Security Directory

G

GENERALI zavarovalnica d. d.

generali.si

61

GENERALI zavarovalnica d. d. is a well-established Slovenian insurance company offering a wide range of insurance products including vehicle, home, health, accident, travel, and pension insurance for both individuals and businesses. The company is part of the larger Generali Group, a recognized global insurance provider. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information tailored to the Slovenian market. Technical infrastructure leverages Liferay CMS, jQuery, and Google Tag Manager, indicating a modern and maintainable platform. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

S

Swiss Leaders

sustainableleaders.ch

61

Sustainable Leaders is a Swiss non-profit initiative led by Swiss Leaders, focused on promoting sustainable leadership and new managerial norms. The website offers information about the initiative, training programs, a sustainability charter, and participation in a sustainability barometer. The target audience includes business leaders and organizations interested in sustainability. Technically, the site is built on WordPress using the Enfold theme, enhanced with Google reCAPTCHA v3 and PWA capabilities, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and anti-bot measures, but lacks some advanced security headers and explicit cookie consent mechanisms. Privacy compliance is basic with a privacy policy linked on the partner domain but no visible cookie banner or terms of service. Overall, the site is professional, trustworthy, and well-branded, with room for improvement in privacy and security transparency.

P

PUMA

puma-catchup.com

61

PUMA CATch up is a corporate media platform operated by PUMA SE, focusing on delivering news, stories, and updates related to the brand's business, sports, sustainability, and employee engagement. The website serves as an internal and external communication channel targeting PUMA employees and brand enthusiasts. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, with progressive web app capabilities. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and detailed privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with PUMA's corporate identity. Overall, the site demonstrates a moderate to good digital maturity level but would benefit from enhanced transparency and security practices.

T

ThemeZee

themezee.com

54

ThemeZee is a specialized WordPress theme provider founded in 2009, offering accessible and reliable WordPress themes with a focus on ease of use and web goals achievement. The company operates primarily in the technology sector, targeting WordPress users seeking both free themes and premium add-ons. Their market position is solid within the niche of classic magazine and block themes, supported by a customer base exceeding 10,000 users. Technically, the website is built on WordPress 6.8.3 with a modern tech stack including Easy Digital Downloads and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

FatCow Web Hosting is a well-established provider of small business web hosting and domain registration services, now operating under the umbrella of iPage by Network Solutions, a Newfold Digital brand. The website serves as a login portal for customers to access their control panel and webmail services. It targets small business owners and website administrators seeking reliable hosting solutions. The company offers a range of services including web hosting, domain registration, email hosting, WordPress hosting, e-commerce, and marketing services, positioning itself as a comprehensive provider in the web hosting industry. Technically, the website employs a modern technology stack including Bootstrap 3, jQuery, YUI, and integrates third-party services such as Google Tag Manager, Sift for fraud detection, AudioEye for accessibility, and Genesys for live chat support. The site is hosted on infrastructure managed by iPage/Network Solutions, ensuring moderate performance and good mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure login forms with POST methods. It includes cookie consent mechanisms and privacy policies that indicate GDPR compliance. While explicit security headers like Content-Security-Policy are not detected, the use of script integrity attributes and cross-origin policies reflect good security hygiene. No vulnerabilities or exposed sensitive data were found in the analysis. However, recommendations include implementing additional security headers and publishing a vulnerability disclosure policy. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. The lack of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the site, which aligns with the parent company’s branding and services. Strategic recommendations focus on enhancing security headers, transparency, and incident response readiness to further strengthen trust and compliance.

Transparency International Czech Republic is a well-established non-profit organization dedicated to combating corruption within the Czech Republic. The website clearly communicates its mission, ongoing projects, and impact metrics, supported by a professional and modern web presence built on WordPress. The organization provides legal assistance, advocacy, and educational services, funded primarily through donations facilitated by a trusted third-party platform. Technically, the site employs modern SEO and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the organization's credibility given the consistent branding and external references.

W

Web7master

web7.cz

53

Web7master is a Czech digital agency specializing in professional web development, e-shop creation, and custom applications tailored to business needs. They offer comprehensive services including website management, SEO optimization, and effective online marketing to help clients establish a strong digital presence. The company targets businesses seeking modern, responsive websites and digital marketing solutions primarily within the Czech Republic. The website is well-structured, mobile-optimized, and uses modern web technologies such as Joomla CMS and Bootstrap framework. Tracking and analytics tools like Google Analytics and Facebook Pixel are integrated for marketing insights. Security posture is strong with HTTPS and security headers implemented, though visible privacy and cookie policies are absent, which is a compliance gap. WHOIS data is unavailable, which slightly reduces trust but the website content and contact information appear professional and legitimate. Overall, the site scores well on content quality, technical implementation, and business credibility but should improve privacy compliance to enhance trust and regulatory adherence.

