Security Directory

NEVA Group s.r.o. is an established authorized dealer and service provider specializing in DAF and TATRA commercial vehicles in the Czech Republic. The company offers a comprehensive range of services including new and used truck sales, vehicle servicing, driver training, financing, and spare parts supply. With a domain age dating back to 2008 and certifications such as ISO 9001 and ISO 14001, NEVA Group demonstrates a solid market presence and commitment to quality and environmental standards. The target audience primarily consists of commercial vehicle operators and transport companies seeking reliable vehicle solutions and support. Technically, the website employs a traditional tech stack featuring jQuery 1.9.1, Bootstrap, and Google Analytics, with a moderate performance profile and basic mobile optimization. While the site includes cookie consent mechanisms and integrates marketing tools like Google Tag Manager and Google Ads, it lacks modern security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is partial, with no explicit privacy policy page detected, though cookie consent is implemented. From a security perspective, the site benefits from HTTPS but lacks visible security headers and explicit security policies. The use of outdated libraries and absence of a vulnerability disclosure or incident response contact reduce its security maturity. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, NEVA Group's website is professional and functional, with good business credibility and moderate technical and security posture. Improvements in privacy policy transparency, security header implementation, and updating legacy scripts would enhance its compliance and security standing.

C

Czechocar CZ, spol. s.r.o.

czechocar.cz

46

Czechocar CZ, spol. s.r.o. operates a professional car rental and carsharing service in the Czech Republic, offering a wide range of vehicles from economy to luxury models. The company is an independent franchisee of Enterprise Rent-a-Car, which strengthens its market position and trustworthiness. The website is well designed, mobile optimized, and provides clear navigation and relevant business information including multiple physical office locations and a phone contact. Privacy and cookie compliance are well implemented with a dedicated GDPR policy document and cookie consent mechanism. Technically, the site uses modern frontend technologies such as Svelte and Bootstrap, and integrates Google Analytics via Google Tag Manager for user behavior insights. Security posture is good with HTTPS enforced and secure forms, though there is room for improvement by adding explicit security policies and incident response contacts. Overall, the website reflects a mature business with a solid digital presence and trustworthy operations.

J

JAVI solutions s. r. o.

javi.sk

42

JAVI solutions s. r. o. is a Slovakia-based technology company specializing in comprehensive information system solutions including business intelligence, internet solutions, software development, and ongoing support. The company targets businesses seeking integrated and customized IT solutions to optimize their internal processes and customer reach. Their market position is that of a niche provider with a focus on tailored software and system integration services. Technically, the website is built on a modern stack including Debian, MySQL, PHP, Java, and front-end technologies like Bootstrap and jQuery. The site uses a custom CMS (BiS/WEB 1.0.2 rc) and integrates Google Analytics and Tag Manager for tracking. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v2 to protect forms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Cookie consent is implemented, but privacy policy and terms of service are missing, which impacts compliance and user trust. Overall, the website is professional and trustworthy with a good security baseline but would benefit from enhanced privacy and security disclosures. The domain registration data aligns well with the company identity, supporting legitimacy. Strategic improvements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and compliance.

U

UniBind

unibind.sk

49

UniBind is a specialized manufacturer and provider of innovative thermal binding systems and professional binding technology, targeting businesses and professionals who require high-quality document presentation solutions. The company emphasizes speed, durability, and customizable design in their products, offering a range of binding machines and covers. The website is built on Joomla CMS with the Gridbox builder, incorporating modern web technologies such as Bootstrap and jQuery, and includes embedded video content and e-commerce links. Security posture is generally good with HTTPS and reCAPTCHA usage, but lacks explicit privacy and cookie policies, which are important for GDPR compliance. The site is fully accessible without WAF or blocking mechanisms, and WHOIS data confirms legitimacy and consistency with the business claims.

O

Olicom International S.r.l.

olicom-group.com

41

Olicom International S.r.l. is a medium-sized Italian company specializing in manufacturing and providing specialized printing solutions and equipment, including banking and postal terminals, retail terminals, kiosks, interactive terminals, and industrial moulds. The company positions itself as a market leader in banking automation, serving primarily financial institutions and retail sectors. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on Joomla CMS with modern UI frameworks such as Semantic UI and UIkit, and includes standard analytics and spam protection tools like Google Analytics and reCAPTCHA. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. The WHOIS data is consistent and supports the legitimacy of the business. Overall, the website is functional, professional, and trustworthy but could improve in security and compliance transparency.

