Security Directory

C

Cooperación Española

cooperacionespanola.es

49

Cooperación Española is the official Spanish governmental body responsible for managing Spain's international cooperation policy aimed at sustainable human development and poverty eradication. The website reflects a mature digital presence with comprehensive content, including detailed publications, news, and strategic plans. It targets governments, NGOs, and stakeholders interested in development cooperation. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern web standards and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The lack of WHOIS data due to Red.es restrictions limits domain registration transparency but the website's content and domain usage strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

The Instituto de Mayores y Servicios Sociales (Imserso) is a Spanish government agency dedicated to providing social services and support to elderly and disabled populations. The website serves as an official portal offering information on programs such as tourism, termalism, autonomy, dependency, pensions, and social benefits. It targets pensioners, elderly citizens, and persons with disabilities in Spain. The site is well-branded, consistent, and professionally maintained, reflecting its status as a public institution. Technically, the website is built on the Liferay platform, utilizing modern web technologies including jQuery, React, and Bootstrap. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with appropriate security headers, indicating a strong security posture. However, some areas such as explicit security policies and incident response contacts could be improved. Security-wise, the site shows no signs of vulnerabilities or malicious content. Privacy and cookie policies are present and appear GDPR compliant. No direct contact emails or phone numbers are visible, which is common for government portals but could be enhanced for user support. The WHOIS data is unavailable due to query restrictions, but the domain is a .es official domain consistent with Spanish government use. Overall, the website is trustworthy, secure, and serves its public service mission effectively. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing security policy visibility, and improving contact information accessibility to further strengthen trust and compliance.

L

ludizalotom.ba

ludizalotom.ba

48

The website ludizalotom.ba serves as an informational and transactional portal for the Loto 6/39 lottery game in Bosnia and Herzegovina. It provides detailed game rules, jackpot information, special draws, and facilitates online play through integration with the official Lutrija BiH e-wallet platform. The site targets general lottery players within the country and positions itself as a local lottery information hub with online ticket purchasing capabilities. Technically, the site is built on WordPress using the Elementor page builder, leveraging modern web technologies and Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS but lacks several important security headers and formal privacy and cookie policies, which are compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

The website zutibingo.ba is an official platform for TV Bingo lottery games operated by Lutrija Bosne i Hercegovine, the national lottery operator in Bosnia and Herzegovina. It offers information about lottery draws, prizes including vehicles and cash, and provides links for online ticket purchases. The site targets adult lottery players within the country and promotes responsible gaming. Technically, the site is built on WordPress using the Elementor page builder, incorporating standard web technologies such as jQuery and tracking tools like Google Analytics and Facebook Pixel. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, it lacks important security headers and privacy compliance elements such as a privacy policy and cookie consent mechanisms. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the site is functional and credible but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

H

Hockey Club Les Grizzlys de Vaujany

lesgrizzlysdevaujany.com

55

Hockey Club Les Grizzlys de Vaujany is a small, community-focused amateur ice hockey club based in France. The website serves as an information hub for club news, team schedules, tournaments, and membership details, targeting local players, fans, and community members. The club appears well-established since 2017, with a consistent brand presence and active event calendar. Technically, the site uses a moderately modern technology stack including Bootstrap 3, jQuery, and various UI libraries, hosted via Gandi SAS. The site is mobile-optimized and SEO-friendly, though some technologies are slightly dated. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is good, with a GDPR-compliant cookie banner and a privacy policy page. Overall, the site is trustworthy and professional for its scale and purpose.

H

Hormadi Club

anglethormadipaysbasque.fr

41

Hormadi Club is a professional ice hockey organization based in Anglet, France, competing in the French Ligue Magnus. The club also supports an amateur division catering to youth and senior players, emphasizing community engagement and sports development. The website serves as a portal for fans and members to access information about the professional team, purchase tickets online, and connect with the amateur hockey school. Technically, the site is built on WordPress using the Astra theme and SportsPress plugin, with modern JavaScript libraries and page builder tools. The site is mobile-optimized and performs moderately well, though some SEO and accessibility improvements are possible. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance documentation. The absence of WHOIS data limits domain trust assessment, though the site content and structure appear legitimate and professional. Overall, the site is functional and serves its business purpose but would benefit from enhanced security and compliance measures.

F

Fan Avenue

fanavenue.com

46

Fan Avenue is a French e-commerce retailer specializing in merchandising and derivative products related to music, cinema, TV series, and sports. Established since 2000, the company targets fans and collectors seeking licensed merchandise. The website is built on the PrestaShop platform, hosted by OVH sas, and integrates modern web technologies including Google Fonts, Google Maps API, and Google Tag Manager for analytics. The site is well structured with clear navigation and consistent branding, supporting a good user experience primarily for French-speaking audiences. From a technical perspective, the website employs HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and several recommended HTTP security headers are missing, which could be improved to enhance security posture. Privacy compliance is basic, with a privacy policy present but lacking explicit GDPR compliance details and no cookie consent mechanism detected. Security-wise, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. The absence of a vulnerability disclosure policy or security contact channels indicates room for improvement in incident response readiness. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security practices to meet higher compliance standards. Strategic recommendations include enabling DNSSEC, implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, and establishing clear incident response contacts to strengthen trust and compliance.

