Security Directory

E

ESTIEM

estiem.org

50

ESTIEM is a well-established non-profit organization dedicated to connecting European students in Industrial Engineering and Management. The website serves as a hub for educational resources, event organization, career development, and community building. It targets students across Europe, providing them with opportunities to grow academically, culturally, and professionally. The organization has a strong market position with a history dating back to 1990 and a domain registered since 1998, reflecting its longevity and credibility. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted with Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. The security posture is stable but could be improved by implementing DNSSEC, security headers, and publishing incident response and data protection policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency. Strategically, ESTIEM should focus on improving privacy compliance and security best practices to align with GDPR and modern security standards, enhancing trust and legal compliance for its members and visitors.

B

b.i.g. bechtold ingenieurgesellschaft mbH

vwi.de

58

The website represents the engineering bureau VWI, now part of the big. bechtold-gruppe since July 2021. It specializes in electrical engineering and building technology services, targeting business clients primarily in Germany. The site positions itself as a subsidiary within a larger engineering group, providing consultancy and technical services. The content is professional, primarily in German, and includes clear contact information and links to the parent company and related associations. Technically, the site uses a modern but basic tech stack including jQuery, Mapbox, and Snowplow analytics, hosted on 1&1 IONOS infrastructure. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR, though it could improve in terms of security best practices and transparency.

Dialogverlag is a specialized German publishing company focusing on religious and regional topics, serving audiences interested in Christianity and local culture in regions such as Münsterland and Niederrhein. The company operates a dedicated book ordering service (dialogversand.de) enhancing its direct-to-consumer sales channel. The website is built on TYPO3 CMS, featuring a professional design with clear navigation and relevant content, supporting a good user experience. Technical infrastructure is standard for a small publishing house, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS in use but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

E

Emmaus Reisen

emmaus-reisen.de

47

Emmaus Reisen is a specialized travel agency based in Germany focusing on group, cultural, and pilgrim travel experiences. The company leverages extensive expertise and established contacts in various cities and countries to offer curated travel packages. Their market position is that of a niche provider catering to pilgrims and culture enthusiasts, with a business model centered on organizing and managing group tours including bus, flight, and river cruise options. The website content is professionally presented in German and targets a mature audience interested in spiritual and cultural journeys. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and integrates modern analytics tools such as Google Analytics via Google Tag Manager and Piwik (Matomo). The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security hardening, particularly by adding security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks visible security headers and does not provide public incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Contact information is clearly displayed, enhancing business credibility. Overall, the website presents a trustworthy and professional image with a solid foundation but could benefit from enhanced security practices and improved privacy compliance to better align with GDPR and modern security standards.

K

Kampanile

kampanile.de

41

Kampanile is a small creative communication agency based in Münster, Germany, specializing in strategy, corporate design, editorial design, web design, and audio-visual services. The agency targets clients who value sustainability, authenticity, and social engagement, with a strong focus on churches, associations, and educational institutions. Their website is built on TYPO3 CMS and uses Matomo for analytics, reflecting a moderate level of digital maturity and privacy awareness. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is adequate with HTTPS assumed, but lacks advanced security headers and cookie consent mechanisms. No forms are present on the main page, reducing attack vectors. WHOIS data is minimal but consistent with the business location and hosting provider. Overall, the website is trustworthy and professionally maintained, though improvements in privacy compliance and security best practices are recommended.

D

Dialog Medien Verwaltungsgesellschaft mbH

dialog-medien.de

45

Dialog Medien Verwaltungsgesellschaft mbH operates as a media and publishing company affiliated with the Bistum Münster and related ecclesiastical institutions. The company provides a range of services including media agency solutions, travel arrangements focused on pilgrimage and cultural trips, an online magazine and newspaper focused on church life, a specialized publishing house, and a book shipping service. Their market position is niche and regionally focused, targeting church organizations, educational institutions, and Christian communities. The website is built on TYPO3 CMS, reflecting a mature technical infrastructure with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals.

D

DKM Darlehnskasse Münster eG

dkm-stellenmarkt.de

50

DKM Stellenmarkt operates as a specialized online job board serving the Catholic Church and Caritas organizations in Germany. It offers a comprehensive platform for job seekers and employers within this niche, featuring over 1500 active job listings, candidate profile management, and employer registration. The platform integrates with major external job boards such as indeed.de and the German Federal Employment Agency, enhancing its market reach and visibility. The website is professionally designed with consistent branding aligned to its parent organization, DKM Darlehnskasse Münster eG, and targets a specific audience of church and charitable sector professionals in Germany. Technically, the website is built on Joomla CMS with UIkit framework and uses modern web technologies including jQuery and Google reCAPTCHA v2 for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and spam protection on forms, but lacks some advanced security headers and publicly disclosed security policies. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a trustworthy and professional digital presence with clear business credibility and a focused service offering. Security practices are adequate but could be enhanced with additional headers and incident response transparency. The domain registration data aligns well with the website content and hosting, indicating legitimacy and consistency. There are no indications of malicious or suspicious activity, and content safety is rated as safe for general audiences.