B

Balkan Pensiony

balkanpensiony.cz

58

Balkan Pensiony is a small hospitality business offering accommodation services in Bulgaria, specifically in the Bansko and Primorsko regions. The website presents two main pensions, Atika and Nadia, targeting tourists seeking winter and summer vacation stays. The business model focuses on direct accommodation bookings with a clear regional niche. The website is built on Joomla CMS with a moderate technical infrastructure including Bootstrap, jQuery, and social media integration via Facebook SDK. Google Analytics is used for visitor tracking. Security posture is basic with HTTPS enabled but lacking security headers and privacy policies, which are critical for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact phone number appear legitimate. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Cirkev adventistov siedmeho dňa na Slovensku – CASD

casd.sk

38

The website www.casd.sk serves as the official online presence of the Slovak Seventh-day Adventist Church, providing religious content, community news, event information, and links to affiliated organizations. It targets Slovak-speaking members and followers of the church, offering spiritual resources and institutional information. The site is built on WordPress with a moderate technical infrastructure and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and vulnerability disclosures. The site demonstrates good content quality and trustworthiness, supported by consistent branding and regular updates. No critical security issues or adult content were detected, and the WHOIS data aligns well with the organization's claims, indicating legitimacy.

P

ProFlags BV

countryflags.com

63

Countryflags.com is a specialized website offering a comprehensive collection of national flags and related country information. The site provides downloadable vector files, icons, wallpapers, and emojis for all country flags, targeting educators, designers, researchers, and the general public interested in geography and flag symbolism. The business operates under ProFlags BV and positions itself as a niche informational resource with e-commerce capabilities for digital assets. Technically, the website is built on WordPress with WooCommerce and enhanced by SEO and analytics plugins such as Yoast SEO and MonsterInsights. The site demonstrates good mobile optimization, clear navigation, and solid content relevance, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site scores well in content quality and security posture but should address domain registration transparency and enhance security policies for improved trust.

R

Ridera Development s.r.o.

rezidence-keltickova.cz

56

Rezidence Keltičkova is a residential real estate development project located in Slezská Ostrava, Czech Republic, developed by Ridera Development s.r.o., a subsidiary of Ridera a.s. The project offers modern family housing with 41 apartments ranging from 1+KK to 4+KK, all sold out, with a focus on peaceful living near the city center. The website is professionally designed using WordPress and Elementor, featuring clear navigation and relevant content for prospective buyers and investors. Technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Facebook Pixel, with HTTPS enforced and a cookie consent mechanism implemented. However, the absence of WHOIS data and registrant information limits domain trust assessment.

N

Nexudus Limited

nexudus.com

72

Nexudus Limited operates a leading SaaS platform specializing in coworking space management software. The company offers a comprehensive suite of tools including automated billing, smart bookings, access control, member management, and analytics, targeting coworking operators and flexible workspace managers globally. With over 3000 spaces powered in more than 90 countries since 2012, Nexudus holds a strong market position as an innovative and scalable solution provider in the coworking technology sector. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the website is built on WordPress with modern SEO and analytics integrations including Yoast SEO, HubSpot, Google Analytics, and LinkedIn Insight. It leverages Cloudflare for DNS and CDN services, ensuring fast performance and robust hosting infrastructure. The site is mobile-optimized and accessible, with comprehensive SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with strong domain registration protections and uses reputable third-party scripts. However, it lacks publicly available security policies or incident response information and does not publish a vulnerability disclosure or security.txt file. Privacy and cookie policies are present and indicate GDPR compliance, supporting user data protection. Overall, Nexudus demonstrates a high level of professionalism, technical maturity, and business credibility. The risk profile is low with no detected vulnerabilities or suspicious patterns. Strategic recommendations include enabling DNSSEC, publishing formal security policies, and establishing a vulnerability disclosure program to further enhance trust and security posture.