The website ofertymiele.pl is a promotional platform operated by Underground Media Sp. z o.o., focusing on presenting the latest offers and promotions related to Miele products. The site targets consumers interested in Miele promotions, providing features such as user registration for returns and feedback collection. The business is relatively new, with domain registration dating from May 2023, and operates primarily within the retail and media sectors in Poland. Technically, the site uses a basic technology stack including jQuery and Google services such as Google Tag Manager, Analytics, and AdWords, with IP anonymization enabled for privacy. The site is hosted by home.pl S.A. and includes a comprehensive cookie policy with a consent mechanism embedded directly on the main page. However, no explicit privacy policy or terms of service pages were found. The design and user experience are functional but basic, with moderate mobile optimization and SEO. From a security perspective, the site employs Google reCAPTCHA to mitigate bot traffic and anonymizes IP addresses in analytics, but lacks visible security headers and DNSSEC is not enabled. The WHOIS data is consistent and transparent, enhancing trustworthiness. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The site includes an age verification gate related to alcohol promotions, indicating content suitable for mature audiences but no explicit adult content. Overall, the website demonstrates a moderate level of digital maturity and security posture, with room for improvement in security headers, privacy policies, and technical modernization. The business credibility is supported by clear company information and consistent domain registration. Strategic recommendations include enhancing security configurations, publishing comprehensive privacy and terms policies, and improving mobile and accessibility features.

The Burdett Trust for Nursing is a UK-based charitable trust established in 2002, dedicated to supporting nursing contributions to healthcare through charitable grants. The organization focuses on building nursing research and leadership capacity and supports local nurse-led initiatives. The website reflects a professional and consistent brand presence with clear information about its mission, values, and grant programs. The trust is registered as a charity in England and Wales and maintains an active digital presence including social media channels. Technically, the website is built on WordPress with modern web technologies such as jQuery, Google Analytics, and Google reCAPTCHA, ensuring a secure and user-friendly experience. However, WHOIS data for the domain is unavailable due to domain naming rules issues, which slightly impacts trust verification. Security posture is good with HTTPS and form protection, but could be enhanced with additional security headers and a vulnerability disclosure policy. Privacy compliance is addressed with a comprehensive privacy and cookie policy, though a cookie consent mechanism is absent. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

J

Judarks World

judarks.com

46

Judarks World is a Ghana-based creative digital agency specializing in website development, social media management, brand identity, digital graphics, and IT support services. The company targets businesses seeking to enhance their digital presence and transform their visions into reality. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning Judarks as a trusted small-sized agency in the technology sector. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web fonts and libraries such as jQuery and Font Awesome. Hosting is provided by StormerHost, and the site uses HTTPS with a valid SSL certificate. Mobile optimization and navigation clarity are good, though accessibility and SEO optimizations are basic. From a security standpoint, the site benefits from HTTPS and domain transfer protection but lacks important security headers and DNSSEC. There is no visible privacy or cookie policy, which presents compliance risks. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. Overall, Judarks World presents a moderate risk profile with a solid business foundation but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

A

Agionet s.r.o.

rezervacni-systemy.eu

44

Agionet s.r.o. operates the website rezervacni-systemy.eu, offering a variety of customizable online reservation systems tailored for diverse business sectors including services, accommodation, equipment rental, courses, real estate, and events. Their business model supports both cloud-based SaaS subscriptions and standalone software deployments, catering to small and medium enterprises primarily in the Czech Republic. The website demonstrates a professional digital presence with clear service descriptions and customer references, positioning the company as a niche provider in the reservation system market. Technically, the site is built on Joomla CMS with Gantry 5 framework, leveraging modern web technologies such as Google reCAPTCHA v3 for spam protection and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. The presence of a cookie consent mechanism indicates awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS and includes anti-bot measures on forms, but lacks explicit security headers and dedicated privacy or terms of service pages, which are recommended for enhanced compliance and trust. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable due to EURid privacy policies, but the website content and contact information support legitimacy. Overall, rezervacni-systemy.eu is a credible, well-maintained business website with a solid technical foundation and good security posture, though improvements in privacy documentation and security headers would strengthen compliance and user trust.

