Security Directory

I

ista SE

ista.com

65

ista SE is a leading energy service provider specializing in solutions that increase energy efficiency in buildings. The company offers digital products and services that help reduce CO2 emissions and make buildings safer and more comfortable. With over 6,300 employees across 20 countries and a customer base exceeding 460,000, ista SE holds a strong market position in the energy sector. Their 2024 sales reached EUR 1,220 million, reflecting a significant footprint in the industry. The website demonstrates a mature digital presence built on TYPO3 CMS, integrating modern technologies such as Google Tag Manager and Usercentrics for consent management. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS registration data is a notable anomaly but does not detract from the overall legitimacy indicated by the corporate content and executive profiles. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

E

Erasmus Lisboa - Airport pickup, sim cards, rooms and more

erasmuslisboa.com

50

Erasmus Lisboa is a service-oriented website targeting Erasmus students and visitors in Lisbon, offering airport pickup, SIM cards, accommodation, and bundled service packages. The website presents a professional design with consistent branding and relevant content tailored to its niche audience. Technically, it employs common web technologies including jQuery and integrates analytics tools such as Google Analytics and Crazy Egg for user behavior tracking. However, the site lacks visible privacy and cookie policies, which raises compliance concerns. Security posture is moderate with no evident HTTPS or security headers information, and no explicit incident response or data protection officer contacts are provided. The WHOIS data is unavailable or unregistered, which questions domain legitimacy and requires further verification. Overall, the site is functional and relevant but needs improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

P

PortusPark

portuspark.org

47

PortusPark is a well-established network of science and technology parks and incubators serving the northern region of Portugal. Founded in 2007, it operates as a regional leader providing capital participation and advanced services to its member parks and associated companies. The website reflects a professional and consistent brand presence, targeting technology parks, incubators, and related stakeholders in the region. Technically, the site is built on WordPress with common plugins for multilingual support and rich media content, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating room for compliance improvements. Overall, the domain registration data aligns well with the business claims, supporting a high legitimacy score. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing comprehensive privacy and cookie policies to improve compliance and trust.

The website corkspirit.com is currently an expired domain parked by GoDaddy.com, LLC. The page serves as a placeholder offering the domain for resale and contains no active business content or services. The primary audience is domain buyers or investors interested in acquiring the domain. The site includes basic privacy and cookie policy links and integrates advertising and consent management scripts from Google Adsense, TrustArc, and Trustpilot. The technical infrastructure is minimal, relying on GoDaddy's parking platform with React-based frontend elements and external widgets. Security posture is limited, with no visible HTTPS enforcement or security headers, and DNSSEC is not enabled. Overall, the site presents low business credibility and minimal content quality, reflecting its parked status rather than an operational business website.

C

Câmara Municipal de São João da Madeira

cm-sjm.pt

38

The Câmara Municipal de São João da Madeira website serves as the official digital presence of the municipal government of São João da Madeira, Portugal. It provides citizens, investors, and visitors with news, municipal services, event agendas, and transparency information. The site targets local residents and stakeholders interested in municipal affairs and investment opportunities. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs a moderate technology stack including jQuery, slick carousels, and AddThis for social sharing. The site is mobile responsive and offers a good user experience with clear navigation. However, it lacks modern security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS with a valid SSL certificate, but no advanced security headers were detected. There is no visible vulnerability disclosure or incident response information. The absence of privacy and cookie policies indicates a gap in GDPR compliance. No contact emails or phone numbers were explicitly found, limiting direct communication channels. Overall, the website is professional and trustworthy as a government portal but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen its security posture and user trust.

T

t4h (Tech4home)

tech4home.com

68

t4h (Tech4home) is a technology company specializing in the design, development, and delivery of remote control solutions primarily for IPTV, cable, and Pay-TV operators worldwide. With over 20 years of experience, the company offers OEM remote controls, IoT integration, and sustainability initiatives through its Symbiosis Programme. The website reflects a mature business with a strong market position, evidenced by design awards and a broad client base. Technically, the site is built on WordPress with modern plugins and analytics tools, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and reCAPTCHA, though improvements can be made by adding security headers and explicit incident response policies. Overall, the site is professional and trustworthy, but the lack of WHOIS data reduces domain registration transparency.