C

CEC European Managers

sustainableleaders.eu

53

SustainableLeaders.eu is a professionally maintained website representing the Sustainable Leadership Project managed by CEC European Managers, a non-profit organization based in Belgium. The project focuses on empowering leaders for a net-positive future through sustainable leadership training, reports, and summit events. The website targets managers, consultants, and organizations interested in sustainability within the European context. The business model is non-profit with EU funding and partnerships supporting its activities. Technically, the site is built on WordPress using the Enfold theme and includes modern web technologies such as jQuery and LayerSlider. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie management. Contact information is comprehensive, including email, phone, physical address, and a contact form. Overall, the website is trustworthy, professional, and well-aligned with its stated mission.

Z

Združenje Manager

zdruzenje-manager.si

51

Združenje Manager is a well-established Slovenian non-profit association dedicated to supporting management professionals through events, knowledge sharing, and networking. The website reflects a professional and consistent brand presence with clear business information and active social media engagement. Technically, the site is built on SilverStripe CMS, uses modern JavaScript libraries, and integrates analytics tools like Google Analytics and Microsoft Clarity with privacy considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the site is trustworthy, accessible, and serves its target audience effectively.

F

Francejudo

francejudo.com

50

Francejudo.com is a French-language niche media website dedicated to providing comprehensive news, results, and multimedia content related to the sport of judo. Established in 2000, it serves judo enthusiasts primarily in France but also covers international events. The site operates on the WordPress platform, leveraging popular SEO and social sharing plugins to enhance content visibility and user engagement. It monetizes through advertising networks such as Google AdSense and Advanced Ads. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices, though there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. Overall, the website presents a professional and trustworthy front for its target audience, though it could enhance transparency and compliance by publishing privacy and terms of service documents and improving security best practices.

F

Fédération Française de Boxe

ffboxe.com

53

The Fédération Française de Boxe (FFBoxe) is the official French boxing federation, serving as the national governing body for amateur and professional boxing in France. The website provides comprehensive information about boxing practice, training, professional boxing, teams, and federation governance. It targets athletes, clubs, officials, and boxing enthusiasts in France. The federation is positioned as a key sports organization with over 60,000 licensed members, offering services such as licensing, training certifications, event organization, and information dissemination. Technically, the website is built on WordPress using Oxygen Builder, with modern JavaScript libraries like Alpine.js and jQuery. It employs SEO best practices with Yoast SEO and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with visible privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, the site is trustworthy and professional, though the absence of WHOIS data for the domain www.ffboxe.com is a concern that warrants verification. The domain may be newly registered or privacy protected, which is unusual for an official federation. Strategic recommendations include enhancing security headers, publishing incident response details, and verifying domain registration to strengthen trust.

B

BFM Bourse

tradingsat.com

71

TradingSat.com is a French-language financial news and stock market advice website affiliated with the BFM media brand, a well-known French news network. The site offers real-time stock quotes, technical analysis, market news, and trading tools targeted at investors and traders interested in the French and global stock markets. It operates a business model combining advertising revenue with subscription-based premium services such as portfolio management. The website is professionally designed, mobile-optimized, and integrates multiple third-party analytics and advertising technologies, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and explicit incident response policies. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or a registration issue, which slightly impacts trustworthiness. Overall, the site presents a moderate risk profile with good content quality and compliance posture.

M

MET Group

met.com

62

MET Group is a large European energy company headquartered in Switzerland, specializing in natural gas, electricity trading, and renewable energy production including wind and solar. The company operates across multiple European countries and emphasizes green energy and socially responsible business practices. The website is professionally designed, mobile-optimized, and provides comprehensive business and media information, targeting energy market participants and corporate clients. Technically, the site uses Umbraco CMS with modern frontend technologies like jQuery and Bootstrap, delivering a good user experience and SEO optimization. Security posture is solid with HTTPS and client-side validation, though some security headers and explicit cookie consent mechanisms could be improved. WHOIS data for the domain group.met.com is not publicly available, likely due to it being a subdomain under met.com, but the website content and branding strongly indicate legitimacy. Overall, the site is trustworthy, business-focused, and safe for general audiences.

C

CBH Compagnie Bancaire Helvétique

cbhbank.com

54

CBH Compagnie Bancaire Helvétique is a Swiss family-owned private bank specializing in wealth management, investment management, family office solutions, and banking services. The bank targets private and institutional clients, emphasizing creativity and excellence in its offerings. The website reflects a mature digital presence built on WordPress with modern plugins and SEO tools, providing a professional and content-rich user experience. Security posture is adequate with HTTPS and domain protections, though improvements are needed in security headers and published policies. Overall, the bank demonstrates strong business credibility and market positioning in the Swiss private banking sector.

