Security Directory

B

BK Instal

bk-instal.cz

38

BK Instal is a small Czech Republic-based company specializing in photovoltaic power plant projects, installations, servicing, and energy savings solutions. The website presents a professional and modern approach to energy solutions, targeting owners and operators of photovoltaic systems and energy-conscious consumers. The company positions itself as a regional energy service provider with a focus on sustainable energy savings. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and privacy compliance mechanisms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website is functional and professional but would benefit from improved privacy compliance and verified domain registration information.

O

Opravdový vztah s.r.o.

opravdovyvztah.cz

67

Opravdový vztah s.r.o. operates a professionally designed website focused on relationship coaching, therapy, and personal development services primarily targeting individuals and couples in the Czech Republic. The company offers a range of services including therapy, coaching, couples therapy, educational materials, podcasts, and an e-shop. The website positions itself as a leading and highly rated project in its niche. Technically, the site is built on WordPress with WooCommerce for e-commerce functionality, leveraging modern JavaScript libraries and third-party analytics and marketing tools such as Google Analytics, TikTok Pixel, and Facebook Pixel. The site is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not confirmed. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the site is safe, compliant with GDPR, and professionally maintained.

G

Galaxy Digital LLC

galaxydigital.com

67

Galaxy Digital LLC operates the website galaxydigital.com, offering a comprehensive volunteer management software solution called Get Connected. The company targets non-profit organizations and mission-driven groups primarily in the United States and Canada. Their software facilitates volunteer recruitment, engagement, scheduling, tracking, and reporting, positioning them as a leading provider in the volunteer management SaaS market. The website is professionally designed, well-structured, and rich in content, reflecting a mature digital presence. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. The site employs HTTPS with strong security headers, ensuring secure communications and good security posture. Forms are integrated via HubSpot, providing secure data collection mechanisms. The website is mobile-optimized and accessible, with good SEO practices. Security-wise, the site demonstrates solid fundamentals with HTTPS enforcement and security headers. However, it lacks publicly available security policies, incident response plans, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate and professional. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic recommendations include publishing explicit security and incident response policies, clarifying domain registration details, and enhancing privacy transparency to further strengthen trust and compliance.

N

NBCF Shop

nbcfshop.com

66

NBCF Shop is an e-commerce platform dedicated to selling merchandise that supports the National Breast Cancer Foundation's mission of breast cancer awareness, education, and support. The website offers a variety of products including apparel, accessories, HOPE Kits, and educational materials. It targets a general audience interested in supporting breast cancer causes through purchases. The business operates on Shopify, leveraging a mature e-commerce infrastructure with integrations for marketing and customer reviews. The domain is well-established since 2013, consistent with the organization's history and mission. Technically, the site uses modern web technologies and is mobile-optimized, though some improvements in privacy policy transparency and DNS security could be made. Security posture is solid with HTTPS and domain locking, but lacks DNSSEC and explicit security headers. Overall, the site is professional, trustworthy, and serves a niche non-profit retail market effectively.

F

Flatiron School

flatironschool.com

69

Flatiron School is a well-established coding bootcamp founded in 2012, offering comprehensive on-campus and online courses in software engineering, data science, cybersecurity, AI, and game design. The company targets individuals seeking career advancement in technology fields and maintains a strong market position with over 20,000 alumni and partnerships with major tech companies. The website reflects a professional and modern digital presence with excellent content quality and user experience. Technically, the website is built on WordPress hosted likely on AWS infrastructure, utilizing a broad range of modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, TikTok Pixel, Marketo, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and domain registration protections in place, but could be improved by enabling DNSSEC and publishing explicit security policies. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is strong with visible cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high with clear contact information, structured data, and trust indicators such as alumni network size and corporate partnerships. No adult or questionable content is present, making the site safe for general audiences. Overall, Flatiron School’s website demonstrates a mature digital infrastructure supporting its educational mission, with room for minor security enhancements. The domain registration data aligns well with the company’s history, reinforcing legitimacy and trustworthiness.

