)

claspo.io

69

Claspo.io is a SaaS platform specializing in popup builders designed to boost sales, generate leads, and increase subscriber counts for e-commerce and marketing-focused websites. The platform offers a wide range of popup templates, integrations with popular marketing and e-commerce tools such as Shopify, WordPress, Mailchimp, and HubSpot, and features like A/B testing, analytics, and campaign scheduling. The website is professionally designed with good navigation and mobile optimization, targeting businesses seeking conversion optimization solutions. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, hosted on AWS infrastructure. Security posture is adequate with HTTPS and CSRF tokens but lacks visible security headers and published security policies. The domain is privacy-protected but registered with a reputable registrar and has a reasonable age consistent with a startup. Overall, the site is trustworthy and professional but could improve transparency by publishing privacy and security policies.

R

Realytics

realytics.io

71

Realytics is a technology company specializing in TV analytics and total video measurement solutions designed to measure the advertising impact of cross-media TV campaigns. Positioned as a leading provider in this niche, Realytics targets advertisers, marketing professionals, and media agencies seeking data-driven insights to optimize their video advertising strategies. The website reflects a professional B2B SaaS business model with a focus on analytics services. Technically, the site is built on WordPress using modern themes and plugins such as Divi and Elementor, with integrated marketing and analytics tools including Google Analytics and LinkedIn Insight. The site demonstrates good SEO practices and mobile optimization, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but could benefit from additional security headers and a formal vulnerability disclosure policy. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for tech companies. No critical security issues or content safety concerns were identified.

E

ENGIE

engie.com

72

ENGIE is a major global energy company focused on accelerating the transition to a carbon-neutral economy. The company offers a broad range of services including renewable energy production, energy flexibility solutions, infrastructure management, and energy supply tailored to cities, industries, tertiary sectors, and individual consumers. The website content is professionally presented in French, reflecting ENGIE's strong market position in the energy sector, particularly in France and internationally. Technically, the site is built on Drupal CMS with modern web technologies such as Bootstrap, Google Tag Manager, and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no security.txt file is published. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, ENGIE's website demonstrates a mature digital presence aligned with its business objectives and compliance requirements.

T

terre d'Oc

terredoc.com

67

terre d'Oc operates an e-commerce website powered by PrestaShop, offering products under the terre d'Oc brand. The site targets general consumers interested in retail products, providing a professional and well-branded online shopping experience. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Cookiebot for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and visible security policies. The absence of WHOIS data raises concerns about domain legitimacy, which impacts overall trust. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation.

E

European Cultural Foundation

culturalfoundation.eu

57

The European Cultural Foundation website serves as a digital platform for a non-profit organization focused on fostering European cultural initiatives and a sense of belonging. The site presents a professional and consistent brand image, targeting European citizens and cultural stakeholders. The business model revolves around supporting and developing cultural projects that inspire hope and democracy across Europe. Technically, the website is built on WordPress with a modern tech stack including jQuery, Mapbox, and Cookiebot for cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit policies are absent. Privacy compliance is partial, with cookie consent but lacking visible privacy and terms of service documents. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

D

Digiforma

catalogueformpro.com

59

Digiforma is a French-based SaaS company specializing in comprehensive training management software for training organizations, centers, and enterprises. Founded in 2016, it serves over 5,500 clients and supports more than 2 million trainees with a robust platform that includes administrative management, e-learning, digital signature, quality certification compliance (Qualiopi), CRM, and online training catalogues. The company positions itself as a leader in the French training software market with a strong brand presence and extensive client testimonials. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-focused tracking. The site is well-optimized for SEO, mobile-friendly, and uses structured data for enhanced search engine understanding. Security best practices are observed with HTTPS, security headers, and cookie consent mechanisms. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. No public vulnerability disclosure or incident response contacts are found, which could be improved to enhance trust and security readiness. Overall, Digiforma presents a professional, trustworthy, and technically sound online presence with minor gaps in domain transparency and security disclosure. Strategic recommendations include verifying domain registration details, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to strengthen security posture and stakeholder confidence.