I

International Judo Federation

judobase.org

60

The International Judo Federation (IJF) operates Judobase.org, a comprehensive and authoritative platform dedicated to judo sports enthusiasts worldwide. The website serves as the official source for competition results, athlete rankings, event calendars, and multimedia content related to IJF-sanctioned events. It targets a global audience including athletes, coaches, officials, and fans, positioning itself as a key resource in the judo sports ecosystem. The business model is primarily federation-driven, supported by sponsorships and partnerships, with a medium-sized operational scale and a history dating back to at least 2007. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site is well-optimized for performance and mobile devices, with a clean and professional design that facilitates excellent user experience and navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security policy page, which are areas for improvement. Privacy and cookie policies are present and appear comprehensive, indicating a reasonable level of GDPR compliance. Contact information is clearly provided with official domain emails, enhancing trustworthiness. Overall, Judobase.org demonstrates a strong security posture and high business credibility, with no signs of suspicious activity or content safety concerns. The lack of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, implementing explicit cookie consent mechanisms, and publishing a formal security incident response policy to further strengthen compliance and user trust.

S

scireum

oxomi.com

51

OXOMI is a B2B SaaS platform developed by scireum GmbH, specializing in product information management and digital catalog distribution primarily for industrial and wholesale sectors. The platform offers integration capabilities and support services, positioning itself as a niche provider in the technology industry within Germany. The website serves as a login portal for users and provides support and knowledge base resources. Technically, the site employs a modern technology stack including Font Awesome, Electron, MongoDB, Redis, and ElasticSearch, indicating a mature and scalable infrastructure. The presence of an Electron desktop app integration suggests multi-platform support. Security posture is adequate with HTTPS enforced and domain transfer protection, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences.

K

Kommunalgemeinschaft Euroregion

elbelabe.eu

10

The website www.elbelabe.eu represents the Euroregion Elbe/Labe, a regional non-profit organization focused on fostering cross-border cooperation between Saxony (Germany) and the Czech Republic. It aims to build mutual trust and promote collaboration in various societal sectors. The site provides comprehensive information about the region, projects, events, and funding opportunities, targeting residents, organizations, and stakeholders in the border region. The business model is non-commercial, emphasizing regional development and cultural exchange. Technically, the website is built on a modern stack including jQuery, FullCalendar, and Matomo analytics, likely powered by Kirby CMS. It features good performance, mobile optimization, and accessibility. Structured data is implemented for SEO benefits. However, some security headers like Content-Security-Policy are present but commented out, and there is no cookie consent mechanism despite the use of tracking scripts. Google Tag Manager and Ads scripts are conditionally loaded, which may raise privacy considerations. From a security perspective, the site uses HTTPS and disables cookies in Matomo to enhance privacy. The lack of active CSP and cookie consent are notable gaps. No exposed sensitive data or vulnerabilities were detected. WHOIS data is unavailable due to EURid privacy protection, which is typical for EU domains and justified for this type of organization. Overall, the website is professional, content-rich, and trustworthy, with minor improvements recommended in security header enforcement and privacy compliance to align with best practices and GDPR requirements.

M

MAS Labské Skály

maslabskeskaly.cz

51

MAS Labské Skály is a local action group focused on community and regional development within the Ústecký region of the Czech Republic. The organization supports local municipalities and communities through strategic planning, grant management, and community engagement initiatives. Their website reflects a well-structured and content-rich platform aimed at informing and supporting their target audience of local stakeholders and residents. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Swiper.js, providing a responsive and accessible user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers, which could be improved. The absence of WHOIS data reduces domain trust, but the website's content and external references indicate a legitimate and active organization. Overall, the site is professional, privacy-conscious, and focused on public service.

P

PageFly

pagefly.io

10

PageFly is a well-established SaaS company founded in 2016, specializing in providing advanced page building and customization solutions for Shopify merchants. The website demonstrates a strong market position as the leading Shopify page builder, offering extensive customization and conversion optimization features. The technical infrastructure leverages Shopify's platform combined with modern JavaScript libraries and multiple analytics and marketing tools, indicating a mature digital presence. Security posture is solid with HTTPS enforced, privacy protection on domain registration, and use of CAPTCHA and session management tools, though explicit privacy and cookie policies are missing. Overall, the website is professional, fast, and user-friendly, targeting e-commerce businesses seeking enhanced page design capabilities.

