Security Directory

I

International Distribution Services plc

internationaldistributionservices.com

58

International Distribution Services plc is a large UK-based holding company specializing in parcel and mail distribution services, owning major subsidiaries such as Royal Mail and GLS. The company operates in the transportation sector with a focus on logistics and multi-channel parcel delivery solutions. The website reflects a professional corporate presence targeting investors, customers, and regulatory bodies. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for cookie consent, built on the Umbraco CMS platform. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and provides comprehensive business information aligned with WHOIS data.

H

Horský hotel ARNICA

arnicahotel.cz

46

Horský hotel Arnica is a small hospitality business located in Loučná pod Klínovcem, Czech Republic, offering accommodation, restaurant services, and ski-related amenities near the Klínovec mountain. The website presents a well-structured and content-rich platform targeting tourists and sports enthusiasts visiting the Krušné hory region. The business model focuses on providing affordable lodging combined with dining and recreational services, positioning itself as a local hotel with a good value proposition. Technically, the website is built on Joomla CMS with the Gantry framework and uses common JavaScript libraries such as jQuery and Magnific Popup. It employs Google Tag Manager for analytics and has a cookie consent mechanism compliant with basic GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and a published privacy policy or terms of service. No WHOIS data is available, which reduces domain trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk is moderate with recommendations to publish privacy and terms policies, implement security headers, and provide WHOIS transparency. The site is safe for general audiences and does not contain adult or questionable content.

A

Anglet Hormadi Pays Basque

hormadi.fr

45

Anglet Hormadi Pays Basque is a professional ice hockey club based in France, competing in the Synerglace Ligue Magnus. The website serves as the official digital presence of the club, providing comprehensive information about the team, season schedules, news updates, ticketing options, and partner relations. The site targets sports fans and the local community, offering a well-structured and branded experience consistent with a medium-sized sports organization. Technically, the website is built on WordPress with a modern tech stack including popular plugins and libraries such as WPBakery, Bootstrap, and Google Analytics. The site demonstrates good mobile optimization, SEO practices, and user experience. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. From a security perspective, the site uses HTTPS and implements some best practices, though security headers could be enhanced. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common for such organizations, and does not raise immediate trust concerns. Overall, the website is professional, trustworthy, and suitable for its business purpose. Strategic recommendations include improving security headers, maintaining plugin updates, and enhancing incident response visibility.

I

ILUNION

ilunion.com

70

ILUNION is a Spanish enterprise focused on social inclusion and diversity, operating a business model that combines economic profitability with social impact by creating quality employment for people with disabilities and vulnerable groups. The company is positioned as a leader in diversity and transformation with a broad portfolio of services including hospitality, retail, consulting, and wellbeing. Technically, the website is built on Drupal CMS with modern front-end frameworks and integrates analytics and marketing tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent accessibility, mobile optimization, and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the website's content, branding, and external links to Grupo Social ONCE and subsidiaries strongly support legitimacy. Overall, ILUNION presents a professional, trustworthy, and socially responsible digital presence.

O

ONCE

once.es

65

ONCE is a well-established Spanish non-profit organization dedicated to the inclusion and autonomy of blind and visually impaired persons. The website reflects a mature digital presence with comprehensive social services information, educational resources, and employment support. The organization holds a strong market position in Spain as a leader in disability inclusion and social support. Technically, the website is built on the Plone CMS platform, leveraging modern web technologies including jQuery and Google Tag Manager, with a focus on accessibility and compliance with WCAG standards. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though some areas like explicit security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and Spanish transparency laws.

G

Grupo Social ONCE

gruposocialonce.com

65

Grupo Social ONCE is a large non-profit organization based in Spain dedicated to achieving equality for persons with blindness and other disabilities. It operates through entities such as ONCE, Fundación ONCE, and Ilunion, providing employment, social investment, training, and inclusion services. The website reflects a strong social mission with a professional and accessible digital presence built on Liferay DXP and modern web technologies. Security posture is good with HTTPS, cookie consent, and domain protections, though some security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