P

Portugal Empreende 4.0

ptempreende40.pt

50

Portugal Empreende 4.0 is a Portuguese business ecosystem platform focused on Industry 4.0 entrepreneurship. The website serves as a hub for businesses and entrepreneurs interested in the digital transformation and industrial innovation within Portugal. The platform positions itself as a niche player supporting Industry 4.0 initiatives, targeting Portuguese companies and stakeholders in manufacturing and technology sectors. The website content is professionally presented with a consistent brand identity and good user experience, although it lacks explicit contact and policy information. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Google Fonts and icon libraries, delivering moderate performance and good mobile optimization. Security posture is limited due to missing security headers and absence of privacy or cookie policies, which impacts compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. WHOIS data confirms the domain is registered since 2019 with consistent registrant information matching the website's Portuguese business focus, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Catrapum

catrapum.com

48

Catrapum is a Portuguese e-commerce business specializing in the sale of used auto parts for major automotive brands such as Volkswagen, Audi, Toyota, and Mazda. The website offers a catalog of used parts, enabling vehicle owners and drivers to find reliable components for their vehicles. The business appears to be small-sized and focused on the transportation sector, with a market position as a specialized supplier of used auto parts. The website is professionally designed with good content quality and consistent branding, targeting Portuguese-speaking customers primarily, with an English language option available. Technically, the website uses standard web technologies including jQuery and implements HTTPS for secure communication. It employs Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. However, there is a lack of advanced security headers and no visible privacy or terms of service policies, which are areas for improvement. From a security perspective, the site enforces HTTPS but lacks important security headers and detailed privacy compliance documentation. No critical vulnerabilities were detected in the visible content, but the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The cookie consent mechanism is present, supporting GDPR compliance to some extent. Overall, while the business and website present a professional front with relevant services, the missing WHOIS data and limited privacy/security policies suggest a moderate risk profile. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

A

Anasoft

anasoft.com

74

Anasoft is a Slovakia-based IT solutions provider specializing in digitization, cybersecurity, and operational efficiency software for various industries including manufacturing, logistics, finance, and real estate. The company boasts over 30 years of experience and serves more than 10,000 global clients with a broad portfolio of products and services such as warehouse management systems, workflow automation, cybersecurity tools, and electronic signature platforms. Their market position is supported by multiple industry awards and a professional online presence. Technically, the website is built on a modern tech stack including Bootstrap, FontAwesome, Google Tag Manager, and MODx CMS. It is mobile-optimized, accessible, and SEO-friendly with a good performance profile. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not published. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of security headers and vulnerability disclosure mechanisms are areas for improvement. The WHOIS data is missing, which raises some concerns about domain registration legitimacy, although the website content and external trust signals support the company's credibility. Overall, Anasoft presents a professional and trustworthy digital presence with solid business and technical foundations. Addressing WHOIS transparency and publishing detailed security policies would further enhance trust and compliance.

C

COLORS Urban Art Association

colors-art.eu

54

COLORS Urban Art Association is a small non-profit collective based in France focused on promoting contemporary urban art and graffiti culture. They organize urban art festivals, exhibitions, creative sessions, and sell related merchandise through an online shop. The website is professionally designed with excellent content quality and clear navigation, targeting art enthusiasts, families, and the local community in Strasbourg and surrounding areas. Technically, the site runs on WordPress 4.9.8 with integrations such as Google Maps API and YouTube embeds, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though the WordPress version is outdated and lacks explicit security headers, which should be addressed. WHOIS data is privacy protected as per EURid policies, which is typical for .eu domains and does not detract from legitimacy. Overall, the site demonstrates a high level of professionalism and trustworthiness with good privacy compliance and active social media presence.

E

EM Strasbourg Business School

em-strasbourg.eu

55

EM Strasbourg Business School is a reputable educational institution based in France, offering a wide range of business and management programs including bachelors, masters, and executive education. The school holds AACSB accreditation and maintains international partnerships, positioning itself as a competitive player in the higher education sector. The website is professionally designed, mobile-optimized, and provides comprehensive information targeting students, professionals, companies, and researchers. Technically, the site is built on Drupal 9, leveraging modern web technologies and analytics tools such as Google Tag Manager and Matomo, with a good security posture including HTTPS and security headers. However, the absence of WHOIS registration data raises some concerns about domain transparency, though the website content and branding strongly indicate legitimacy. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates a mature digital presence with minor gaps in publicly available security policies and incident response information.

