Security Directory

T

Treedom s.r.l.

treedom.net

72

Treedom s.r.l. operates an online platform dedicated to environmental sustainability by enabling individuals and companies to plant or gift trees and track their impact. The company positions itself as a niche leader in green business solutions and reforestation projects, targeting environmentally conscious consumers and businesses. The website is professionally designed, mobile-optimized, and provides clear information about its services and mission. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Tag Manager for analytics, and uses Iubenda for cookie consent management, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and GDPR-compliant cookie consent but lacks explicit security headers and published security policies, indicating room for improvement in security transparency and incident response readiness. Overall, the website is trustworthy and safe, with no adult or questionable content, but the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to strengthen security posture and user trust.

A

A2A S.p.A.

gruppoa2a.it

46

A2A S.p.A. is a leading Italian multi-utility company specializing in energy, water, environmental services, and sustainable mobility. The company positions itself as a Life Company focused on sustainability and ecological transition, offering a wide range of services including electricity and gas supply, district heating and cooling, water management, waste collection, and electric vehicle charging solutions. The website reflects a mature enterprise with a strong market presence and diversified service portfolio targeting consumers, businesses, investors, and public entities. Technically, the website employs modern web technologies such as Next.js and React, integrates Google Tag Manager for analytics, and uses Dynatrace for performance and security monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly detailed, and no vulnerability disclosure policy or security.txt file is found. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility. The domain WHOIS data aligns with the corporate identity, confirming legitimacy. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing performance optimizations to further strengthen the security posture and user experience.

S

S-Kreditpartner

skpk.de

72

S-Kreditpartner is a German financial services company specializing in consumer and auto loans, operating fully online and in partnership with Sparkassen banks. The website presents a professional and modern interface built with Next.js and React, integrating Google Tag Manager for analytics. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are not found in the provided content. Contact information and incident response details are not clearly visible, which could impact user trust and compliance. Overall, the business appears legitimate and well-positioned in the finance sector, targeting private customers and Sparkassen partners with streamlined online loan services.

K

Krajowy Rejestr Opinii SA

trustmate.io

69

TrustMate.io is a Polish-based SaaS platform specializing in online reputation management and review collection for e-commerce and service businesses. The company, Krajowy Rejestr Opinii SA, founded in 2018, offers a comprehensive suite of tools including mediation, detailed ratings, surveys, and integrations with Google and social media to enhance customer trust and SEO performance. The website demonstrates a professional design with clear navigation and modern technology usage, including React and Next.js frameworks, supported by AWS hosting and multiple analytics and marketing tools such as HubSpot and Microsoft Clarity. Security posture is adequate with HTTPS enabled and no visible critical vulnerabilities, though improvements are recommended in DNSSEC and security headers. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the business, indicating high legitimacy and trustworthiness.

A

A2A Energia

a2aenergia.eu

69

A2A Energia is a leading Italian multi-utility company specializing in the supply of electricity and gas for residential and business customers. The company offers a variety of energy solutions including fixed and variable price contracts, photovoltaic installations, and energy efficiency services. Positioned strongly in the Italian energy market, A2A Energia benefits from its parent company Gruppo A2A's extensive infrastructure and market presence. The website reflects a mature digital infrastructure with modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. The company demonstrates strong compliance with GDPR and cookie regulations, providing clear privacy and cookie policies with consent mechanisms. Security posture is robust with HTTPS enforcement and comprehensive security headers, although there is room for improvement in publishing dedicated security and incident response policies. Overall, the website and business exhibit high professionalism, trustworthiness, and a strong market position in the energy sector.

I

InPost Store

inpoststore.com

60

InPost Store is an e-commerce platform specializing in packaging products and accessories tailored for customers in Poland, with a focus on compatibility with Paczkomat® lockers. The website offers a 3D packaging design tool and customization options, targeting businesses and individuals needing shipping supplies. Technically, the site uses modern frameworks such as React and Astro, integrates analytics and payment services like Stripe, and provides a responsive and professional user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. The domain registration data raises some concerns due to its recent creation date and third-party registrar, which may affect perceived legitimacy. Overall, the site is functional, privacy compliant, and professionally presented but could improve in security transparency and domain trustworthiness.