3

Kvalitní informace v souvislostech - rozcestník - 3oko.cz

3oko.cz

50

3oko.cz is a Czech language content portal and news aggregator focused on alternative information, self-development, spirituality, and societal topics. The website serves a niche audience interested in deeper understanding and alternative perspectives on current events and personal growth. It operates as a thematic directory linking to articles, videos, and other media, curated and categorized for ease of navigation. The business model is content aggregation and education with a small-scale operation founded recently in 2024. Technically, the site is built on Joomla CMS with the Gantry 5 framework, using common JavaScript libraries such as jQuery and Awesomplete. It employs Google Fonts and Google Analytics for typography and analytics respectively. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Hosting and domain registration are consistent with the Czech market and the website's content. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers and explicit privacy or cookie policies. No contact information or incident response details are provided, which limits trust and compliance posture. The domain is newly registered but consistent with the website's nature and location. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is functional and well-structured for its purpose but would benefit from improved privacy compliance, security headers, and transparent contact information to enhance trust and regulatory adherence.

K

Katčenka z.s.

katcenka.cz

58

Katčenka z.s. is a small private alternative elementary school located in Plzeň, Czech Republic, focusing on individualized and project-based education for children aged 6 to 15 years. The school operates as a non-profit association offering a stress-free, flexible learning environment without traditional grading, emphasizing outdoor activities and personal development. The website reflects a community-oriented educational institution with testimonials from parents and students, highlighting a positive and supportive learning atmosphere. Technically, the website is built on Joomla CMS using the Gantry 5 framework, incorporating jQuery and other standard web technologies. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism in place, although it lacks some advanced security headers and a dedicated privacy policy page. Performance is moderate, and SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS and provides cookie consent but lacks security headers and a vulnerability disclosure policy. No WHOIS data is available, likely due to privacy protection, but the domain and website content appear legitimate and consistent with the business claims. No critical vulnerabilities or suspicious content were detected. Overall, Katčenka z.s. presents a trustworthy and professionally maintained online presence for a niche educational service. Strategic improvements in privacy documentation, security headers, and accessibility would enhance compliance and security posture.

E

PF 2026 novoročenky | vánoční přání

e-pf.cz

48

The website www.e-pf.cz is a Czech-based online platform specializing in electronic and printed Christmas and New Year greeting cards (PF 2026). It offers a variety of greeting card types including animated, video, and interactive games, targeting both corporate clients and private individuals. The business model revolves around providing customizable holiday greetings with options to add logos and signatures, facilitating easy digital distribution via email and social media. The site is well-structured with clear navigation and professional design, catering primarily to the Czech market. Technically, the website is built on Joomla CMS with Gantry5 and Bootstrap frameworks, leveraging modern web technologies such as jQuery and lazy loading for images. It integrates Google Analytics and SmartLook for user behavior tracking and analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features and good SEO practices. Cookie consent mechanisms are implemented in compliance with EU regulations, although a dedicated privacy policy page is not clearly found. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent banners. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no detailed security or incident response policies are publicly available. The absence of WHOIS data for the domain reduces trustworthiness from a registration standpoint, but the website content and technical setup appear legitimate and professional. Overall, the website presents a safe and professional platform for holiday greeting cards with moderate digital maturity and security posture. Strategic improvements include publishing a comprehensive privacy policy, enhancing security headers, and providing clear contact information for security incidents to strengthen trust and compliance.

B

Boutique des Brûleurs de loups

boutique-bdl.com

53

Boutique des Brûleurs de loups operates a professional e-commerce platform specializing in sports merchandise related to the Brûleurs de loups hockey team. The website offers a variety of products including jerseys, clothing, accessories, and personalized items, targeting fans and supporters primarily in France. The site is well-branded and maintains a consistent user experience with clear navigation and relevant content. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern optimization tools such as WP Rocket for performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain raises concerns about registration transparency, impacting overall trustworthiness. Overall, the site is functional, user-friendly, and compliant with GDPR, but would benefit from improved domain registration visibility and enhanced security disclosures.

F

Fédération française de hockey sur glace

liguemagnus.com

59

The Synerglace Ligue Magnus website serves as the official digital platform for the premier French ice hockey league, operated under the Fédération française de hockey sur glace. It provides comprehensive coverage including news, schedules, standings, player statistics, and access to official merchandise and live streaming services. The site targets hockey fans, players, and stakeholders within France, positioning itself as a central hub for elite hockey information. Technically, the website is built on a modern WordPress CMS with popular plugins such as WPBakery Page Builder and Yoast SEO, ensuring a good user experience and SEO optimization. Hosting and DNS services are managed via Cloudflare and Gandi SAS, providing reliable infrastructure. The site is mobile-optimized and integrates social media channels effectively. From a security perspective, the site employs HTTPS with a valid SSL certificate and domain transfer protections. Cookie consent mechanisms and privacy policies are in place, demonstrating GDPR compliance. However, DNSSEC is not enabled and additional security headers could enhance the security posture further. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns. Strategic improvements in security configurations and ongoing monitoring are recommended to maintain and enhance trust and compliance.

