Security Directory

A

AFM Productions

afmproductions.fr

49

AFM Productions is a specialized audiovisual production company founded in 1997 by the AFM-Téléthon association, focusing on creating documentaries and educational content about rare genetic diseases and medical research. The company targets a general audience interested in health, science, and social issues, leveraging storytelling to raise awareness and inform the public. The website reflects a professional and consistent brand identity aligned with its mission. Technically, the website is built on Drupal 10 with Bootstrap and uses modern libraries such as Swiper.js for UI components. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism via CookieYes, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and has implemented cookie consent but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy entity. Overall, the site presents a low-risk profile with good compliance and technical standards, though improvements in security headers and transparency policies are recommended.

M

Muséum de Bordeaux - sciences et nature

museum-bordeaux.fr

57

The Muséum de Bordeaux - sciences et nature is a well-established public museum located in Bordeaux, France, focusing on natural history and cultural exhibitions. It serves a broad audience including families, schools, leisure professionals, journalists, and patrons. The museum offers permanent and temporary exhibitions, educational workshops, events, and virtual tours, positioning itself as a key cultural institution in the region. Technically, the website is built on Drupal 10 with modern libraries such as jQuery UI, Slick Carousel, Leaflet.js for maps, and FontAwesome for icons. It demonstrates good mobile optimization, accessibility, and SEO practices. The site includes a cookie consent mechanism and privacy policies aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The WHOIS data is unavailable, which limits domain registration insights but does not detract from the site's legitimacy given its professional content and official nature. Overall, the website is secure, compliant, and professionally maintained, with no signs of blocking or malicious activity. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

C

Churchill

churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders in Paris and Lyon. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced tools and third-party services to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with a strong focus on SEO and user experience. Technically, the website is built on a modern WordPress platform with performance optimizations via WP Rocket, analytics through Matomo and Google Tag Manager, and cookie consent managed by Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, explicit security headers are not visibly configured, and no public security policy or incident response information is provided. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of WHOIS data limits domain trust verification. Privacy compliance is strong with comprehensive policies and consent mechanisms. Overall, the site demonstrates professionalism and trustworthiness, though domain registration transparency is lacking. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving WHOIS transparency to bolster trust and compliance.

F

Fost Plus

fostplus.be

68

Fost Plus is a Belgian non-profit organization dedicated to promoting sustainable packaging management through sorting, recycling, reuse, and reduction initiatives. It serves a broad audience including households, businesses, schools, healthcare, horeca, and event sectors, positioning itself as a key player in Belgium's circular packaging economy. The website is professionally designed, multilingual, and rich in relevant content, reflecting a mature digital presence. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as HubSpot, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. From a security perspective, the site enforces HTTPS and implements consent mechanisms, though it lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is restricted due to .be domain policies, but the overall domain legitimacy is supported by consistent business information and professional web presence. Overall, Fost Plus demonstrates a strong security posture, good privacy compliance, and high business credibility, making it a trustworthy and authoritative source in its domain.

E

EQUINET s.r.o.

equitv.cz

47

EquiTV.cz is a specialized internet television platform focused on equestrian sports and related content, operated by EQUINET s.r.o. The website offers live streaming, video and audio content, podcasts, and news targeting horse enthusiasts primarily in the Czech Republic. The business operates as a niche media provider with advertising and fan club engagement as key revenue streams. Technically, the site uses modern web technologies including jQuery, Bootstrap, and media players, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which reduces transparency but the site content and business information appear legitimate. Overall, the site is professional and trustworthy within its niche.

E

EQUINET s.r.o.

jezdci.cz

46

Jezdci.cz is a Czech media platform specializing in equestrian sports, providing news, event schedules, live streaming information, and community engagement through fan clubs and applications. Operated by EQUINET s.r.o., the website serves a niche audience of equestrian enthusiasts primarily in the Czech Republic. The site demonstrates a solid market position within this specialized media sector, offering advertising opportunities and partnerships with related equestrian media entities. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for UI and media presentation, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and consent management implemented, though there is room for improvement in security headers and explicit policy disclosures. The absence of WHOIS data is a notable concern for domain legitimacy, but the website content and business information appear professional and trustworthy. Overall, the site is a well-maintained media resource with moderate technical maturity and a good user experience.