Mikroregion Voticko is a small regional non-profit organization serving local municipalities in the Czech Republic. The website provides community services, social work coordination, educational development, and tourism information targeted at residents, schools, and local governments. The organization maintains a professional online presence with clear contact information and regular news updates, positioning itself as a trusted regional entity. Technically, the site is built on CMS Made Simple with legacy JavaScript libraries and uses Bootstrap and Owl Carousel for UI components. While functional and moderately optimized, the site lacks modern security headers and uses outdated libraries, posing potential security risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The site employs Google Analytics and Tag Manager for user tracking without visible consent mechanisms. Overall, the website is safe, professional, and relevant to its audience but requires improvements in security and privacy compliance to enhance trust and resilience.

Mon Alba s.r.o. is a small Czech company specializing in IT services and construction consulting. Their offerings include website and e-shop development, Google Workspace implementation, domain management, and expert consulting on building moisture and structural issues. The company targets local businesses and property owners in Prague and surrounding areas. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for user tracking. However, the absence of WHOIS data limits domain trust verification, and no cookie consent mechanism was found, which may impact privacy compliance. Security headers are not explicitly detected, suggesting room for improvement in security posture. Overall, the website is functional and professional but could benefit from enhanced security and privacy features.

L

Le Cour Montilleul

lecourmontilleul.fr

51

Le Cour Montilleul is a small hospitality business offering comfortable gîtes (holiday homes) in the Champagne region of France. The company provides two main accommodations, Le Loft and La Maison, catering to groups from 2 to 10 people, with additional wine tasting experiences hosted by the fourth generation of local viticulturists. The website is professionally designed with clear branding and provides comprehensive contact information and legal pages, supporting a trustworthy online presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, and FontAwesome, hosted by OVH, a reputable provider. The presence of a cookie consent mechanism and GDPR-related pages indicates good privacy compliance. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is well-positioned as a boutique accommodation provider in a niche market with a solid digital foundation.

R

Rehaklinik Tschugg AG

rehaklinik-tschugg.ch

59

Rehaklinik Tschugg AG is a specialized healthcare provider in Switzerland focusing on neurorehabilitation, Parkinson's disease, and epilepsy treatment. The clinic offers comprehensive inpatient and outpatient services, leveraging modern technologies such as the myReha digital therapy platform. It operates under the VAMED Schweiz group, indicating a strong organizational backing and network of related rehabilitation clinics. The website reflects a professional and patient-centered approach with clear communication channels and detailed service descriptions. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Matomo analytics, and is built on the Umbraco CMS platform. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. Overall, the website is well-designed, accessible, and trustworthy, serving its target audience effectively.

V

VAMED Management und Service Schweiz AG

vamed-rehazentrum.ch

59

VAMED Management und Service Schweiz AG operates two innovative outpatient rehabilitation centers in Switzerland, located in Seefeld and Zurich Airport. The centers provide a broad range of therapies including physiotherapy, medical training therapy, robotics, ergotherapy, speech therapy, and neurological and psychiatric consultations. The business targets patients requiring ambulatory rehabilitation and leverages modern technology and scientific methods to deliver effective treatments. The company is positioned as an innovative healthcare provider within the Swiss rehabilitation market, supported by its parent company VAMED. Technically, the website is built on the Umbraco CMS and uses a modern JavaScript stack including jQuery, Bootstrap, and Matomo analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.

R

Rehaklinik Zihlschlacht AG

rehaklinik-zihlschlacht.ch

61

Rehaklinik Zihlschlacht AG is a leading neurological rehabilitation clinic based in Switzerland, specializing in advanced therapies including robot-assisted rehabilitation, Parkinson's disease treatment, multiple sclerosis care, and early neurological rehabilitation. The clinic operates under the parent company VAMED Schweiz and maintains a strong market position with specialized centers and a comprehensive interdisciplinary approach. The website reflects a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Matomo analytics, and Google reCAPTCHA, ensuring a professional and user-friendly experience. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS enforcement and no critical vulnerabilities detected, though some improvements in security headers and incident response information are recommended. Overall, the website and business demonstrate high credibility, trustworthiness, and technical maturity suitable for their healthcare audience.

R

Rehaklinik Dussnang AG

rehaklinik-dussnang.ch

58

Rehaklinik Dussnang AG is a specialized healthcare provider in Switzerland focusing on geriatric and musculoskeletal rehabilitation. The clinic offers a comprehensive range of services including inpatient rehabilitation, cure stays, wellness, and telemedicine programs. It operates under the parent company VAMED Schweiz and maintains a strong market position with over 135 years of history and recognized certifications such as the Fracture Liaison Service (FLS). The website is professionally designed, multilingual, and provides clear navigation and detailed service information. Technically, the site uses modern frameworks and libraries, including Umbraco CMS, Bootstrap, jQuery, and Matomo analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and reCAPTCHA integration, though some security headers and policies could be improved. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supported by transparent WHOIS data consistent with the business identity.