V

vFairs

vfairs.com

74

vFairs operates a comprehensive event management platform specializing in hybrid, in-person, and virtual events. The company offers a broad suite of services including event registration, ticketing, mobile apps, virtual event hosting, and engagement tools such as gamification and networking. Their market position is strong, supported by a large user base and high customer satisfaction ratings. Technically, the website is built on WordPress with modern integrations for analytics, marketing, and multilingual support, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy.

V

VOŠ a SPŠ Děčín

prumkadc.cz

53

VOŠ a SPŠ Děčín is a Czech educational institution providing higher vocational and secondary industrial education in mechanical engineering, construction, and transport. The website serves students, prospective students, and educational partners with detailed information about courses, accommodation, seminars, and extracurricular activities. The institution holds a regional position in the Ústecký kraj area. Technically, the website is built on WordPress with Elementor and includes modern tracking and marketing tools such as Google Tag Manager and Facebook Pixel, integrated with a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of institution. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

A

ART ECON

artecon.cz

38

ART ECON is a Czech-based educational organization with a website focused on promoting educational services or institutions, as indicated by the slogan 'Školy plné talentu'. The site uses WordPress CMS with the Divi theme and includes common tracking technologies such as Facebook Pixel, Microsoft Clarity, and Google Tag Manager. The technical infrastructure is moderate with basic mobile optimization and SEO practices. However, the site lacks critical privacy and security policies, contact information, and security headers, which lowers its overall security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

A

ARSY line, s.r.o.

webproskoly.cz

57

ARSY line, s.r.o. operates the website www.webproskoly.cz, providing specialized web hosting and content management solutions tailored for Czech primary and kindergarten schools. The company offers a subscription-based model with no upfront investment, focusing on modern, accessible, and legislatively compliant web platforms. Their services include modules for photo galleries, news updates, event calendars, and integration with school meal systems, targeting educational institutions in the Czech Republic. The website demonstrates a professional and consistent brand presence with strong customer testimonials and clear contact information. Technically, the site employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, and proprietary CMS components. It is optimized for mobile devices and accessibility, with good SEO practices and performance. The site uses HTTPS and consent-based cookie management, reflecting a good security posture, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with HTTPS enforcement and CAPTCHA on forms, but lacks explicit published security policies or incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional. Overall, the website is a well-executed niche educational service platform with good technical and security practices, though improvements in transparency around security policies and WHOIS data availability would enhance trust and compliance.

I

Integrovaná střední škola Hodonín

issho.cz

57

The website www.issho.cz represents Integrovaná střední škola Hodonín, a regional educational institution in the Czech Republic offering vocational and maturitní secondary education along with adult lifelong learning programs. The site provides comprehensive information about study programs, school news, and community activities, targeting students, prospective students, and adult learners. The business model is focused on education and collaboration with private companies for student placement. Technically, the website is built on the CalmCube2 CMS platform, utilizing jQuery, Colorbox, Google Fonts, and Facebook Pixel for tracking. The site is served over HTTPS with a cookie consent mechanism in place, indicating GDPR compliance awareness. The design is professional with good navigation and content relevance, though mobile optimization and accessibility are basic. From a security perspective, the site lacks explicit security headers and detailed privacy or security policies. No WHOIS data was retrievable, which impacts trustworthiness but the website content and domain usage suggest legitimacy. Tracking via Facebook Pixel and imedia.cz retargeting is present, with moderate user tracking levels. No vulnerabilities or critical security issues were detected in the content. Overall, the site scores moderately high on content quality and technical implementation but has room for improvement in security posture and privacy transparency. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and providing clear contact information for incident response and data protection officers.