S

Stadtwerke Böhmetal

swbt.de

65

Stadtwerke Böhmetal is a regional utility company based in Germany, providing essential energy services including electricity, gas, and water supply to residential and commercial customers in the Böhmetal region. The company positions itself as a reliable local energy provider with a focus on customer service and regional presence. Their website is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices and clear navigation. Security measures include HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the website reflects a professional and trustworthy business with moderate technical maturity and compliance with privacy regulations.

O

otris software AG

otris.de

68

otris software AG is a German-based technology company specializing in digital solutions for legal, compliance, and data protection management. With over 25 years of experience, the company offers modular software suites that enable enterprises to manage contracts, compliance workflows, risk, and data governance efficiently and securely. Their solutions are available as SaaS hosted in Germany or on-premises, integrating seamlessly with existing IT infrastructures. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting medium to large enterprises. Technically, the site is built on WordPress with modern performance and privacy tools such as WP Rocket and Borlabs Cookie for GDPR compliance. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, otris software AG presents a trustworthy and professional digital footprint aligned with its business objectives.

P

Peli

peli.com

76

Peli is a well-established manufacturer and retailer specializing in protective cases, torches, and professional gear, with a strong presence in the European market supported by local manufacturing and distribution centers. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, Google Fonts, and advanced cookie consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. The site uses multiple analytics and marketing tools, including Microsoft Clarity and HubSpot, with extensive user tracking balanced by a comprehensive cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the business's market position and history.

Seek Thermal operates an e-commerce website offering affordable infrared thermal imaging cameras targeting consumers and businesses interested in thermal imaging technology. The website is professionally designed with good content quality and consistent branding, focusing on product sales and applications in automotive and OEM markets. The technical infrastructure is based on the Weebly/EDITMYSITE platform, utilizing common web technologies and multiple third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and ZoomInfo. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing key security headers and no visible security or privacy policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and compliance.

S

Schuberth

schuberth.com

58

Schuberth is a well-established manufacturer specializing in high-quality helmets for motorsports, industrial safety, and military applications. The company targets consumers and professionals requiring protective headgear, operating primarily in the manufacturing sector with a medium-sized business footprint based in Germany. The website uses modern web technologies including Nuxt.js and integrates marketing and bot protection tools such as Google reCAPTCHA and Facebook Pixel. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain is long-standing and registered with a reputable hosting provider, indicating legitimacy. Overall, the website is professional but could improve in privacy compliance and security best practices.

P

PACCAR Inc

paccar.com

71

PACCAR Inc is a leading global manufacturer of high-quality commercial trucks and related financial services. The company operates multiple well-known brands including Kenworth, Peterbilt, and DAF, serving a broad transportation market. Their website reflects a mature digital presence with comprehensive business, investor, and product information targeting industry professionals and investors. Technically, the site uses modern frameworks such as Foundation and Umbraco CMS, with integration of Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and advanced security headers. Overall, PACCAR's website demonstrates strong business credibility and trustworthy digital infrastructure.

I

Icam

icam.fr

55

Icam is a well-established French engineering school with multiple campuses across France and internationally. It offers a broad range of engineering education programs including initial engineering cycles, professional training, and specialized master's degrees. The institution maintains strong partnerships with industry and international universities, enhancing its market position and educational quality. Technically, the website is built on WordPress with modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some HTTP security headers could be improved. Overall, the domain appears legitimate despite lack of public WHOIS data, consistent with privacy norms for .fr domains. The website is professional, accessible, and compliant with GDPR, supporting a high trust level.

A

Artefact

artefact-groupe.fr

62

Artefact is a well-established French technology group founded in 1991, operating primarily in digital agency services, datacenter hosting, and network operations. The company serves businesses and public sector clients, offering a comprehensive suite of IT and digital solutions through its three main subsidiaries: Artefact (digital agency), ArteOne (datacenter and IT services), and ArteWan (network operator). The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern frameworks like Yootheme and Uikit, and privacy-respecting analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional and transparent website content. Overall, Artefact presents as a credible and established player in the regional technology market.

The website artewan.fr currently displays only a 404 error page, indicating that the requested content is not found or the site is inactive. The domain is registered since 2006 with SCALEWAY as the registrar, showing a long registration period and active status. However, the website lacks any meaningful content, metadata, or business information, which severely limits its utility and trustworthiness. Technically, the site does not present any modern technologies, scripts, or security headers, and no SSL/HTTPS information is available from the provided data. From a security perspective, the absence of privacy policies, cookie consent mechanisms, and contact information indicates poor compliance and security posture. Overall, the site is currently non-functional or under maintenance, resulting in a very low AI score and poor business credibility.