R

Rehaklinik Seewis AG

rehaklinik-seewis.ch

61

Rehaklinik Seewis AG is a well-established rehabilitation clinic located in Switzerland, specializing in cardiological, psychiatric-psychosomatic, and internistic-oncological rehabilitation services. The clinic operates within a familial atmosphere and is part of the VAMED Schweiz network, which enhances its market position and trustworthiness. The website reflects a professional healthcare service provider with clear communication of services, patient focus, and career opportunities. The target audience primarily includes patients requiring specialized rehabilitation and healthcare professionals seeking employment. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Umbraco CMS, with integrations such as Matomo analytics and Google Maps API, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained.

V

VAMED Management und Service Schweiz AG

vamed.ch

61

VAMED Management und Service Schweiz AG operates as a leading provider of rehabilitation services in Switzerland, managing multiple specialized clinics and ambulatory centers. The company positions itself as a comprehensive healthcare service provider with a strong focus on neurological, musculoskeletal, cardiological, and oncological rehabilitation. Their website reflects a professional and well-structured digital presence, targeting patients, healthcare professionals, and partners within the Swiss healthcare market. The business model centers on delivering specialized rehabilitation care with an emphasis on innovation and patient-centered services. Technically, the website employs modern web technologies including jQuery, Bootstrap, Matomo analytics, and Google Maps API, integrated within an Umbraco CMS environment. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature approach to privacy and user consent. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing vulnerability disclosure information. The domain registration data aligns well with the business claims, showing consistency and legitimacy. The website is free from WAF blocking or content restrictions, allowing full content access and analysis. Social media and partner links further reinforce the company's credibility and market presence.

S

Salesiánské středisko mládeže – dům dětí a mládeže Brno-Líšeň

salesko.cz

59

Salesko is a Czech non-profit organization dedicated to supporting children and youth primarily from Brno-Líšeň and surrounding areas. The organization offers a variety of youth-oriented activities including sports, music, creative workshops, camps, and cultural events. Their mission focuses on physical, mental, and spiritual development of young people. The website reflects a well-structured community hub with event announcements, registration forms, and news updates, positioning Salesko as a trusted local youth center. Technically, the website is built on WordPress with modern front-end frameworks like Bootstrap and jQuery, supplemented by plugins for forms, calendars, and push notifications. The site is mobile-optimized and uses HTTPS with Google reCAPTCHA to secure forms. Cookie consent is implemented, indicating awareness of privacy compliance, though no dedicated privacy policy page was found. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and form protection but lacks published security policies or incident response contacts. The absence of WHOIS data limits domain trust verification, though the website content and social media presence support its legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, Salesko presents a credible, community-focused non-profit with a solid digital presence. Enhancements in privacy documentation and security transparency would further strengthen trust and compliance.

M

moonseven edito

moonseven-editing.com

35

moonseven edito is a French content creation agency specializing in editorial strategy and content production for socially engaged organizations such as associations, foundations, NGOs, and socially responsible enterprises. Their services include content strategy consulting, motion design, web series, and video production, positioning them as a niche player in the media sector focused on social impact. The website is built on WordPress with a Bootstrap framework, integrating common marketing and analytics tools like Google Analytics and Tag Manager. While the site is professionally designed and mobile-optimized, it lacks critical privacy and cookie policies, and uses an outdated WordPress version, which may expose it to security risks. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and structure appear genuine and business-focused.

A

Association des Centraliens de Lyon

centraliens-lyon.net

10

The Association des Centraliens de Lyon operates as a professional alumni network for graduates of Centrale Lyon, providing career support, networking opportunities, events, and publications. The website is well-structured, with a clear focus on member engagement and information dissemination. The technical infrastructure leverages a combination of modern JavaScript libraries and frameworks, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, CSRF tokens, and hCaptcha are implemented, reflecting a good security posture. However, the absence of WHOIS data and lack of explicit security and incident response policies present areas for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and contact information.

Z

Zdravotní klaun

zdravotniklaun.cz

58

Zdravotní klaun is a Czech non-profit organization dedicated to bringing joy and laughter to children in hospitals and geriatric patients in senior homes since 2001. The website reflects a mature digital presence with a professional design and consistent branding. It leverages TYPO3 CMS and integrates multiple modern frontend libraries and accessibility tools to enhance user experience. The organization uses comprehensive cookie consent mechanisms and integrates major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Microsoft telemetry to monitor and optimize its outreach and engagement. However, the absence of WHOIS data and explicit privacy policy pages introduces some concerns regarding domain legitimacy and full privacy compliance. Overall, the website demonstrates a good security posture with HTTPS enforcement and standard security practices, but could improve by adding more security headers and explicit privacy documentation.

