Security Directory

M

MEIN EINE WELT JAHR

mein-eine-welt-jahr.de

54

The Sternsinger-Freiwilligendienst website represents a medium-sized non-profit organization based in Germany, focused on providing international voluntary service opportunities for youth and adults aged 18-28. The organization partners with over 100 global entities to facilitate a Freiwilliges Internationales Jahr (FIJ), offering educational seminars, crisis support, and personalized placement services. The website is professionally designed using WordPress with the Avada theme, featuring comprehensive content, SEO optimization, and a clear navigation structure. Cookie consent is implemented via Borlabs Cookie, and multiple analytics and tracking tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel are in use. However, explicit privacy and terms of service policies are not found, which is a compliance gap. The WHOIS data is minimal but consistent with the website's non-profit nature, and no blocking or WAF mechanisms are detected, allowing full content access.

N

Nouvelle-Ligne

nlcontest.com

55

NL Contest is a well-established urban sports and arts festival based in Strasbourg, France, organized by Nouvelle-Ligne. The website showcases event information, results, media content, and partner affiliations, targeting urban sports enthusiasts and festival attendees. The business operates primarily as an event organizer and promoter with a strong community and partner network. Technically, the site is built on WordPress with integrations such as Google Maps API, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly with good content quality and navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and formal policies are absent. The WHOIS data is missing, raising concerns about domain registration legitimacy, but the professional content and social presence mitigate some risk. Overall, the site is trustworthy but would benefit from improved transparency and security documentation.

É

École de Management des Industries Créatives (EMIC Paris)

emic-paris.com

63

EMIC Paris is a specialized educational institution focused on management training within the creative industries, including music, audiovisual, and live performance sectors. Founded in 2016, it offers master's level programs and short courses designed to prepare students for immediate professional engagement through practical and operational learning methods. The institution maintains strong industry partnerships with major players such as Mediawan, Sony Music, Deezer, and Believe, enhancing its market position and student employability. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, integrating essential marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. Cookie consent is managed comprehensively via CookieYes, ensuring GDPR compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces domain status protections. However, it lacks DNSSEC and advanced security headers, and does not publish incident response or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, EMIC Paris presents a credible, professional online presence with strong business credibility and compliance posture. Strategic enhancements in security policies and transparency could further strengthen trust and resilience.

V

vedos.cz

vedos.cz

57

VEDOS.cz is a well-established Czech web hosting and domain registration provider founded in 2010. It serves over 300,000 customers, offering services including webhosting, domain registration, servers, and mailhosting. The company positions itself as a leading hosting provider in the Czech market with competitive pricing and reliable service. Technically, the website is built on WordPress using the Astra theme and integrates modern tools such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security-wise, the website enforces HTTPS, uses reCAPTCHA, and implements cookie consent mechanisms, though it lacks a publicly available security policy or incident response information. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, VEDOS.cz demonstrates a mature digital presence with strong business credibility and a solid security posture.

W

Welkeys

welkeys.com

56

Welkeys operates a professional luxury vacation rental platform focused on France and Europe, offering villas, chalets, and concierge services. The website is well designed, mobile optimized, and integrates modern technologies such as Webflow CMS, Weglot for translations, and various marketing and analytics tools. Security posture is strong with HTTPS and security headers, but the absence of privacy and cookie policies is a compliance gap. The missing WHOIS data for the domain raises some concerns about domain registration transparency, though the active and professional website mitigates this somewhat. Overall, the business appears credible and positioned well in the luxury travel market, but should improve privacy compliance and domain registration transparency.

K

Kenworth Mexicana

kenworth.com.mx

74

Kenworth Mexicana operates as a prominent player in the transportation sector within Mexico, specializing in commercial trucks and related services. The company benefits from a long-established domain since 1999, indicating a mature market presence and stable operations. The website primarily targets businesses and professionals in logistics and transportation, offering products, after-sales services, and financing options. The brand is consistent and well represented digitally, with a professional design and clear branding elements. Technically, the website employs modern web technologies including JavaScript, Cookiebot for cookie consent management, and integrates major analytics and marketing platforms such as Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. Hosting and domain registration are managed by reputable providers, supporting a reliable infrastructure. From a security perspective, the website enforces HTTPS and uses a robust cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, but enhancements in security headers and transparency around security practices are recommended. Overall, the website presents a low-risk profile with good business credibility and compliance posture. Strategic improvements in privacy policy visibility, security headers, and accessibility would further strengthen the site’s trustworthiness and user experience.