D

DigiLabs Software, s.r.o.

zsdidaktis.cz

55

ZŠ DidaSmart is a private primary school located in Brno, Czech Republic, specializing in education for gifted children with an individualized approach. The school emphasizes talent development and preparation for gymnasium entrance exams, boasting over 10 years of successful teaching experience and ranking in the top 10% of Czech primary schools based on SCIO test results. The website is professionally designed, mobile-optimized, and rich in relevant content targeting parents and prospective students. Technically, the site uses modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing, and is built on a Nette-based CMS framework. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing. Privacy and cookie policies are present, indicating GDPR compliance, but explicit cookie consent mechanisms could be improved. Contact information is comprehensive, including email, phone, physical address, and a contact form. WHOIS data is unavailable, which reduces domain trustworthiness despite the professional presentation. Overall, the website demonstrates a strong business presence with good technical and security practices, suitable for its educational mission.

S

Střední škola grafická Brno, p.o.

ssgbrno.cz

63

Střední škola grafická Brno, p.o. is a specialized secondary educational institution located in Brno, Czech Republic, focusing on graphic arts, printing, bookbinding, and packaging design. The school offers modern equipment and training programs aimed at students interested in these creative and technical fields. The website serves prospective students, current students, parents, and the public with comprehensive information about study programs, admissions, school news, and events. The institution holds a solid regional position as a reputable educational provider in its niche. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery, Typed.js, and various analytics and tracking tools including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is hosted with a Czech registrar and uses Cloudflare DNS services, ensuring good performance and security. The site is mobile-optimized and accessible, with structured data enhancing SEO and user experience. From a security perspective, the website enforces HTTPS, includes essential security headers, and uses security plugins like Wordfence. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance and user trust. Cookie consent mechanisms are implemented, indicating some level of privacy awareness. Overall, the website is professional, trustworthy, and well-maintained, with a strong business credibility score. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contact information, and maintaining regular security audits to ensure ongoing compliance and protection.

R

Ringhotels

ringhotels.de

58

Ringhotels is a German hospitality business specializing in hotel bookings, wellness weekends, and conference hosting across Germany. The website targets travelers seeking authentic HeimatGenuss experiences and offers a professional platform for vacation planning. Technically, the site employs modern JavaScript frameworks, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and uses Cookiebot for cookie consent management. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and terms of service pages in the provided content. Security posture is adequate with HTTPS and cookie consent but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

H

HelloWork

magnet.work

57

Magnet.work is a French B2B technology website offering a career site solution developed by HelloWork. The platform targets recruiters and companies aiming to enhance their employer branding and candidate experience through a turnkey career site integrated with ATS and advanced job matching algorithms. The website is professionally designed using HubSpot CMS, featuring video content, client testimonials, and a clear call to action for demos and contact. Technically, the site employs modern web technologies, robust SSL configuration, and multiple marketing and analytics tools, including Facebook Pixel, LinkedIn Insight, and Google Tag Manager. Consent management is implemented via Axeptio, supporting GDPR compliance. However, explicit privacy and terms of service pages are not found, and direct contact emails or phone numbers are absent, which slightly impacts privacy compliance and business credibility scores. The WHOIS data is consistent with the business claims, showing no privacy protection and appropriate domain age. Overall, the site demonstrates a strong market position in the recruitment technology sector with good security posture and digital maturity.

H

Hellowork

stori.work

58

Stori by Hellowork is a French technology company specializing in recruitment marketing solutions that leverage social media platforms to optimize hiring processes. Their service focuses on creating impactful visual content targeted at specific audiences on popular social networks, aiming to increase qualified job applications. The website is professionally designed, hosted on HubSpot CMS, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Piano Analytics. While the site lacks explicit privacy and terms of service pages, it implements a cookie consent mechanism via Axeptio, indicating a baseline GDPR compliance effort. Contact is primarily facilitated through a dedicated contact form, with no direct email or phone contacts visible on the main site. The WHOIS data confirms the domain's legitimacy and consistency with the business identity, reinforcing trustworthiness.

H

Hellowork

basile.io

58

Basile by Hellowork is a French technology company offering a SaaS platform focused on recruitment optimization through cooptation and internal mobility. The website targets recruiters and HR professionals seeking efficient talent acquisition solutions. The platform is positioned as a trusted recruitment tool with a solid client base and partner ecosystem. Technically, the site is built on HubSpot CMS with modern marketing and analytics integrations, including Google Tag Manager, Facebook Pixel, and Axeptio for consent management. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not published. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in transparency and security documentation.