A

ARTEFACT GROUPE

arteone.fr

63

Arteone is a regional datacenter and IT services provider based in Brive, France, operating under the Artefact Groupe umbrella. The company offers a comprehensive suite of IT infrastructure services including private cloud hosting, backup solutions, disaster recovery (PRA/PCA), and managed IT services. Arteone positions itself as a trusted regional leader with a strong focus on data security and proximity to its clients. The website reflects a mature digital presence with professional design, clear navigation, and detailed service descriptions. Technically, the site leverages WordPress CMS, UKit framework, and privacy-focused analytics via Matomo, indicating a modern and privacy-conscious infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though the absence of explicit security headers and lack of published security policies or incident response contacts suggest areas for improvement. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional and consistent business presentation. Overall, Arteone demonstrates a solid business and technical foundation with room to enhance security transparency and WHOIS data availability.

S

Sport 2000 Alsace

sport2000-alsace.com

48

Sport 2000 Alsace operates as a regional sports retail and e-commerce platform focused on serving sports clubs in the Alsace region of France. The company offers exclusive club equipment deals, personalized services such as flocage and embroidery, and maintains a communication platform for partner clubs. The business is supported by physical retail stores in Illkirch and Sélestat, reinforcing its local presence and customer engagement. The website is built on PrestaShop, leveraging modern web technologies and providing a responsive user experience tailored for its target audience of sports clubs and team managers. From a technical perspective, the website demonstrates a solid infrastructure with HTTPS enabled and integration of common e-commerce technologies. However, there is room for improvement in security hardening, such as implementing security headers and enhancing privacy compliance with explicit policies and consent mechanisms. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the business. Social media links and contact information further support the company's credibility. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but the lack of security headers and privacy policies represents compliance and security gaps. The website does not appear to track users extensively, indicating a privacy-conscious approach, though formal policies are missing. Overall, the risk level is moderate with recommendations to improve transparency and security controls. Strategically, Sport 2000 Alsace should focus on enhancing privacy compliance, implementing security best practices, and maintaining clear communication channels to strengthen trust and regulatory adherence. These steps will support sustainable growth and reinforce its position as a trusted regional sports retail partner.

M

mPulse

mpulsemobile.com

72

mPulse is a well-established digital health engagement solutions provider founded in 1998, specializing in consumer-centric health experience and insights products. The company targets healthcare organizations such as health plans, providers, and related stakeholders, offering a comprehensive suite of products including predictive analytics, omnichannel engagement, health portals, and a HITRUST-certified platform. Their market position is strong as a leader in healthcare technology with a focus on improving health outcomes through innovative digital solutions. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as HubSpot and Google Tag Manager. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security-wise, the platform benefits from HITRUST certification and enforces HTTPS, although some security headers could be enhanced. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website and business exhibit high professionalism, trustworthiness, and maturity, supported by consistent WHOIS data and domain longevity.

M

mPulse

mpulse.com

71

mPulse is a healthcare technology company specializing in digital health engagement solutions that create consumer-centric journeys to improve health outcomes. The company offers a suite of products including predictive analytics, omnichannel engagement, health portals, content management, and a HITRUST-certified Health Experience and Insights Platform. Their target audience includes healthcare organizations, health plans, and providers. The website demonstrates a strong market position with professional branding and comprehensive product offerings. Technically, the website is built on WordPress using Elementor and integrates modern technologies such as jQuery, Swiper.js, and HubSpot analytics. Hosting appears to be on Amazon AWS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site uses HTTPS and domain registration protections but lacks visible security headers and published security policies or incident response contacts. The mention of HITRUST certification indicates a commitment to healthcare security standards. No vulnerabilities or suspicious patterns were detected in the analysis. Overall, the website is professional, trustworthy, and well-positioned in the healthcare technology market. However, improvements in privacy compliance documentation, security header implementation, and vulnerability disclosure would enhance the security posture and user trust.

P

Počítačové poradenství a zpravodajství

pcporadenstvi.cz

45

The website www.pcporadenstvi.cz is a Czech-language IT advice and news portal offering articles, forums, software downloads, and multimedia galleries. It targets Czech-speaking IT enthusiasts and small business users seeking computer-related guidance. The site operates on Drupal CMS and integrates common advertising and analytics tools such as Google Analytics, Google Tag Manager, and Google Adsense. While the content is regularly updated and relevant, the site lacks explicit privacy and terms of service pages, and no official company contact information is provided on the main pages. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. Technically, the site shows moderate performance and basic mobile optimization but lacks visible security headers and advanced form protections. Overall, the site appears functional and moderately professional but would benefit from enhanced security and compliance measures.