D

De Heus a.s.

energys.cz

49

Energys.cz is a Czech website representing the Energys brand, a producer of horse feed and nutritional products. The brand is part of the international company De Heus a.s., a well-established player in the animal feed industry since 2009. The website targets horse owners, breeders, and equestrian professionals, offering a range of feed products tailored to different horse needs, including premium, base, and nature lines. The site also provides tools such as a feed configurator and maintains active customer engagement through newsletters and social media channels. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook Pixel, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Energys.cz presents a professional, trustworthy, and well-maintained online presence in the equine nutrition sector.

T

TIM s.a.s.

tim-sa.fr

59

TIM s.a.s. is a small manufacturing and retail company based in Reims, France, specializing in fencing, gates, motorization, and aluminum and plastic profiles. The company targets both professionals and private individuals, offering a broad range of products including industrial and residential fencing, motorization systems, and related accessories. Their market position is regional with a focus on quality professional products and services such as delivery and professional accounts. The website reflects a professional and consistent brand image with clear contact information and comprehensive product offerings. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and FontAwesome, and integrates a consent management platform for GDPR compliance. The site is mobile-optimized and provides good SEO and accessibility basics. Security-wise, HTTPS is used and cookie consent is implemented, but explicit security headers and incident response information are missing. The WHOIS data is unavailable, which slightly reduces trust but the overall site and business presentation are legitimate and professional. Recommendations include enhancing security headers, adding incident response contacts, and maintaining regular audits of third-party scripts.

P

Poissonnerie des Halles

letal.fr

49

Poissonnerie des Halles à Reims operates a local seafood retail business with over 20 years of experience, offering fresh fish, shellfish, and seafood platters through an online ordering platform with delivery and pickup options. The website is professionally designed, mobile responsive, and provides clear business information including physical address and phone contact. However, the absence of WHOIS data limits domain trust verification. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, but lacks some security headers and explicit cookie consent mechanisms. Overall, the security posture is moderate with room for improvement in headers and incident response transparency.

C

Commune de Trépail

trepail.fr

52

The website www.trepail.fr serves as the official municipal portal for the Commune de Trépail, located in the Marne region of France. It provides local residents and visitors with information about municipal services, news, administrative procedures, and tourism opportunities within the commune. The site is positioned as a small government entity's digital presence, focusing on community engagement and regional promotion. The content is well-structured, relevant, and professionally presented, targeting local citizens and tourists interested in the Champagne route and natural regional park.

C

Champagne L. Albert Guichon

champagne-albertguichon.fr

58

Champagne L. Albert Guichon is a small family-owned vineyard and champagne producer located in Mardeuil, France, with a heritage dating back to 1929. The company specializes in cultivating traditional champagne grape varieties and producing a range of champagne cuvées. Their market position is that of a boutique producer emphasizing quality and environmental responsibility, as evidenced by their HVE certification. The website reflects a professional and consistent brand image, targeting wine enthusiasts and hospitality clients. Technically, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and integrates Google Analytics and a robust cookie consent mechanism via Consentmanager.net. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. The security evaluation shows good practices in data protection and privacy compliance, including GDPR adherence and cookie consent. However, the absence of WHOIS data limits domain trust assessment. Overall, the site is trustworthy and professionally maintained, with clear contact information and social media presence. Strategically, the company should consider enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust and compliance further.

B

BIO ATTITUDE S.A.

bioattitude.com

57

BIO ATTITUDE S.A. is a French manufacturer specializing in ecological and bio-based cleaning products primarily targeting professional and environmentally conscious consumers. The company emphasizes the use of renewable plant-based raw materials sourced from regional agriculture and agro-industry. Their market position is that of a niche leader in ecological cleaning solutions within France, supported by certifications such as Ecocert Greenlife. The website reflects a professional and consistent brand image with clear product offerings and sector-specific solutions.

C

Champagne Mondet

champagne-mondet.fr

58

Champagne Mondet is a traditional family-owned champagne producer based in Cormoyeux, France, with a heritage dating back to 1926. The company cultivates vineyards in the Champagne region and offers a range of champagne products through both physical and online retail channels. Their website reflects a professional and consistent brand image, targeting mature consumers interested in quality champagne. The business model focuses on production and direct sales, supported by participation in wine salons and events. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and a consent management platform, ensuring a responsive and user-friendly experience. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the overall digital presence and business information suggest legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and maintaining privacy compliance to strengthen trust and security culture.

A

ACI élévation

aci-elevation.com

59

ACI élévation is a French manufacturer specializing in vertical handling equipment including monte-charges, tables élévatrices, and plateformes élévatrices. The company positions itself as a leader in the French industrial equipment sector with a comprehensive offering from design to maintenance and a national commercial network. The website reflects a mature business with professional branding and detailed product information targeting industrial clients in France. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, and implements cookie consent and Google Analytics for tracking. Security posture is adequate with HTTPS and consent mechanisms but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high based on website content and client references. The site is fully accessible with no WAF or blocking detected.