S

Salon professionnel medFEL

medfel.com

45

medFEL is a professional trade show and conference organizer specializing in the fruits and vegetables sector, primarily serving the French and international markets. The website promotes the annual event scheduled for April 2025, targeting industry professionals including exhibitors and visitors. The business is well-established, with a domain registered since 2008, indicating maturity and stability in the market. The company provides key services such as event hosting, exhibitor support, and conference programming, positioning itself as a key player in the agricultural trade event space in France.

N

Personlige Navneskilt, Høydemålere & Strikketilbehør i Tre – Håndlaget i Norge

nostenett.no

61

Nøstenett.no is a Norwegian e-commerce website specializing in handcrafted wooden products such as personalized nameplates, height charts, and knitting accessories. The business targets a general audience interested in personalized gifts and craft supplies, positioning itself as a niche artisan retailer within Norway. The website demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and customer chat integration. Security measures include CSRF token implementation in forms, but lack explicit security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the site appears legitimate and functional with a good user experience and mobile optimization, but would benefit from enhanced transparency and security practices.

V

Vinofil Vinkurs

vinforedrag.no

52

Vinofil Vinkurs is a Norwegian small business specializing in wine education through in-person and digital courses, targeting both corporate and private clients. The website presents a professional and consistent brand image with clear offerings such as wine courses at workplaces, private homes, and gift cards. The business is newly established in 2023, and the domain registration aligns with this timeline. The site leverages modern web technologies and analytics tools but lacks critical privacy and security disclosures, which impacts compliance and trustworthiness. No blocking or WAF mechanisms hinder content access, allowing full analysis.

G

Gutta på Haugen

gutta.no

59

Gutta på Haugen is a well-established Norwegian gourmet food retailer, operating both a physical delicatessen store in Oslo and an e-commerce platform serving customers across Norway. The website reflects a mature business with a focus on quality food products and a loyal customer base. Their digital infrastructure includes modern tracking and marketing tools, with a CMS platform customized for retail needs. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Privacy policies and cookie consent mechanisms are present and localized in Norwegian, supporting GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, with moderate technical performance and good mobile optimization.

B

beIN MENA

bein.com

64

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

U

Uhelný mlýn

uhelnymlyn.cz

40

Uhelný mlýn is a Czech Republic-based small business operating a multifunctional event space, contemporary art gallery, and design loft. The website presents the business as a local cultural venue with a focus on events and art exhibitions. The digital infrastructure is built on WordPress with integration of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is professional and functional, but could improve transparency and security documentation.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

J

Journées d'Octobre

journees-octobre.fr

46

Journées d'Octobre is a regional event organizer based in Mulhouse, France, specializing in hosting an annual artisan and creator fair alongside the Folie'Flore floral show. The event attracts a large audience and features numerous exhibitors, restaurants, and entertainment stages, positioning itself as a key cultural and commercial event in the Alsace region. The website effectively promotes the event with detailed information, imagery, and structured data for enhanced search engine visibility. Technically, the site uses modern JavaScript libraries like jQuery, integrates Google Analytics and Facebook Pixel for marketing, and employs HTTPS with a valid SSL certificate, ensuring secure user connections. However, the absence of explicit security headers and limited contact information slightly reduce the security posture. The WHOIS data is unavailable, which is common for .fr domains but reduces transparency. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security policies and contact transparency.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

R

Redback Solutions

rb.com.au

55

Redback Solutions is a well-established digital marketing and web design agency based in Newcastle, Australia, operating since 1999. The company offers a comprehensive range of services including web design and development, ecommerce solutions, SEO, digital marketing, and creative content production. Their market position is strong, supported by multiple industry partnerships and awards such as the 2025 Australian Web Awards. The website reflects a professional and trustworthy digital presence targeting businesses seeking digital growth and online results. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and live chat services, demonstrating a mature digital infrastructure. Performance and mobile optimization are good, with SEO best practices well implemented. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and credible with room for improvement in privacy and security transparency.