P

PacLease

paclease.com

71

PacLease is a well-established commercial truck rental and leasing company, operating under the parent company PACCAR Inc. The website presents a professional image with clear branding and a focus on premium truck rental and leasing services. The target audience includes commercial fleet operators and businesses requiring medium to heavy-duty trucks. The company leverages multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and ClickDimensions to optimize user engagement and advertising effectiveness. Technically, the website uses modern JavaScript libraries like jQuery and integrates Cookiebot for GDPR-compliant cookie consent management. However, some areas such as explicit privacy policy, terms of service, and contact information are not clearly found in the analyzed content. Security posture is good with HTTPS enabled and domain protections in place, but could be improved by adding security headers and publishing security policies. Overall, the website is credible, secure, and professionally maintained, with room for enhanced transparency and compliance documentation.

B

big. bechtold-gruppe

big-gruppe.com

63

big. bechtold-gruppe is a well-established German family-owned service provider specializing in integrated facility, engineering, and security services. Founded in 1981 and employing over 3,000 people, the company offers a broad portfolio including engineering services, facility management, security services, and smart services. Their market position is strong within Germany, targeting businesses and organizations requiring comprehensive building-related services. The website reflects a professional and consistent brand image with clear navigation and detailed service descriptions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and privacy-conscious analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital presence. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy. This discrepancy between the professional website and missing domain registration data suggests a need for further verification. Overall, the site presents a low risk but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include implementing comprehensive security headers, publishing a security policy and incident response contacts, and verifying domain registration details to enhance trust.

M

Médiář

mediar.cz

64

Médiář is a Czech online media publication focused on daily news about media, marketing, advertising, and PR industries. It serves professionals and agencies within the Czech media and marketing sectors by providing news, industry insights, job listings, and advertising galleries. The website is well-structured with a consistent brand presence and targets a specialized audience interested in media and marketing developments. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and Seznam SSP ads, indicating a mature digital infrastructure. The site employs Google Consent Mode and cookie consent mechanisms to address privacy concerns, although an explicit privacy policy page was not found in the provided content. Security posture is good with HTTPS and some security best practices, but could be improved by adding explicit security headers and clearer incident response contacts. The absence of WHOIS data reduces domain transparency and slightly impacts trustworthiness, but the website content and technical setup suggest a legitimate and professional media outlet. Overall, the site scores well in content quality, technical implementation, and security, with room for improvement in privacy compliance and business credibility transparency.

A

Able.cz s.r.o.

abletocompete.ai

55

Able.cz s.r.o. operates the website abletocompete.ai, a Czech-based platform focused on promoting AI innovation and leadership in Europe. The site offers an AI challenge for developers with monetary rewards and a waiting list service for companies serious about AI adoption. Positioned as a European initiative, it aims to empower local talent and businesses to lead in AI technology. The website is professionally designed using modern web technologies, including Framer for CMS, and integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided by Webglobe.cz, as indicated by the domain's nameservers.

H

Highlands and Islands Enterprise

hie.co.uk

66

Highlands and Islands Enterprise (HIE) is a well-established economic and community development agency serving the Highlands and Islands region of Scotland. The organization supports businesses, social enterprises, and communities through funding, property assistance, training, and advisory services. With over 60 years of operation, HIE positions itself as a key regional development entity focused on sustainable growth and prosperity. The website reflects a professional and comprehensive digital presence, targeting a broad audience including local businesses, investors, and community groups. Technically, the website employs modern web technologies including Google Tag Manager, Facebook Pixel, Hotjar, and Google reCAPTCHA, indicating a mature digital infrastructure with attention to user experience and security. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and well-structured content. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, some advanced security headers are missing, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. The main limitation is the lack of WHOIS data for the queried domain 'www.hie.co.uk', which appears to be an invalid domain format. The actual domain is likely 'hie.co.uk', which aligns with the organization's identity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