C

Compagnie des Transports Strasbourgeois

cts-strasbourg.eu

65

Compagnie des Transports Strasbourgeois (CTS) operates as the primary public transportation provider in Strasbourg, France, offering bus and tram services, ticketing, trip planning, and real-time traffic information. The website serves a broad audience including daily commuters and tourists, providing essential transit information and online services. The company maintains a solid market position as the main transit operator in the region. Technically, the website is built on OpenCms 8 ADE with a technology stack including jQuery, Select2, Chosen, and Matomo for analytics. Payment processing is securely integrated via PayZen. The site demonstrates moderate performance and basic mobile optimization, with accessibility and SEO features at a basic level. From a security perspective, the site uses HTTPS and secure payment iframes but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through cookie consent mechanisms and a privacy policy, though GDPR-specific details are basic. Overall, the website is professional, trustworthy, and functional with room for improvement in security policies and technical optimizations. The domain registration aligns well with the business, supporting legitimacy and trustworthiness.

T

Théâtre national de Strasbourg et son École

tns.fr

69

Théâtre national de Strasbourg (TnS) is a prominent cultural institution in France, serving as the only national theater in its region. The website provides comprehensive information about theatrical performances, ticketing services, and an affiliated theater school. The site targets a general audience interested in theater and cultural events, offering online reservations and educational programs. Technically, the site is built on Drupal 11, leveraging modern web technologies including Font Awesome, Google Fonts, and accessibility tools like Sonica11y. It is hosted with OVH as registrar and uses Cloudflare for DNS, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be enhanced. Privacy compliance is strong, with a clear privacy policy and GDPR-aligned cookie management. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

S

SIG Strasbourg

sigstrasbourg.fr

46

SIG Strasbourg is a professional basketball club based in Strasbourg, France, operating an official website to engage fans and provide services such as ticket sales and merchandise. The website is built on Drupal 10 and integrates modern web technologies including Google Analytics and Bootstrap 5, reflecting a moderate level of digital maturity. The site is well-branded, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks published privacy policies, security headers, and explicit contact information for security or general inquiries. Overall, the domain registration is consistent and legitimate, supporting the trustworthiness of the site.

R

Racing Club de Strasbourg Alsace

rcstrasbourgalsace.fr

55

The Racing Club de Strasbourg Alsace official website serves as a comprehensive digital platform for fans, partners, and stakeholders of the professional football club. It provides detailed information about the club's teams, schedules, ticketing, merchandise, and corporate hospitality. The site demonstrates a strong market position within French professional football, leveraging digital channels to engage its audience effectively. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, and Google Analytics, ensuring a good user experience and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved and WordPress updated to the latest version. Privacy compliance is moderate, with cookie policies present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and safe for general audiences.

A

ARTEFACT PRL

artefact.org

52

Artefact is a well-established cultural organization based in Strasbourg, France, specializing in the management and programming of contemporary music venues and events since 1994. The website presents a professional and content-rich platform showcasing numerous upcoming concerts and cultural activities, targeting a general French-speaking audience interested in arts and entertainment. Technically, the site is built on WordPress with modern plugins and libraries, optimized for performance and mobile responsiveness. Security measures include HTTPS enforcement and anti-spam protections, though explicit security headers and privacy policies are missing, indicating room for improvement in compliance and security posture. Overall, the site reflects a credible and professional cultural entity with a solid digital presence.

O

Office des Sports de Strasbourg

ods67.com

60

Office des Sports de Strasbourg (ODS67) is a well-established non-profit organization dedicated to promoting and supporting sports activities and clubs in the Strasbourg region. Founded in 2003, it serves as a central hub for sports events, club directories, volunteer coordination, and community engagement. The website reflects a strong local presence with comprehensive resources for sports enthusiasts and residents. Technically, the website is built on WordPress using modern plugins such as Advanced Custom Fields Pro and WP Rocket for performance optimization. It employs HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site follows basic best practices including HTTPS enforcement and domain transfer protection. However, it lacks DNSSEC and does not publish explicit security or incident response policies, which are areas for improvement. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website is professional, trustworthy, and serves its community effectively. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and implementing a security.txt file to improve transparency and security posture.