N

NGN Netzgesellschaft Niederrhein mbH

ngn-mbh.de

62

NGN Netzgesellschaft Niederrhein mbH is a regional energy distribution network operator serving the Niederrhein area in Germany. The company is responsible for planning, building, and operating electricity, gas, water, and district heating networks, ensuring reliable and efficient energy supply. It also provides services such as network connection, energy feed-in, metering, and customer support through an online portal. The company operates under the SWK Konzern umbrella, indicating a solid market position within the regional energy sector. Technically, the website is built using modern web technologies including React and Next.js, with a responsive design optimized for mobile devices. The hosting appears to be managed via Vodafone IP infrastructure, and cookie consent is handled by Usercentrics, reflecting compliance with privacy regulations. The site demonstrates good SEO and accessibility practices, with fast performance and clear navigation. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, showing no privacy protection or suspicious registrations. Overall, NGN's website reflects a professional and trustworthy energy company with a strong regional presence. Strategic improvements in publishing security policies and incident response information would enhance trust and compliance. The site is safe for general audiences and aligns well with its business objectives.

N

NOW

nowtv.it

70

NOW is a prominent Italian streaming service owned by Sky Italia S.r.l., offering a wide range of entertainment including international TV series, exclusive shows, films, and live sports such as Serie A, UEFA Champions League, Formula 1, and MotoGP. The platform targets Italian consumers seeking flexible, on-demand streaming options with personalized profiles and multi-device support. Technically, NOW employs a modern React-based frontend, GraphQL APIs, and integrates advanced marketing and analytics tools like Adobe Launch, Optimizely, Braze, and OneTrust for consent management, hosted likely on AWS infrastructure. Security posture is strong with HTTPS enforcement, modern security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content. No adult or explicit content is present, making it safe for general audiences.

C

Collective Audience

beop.io

64

Collective Audience operates as an innovative cloud ecosystem focused on media and brand advertising on the openweb. The company provides a suite of interactive advertising formats and audience management tools designed to enhance engagement and data-driven targeting. Their market position is strengthened by partnerships with major brands and publishers, particularly in France, and a growing footprint in the digital advertising ecosystem. Technically, the website leverages modern frameworks such as React, integrates Matomo analytics for privacy-conscious tracking, and uses Stripe for payment processing, indicating a mature and scalable infrastructure. Security posture is strong with HTTPS enforcement and security headers, though the absence of explicit cookie consent mechanisms and published security policies suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, with clear business focus and good user experience.

G

Gesellschaft für Stadtreinigung und Abfallwirtschaft Krefeld mbH

gsak.de

63

Gesellschaft für Stadtreinigung und Abfallwirtschaft Krefeld mbH (GSAK) is a municipal service provider specializing in waste collection, street cleaning, and winter services in Krefeld, Germany. It operates as a subsidiary of SWK AG and EGN Entsorgungsgesellschaft Niederrhein mbH, positioning itself as a regional leader in environmental and waste management services. The website offers comprehensive information about their services, including container rental, bulky waste collection, and a mobile app for customer convenience. The target audience primarily includes private customers and businesses within Krefeld.

S

SWK AG

schluff-krefeld.de

59

Schluff Krefeld is a heritage railway service operated under the SWK AG umbrella, offering historical steam locomotive rides in Krefeld, Germany. The website targets tourists, families, and local residents interested in cultural and historical experiences. It provides ticket sales, event information, and community engagement opportunities. The business holds a solid local market position supported by community and partner organizations. Technically, the site is built on modern frameworks like React and Next.js, hosted likely via Vodafone IP infrastructure, and integrates privacy compliance tools such as Usercentrics CMP. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site is professional, user-friendly, and trustworthy, with moderate user tracking balanced by consent mechanisms.

L

La Nouvelle République

lanouvellerepublique.fr

65

La Nouvelle République is a prominent regional news media outlet serving the Centre-Val de Loire and Poitou regions in France, providing live updates on politics, justice, economy, and other societal topics. The website is well-positioned as a trusted source for regional and national news, targeting a broad general audience interested in current events. Technically, the site employs modern web frameworks such as Next.js and React, integrates advanced advertising technologies including Prebid.js and Amazon APS, and uses multiple analytics and tracking services to optimize content delivery and monetization. Security-wise, the site enforces HTTPS, uses standard security headers, and implements consent management for GDPR compliance, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a mature digital presence with good content quality and technical implementation, though improvements in transparency and contact availability could enhance trust further.