F

Fost Plus

bettersorting.be

58

Better Sorting is a professionally maintained website operated by Fost Plus, a Belgian non-profit organization dedicated to organizing the collection and recycling of household packaging waste. The site provides comprehensive sorting guides, recycling process information, a mobile app, and educational blog content targeted at Belgian residents interested in sustainable waste management. The website is well-branded, consistent, and offers multilingual support, enhancing accessibility and user engagement. Technically, the website is built on Drupal CMS with modern front-end frameworks like Bootstrap and FontAwesome. It employs best practices such as lazy loading images and consent management via Usercentrics, alongside analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and publicly available security policies or incident response contacts. The WHOIS data is restricted, showing a 'NOT ALLOWED' status, which is common for .be domains and does not indicate malicious intent. Overall, the domain registration appears consistent with the business purpose. The overall risk assessment is low, with strong trust indicators and no suspicious content or links. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.

F

Fost Plus

trionsmieux.be

52

Fost Plus operates the website www.trionsmieux.be as a key platform for educating Belgian residents on proper waste sorting and recycling practices. The organization holds a leading position in Belgium's environmental sustainability sector, focusing on household packaging recycling. The website offers comprehensive content including sorting guides, recycling processes, a mobile app, and a contact point for overpackaging complaints. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and integrates tracking and consent management tools such as Google Tag Manager and Usercentrics. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and user-friendly resource aligned with Fost Plus's mission.

PILA MARTINICE s.r.o., operating under the brand MARTINICE GROUP, is a Czech company specializing in turnkey wooden buildings including family houses, halls, roofs, and photovoltaic installations. With over 20 years of experience since 1997, the company positions itself as a reliable regional manufacturer and construction service provider offering high precision and a 25-year warranty on their wooden construction systems. Their target audience includes individuals and businesses seeking quality wooden buildings with modern technology and flexible project options. Technically, the website is built on a custom CMS (IPO CMS) and uses modern JavaScript libraries such as jQuery, Google Tag Manager, Facebook Pixel, and Matomo for analytics. The site is mobile-optimized and employs HTTPS with reCAPTCHA for form security. However, it lacks some security headers and a published privacy policy, which are areas for improvement. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data for the domain is a notable concern, impacting the overall trustworthiness assessment. Overall, the website is professional, content-rich, and trustworthy from a business perspective but would benefit from enhanced transparency in privacy and security policies and improved domain registration visibility.

C

Clearly

clearly.cz

68

Clearly.cz is a newly launched e-commerce website specializing in health and wellness products, leveraging the Shopify platform for its online retail operations. The site targets general consumers interested in supplements and wellness, positioning itself as a clear and trustworthy brand dedicated to health. The business model is direct-to-consumer online sales with regional partner domains supporting multiple European markets. The website content is professionally designed, well-structured, and optimized for SEO and mobile devices, providing a good user experience.

S

Sedláček s.r.o.

sedlacek-karcher.cz

50

Sedláček s.r.o. operates the website www.sedlacek-karcher.cz as an authorized reseller and service provider of cleaning and hygiene systems, prominently featuring brands such as Kärcher, TORK, and Kimberly-Clark. The company has a long-standing presence since 1994, targeting both business and consumer markets with sales, service, and rental offerings. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site employs modern tracking and analytics tools including Google Tag Manager, Hotjar, and Facebook Pixel, alongside security measures like HTTPS and Google reCAPTCHA for form protection. However, the absence of explicit privacy and cookie policy pages and lack of WHOIS domain registration data introduce some trust and compliance concerns. Overall, the site demonstrates a moderate security posture with room for improvement in transparency and security headers.