C

CYBERsicher

transferstelle-cybersicherheit.de

54

CYBERsicher is a German government-related initiative dedicated to enhancing cybersecurity awareness and capabilities among small and medium-sized enterprises (SMEs), startups, and craft businesses. The website serves as a comprehensive platform offering free resources, workshops, events, and emergency support services tailored to the needs of the Mittelstand. It positions itself as a national hub for cybersecurity knowledge transfer and practical assistance, leveraging partnerships and official backing to build trust and reach its target audience effectively. The content is well-maintained, regularly updated, and presented in a professional manner, reflecting a strong commitment to user education and support. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good performance, SEO optimization, and mobile responsiveness. The use of Borlabs Cookie indicates attention to privacy compliance and user consent management. Hosting is provided via rzone.de, and the site employs HTTPS with a solid SSL configuration. Accessibility and navigation are well-implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the security posture is solid but could be improved with additional documentation and security headers. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include publishing dedicated security and incident response policies, adding security headers, and considering a vulnerability disclosure framework. These steps would further strengthen the site's security maturity and user confidence.

S

SPŠ a VOŠ Příbram

spspb.cz

44

SPŠ a VOŠ Příbram is a regional educational institution in the Czech Republic providing secondary technical and higher vocational education. The website targets prospective students, current students, parents, and the general public, offering detailed information about study programs, school events, and virtual tours. The institution maintains an active social media presence and complies with GDPR regulations, including a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery. It uses several plugins for video playback, galleries, and cookie management. The site is mobile-optimized and features good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some security headers and a security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and technical setup indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its educational mission effectively.

L

LAMA PB s.r.o.

lamapb.com

61

LAMA PB s.r.o. is a Czech-based small business specializing in a broad range of construction and related services including height works, painting, locksmith services, arborist and risky tree felling, and equipment rental. The company has a diversified service portfolio and operates primarily in the Příbram, Prague, and Central Bohemia regions. Their website is built on WordPress with common plugins and demonstrates good content quality and user experience. The technical infrastructure is modern with HTTPS and cookie consent mechanisms in place, but lacks some security headers and a visible privacy policy page. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is professional and trustworthy but could improve in privacy and security compliance areas.

C

Carelli

carelli.sk

53

Carelli is a well-established furniture retail company operating primarily in the Czech Republic, with a history dating back to 1994. The company specializes in offering high-quality, designer furniture and interior solutions, targeting consumers who value premium and custom-made home furnishings. Their business model includes showroom sales, online catalog browsing, and delivery and installation services, positioning them as a reputable player in the retail furniture sector. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for interactivity, and advanced tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent for privacy compliance. However, it lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, Carelli's website demonstrates a solid digital presence with good privacy compliance and a trustworthy business profile. Strategic improvements in security headers and transparency around security policies could further enhance their security posture and customer trust.

C

Carelli

carelli.cz

56

Carelli is a well-established Czech retailer specializing in premium design and modern furniture, operating since 1994. The company offers a comprehensive product catalog, showroom experience, and interior design inspiration targeting consumers seeking high-quality furniture solutions. Their market position is that of a reputable medium-sized retail business with a strong online and physical presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit incident response policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for retail businesses. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for customers.

H

HANÁK Centrum

hanak-centrum.cz

59

HANÁK Centrum is a leading Czech manufacturer and retailer specializing in luxury and custom interior furniture, including kitchens, interior doors, wardrobes, living room walls, bedroom furniture, and tables. The company targets consumers in the Czech Republic seeking high-quality, bespoke interior solutions. The website is professionally designed using TYPO3 CMS and integrates modern web technologies such as Bootstrap and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and rich content showcasing products and realizations. However, the absence of WHOIS data and registrant information raises concerns about domain registration transparency. Security posture is moderate with no visible security headers or explicit security policies, and privacy compliance is minimal due to missing privacy and cookie policies. Overall, the website presents a credible business front but would benefit from enhanced transparency and security practices.