K

Konzervatoř České Budějovice

konzervatorcb.cz

43

Konzervatoř České Budějovice is a specialized educational institution offering secondary and higher vocational music education, including classical singing and a wide range of musical instruments. The institution has a strong regional presence with unique offerings such as an on-site dormitory for students. The website reflects a well-structured and informative platform targeting students, parents, and the music education community. Technically, the site uses modern frameworks like Bootstrap and Mobirise, ensuring good mobile responsiveness and user experience, though performance is moderate. Security posture is limited due to lack of visible security headers and absence of published privacy or cookie policies. No forms or data collection mechanisms were detected, reducing immediate privacy risks but also indicating limited interactivity. Overall, the domain age and WHOIS data support the legitimacy and trustworthiness of the institution.

M

Mezinárodní hudební kurzy a společné muzicírování

hudebnikurzykrumlov.cz

40

The website hudebnikurzykrumlov.cz represents a newly established music education business focused on organizing international music courses and group music-making activities in Český Krumlov, Czechia. The business offers individual lessons and ensemble playing opportunities, targeting musicians and students interested in developing their skills in a friendly and inspiring environment. The site features detailed instructor profiles, event reports, and partner logos, reflecting a professional and regionally focused educational service. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted likely by Webglobe. The site is mobile-optimized and presents a moderate performance level. However, some technical improvements are possible, including adding security headers and completing analytics configuration. The site uses HTTPS, ensuring encrypted communication. From a security perspective, the site has a good baseline with HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are important for GDPR compliance. The Google Analytics plugin is present but not configured, indicating incomplete data collection setup. No vulnerability disclosures or incident response contacts are provided, which could be improved to enhance trust. Overall, the website is safe, professional, and relevant to its audience but would benefit from enhanced privacy compliance and security best practices. The domain registration is consistent with the business launch timeline, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, configuring analytics properly, and adding security headers to improve the security posture and compliance.

M

Město Vlašim

mesto-vlasim.cz

48

Město Vlašim operates an official municipal website serving as the primary digital portal for local government information, citizen services, and community engagement. The site provides comprehensive content including news, event calendars, administrative contacts, and online service portals, targeting residents and visitors of Vlašim. The business model is centered on public administration and transparent communication with citizens. Technically, the website employs a custom CMS developed by ANAWEb, utilizing legacy JavaScript libraries such as jQuery 1.9.1 and plugins like fancybox and bjqs for UI elements. The site is served over HTTPS with cookie consent mechanisms and CAPTCHA protections on forms, indicating a moderate level of digital maturity. However, some technical debt is evident due to outdated libraries and lack of modern security headers. From a security perspective, the site enforces HTTPS and includes privacy compliance features aligned with GDPR, such as a detailed privacy policy and cookie consent. No critical vulnerabilities or exposed sensitive data were detected, but improvements are recommended in security headers and library updates. The absence of WHOIS data is likely due to registry policies rather than malicious intent, but it slightly impacts trust scoring. Overall, the website presents a trustworthy and professional digital presence for the municipality, with good content quality and user experience. Strategic enhancements in security posture and technical modernization would further strengthen its resilience and compliance.

D

Danone

danone.com

78

Danone is a globally recognized food and beverage company operating in over 120 countries, focusing on essential business lines such as Waters and Early Life Nutrition. The website reflects a mature digital presence with a professional design, comprehensive content, and clear navigation. Technically, the site leverages Adobe Experience Manager and modern technologies, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain registration trust verification but the overall branding and external links strongly support legitimacy. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates a high level of digital maturity and business credibility.

Cyber Création is a small French business specializing in website creation and web server hosting services, primarily targeting local clients near Reims. The website is minimalistic, with basic content and limited technical sophistication. It uses Bootstrap and jQuery for frontend styling but lacks modern CMS or advanced platform integration. The absence of privacy policies, contact information, and security features such as HTTPS indicates a low level of digital maturity and security posture. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website presents a low-risk profile content-wise but requires significant improvements in security, compliance, and professionalism to enhance credibility and user trust.

L

La Maison d'Oléron

lamaisondoleron.fr

52

La Maison d'Oléron is a small hospitality business specializing in vacation home rentals on the Ile d'Oléron in France. The website provides detailed information about the property, including interior, exterior, equipment, and location, targeting tourists seeking holiday accommodations. The business model relies on direct information presentation and third-party booking platforms for reservations. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and metadata suggest a legitimate small business. Overall, the site is professional and functional with room for security and compliance improvements.