B

Busworld Europe

busworldeurope.org

11

Busworld Europe is a leading B2B exhibition organizer specializing in the bus and coach industry, hosting the largest dedicated event in Brussels. The website reflects a mature digital presence with comprehensive event information, strong branding, and active engagement channels including a dedicated app and social media. The technical infrastructure is modern, leveraging Drupal 11 and multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be enhanced. Privacy and cookie policies are well implemented, supporting GDPR compliance. Overall, the site demonstrates a trustworthy and professional business operation with clear contact points and industry relevance.

S

Sedláček s.r.o.

author-sedlacek.cz

49

Sedláček s.r.o. operates the website www.author-sedlacek.cz as a retail and service center specializing in bicycles, particularly the Author brand, along with related accessories and rental services. The company has an established presence since 1994 and targets cycling enthusiasts in the Czech Republic. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the site employs modern analytics and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, alongside security measures like HTTPS and reCAPTCHA for form protection. However, the absence of privacy and terms of service pages indicates a compliance gap. The WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and contact information suggest a legitimate small retail business. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance and security header implementation.

P

P6PA+Architects

p6pa.com

41

P6PA+Architects is a premium architecture studio with a global outlook and local presence, notably in Prague and New York. The company offers architectural design and consulting services, targeting clients seeking high-quality architectural solutions. The website presents a professional portfolio and branding consistent with a niche premium service provider in the real estate sector. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Google Maps API, and Swiper.js, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing purposes. While the site is accessible and well-structured, it lacks visible privacy and cookie policies, explicit contact information, and WHOIS registration data, which raises concerns about transparency and compliance. Security posture is moderate with HTTPS usage implied but no security headers detected in the provided data. Overall, the site is functional and professional but would benefit from enhanced compliance and security practices.

H

Hodinářství a Zlatnictví Tomáš Vyskočil - TOVYS

tovys.cz

52

Tovys.cz is a Czech Republic-based retailer specializing in watches and jewelry, operating since 1996 with a physical store in Jihlava and an online e-commerce platform. The company offers a wide range of products from over 55 global brands, including luxury and smart watches, complemented by watchmaking and goldsmith services. The website demonstrates a mature digital presence with modern technologies such as jQuery, Swiper.js, and integration of Google Analytics and Facebook Pixel for marketing and analytics purposes. Privacy compliance is well addressed with detailed GDPR policies and cookie consent mechanisms. Security posture is generally good with HTTPS and consent management, though improvements in security headers and incident response documentation are recommended. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and comprehensive contact information support business credibility. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

P

PRVNÍ CHODSKÁ eshop

chodska.cz

59

PRVNÍ CHODSKÁ eshop operates a professional e-commerce platform specializing in construction materials such as roofing, windows, insulation, gutters, wood assortments, pergolas, and facades. The company serves a regional market in the Czech Republic with multiple physical branches, targeting construction professionals and retail customers. The website demonstrates a solid market position as a supplier with a broad product range and local availability through its branch network. Technically, the site uses a modern JavaScript stack including jQuery, Swiper.js, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel, managed via Google Tag Manager. The platform appears to be built on a proprietary or custom e-commerce CMS (K2 eShop). Security posture is adequate with enforced HTTPS and error monitoring, but lacks some security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy page. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

S

SELLERIA EQUIPE SPA

selleriaequipe.it

46

Gruppo Selleria Equipe is a medium-sized Italian company specializing in the manufacture and retail of high-quality equestrian saddles and accessories under the brands EQUIPE and AMERIGO. With over 25 years of experience, the company combines artisanal craftsmanship with technical innovation to serve equestrian professionals and enthusiasts globally. The website reflects a professional and consistent brand image, offering detailed product categories, rider endorsements, and comprehensive service information. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Facebook Pixel, integrated with a GDPR-compliant cookie consent mechanism via Iubenda. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear policies and consent management. Contact information is transparent, enhancing business credibility. Overall, the site is well-optimized for mobile and SEO, providing a good user experience.