P

Projart

projart.fr

54

Projart is a small regional interior architecture firm based in Séléstat, France, serving the Grand-Est region. The company specializes in innovative interior design services, positioning itself as a creative and elegant alternative in its market niche. The website reflects a professional and consistent brand image with a clear focus on showcasing projects and providing contact avenues for collaboration. Technically, the site is built on a modern stack using Next.js and React, hosted on Vercel, and integrates Prismic as a CMS. The performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy but could benefit from enhanced compliance and security transparency.

Beyond Aero is a small, innovative aircraft manufacturer specializing in electric and hydrogen-powered business jets, aiming to revolutionize private aviation with sustainable technologies. Their flagship product, 'One', is positioned as the world's first electric business aircraft using hydrogen propulsion. The website content is minimal and currently exhibits client-side errors, limiting user experience and content accessibility. Technically, the site uses modern frameworks like Next.js and React, but lacks visible SEO, accessibility, and performance optimizations. Security posture is weak due to missing security headers, absence of privacy and cookie policies, and no visible incident response or vulnerability disclosure information. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website requires significant improvements in content quality, security, and compliance to enhance business credibility and user trust.

S

Swarovski Optik

swarovskioptik.com

69

Swarovski Optik is a premium Austrian manufacturer specializing in high-quality rifle scopes, binoculars, spotting scopes, and tripods, targeting hunting, birding, and outdoor enthusiasts globally. The company maintains a strong market position as a premium optics brand with a comprehensive product portfolio and a well-established dealer network. The website reflects a mature digital presence with modern technologies such as React, Commercetools e-commerce platform, and integrated payment solutions like Adyen. Privacy and cookie compliance are well implemented with Usercentrics consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by other trust signals and brand recognition.

S

Spline, Inc.

spline.design

62

Spline, Inc. is a technology company specializing in web-based 3D design software that enables real-time collaboration for creative teams and developers. Their platform offers tools for 3D modeling, animation, interactive experiences, and easy embedding into web projects. Positioned as an innovative SaaS provider, Spline targets designers and developers seeking accessible and collaborative 3D design solutions. The company was founded in 2019 and operates primarily from Iceland, leveraging modern web technologies and cloud hosting to deliver a performant and user-friendly experience. Their business model includes free browser-based tools, downloadable desktop apps, and enterprise offerings. The website reflects a professional brand with consistent messaging and strong trust signals including testimonials and customer logos.

NerdWallet is a leading personal finance website that provides consumers with comprehensive financial product comparisons and advice. The platform targets individuals seeking guidance on credit cards, loans, mortgages, investing, and money management. It operates primarily in the US market and is recognized for its user-friendly interface and extensive research-backed content. Technically, NerdWallet employs modern web technologies including React and Next.js, supported by robust analytics and marketing tools such as Segment, Google Analytics, and various tracking pixels. The website demonstrates excellent performance, mobile optimization, and SEO practices. From a security perspective, NerdWallet enforces HTTPS, implements key security headers, and maintains secure forms, reflecting a mature security posture. However, the absence of public WHOIS registrant data slightly reduces transparency but is mitigated by the professional presentation and comprehensive policies. Overall, NerdWallet presents a low-risk profile with strong business credibility and technical maturity.

Belgium Film is a cultural media platform dedicated to promoting Belgian cinema, operated under the auspices of a Belgian governmental communication office. The website provides information about Belgian films, events, and industry news, targeting film enthusiasts and professionals within the cultural sector. The domain is well-established since 2010 and is registered to a legitimate government-related entity, reinforcing its credibility. Technically, the website is built using modern web technologies such as React and Gatsby, with a focus on responsive design and good user experience. However, there is a lack of advanced security measures such as security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No analytics or advertising scripts were detected, indicating minimal tracking. From a security standpoint, the site lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of security headers and privacy compliance features lowers the security posture score. The WHOIS data supports the legitimacy of the domain, with no suspicious patterns detected. Overall, the website is functional and credible but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

Tesco Stores SR, a.s. operates a comprehensive retail supermarket website serving Slovakia, offering online grocery shopping, loyalty programs (Clubcard), and various promotional offers. The website is professionally designed with a strong brand presence and clear navigation, targeting general consumers in Slovakia. The business model focuses on retail sales both in physical stores and online, supported by a loyalty program to enhance customer retention. The site is part of the larger Tesco PLC group, a major player in the retail sector. Technically, the website uses modern frameworks such as React and Next.js, integrates analytics and performance monitoring tools like Google Analytics and New Relic, and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital infrastructure suitable for an enterprise retail business.