P

Poissonnerie des Halles à Reims

le-triporteur.fr

48

Le Triporteur is a small, local mobile seafood restaurant operating in Reims, France. It offers a unique dining experience by serving fish, seafood, and crustaceans from a Piaggio vehicle, catering to street diners, events, and private functions. The business is positioned as a niche hospitality service with a focus on fresh seafood and convivial experiences. The website is professionally designed, mobile responsive, and provides clear contact information and social media presence, enhancing customer engagement. Technically, the website uses modern front-end technologies including Bootstrap, jQuery, and FontAwesome, with good SEO and mobile optimization. The site enforces HTTPS and includes a cookie consent mechanism, indicating attention to privacy compliance. However, no explicit security headers were detected, and no WHOIS data is available, which impacts domain transparency and trust. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent but lacks visible advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were found in the provided content. The absence of WHOIS data is a concern for legitimacy verification but does not necessarily indicate malicious intent. Overall, the website is a credible and professional digital presence for a small hospitality business, with recommendations to improve domain transparency and security headers to enhance trust and compliance.

W

WebMD Ignite

mercuryhealthcare.com

65

WebMD Ignite is a healthcare-focused digital marketing and engagement platform launched in 2023 as a part of the WebMD brand. It offers a suite of solutions including marketing, platform, analytics, clinical, and content services aimed at healthcare organizations such as health systems, plans, and associations. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. The technical infrastructure leverages Drupal CMS, Cloudflare DNS, and integrates multiple analytics and tracking services including Google Analytics, 6sense, and ContentSquare. Security posture is good with HTTPS enabled and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency. The site lacks explicit privacy and terms of service pages, which impacts privacy compliance scoring.

C

CV-Library Ltd

contractorjobs.co.uk

60

Contractor Jobs is a UK-based online job board specializing in contract employment opportunities across various industries. Powered by CV-Library Ltd, it offers job seekers the ability to search thousands of contract roles, register CVs, and receive job alerts. The platform also supports recruiters with access to a CV database for hiring contractors. The website demonstrates a professional and user-friendly design with good mobile optimization and clear navigation, targeting contractors and recruiters within the UK market. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and Bing UET for analytics and tracking, alongside autocomplete and lazy loading scripts to enhance user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. The WHOIS lookup failed due to a domain registration error, but the website's content and branding strongly indicate legitimacy and a well-established presence. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy platform for its target audience.

C

CV-Library Ltd

jobs-graduate.co.uk

60

JobsGraduate is a UK-focused graduate job search platform operated under the CV-Library Ltd brand. It offers a comprehensive service for graduates to search thousands of jobs, register CVs, and receive job alerts. The platform targets recent graduates and entry-level job seekers across various academic disciplines and industries within the UK. The website is professionally designed with good navigation and mobile optimization, providing a positive user experience. Technically, it employs modern JavaScript libraries, Google Analytics, Bing UET, and custom clickstream analytics to track user behavior and optimize marketing efforts. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security policies. The WHOIS data for the domain is unavailable due to domain naming rules, but the strong association with CV-Library Ltd supports legitimacy. Overall, the site demonstrates a mature digital presence with room for security enhancements.

C

CV-Library Ltd

marketing-jobs.co.uk

60

Marketing Jobs is a UK-focused online job board specializing in marketing sector roles, powered by CV-Library Ltd. The platform offers job search, alerts, CV registration, and recruiter services, targeting marketing professionals and recruiters. The website is professionally designed with good mobile optimization and accessibility, providing a user-friendly experience. Technically, it employs modern JavaScript libraries, Google Analytics, Bing UET, and clickstream analytics, with cookie consent mechanisms in place. Security posture is adequate with HTTPS enforced, but lacks some security headers and explicit security policies. WHOIS data for the domain is unavailable due to domain naming rules, indicating the domain is likely a subdomain or alias, which slightly impacts trust but does not detract from the site's legitimacy given its association with CV-Library Ltd.

C

CV-Library Ltd

sales-jobs.co.uk

61

Sales Jobs is a UK-focused online job board specializing in sales roles across multiple sectors. The platform offers job search capabilities, CV registration, job alerts, and recruitment advertising services, targeting both job seekers and recruiters within the sales industry. The website is powered by CV-Library Ltd, a recognized recruitment platform, which enhances its market credibility and reach. The site demonstrates a professional and consistent brand presence with a clear focus on the UK sales job market. From a technical perspective, the website employs modern web technologies including Google Analytics, Bing UET, and Clickstream Analytics for user tracking and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. The use of HTTPS and cookie consent mechanisms indicates a commitment to user privacy and security, although explicit security headers and incident response policies are not publicly documented. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of published security policies and vulnerability disclosure mechanisms suggests room for improvement in transparency and incident readiness. The WHOIS lookup for the domain 'www.sales-jobs.co.uk' failed due to domain naming rules, indicating the queried domain is a subdomain rather than a registered domain. This does not detract from the site's legitimacy, as the main domain 'sales-jobs.co.uk' is presumably registered and operated by CV-Library Ltd. Overall, the website presents a trustworthy and professional platform for sales job seekers and recruiters in the UK, with a mature technical infrastructure and good privacy compliance. Strategic enhancements in security transparency and direct contact information could further strengthen user trust and compliance posture.