H

Hockey Club Morzine-Avoriaz

hockey-morzine.com

50

Hockey Club Morzine-Avoriaz operates as a regional ice hockey club based in France, providing hockey training, team participation, event hosting, and merchandise sales. The club targets local hockey players, families, and fans, positioning itself as a community-centric sports organization competing in Division 1. The website serves as an official portal for news, schedules, ticketing, and multimedia content, supporting fan engagement and club promotion. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, and GDPR compliance plugins. It demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks some advanced security headers and explicit security policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, though improvements in security and transparency are recommended.

B

Brûleurs de Loups

bruleursdeloups.fr

36

Brûleurs de Loups is a regional French ice hockey club based in Grenoble, providing fans with news, ticketing, and merchandise services through a professionally designed WordPress website. The site leverages modern technologies including Elementor and JetPlugins, hosted partially on AWS S3 for media assets. The website demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit privacy policies and security headers which are recommended for enhanced protection. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the site is trustworthy and serves its target audience effectively.

L

Les Rapaces de Gap

lesrapacesdegap.fr

60

Les Rapaces de Gap is a professional ice hockey club based in France, actively participating in the Ligue Magnus. The website serves as the primary digital presence for the club, offering news, ticketing, merchandise, and event information to fans and the local community. The site is built on WordPress with modern plugins such as Yoast SEO and SportsPress, indicating a moderate level of digital maturity. Social media integration is strong, enhancing fan engagement. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and a privacy policy page are notable gaps. The missing WHOIS data reduces domain trust slightly but does not detract from the legitimacy of the club's online presence. Overall, the website is professional, user-friendly, and serves its business purpose effectively.

The website coufal.photo represents a professional wedding photographer based in Brno, Czech Republic, named Kamil Coufal. The site showcases wedding photography services, including various photo packages and event coverage, targeting couples and event attendees primarily in the Brno region. The business operates as a small entity founded around 2015, with a clear focus on personalized and emotional wedding photography. The website content is well-structured, visually appealing, and includes galleries, contact information, and social media integration, supporting a strong local market presence. Technically, the website is built on WordPress using common plugins such as MasterSlider, Contact Form 7, and Complianz for GDPR compliance. The site uses HTTPS with a good SSL configuration, includes cookie consent mechanisms, and integrates Google Analytics and Facebook marketing tools. Mobile optimization and SEO practices are good, though some security headers are missing, and DNSSEC is not enabled, which could be improved for enhanced security. From a security perspective, the site demonstrates a moderate security posture with HTTPS enforced and no exposed sensitive data. The use of reCAPTCHA on the contact form helps mitigate spam. However, the absence of certain security headers and DNSSEC reduces the overall security score. No incident response or security policies are published, which is common for small businesses but could be enhanced to improve trust. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its business purpose with clear contact channels and social media presence. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to further strengthen security and compliance.

G

GRAWEB s.r.o.

tiskarnahustopece.cz

45

GRAWEB s.r.o. operates the Naša tiskárna HustoPeče website, providing advanced digital printing and graphic design services primarily in Hustopeče, Czech Republic. The company leverages modern printing technologies acquired in 2019 to offer high-quality, fast, and cost-effective printing solutions. Their business model focuses on serving local businesses and individuals with a comprehensive suite of printing services including copying, binding, and file upload capabilities. The website reflects a professional and consistent brand image with clear service descriptions and pricing transparency. Technically, the website is built using Mobirise CMS with Bootstrap and jQuery frameworks, integrating third-party analytics tools such as Google Analytics and Hotjar for user behavior tracking. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data limits domain trust verification, although the website content and contact information suggest a legitimate business. The use of multiple tracking tools without clear privacy disclosures indicates potential compliance gaps. Overall, the website presents a trustworthy and professional front for a small regional printing business but should enhance its privacy compliance and security posture to align with best practices and regulatory requirements.

Towarzystwo Ubezpieczeń INTER Polska S.A. operates the inter-oferta.pl portal, providing a transactional platform for customers and insurance agents to access and purchase insurance offers online. The website targets Polish-speaking clients and insurance agents, facilitating secure login via email and access codes. The business is positioned as a medium-sized insurance provider with a clear focus on digital customer engagement. Technically, the website is built on the Liferay CMS platform, utilizing JavaScript, jQuery, and DWR for dynamic form handling. Google Analytics is employed for user tracking. The site is served over HTTPS with DNSSEC enabled, indicating a good baseline security posture. However, some modern security headers are missing, and mobile optimization is basic. Security-wise, the site enforces HTTPS and input validation on login forms, but lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism aligned with GDPR requirements. No vulnerabilities or malware indicators were detected. Overall, the website is professional, trustworthy, and suitable for its business purpose. Strategic improvements in security headers, mobile accessibility, and transparency around terms of service and incident response would enhance its security posture and user trust.