G

GambleAware

gambleaware.org

11

GambleAware is a UK-based non-profit organization dedicated to providing free, confidential advice and support for individuals affected by gambling harms, including their family and friends. The website offers a comprehensive range of services such as a gambling harms assessment, support tools including a dedicated app, live chat, and a helpline. It also provides research publications and a service finder to locate local support. The organization partners with GamCare to deliver live support services, reinforcing its position as a leading entity in gambling harm prevention in Great Britain. Technically, the website employs modern JavaScript libraries and frameworks, including jQuery, Google Tag Manager, Cookiebot for consent management, and Gleap for user feedback. The site is well-optimized for mobile devices, features fast loading times, and includes accessibility considerations. The use of HTTPS and secure third-party integrations indicates a strong digital maturity. From a security perspective, the site enforces HTTPS and integrates consent management to comply with privacy regulations. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerable libraries detected. However, the absence of publicly available incident response or vulnerability disclosure policies suggests room for improvement. Overall, GambleAware presents a trustworthy, professional, and user-centric platform with a high level of content quality and security. The lack of WHOIS data due to privacy protection is justified given the sensitive nature of the services offered. Strategic recommendations include enhancing transparency around security policies and publishing a security.txt file to facilitate vulnerability reporting.

D

Divadlo Kalich

divadlokalich.cz

60

Divadlo Kalich is a cultural venue based in Prague, Czech Republic, offering a variety of theatrical performances including comedies, musicals, concerts, and children's shows. The website serves as a platform for event listings and ticket sales, targeting a broad audience interested in live theater and cultural events. The site demonstrates a moderate level of digital maturity with the use of modern tracking technologies such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The technical infrastructure supports HTTPS and responsive design, ensuring accessibility and a good user experience across devices. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy and registrant information. Security posture is adequate with HTTPS and cookie consent, but could be improved by implementing security headers and publishing clear privacy and security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

D

DAFilms

dafilms.cz

55

DAFilms.cz is a niche online streaming platform specializing in curated art-house, documentary, festival, and children's films primarily targeting Czech-speaking audiences. Founded in 2012, it offers a subscription-based model with a focus on unique and authorial film content not commonly found on mainstream platforms. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Cookiebot for GDPR compliance, and reCAPTCHA for bot protection. The site is served over HTTPS with a good SSL configuration, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and links to detailed privacy policies. However, explicit contact and security policies are not readily found on the homepage, which could be enhanced for trust and compliance. Overall, the site is secure, compliant, and well-positioned within its niche market.

A

AVISIA

avisia.fr

74

AVISIA is a French consulting firm specializing in data, artificial intelligence, and digital marketing solutions. Established since 2007, the company supports projects combining data and AI technologies to deliver decision-making solutions. The website reflects a professional and consistent brand presence targeting businesses seeking expert consulting in these domains. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit privacy or security policies. WHOIS data is not publicly available, indicating privacy protection, which is common and justified for this business type. Overall, the site is trustworthy and professional but could improve transparency regarding privacy and contact information.

M

Mary's Meals Slovensko

marysmealsslovensko.sk

56

Mary's Meals Slovensko is a small non-profit organization focused on addressing child hunger by providing meals to children throughout the school year at a low cost. It operates as a localized branch of the international Mary's Meals charity, targeting supporters and donors interested in charitable feeding programs. The website presents clear branding and messaging consistent with its mission and uses modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management. The hosting is managed via Microsoft Online services, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The website integrates multiple third-party tracking and marketing services, including Google and Facebook, with a comprehensive cookie consent dialog that complies with GDPR requirements. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Potten & Pannen - Staněk

vasekuchyne.cz

9

Potten & Pannen - Staněk operates a professional e-commerce platform specializing in premium kitchenware, cooking utensils, and kitchen accessories, targeting consumers in the Czech Republic. The website presents a well-structured catalog of products with clear navigation and a consistent brand identity. The business positions itself as a trusted retailer with a high customer recommendation rate, focusing on quality and premium brands. Technically, the website leverages Kentico CMS and integrates multiple modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The site is served over HTTPS, ensuring secure communications, and includes some accessibility and mobile optimization features. However, explicit security headers are not evident in the provided content, suggesting room for improvement in security hardening. From a security and compliance perspective, the site implements cookie consent and uses reCAPTCHA to protect forms, but lacks visible privacy policy and terms of service pages in the analyzed content. WHOIS data is unavailable, which limits domain registration trust verification. No critical vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in transparency, security headers, and WHOIS data availability would enhance trust and compliance.