M

MARTHI STORE

marthistore.com

43

MARTHI STORE is a specialized retail business focused on interior design products such as branded wallpapers, curtains, blinds, carpets, and furniture, primarily serving customers in the Czech Republic. The company offers custom-made textile decorations and installation services, supported by a physical showroom in Prague. The website reflects a professional and consistent brand presence with comprehensive product information and active social media engagement. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking and marketing. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. However, there is room for improvement in security headers and explicit security policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities in the content. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perception. Privacy policies and cookie management are well implemented, supporting compliance with data protection regulations. Overall, the website presents a solid digital presence for a small retail business in interior design, but should address WHOIS transparency and enhance security best practices to improve trust and compliance.

S

Sport-Eli

sporteli.cz

39

Sporteli is a small family-owned business specializing in sailboat rentals and teambuilding events on the Orlík reservoir in the Czech Republic. Established in 1990, the company offers a fleet of 19 fully equipped vessels and professional crew support, targeting corporate clients and recreational sailors. The website is built on WordPress with modern technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled, but lacks advanced security headers and privacy policies, indicating room for compliance improvements. The absence of WHOIS data raises some concerns about domain legitimacy, though the website content and contact information appear professional and trustworthy. Overall, the site scores well on business credibility and technical implementation but should address privacy and security policy gaps to enhance trust and compliance.

Coworking Příbram z.s. is a small local business providing coworking spaces, meeting rooms, and office rentals in the center of Příbram, Czech Republic. The company targets freelancers, remote workers, and small businesses seeking flexible office solutions with amenities such as fast WiFi, coffee, and 3D printing. Their business model is membership and rental-based with tiered pricing plans and daily access options. The website is professionally designed with clear navigation and relevant content, supporting their market position as a community-focused coworking provider. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and Owl Carousel, with Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or hosting provider details are evident. Security practices are minimal with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Security posture is moderate; HTTPS is assumed but no explicit security headers or privacy policies are present. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the business claims, showing domain registration in 2021, appropriate for a small startup. Contact information is clear and trustworthy, with no suspicious external links or content detected. Overall, the website is functional and professional but lacks critical privacy and security policies. Strategic improvements in security headers, privacy compliance, and incident response readiness are recommended to enhance trust and regulatory adherence.

P

Paliva Větrovský

palivavetrovsky.cz

33

Paliva Větrovský is a small regional business based in the Czech Republic specializing in the sale and delivery of various types of coal and briquettes, primarily serving the Příbram region. The company emphasizes quality fuel products with guaranteed origin and offers both personal pickup and delivery services. The website is built on WordPress using common plugins and frameworks such as Bootstrap and jQuery, with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS and missing security headers, although some basic protections like copy protection scripts are implemented. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy for its business scope but requires significant improvements in security and privacy to meet modern standards.

G

Ghoda s.r.o.

ghoda.cz

42

Ghoda s.r.o. operates a specialized e-commerce platform focused on horse cosmetics, repellents, and feed supplements, primarily serving the Czech Republic market. The company positions itself as a trusted partner for equine care products, offering a curated selection of reputable brands and supporting a partner reseller program. The website demonstrates a solid digital presence with clear business information, active social media links, and customer engagement through newsletters and articles. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, and Google Tag Manager, ensuring responsive design and moderate performance. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR requirements. However, the absence of WHOIS data limits transparency regarding domain registration details. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Advertising and tracking are managed with user consent, balancing marketing needs with privacy. Overall, the website is professional, trustworthy, and well-structured, though improvements in domain transparency and security header implementation are recommended to enhance trust and compliance.

The Fédération Cynologique Internationale (FCI) is a well-established international federation dedicated to the promotion and preservation of pedigree dogs worldwide. It serves a global audience of dog breeders, judges, and enthusiasts by providing breed standards, organizing events, and advocating for canine welfare. The website reflects its authoritative position with comprehensive content, multilingual support, and structured navigation. Technically, the site is built on ASP.NET WebForms with common libraries like jQuery and Bootstrap, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the organization's credibility.