C

ChatVusyon | Der einfache KI-Chatbot für deine Webseite

chatvusyon.ai

61

ChatVusyon.ai is a small technology company offering an AI chatbot solution designed to enhance website customer support, lead generation, and ensure GDPR compliance. The website is professionally designed using modern tools such as Framer and integrates multiple third-party analytics and marketing technologies including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag. While the technical infrastructure is modern and the website is mobile optimized with good SEO practices, there are notable gaps in privacy compliance and security best practices. No privacy or cookie policies are present, and no contact information or security policies are published, which may impact user trust and regulatory compliance. The domain registration uses privacy protection, which is common for startups but reduces transparency. Overall, the website presents a functional and professional front but requires improvements in privacy, security headers, and contact transparency to enhance trust and compliance.

I

Intra Lighting

intra-lighting.com

10

Intra Lighting is a globally recognized provider of architectural luminaires and smart lighting solutions, positioning itself as a significant player in the lighting market. The company targets professional audiences such as architects, lighting designers, and commercial clients, offering B2B manufacturing and distribution services. The website reflects a professional and consistent brand image with multi-language support, enhancing its global reach. Technically, the site leverages a mature technology stack including DotNetNuke CMS and AngularJS, integrated with modern analytics and marketing tools managed through Google Tag Manager. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements in security headers and accessibility could be made. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the website's professional presentation and compliance features suggest a trustworthy business. Overall, the site demonstrates good digital maturity and business credibility with moderate technical and security robustness.

G

GELD DATA d.o.o.

geld.hr

54

GELD DATA d.o.o. is a Croatian ICT company specializing in software development, data collection, validation, and IT services, founded in 1992. The company positions itself as a regional player with expertise in business data analytics, GDPR compliance support, and virtual expertise services. Their website reflects a professional business focus targeting companies needing accurate and verified business data, particularly in the EU market. Technically, the site is built on Bitrix24 CMS with Bootstrap and integrates Facebook Pixel for marketing analytics. The site is mobile-optimized and well-structured, though some accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response information to strengthen trust and security culture.

F

Fragmat

fragmat.eu

54

Fragmat is a medium-sized manufacturing company specializing in insulation solutions for modern construction and related industries. The company holds a leading market position in Slovenia and is recognized across Europe for its high-quality thermal insulation, waterproofing, radiant heating, and packaging products. The website reflects a professional business with clear product offerings and references to significant projects, targeting construction professionals and industry clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but security headers and explicit security policies are absent. The domain WHOIS data is privacy protected by EURid, which is typical for European domains and justified for this business type. No suspicious patterns were found. Contact information is transparent and consistent with the company brand. Privacy and cookie policies are present and indicate GDPR compliance. Overall, Fragmat's digital presence is solid, supporting its business credibility and market position. Security and privacy practices are adequate but could be enhanced with additional policies and technical controls.

F

Falling Walls Foundation

berlinscienceweek.com

65

Berlin Science Week is a well-established annual science and culture festival organized by the Falling Walls Foundation, showcasing hundreds of free events across Berlin. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. It targets a broad audience including researchers, students, and the general public interested in science. The technical infrastructure is modern, leveraging Drupal 10 CMS, Bootstrap, and various analytics and consent management tools. Security posture is good with HTTPS enabled and consent mechanisms in place, though some security headers could be improved. The domain is long-standing and consistent with the organization's history, enhancing trustworthiness. Overall, the website demonstrates strong compliance with privacy regulations and offers a rich user experience.