S

Shoptet

shoptet.sk

69

Shoptet is a Slovak-based e-commerce platform provider offering SaaS solutions to entrepreneurs and businesses seeking to establish online stores. The website promotes a 30-day free trial to attract new users and showcases a modern, professional design with good user experience and mobile optimization. The technical infrastructure leverages modern frameworks such as React and Next.js, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and contact information limits transparency. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Overall, the website is credible and trustworthy, serving a medium-sized business audience in the e-commerce sector.

N

Nakladatelství Vyšehrad

ivysehrad.cz

70

Nakladatelství Vyšehrad is a well-established Czech publishing house founded in 1934, specializing in literature including poetry, prose, historical, philosophical, and theological publications. The website reflects a professional digital presence with a clear focus on book publishing and sales, supported by partnerships with major Czech media and e-commerce platforms. Technically, the site uses modern web technologies such as jQuery, Moment.js, Google Tag Manager, and Cookiebot for cookie consent management, hosted under a reputable registrar and Cloudflare DNS. Security posture is solid with HTTPS and CSRF protections, though some security headers and policies could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR adherence. Overall, the site is trustworthy, well-branded, and serves a general audience interested in literature.

L

Laïta

laita.com

71

Laïta is a well-established cooperative dairy company based in the Grand Ouest region of France, founded in 1997. The website serves as the official portal for the cooperative, providing information about its dairy production and cooperative services. The business is positioned as an important regional player in the manufacturing sector, specifically dairy production. The website demonstrates a good level of digital maturity with modern technologies such as Cookiebot for GDPR-compliant cookie consent and Matomo for privacy-respecting analytics. Hosting is managed via Eolas infrastructure with domain registration dating back to 1997, indicating a stable and credible online presence. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although some security headers could be added to enhance protection. Privacy compliance is strong, with clear cookie consent mechanisms and privacy policy references. However, explicit contact information and detailed security policies are not present on the site, which could be improved to enhance trust and transparency.

Y

YAPEAL

yapeal.ch

68

YAPEAL is a Swiss FinTech company providing embedded finance and digital business account solutions, licensed by FINMA. The website presents a professional and modern digital platform targeting businesses seeking integrated financial services such as business accounts, cards, and payment solutions. The technical infrastructure is built on Umbraco CMS with modern JavaScript and CSS technologies, and includes cookie consent management via Cookiebot. Security posture is strong with HTTPS and security headers properly implemented, though explicit privacy and terms policies are not found on the main site. Contact is primarily via forms and demo booking links, with no direct emails or phone numbers visible. Overall, the website reflects a credible and trustworthy FinTech business with good digital maturity.

C

Creatio

bpmonline.com

78

Creatio is an enterprise SaaS company specializing in CRM and workflow automation platforms that leverage no-code and AI technologies to accelerate business process automation and customer engagement. The company positions itself as a provider of fast-to-value solutions with high ROI, targeting businesses seeking to streamline operations and enhance customer relationship management. The website is built on Drupal 11 and integrates multiple modern marketing and analytics tools, including Google Tag Manager, Hotjar, and Cookiebot, indicating a mature digital infrastructure. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are not evident. The absence of WHOIS data suggests privacy protection, which is typical for enterprise SaaS providers but slightly reduces transparency. Overall, the website is professional, well-branded, and safe for general audiences.