Deník N operates as a reputable Czech news media outlet providing fast and reliable news updates across various categories including politics, economy, culture, and sports. The website demonstrates a solid market position within the Czech Republic's media landscape, targeting a general audience interested in current affairs. Technically, the site leverages modern web technologies such as React and integrates privacy and advertising SDKs to manage user consent and deliver personalized content. The presence of HTTPS and security headers indicates a good security posture, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service reduces overall compliance confidence. Overall, the website is professional, trustworthy, and well-structured, with room for improvement in privacy transparency and security documentation.

N

NerdWallet Wealth Partners

futureyouwealth.com

60

NerdWallet Wealth Partners is an online fiduciary financial advisory service offering fee-only wealth management, investment management, and financial coaching. The website is professionally designed with a modern tech stack including Next.js and Material UI, hosted likely on Vercel. It targets individuals seeking comprehensive, low-cost financial advice delivered virtually. The site demonstrates good SEO practices and clear branding consistent with NerdWallet's reputation. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and WHOIS data shows suspicious inconsistencies. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is trustworthy and professional but would benefit from enhanced privacy transparency and domain registration corrections.

S

Sharp Type

sharptype.co

67

Sharp Type is a specialized global digital type foundry offering custom and retail typefaces for various design applications including print, digital, and environmental design. The company targets designers, brands, and publications seeking high-quality and multiscript font solutions. The website demonstrates a mature technical infrastructure built on modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the website presents a professional and trustworthy digital presence with a high level of content quality and user experience.

S

ShopRunner

shoprunner.com

72

ShopRunner operates as an e-commerce platform providing membership-based shopping benefits across a wide range of product categories. The website targets online shoppers seeking deals and fast shipping options. The platform leverages modern web technologies including React and JavaScript frameworks, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good design quality and user experience with clear navigation and mobile optimization. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit cookie consent mechanisms. The absence of WHOIS data reduces trust slightly but the professional branding and presence of privacy and terms policies support legitimacy. Overall, the site is functional and business credible but could improve in transparency and security best practices.

C

Campus régional de cybersécurité et de confiance numérique Nouvelle-Aquitaine

campuscyber-na.fr

63

Campus régional de cybersécurité et de confiance numérique Nouvelle-Aquitaine is a regional cybersecurity center focused on enhancing digital trust and security in the Nouvelle-Aquitaine region of France. The organization provides cyber incident response, awareness, training, and support services primarily targeting individuals, small businesses (TPE), local associations, public entities, and SMEs. It collaborates with national cybersecurity bodies such as ANSSI and CERT-FR, and regional partners including government and development agencies. The website reflects a professional and authoritative presence with comprehensive content and official partnerships. Technically, the website is built on modern web technologies including React, Next.js, and Material-UI, ensuring fast performance, mobile responsiveness, and good accessibility. The site uses HTTPS with strong security headers, indicating a solid security posture. However, there is no visible cookie consent mechanism, which is a compliance gap in the EU context. Security-wise, the site demonstrates good practices such as secure external linking and no visible vulnerabilities or exposed sensitive data. Incident response contact information is clearly provided, including a dedicated email for cyber threat reporting. The absence of a security.txt file and explicit security policy page suggests room for improvement in transparency and vulnerability disclosure. Overall, the website is trustworthy, well-maintained, and serves as a credible regional cybersecurity resource. Strategic recommendations include implementing cookie consent, publishing a security policy and security.txt, and enhancing privacy compliance disclosures.

Z

zooplus SE

zooplus.pl

60

zooplus.pl is a professional e-commerce website operated by zooplus SE, specializing in pet food and accessories for a wide range of animals including dogs, cats, small pets, birds, and fish. The platform offers over 13,000 products and features subscription services, promotions, and a user-friendly interface tailored for the Polish market. The website demonstrates a mature digital infrastructure using modern technologies such as Next.js and React, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and standard security headers, complemented by comprehensive privacy and cookie policies compliant with GDPR. However, the absence of WHOIS data limits full domain legitimacy verification, though the website's professional presentation and trust signals mitigate concerns. Overall, zooplus.pl is a credible and well-maintained online retail platform with a strong market position in Poland.