F

Festival Musica

festivalmusica.org

48

Festival Musica is an established international contemporary music festival based in Strasbourg, France, founded in 2019. It offers a rich program of events including concerts, podcasts, articles, and community engagement activities. The festival targets a general audience interested in contemporary music and cultural experiences. The website reflects a professional and consistent brand image supported by official cultural partners and regional sponsors. Technically, the site uses modern web technologies such as Alpine.js, Livewire, and Tailwind CSS, hosted by OVH, ensuring fast performance and excellent mobile optimization. Security practices include HTTPS enforcement and CSRF protection, though explicit cookie consent and privacy policy details could be improved. Overall, the site is trustworthy and well-maintained, with a strong social media presence and clear business legitimacy.

H

Haute école des arts du Rhin

hear.fr

45

Haute école des arts du Rhin (HEAR) is a French higher education institution specializing in artistic disciplines including Art, Design, Communication, and Music, with campuses in Mulhouse and Strasbourg. The website serves as an informational and promotional platform targeting prospective and current students, educators, and researchers. It provides detailed program information, admissions guidance, and showcases events and exhibitions, positioning HEAR as a regional leader in arts education. The institution appears to be established since 2016, with a medium-sized operational scale and a focus on quality artistic education and research.

F

FEFFS (Festival Européen du Film Fantastique de Strasbourg)

strasbourgfestival.com

53

The Festival Européen du Film Fantastique de Strasbourg (FEFFS) is a well-established cultural event in France, focusing on fantastic cinema and related genres. The website serves as an information hub for festival programming, awards, and events, targeting cinephiles and the general public interested in genre films. The site is built on WordPress with modern plugins and fonts, hosted by OVH sas, and demonstrates good technical maturity with HTTPS and responsive design. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with SSL enabled but missing security headers and DNSSEC. Overall, the website is professional and trustworthy but could improve compliance and security practices.

A

ARTUS Théâtre Universitaire de Strasbourg

artusasso.fr

47

ARTUS Théâtre Universitaire de Strasbourg is a small, non-profit university theatre association based in Strasbourg, France. It offers theatrical productions, workshops, auditions, and cultural events primarily targeting university students and theatre enthusiasts. The website is multilingual and professionally translated, reflecting a commitment to accessibility for international audiences. The business model focuses on community engagement and cultural enrichment rather than commercial profit. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, hosted by OVH. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS and a cookie consent mechanism but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no detailed GDPR compliance or incident response information. Overall, the website is trustworthy and professional, with a solid business presence and technical foundation. Strategic improvements in security policies and privacy transparency would enhance its posture and compliance.

A

Alsace Tech

alsacetech.org

53

Alsace Tech is a regional network of higher education institutions in Alsace, France, specializing in engineering, architecture, management, and design education. The website serves as a portal for students, companies, and partners to access information about the member schools, programs, events, and collaborative opportunities. The network positions itself as a key regional player in education with a focus on multidisciplinary and international programs. Technically, the website is built on WordPress with a mature set of plugins including Yoast SEO, Revolution Slider, and Max Mega Menu. It uses modern web technologies such as Bootstrap and jQuery and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable, which slightly impacts trust but the professional presentation and partner affiliations support legitimacy. Overall, Alsace Tech's website is a well-structured, professional educational network portal with moderate technical sophistication and a good security baseline. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and compliance.

A

Alliance française Strasbourg Europe

afstrasbourg.eu

45

Alliance française Strasbourg Europe is a small educational and cultural organization dedicated to promoting the French language and culture in Europe. The website is built on WordPress and uses common web technologies such as Google Analytics and Google Tag Manager for tracking. The content is minimal and mostly placeholder, indicating a basic web presence without extensive information or engagement features. Security posture is limited with no detected security headers and unknown SSL configuration. Privacy and cookie policies are absent, which is a compliance gap. No contact information or incident response details are provided, limiting user trust and support options. Overall, the website serves as a basic informational portal for the organization but requires improvements in security, privacy compliance, and content richness to enhance credibility and user experience.