S

Storck & Merci Shop

storck.shop

68

Storck.shop is an e-commerce platform focused on retailing Storck branded confectionery products primarily to a German-speaking audience. The website offers a broad selection of sweets and emphasizes ease of online ordering and quick delivery. The site integrates modern digital marketing and analytics tools such as Google Tag Manager and Google Analytics, alongside a cookie consent management system powered by Cookiebot, reflecting a moderate level of digital maturity. The technical infrastructure is based on a Shopware CMS platform with standard web technologies and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enforced and basic security best practices observed, though improvements in security headers and explicit privacy and terms documentation are recommended. Overall, the site presents a moderate risk profile with no critical vulnerabilities detected but would benefit from enhanced transparency and contact information to improve trust and compliance.

E

ELEGANCE s.r.o.

sothys.cz

68

Sothys.cz represents a luxury French professional cosmetics brand operating primarily in the Czech Republic, targeting beauty salons, wellness, and spa centers. The company, identified as ELEGANCE s.r.o., offers high-end cosmetic products and professional treatments, positioning itself as a premium player in the beauty retail sector. The website reflects a well-structured digital presence with clear branding and a focus on professional clientele. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and privacy policy documentation is not clearly found, suggesting room for compliance improvement. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, but could enhance transparency by publishing detailed privacy and security policies. Strategic recommendations include improving security headers, publishing privacy and incident response information, and enhancing contact availability to strengthen trust and compliance.

F

Fundación Estatal para la Formación en el Empleo - Fundae

fundae.es

64

Fundación Estatal para la Formación en el Empleo (Fundae) is a Spanish government-affiliated entity dedicated to supporting and collaborating with the public employment service (SEPE) in the area of workforce training. The organization provides a variety of services including training portals, subsidy management, statistical data publication, and digital competence evaluation aimed at workers and companies across Spain. The website reflects a mature digital presence with multiple language options and a clear focus on accessibility and user experience. Technically, the site is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It implements cookie consent mechanisms and integrates third-party analytics and tracking tools like Metricool. The website is mobile-optimized and adheres to accessibility standards, providing a good user experience. From a security perspective, the site uses HTTPS and cookie consent but lacks visible advanced security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable due to query restrictions, but the website's official branding and government affiliation strongly support its legitimacy. Overall, Fundae's website is a professional, secure, and compliant platform that effectively serves its public service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

V

Vorwerk

vorwerk.ch

71

Vorwerk.ch is a retail-focused website offering Thermomix TM7 kitchen appliances and Kobold VK7 vacuum cleaners primarily targeting consumers in Switzerland. The site emphasizes free consultation services and positions itself as a recognized brand in household appliances. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The security posture is strong with HTTPS enforced and cookie consent implemented, though explicit privacy policies and incident response contacts are not found in the provided content. Overall, the website is professional, user-friendly, and trustworthy, with moderate tracking and advertising practices aligned with industry standards.

S

SEJF

sejf.cz

68

SEJF operates a modern mobile application platform focused on cashless payments for public transport tickets, parking, and entry tickets primarily in the Czech Republic. The company positions itself as a leading provider in this niche, offering a wide variety of payment options and a user-friendly experience. The website reflects a mature digital presence with professional design, clear content, and strong branding consistency. Technically, the site leverages modern frameworks such as Next.js and React, integrates with Cookiebot for privacy compliance, and uses Google Analytics and Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is typical for CZ NIC domains and does not detract from the site's legitimacy given the professional presentation and compliance with GDPR. Overall, SEJF demonstrates a solid business and technical foundation with room for enhanced security transparency and incident response readiness.

T

Times Higher Education (THE)

timeshighereducation.com

10

Times Higher Education (THE) is a leading global media organization specializing in higher education news, university rankings, and academic insights. The website serves a broad audience including academics, university administrators, and students, providing authoritative content and comprehensive coverage of the higher education sector. THE operates under TES Global and maintains a strong market position as a trusted source for education-related information. Technically, the website leverages modern frameworks such as React and Next.js, with a responsive design and good SEO practices, ensuring a high-quality user experience across devices. Security-wise, the site enforces HTTPS, employs security headers, and integrates GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. However, the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency. Overall, the site is professional, trustworthy, and well-maintained, with minor recommendations to enhance security policy disclosures and vulnerability reporting.