T

TU INTER Polska

inter-direct.pl

56

TU INTER Polska operates as a specialized insurance provider focusing on comprehensive insurance solutions tailored for medical professionals, medical entities, and firms in Poland. Their offerings include professional liability insurance, legal protection, accident insurance, property and travel insurance, as well as life and health insurance. The company positions itself as a trusted partner for the medical sector, providing tailored products and assistance services. The website reflects a mature digital presence with clear branding, extensive product categorization, and multiple customer engagement channels.

T

Telemedi

telemedi.com

66

Telemedi is a Poland-based B2B telemedicine and digital health platform provider specializing in services for insurance companies, travel assistance, healthcare providers, and financial and telecom sectors. The company offers multilingual telehealth services, white-labeled healthcare platforms, healthcare APIs, and digital healthcare transformation solutions. It has established partnerships with major global insurance and assistance companies, positioning itself as a significant player in the global telehealth market. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, hosted behind Cloudflare DNS. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are present and GDPR compliance is indicated. No direct company emails or phone numbers are published; contact is primarily via forms. Overall, the site is trustworthy, safe, and well-optimized for its target audience.

I

International Council of Nurses

icncongress.org

70

The ICN Congress 2025 website serves as the official platform for the 30th International Council of Nurses Congress, scheduled for June 2025 in Helsinki, Finland. It provides comprehensive information about the event, including scientific programs, speakers, photo galleries, and registration details. The site targets nursing professionals, students, and healthcare stakeholders globally, emphasizing nursing's role in shaping healthcare policy and delivery. The business model centers on event organization and professional development, supported by sponsorships and accreditation partnerships. Technically, the website is built on a Ruby on Rails framework with modern JavaScript libraries such as jQuery, Bootstrap, and Mapbox for interactive maps. It integrates third-party services like HelpScout for customer support and hCaptcha for bot mitigation. Hosting appears to be on AWS infrastructure, inferred from DNS records. The site is mobile-optimized with a responsive design and supports multiple languages, enhancing accessibility for an international audience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and no explicit HTTP security headers were detected in the HTML content, indicating room for improvement. The site employs CSRF tokens and bot protection mechanisms but lacks publicly visible security or incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website presents a professional and trustworthy front for a reputable international nursing organization. It effectively balances content richness, user experience, and basic security measures. Strategic enhancements in DNS security, HTTP headers, and documented security policies would further strengthen its posture and trustworthiness.

I

I.C.E.I.D

iceid-gh.org

47

I.C.E.I.D is a specialized eye healthcare provider based in Ghana, focusing on digital health, imaging, diabetic, and paediatric eye care services. The company positions itself as a one-stop destination for comprehensive eye health solutions, leveraging modern digital health technologies and international standards. Their service offerings include eye imaging, diabetic eye care, paediatric care, glaucoma care, and general consultations, supported by a professional and skilled team. The website reflects a small but focused healthcare business with a clear mission and vision to improve eye care delivery in Africa.

W

Women’s Environment & Development Organization

wedo.org

54

Women’s Environment & Development Organization (WEDO) is a well-established global non-profit advocacy organization focused on promoting human rights, gender equality, and environmental integrity. Founded in 1991, WEDO operates internationally, engaging in advocacy, capacity building, and coalition development to influence global and national policies. The organization targets women's rights advocates, environmental activists, policymakers, and supporters of gender equality worldwide. Their business model centers on non-profit advocacy and movement building, supported by a strong digital presence and active social media engagement. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Cloudflare DNS services. The site demonstrates good mobile optimization, clear navigation, and solid SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. The domain is long-standing, registered since 1996, consistent with the organization's history, and hosted securely with HTTPS enabled. From a security perspective, the site employs HTTPS and Cloudflare DNS but lacks DNSSEC and Content-Security-Policy headers, which are recommended for enhanced security. No sensitive data exposure or vulnerable libraries were detected. Privacy compliance is partial; while a comprehensive privacy policy exists, cookie consent mechanisms and GDPR compliance indicators are limited. No incident response contacts or vulnerability disclosure policies were found. Overall, WEDO’s website is professional, trustworthy, and content-rich, reflecting its mission and credibility. Security and privacy practices are adequate but could be strengthened to meet higher compliance standards. The site is safe for general audiences with no adult or explicit content. Strategic recommendations include implementing DNSSEC, CSP headers, cookie consent banners, and a security.txt file to improve security posture and compliance.

V

Vanderlande

vanderlande.com

62

Vanderlande is a globally recognized leader in logistics process automation, specializing in warehousing, airports, and parcel sectors. The company offers integrated solutions including innovative systems, intelligent software, and life-cycle services, positioning itself as a market-leading partner for future-proof automation technology. The website reflects a mature digital presence with comprehensive content targeting logistics operators and airport authorities. Technically, the site leverages modern web technologies such as WordPress CMS, jQuery, Bootstrap, and Matomo analytics, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security policies and incident response details are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional site content and external references. Strategic recommendations include enhancing transparency around security policies, adding vulnerability disclosure mechanisms, and improving security headers to further strengthen trust and compliance.