A

AFGES

afges.org

69

AFGES is a well-established non-profit organization founded in 1999, serving as the primary representative body for students in the Alsace region of France. It holds a major position in student representation and provides key services such as a hotline for student rights defense and AGORAé centers offering food and material aid to financially struggling students. The website is built on a modern WordPress platform with Elementor, ensuring a good user experience and mobile optimization. However, it lacks some privacy compliance features such as cookie consent and explicit privacy policy details. Security posture is moderate with HTTPS enabled and domain protections in place, but missing DNSSEC and security headers. Overall, the site is trustworthy and professional, targeting students and stakeholders in education and social aid.

C

Coze - L'Agenda Culturel Alsacien

coze.fr

40

Coze.fr is a well-established regional cultural magazine and event listing platform focused on the Alsace region in France. It offers a comprehensive agenda of cultural events including concerts, exhibitions, festivals, and artist features, targeting residents and visitors interested in local culture. The website is professionally designed with consistent branding and regularly updated content, positioning it as a trusted media source in its niche. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses modern JavaScript libraries like Flickity for carousels. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and explicit cookie consent mechanisms, which are recommended for enhanced protection and GDPR compliance. The absence of WHOIS data reduces trust slightly but the professional nature of the site and its social media presence support its legitimacy. Overall, Coze.fr presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, privacy compliance, and incident response documentation would further strengthen its posture.

F

FastPixel

fastpixel.io

49

FastPixel is a cloud-based WordPress plugin focused on website speed optimization through caching, image optimization, minification, and CDN integration. Backed by the reputable ShortPixel team, it targets WordPress site owners seeking an easy-to-use, all-in-one performance solution. The website demonstrates a modern technical infrastructure leveraging WordPress, Cloudflare DNS, and Google marketing tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies are not explicitly published. Overall, the site is professional, trustworthy, and well-positioned in the WordPress optimization market.

The website www.sncf-connect.com is currently inaccessible due to a security mechanism that presents a captcha interstitial blocking all content access. The WHOIS lookup for the domain failed to return any registration data, indicating the domain may be unregistered, privacy protected, or otherwise unavailable. Due to these factors, no meaningful business, technical, or security information could be extracted from the site. The lack of privacy policies, contact information, or security headers further limits the ability to assess the site's legitimacy or compliance. Overall, the site appears non-functional or heavily protected, preventing analysis.

W

West Virginia MetroNews Network

wvmetronews.com

60

West Virginia MetroNews Network is a well-established regional media company focused on delivering news, sports, weather, and podcasts relevant to West Virginia residents. The website serves as a comprehensive platform for local news coverage, sports updates including high school and college sports, and multimedia content such as podcasts and live streams. It holds a strong market position as a trusted voice in the region with a business model centered on advertising revenue and digital content delivery. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Tag Manager, and various advertising and analytics integrations. The site is mobile-optimized and employs SEO best practices through Yoast SEO. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site demonstrates moderate to good performance and accessibility, though some improvements in security headers and DNSSEC could enhance its posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, and no formal security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Contact information is transparent with a physical address and phone number, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively balances content quality, technical implementation, and privacy compliance, though there is room for improvement in security best practices and formal incident response disclosures. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing a vulnerability disclosure or security policy to further strengthen trust and resilience.

P

Peak Health

peakhealth.org

53

Peak Health is a regional health insurance provider headquartered in Morgantown, West Virginia, owned by three established not-for-profit healthcare providers. The company offers health insurance plans including Medicare Advantage PPO plans, focusing on improving health outcomes for West Virginians and surrounding communities. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress with the Divi theme and uses modern web technologies and tracking tools, though some privacy compliance aspects are lacking. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and trustworthy entity.