T

The Epoch Times Italia

epochtimes.it

69

The Epoch Times Italia is an Italian-language online news media outlet providing comprehensive news coverage and commentary on Italian and international affairs. The website targets Italian-speaking audiences interested in politics, culture, health, and science. It operates primarily on an advertising-supported business model with additional services such as newsletter subscriptions. The site is part of the broader Epoch Times media group with multiple international editions. Technically, the website employs modern tracking and consent technologies including Google Tag Manager, Google Analytics, and OneTrust cookie consent, ensuring GDPR compliance and user privacy. The site is well-structured with good mobile optimization and SEO practices, delivering a professional user experience. Security-wise, the website enforces HTTPS, uses appropriate security headers, and integrates privacy-focused consent mechanisms, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is legitimate, trustworthy, and compliant with relevant privacy regulations, with no critical vulnerabilities detected.

P

PROFI CREDIT Czech, a. s.

proficredit.cz

53

PROFI CREDIT Czech, a. s. is a well-established financial services company based in the Czech Republic, specializing in non-bank insured loans up to 250,000 CZK. The company targets individuals and small business clients seeking flexible loan options with insurance for repayment capability. With a domain age dating back to 2006, PROFI CREDIT has a solid market presence and a good reputation, supported by positive customer ratings and professional branding. The website reflects a mature digital infrastructure built on WordPress, integrating modern tools such as Cookiebot for privacy compliance, Google Tag Manager, Hotjar for analytics, and a chat system for customer support. The site is mobile-optimized and SEO-friendly, providing a good user experience.

ePojisteni.cz is an established online insurance platform based in the Czech Republic, specializing in vehicle liability insurance and travel insurance. The company targets Czech vehicle owners and travelers seeking affordable and convenient insurance solutions. The website demonstrates a professional and consistent brand presence with a clear focus on its core services. Technically, the site leverages modern frontend frameworks such as Nuxt.js and Vue.js, and integrates common marketing and analytics tools like Google Tag Manager and Cookiebot, ensuring a moderate level of digital maturity. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the site is accessible, well-structured, and compliant with GDPR, but the absence of WHOIS data limits full domain trust assessment.

M

mairie-me

mairie-me.org

64

The website mairie-me.org appears to be a community engagement platform aimed at inhabitants of a commune or municipality, encouraging them to propose ideas and act collectively to improve local living conditions. The business model focuses on local governance participation, targeting residents as the primary audience. The website is built on the Bubble.io platform, utilizing modern JavaScript libraries and Google Fonts, with hosting provided by OVH sas. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is basic with HTTPS enabled and a cookie consent mechanism in place, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. The WHOIS data raises concerns due to a domain creation date set in the future, which questions the legitimacy and operational status of the domain. Overall, the website content is safe and suitable for a general audience with no adult or explicit content detected.

G

Goldea.cz

goldea.cz

59

Goldea.cz is a Czech-based e-commerce retailer specializing in high-quality home textiles including bedding, curtains, towels, and table linens. The company emphasizes Czech craftsmanship, custom tailoring, and natural materials, positioning itself as a trusted brand with a strong customer satisfaction record. Founded in 2016 and operated by MIONET s. r. o., Goldea.cz serves primarily the Czech market with localized content and regional language support. The website is professionally designed with excellent content quality and user experience, supporting clear navigation and mobile responsiveness. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and error monitoring, though some HTTP security headers and explicit security policies are absent. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and business legitimacy evident on the site. Overall, Goldea.cz is a well-established retail platform with solid digital maturity and privacy compliance, though domain registration transparency should be improved.

S

SNS Security

sns-security.fr

76

SNS Security is a French cybersecurity service company established in 2002, specializing in providing technical and technological security solutions. The company targets businesses and organizations seeking cybersecurity expertise and positions itself as a recognized service provider with solid technical know-how. The website is professionally designed, primarily in French, and offers clear information about the company's services and privacy practices. Technically, the site runs on WordPress with integrations such as Google Tag Manager, Cookiebot for cookie consent management, and HubSpot for marketing and analytics, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, uses secure cookies, and implements a comprehensive cookie consent mechanism, although it lacks explicit security policy and incident response contact information. Overall, the site demonstrates good security hygiene and privacy compliance but could improve transparency by publishing terms of service and security policies. The domain's WHOIS data confirms a long-standing registration consistent with the company's business claims, enhancing trustworthiness.