C

CV-Library Ltd

it-jobs.co.uk

60

IT Jobs (www.it-jobs.co.uk) is a UK-focused online job board specializing in IT and technology roles, operated by CV-Library Ltd. The platform offers job seekers the ability to search and apply for thousands of IT jobs across the UK, while providing recruiters with advertising and CV database access services. The website is professionally designed with good content quality, clear navigation, and mobile optimization, targeting IT professionals and employers in the UK market. Technically, the site uses modern JavaScript libraries, Google Analytics, Bing UET, and Google Tag Manager for analytics and marketing, with asynchronous script loading to optimize performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. WHOIS data is unavailable due to domain registration query issues, but the domain and website appear legitimate and consistent with the business claims. Overall, the site demonstrates a mature digital presence with moderate tracking and good privacy compliance.

C

CV-Library Ltd

scotland-jobs.co.uk

60

Scotland Jobs is an online job board dedicated to the Scottish employment market, offering job search, CV registration, job alerts, and recruitment advertising services. The website is branded and powered by CV-Library Ltd, a recognized UK recruitment platform. The site targets job seekers and recruiters in Scotland, positioning itself as a fast-growing regional job board. Technically, the site employs modern web technologies including Google Analytics, Bing Ads tracking, and jQuery-based autocomplete features. It is mobile-optimized and accessible, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. WHOIS data for the domain is unavailable due to a registration error indicating the domain name is invalid under Nominet rules, suggesting the site may be operating on a subdomain or alias. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on security and incident response.

C

CV-Library Ltd

engineeringjobs.co.uk

62

EngineeringJobs.co.uk is a UK-focused online job board specializing in engineering roles across various disciplines and seniority levels. It provides job search functionality, CV registration, job alerts, and recruitment services targeting engineering professionals and recruiters. The platform is operated by CV-Library Ltd, a recognized player in the UK recruitment market. The website is professionally designed with consistent branding and good content relevance, targeting engineering job seekers and recruiters in the UK market. Technically, the site uses modern JavaScript libraries, Google Analytics, and Bing tracking, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though security headers and explicit security policies are absent. WHOIS data for the domain is unavailable due to domain naming restrictions, indicating the domain is likely a subdomain or alias rather than a standalone registered domain, which slightly reduces trust. Overall, the site is a credible and functional job board with moderate risk due to domain registration inconsistencies.

C

CV-Library Ltd

education-jobs.co.uk

61

Education Jobs is a specialized UK recruitment platform focused on education sector employment opportunities for teachers, lecturers, and administrative staff. Operated by CV-Library Ltd, it offers job search, CV upload, job alerts, and recruitment advertising services. The platform targets education professionals and recruiters, positioning itself as a niche job board within the UK education recruitment market. The website features a professional design, clear navigation, and mobile optimization, supporting a positive user experience.

C

CV-Library Ltd

britishjobs.co.uk

60

British Jobs is an online job search platform focused on the UK market, offering job listings, CV registration, job alerts, and recruitment advertising services. The site is powered by CV-Library Ltd, a recognized recruitment service provider. The platform targets job seekers and recruiters, providing a streamlined user experience for job searching and application. Technically, the website employs modern web technologies including Google Analytics, Bing Ads, and Criteo for tracking and marketing, with good mobile optimization and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. The WHOIS data for the domain is unavailable due to domain naming rules violation, which slightly impacts trust but does not detract from the professional presentation and functionality of the site. Overall, British Jobs presents a credible and functional job search service with room for improvement in security transparency and WHOIS consistency.

D

DocTract

doctract.com

66

DocTract is a technology company specializing in AI-driven policy management software designed to streamline policy creation, approval, and compliance tracking for regulated industries. Founded in 2018 and based in the United States, the company targets business professionals, compliance teams, HR, and executives seeking efficient governance solutions. The website demonstrates a professional and consistent brand presence with positive customer testimonials and a strong focus on user experience. Technically, the website is built on the Webflow platform and integrates multiple modern analytics and marketing tools such as Google Analytics, Microsoft UET, CrazyEgg, and SalesLoft. It employs Cookiebot for cookie consent management and uses HTTPS with good security practices, including CAPTCHA implementations. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. From a security perspective, the site shows good posture with HTTPS enforcement and cookie consent mechanisms. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The missing WHOIS registration data is a concern for domain legitimacy and should be investigated further. Overall, DocTract presents a credible and professional online presence with solid technical infrastructure but should address privacy policy visibility and domain registration transparency to strengthen trust and compliance.