C

Communauté d'Agglomération Cannes Lérins

cannespaysdelerins.fr

54

Cannes Pays de Lérins is a regional government authority serving the Cannes Lérins agglomeration in France, focusing on transportation, public works, employment, and community development. The website reflects a medium-sized public sector entity with a clear mission to support and develop the local living environment. The site uses WordPress with the Divi theme and integrates common plugins for social media feeds and cookie compliance. The technical infrastructure is modern and hosted by ECRITEL, a reputable provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible and safe for general audiences.

E

ELTON hodinářská, a.s.

eltonhodinarska.cz

40

ELTON hodinářská, a.s. is a Czech watch manufacturing company with a heritage dating back to 1949. The company specializes in producing PRIM brand wristwatches, as well as wall clocks, alarm clocks, and other measuring instruments. Their manufacturing process includes in-house production of mechanical movements and components, emphasizing traditional craftsmanship. The company distributes its products through branded stores in major Czech cities and selected partners. Technically, the website is built on ASP.NET with modern front-end libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and presents content professionally with clear navigation. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit privacy or security policies. WHOIS data is unavailable, which reduces transparency but does not critically impact trust given the brand's established reputation. Overall, the website reflects a medium-sized manufacturing business with a solid digital presence but could improve in security and privacy transparency.

V

Venalicium.sk

venalicium.agency

9

Venalicium.sk is a small, professional PPC marketing agency specializing in Google Ads and Meta Ads campaign management. As a certified Google Partner, the company offers strategic PPC services including campaign creation, budget planning, and transparent reporting to help businesses grow and maximize their advertising ROI. The website is built on WordPress with Elementor and integrates Google Tag Manager for analytics and tracking. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is incomplete and malformed, which slightly reduces domain trustworthiness, but the business credibility is supported by certifications and client testimonials. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security best practices are recommended.

S

Sociálna poisťovňa

socpoist.sk

11

Sociálna poisťovňa is the official Slovak government social insurance institution providing a wide range of social security services including pensions, sickness and maternity benefits, unemployment benefits, and employer services. The website serves as a comprehensive portal for insured persons, employers, and other stakeholders, offering information, electronic services, and contact channels. The institution holds a strong market position as the national social insurance provider with a long operational history since 2003. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as Swiper.js and jQuery, ensuring good accessibility, mobile optimization, and user experience. The site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. Analytics are implemented via Google Tag Manager and Google Analytics, with moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is professional, trustworthy, and well-maintained, serving its government mandate effectively. Strategic recommendations include enhancing security headers, publishing a security.txt file for vulnerability disclosure, and providing explicit incident response contacts to further strengthen security posture and trust.

F

Finančné riaditeľstvo SR

financnasprava.sk

10

The website www.financnasprava.sk is the official online portal of the Slovak Financial Administration (Finančné riaditeľstvo SR), a government entity responsible for tax and customs administration in Slovakia. It serves multiple target audiences including entrepreneurs, citizens, and tax/customs specialists by providing comprehensive information, electronic services, and support channels. The portal offers key services such as tax registration, customs information, electronic tax filing, and communication platforms. It is positioned as a critical government service with a large-scale operational scope and strong integration with the Ministry of Finance of Slovakia. Technically, the website employs a combination of ASP.NET Web Forms technology with modern front-end frameworks like Bootstrap and jQuery. It integrates Google Analytics and Google Tag Manager for analytics and uses Google Custom Search Engine for internal search functionality. The site is mobile-optimized and demonstrates good performance and accessibility standards, although some improvements in accessibility and SEO could be made. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR and privacy regulations. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not present on the site, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website reflects a high level of professionalism, trustworthiness, and compliance expected from a government financial authority. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO to further strengthen the portal's security posture and user experience.

C

Carrier

carrier.com

75

Carrier is a globally recognized leader in intelligent climate and energy solutions, serving both residential and commercial markets as well as cold chain logistics. The website reflects a mature enterprise with a strong focus on innovation, sustainability, and customer-centric solutions. The digital infrastructure employs modern technologies including Bootstrap, Google Tag Manager, and OneTrust for privacy compliance, indicating a well-maintained and professional online presence. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the site is trustworthy and professionally managed, though WHOIS data is unavailable from the provided raw output, which warrants further verification. Strategic recommendations include enhancing transparency around security and incident response, and publishing clearer contact information for support and security inquiries.