P

PACEMETAL SA

pacemetal.fr

50

PACEMETAL SA is a French manufacturing company specializing in custom metal staircases, including straight, helical, and curved designs, as well as metal guardrails and walkways. Positioned as a leader in France, the company emphasizes compliance with applicable norms for public spaces, offices, industry, and residential buildings. The website reflects a medium-sized enterprise with over 40 employees and a long collective experience in metal fabrication. Technically, the website employs modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for tracking, alongside a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. The absence of WHOIS data reduces transparency but the professional presentation and compliance signals support legitimacy. Overall, the website is well-structured, mobile-optimized, and provides clear business information, though direct contact emails and phone numbers are not explicitly listed in the HTML content.

A

Anodur

anodur.fr

50

Anodur is a French company specializing in surface treatment of aluminum and titanium, including anodization and passivation services, with additional marking services such as digital printing and laser engraving. The company operates primarily in the manufacturing sector, targeting industrial clients requiring high-quality surface finishing and protective treatments. Their market position is strengthened by ISO 9001 certification and the recent acquisition of Delcros, expanding their capabilities and geographic reach. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Usercentrics for cookie consent, alongside Google Analytics for user tracking. The site is mobile-optimized with good SEO practices and a professional design, although some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks certain security headers which could enhance protection. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies and consent mechanisms. However, no explicit security policy or incident response contacts are provided, and WHOIS data is unavailable, which slightly reduces trust. No vulnerabilities or exposed sensitive data were detected. Overall, Anodur presents a trustworthy and professional online presence with minor areas for security and technical improvement. The lack of WHOIS transparency is a notable gap but does not outweigh the positive trust signals from certifications and contact transparency.

T

Tours-sur-Marne

tours-sur-marne.fr

62

Tours-sur-Marne is a small municipal government entity in the Marne department of the Grand Est region in France. The website serves as an official portal providing residents and visitors with local information, administrative services, event updates, and community resources. It positions itself as a local authority with a focus on community engagement and transparency. The site is well-branded and consistent with its municipal identity. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery, FontAwesome for icons, and Google Fonts for typography. It integrates a consent management platform to comply with GDPR requirements and uses Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, indicating awareness of privacy and security best practices. However, it lacks explicit security headers and does not provide a security policy or incident response information. The absence of WHOIS data due to privacy protection is typical for municipal domains and does not raise immediate concerns. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the site appearing trustworthy and professionally maintained. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

L

Le BOCAL

restaurantlebocal.fr

50

Le Bocal is a specialized seafood restaurant located in Reims, France, offering a variety of fish, shellfish, and crustaceans with a focus on fresh, regional products. The business operates primarily as a dining establishment with additional services such as table reservations and gift vouchers. The website reflects a professional and consistent brand image, targeting a general audience interested in quality seafood dining experiences. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and clear contact information support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, making it a trustworthy digital presence for the restaurant.

R

RVF Ressorts & Visseries des Flandres

rvf.com

57

RVF Ressorts & Visseries des Flandres is a French manufacturer specializing in industrial and precision springs with nearly 100 years of history since its founding in 1923. The company offers a wide range of custom springs including compression, torsion, traction, spiral, flat, and shaped wire springs, serving diverse industrial sectors such as automotive, agriculture, building, medical, and luxury goods. The website reflects a professional and established business with ISO9001 and IATF 16949 certifications, indicating a commitment to quality and industry standards. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome Pro, and Owl Carousel, with Google Analytics integrated for user tracking. The site is mobile-optimized and SEO-friendly, providing a good user experience. However, some accessibility features could be enhanced. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security or incident response policies, which are areas for improvement. The WHOIS data for the domain www.rvf.com is notably missing, which is inconsistent with the company's long operational history and raises some trust concerns. Despite this, the website content, contact information, and certifications support the legitimacy of the business. Privacy and cookie policies are present and appear GDPR compliant, reflecting awareness of data protection regulations. Overall, RVF presents as a credible and professional manufacturing company with a solid digital presence but should address WHOIS transparency and enhance security policies to improve trust and compliance.

A

ATELIERS MECANIQUES DE SAUCOURT

ressorts-ams.com

57

ATELIERS MECANIQUES DE SAUCOURT (AMS) is a French manufacturer specializing in the production of industrial springs, offering both small and large series fabrication. Positioned regionally in Hauts-de-France and part of the QUARSOR SPRING SOLUTIONS group, AMS serves various industrial sectors including automotive, agriculture, medical, and luxury goods. Their website reflects a professional and consistent brand image, emphasizing certifications such as ISO9001 and IATF 16949, which reinforce their quality and reliability in manufacturing. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and FontAwesome, ensuring a responsive and user-friendly experience. The presence of Cookiebot for cookie consent and Google Analytics for traffic monitoring indicates a mature digital infrastructure with attention to privacy compliance. However, the absence of visible security headers and incomplete WHOIS data are notable gaps. From a security perspective, the site benefits from HTTPS encryption and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. The missing WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is secure and professional but could improve in transparency and security best practices. The overall risk assessment is moderate with recommendations focusing on domain registration verification, enhanced security headers, and clearer security policies. These improvements will strengthen AMS's digital trustworthiness and compliance posture.