П

ПАШОВИ КАРС ООД

pashovcars.com

57

Pashov Cars is a Bulgarian company specializing in the sale of high-quality used cars sourced from Europe, the USA, and Canada. The company offers a comprehensive range of services including free consultations, preferential leasing and credit terms, vehicle registration assistance, insurance services, and professional car servicing. Positioned as a trusted partner in the Bulgarian used car market, Pashov Cars targets individual and business customers seeking reliable automotive solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is built on a custom e-commerce solution by Valival Commerce, with moderate performance and good SEO practices. Security posture is solid with HTTPS enabled and domain transfer protections, though some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the security posture is adequate for the business size, with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance standards.

E

Elinor.bg

elinor.bg

50

Elinor.bg is a Bulgarian e-commerce website specializing in the sale of perfumes, cosmetics, and makeup products. The site targets a general audience interested in beauty products and offers a large catalog with over 30,000 items. The business model is retail-focused, leveraging online sales channels to reach customers primarily in Bulgaria. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Criteo, and SendPulse, indicating a mature digital marketing infrastructure. Mobile optimization and SEO practices are adequately implemented, contributing to a positive user experience.

A

Alaya Tsanova

alayaart.com

53

Alaya Tsanova operates an online art gallery and e-commerce platform specializing in original artworks, prints, jewelry, and related artistic products. The website targets art enthusiasts and collectors, primarily in Bulgaria but accessible internationally. The business model focuses on direct sales through WooCommerce integrated into a WordPress site, supplemented by exhibition events and custom orders. The site demonstrates a consistent brand presence with clear navigation and professional design. Technically, the website leverages modern WordPress technologies including Elementor for page building, WooCommerce for e-commerce, and NitroPack for performance optimization. It integrates analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital marketing approach. The site is mobile-optimized and performs well with good SEO practices. From a security perspective, the site enforces HTTPS and includes standard security headers, cookie consent mechanisms, and privacy policies aligned with GDPR. However, there is a lack of explicit security policy, incident response contacts, and vulnerability disclosure information. The absence of WHOIS domain registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the website is professional and trustworthy in content and presentation but would benefit from enhanced transparency in domain registration and contact information to improve business credibility and security posture.

S

Simple Plan Foundation

simpleplanfoundation.org

59

The Simple Plan Foundation website represents a small non-profit organization established in 2005 by the band Simple Plan to support young people in need and victims of life-threatening illnesses. The foundation operates primarily in Canada and targets youth and charitable supporters. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good design quality and clear navigation, though it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with HTTPS and HSTS enabled, but additional security headers could enhance protection. The absence of public WHOIS data suggests privacy protection, which is reasonable for a non-profit entity. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

B

Band T-Shirts

bandtshirts.com.au

60

Band T-Shirts is an Australian e-commerce retailer specializing in official licensed band merchandise including T-shirts, hoodies, vinyl, and other music-related products. The website is professionally designed with a clear focus on music fans seeking authentic merchandise from a wide range of artists. The business operates under LP/ATM Pty Ltd, part of the Mushroom Group, indicating a solid market position within the music merchandising niche. The site demonstrates a commitment to sustainability through carbon neutral shipping partnerships. Technically, the website uses modern JavaScript libraries and tracking tools, hosted likely on AWS infrastructure, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and secure payment integrations, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable due to privacy protection, limiting full domain trust analysis.

A

Alzheimer Schweiz

alzheimer-schweiz.ch

53

Alzheimer Schweiz is a well-established Swiss non-profit organization dedicated to supporting people affected by dementia and Alzheimer’s disease. The organization provides comprehensive information, advice, support services, and community engagement platforms tailored to patients, families, healthcare professionals, and interested parties. It operates nationally with regional sections covering all Swiss cantons, demonstrating broad reach and local presence. The website is professionally designed, content-rich, and highly user-friendly, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some advanced security headers and explicit security policies are not publicly disclosed. From a security and compliance perspective, the site shows good GDPR compliance with clear privacy and cookie policies. Contact information is transparent and complete, enhancing trust. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the organization's identity, supporting legitimacy. Overall, Alzheimer Schweiz presents a trustworthy, professional, and well-managed online presence suitable for its healthcare and non-profit mission. Strategic improvements could include publishing explicit security policies, incident response information, and enhancing HTTP security headers to further strengthen security posture.