Qingdao Hisense HVAC equipment Co., Ltd. operates a professional website focused on HVAC technology development, manufacturing, marketing, and service for commercial and residential air solutions including VRF, ATW, and Chiller systems. The company positions itself as a global HVAC solutions provider with a strong emphasis on product quality and user comfort. The website reflects a mature business model with clear product categories, solution cases, and after-sales support, targeting HVAC customers worldwide. Technically, the website uses a custom ASP.NET CMS with jQuery and Swiper.js for UI interactions. Hosting is provided by Alibaba Cloud, a reputable provider. The site is moderately optimized for performance and mobile devices, with good SEO practices. However, accessibility features are basic and could be improved. The site lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Security posture is moderate; HTTPS is implied but no explicit security headers or incident response contacts are published. Basic input validation exists on search inputs to prevent script injection. Privacy and cookie policies are absent, representing compliance gaps. The domain WHOIS data is consistent with the business, showing no suspicious patterns and a domain age appropriate for the company’s founding date. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance, enhanced security headers, and published security policies to strengthen user trust and regulatory adherence.

T

T-Mobile

tmobile.cz

77

T-Mobile Czech Republic operates a comprehensive telecommunications website offering mobile and fixed services including tariffs, mobile data, home internet, and digital TV. The site targets general consumers in the Czech Republic and positions itself as a leading operator in the market. Technically, the website uses modern frameworks such as React and Liferay Portal, integrates analytics and marketing tools like Google Tag Manager and Exponea, and maintains good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional branding and content. Strategic recommendations include adding explicit security and incident response information, enhancing accessibility, and implementing security.txt for vulnerability disclosure.

I

Institut klinické a experimentální medicíny

ikem.cz

65

Institut klinické a experimentální medicíny (IKEM) is a leading Czech healthcare and research institution specializing in cardiovascular diseases, organ transplantation, diabetology, and metabolic disorders. With over 50 years of experience, it operates multiple specialized centers and clinics, serving patients nationwide. The website reflects a professional and comprehensive digital presence with detailed information for patients, professionals, and researchers. Technically, the site uses modern JavaScript libraries and analytics tools with proper cookie consent mechanisms, ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the strong business credibility demonstrated by the website content and accreditations.

S

Skillsoft

skillsoft.com

79

Skillsoft operates as a leading enterprise learning platform specializing in AI-driven skills intelligence to empower employees and organizations. The company targets corporate clients seeking to build workforce capabilities and close skill gaps through an immersive, multi-device learning experience. The website reflects a mature digital presence with a professional design, clear branding, and comprehensive privacy and cookie policies, indicating a strong commitment to user data protection and compliance. Technically, the site leverages modern JavaScript frameworks such as Vue.js, integrates multiple analytics and marketing tools, and employs consent management mechanisms to align with GDPR requirements. However, the absence of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy, although the overall site professionalism mitigates this concern. Security posture is adequate but could be improved by implementing explicit security headers and publishing a vulnerability disclosure policy. Overall, Skillsoft presents a credible and trustworthy enterprise platform with room for enhanced transparency in domain registration and security disclosures.

I

IDX™

investisdigital.com

76

IDX™ is a well-established digital communications and marketing company founded in 2000, serving over 4000 clients globally with a team of 400+ experts. Their business model focuses on providing integrated communication solutions, including corporate communications, performance marketing, e-commerce, creative branding, and enterprise-grade CMS platforms. The company positions itself as a trusted partner for large enterprises, emphasizing precision and impact in messaging. Technically, IDX employs a modern tech stack including Vue.js, GSAP, and various analytics and marketing tools, hosted on a reliable platform with excellent performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though dedicated security policy and incident response pages are absent. Overall, IDX demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and mature digital service provider.

M

Miele

miele.bg

57

Miele Bulgaria operates a professional and well-structured website focused on retailing premium household and kitchen appliances. The site targets domestic Bulgarian customers with an e-commerce model supported by service and dealer information. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and privacy policies in place, though explicit security policies and incident response details are absent. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business. Strategic improvements could include enhanced security headers and published security policies to further strengthen trust and compliance.

M

Miele Australia

miele.com.au

63

Miele Australia operates as a premium retailer of luxury home appliances, targeting domestic customers within Australia. The website showcases the brand's commitment to quality and superior craftsmanship, offering product sales, customer support, and subscription services. The digital presence is professionally maintained with consistent branding and clear navigation, supporting a strong market position in the retail sector. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and LiveChat for customer engagement, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional image aligned with the Miele brand.