J

Jefferson Health Plans

jeffersonhealthplans.com

65

Jefferson Health Plans is a regional healthcare insurance provider offering Medicare Advantage, Individual and Family plans, Medicaid, and CHIP plans. It operates under the umbrella of Health Partners Plans, Inc. and is affiliated with Jefferson Health and Thomas Jefferson University, providing a strong brand presence and community focus. The website presents comprehensive information about their products and services, targeting individuals and families seeking affordable health coverage in the region. Technically, the site is built on Adobe Experience Manager and uses modern analytics and tracking tools such as Crazy Egg, Microsoft Clarity, and Freshpaint, indicating a mature digital infrastructure. The site is mobile optimized and well-structured with good SEO practices. Security posture is generally good with HTTPS enforced, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data is unavailable, which reduces transparency and trust slightly, but the overall branding and external references support legitimacy. Privacy and terms of service pages are present, though GDPR compliance indicators are minimal. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

J

Jefferson Health

einstein.edu

67

Jefferson Health's Einstein Healthcare Network website presents a comprehensive and professional digital presence for a large regional healthcare provider with a legacy of over 150 years. The site offers detailed information about specialized medical services, patient portals, and community engagement, targeting patients and healthcare consumers in the Greater Philadelphia area. The integration of multiple analytics and marketing tools indicates a mature digital infrastructure, supported by Adobe Experience Manager CMS. Security posture is strong with HTTPS and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data limits domain registration insights, but the website's branding and external references strongly support its legitimacy. Overall, the site demonstrates high professionalism, trustworthiness, and user experience, suitable for a major healthcare institution.

The website lvhn.org is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This indicates that the site is either restricted, under maintenance, or protected by a security mechanism such as a caching server or WAF, although no specific WAF vendor was identified. Due to the lack of accessible content, no business descriptions, policies, or contact information could be extracted. The domain is registered since 2009 with Network Solutions, LLC, suggesting an established presence likely related to healthcare given the domain name and WHOIS data. Hosting appears to be on Oracle Cloud DNS infrastructure. The security posture cannot be fully assessed due to lack of accessible content and headers, but the absence of DNSSEC and security headers is noted as a minor concern. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately in this state.

T

Thomas Jefferson University

jefferson.edu

67

Thomas Jefferson University is a well-established higher education institution based in Philadelphia, PA, offering a broad range of undergraduate and graduate programs. The website reflects a professional and comprehensive digital presence with strong branding and extensive academic and research content. The university targets prospective students, current students, faculty, and researchers, positioning itself as a leader in education and research within its region. Technically, the site is built on Adobe Experience Manager with modern analytics and marketing tools integrated, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is partially met with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though WHOIS data for the domain was not retrievable, likely due to querying the subdomain rather than the root domain.

T

Tower Health

towerhealth.org

67

Tower Health is a large regional healthcare provider based in the United States, founded in 2017. The organization offers a comprehensive range of healthcare services including hospitals, urgent care, virtual care, pharmacy, and specialized medical services such as cancer care and neuroscience. The website reflects a mature digital presence with a professional design, clear navigation, and strong branding consistency. It targets patients, medical professionals, and the community with a focus on coordinated and accessible healthcare. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and accessibility tools. It integrates Google Analytics and Tag Manager for analytics and marketing, and uses The Trade Desk for advertising and retargeting. The site is mobile optimized and includes accessibility features, although performance is moderate. Security measures include HTTPS enforcement and some security headers, but DNSSEC is not enabled and cookie consent mechanisms are absent. From a security perspective, the site demonstrates good practices with secure forms and no exposed sensitive data. However, it lacks explicit incident response contacts and vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy policies are comprehensive and GDPR compliant, but cookie consent is missing, which could be a compliance gap. Overall, Tower Health's website is professional, trustworthy, and well-positioned in its market. Strategic improvements in DNS security, privacy compliance, and incident response transparency would further strengthen its security and compliance posture.

T

The CV-Library Group

cv-librarygroup.co.uk

54

The CV-Library Group operates a network of UK-based job boards, including the flagship CV-Library site, serving millions of job seekers and recruiters monthly. Founded in 2000, it has grown to include multiple specialist recruitment platforms across various sectors and geographic regions, including Ireland and the US. The group targets both job hunters and employers, providing extensive CV databases and job posting services. Technically, the website uses standard web technologies such as jQuery and CSS, with a moderate performance profile and good mobile optimization. However, no advanced frameworks or CMS are detected. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data for the domain analyzed is unavailable due to domain naming rules, which raises some concerns about domain registration consistency but does not detract from the professional presentation and trust signals on the site. Overall, the website is professional, trustworthy, and well-branded but could improve in security and privacy transparency.