J

Janáčkova akademie múzických umění

jamu.cz

51

Janáčkova akademie múzických umění is a Czech educational institution specializing in music and performing arts. The website serves students, prospective students, alumni, and the general public interested in cultural events and academic programs. It provides information on study programs, creative activities, public events, and student services. The institution appears to be a medium-sized regional academic entity with a consistent brand presence and a professional website design. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, incorporating plugins like NextGEN Gallery and Owl Carousel for enhanced user experience. It uses HTTPS and Google Tag Manager for analytics and tracking. The site is mobile responsive and optimized for SEO, though accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with granular controls, indicating some level of privacy compliance. However, it lacks explicit privacy policy and terms of service pages, security headers, and vulnerability disclosure information. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and trustworthiness. Overall, the website is functional, professional, and safe for general audiences but would benefit from improved transparency in privacy and security policies and clearer contact information to enhance trust and compliance.

S

Střední škola André Citroëna Boskovice, příspěvková organizace

skolaac.cz

49

Střední škola André Citroëna Boskovice is a Czech secondary educational institution offering both maturita (high school leaving exam) and vocational apprenticeship programs. The school targets prospective students and the general public, providing a range of study programs, accommodation, catering, and sports facilities. It maintains partnerships with numerous reputable local and international companies, enhancing practical training opportunities for students. The website is professionally designed, well-structured, and provides comprehensive information about the school, its programs, and services.

Z

Základní škola a gymnázium Navis

zsnavis.cz

53

Základní škola a gymnázium Navis is a Czech educational institution offering preschool, primary, and gymnasium level education with a focus on intellectual, personal, and spiritual development. The school positions itself as a modern, value-based institution founded by families for children, aiming to nurture responsible freedom and comprehensive growth. The website reflects a professional and well-structured digital presence, targeting students, parents, and prospective applicants. Technically, the site uses a modern CMS (Dmp.Cms.Core) and popular JavaScript libraries such as jQuery and Bootstrap, hosted partially on Microsoft Azure Blob Storage for media assets. The site is mobile-optimized and includes standard SEO and accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is safe, professional, and compliant with GDPR, serving its educational mission effectively.

V

Viamédia

avispublicsdebretagne.com

54

Bretagne Marchés Publics is a regional public procurement portal serving Brittany and other regions in France. Operated by Viamédia since 2011, it provides services for public buyers to publish tenders and for companies to consult and respond to public market opportunities. The website is professionally designed, mobile-optimized, and includes modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a concern but does not currently impact the legitimacy of the active and professional website. Overall, the site is a trusted resource for public procurement in its region.

PNORS Technology Group is an Australian-owned enterprise comprising a group of companies that provide integrated and complementary technology-based solutions aimed at helping Australian businesses grow. The company positions itself as a medium-sized technology group with subsidiaries such as Pacific Commerce, WilldooIT, and Netway, focusing on improving business productivity and efficiency through technology. The website is professionally designed using the Odoo CMS platform and incorporates modern web technologies including Google Tag Manager for analytics and tracking. Privacy and cookie policies are implemented with consent mechanisms, reflecting a commitment to user privacy and compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable anomaly that impacts trustworthiness from a domain registration perspective. Overall, the website is safe, professional, and well-structured, targeting Australian businesses seeking technology solutions.

S

Sírius, příspěvková organizace

sirius-opava.cz

56

Sírius, příspěvková organizace, is a Czech non-profit social service provider focused on supporting people with disabilities who cannot live in their natural environment and require assistance. The organization operates primarily in the Moravskoslezský region, offering services such as residential homes for disabled persons, protected housing, respite care, and social-health care. The website reflects a stable regional presence with clear contact information, social media engagement, and partnership with local government entities. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and responsive design principles, ensuring good user experience and accessibility. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy page. Overall, the site is professional, trustworthy, and well-suited to its audience.