E

Emmaüs International

emmaus-international.org

54

Emmaüs International is a large, established non-profit organization focused on fighting poverty and social exclusion with a presence in over 40 countries and approximately 450 groups. The website serves as a comprehensive platform for information about their history, actions, campaigns, and resources, targeting a general audience interested in humanitarian aid and social justice. The organization maintains a consistent brand image and active social media presence, enhancing trust and engagement. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses privacy-respecting analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, the hosting provider is not explicitly identified, and performance is moderate. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The malformed WHOIS data limits domain registration trust verification, though the website content and social signals support legitimacy. Overall, the site presents a professional and trustworthy front for Emmaüs International but would benefit from enhanced transparency in security policies and domain registration details to improve trustworthiness and compliance.

WVU Medicine is a leading healthcare provider in West Virginia, offering advanced medical services including heart, vascular, thoracic, cancer, pediatric, and neurological care. The organization positions itself as a premier healthcare network serving patients, medical professionals, and the community. The website reflects a mature digital presence with a professional design, clear navigation, and relevant content tailored to its audience. Technically, the site is built on WordPress with Bootstrap and uses modern libraries such as jQuery and Google Tag Manager for analytics and marketing. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website presbariery.cz represents a Czech non-profit organization, Pražská organizace vozíčkářů, dedicated to promoting accessibility and barrier-free environments. The organization provides services such as accessibility mapping, consulting, educational seminars, and publishes related materials. Their target audience includes students, architects, designers, and people with disabilities, primarily within the Czech Republic. The website is well-branded and supported by governmental and municipal entities, indicating a strong local presence and trust. Technically, the website is built on Joomla CMS with a combination of jQuery, Mootools, and Bootstrap frameworks. It uses Google Analytics for visitor tracking and is hosted on Czech infrastructure consistent with the domain registration. The site shows moderate performance and basic mobile optimization. However, some JavaScript libraries are outdated, and no advanced security headers are detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were found, but improvements in security headers and privacy compliance are recommended. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy and security practices to improve compliance and user trust.

C

Cyber Création

cybercreation.fr

40

Cyber Création is a small, established French web and print communication agency based in Ormes near Reims, operating since 1998. The company specializes in graphic design, website creation including intranet and e-commerce solutions, and print production services. Their website reflects a professional and consistent brand image, targeting local businesses and organizations seeking digital and print communication solutions. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism and privacy policy.

U

UniWIRE Solution, s. r. o.

uniwire.cz

52

UniWIRE Solution, s. r. o. is a Czech-based small IT and security services company specializing in visual identity creation, installation of camera and security systems, electrical installations, and IT services. The company targets schools, businesses, and general clients seeking comprehensive IT and security solutions. Their market position appears regional with a focus on quality and reliability, supported by client references and a portfolio of completed projects. The website is built on WordPress using modern technologies such as Bootstrap and Smart Slider 3, with good mobile optimization and user experience. Security posture is solid with HTTPS and Google reCAPTCHA integration, though lacking some advanced security headers and formal privacy documentation. The absence of WHOIS data reduces domain trust but the website content and business information are professional and credible.

D

DLA Grand-Est

dla-grandest.org

10

DLA Grand-Est is a regional non-profit organization dedicated to supporting social utility structures in the Grand Est region of France. The website presents a professional and well-structured platform offering information about their services, including accompaniment for social utility employers, training for volunteers, and calls for service providers. The organization positions itself as a key regional player in social and employment development within the non-profit sector. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, FontAwesome for icons, and Google Analytics for visitor tracking. The site is mobile-optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. The presence of a cookie consent banner and a comprehensive privacy policy indicates good privacy compliance. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. However, no explicit security headers were detected, and there is no visible security policy or incident response contact information. The WHOIS data is unavailable due to a malformed request or privacy restrictions, which slightly reduces trust in domain legitimacy but does not outweigh the professional presentation and compliance indicators. Overall, the website is a credible and professional platform for a regional non-profit organization with a good security posture and privacy compliance. The main risk is the lack of WHOIS transparency and absence of explicit security policies, which should be addressed to enhance trust and security maturity.