P

PUSH Campaign

pushcampaign.org

59

The PUSH Campaign website represents a global non-profit advocacy initiative focused on promoting woman-centred care and the role of midwives in healthcare systems worldwide. The organization aims to unite advocates, donors, and organizations to transform health outcomes by embedding midwifery and woman-centred care principles. The website content is professionally presented, with clear messaging and calls to action for joining the campaign and subscribing to newsletters. The target audience includes healthcare advocates, policy makers, donors, and the general public interested in women's health and rights. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Tag Manager, Google Analytics, Weglot for multilingual support, and ShareThis for social sharing. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, a privacy policy, cookie consent mechanisms, and incident response contact information, which are important for compliance and trust. The WHOIS data is unavailable or privacy protected, which is typical for non-profit organizations but limits domain age and registrant verification. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

VašeStížnosti.cz is a Czech non-profit online platform operated by dTest, o.p.s., dedicated to facilitating amicable dispute resolution between consumers and businesses. The website serves as a database for consumer complaints and provides tools for submitting and managing disputes. It targets Czech consumers seeking assistance with consumer rights and dispute mediation. The platform is positioned as a trusted consumer protection service with a clear business model focused on non-profit mediation and information sharing. Technically, the website employs a traditional web stack with jQuery 1.10.2, Google Tag Manager, Google Analytics, Facebook Pixel, and Google reCAPTCHA for form security. The site is served over HTTPS with moderate performance and basic mobile optimization. However, it lacks modern security headers and uses an outdated jQuery version, which could pose security risks. Privacy and cookie policies are present but partly hosted externally, and no explicit security or incident response policies are found on the site. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but it lacks visible security headers and incident response contacts. The absence of WHOIS data reduces domain registration trustworthiness, though the association with dTest and clear contact information provide compensating trust signals. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is functional, trustworthy, and serves its purpose well but would benefit from technical and security improvements, including updating libraries, adding security headers, and hosting privacy policies directly. The domain registration status should be verified to ensure legitimacy and reduce risk.

I

I love Jižní Morava

ilovejiznimorava.cz

51

I love Jižní Morava is a Czech regional media website dedicated to news, events, and tourism information focused on the South Moravia region. The site targets a general audience interested in local culture, sports, festivals, and travel tips. It operates on a WordPress platform using popular plugins and frameworks such as Elementor and Redux Framework, with integration of Google Analytics and Tag Manager for visitor tracking. The website demonstrates good content quality, consistent branding, and a professional design that is mobile optimized and SEO friendly. However, it lacks explicit privacy and cookie policies, which is a compliance gap under GDPR regulations. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the active social media presence and regular content updates support its credibility as a legitimate media outlet. Security posture is moderate with HTTPS enabled but missing important security headers and vulnerability disclosure mechanisms.

U

UnArtel s.r.o.

unartel.cz

56

UnArtel s.r.o. is a Czech-based internet service provider specializing in high-speed optical and wireless internet, IPTV services including Skylink Live TV and SledovaniTV, and VoIP telephony solutions. The company targets residential and business customers primarily in the Slavičín region and surrounding areas, positioning itself as a reliable regional ISP with competitive pricing and a range of communication services. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and Google Analytics for tracking. The site is hosted behind Cloudflare infrastructure, ensuring good SSL/TLS security and performance. Mobile optimization and user experience are good, though accessibility features could be improved. The site includes a cookie consent mechanism, indicating awareness of privacy compliance requirements. From a security perspective, the website enforces HTTPS and uses standard tracking and analytics scripts. However, it lacks explicit security headers and a published privacy policy or terms of service, which are important for GDPR compliance and user trust. No WHOIS data is publicly available for the domain, which slightly reduces trust but does not necessarily indicate malicious intent. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a trustworthy and professional front for a small regional ISP, but improvements in privacy documentation, security headers, and WHOIS transparency would enhance its security posture and compliance standing.

D

Digiregion s.r.o.

digiregion.cz

57

Digiregion s.r.o. is a Czech technology company specializing in digital communication solutions for municipalities. Their flagship product integrates municipal websites, TV channels, mobile apps, and digital information panels to enhance citizen engagement and streamline municipal communication. The company is part of the IS Group and has established a solid market presence with multiple municipal clients and positive testimonials. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Cloudflare DNS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but lacks explicit security or incident response policies. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

S

SK Sigma Olomouc a. s.