K

KPMG Česká republika, s.r.o.

marwick.cz

68

Marwick.cz is a professional media platform operated by KPMG Česká republika, s.r.o., providing business insights, interviews, data research, and legal content targeted primarily at business professionals and the general public in the Czech Republic. The website leverages the strong KPMG brand to establish trust and authority in its content offerings. Technically, the site employs modern tracking and analytics tools such as Google Analytics, LinkedIn Insight, and Facebook SDK, alongside a robust cookie consent mechanism powered by Cookiebot, ensuring compliance with GDPR and privacy regulations. The site is well-structured, mobile-optimized, and offers a good user experience with clear navigation and relevant content.

H

Historic Hotels of Europe

historichotelsofeurope.com

60

Historic Hotels of Europe operates a niche hospitality website focused on promoting and facilitating bookings for historic hotels across Europe. The business targets culturally interested travelers seeking unique accommodations in historic houses. The website is built on WordPress using the Elementor page builder, hosted by a reputable Irish hosting provider, and has been operational since 2003, indicating a mature digital presence. Technically, the site employs modern web technologies and includes cookie consent mechanisms via Cookiebot, reflecting basic privacy compliance. However, the absence of visible privacy policies, terms of service, and contact information limits full compliance and user trust. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response details. Overall, the site is professionally designed with good SEO and mobile optimization but would benefit from enhanced transparency and security practices.

P

Profitroom

profitroom.net

74

Profitroom is a hospitality technology company specializing in direct booking solutions for hotels, resorts, and hotel groups. Their website presents a professional and consistent brand image, targeting hospitality businesses seeking to enhance direct booking capabilities. The site is built on HubSpot CMS and integrates modern marketing and analytics tools such as Google Analytics 4, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and mobile-optimized, providing a good user experience and SEO optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, explicit security headers and incident response information are lacking. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and technology usage suggest a legitimate business presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to improve security headers, provide contact and legal information, and verify domain registration.

E

ecosystem

ecosystem.eco

73

ecosystem is a French eco-organization dedicated to extending the lifecycle of electrical and electronic equipment through repair, reuse, and recycling. Accredited by public authorities, it serves both individuals and professionals with services including locating repairers, donation and recycling points, and providing educational resources. The website is professionally designed, content-rich, and well-structured, targeting a broad audience interested in sustainable management of electrical waste. Technically, the site employs modern analytics tools such as Matomo and Google Tag Manager, along with Cookiebot for consent management. The site is mobile-optimized and accessible, with good SEO practices. However, explicit security headers and detailed security policies are not evident, representing an area for improvement. Security posture is moderate with HTTPS implied but lacking visible advanced security headers or incident response information. The absence of WHOIS data limits domain trust assessment, though the website's professional presentation and public accreditation support its legitimacy. Overall, ecosystem presents a trustworthy and authoritative platform in its domain, with recommendations to enhance security transparency and domain registration visibility to further strengthen trust and compliance.

L

LINDR.CZ.s.r.o.

lindr.cz

61

LINDR.CZ.s.r.o. operates a Czech-language website focused on dispensing equipment, targeting businesses and consumers interested in such products. The company appears to be a medium-sized manufacturing entity with an e-commerce presence via a related subdomain. The website employs modern frontend technologies and integrates essential tools such as Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly visible in the HTML content. No contact information or terms of service pages were found, which slightly impacts the overall trust and compliance assessment. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is professional, GDPR compliant, and technically sound, serving its target market effectively.