A

AB S.A.

abonline.pl

60

AB Online is a Polish B2B e-commerce platform operated by AB S.A., a large technology distributor. The website provides registered business clients and dealers with access to product catalogs, promotions, and order management. The platform uses a mix of legacy and modern web technologies including jQuery, Bootstrap, and third-party analytics tools such as Google Analytics and New Relic. Security practices include HTTPS enforcement and visitor fingerprinting, but the use of outdated JavaScript libraries and lack of security headers present moderate risks. Privacy and cookie policies are present and GDPR compliant, though terms of service and security policies are not clearly visible. WHOIS data is not publicly available, indicating privacy protection, which is common for commercial domains. Overall, the website is functional and professional but would benefit from technical modernization and enhanced security measures.

I

inREAL realitná kancelária, s.r.o.

inreal.sk

45

inREAL realitná kancelária, s.r.o. is a Slovakian real estate agency specializing in property sales and searches across a wide range of locations in Slovakia. The website serves as a platform for clients to browse property listings and contact the agency for real estate services. The company targets individuals and businesses interested in real estate transactions within Slovakia, positioning itself as a local real estate service provider. The website features a professional design with clear navigation and mobile responsiveness, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, with HTTPS enabled ensuring secure communications. However, there is room for improvement in security headers and privacy policy transparency. The security posture is moderate, with email obfuscation and cookie consent mechanisms implemented, but lacking explicit security policies or incident response contacts. Overall, the domain registration data aligns well with the website's business claims, supporting legitimacy and trustworthiness.

I

IAP2026 Congress Secretariat c/o Congrès Inc.

iap2026.com

53

The website iap2026.com serves as the official platform for the XXXⅥ International Congress of the International Academy of Pathology scheduled in October 2026 in Fukuoka, Japan. It targets pathology professionals and academics, providing information about the congress, educational programs, calls for abstracts, and sponsorship opportunities. The business model centers on event organization and professional education within the healthcare sector. The site is relatively new, consistent with the event timeline, and operated by Congrès Inc., a known event organizer in Japan. Technically, the website uses a straightforward HTML5 and Bootstrap framework with jQuery 1.8.0, indicating a somewhat dated but functional tech stack. The site is mobile optimized with good navigation and content relevance but lacks advanced CMS or modern JavaScript frameworks. Performance is moderate, and accessibility is basic. No CMS or hosting platform beyond registrar and DNS info is detected. From a security perspective, the site lacks DNSSEC, security headers, and uses an outdated jQuery version, which could expose it to vulnerabilities. No HTTPS or SSL configuration details were found in the provided data, which is a concern. Privacy compliance is weak, with no privacy or cookie policies present, which is a significant gap given GDPR and other regulations. Contact information is minimal but professional, with a verified official email. Overall, the site is functional and professional but requires improvements in security posture and privacy compliance to meet modern standards. The risk level is moderate with no critical vulnerabilities detected but notable areas for enhancement.

L

LIFE IN TOWN s.r.o.

jsmez.cz

63

JSMEZ.CZ is a Czech community portal operated by LIFE IN TOWN s.r.o., providing localized news, events, and community information across multiple Czech cities. The website serves as a hub linking to city-specific portals, targeting local residents and community members. The business model focuses on media and community engagement, with key services including event calendars and electronic business cards (E-vizitka). The company appears to be a small-sized media entity based in Olomouc, Czech Republic. Technically, the website is built on ASP.NET Web Forms with a tech stack including jQuery, Bootstrap, Font Awesome, and Google Fonts. It integrates Facebook SDK and Microsoft Application Insights for analytics and tracking. The site is mobile-optimized with moderate performance and good SEO practices. Privacy and cookie policies are implemented with a consent banner, indicating awareness of GDPR compliance. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms but lacks explicit security headers and up-to-date JavaScript libraries, which could pose risks. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, JSMEZ.CZ presents a professional and trustworthy community portal with good content quality and privacy compliance. However, improvements in security posture, domain registration transparency, and incident response readiness are recommended to enhance trust and resilience.

L

LIFE IN TOWN s.r.o.

jsmezprahy.cz

61

JSME Z PRAHY is a Czech community portal operated by LIFE IN TOWN s.r.o., targeting residents and community members of Prague. The website offers local news, event listings, places directory, job offers, photo galleries, and user profiles, positioning itself as a key local media platform within a network of similar portals across multiple Czech cities. The business model focuses on community engagement and local information dissemination, supported by advertising and partnerships. Technically, the website is built on a custom ASP.NET WebForms platform using technologies such as jQuery 1.12.4, Bootstrap, Font Awesome 6, Google Custom Search, and Microsoft Application Insights for analytics. The site is mobile-optimized with good navigation and SEO practices, though it uses an outdated jQuery version which poses potential security risks. Cookie consent and privacy policies are implemented, indicating awareness of GDPR compliance. From a security perspective, the site uses HTTPS and has cookie consent mechanisms but lacks visible security headers and uses an outdated JavaScript library. No WHOIS data is publicly available due to privacy protection, which is common under GDPR but reduces transparency. No critical vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, the website demonstrates a solid community media presence with good technical and privacy compliance but would benefit from updating its technology stack and enhancing security headers to improve its security posture and trustworthiness.