M

Miele

miele.ae

63

Miele UAE operates as a premium domestic and commercial appliance provider, representing the German Miele brand in the UAE market. The website serves as a digital storefront and information portal targeting domestic customers, offering product information, events, and an online shop. The brand is positioned as a premium manufacturer and retailer with a strong market presence in the UAE. Technically, the website uses modern JavaScript libraries, Google Tag Manager for analytics, and a third-party cookie consent mechanism, indicating a moderate to good digital maturity. The site is accessible, mobile-optimized to a basic degree, and SEO-friendly. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Overall, the domain registration aligns well with the brand, supporting legitimacy and trustworthiness.

M

Miele Sdn.Bhd.

miele.my

65

Miele Malaysia operates as a premium appliance brand subsidiary of the German-based Miele group, focusing on high-quality home appliances for the Malaysian domestic market. The website presents a professional and consistent brand image with clear navigation and relevant content about products, services, and customer support. The technical infrastructure leverages modern JavaScript libraries and Google Tag Manager for analytics and marketing, hosted on Akamai's CDN network, ensuring moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and a comprehensive cookie consent mechanism, though improvements are recommended in DNSSEC deployment and security header implementation. Privacy compliance is strong with clear policies and GDPR-aligned consent mechanisms. Overall, the website reflects a trustworthy and credible business presence with room for enhanced security transparency and incident response readiness.

M

Miele

miele.kz

65

Miele Kazakhstan operates as the official online presence for the Miele brand in Kazakhstan, focusing on retailing household appliances and providing customer service. The website is professionally designed with clear navigation and content relevant to the local market, primarily in Russian. It offers information about products, store locations, events, and customer support. Technically, the site uses standard web technologies including JavaScript, jQuery, and Flexslider, and implements HTTPS with cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is good with encrypted connections and no visible vulnerabilities, though some security headers and incident response details are absent. Overall, the site is legitimate and trustworthy, though WHOIS data is unavailable likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving mobile optimization.

M

Miele India Pvt. Ltd.

miele.in

66

Miele India Pvt. Ltd. operates a premium luxury home and kitchen appliances website targeting domestic customers in India. The company is positioned as a high-end brand with a focus on durability and performance, supported by a dealer network and customer service. The website is professionally designed with consistent branding and provides comprehensive information about products, services, and corporate information. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Akamai CDN for performance and analytics. Mobile optimization and accessibility are basic but functional. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and legitimate, with WHOIS data consistent with the business entity. Recommendations include enhancing security headers and publishing a security policy to improve trust and compliance.

M

Miele Electrodomésticos Ltda.

miele.cl

52

Miele Electrodomésticos Ltda. operates the official Chilean website for the premium appliance brand Miele. The site primarily serves as an informational portal, redirecting customer service and support inquiries to the official importer, Casa Vita SpA. The business model focuses on brand representation and customer support facilitation rather than direct sales. The website targets Chilean consumers interested in Miele products, emphasizing quality and service through the local importer. Technically, the website employs standard web technologies including JavaScript, jQuery, Google Tag Manager, and Google Analytics for tracking. The site is accessible over HTTPS, but lacks advanced security headers and comprehensive privacy or cookie policies. Mobile optimization and SEO are basic, with room for improvement in accessibility and metadata. From a security perspective, the site shows a moderate posture with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers and incident response contacts indicates potential gaps. The WHOIS data is unavailable due to query failure, which limits domain legitimacy verification and slightly reduces trust. Overall, the website is functional and moderately professional but would benefit from enhanced privacy compliance, security hardening, and improved technical SEO. The risk level is moderate, with no critical vulnerabilities detected but some compliance and trust issues to address.

T

Travitor

travitor.com

39

Travitor is a specialized Learning Management Software provider established in 2006, offering a comprehensive platform for corporate training that integrates AI-powered video creation, quizzes, and third-party courses including Skillsoft. The company targets HR professionals, training managers, and educators seeking an all-in-one training solution. The website demonstrates a mature digital presence built on WordPress with modern plugins and integrations, supporting a good user experience and mobile optimization. Security posture is solid with HTTPS and secure payment processing via Stripe, though improvements are needed in DNS security and published security policies. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, Travitor presents a credible and professional LMS solution with room for enhanced security and privacy transparency.

B

Blueweb

blueweb.sk

51

Blueweb is a Slovak technology company specializing in the design, development, and optimization of custom e-commerce shops. They emphasize quality over quantity and leverage modern user research methods combined with advanced development practices. The company targets businesses seeking tailored e-shop solutions and maintains a strong market position supported by notable client references and a professional online presence. Technically, the website employs a modern tech stack including Google Analytics, Microsoft Clarity, and proprietary e-commerce platform Venalio. The site is mobile-optimized and well-structured, though some accessibility features could be enhanced. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and published security policies. Overall, the website is professional, trustworthy, and content-rich, but would benefit from adding privacy and terms of service pages and improving security transparency.