B

Boels Česká republika s.r.o.

boels.cz

66

Boels Česká republika s.r.o. is a prominent equipment rental company specializing in tools and construction machinery, serving primarily the Czech market. The company offers a wide range of over 2500 products and maintains a strong branch network, positioning itself as a leading player in the construction and transportation sectors. The website is professionally designed, localized in Czech, and provides clear navigation to various product categories and services including onsite rental, lease, and sales. Technically, the site leverages modern frameworks such as Angular and integrates security and privacy tools like reCAPTCHA and Cookiebot, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public security policy or incident response contact is noted. The missing WHOIS data is a concern for domain legitimacy but is offset by the professional web presence and verified social media channels. Overall, the site demonstrates a high level of business credibility and technical sophistication with room for improvement in transparency and incident readiness.

P

Podiart Kft.

podiart.hu

49

Podiart Kft. operates a Hungarian-language website focused on foot health services and retail products, including computerized foot examinations, custom insoles, therapeutic slippers, and footwear. The company appears to be a small-sized healthcare retail and service provider established in 2010, with a consistent domain registration history. The website is built on WordPress with WooCommerce, leveraging modern plugins and tracking technologies such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. While the site uses HTTPS and integrates multiple analytics and marketing tools, it lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Security headers are not explicitly visible, and no incident response contacts or vulnerability disclosures are provided, indicating room for improvement in security posture and transparency.

WhistleblowerSoftware.com is a professional SaaS provider specializing in whistleblowing systems designed for organizations ranging from 50 to over 10,000 employees. The company, branded as Formalize, offers a secure, GDPR-compliant platform with ISAE 3000 certification and end-to-end encryption, positioning itself as a leading solution in the whistleblowing software market. The website reflects a mature digital presence with a modern tech stack hosted on AWS and utilizes Cookiebot for cookie consent management, ensuring compliance with privacy regulations. The integration of multiple analytics and marketing tools indicates a data-driven approach to customer engagement and business growth. Security posture is solid with HTTPS enforced and domain registration consistent with the business profile, although DNSSEC is not enabled and some security headers appear absent. No explicit privacy policy or terms of service were found in the provided content, which is a notable gap in compliance documentation. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in explicit security and compliance disclosures.

H

HAIR SERVIS

grismagazine.cz

33

Hair Servis is a well-established Czech e-commerce platform specializing in professional hair care and styling products, serving primarily hair salons and wholesale customers. The website offers a broad range of brands and product categories, positioning itself as a key player in the regional hair care retail market. The business has been operating since 2002, supported by a consistent domain registration and a professional online presence. Technically, the website is built on Magento 2, utilizing modern JavaScript libraries such as RequireJS and jQuery, and integrates essential tools like Google Tag Manager, Facebook Pixel, and Cookiebot for analytics and cookie consent management. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, Hair Servis presents a professional and trustworthy e-commerce platform with room for improvement in privacy transparency and security policy publication. Strategic enhancements in these areas would strengthen compliance and customer trust.

П

Портал республика Чечия

respublika.cz

62

Respublika.cz is a Russian-language informational portal established in 2006, targeting Russian-speaking residents and visitors in the Czech Republic. It offers a variety of services including classifieds, company directories, news, event calendars, dating services, and Russian and Czech TV streaming. The website uses Joomla CMS and common web technologies such as jQuery and Google Fonts, with cookie consent managed by Cookiebot. The portal appears to be a niche media platform serving a specific linguistic community within Czechia. Technically, the site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is moderate; HTTPS is enabled, but no advanced security headers or policies are detected, and no privacy or terms of service pages are found. The domain registration data is consistent and mature, supporting the site's legitimacy. Overall, the site is functional and professional but would benefit from enhanced security practices and improved privacy compliance.

S

STIB-MIVB

stib-mivb.be

59

STIB-MIVB is the primary public transportation operator in Brussels, providing metro, tram, and bus services. Their website offers comprehensive travel planning tools, ticket purchasing options, and real-time service updates, targeting residents and visitors in the Brussels region. The site is multilingual and designed with accessibility in mind, reflecting a mature digital presence. Technically, the website uses modern frameworks such as Bootstrap and integrates third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. The WHOIS data is unavailable due to registry restrictions, but the domain and content strongly indicate legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's public service mission.