J

Jobijoba

jobijoba.com

63

Jobijoba is a French-based job search aggregator that consolidates employment offers from hundreds of different job sites, providing an intelligent search engine to accelerate job seekers' search process. The website targets primarily job seekers in France and offers services such as job alerts, CV management, and salary estimation. The platform is well-positioned in the French employment market with a medium-sized business footprint and consistent branding. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. The site is mobile-optimized and implements good SEO practices. Security-wise, the site enforces HTTPS, uses standard security headers, and offers a cookie consent mechanism, though explicit security and incident response policies are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in contact transparency and security policy disclosures.

V

Viamédia

bretagne-marchespublics.com

53

Bretagne Marchés Publics is a regional public procurement portal serving Brittany and broader France, operated by Viamédia since 2011. The platform facilitates the publication and consultation of public tenders, targeting both public buyers and enterprises. It holds a strong market position as a trusted regional resource with clear business identity and affiliations to reputable media groups. Technically, the website employs modern JavaScript frameworks, consent management via Didomi, and analytics tools like Piano Analytics and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and secure login forms, although explicit security policies and incident response contacts are absent. Privacy compliance is well implemented with GDPR-aligned cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for users, with recommendations to enhance security transparency and accessibility.

S

Salon professionnel medFEL

medfel.com

45

medFEL is a professional trade show and conference organizer specializing in the fruits and vegetables sector, primarily serving the French and international markets. The website promotes the annual event scheduled for April 2025, targeting industry professionals including exhibitors and visitors. The business is well-established, with a domain registered since 2008, indicating maturity and stability in the market. The company provides key services such as event hosting, exhibitor support, and conference programming, positioning itself as a key player in the agricultural trade event space in France.

S

Seafile Ltd.

seafile.com

51

Seafile Ltd. operates a professional website offering an open source, self-hosted file synchronization and sharing platform targeting teams, companies, and organizations globally. The company provides both on-premise and cloud-based solutions with advanced features such as AI-powered file property automation, collaborative document editing, and enterprise-grade security. The website demonstrates a strong market position with over one million users and notable customers including universities and cybersecurity firms. Technically, the site employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with Google Analytics integrated for user tracking. The design is professional, mobile-optimized, and content-rich, supporting a positive user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy but does not detract from the business credibility evidenced by the website content and customer references. Overall, the site is trustworthy and well-maintained but would benefit from enhanced security headers and clearer domain registration transparency.

C

Centrum sociálních služeb Poruba, příspěvková organizace

cssporuba.cz

40

Centrum sociálních služeb Poruba is a Czech public contributory organization established in 2004 by the municipal district of Ostrava-Poruba. It provides a range of social services including care services, day centers, homes for mothers with children, and asylum facilities. The organization targets residents of Ostrava-Poruba and vulnerable populations requiring social support. The website reflects a government-affiliated entity with clear contact information and service descriptions, positioning it as a local social service provider. Technically, the website employs standard and widely used web technologies such as Bootstrap, jQuery, and Flexslider, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, and no analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data is missing, which raises concerns about domain registration transparency, although the website content and business information appear legitimate. No forms or input fields are present on the analyzed page, reducing attack surface but also limiting user interaction. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and compliance posture.

S

Salesiáni Dona Bosca Ostrava

boscoostrava.cz

48

Salesiáni Dona Bosca Ostrava is a local non-profit organization focused on youth and community engagement in Ostrava, Czech Republic. The website serves as an information portal for their activities including youth clubs, workshops for schools, accommodation, and church services. The organization maintains a consistent brand presence with official contact emails and social media channels, supporting community outreach and engagement. Technically, the website is built on WordPress using modern plugins and frameworks such as Bootstrap and Smart Slider 3, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. The absence of WHOIS data limits domain trust verification, but the overall digital footprint and content quality support the legitimacy of the organization. Strategic recommendations include enhancing security headers, publishing a privacy policy, and improving accessibility features to strengthen compliance and trust.