Equitana Hotel Resort is a Czech Republic based wellness hotel and equestrian resort offering accommodation, spa, restaurant, and corporate event services. The website is professionally designed, mobile responsive, and provides clear navigation and contact information. The technical infrastructure relies on jQuery, Google Analytics, Facebook Pixel, and a proprietary CMS (IPO). Security posture is good with HTTPS and CAPTCHA usage, but lacks some security headers and explicit privacy policy documentation. The WHOIS data is unavailable publicly, indicating privacy protection, which is common and justified for this business type. Overall, the website presents a trustworthy and professional hospitality business with moderate digital maturity.

Recycle! is a Belgium-focused digital platform providing residents with comprehensive waste management information including recycling calendars, sorting guides, and local collection points. The website is positioned as a niche service supporting environmental sustainability efforts in Belgium, leveraging partnerships with recognized organizations such as Fost Plus and Bebat. The platform is accessible via web and mobile apps, with verified presence on Google Play and Apple App Store, indicating a mature digital offering. Technically, the site uses modern web technologies including React, Google Tag Manager, Facebook Pixel, and Dynatrace for monitoring, reflecting a moderate to advanced digital infrastructure. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and privacy policies, which are areas for improvement. WHOIS data is restricted due to registry policies, but the domain and website content appear legitimate and consistent with the business purpose. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

Fost Plus

betersorteren.be

61

Beter Sorteren is the official website operated by Fost Plus, a Belgian organization dedicated to educating the public on proper waste sorting and recycling processes. The site offers comprehensive guides on sorting household packaging materials such as PMD, paper-cardboard, and glass, supported by interactive tools, a mobile app, and multimedia content like blogs and podcasts. It targets Belgian residents seeking to improve their recycling habits and contributes to environmental sustainability efforts. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses advanced features such as lazy loading and consent management to enhance user experience and privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Fost Plus's role as a leading recycling authority in Belgium.

C

CEMEC

cemecpesquisaclinica.com.br

45

CEMEC is a Brazilian clinical research center with a professional online presence focused on clinical studies across more than 15 medical areas. The website is built on WordPress using Elementor and includes modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-structured, mobile-optimized, and secured with HTTPS, reflecting a moderate to good level of digital maturity. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and publishing a security policy. Overall, the site is legitimate and consistent with its business claims, but could enhance compliance and security transparency.

A

Adrex.com

adrex.com

52

Adrex.com is a well-established international media portal specializing in adrenaline, extreme, and outdoor sports content. It offers a wide range of articles, videos, and a unique application database catering to extreme sports enthusiasts globally. The website is professionally designed with consistent branding and a clear focus on its niche audience. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the site's professional appearance and content richness.

Seek Thermal operates an e-commerce website offering affordable infrared thermal imaging cameras targeting consumers and businesses interested in thermal imaging technology. The website is professionally designed with good content quality and consistent branding, focusing on product sales and applications in automotive and OEM markets. The technical infrastructure is based on the Weebly/EDITMYSITE platform, utilizing common web technologies and multiple third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and ZoomInfo. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing key security headers and no visible security or privacy policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and compliance.

S

Schuberth

schuberth.com

58

Schuberth is a well-established manufacturer specializing in high-quality helmets for motorsports, industrial safety, and military applications. The company targets consumers and professionals requiring protective headgear, operating primarily in the manufacturing sector with a medium-sized business footprint based in Germany. The website uses modern web technologies including Nuxt.js and integrates marketing and bot protection tools such as Google reCAPTCHA and Facebook Pixel. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain is long-standing and registered with a reputable hosting provider, indicating legitimacy. Overall, the website is professional but could improve in privacy compliance and security best practices.

I

Icam

icam.fr

55

Icam is a well-established French engineering school with multiple campuses across France and internationally. It offers a broad range of engineering education programs including initial engineering cycles, professional training, and specialized master's degrees. The institution maintains strong partnerships with industry and international universities, enhancing its market position and educational quality. Technically, the website is built on WordPress with modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some HTTP security headers could be improved. Overall, the domain appears legitimate despite lack of public WHOIS data, consistent with privacy norms for .fr domains. The website is professional, accessible, and compliant with GDPR, supporting a high trust level.