R

Reformierte Kirche Kanton Luzern

reflu.ch

62

The website www.reflu.ch serves as the official online presence of the Reformed Church of the Canton of Luzern, Switzerland. It provides information about church services, pastoral care, community events, and regional church congregations. The site targets local German-speaking community members seeking spiritual support and church-related activities. The business model is non-profit and government-affiliated, focusing on community and religious services. The website is well-branded and consistent with the church's identity, featuring event calendars and news updates that demonstrate active engagement with its audience. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates tracking pixels from TikTok, Facebook, and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and explicit incident response contacts reduces the overall security maturity. From a security and compliance perspective, the site does not present critical vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's claims, showing consistent registrant information appropriate for a regional church organization. No WAF or blocking mechanisms were detected, allowing full content access. The site does not contain any adult or NSFW content, making it safe for general audiences. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy compliance measures and improved security headers. Adding clear contact information for security incidents and a vulnerability disclosure policy would further strengthen trust and compliance.

S

Swiss Athletics

swiss-athletics.ch

57

Swiss Athletics is the official national federation for athletics in Switzerland, focusing on promoting elite sports, youth development, and broad participation. The organization operates a comprehensive website offering event registration, licensing, athlete support, coaching education, and competition results. The site targets athletes, coaches, officials, and athletics enthusiasts within Switzerland. Technically, the website is built on WordPress with modern plugins and integrates Google advertising and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are lacking. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use, supporting the federation's mission effectively.

P

Portes Ouvertes Suisse

portesouvertes.ch

66

Portes Ouvertes Suisse is a well-established Swiss non-profit organization dedicated to supporting persecuted Christians worldwide since 1955. The website serves as a comprehensive portal for information, prayer campaigns, donation facilitation, and awareness raising, primarily targeting French-speaking audiences. It maintains a strong market position within the non-profit sector focused on religious freedom and humanitarian aid. Technically, the site leverages modern frameworks such as Bootstrap and Microsoft PowerApps Portal, integrating multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The hosting and telemetry suggest a robust Microsoft Azure infrastructure. Security posture is solid with HTTPS enforcement, security headers, and consent management, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates good digital maturity, professional design, and trustworthy content aligned with its mission.

G

Give

give.do

10

Give.do is an online donation platform focused on facilitating donations to verified NGOs and social causes primarily in India. The platform offers monthly giving missions, gift cards, and supports fundraisers, positioning itself as a trusted and leading donation platform in the Indian non-profit sector. The website demonstrates a modern technical infrastructure using React and Next.js, hosted on AWS, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and CleverTap. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the platform is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

5

5HALLS HOMMAGE HOTELS GmbH

hommage-hotels.com

53

Hommage Luxury Hotels Collection operates a portfolio of premium luxury hotels across Germany and Austria, targeting affluent travelers seeking exclusive hospitality experiences. The company emphasizes tradition, high-quality service, and unique luxury moments, positioning itself strongly in the luxury hospitality market. The website reflects a professional and consistent brand image with comprehensive content about their hotels, services, and offers. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with GDPR-compliant consent management. Security posture is good with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy. Strategic recommendations include enhancing security headers and publishing incident response policies to further strengthen trust and compliance.

C

Costa Navarino

costanavarino.com

70

Costa Navarino is a premier luxury hospitality and real estate destination located in Messinia, Greece. The website showcases multiple 5-star resorts, golf courses, spa centers, and real estate offerings, positioning itself as a sustainable and authentic Mediterranean travel experience. The business is part of TEMES S.A., a known entity in the hospitality sector. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data for the domain is a notable concern, requiring further verification. Overall, the site is professional, trustworthy, and targets affluent travelers and investors seeking luxury and sustainability.