Mikasa.cz is the official Czech Republic representative and retailer of Mikasa sports balls and accessories, specializing in volleyball, beach volleyball, water polo, and basketball equipment. The company, DASSAR s.r.o., has been operating since 2004 and offers products approved by international sports federations including FIVB and WORLD AQUATIC. The website is built on WordPress with WooCommerce, providing an e-commerce platform for direct sales. The technical infrastructure is modern and includes common libraries and frameworks such as jQuery, Bootstrap, and Font Awesome, hosted likely by WEDOS, a Czech hosting provider. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-branded, targeting sports professionals and enthusiasts in the Czech market.

The Kraft Heinz Company website presents a comprehensive corporate presence for one of the world's largest food and beverage manufacturers. The company is positioned as a global leader with a strong portfolio of iconic brands, targeting consumers, investors, suppliers, and job seekers. The website content is professionally structured, providing detailed information about the company, its brands, investor relations, and career opportunities. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and linked official domains appear legitimate. Overall, the site scores well on content quality, technical implementation, and security posture, with room for enhancement in transparency and security disclosures.

A

Association for Comprehensive NeuroTherapy

latitudes.org

47

The Association for Comprehensive NeuroTherapy operates a well-established website focused on natural and integrative approaches to neurological and behavioral problems. The organization targets parents, teachers, and individuals seeking educational resources, offering memberships, digital products, and community forums. The website is positioned as a niche non-profit with a strong content offering and active social media presence. Technically, the site is built on WordPress with a modern theme and plugins, including Bootstrap and jQuery. It is mobile-optimized and SEO-friendly, employing structured data for enhanced search visibility. The hosting provider is not explicitly identified, but the domain is registered with GoDaddy and has a long history dating back to 1997. From a security perspective, the site uses HTTPS and reCAPTCHA, but lacks DNSSEC and explicit security headers, which are recommended for improved protection. No privacy or cookie policies were found, indicating a gap in compliance with privacy regulations such as GDPR. User tracking is moderate via Google Analytics and social sharing tools. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security hardening to better protect users and improve trustworthiness.

C

Capgemini

capgemini.no

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology expertise with deep sector knowledge. The company targets enterprise clients seeking to innovate and transform their business operations digitally. The website reflects a mature digital presence with a professional design, comprehensive content, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern JavaScript frameworks like React, supported by marketing and analytics tools such as Pardot and Google Tag Manager. Security posture is robust, with HTTPS enforced and multiple security headers implemented, alongside clear privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the overall legitimacy of the site. Strategic recommendations include maintaining up-to-date security practices and enhancing incident response visibility.

B

beIN MENA

bein.com

64

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

M

Ma planète BIO

maplanetebio.com

60

Ma planète BIO is a regional event organizer focused on organic agriculture, sustainable living, and related cultural activities in South Alsace, France. The website promotes an annual event held at Parc Expo Mulhouse, targeting enthusiasts and professionals interested in organic farming and eco-friendly lifestyles. The business is relatively new, founded in 2022, and operates primarily in French. The website provides event information, exhibitor details, conference schedules, and visitor guidance, positioning itself as a key regional player in the organic agriculture event space. Technically, the website uses a combination of jQuery, Bootstrap, Owl Carousel, and cookie management via tarteaucitron.js. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is hosted by OVH sas, a reputable hosting provider, and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website presents a professional and trustworthy front for a niche event business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness.

H

HOSTEUR SA

hosteur.com

70

HOSTEUR SA is a Swiss-based technology company specializing in web hosting, domain registration, cloud services, and IT management with over 20 years of experience. The company emphasizes European data sovereignty, operating datacenters exclusively in Europe, and holds multiple ISO certifications (27001, 9001, 14001) that attest to its commitment to security, quality, and environmental responsibility. The website is professionally designed, mobile-optimized, and provides comprehensive service information targeting businesses and individuals seeking secure hosting solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google Fonts, with a cookie consent mechanism implemented via Tarteaucitron. The site is served over HTTPS with no visible security vulnerabilities in the HTML content. However, no explicit HTTP security headers were detected, and no CMS or hosting provider details are disclosed. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, HOSTEUR demonstrates strong compliance with recognized standards through its ISO certifications and cookie consent implementation. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and certifications support legitimacy. No incident response or vulnerability disclosure information is publicly available, indicating an area for improvement. Overall, HOSTEUR presents as a credible and professional hosting provider with a solid security posture and compliance focus. Strategic recommendations include enhancing transparency around incident response, publishing vulnerability disclosure policies, implementing additional security headers, and clarifying domain registration details to improve trust and compliance further.