Valley Health is a large, not-for-profit healthcare system serving communities in Virginia and West Virginia. The organization provides a comprehensive range of healthcare services including hospitals, urgent care, physician practices, and specialty care such as cancer and heart services. The website reflects a strong regional market position with a patient-first approach and community engagement. Technically, the website is built on Scorpion CMS with modern JavaScript libraries and integrates Google Tag Manager and AudioEye for accessibility compliance. The site is mobile optimized and well-structured with clear navigation and rich content. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected and incident response/contact security policies are not published. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. WHOIS data is unavailable, which limits domain legitimacy verification, but the website content and branding strongly indicate a legitimate healthcare provider. Overall, the site is professional, trustworthy, and accessible, with room for improvement in security headers and privacy compliance.

T

Tower Health

mytowerhealth.org

65

Tower Health operates the MyTowerHealth patient portal, providing secure online access to healthcare services such as appointment scheduling, prescription refills, test results, and billing management. The portal is built on the Epic MyChart platform, a widely used healthcare IT solution, indicating a mature and robust technical infrastructure. The website demonstrates good digital maturity with responsive design, accessibility features, and integration of modern JavaScript libraries such as React and Handlebars. Security measures include HTTPS enforcement, anti click-jacking scripts, and CSRF tokens, though some security headers are not explicitly detected. Privacy compliance is partially addressed with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. The absence of WHOIS registrant data suggests privacy protection, which is appropriate for a healthcare service. Overall, the site is professional, trustworthy, and well-positioned to serve its patient audience.

J

Jefferson Campus Store

jeffersoncampusstore.com

62

Jefferson Campus Store operates as the official online and physical retail store for Thomas Jefferson University, providing textbooks, university-branded merchandise, apparel, gifts, and supplies primarily targeting students, faculty, alumni, and staff. The website demonstrates a solid market position as a trusted campus resource with a clear business model focused on e-commerce retail and textbook services including buyback and digital options. The presence of multiple partner links to eBook platforms and trade-in services enhances its service offerings. Technically, the website uses a custom or proprietary CMS with a technology stack including jQuery, Modernizr, and Slick Carousel for UI components. The site is mobile optimized with good accessibility and SEO practices, though performance is moderate. The domain is secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for improvement in security hardening. Security posture is adequate with no critical vulnerabilities detected, but the absence of cookie consent mechanisms and security headers reduces compliance with privacy regulations such as GDPR. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

T

Thomas Jefferson University

jeffersonrams.com

67

Thomas Jefferson University operates an official athletics website serving as the primary digital platform for its NCAA Division II sports programs. The site provides comprehensive sports-related content including schedules, rosters, news, and community engagement resources targeted at students, athletes, and fans. The university positions itself as a competitive participant within the Central Atlantic Collegiate Conference (CACC), leveraging digital tools to enhance fan and community interaction. Technically, the website is built on the Sidearm Sports platform, utilizing a mix of modern and legacy web technologies such as Google Analytics, Google Tag Manager, jQuery, and Knockout.js. Hosting and content delivery are managed via Cloudfront CDN and Rackspace DNS services, ensuring moderate performance and good mobile optimization. Accessibility features and SEO practices are adequately implemented, contributing to a positive user experience. From a security perspective, the site benefits from HTTPS encryption and domain transfer protections but lacks advanced DNS security measures like DNSSEC and important HTTP security headers. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism or GDPR-specific disclosures. No incident response or vulnerability disclosure information is publicly available, indicating room for maturity in security governance. Overall, the website is trustworthy and professionally maintained, with a solid foundation for athletics content delivery. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the site's security posture and regulatory adherence.

C

Conseil supérieur du notariat

notaires.fr

66

The website www.notaires.fr is the official portal for Notaires de France, managed by the Conseil supérieur du notariat. It serves as a comprehensive resource for legal and notarial information, targeting the general public, businesses, and government entities in France. The site offers extensive content on donations, successions, real estate, family law, and business-related legal services, supported by interactive tools and online services such as apostille processing and mediation. The website is well-branded, professionally designed, and consistent with its official government affiliation. Technically, the site is built on the Drupal CMS platform, utilizing modern JavaScript libraries and SVG icons for a responsive and accessible user experience. Performance is moderate with good mobile optimization and SEO practices. Security posture is strong, with HTTPS enforced and multiple security headers implemented. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site demonstrates a mature digital infrastructure suitable for a government-affiliated entity, with strong trust indicators and a high level of professionalism. The lack of public WHOIS data is consistent with AFNIC privacy norms for French domains and does not detract from the site's legitimacy. Contact is primarily via secure forms rather than direct emails or phone numbers, aligning with best practices for public service websites.