Z

zariadim.sk

zariadim.sk

46

zariadim.sk is a Slovak online platform that connects customers with verified service providers across various sectors including home, garden, family, automotive, health, and business services. The platform features extensive user-generated content such as references and job postings, indicating a mature and active user base. The website integrates multiple subdomains targeting specific service categories, enhancing user experience and market segmentation. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and the Nette PHP framework, supported by analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Zopim chat. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy and terms of service present but lacking cookie consent mechanisms. Overall, the site demonstrates a solid business presence with moderate risk and room for security and privacy improvements.

D

Digital Garden - Tvorba web stránok Bratislava

digitalgarden.sk

45

Digital Garden is a Slovak-based creative agency specializing in professional web design, web development, SEO optimization, online marketing, and corporate identity branding. The company targets businesses and individuals seeking comprehensive digital solutions to enhance their online presence and sales channels. The website is built on WordPress, leveraging popular plugins such as Yoast SEO, Contact Form 7, and Slider Revolution, indicating a modern and maintainable technical infrastructure. The site is mobile-optimized and includes social media integration, enhancing its digital maturity. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy image consistent with a small technology service provider in Slovakia.

C

ContentFruiter s.r.o.

contentfruiter.sk

59

ContentFruiter s.r.o. is a Slovak-based professional content marketing agency established in 2014. The company specializes in content marketing projects with guaranteed growth, offering services such as functional content marketing, comprehensive online marketing audits, workshops, video content creation, and web solutions. The website demonstrates a strong market position with multiple client case studies and testimonials, targeting businesses seeking effective content marketing strategies. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, OneSignal push notifications, and MailerLite for marketing automation. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security posture is solid with HTTPS, DNSSEC, and no visible vulnerabilities, although additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence.

I

Instant System

instant-system.com

62

Instant System is a French-based company founded in 2013 specializing in white-label passenger information applications and Mobility as a Service (MaaS) solutions. The company collaborates closely with local public transport authorities and operators to deliver scalable and modular mobility solutions across 80 territories worldwide. Their offerings include journey planning, ticketing integration, and back office management tools tailored for cities, transport partners, and corporations managing employee mobility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting B2B clients in the transportation sector. Technically, the site uses modern JavaScript frameworks such as Knockout.js and integrates cookie consent management via tarteaucitron.io, ensuring GDPR compliance in cookie handling. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements are recommended in security headers and explicit security policies. Overall, the site demonstrates high business credibility and technical maturity with minor gaps in privacy documentation.

J

Jeremy Porter

jrmyprtr.com

47

Jeremy Porter is a New York-based communications consultant specializing in advertising, branding, persuasion, public relations, public speaking, and writing. The website positions Jeremy Porter as a trusted expert with a focus on strategic messaging and narrative development, supported by client testimonials and a professional online presence. The business operates primarily as a consulting service with content publishing to engage its audience. Technically, the website is built on WordPress using the Genesis Framework and Parallax Pro theme, with modern SEO practices via Yoast SEO and integration of MailChimp for newsletter subscriptions. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks security headers and DNSSEC, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies, and no explicit contact emails or phone numbers are provided, only a contact form. Overall, the domain registration data is consistent with the business claims, indicating legitimacy. The website content is safe for general audiences with no adult or questionable material detected.

S

Secomapp: Empowering your Shopify Success

secomapp.com

66

Secomapp is a technology company specializing in developing practical Shopify applications aimed at empowering e-commerce merchants to boost sales and improve store performance. With a suite of apps trusted by over 250,000 brands, Secomapp offers solutions such as SEO boosting, product reviews, and product labels & badges. The company positions itself as a reliable partner for Shopify merchants, emphasizing user-friendly design and lifetime support. Technically, the website is built on WordPress with Elementor and integrates modern web technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no evident vulnerabilities, though the absence of explicit privacy and cookie policies suggests room for compliance improvement. The missing WHOIS data for the domain raises some concerns about domain registration transparency, but the professional website and active social presence mitigate this risk. Overall, Secomapp presents a credible and professional business with a strong market presence in the Shopify app ecosystem.

C

Communauté d'Agglomération Sophia Antipolis

villagesvalleesdazur-tourisme.fr

55

The website www.villagesvalleesdazur-tourisme.fr serves as a regional tourism portal for the Villages Vallées d'Azur area in France, operated by the Communauté d'Agglomération Sophia Antipolis. It provides visitors with information on local villages, events, guided tours, and family-friendly activities, positioning itself as a key regional tourism information source. The site is built on TYPO3 CMS and incorporates modern web technologies including jQuery, Matomo analytics for privacy-respecting visitor tracking, and Tarteaucitron.js for cookie consent management. Multilingual support is provided via Google Translate integration. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. The absence of WHOIS data suggests privacy protection for the domain registration, which is reasonable for a public sector tourism entity. Overall, the site is professional, compliant with GDPR, and trustworthy, with a good user experience and clear navigation.