C

Culligan Storkök AB

3s.nu

55

Culligan Storkök AB operates as a leading Swedish provider of commercial kitchen solutions, offering comprehensive services from planning and design to installation and maintenance. With over 30 years of industry experience and a nationwide service network, the company targets professional kitchens including restaurants, cafes, and schools. The website reflects a mature digital presence with professional branding, clear service offerings, and strong customer engagement channels. Technically, the site is built on WordPress with modern frameworks and integrates advanced analytics and marketing tools while maintaining GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the site demonstrates high professionalism and trustworthiness, supporting Culligan Storkök's market position as a reliable B2B partner in the hospitality sector.

D

DTScout

dtscout.com

61

DTScout is a small technology company based in Israel specializing in audience discovery and data aggregation for marketers and publishers. Their platform aggregates large-scale audience data to enable targeted advertising and improved monetization for publishers. The website demonstrates a professional design with clear navigation and a strong emphasis on privacy compliance, including opt-out mechanisms and user data request forms. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates analytics and advertising tools like Google Analytics and AdRoll. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trust. Security practices are moderate with room for improvement in headers and incident response transparency. Overall, the site is functional and business-focused but requires domain registration verification and enhanced security policies to improve credibility.

G

GIC

gic.si

43

GIC is a well-established Slovenian construction company specializing in a wide range of building and infrastructure services, including industrial, commercial, and residential projects. With over 33 years of experience and more than 1000 completed projects, they maintain a strong market position as experts in their field. Their integrated business model includes in-house laboratories, concrete plants, and quarries, enabling comprehensive project management and execution. The website reflects a professional and modern digital presence, leveraging technologies such as Bootstrap, Leaflet, and Google Tag Manager for analytics and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

G

GELD DATA d.o.o.

geld.hr

54

GELD DATA d.o.o. is a Croatian ICT company specializing in software development, data collection, validation, and IT services, founded in 1992. The company positions itself as a regional player with expertise in business data analytics, GDPR compliance support, and virtual expertise services. Their website reflects a professional business focus targeting companies needing accurate and verified business data, particularly in the EU market. Technically, the site is built on Bitrix24 CMS with Bootstrap and integrates Facebook Pixel for marketing analytics. The site is mobile-optimized and well-structured, though some accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response information to strengthen trust and security culture.

D

DOBA Fakultet

doba.hr

45

DOBA Fakultet is a private, internationally accredited online higher education institution based in Slovenia, offering bachelor, master, and doctoral programs fully online. The institution targets students and working professionals seeking flexible and modern education aligned with EU standards and global trends such as sustainability and digitalization. The website demonstrates a mature digital presence with a modern tech stack including jQuery, Bootstrap, and various UI libraries, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security policies and incident response information are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a reputable educational business with a strong market position in online education in the region.

S

Sinklar Conference Management B.V.

wco-iof-esceo.org

10

The website www.wco-iof-esceo.org represents the 26th World Congress on Osteoporosis, Osteoarthritis and Musculoskeletal Diseases, a globally recognized clinical congress organized by reputable healthcare organizations IOF and ESCEO. The event targets healthcare professionals and researchers in musculoskeletal health, offering a comprehensive scientific program and various engagement opportunities such as abstract submissions and awards. The site is professionally designed using Drupal 10, with good mobile optimization and accessibility features. It includes GDPR-compliant cookie consent mechanisms and clear contact information, enhancing user trust and compliance. However, the absence of WHOIS data limits domain trust assessment, and security headers are not detected, suggesting room for security improvements.