N

Nubium Development SE

nubium.cz

52

Nubium Development SE is a Czech-based technology company founded in 2013, specializing in comprehensive web application solutions including cloud storage, CDN, video encoding, cybersecurity, and Linux systems management. The company positions itself as a leader in high-load applications and data distribution networks, targeting businesses across various industries seeking scalable and secure digital infrastructure. The website reflects a professional and consistent brand image with clear service offerings and a focus on sustainability. Technically, the website employs standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with a moderate performance profile and good mobile optimization. However, there is a lack of advanced security headers and no visible CMS or hosting provider information. SEO and accessibility are basic but adequate for the site’s scope. From a security perspective, the site uses HTTPS (assumed from URL), but lacks explicit security headers and published security policies. No vulnerability disclosure or incident response contacts are provided, which could be improved to enhance trust and compliance. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Overall, the website is safe, professional, and business-focused with no adult or questionable content. The domain WHOIS data aligns well with the company’s stated information, supporting legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding incident response information to strengthen security posture and regulatory compliance.

T

Taste, a.s.

digichef.cz

58

Digichef.cz is a Czech digital marketing magazine operated by Taste, a.s., providing up-to-date news, articles, and event coverage focused on SEO, PPC, social media, and other online marketing disciplines. The website targets marketing professionals and agencies, offering valuable content and a newsletter subscription to maintain engagement. The business is well-established with a consistent brand presence and transparent company information. Technically, the site runs on WordPress with modern SEO practices and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site demonstrates a professional and trustworthy digital presence with moderate to good technical maturity.

C

CanWaCH

cansfe.ca

71

CanWaCH operates as the Canadian Partnership for Women and Children's Health, focusing on global health initiatives to improve the wellbeing of women and children worldwide. The organization provides a data exchange platform, resource center, membership services, and hosts events to engage stakeholders. Positioned as a leading non-profit in the Canadian global health sector, CanWaCH targets health professionals, members, and the public interested in women's and children's health. The website is professionally designed, bilingual (French focus), and well-structured to serve its audience effectively. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap 4, Yoast SEO, and Contact Form 7. It uses Cloudflare DNS and is hosted via Go Daddy Domains Canada. Performance is moderate with good mobile optimization and accessibility features. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though some security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with comprehensive privacy and cookie policies and consent mechanisms in place. However, the site lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Overall, CanWaCH presents a trustworthy, professional online presence with a strong focus on privacy and user engagement. Strategic improvements in security headers and transparency around security policies would enhance its security maturity and trustworthiness further.

L

Learning for Justice

learningforjustice.org

65

Learning for Justice is a well-established educational program operated by the Southern Poverty Law Center, focusing on civic and political action education to promote equity, diversity, and inclusion. The website offers a rich variety of educational resources including articles, podcasts, webinars, and teaching frameworks targeted at educators, students, families, and community members. The content is professionally curated and presented with consistent branding and a clear mission aligned with social justice education. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates analytics and marketing tools such as Google Tag Manager and Twitter Pixel. The site is mobile-optimized and accessible, providing a positive user experience. Security posture is good with HTTPS enforced, but could be improved by adding security headers and explicit cookie consent mechanisms. WHOIS data is not publicly available, likely due to privacy protection, but the domain's association with SPLC and consistent branding supports legitimacy. Overall, the site is trustworthy, professional, and serves an important educational role.

S

Steiner & Kovarik Deutschland

steinerkovarik.de

51

Steiner & Kovarik Deutschland operates a premium e-commerce platform specializing in handcrafted chocolate products sourced directly from Colombian cocoa farmers under fair and ecological trade practices. The company positions itself as a niche player in the premium chocolate retail market, emphasizing quality, sustainability, and unique product offerings such as Schokoladenwein and custom designs. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins for SEO, caching, and cookie consent, hosted on a reputable German hosting provider. Security posture is solid with HTTPS enforcement and security plugins, though minor improvements in CSP and incident response transparency are recommended. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the site is trustworthy, professional, and well-optimized for its target audience.

BETC is a well-established full-service creative agency founded in 2000, headquartered in France, with a strong market position as a leading agency recognized globally. The company offers strategic, creative, and technology services aimed at renewing brand engagement and business growth. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and cookie consent frameworks, ensuring GDPR compliance and user privacy. Security posture is good with HTTPS enforced and cookie consent mechanisms, though some security headers are not explicitly detected. No critical vulnerabilities or blocking mechanisms were found, indicating a stable and accessible platform. Overall, BETC demonstrates strong business credibility and digital maturity.

Y

YESCO

yesco.com

67

YESCO is a well-established company specializing in custom electric signs, lighting, and billboard services since 1920. The company offers a broad range of services including design, manufacturing, installation, maintenance, and repair of signage and lighting solutions, targeting businesses and organizations seeking quality signage. The website demonstrates a mature digital presence built on WordPress with modern plugins and technologies, providing a professional user experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and use of Google Tag Manager, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of clear privacy and cookie policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility remains high due to consistent branding, social media presence, and detailed service offerings. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.