T

Troov S.A.S

troov.com

60

Troov S.A.S operates a specialized online platform focused on lost and found objects, primarily serving users in France. The website offers services to reference lost and found items, allowing users to post announcements and connect with partner locations to increase the chances of recovering lost belongings. The company was founded in 2018 and maintains a consistent brand presence with clear contact information and active social media channels. Technically, the website employs modern front-end frameworks such as Bootstrap and Vue.js, integrates Google Analytics and Facebook Pixel for tracking, and uses Cloudflare for DNS and likely CDN services. The site is mobile-optimized and provides a good user experience with relevant content and clear navigation. Security-wise, the site uses HTTPS and has a stable domain registration but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

A

Aflac Medicare Supplement

aflacmedicaresupplement.com

73

The website www.aflacmedicaresupplement.com represents a Medicare Supplement insurance offering underwritten by Tier One Insurance Company, a subsidiary of Aflac Incorporated, and administered by Aetna Life Insurance Company. It targets Medicare beneficiaries seeking supplemental insurance to cover gaps in Original Medicare. The site provides quote request forms, prominently displays contact phone numbers, and uses trusted branding and official Medicare resources. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response information are absent. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and affiliation with reputable insurance entities. Overall, the site is functional, professional, and trustworthy from a user perspective but requires verification of domain registration to fully confirm legitimacy.

D

DAF

dafshop.com

54

DAFshop.com is the official online merchandise store for DAF Trucks, a subsidiary of PACCAR. The website offers a range of branded products including clothing, accessories, and miniatures targeted primarily at truck drivers and DAF enthusiasts in the Benelux and European markets. The site is built on Magento 1.9.4.5, integrating various marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot forms, reflecting a mature digital marketing approach. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some modern security headers and uses an older Magento version which may pose risks if not fully patched. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site’s branding and content align with official DAF and PACCAR identities. Overall, the site presents a professional e-commerce platform with good user experience and privacy compliance, but would benefit from technical and security updates to enhance trust and resilience.

W

Wealth Solutions Sp. z o.o.

coloursofrum.com

61

Colours of Rum is an e-commerce business operated by Wealth Solutions Sp. z o.o., specializing in premium rum sales sourced from renowned rum-producing countries. The website offers a curated collection of single cask rums and private bottlings, targeting adult consumers and collectors globally. The business is positioned as a niche retailer with a focus on quality and exclusivity. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrating analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes an age verification mechanism to comply with legal drinking age requirements. However, it lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is strong, with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the website demonstrates a solid digital presence with minor areas for security improvement.

A

AutoEder s.r.o.

autoeder.cz

54

AutoEder s.r.o. operates as a reputable automotive dealership specializing in Toyota and Lexus vehicles, offering new and used cars, authorized servicing, financing, leasing, and additional automotive services primarily in the Czech Republic. The company maintains a strong market position with a professional online presence, targeting car buyers and owners seeking premium automotive brands. The website demonstrates a mature digital infrastructure built on WordPress, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, alongside comprehensive cookie consent management to ensure GDPR compliance. Security measures include HTTPS enforcement, reCAPTCHA on forms, and security headers, contributing to a robust security posture. However, the absence of publicly available WHOIS data and a formal security policy page limits full trust verification. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, supporting the company's credibility and customer engagement.

T

Teijin Aramid

teijinaramid.com

71

Teijin Aramid is a prominent manufacturer specializing in sustainable, high-performance aramid fibers and materials. The company positions itself as a leader in innovation and sustainability within the manufacturing sector, targeting industrial and business clients. The website reflects a professional B2B business model with a focus on sustainability and advanced material solutions. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Hotjar, Facebook Pixel, and Piwik PRO, indicating a mature digital infrastructure. The presence of a comprehensive cookie consent mechanism demonstrates attention to privacy compliance, although explicit privacy and terms of service policies were not detected in the provided content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but the lack of WHOIS data raises some concerns about domain registration transparency.