M

MetroNews Television

wvmetronewstv.com

68

MetroNews Television is a media streaming platform dedicated to providing comprehensive news, talk, and sports coverage for West Virginia. It offers a variety of programming including live and archived shows, sports broadcasts, and exclusive interviews, positioning itself as the only true statewide medium for the Mountain State. The platform targets West Virginia residents and sports enthusiasts, delivering content accessible across multiple devices without requiring a traditional TV provider. Technically, the website leverages modern web technologies such as React, Google Analytics 4, Google Tag Manager, and Google reCAPTCHA Enterprise for security and analytics. It is hosted likely on AWS infrastructure using Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site includes proper meta tags, SEO elements, and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. While explicit security headers are not fully confirmed, the site demonstrates good security hygiene with CSRF tokens and no exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, MetroNews Television presents a professional and trustworthy media service with strong technical and security foundations. The main risk lies in the lack of publicly available domain registration information, which should be addressed to enhance trust and credibility.

C

Citynet LLC

citynet.net

63

Citynet LLC is a regional technology and telecommunications provider specializing in fiber internet, managed IT services, unified communications, and cybersecurity solutions primarily serving West Virginia and surrounding areas. The company positions itself as a trusted partner offering enterprise-grade technology with a focus on customer support and reliable fiber infrastructure. Their website reflects a mature digital presence built on WordPress with modern design and SEO best practices. The technical infrastructure includes reputable third-party services such as Google Tag Manager and Cloudfront CDN, supporting performance and analytics needs. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and cookie consent mechanisms could be improved. The absence of WHOIS registration data is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, Citynet demonstrates a professional and trustworthy online presence aligned with its business objectives.

W

WVRC Digital

wvrcdigital.com

51

WVRC Digital is a small digital marketing agency founded in 2021 and operating as a subsidiary of WVRC Media Company. The company specializes in a broad range of digital marketing services including consumer targeting, website development, video advertising, social media management, email marketing, SEO, pay per click, OTT media, and website chat solutions. Their target audience consists primarily of businesses seeking to establish or grow their digital presence. The website is professionally designed, consistent in branding, and provides clear service descriptions and client testimonials, positioning WVRC Digital as a credible regional player in the digital marketing sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, hosted on A2 Hosting. It employs modern web technologies including Google Fonts, Font Awesome, Vimeo embeds, and Google Maps API. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Cookie consent is implemented via CookieYes, and Google Analytics is used for user tracking. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited to prevent unauthorized domain transfers. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content, representing areas for improvement. No privacy policy or terms of service pages were found, which are important for compliance and user trust. Tracking pixels from ZoomInfo and Pearl Diver indicate moderate user tracking. Overall, WVRC Digital presents a professional and credible digital marketing service with a solid technical foundation but requires enhancements in privacy compliance and security best practices to strengthen its security posture and regulatory adherence.

C

CreativeThemes

creativethemes.com

64

CreativeThemes operates the Blocksy WordPress theme website, offering a free and premium theme optimized for Gutenberg and WooCommerce. The company positions itself as a provider of fast, customizable, and SEO-friendly WordPress themes targeting developers and e-commerce businesses. The website demonstrates a mature digital presence with comprehensive documentation, active community engagement, and a professional design. Technically, the site leverages modern web technologies including React, Webpack, Babel, and PHP 7, hosted with GoDaddy and using Cloudflare DNS services. Performance and mobile optimization are strong points, with good SEO practices implemented. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is partially addressed with a clear privacy policy and GDPR mention, but lacks a cookie consent mechanism. Overall, the domain registration is consistent and long-standing, supporting the legitimacy of the business. The site is safe for general audiences and free from adult or questionable content.

M

Méliès International Festivals Federation

melies.org

46

Méliès International Festivals Federation is a well-established non-profit organization dedicated to promoting European fantastic films and supporting member film festivals. Founded in 1995, it holds a strong market position as a leading federation in its niche, offering awards, festival support, and a winners database. The website reflects a professional and consistent brand image targeting film professionals and enthusiasts in Europe. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and explicit security headers. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

T

Troov S.A.S

troov.com

60

Troov S.A.S operates a specialized online platform focused on lost and found objects, primarily serving users in France. The website offers services to reference lost and found items, allowing users to post announcements and connect with partner locations to increase the chances of recovering lost belongings. The company was founded in 2018 and maintains a consistent brand presence with clear contact information and active social media channels. Technically, the website employs modern front-end frameworks such as Bootstrap and Vue.js, integrates Google Analytics and Facebook Pixel for tracking, and uses Cloudflare for DNS and likely CDN services. The site is mobile-optimized and provides a good user experience with relevant content and clear navigation. Security-wise, the site uses HTTPS and has a stable domain registration but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.