sigmafotbal.cz

50

SK Sigma Olomouc is a well-established Czech football club with a strong local and national presence. The website serves as the official digital platform for the club, providing news, match information, ticket sales, merchandise, and multimedia content to fans and stakeholders. The club operates a fanshop and maintains active engagement through multiple social media channels, reflecting a mature digital presence. The domain age and WHOIS data confirm the legitimacy and long-standing nature of the organization. Technically, the website uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics and Google Tag Manager for tracking, and supports multilingual access via Google Translate. The site is hosted by GRANSY, a known Czech hosting provider, and employs HTTPS with a good SSL configuration. The design is responsive and user-friendly, with clear navigation and professional branding. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and does not publish a clear privacy policy or terms of service, which are important for compliance and user trust. No direct contact information or incident response contacts are provided, limiting transparency in security matters. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security headers, and explicit contact details to improve compliance and security posture. The risk level is moderate with no critical vulnerabilities detected in the provided content.

C

Consortium of Multiple Sclerosis Centers

cmscscholar.org

63

The Consortium of Multiple Sclerosis Centers (CMSC) operates a professional healthcare education website focused on Multiple Sclerosis research, clinical practice, and patient education. The organization is positioned as a leading non-profit entity providing accredited continuing education to a multidisciplinary audience including physicians, nurses, pharmacists, occupational therapists, and psychologists. Their offerings include annual meetings, online activities, and an international journal, targeting healthcare professionals and people affected by MS. The website reflects a mature digital presence with consistent branding and quality content.

The Academy of Neurologic Physical Therapy (ANPT) operates as a professional membership organization focused on advancing neurologic physical therapy through advocacy, education, research, and practice resources. The website serves a diverse audience including physical therapists, educators, researchers, and patients seeking specialized neurologic PT services. It is well-positioned within the healthcare and education sectors, affiliated with the American Physical Therapy Association (APTA), and offers a broad range of services including conferences, special interest groups, and professional development resources. The domain is well-established since 1999, reinforcing its credibility and market presence. Technically, the website leverages modern web technologies such as Webflow CMS, Google Tag Manager, and Bootstrap, ensuring a responsive and user-friendly experience. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended to enhance domain and web application security. There is no visible vulnerability disclosure or incident response information, which could be improved to strengthen trust and transparency. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism detected despite tracking technologies in use. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic improvements in security headers, DNSSEC, and privacy compliance would further enhance its security posture and user trust.

NeurologyLive is a specialized online platform providing clinical neurology news, expert insights, multimedia interviews, and conference coverage. Owned by MJH Life Sciences and founded in 2019, it targets neurologists and healthcare professionals seeking up-to-date information and educational content. The website demonstrates a mature digital presence with a modern tech stack including Astro, React, and Sanity CMS, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, WHOIS data is unavailable, likely due to privacy protection, which is common and justified for media entities. Overall, NeurologyLive presents as a credible, professional, and trustworthy healthcare media platform.

N

National Multiple Sclerosis Society

nationalmssociety.org

75

The National Multiple Sclerosis Society is a well-established non-profit organization dedicated to supporting individuals affected by multiple sclerosis through research funding, advocacy, education, and community programs. The website serves as a comprehensive resource hub for patients, caregivers, healthcare professionals, and donors. It features extensive content including news, events, support groups, and educational materials, positioning the organization as a leader in the MS community. Technically, the website leverages Salesforce Experience Cloud and integrates multiple modern technologies and trusted payment processors, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, strict Content-Security-Policy, and secure payment integrations, although additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and user-centric design, supporting the organization's mission effectively.

K

Klinika IVF Zlín

darovatvajicka.cz

52

The website www.darovatvajicka.cz represents Klinika IVF Zlín, a healthcare provider specializing in assisted reproduction and egg donation services. The clinic has over 25 years of experience and has helped more than 7000 children be born, positioning itself as a reputable player in reproductive medicine within the Czech Republic. The site offers detailed information about the egg donation program, benefits for donors, and contact details for coordination. Technically, the website uses legacy JavaScript libraries such as jQuery 1.11.3 and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a cookie consent mechanism, indicating basic privacy compliance. However, the absence of WHOIS data and lack of visible security headers slightly reduce trustworthiness. No blocking or WAF mechanisms were detected, allowing full content access.