C

Communauté d'Agglomération Sophia Antipolis

cddcasa.fr

10

The website www.cddcasa.fr represents the Conseil de Développement Durable (CDD) of the Communauté d'Agglomération Sophia Antipolis, a regional public non-profit organization in France focused on sustainable development and citizen participation. The site provides information about the CDD's activities, reports, newsletters, and public consultation platforms, targeting residents and stakeholders in the Sophia Antipolis region. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Matomo analytics with privacy-conscious settings. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of public WHOIS data suggests privacy protection, which is typical and justified for such public institutions. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

C

Communauté d'Agglomération Sophia Antipolis

lol1625.fr

53

LOL1625 is a regional community service platform managed by the Communauté d'Agglomération Sophia Antipolis, providing information and management for the LOL1625 discount card. The website targets residents and visitors in the Alpes-Maritimes region, offering cultural, leisure, and sports discounts and events. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo for privacy-respecting analytics. The site is well-structured, mobile-optimized, and compliant with GDPR, featuring clear privacy and cookie policies with user consent mechanisms. Security posture is good with HTTPS and some security best practices, though additional headers and incident response documentation could improve it. Overall, the website is trustworthy, professional, and serves its community function effectively.

V

Vivatip

vivatip.hr

46

Vivatip is a Croatian-based e-commerce business specializing in trophies, medals, plaques, ribbons, and promotional materials. Established in 2003, it serves customers primarily in Croatia, offering a variety of award products and custom orders. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern digital infrastructure suitable for retail operations. The site is well-structured with good SEO practices and moderate performance, optimized for mobile devices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy or cookie policies, indicating compliance gaps. No direct contact information or incident response details are visible, which may affect customer trust and regulatory compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

E

Essimo B.V.

essimo-judo.com

51

Essimo B.V. operates the website essimo-judo.com, an e-commerce platform specializing in judo and martial arts equipment. The company offers a range of IJF approved products, uniforms, mats, and accessories targeting martial arts practitioners and clubs primarily in the Netherlands. The website is built on Magento Open Source, leveraging modern web technologies such as RequireJS, jQuery, and Knockout.js, providing a responsive and user-friendly shopping experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, although additional security headers could enhance protection. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, suggesting the domain may be newly registered or privacy protected. Overall, the website presents a professional and trustworthy front for its niche retail market.

IFET.fr is the official website of IFET, a French training organization specializing in educating local elected officials, their collaborators, and public agents. The organization is recognized and certified by the French Ministry of the Interior and holds the Qualiopi certification, underscoring its credibility and compliance with national training standards. The website provides detailed information about upcoming training sessions, certification attestations, and contact details for engagement. The target audience is primarily local government officials and associated personnel seeking professional development in governance and public administration. Technically, the site is built on Drupal 9, leveraging modern web technologies and standard analytics tools such as Google Analytics and Google Tag Manager, with a cookie consent mechanism in place to comply with GDPR requirements. The site is mobile-optimized and accessible, with a professional design and clear navigation.

A

Assemblée des départements de France

departements-en-reseaux.fr

46

Départements en réseaux is a collaborative open-source platform operated by the Assemblée des départements de France, targeting French departmental administrations. The platform facilitates collaboration and resource sharing among departments, positioning itself as a niche government/non-profit service provider. The website is professionally designed with consistent branding and clear navigation, supporting its role as a trusted government-related resource. Technically, the site is built on the Elgg CMS framework, utilizing modern web technologies such as jQuery and Font Awesome. Hosting is provided by reputable French providers OVH and o2switch.net. The site demonstrates good mobile optimization and basic accessibility features, although SEO optimization is basic. Performance is moderate, suitable for its intended audience. From a security perspective, the website enforces HTTPS and employs CSRF tokens in forms, alongside a robust cookie consent mechanism respecting GDPR and Do Not Track signals. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

CONCILIUM is a French consulting firm specializing in digital transformation and digital support services for businesses, public institutions, foundations, and associations. Established since 2015, the company offers tailored consulting in digital projects, e-marketing, e-commerce, social media management, event digitalization, GDPR compliance, and training. The firm positions itself as a trusted advisor in the digital transformation space with a strong presence in Paris and across France. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies and analytics tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled, though additional security headers could enhance protection. Privacy compliance is basic with no explicit privacy or terms of service pages found, but a cookie consent mechanism is present. Overall, the site is well-designed, accessible, and trustworthy, with no signs of malicious activity or content blocking.