E

ELITE Electro-Partner

electro-partner.ch

51

ELITE Electro-Partner operates a large network of electrical professionals serving Switzerland and Liechtenstein, positioning itself as a key player in the energy services sector. The website presents a professional image with clear branding and a focus on electrical services, targeting both consumers and businesses in the region. The business model centers on a broad partnership network providing electrical installation, maintenance, and repair services. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance documentation. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and incident response information. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced transparency and security best practices.

B

Bauhaus-Archiv GmbH

bauhaus-shop.de

70

Bauhaus-Shop is an e-commerce platform operated by Bauhaus-Archiv GmbH, offering design products associated with the Bauhaus-Archiv Museum in Berlin. The website targets general consumers interested in Bauhaus design merchandise, positioning itself as a niche cultural museum shop. The business model focuses on online retail through a Shopify-based storefront, leveraging Shopify's infrastructure and payment systems. The site is professionally branded and consistent with the museum's identity, providing a good user experience and clear navigation.

E

Ekō

eko.org

56

Ekō is a global non-profit organization dedicated to holding corporations accountable for their environmental, social, and democratic responsibilities. The website serves as a platform for community engagement, campaigns, petitions, and donations, targeting a worldwide audience of activists, consumers, workers, and investors. The organization positions itself as a watchdog against corporate misconduct with a strong emphasis on sustainability and social justice. Technically, the website employs a modern JavaScript stack including analytics and tracking tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Mouseflow. The site is mobile-optimized, accessible, and uses HTTPS for secure communications. However, there is room for improvement in security headers and explicit cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site demonstrates good practices with secure forms and no visible vulnerabilities. The absence of WHOIS data due to privacy protection is common for non-profits but slightly reduces trust signals. No security policy or incident response information is publicly available, which could be improved to bolster transparency and readiness. Overall, Ekō's website is professional, trustworthy, and well-designed, effectively supporting its mission. Strategic recommendations include implementing security headers, publishing a security policy, enhancing cookie consent, and improving WHOIS transparency where possible to strengthen trust and compliance.

A

ActionAid India

actionaidindia.org

51

ActionAid India is a well-established non-profit organization operating since 1972, focusing on children’s education, women’s rights, ecological justice, and humanitarian aid across India. The website reflects a mature NGO with a broad presence, multiple partnerships, and a strong social media footprint. Their business model relies on donations, sponsorships, and corporate partnerships. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Bootstrap, jQuery, and various analytics and marketing tools. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is generally good with HTTPS enabled and secure forms, but lacks some recommended security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall legitimacy is supported by content quality and trust indicators. Strategic recommendations include improving security headers, implementing cookie consent for GDPR compliance, and enhancing accessibility.

A

ActionAid Bangladesh

actionaidbd.org

51

ActionAid Bangladesh is a well-established non-profit organization focused on advancing human rights and combating poverty within Bangladesh. The website reflects a mature NGO with a broad range of social programs including women’s rights, climate justice, humanitarian aid, youth engagement, and Rohingya refugee response. Their digital presence is supported by a professional website with clear navigation and comprehensive content targeting donors, activists, and partners. The organization benefits from a consistent brand identity and transparent governance information, reinforcing its credibility in the non-profit sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile responsive and optimized for SEO, though performance is moderate. Hosting and domain registration are consistent with a legitimate NGO, though DNSSEC is not enabled, and some security headers are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Security posture is adequate with HTTPS enforced and domain transfer protection, but improvements are recommended in DNS security and HTTP headers. No incident response or vulnerability disclosure policies are visible, which could be enhanced to improve trust and compliance. Overall, the website is professional and trustworthy but could benefit from stronger privacy and security practices to align with international standards.

S

SPONSER SPORT FOOD AG

sponser.ch

73

SPONSER SPORT FOOD AG operates a professional e-commerce platform specializing in sports nutrition products, emphasizing Swiss quality. The website targets athletes and health-conscious consumers, leveraging the Shopify platform with a modern Flex theme and multiple marketing and analytics integrations. The technical infrastructure is robust, with HTTPS enforced, security headers present, and a moderate to fast performance profile. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with no visible vulnerabilities, but incident response details are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.