ZM – TECH s.r.o. operates the reproman.cz website, offering REPROMAN®, a dietary supplement aimed at improving male sexual health and fertility. The company positions itself as a niche healthcare provider with a focus on reproductive medicine, supported by expert partnerships and a clear e-commerce model. The website provides comprehensive product information, expert advice, and a user-friendly shopping experience targeting men seeking to enhance fertility and sexual vitality. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, with a responsive design suitable for mobile users. Security posture is solid with HTTPS and form protection, though lacks explicit security policies and incident response contacts. Privacy compliance is strong, featuring detailed privacy and cookie policies with consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fiken

fiken.no

66

Fiken.no is a Norwegian accounting software provider targeting small business owners and self-employed individuals. Founded in 2015, it offers a subscription-based SaaS platform that simplifies bookkeeping, invoicing, and tax reporting. The website is professionally designed using modern technologies such as Next.js and React, hosted on Vercel, and optimized for mobile devices. It employs comprehensive cookie consent mechanisms and integrates multiple third-party analytics and marketing tools, including Google Analytics, Facebook Pixel, and Intercom. Security posture is strong with HTTPS enforced and appropriate cookie management, although explicit privacy and terms of service pages are not detected in the provided content. The domain WHOIS data aligns well with the business claims, supporting legitimacy.

T

Tripletex

tripletex.no

11

Tripletex is a leading Norwegian cloud-based accounting software provider offering a modular platform that integrates accounting, invoicing, payroll, project management, and logistics. The company targets a broad range of customers from small businesses to large enterprises and accounting firms, providing scalable solutions tailored to evolving business needs. Their market position is strong with over 147,000 companies using their platform, supported by a professional and user-friendly website that offers free trials and extensive customer support. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates advanced analytics tools like Piwik PRO and Google Analytics. The platform supports mobile apps and uses Salesforce Embedded Messaging for customer engagement. The site is well optimized for performance, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Tripletex enforces HTTPS, employs cookie consent mechanisms, and provides detailed privacy and security policies, demonstrating a strong commitment to data protection and compliance. No critical vulnerabilities or exposed sensitive data were detected. However, incident response contact details and vulnerability disclosure mechanisms could be enhanced. Overall, Tripletex presents a low-risk profile with a professional online presence, strong privacy compliance, and robust technical implementation. Strategic recommendations include publishing explicit incident response contacts, adding a security.txt file, and enhancing visible security headers to further strengthen trust and security posture.

S

SÝN

auglysingar.is

59

SÝN is a leading Icelandic media company specializing in multi-channel advertising services including television, radio, online, and podcast platforms. The company leverages decades of experience to provide comprehensive advertising solutions tailored to Icelandic businesses and individuals. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site employs modern JavaScript frameworks and integrates Google Tag Manager and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

H

Televisions, Audio, Appliances, Air Products — Hisense USA

hisense-usa.com

53

The website www.hisense-usa.com appears to represent a commercial entity likely related to consumer electronics or technology products, built on the Wix platform. The site integrates multiple marketing and tracking technologies including HubSpot, Google Tag Manager, Facebook Pixel, TikTok Pixel, and Amazon Ads, indicating a focus on digital marketing and user engagement. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy or recent registration status. The website lacks critical compliance documents such as privacy and cookie policies, and no contact information is explicitly provided, which diminishes trust and transparency. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the site is accessible and functional but exhibits significant gaps in security, privacy compliance, and business credibility.

5

50skills

50skills.com

67

50skills is a technology company specializing in no-code AI workflow automation solutions designed to streamline and optimize business processes across departments such as HR, IT, finance, and operations. Their platform offers a visual workflow builder, AI agent designer, form builder, and integration studio, targeting businesses seeking to automate repetitive tasks and scale operations efficiently. The website presents a professional and consistent brand image with clear product offerings and a focus on ease of use and AI-driven automation. Technically, the site is built on Webflow with modern libraries and integrates Google Analytics and CookieHub for analytics and compliance. Security posture is solid with HTTPS and cookie consent, though explicit privacy and terms policies are missing. WHOIS data is unavailable, which slightly reduces trust but the overall digital presence supports legitimacy. Recommendations include adding comprehensive privacy and security policies, improving accessibility, and publishing vulnerability disclosure information.

Ó

ÓB Bensín / Olís

ob.is

63

ÓB Bensín operates a network of fuel stations across Iceland, providing fuel sales and customer engagement through a dedicated mobile app. The company is positioned as a key player in the Icelandic energy retail sector, leveraging digital tools to enhance customer experience. The website is built on modern web technologies including React and Next.js, integrated with Prismic CMS for content management. Tracking and marketing tools such as Google Analytics and Facebook Pixel are employed to monitor user engagement and support marketing efforts. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not published. Overall, the site is professional, accessible, and trustworthy, serving a general audience with safe content.