H

Hasičská výzbrojna

hasicskavyzbrojna.cz

66

Hasičská výzbrojna is a well-established Czech company specializing in the retail and service of firefighting equipment, protective clothing, and fire safety products. With over 30 years of market presence, it serves firefighters, safety professionals, and fire sport enthusiasts through a comprehensive e-commerce platform supported by physical stores. The website offers a broad catalog of products including fire extinguishers, hoses, pumps, helmets, and first aid supplies, alongside services such as fire protection consulting and equipment inspections. The company maintains sister companies that complement its business operations.

S

SKYMAN.CZ

skyman.cz

50

SKYMAN.CZ is a specialized e-commerce retailer focused on providing equipment for arboriculture, height work, and rescue climbing. The company offers a range of products including ropes, harnesses, helmets, winches, and distributes Castellari products. With over 20 years of experience, SKYMAN.CZ positions itself as a trusted provider in its niche market, also offering training and courses related to professional rope access and rescue techniques. The website is primarily in Czech with multilingual support, targeting professionals and enthusiasts in the vertical movement and arborist sectors. Technically, the website is built on the Upgates e-commerce platform and integrates modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, Facebook Pixel, and Ecomail tracking. It also features live chat support via SupportBox and an AI chatbot from Sensbot. The site is mobile-optimized and demonstrates good SEO practices, although explicit privacy and terms of service pages are not found. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is not uncommon for small specialized retailers. Overall, SKYMAN.CZ presents a professional and trustworthy online presence with a solid technical foundation and marketing integration. To enhance trust and compliance, the company should consider publishing clear privacy and terms of service documents and improving security header implementation.

I

Icam

icam-strasbourg.eu

56

Icam is a well-established French engineering school with multiple campuses across France and international partnerships. The institution offers a broad range of engineering education programs, including preparatory cycles, specialized engineering degrees, professional training, and international double degrees. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to prospective students, professionals, and partner companies. Technically, the site is built on WordPress with modern analytics and marketing integrations, including consent management compliant with GDPR. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of educational institution. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

L

Le Cnam Grand Est

cnam-grandest.fr

58

Le Cnam Grand Est is a well-established regional educational institution specializing in professional higher education and training across Alsace, Champagne-Ardenne, and Lorraine. It offers a variety of accessible learning modalities including alternance, in-person, and distance education, targeting students, professionals, and organizations. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its historical legacy dating back to 1794. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given its official certifications and professional presentation. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

P

PICO

pico-interactive.com

62

PICO is a leading virtual reality company specializing in all-in-one VR headsets and immersive interactive experiences. Founded in 2015, PICO has established a strong market presence, particularly in China and globally, offering a range of consumer and enterprise VR products. Their business model includes hardware sales, software platforms, developer support, and community engagement, targeting both end consumers and enterprise clients. The website reflects a mature digital presence with comprehensive product information, localized content, and active marketing efforts. Technically, the website is built on modern frameworks such as React and leverages advanced analytics and marketing tools including Google Analytics, TikTok Pixel, and Facebook Pixel. The hosting infrastructure appears to be managed by ByteDance-related services, ensuring fast performance and good mobile optimization. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration transparency, which should be further investigated. Overall, PICO's website demonstrates a high level of professionalism, security, and privacy compliance, supporting its position as a reputable VR technology provider. Strategic recommendations include enhancing transparency around security policies, incident response, and vulnerability disclosure to further strengthen trust and compliance.

S

sofatutor GmbH

sofatutor.com

70

sofatutor.com is a well-established German online learning platform offering a comprehensive suite of educational resources including thousands of videos, exercises, vocabulary trainers, worksheets, and a homework chat service staffed by qualified teachers. The platform targets students from grades 1 through 13, providing engaging and interactive learning experiences designed to improve academic performance. The business model is subscription-based with a free trial period, supported by strong trust signals such as multiple awards and high user ratings. Technically, the site employs modern web technologies including Ruby on Rails, video.js, and various analytics and marketing tools, all integrated with user consent mechanisms to comply with privacy regulations. Security posture is strong with HTTPS, CSRF protection, and script integrity checks, though explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates a high level of professionalism, usability, and compliance, though the absence of WHOIS data slightly reduces transparency.