F

Frisco.pl

frisco.pl

68

Frisco.pl is a Polish online grocery supermarket offering a wide range of food products with home delivery services, including same-day delivery in Warsaw and across Poland. The website is professionally designed using modern web technologies such as React, with integrated analytics and error monitoring tools like Google Tag Manager, Hotjar, Pingdom, and Sentry. The business model focuses on convenience and promotions to attract consumers seeking efficient grocery shopping online. Security posture is solid with HTTPS and service workers implemented, though explicit security headers and privacy policies are not clearly present in the analyzed content. The absence of WHOIS data limits transparency but is common for privacy protection in e-commerce. Overall, the site is trustworthy and functional with room for improvement in privacy compliance and security best practices.

D

Decathlon sp. z o.o.

decathlon.pl

63

Decathlon.pl is the Polish online presence of Decathlon, a large international sports retail company. The website offers a comprehensive e-commerce platform featuring sports equipment, apparel, and accessories across more than 60 disciplines. It also integrates additional services such as a loyalty program, equipment rental, buy-back of used goods, and a dedicated mobile application, positioning itself as a full-service sports retail ecosystem in Poland. The site is professionally designed with excellent content quality and user experience, targeting sports enthusiasts and general consumers in Poland.

dream.jobs is an AI-powered job search platform that enables users to upload their CVs and receive personalized job opportunities. The platform also offers services for employers to post jobs, positioning itself as a modern career portal leveraging AI technology. The website uses modern frontend technologies such as React, Next.js, and Material-UI, providing a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and documented incident response or vulnerability disclosure policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the platform appears legitimate and professional, targeting job seekers and employers in the technology sector.

F

iSport Fantasy

fantasyliga.cz

49

iSport Fantasy operates as a Czech fantasy sports platform allowing users to create teams and compete for prizes. The website targets sports fans interested in fantasy leagues, offering a straightforward user experience with a focus on engagement through contests. The platform is built on modern web technologies including Next.js and React, hosted on AWS infrastructure, and integrates Google Analytics for user behavior tracking. While the site is accessible and functional, it lacks published privacy and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enforced and external consent management, but could be improved by adding security headers and incident response information. Overall, the platform presents a legitimate and consistent business presence with room for enhanced compliance and security maturity.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for football fans, media, and stakeholders, offering news, live scores, video content, and detailed information about UEFA's competitions and initiatives. UEFA holds a leading position in European and global football, organizing prestigious tournaments such as the UEFA Champions League and UEFA EURO. The site targets a broad audience including football enthusiasts, clubs, and national associations. Technically, the website employs modern web technologies including React, integrates multiple analytics and marketing tools such as Google Analytics and OneTrust for cookie consent, and uses secure HTTPS protocols with strong security headers. The site is well-optimized for mobile devices and accessibility, providing a fast and user-friendly experience. From a security perspective, UEFA.com demonstrates good practices with HTTPS enforcement, security headers, and privacy compliance mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. The absence of WHOIS data for the domain is noted but does not detract from the site's legitimacy given the strong branding and official nature. Overall, UEFA.com presents a professional, secure, and trustworthy platform with excellent content quality and technical implementation. Strategic recommendations include enhancing transparency around security policies and incident response, publishing vulnerability disclosure details, and providing data protection officer contact information to further strengthen trust and compliance.

PlayHT is a mature and reputable SaaS company specializing in AI voice generation and text-to-speech technology. Founded in 2016, it offers a comprehensive platform with over 200 realistic AI voices across 30+ languages, targeting creators, enterprises, and developers. The company positions itself as a leader in the AI voice generation market, supported by strong branding and partnerships with well-known companies. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Cloudflare and AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers could be improved. Privacy compliance is good with clear privacy and terms of service pages, though cookie consent mechanisms are not evident. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

C

Clay Global

clay.global

69

Clay Global is a professional UX/UI design and branding agency based in San Francisco, serving clients worldwide. They specialize in creating digital products, websites, design systems, and brand experiences, with a strong portfolio including major clients such as Coinbase, Uber, Slack, and Amazon. Their business model focuses on service delivery in design and development, supported by an in-house content production studio and expertise in generative AI-powered UX design. Technically, the website is built on modern frameworks like Next.js and React, uses Sanity CMS, and integrates analytics tools such as Google Tag Manager and Ahrefs Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with excellent design and user experience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and publicly available security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website presents a high level of professionalism and trustworthiness, with minor areas for improvement in privacy and security transparency.