B

BETC London

betc.co.uk

56

BETC London is a full-service advertising agency operating internationally with offices in London, Paris, Los Angeles, and Sao Paulo. The company specializes in creative advertising and marketing services, targeting brands and marketing professionals. The website is hosted on the Squarespace platform, leveraging modern web technologies including Google Analytics and Tag Manager for tracking. The site demonstrates good design quality and mobile optimization, though lacks comprehensive privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing important security headers. The domain WHOIS data is unavailable due to a naming rules violation, which raises concerns about domain registration legitimacy but does not necessarily reflect on the business itself. Overall, the website presents a professional front but would benefit from improved compliance and security practices.

K

Kirin Holdings Company, Limited

kirinholdings.com

58

Kirin Holdings Company, Limited operates as a global leader in creating shared value across the food and beverage to pharmaceutical sectors. The company emphasizes sustainability, innovation, and responsible business practices, targeting investors, customers, and partners worldwide. Their diversified portfolio includes alcoholic and non-alcoholic beverages, pharmaceuticals, and health science products, supported by a strong corporate governance framework and comprehensive investor relations resources. Technically, the website employs modern JavaScript libraries and asynchronous script loading to optimize performance and user experience, with excellent mobile responsiveness and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies could be improved. The absence of WHOIS data for the domain is a concern but the professional content and branding consistency support legitimacy. Overall, the site presents a mature, trustworthy corporate presence with room for enhanced privacy compliance and security transparency.

協

協和キリンフロンティア株式会社

kyowa-kirin-frontier.com

58

協和キリンフロンティア株式会社 operates as a pharmaceutical company specializing in the manufacture and sale of authorized generic biopharmaceuticals in Japan. The company positions itself as a pioneer in the domestic market by being the first to obtain manufacturing and sales approval for authorized generics of biopharmaceuticals. Their website targets both healthcare professionals and the general public, providing detailed information about their products, safety initiatives, and health education. The business is a subsidiary of the well-established Kyowa Kirin group, enhancing its market credibility and trustworthiness. Technically, the website is built with modern web technologies including JavaScript and Google Tag Manager for analytics. It is hosted on Microsoft Azure DNS infrastructure, ensuring reliable DNS resolution. The site is mobile optimized and demonstrates good SEO practices with proper meta tags and Open Graph data. However, no CMS or specific frameworks were detected, and accessibility features are basic. Performance is moderate with no critical technical issues observed. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain status protections that prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not visibly implemented, which could be improved. There is no visible security policy or incident response information on the site, nor a vulnerability disclosure program. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. User tracking is moderate via Google Tag Manager. Overall, the website is professional, trustworthy, and aligned with the company's business objectives. The security posture is adequate but could benefit from enhancements in DNS security and security headers. Privacy compliance should be improved by implementing cookie consent and clearer data retention policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a low-risk profile for users and stakeholders.

I

ip.labs GmbH

iplabs.com

57

ip.labs GmbH operates a professional and well-established website offering embeddable photo editing software tailored for e-commerce merchants worldwide. Their platform enables personalized product creation across multiple device types, emphasizing mobile-first design and seamless integration. The company positions itself as a leading provider in the photo service software industry with a strong focus on emotional connection and premium value through personalization. Technically, the website employs modern frontend technologies such as Tailwind CSS and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, and OneTrust for cookie consent. The site is mobile-optimized, accessible, and SEO-friendly, providing a high-quality user experience. Security posture is good with HTTPS enforced and privacy policies in place, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which slightly impacts trust but the professional presentation and valid contact details support legitimacy. Overall, the website demonstrates a mature digital presence suitable for its business model and target audience.

F

Fujifilm X

fujifilm-x.com

65

Fujifilm X operates a professional and well-branded website focused on promoting its award-winning range of mirrorless cameras, lenses, and imaging technology targeted at both professional photographers and enthusiasts. The site is localized for Finland and presents a comprehensive product catalog with clear navigation and modern design. Technically, the website is built on WordPress, leveraging modern web technologies including Google Fonts, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The lack of WHOIS data transparency is a notable gap but does not detract significantly from the overall legitimacy given the professional presentation and official branding. Privacy compliance is partially met with cookie consent but lacks a clearly identified privacy policy page. Overall, the site demonstrates a strong market presence and digital maturity with room for improvement in transparency and security documentation.