S

SIAGI

siagi.com

64

SIAGI is a French mutual guarantee society specializing in facilitating credit access for small businesses such as artisans, local shops, liberal professions, and farmers. It offers a comprehensive range of credit guarantees and collaborates closely with all banks in the market, positioning itself as a key player in the financial support ecosystem for small enterprises. The website presents a professional image with clear navigation, testimonials, and detailed service offerings, targeting bankers, brokers, entrepreneurs, and general visitors interested in credit guarantees. Technically, the site uses modern JavaScript libraries including Mapbox for mapping, Google Tag Manager for analytics, and Bootstrap for responsive design, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional web presence and social media profiles mitigate some of these concerns. Security posture is adequate but could be improved by implementing security headers and explicit privacy and cookie policies. Overall, SIAGI's website is a credible resource for its target audience but would benefit from enhanced transparency and security practices.

A

AG2R LA MONDIALE

ag2rlamondiale.fr

65

AG2R LA MONDIALE is a leading French insurance and social protection group specializing in health mutual insurance, provident insurance, savings, and retirement products. The website targets individuals, professionals, enterprises, accountants, and brokers, offering a wide range of insurance and financial services. The company positions itself as a specialist in social and patrimonial protection in France, with a strong market presence and comprehensive service offerings. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript libraries and the Jahia CMS platform, with good performance and accessibility features. Security posture is strong, with HTTPS enforced and multiple security headers present, although no explicit incident response or vulnerability disclosure policies are publicly available. Privacy and cookie policies are present and GDPR compliant, indicating good privacy practices. Overall, the website is trustworthy, professional, and well-aligned with the company's business identity.

U

U2P

u2p-tv.fr

33

U2P TV is a specialized web TV platform operated by the Union des entreprises de proximité (U2P) in France, providing live streaming and archived video content related to U2P events and activities. The website targets professionals and stakeholders interested in U2P's initiatives, offering a niche media service with a clear focus on event broadcasting and replay. Technically, the site is built on WordPress using Elementor and Yoast SEO, hosted by OVH, and integrates YouTube for video content delivery. The platform demonstrates moderate digital maturity with good SEO and mobile optimization but could improve performance and accessibility further. Security posture is adequate with HTTPS enforced but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices.

O

Obec Jiříkovice

jirikovice.cz

40

Obec Jiříkovice operates as the official municipal government website for the village of Jiříkovice in the Czech Republic. It provides residents and visitors with local news, official documents, event calendars, and contact information for municipal offices. The site serves as a key communication channel for community engagement and local governance. The website is positioned as a small government entity portal with a focus on transparency and public service. Technically, the website employs a combination of JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Highslide for interactive and responsive user experience. The CMS appears to be a proprietary or specialized system (Galileo CMS), supporting structured content delivery. The site is mobile-optimized and includes accessibility certification, indicating a commitment to inclusive design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or security incidents are evident from the content. The absence of WHOIS data limits domain trust assessment, but the official nature and consistent branding support legitimacy. Overall, the website is a well-structured, professional municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

M

Město Újezd u Brna

ujezdubrna.cz

49

Město Újezd u Brna operates an official municipal website serving residents and visitors with comprehensive information about local government, events, public services, and community news. The website is well-structured and professionally designed, reflecting the town's commitment to transparent communication and civic engagement. The platform targets local citizens and stakeholders, providing easy access to essential municipal resources and contact points. Technically, the website leverages a modern technology stack including jQuery, Bootstrap, Swiper.js, and the Nette framework, ensuring responsive design and interactive features. The use of Leaflet.js for mapping and integration of social media channels enhances user experience. Hosting and domain registration are consistent with the official nature of the site, with a domain age dating back to 2002. From a security perspective, the site employs HTTPS, Google reCAPTCHA v3, and includes a cookie consent mechanism, demonstrating adherence to privacy and security best practices. While some security headers could be improved, no critical vulnerabilities were detected. The website complies with GDPR, providing a comprehensive privacy policy and data protection officer contact information. Overall, the website presents a low-risk profile with strong business credibility and a high level of trustworthiness. Strategic recommendations include enhancing security headers, implementing Subresource Integrity for external scripts, and maintaining regular updates to third-party libraries to sustain security and compliance.