D

Delcros

delcros.fr

54

Delcros is a French company specializing in surface treatment of stainless steel and aluminum parts, with a history dating back to 1965. The company offers a range of industrial services including chemical pickling, passivation, electrolytic polishing, tribofinition, microblasting, and anodization. Recently acquired by ANODUR, Delcros has expanded its market presence and is recognized for compliance with nuclear industry standards such as ISO 9001:2015 and ISO 19443:2018. The website targets professional clients in the energy sector and emphasizes quality and reactivity as key differentiators. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern web technologies and a cookie consent mechanism implemented via Tarteaucitron. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy policy documentation. No contact emails or phone numbers are directly visible, which may impact user trust and compliance. Overall, the site is professional and well-structured, but could improve transparency and security practices.

G

GIO Notaires

gio-notaires.fr

45

GIO Notaires is a professional alliance of nine certified or ISO-certification-pursuing notarial offices in France, offering a wide range of legal and notarial services including family law, business law, wealth management, and real estate. The group emphasizes proximity, adaptability, and performance, serving clients primarily in Ile-de-France and other regions with a team of 24 notaries and 180 collaborators. The website is built on WordPress with Elementor and integrates modern technologies such as Google Maps and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent in place, though security headers are not detected and could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of professional service. Overall, the website presents a trustworthy and professional image with comprehensive contact information and compliance with GDPR.

P

Poissonnerie des Halles

poissonneriedeshalles.fr

46

Poissonnerie des Halles is a small local business based in Reims, France, specializing in seafood retail and restaurant services. The website promotes their fish, shellfish, and crustacean sales alongside dining options and event catering. The business also highlights partnerships with related entities such as L'Etal, Le Bocal restaurant, Le Triporteur mobile restaurant, and La Maison d'Oléron vacation rental, indicating a diversified local ecosystem. The website content is well structured, professionally designed, and targets local customers and visitors interested in seafood and dining experiences. Technically, the website uses a modern but basic technology stack including Bootstrap, jQuery, FontAwesome Pro, and Google Fonts. The site is mobile optimized and SEO friendly with proper meta tags and Open Graph data. However, no CMS or hosting provider information is evident. Performance is moderate with no major technical issues detected. Accessibility is basic but functional. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which reduces compliance with GDPR and best practices. No forms or user data collection mechanisms are present, minimizing attack surface but also limiting engagement. The WHOIS data is missing, which raises concerns about domain legitimacy and registration status. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website is a good representation of a small local seafood business with moderate technical maturity but with room for improvement in security, privacy compliance, and domain legitimacy verification. Strategic recommendations include adding privacy and cookie policies, implementing security headers, verifying domain registration, and enhancing trust signals.

D

Danone s.r.o

nutriklub.sk

67

Nutriklub.sk is a professionally managed website operated by Danone s.r.o, a reputable multinational company specializing in infant and toddler nutrition products. The site serves as both an e-commerce platform and an expert advisory resource for pregnancy, breastfeeding, and child nutrition, targeting parents and caregivers primarily in Slovakia. The website features a rich content library authored by experts, integrated e-shop functionality, and multiple user engagement tools including live chat support. Technically, the site is built on Adobe Experience Manager with React components, leveraging modern web technologies and third-party services such as Google Tag Manager and Salesforce Live Agent for analytics and customer support. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

N

Nutricia

nutricia.sk

44

Nutricia is a specialized healthcare nutrition company operating in Slovakia, providing tailored nutritional products and services for patients with special dietary needs, including infants, seniors, oncology patients, and those with metabolic disorders. The company is part of the Danone Group, a globally recognized entity in the food and nutrition sector. The website reflects a professional and consistent brand presence with a focus on clinical nutrition and patient care. Technically, the site is built on WordPress using Elementor, with integration of Google Analytics and Tag Manager for tracking. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and serves its target audience effectively.