C

Chambres de Métiers et de l'Artisanat (CMA)

unmetierdeouf.fr

65

Un Métier de Ouf is a French educational platform launched in 2020, dedicated to promoting artisan trades such as mechanics, carpentry, cooking, and aesthetics. It targets young people and apprentices seeking career guidance in artisan professions. The website is affiliated with CMA France, a reputable organization supporting artisan trades. The platform offers video content and career resources to engage its audience and facilitate discovery of trades. Technically, the site is built using modern React and Next.js frameworks, hosted by OVH, and integrates analytics tools like Matomo, TikTok, and Facebook pixels. Privacy and cookie consent mechanisms are implemented, reflecting good compliance practices. Security posture is solid with HTTPS and no exposed vulnerabilities, though security headers and incident response policies could be improved. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear branding and consistent content quality.

E

European Association of Zoos and Aquaria (EAZA)

eaza.net

68

The European Association of Zoos and Aquaria (EAZA) operates a professional and comprehensive website serving as a hub for over 400 member zoos and aquariums across Europe and Western Asia. The organization focuses on species conservation, animal welfare, education, research, and advocacy. The website is built on modern technologies including Gatsby and React, with a headless CMS (Strapi) backend, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are present and indicate GDPR compliance, though direct contact emails and phone numbers are not publicly listed, relying instead on contact forms. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding strongly indicate a legitimate and established non-profit entity. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with recommendations to improve security headers and domain registration transparency.

N

National Theatre

narodni-divadlo.cz

51

The National Theatre in Prague is a prestigious cultural institution representing the Czech Republic's national identity and European cultural heritage. The website provides comprehensive information about upcoming theatre performances across various genres including drama, ballet, opera, and multimedia shows. It offers ticket sales, subscriptions, and an e-shop for related merchandise. The institution maintains partnerships with prominent companies and media outlets, reinforcing its market position as a leading national theatre. Technically, the website is built using modern web technologies such as React and Next.js, with integration of Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. However, some areas such as explicit privacy policy and security headers could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the presence of official partners and professional content supports trustworthiness. Overall, the website is a well-maintained digital presence for a major cultural institution, with moderate to good security posture and privacy compliance. Strategic improvements in transparency, security headers, and contact information would enhance trust and compliance.

M

Mairie de LINDRY

mairie-lindry.fr

55

The website for Mairie de Lindry serves as the official digital presence for the local government of Lindry, France. It provides residents and visitors with municipal news, administrative information, community services, and practical resources. The site is well-structured and targets local citizens seeking information about municipal operations, family services, and community life. The business model is public service oriented, focusing on transparency and accessibility of local government information. Technically, the site is built using modern web technologies including React and Gatsby, ensuring a performant and responsive user experience. It integrates third-party tools such as Leaflet for maps and Matomo for analytics, alongside a robust cookie consent mechanism (tarteaucitron) that respects user privacy and GDPR compliance. Hosting and DNS infrastructure appear stable and professional, with no signs of technical debt or outdated components. From a security perspective, the site enforces HTTPS and respects Do Not Track signals, with cookie consent implemented in high privacy mode. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its purpose as a municipal information portal with good technical and security hygiene. Strategic improvements could focus on enhancing security headers, publishing security policies, and expanding transparency around incident response.

C

Commune d'Escolives-Sainte-Camille

escolivesstecamille.fr

58

The website escolivesstecamille.fr serves as the official digital presence of the commune of Escolives-Sainte-Camille, a small municipality in France. It provides comprehensive information about local governance, cultural heritage, community services, and tourism. The site targets residents and visitors, offering event updates, municipal contacts, and historical insights. The business model is typical of a local government entity focused on public service and community engagement. Technically, the site is built using modern web technologies including React and Gatsby, ensuring fast performance and good mobile optimization. It integrates privacy-respecting analytics (Matomo) and a robust cookie consent mechanism (Tarteaucitron) aligned with GDPR requirements. The site is hosted with secure HTTPS and uses reputable DNS providers. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with high privacy settings. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. Overall, escolivesstecamille.fr is a well-maintained, trustworthy municipal website with strong content quality and technical implementation. Strategic improvements in security documentation and incident response readiness would further strengthen its posture.