F

FUJIFILM Cellular Dynamics, Inc.

fujifilmcdi.com

63

FUJIFILM Cellular Dynamics, Inc. is a specialized biotechnology company focused on providing human induced pluripotent stem cell (iPSC) services and products to support scientific research and cell therapy development. The company operates a professional and well-branded website targeting researchers, pharmaceutical, and biotech firms. Their market position is that of an established leader in the iPSC field, supported by a medium-sized business infrastructure and backed by the FUJIFILM Holdings Corporation. Technically, the website leverages a modern Magento eCommerce platform integrated with WordPress for content, using advanced search and analytics tools such as Algolia, Google Tag Manager, and Hotjar. Privacy and cookie compliance are well implemented with a consent mechanism and comprehensive policies. Security posture is good with HTTPS, security headers, and form protections, though the absence of a published security policy and incident response details is noted. The lack of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, the website is secure, compliant, and professionally maintained, suitable for its B2B healthcare audience.

T

Taste

taste.cz

65

Taste is a Czech digital agency established in 2014, specializing in cross-channel online solutions for business projects. The website presents a professional image with a clear focus on digital marketing and online project development. The technical infrastructure includes modern tools such as Google Tag Manager and Cookiebot for privacy compliance, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though explicit security policies and headers could be improved. Overall, the website is trustworthy and well-positioned in its market segment, but lacks visible direct contact information and formal terms of service, which could enhance credibility.

B

Blueweb

upterdam.sk

54

Upterdam.sk is the official website for the largest e-commerce conference and expo in Slovakia, organized by Blueweb. The site promotes the event scheduled for September 25, 2025, in Bratislava, targeting e-commerce professionals and businesses. It offers workshops, consultations, lectures, and networking opportunities, positioning itself as a leading event in the Slovak e-commerce sector. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

C

Company Culture Market s.r.o.

cocuma.sk

57

Cocuma is a Slovakian platform dedicated to showcasing and verifying companies with strong corporate cultures. It provides job seekers and professionals with authentic company profiles, job listings, and a culture-focused magazine. The platform emphasizes transparency and trust by conducting thorough interviews and creating original content rather than relying on PR materials. Technically, the website employs modern web technologies including Google Tag Manager, Matomo analytics, and responsive design frameworks, hosted partly on Amazon S3 for media assets. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and formal policies are absent. Overall, Cocuma presents a professional, trustworthy, and user-friendly experience with moderate tracking for analytics and marketing purposes.

M

Multitude

ferratum.com

63

Multitude is a Nordic-born fintech growth platform operating internationally with a focus on digital financial services. It supports three internal business units specializing in consumer, SME, and wholesale banking. The company aims to be a leading financial ecosystem leveraging two decades of fintech experience. The website is professionally designed, mobile-optimized, and rich in investor relations and ESG content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and cookie consent mechanisms, indicating good digital maturity. Security posture is strong with HTTPS and tracking opt-in controls, though explicit security policies and incident response contacts are absent. WHOIS data is incomplete, which slightly impacts trust but the overall business credibility remains high. Strategic recommendations include enhancing security transparency and verifying domain registration details.

M

Multitude Bank p.l.c.

multitudebank.com

56

Multitude Bank p.l.c. is a Malta-licensed European banking institution offering tailored financial solutions including savings accounts, corporate financing, and payment services primarily targeting individuals, fintech companies, and institutions. The website demonstrates a high level of professionalism with excellent design, clear navigation, and comprehensive content describing their banking products and services. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integration of Google Tag Manager and Sentry for analytics and error monitoring. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published on the site. The absence of WHOIS data for the domain is a notable anomaly that warrants further investigation to confirm domain ownership and legitimacy. Overall, the site presents a trustworthy and professional banking service with good privacy compliance and user experience.