S

Solar Energy Industries Association

seia.org

71

The Solar Energy Industries Association (SEIA) is a well-established national trade association founded in 1974, dedicated to advancing the solar energy industry in the United States. It represents over 1,200 member companies and focuses on policy advocacy, research, education, and industry growth to promote clean energy solutions. The website reflects a professional and authoritative presence with excellent content quality and clear messaging targeted at industry stakeholders, policymakers, and communities interested in solar energy. Technically, the site is built on WordPress, enhanced with performance optimization tools like NitroPack, and integrates modern analytics and marketing technologies including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted via Cloudflare, ensuring robust infrastructure and security.

G

Guía de la Industria Química

guiaquimica.mx

48

Guía de la Industria Química is a specialized online platform focused on providing comprehensive information, business directories, and advertising opportunities for the chemical industry and related sectors in Mexico. Established in 2011, it serves industry professionals and companies by offering detailed articles, supplier listings, and sector-specific insights. The website positions itself as an important resource within the Mexican chemical manufacturing sector, supporting business decision-making and networking. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, Google Fonts, and interactive libraries such as Swiper and AOS for animations. It integrates Google Analytics, Google Tag Manager, and Mouseflow for user behavior tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Hosting details are limited but the domain registrar is consistent with the business location. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms to mitigate spam. However, it lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could enhance protection against common web attacks. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen trust. Overall, the website is professional, content-rich, and trustworthy for its target audience but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing clear incident response contacts to improve compliance and security posture.

A

Alexion Pharmaceuticals, Inc.

alexionaccessnavigator.com

63

Alexion Access Navigator is a specialized online platform dedicated to providing US healthcare professionals with access and reimbursement resources for Alexion pharmaceutical products. The website serves as a centralized hub for brand-specific information, prescribing details, and connection to field reimbursement managers, supporting healthcare providers in navigating medication access. The platform is positioned as a trusted resource within the healthcare sector, backed by Alexion Pharmaceuticals, Inc., a large and established pharmaceutical company. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Feather Icons for UI elements, and multiple analytics tools such as Google Analytics, Segment, Mouseflow, and Evergage for user behavior tracking. Hosting is inferred to be on Amazon AWS infrastructure, supported by AWS DNS servers. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and has domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. The absence of a cookie consent mechanism despite the use of tracking scripts indicates a privacy compliance gap. No incident response or security policy information is publicly available on the site. Overall, the security posture is solid but could be improved with enhanced headers, DNSSEC, and explicit privacy controls. The website content is professional, safe, and targeted exclusively at healthcare professionals in the US, with no adult or inappropriate content. The domain registration is consistent and legitimate, with no privacy protection masking ownership, and an appropriate domain age for the business. Strategic recommendations include implementing cookie consent, adding security headers, enabling DNSSEC, and publishing security policies to enhance trust and compliance.

S

Státní fond životního prostředí ČR

modernizacni-fond.cz

67

The website represents the official portal of the State Environmental Fund of the Czech Republic (SFŽP ČR), focusing on the Modernization Fund which supports energy and environmental projects. It serves a broad audience including businesses, municipalities, and households, providing detailed information about funding programs, project successes, and future plans. The site is well-branded, consistent, and linked to trusted government and EU resources. Technically, it is built on WordPress with modern plugins and frameworks, offering good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and some security plugins in use, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves as a critical government resource for environmental funding in the Czech Republic.

Design by Ewa is a specialized small business focused on providing custom web design and graphic design services tailored to dog and cat breeders, kennels, catteries, and the equestrian industry. The company has a long-standing presence since 2001 and offers a range of services including website packages, logo design, magazine publication, and advert design. Their market position is that of a niche specialist with a professional and artistically driven approach. Technically, the website uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing security headers and unknown SSL configuration, and there are no visible privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

K

Kestria ry

kestria.com

68

Kestria ry operates as the world’s largest executive search alliance, connecting boutique executive search firms globally to provide leadership recruitment services across multiple industries and functions. Founded in 2020, the organization has established a strong market position with offices spanning 6 continents, 40+ countries, and 90+ cities, targeting companies seeking executive talent and search firms wishing to join the alliance. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, jQuery, and Google Maps API, likely running on a Django backend. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Privacy and cookie policies are well implemented with explicit consent mechanisms, indicating good compliance with GDPR. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers. There is no public security policy or incident response information, nor a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, Kestria’s website presents a trustworthy and professional digital presence with strong business credibility and privacy compliance. Strategic enhancements in security policies and technical security controls would further strengthen its posture.