C

Commune d'Escamps

escamps.fr

55

The website escamps.fr serves as the official digital presence for the Commune d'Escamps, a small local government entity in France. It provides residents and visitors with comprehensive information about municipal services, local news, events, community associations, and tourism. The site is well-positioned as a trusted source for local administrative and community information, targeting residents and stakeholders within the commune. Technically, the site is built using modern web technologies including React and Gatsby, ensuring good performance, mobile optimization, and accessibility. Privacy is respected through the use of a cookie consent mechanism and Matomo analytics configured for high privacy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and fulfills its role effectively as a municipal information portal.

M

Mairie de Charbuy

charbuy.fr

61

The website charbuy.fr serves as the official digital presence of the Mairie de Charbuy, a small municipal government entity in France. It provides comprehensive information about local governance, community services, educational institutions, associative life, and administrative procedures. The site targets residents and visitors seeking municipal information and services. Technically, the site is built on a modern React/Gatsby framework, hosted by Scaleway, and incorporates privacy-conscious tools such as Matomo analytics and tarteaucitron for cookie consent. The website demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, reflecting a mature digital infrastructure for a local government entity.

G

GoDaddy Operating Company, LLC

vakita.com

73

The website is a professionally designed domain aftermarket sales landing page operated by GoDaddy Operating Company, LLC. It offers the domain vakita.com for sale with options to buy outright or lease to own, supported by secure payment methods and transaction assistance. The site leverages modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, and demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS and secure payment integrations, though explicit security headers and terms of service pages are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and well-positioned in the domain aftermarket e-commerce sector.

M

Město Vítkov

kulturavitkov.cz

55

Kulturavitkov.cz is a municipal cultural event portal for the town of Vítkov in the Czech Republic. It provides residents and visitors with information about local cinema screenings, concerts, theater performances, exhibitions, and other cultural activities. The platform integrates online ticket sales through a partner e-commerce site, facilitating easy access to event participation. The website is well-branded with official municipal logos and links to verified social media pages, reinforcing its local government affiliation. Technically, the site is built using modern web technologies including React and Next.js, with Material UI for styling. It is mobile optimized and provides a good user experience with clear navigation and event information. Performance is moderate, and the site uses HTTPS with appropriate security headers, indicating a solid security posture. However, the absence of a cookie consent mechanism and lack of visible privacy or incident response policies suggest areas for compliance improvement. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit vulnerability disclosure or incident response information. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not contradict the site's municipal nature. Overall, the site is trustworthy and serves its purpose effectively, though it could enhance privacy compliance and transparency. The overall risk is low given the nature of the site and its content, but strategic improvements in privacy and security policy disclosures are recommended to strengthen user trust and regulatory compliance.

I

ilévia

ilevia.fr

63

ilévia operates as the primary public transportation provider for the Métropole Européenne de Lille, offering comprehensive bus, metro, tram, and bike-sharing services. The website serves residents and visitors with route planning, schedules, ticketing, and news about local events, positioning ilévia as a key mobility facilitator in the region. The digital presence is modern, leveraging Next.js and React frameworks, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, security headers, and script nonce usage, though the absence of WHOIS data and explicit security policies slightly reduce transparency. Overall, ilévia's website reflects a professional, trustworthy, and user-centric platform supporting urban mobility.

F

Fundacja DODO

fundacjadodo.pl

53

Fundacja DODO is a Polish non-profit foundation dedicated to supporting the Wrocław Zoo and animal welfare initiatives. The website serves as a platform for fundraising and donations, leveraging WooCommerce and payment gateways such as Przelewy24 and Tpay. The organization appears to be small-sized and locally focused, with a domain age consistent with its founding year of 2016. The website is built on WordPress with modern technologies including React and jQuery, and integrates marketing tools like MailerLite for email campaigns. Mobile optimization and user experience are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance documentation.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for European football fans, stakeholders, and media, providing news, live scores, video content, and detailed information about UEFA's competitions and initiatives. It holds a strong market position as the authoritative source for European football, supported by consistent branding and extensive content offerings. Technically, the site employs modern web technologies including React, Google Analytics, and Microsoft Application Insights, ensuring a fast, responsive, and accessible user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though the absence of publicly available WHOIS data limits full domain registration verification. Overall, UEFA.com demonstrates a mature digital infrastructure with strong privacy compliance and business credibility, making it a trusted resource in the sports domain.