M

Miele Experience Centre

mieleexperience.com.au

67

Miele Experience Centre is a premium Australian retail brand specializing in high-end kitchen, laundry, and floorcare appliances. The company emphasizes longevity, design excellence, and customer experience through multiple physical experience centres and online engagement. Their business model focuses on experiential marketing, personalised consultations, and a membership program to foster customer loyalty. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Google Analytics, and various marketing pixels, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS and reCAPTCHA protections, though explicit security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile users, though the incomplete WHOIS data slightly reduces domain trustworthiness.

F

Findomestic

findomestic.it

71

Findomestic is a well-established Italian financial services company specializing in personal loans, mortgages, credit cards, and other banking products. The website presents a professional and user-friendly interface powered by Adobe Experience Manager, with strong mobile optimization and accessibility features. The company provides clear contact information and social media presence, enhancing trust and customer engagement. The cookie consent mechanism is robust, leveraging OneTrust to ensure GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website reflects a mature digital infrastructure suitable for a large financial institution.

F

Flexmail

flexmail.eu

74

Flexmail is a well-established Belgian email marketing platform founded in 2003, offering a comprehensive SaaS solution for campaign management, marketing automation, and CRM segmentation. The website presents a professional and modern design built on React and Gatsby, integrating multiple marketing and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. Security posture is strong with strict Content-Security-Policy headers and HTTPS enforcement. However, the absence of visible privacy and cookie policies, as well as contact information, reduces privacy compliance and business credibility scores. Overall, the site is accessible, trustworthy, and technically sound but would benefit from enhanced transparency and compliance documentation.

G

Grand Palais

grandpalais.fr

64

Grand Palais is a prominent French cultural institution offering exhibitions, concerts, educational workshops, and guided tours. The website is well-designed, mobile-optimized, and uses Drupal CMS with modern technologies such as Google Tag Manager and OneTrust for cookie consent. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly reduces trust but the website content and branding strongly indicate legitimacy. Overall, the site is professional, compliant with GDPR, and serves a broad audience including families, professionals, and visitors with special needs.

D

Digitální agentura ARSY line s.r.o.

arsyline.cz

59

ARSY line s.r.o. is a Czech digital agency specializing in custom web design, e-commerce development, branding, marketing, and IT support services. With over 20 years of experience, the company targets businesses and organizations seeking tailored digital solutions primarily in the Czech Republic. The website demonstrates a professional and consistent brand presence with comprehensive service offerings and client references. Technically, the site uses modern JavaScript libraries and tracking tools, is mobile optimized, and implements GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is good with HTTPS enforced and CAPTCHA on forms, though security headers are not detected and no explicit security or incident response policies are published. WHOIS data is missing, which limits domain trust assessment. Overall, the site is well-designed, user-friendly, and trustworthy from a business perspective but would benefit from improved transparency in domain registration and security policies.

G

gofreshleads

gofreshleads.com

51

gofreshleads.com is a Czech-language online casino affiliate and informational website launched in 2023. It provides detailed reviews, bonus information, and legal guidance for Czech players interested in online gambling. The site leverages WordPress CMS and integrates Google Analytics and Google Tag Manager for user tracking. The website is well-structured, mobile-optimized, and contains comprehensive content relevant to its niche audience. Security posture is adequate with HTTPS enforced and some security headers present, though improvements such as DNSSEC and CSP headers are recommended. Privacy policies and cookie consent mechanisms are implemented, supporting GDPR compliance. However, no direct company contact emails or phone numbers are published, only a contact form is available. The domain registration is transparent and consistent with the business model, registered via NameCheap without privacy protection. Overall, the site is professional and trustworthy within its niche but could enhance security and transparency further.

A

APOLO s.r.o.

apolopraha.cz

40

APOLO s.r.o. is a Czech company specializing in the sale and installation of interior and entrance doors, primarily of the Sapeli brand, along with complementary products such as door frames, fittings, glass doors, flooring, and railings. The company operates physical showrooms in Prague Štěrboholy and Štrampouch near Čáslav, serving customers mainly in the Central Bohemian Region and Prague. Their market position is that of a regional authorized reseller with a focus on quality and customer service. Technically, the website is built on WordPress with modern plugins and technologies, including Google Tag Manager and reCAPTCHA, ensuring a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response documentation are recommended. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting the company's business credibility.