I

International Osteoporosis Foundation

fundamentals-osteoporosis.org

10

The Fundamentals of Osteoporosis website is operated by the International Osteoporosis Foundation, a reputable non-profit organization based in Switzerland. The site offers specialized educational courses aimed at healthcare professionals to enhance their knowledge and clinical skills in osteoporosis diagnosis and management. The business model centers on providing training and certification, positioning itself as a key resource in osteoporosis education globally. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome for a responsive and accessible user experience. The site includes a cookie consent mechanism compliant with GDPR standards and integrates Google Tag Manager for analytics. Performance and SEO optimizations are moderate to good, with clear navigation and mobile responsiveness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers in the provided HTML. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which limits domain trust verification; however, the website content and branding strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained platform for osteoporosis education. Strategic improvements in security headers and WHOIS transparency could further enhance trust and compliance.

D

Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V.

dezim-institut.de

53

The Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V. is a German non-profit research institute specializing in integration, migration, discrimination, and racism studies. The website serves as a professional platform to disseminate research findings, publications, and event information targeting academics, policymakers, and practitioners. The institute is funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, indicating strong institutional backing and credibility. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, and it integrates accessibility tools such as ReadSpeaker webReader. The site is well-optimized for mobile and SEO, with a clear navigation structure and professional design. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented with Matomo analytics configured for privacy. However, additional security headers and explicit security policies could enhance the security posture. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

Y

Young Entrepreneurs in Science

youngentrepreneursinscience.com

10

Young Entrepreneurs in Science (YES) is a well-established non-profit educational program based in Germany, focused on equipping master’s students, doctoral candidates, and postdocs with entrepreneurial skills through free workshops and training programs. Supported by government ministries and business partners, YES aims to foster a cultural shift in science towards entrepreneurship and innovation. The website reflects a professional and consistent brand presence with clear messaging and a strong partnership ecosystem, including the Falling Walls Foundation as a parent organization. Technically, the site is built on WordPress with modern technologies and integrates multiple analytics and marketing tools, though it lacks a cookie consent mechanism and some security headers. Security posture is generally good with HTTPS and no exposed sensitive data, but could be improved by adding security policies and incident response contacts. Overall, the website is trustworthy, well-designed, and serves its target audience effectively.

P

PraneKilimi.bg

pranekilimi.bg

51

PraneKilimi.bg is a small local Bulgarian business specializing in professional carpet and textile cleaning services in Sofia. The company offers a range of services including washing carpets, rugs, mats, blankets, and other textiles with free pickup and delivery within Sofia. The website demonstrates a solid market position with over 10 years of experience and a loyal customer base including institutions. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible cookie consent mechanism and only a basic privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.

П

Политическа партия Русофили за възраждане на Отечеството

ppvo.bg

43

The website represents a Bulgarian political party named "Политическа партия Русофили за възраждане на Отечеството" focused on Russian-Bulgarian relations and patriotic themes. It serves as an information and advocacy platform with regular content updates, news, and partner affiliations. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted likely by SuperHosting.BG. The design is professional and mobile-optimized, providing a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though some security best practices like CSP headers and security.txt are missing. Privacy compliance is partial with a GDPR-compliant privacy policy but lacking cookie consent mechanisms. WHOIS data is limited due to GDPR but domain status and nameservers indicate legitimacy. Overall, the site is functional, trustworthy, and serves its political advocacy purpose effectively.

B

Bundesverband professioneller Bildanbieter e.V.

bvpa.org

63

The Bundesverband professioneller Bildanbieter e.V. (BVPA) is a well-established non-profit association founded in 1970, representing professional image providers and related service companies primarily in Germany and Europe. The organization offers key services including interest representation, legal advice, networking events, publications on image usage fees, and training seminars. The website reflects a professional and consistent brand presence targeting industry professionals and stakeholders in the media and photography sectors. Technically, the site is built on a modern WordPress platform with WooCommerce and CherryFramework, hosted likely by IONOS SE, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate online presence.