F

Fondation du patrimoine

fondation-patrimoine.org

59

Fondation du patrimoine is a leading French non-profit organization dedicated to the preservation and restoration of cultural heritage across France. The website serves as a platform to engage donors, volunteers, and project owners by providing information about restoration projects and facilitating donations. The organization holds a strong market position as a primary actor in heritage preservation, targeting a broad audience interested in cultural and historical conservation. Technically, the website is built using modern web technologies including React and Next.js, with content likely managed via a headless CMS such as Strapi. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of Google Tag Manager for analytics and marketing purposes. Performance is moderate, with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a publicly available security policy and incident response information, which are recommended for transparency and trust. The absence of WHOIS data limits domain registration verification, slightly reducing trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly interface aligned with its non-profit mission. Strategic improvements in security transparency and domain registration disclosure would enhance its credibility and compliance posture.

D

Divadlo Husa na provázku

provazek.cz

62

Divadlo Husa na provázku is a well-established cultural theatre organization based in Brno, Czech Republic, with a history dating back to 1967. The institution focuses on contemporary theatrical performances and cultural projects, serving a general audience interested in arts and culture. The website reflects a professional and consistent brand presence with clear contact information and active social media engagement. Technically, the site is built on modern frameworks such as Next.js and Sanity CMS, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and privacy policy documentation are missing. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong partner ecosystem and content quality.

A

ABMI Engineering

abmi-engineering.com

68

ABMI Engineering is a well-established French engineering company founded in 2002, specializing in multiple industrial sectors including nuclear, rail, aerospace, health, and manufacturing. The company offers a broad range of engineering services such as design, industrialization, supply chain management, robotics, and IoT solutions. Their market position is supported by a diversified sector presence and partnerships with major industry players. Technically, the website is built on a modern Next.js framework, optimized for performance and mobile responsiveness, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website projects a professional and trustworthy image with strong business credibility and technical maturity.

M

meetnlearn s.r.o.

doucuji.eu

53

Doučuji.eu is an established online tutoring platform operated by meetnlearn s.r.o., targeting students and tutors primarily in the Czech Republic. The platform offers a comprehensive marketplace for finding and offering tutoring services across various subjects, supporting both online and in-person sessions. It also provides additional features such as study questions, blogs, and user reviews, positioning itself as a trusted educational resource in the region. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages including Czech, English, and Ukrainian.

P

Pollutec

pollutec.com

67

Pollutec is an internationally recognized trade show and conference organizer specializing in environmental and energy solutions for industry, cities, and territories. The website serves as a professional platform to promote the event, provide information on exhibitors, sessions, and networking opportunities. The site is well-structured, uses modern web technologies including React and Adobe Experience Manager, and integrates analytics and marketing tools such as Google Tag Manager and Adobe Helix RUM. Security posture is generally good with HTTPS and OAuth2 PKCE authentication, but lacks some security headers and explicit privacy and terms policies. WHOIS data is missing, which raises some concerns about domain registration transparency, though the association with Reed Exhibitions supports legitimacy. Overall, the site is professional, targeted at industry professionals, and provides a good user experience.

T

Typeform

videoask.it

55

VideoAsk by Typeform is a technology-driven SaaS platform specializing in interactive video communication tools designed to enhance business conversations and relationships at scale. The platform offers services such as video funnels, AI-powered chatbots, multimedia messaging, and video forms, targeting businesses in recruitment, sales, marketing, and customer support sectors. The website demonstrates a strong market position with over 10,000 companies as customers and consistent branding aligned with its parent company, Typeform. Technically, the website employs a modern tech stack including React and Next.js, with integrations for cookie consent (OneTrust), A/B testing (Optimizely), and analytics (Google Tag Manager). The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. The security posture is strong overall, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. No vulnerability disclosure or security.txt files were found, indicating room for improvement in transparency and security communication. Overall, VideoAsk presents a professional, secure, and privacy-conscious platform with a solid business foundation. Strategic recommendations include publishing detailed security policies, providing direct security contacts, and enhancing transparency through vulnerability disclosure programs to further strengthen trust and compliance.