K

Kytice-Expres

kytice-expres.cz

51

Kytice-Expres is an established online flower delivery service operating primarily in the Czech Republic and Slovakia, offering a wide range of bouquets and gift sets with express delivery options up to 90 minutes. The website demonstrates a mature e-commerce platform with multiple payment methods including modern options like Apple Pay and Google Pay, supported by marketing and analytics tools such as Klaviyo and Smartlook. Despite the lack of WHOIS data, the site presents professional content, clear contact information, and GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and security headers in place, though the absence of a public security policy and incident response details suggests room for improvement.

P

Puma Logistics

puma.do

47

Puma Logistics is a Dominican Republic-based integrated logistics service provider specializing in air, maritime, customs management, terrestrial transport, warehousing, value-added services, local distribution, and project cargo. The company positions itself as a local leader with international partnerships, notably representing DB Schenker in the Dominican Republic. Their website demonstrates a professional digital presence built on WordPress with Oxygen Builder, incorporating modern technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is well-structured, mobile-optimized, and provides clear contact channels, though it lacks explicit privacy and cookie policies, which are important for compliance. Security posture is strong with HTTPS, security headers, and secure form handling. However, the absence of WHOIS data transparency slightly reduces trustworthiness. Overall, Puma Logistics presents a credible and professional business front with room for improvement in privacy compliance and domain transparency.

E

EXIsport

exisport.eu

57

EXIsport is a medium-sized retail and e-commerce company specializing in sports clothing, shoes, and electric bicycles, primarily serving the Slovakian market with a network of 21 physical stores. The website demonstrates a mature digital presence with a comprehensive product catalog and multi-channel sales approach. Technically, the site is built on PrestaShop CMS with modern JavaScript frameworks and tracking tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS, standard security headers, and no visible vulnerabilities, though some improvements in security policy transparency could be made. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the domain and business appear legitimate and trustworthy, with no blocking or WAF interference detected.

E

EXIsport

exisport.cz

52

EXIsport is a large Czech-based e-commerce retailer specializing in sportswear, footwear, and accessories. The website offers a broad product catalog with over 650,000 items, free shipping above a certain threshold, and services such as ski binding mounting. The company targets sports enthusiasts and general consumers within the Czech Republic and operates multiple country-specific domains, indicating a strong regional presence. Technically, the website uses modern web technologies including Vue.js, PrestaShop CMS, and integrates popular marketing and analytics tools such as Google Tag Manager and Facebook SDK. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of HTTP security headers suggests room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not negate the site's legitimacy given its professional appearance and active marketing. Overall, EXIsport presents a trustworthy and mature e-commerce platform with a solid technical foundation and good privacy compliance.

E

EXIsport

exisport.hu

54

EXIsport is a large Hungarian e-commerce retailer specializing in sportswear, footwear, and accessories, offering an extensive catalog of over 650,000 products. The website targets a broad audience including men, women, and children interested in sports and outdoor activities. It operates multiple regional domains indicating a strong Central European market presence. Technically, the site is built on PrestaShop with modern JavaScript libraries and uses Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and some consent management for cookies, but lacks explicit privacy and cookie policy pages, security policies, and incident response information. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

O

Outfindo

outfindo.com

69

Outfindo is a technology company specializing in AI-driven guided selling software and product data enrichment solutions aimed at enhancing the online shopping experience for e-commerce businesses. Their platform leverages proprietary AI agents to analyze customer behavior and automate product data management, positioning them as an innovative player in the e-commerce technology sector. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent management implemented; however, the absence of explicit security policies, incident response details, and WHOIS transparency slightly reduce trustworthiness. Overall, the site is safe, well-structured, and business credible, though improvements in security transparency and domain registration clarity are recommended.

A

Amio

amio.io

74

Amio is a specialized SaaS company providing an AI chatbot platform tailored for e-commerce businesses. Their solution leverages GPT technology and product feeds to automate customer support, enhance product discovery, and increase online sales conversions. The company positions itself as a cost-saving and efficiency-enhancing partner for online shops, integrating seamlessly with popular e-commerce platforms and helpdesk systems. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about their offerings and integrations. Technically, the website is built on Webflow CMS, utilizing modern web technologies including Google Tag Manager and analytics tools, with a strong focus on performance and mobile optimization. The presence of cookie consent management and privacy policies indicates attention to privacy compliance. However, explicit security policies and incident response information are not publicly available, which could be improved. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is common for technology companies and does not detract from the legitimacy of the business. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for its target market. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining transparency in data protection practices to further strengthen trust and compliance.