P

Perfalytics, Inc.

perfalytics.com

64

Freshpaint is a healthcare-focused privacy platform designed to help healthcare marketers and organizations manage their data in compliance with HIPAA regulations. The company offers a suite of services including a BAA-supported platform, safe-by-default data blocking, complete visitor journey tracking, and secure server-side connections to ensure sensitive health information is never shared with non-compliant advertising and analytics tools. Positioned as a specialized SaaS provider, Freshpaint targets healthcare marketers seeking to balance high-performance marketing with stringent privacy requirements. The website reflects a professional and consistent brand image, emphasizing trust and compliance.

C

Coze - L'Agenda Culturel Alsacien

coze.fr

40

Coze.fr is a well-established regional cultural magazine and event listing platform focused on the Alsace region in France. It offers a comprehensive agenda of cultural events including concerts, exhibitions, festivals, and artist features, targeting residents and visitors interested in local culture. The website is professionally designed with consistent branding and regularly updated content, positioning it as a trusted media source in its niche. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses modern JavaScript libraries like Flickity for carousels. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and explicit cookie consent mechanisms, which are recommended for enhanced protection and GDPR compliance. The absence of WHOIS data reduces trust slightly but the professional nature of the site and its social media presence support its legitimacy. Overall, Coze.fr presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen its posture.

P

Peak Health

peakhealth.org

53

Peak Health is a regional health insurance provider headquartered in Morgantown, West Virginia, owned by three established not-for-profit healthcare providers. The company offers health insurance plans including Medicare Advantage PPO plans, focusing on improving health outcomes for West Virginians and surrounding communities. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies and tracking tools, though some privacy compliance aspects are lacking. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

T

Thomas Jefferson University

jefferson.edu

67

Thomas Jefferson University is a well-established higher education institution based in Philadelphia, PA, offering a broad range of undergraduate and graduate programs. The website reflects a professional and comprehensive digital presence with strong branding and extensive academic and research content. The university targets prospective students, current students, faculty, and researchers, positioning itself as a leader in education and research within its region. Technically, the site is built on Adobe Experience Manager with modern analytics and marketing tools integrated, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is partially met with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though WHOIS data for the domain was not retrievable, likely due to querying the subdomain rather than the root domain.

D

Danone s.r.o

nutriklub.sk

67

Nutriklub.sk is a professionally managed website operated by Danone s.r.o, a reputable multinational company specializing in infant and toddler nutrition products. The site serves as both an e-commerce platform and an expert advisory resource for pregnancy, breastfeeding, and child nutrition, targeting parents and caregivers primarily in Slovakia. The website features a rich content library authored by experts, integrated e-shop functionality, and multiple user engagement tools including live chat support. Technically, the site is built on Adobe Experience Manager with React components, leveraging modern web technologies and third-party services such as Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

U

U Lidušky

obchodulidusky.cz

57

U Lidušky is a small, family-run retail business operating multiple farm food stores and a bistro in Plzeň, Czech Republic, since 2014. They focus on healthy, local, and farm-sourced products including bakery items, meats, and gluten-free foods. Their market position is that of a trusted local provider emphasizing quality and freshness. Technically, the website is built on the Webnode CMS platform, uses Amazon Cloudfront CDN, and integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a published privacy policy, which are important for GDPR compliance. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and contact details suggest a legitimate business. Overall, the site scores well on content and technical implementation but should improve privacy and security disclosures to enhance trust and compliance.

G

GARNEA a.s.

garnea-stavebni.cz

63

GARNEA a.s. operates as the exclusive importer and distributor of DEVELON construction machinery in the Czech Republic, offering a comprehensive range of compact, wheeled, and tracked excavators, wheel loaders, dozers, and dump trucks. The company provides sales, rental, servicing, and financing services, targeting construction companies and equipment operators. The website reflects a professional and well-structured digital presence with clear navigation and rich content tailored to its audience. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Analytics, Facebook Pixel, and retargeting services, with appropriate cookie consent mechanisms in place. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear trustworthy and consistent with a medium-sized enterprise in the transportation sector. Overall, the site demonstrates good digital maturity and compliance with privacy regulations.