V

VHS Benešov a.s.

vhsbenesov.cz

44

VHS Benešov a.s. is a regional water utility company based in the Czech Republic, providing essential water supply and sewage services to over 100 municipalities and more than 70,000 inhabitants. The company operates under the umbrella of the global SUEZ group, indicating a strong market position and access to international expertise. Their service portfolio includes water treatment, distribution, sewage management, infrastructure construction, and customer billing. The website is professionally designed using Joomla CMS and incorporates modern web technologies such as jQuery and Bootstrap, ensuring a good user experience and mobile responsiveness. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks some security headers and explicit privacy compliance mechanisms, which could be improved. Overall, the domain registration data aligns well with the company's profile, supporting legitimacy and trustworthiness.

Pivovar Ferdinand, s.r.o. is a Czech brewery specializing in traditional and gluten-free beers, serving both retail and hospitality sectors primarily in the Czech Republic. The website presents a professional and content-rich platform showcasing their product range, brewing philosophy, and services including direct delivery. Technically, the site uses a custom CMS with common JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Facebook SDK for marketing and analytics. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with cookie consent implemented but lacks visible security headers and privacy policy pages. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is mature content-wise due to alcohol products and includes age consent mechanisms.

Sport & Relax Centrum Benešov operates a comprehensive hospitality and sports complex located in Benešov, Czech Republic. The business offers a wide range of services including hotel accommodation, sports facilities such as tennis, badminton, volleyball, and padel courts, a restaurant specializing in Czech and Italian cuisine, bowling lanes, wellness amenities, and conference/event spaces. The website targets a general audience including families, sports enthusiasts, and corporate clients seeking teambuilding venues. The company positions itself as a regional leader in leisure and hospitality with convenient access from Prague.

Bezpečná společnost z.s. is a Czech non-profit organization focused on crime prevention, public safety, education, and supporting employment for hard-to-employ individuals. The organization collaborates with the Police of the Czech Republic and runs community safety projects. Their website reflects a small, regionally focused entity with a clear mission to enhance public safety and social welfare. Technically, the website uses a standard open-source technology stack including jQuery, Bootstrap, and Google Analytics. The site is served over HTTPS, includes a cookie consent banner, and is mobile responsive with good navigation and content quality. However, it lacks explicit privacy and terms of service pages and does not implement advanced security headers, which are areas for improvement. From a security perspective, the site shows moderate maturity with HTTPS and cookie consent but lacks detailed security policies and incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. No vulnerabilities or adult content were detected, and the site is safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy and security policies, improved security headers, and verification of domain registration details to strengthen trust and compliance.

V

Vcestovani.cz

bezpecnystredoceskykraj.cz

45

Vcestovani.cz is a Czech travel portal providing comprehensive travel guides, destination recommendations, and travel insurance offers primarily targeting Czech-speaking travelers. The website is built on WordPress with SEO optimization via Yoast and integrates Google Analytics and Adsense for tracking and monetization. The technical infrastructure is modern and mobile-optimized, though minor backend PHP warnings indicate some code maintenance is needed. Security posture is adequate with HTTPS enabled but lacks advanced security headers. Privacy and cookie policies are present, supporting GDPR compliance. However, the absence of WHOIS data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is professional and functional, serving its niche effectively.

K

Mapa kriminality v Benešově – MěP Benešov

kriminalita-city.cz

53

The website www.kriminalita-city.cz serves as an official municipal crime mapping and public safety information portal for the city of Benešov, Czech Republic. It provides residents and visitors with an interactive map detailing various categories of offenses and municipal police activities. The site is built on WordPress and leverages modern JavaScript libraries such as Leaflet for mapping. While the site is functional and provides relevant local information, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is readily available. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the content and linked municipal domains suggest official use. Security posture is moderate with HTTPS enabled but missing security headers and policies. Overall, the site is a useful public service tool but requires improvements in compliance and security transparency.

M

Město Benešov

ssob.info

47

The website ssob.info serves as the official social services portal for the Benešov district in the Czech Republic. It provides comprehensive information on social service catalogs, community planning, family policies, crisis lines, and institutional contacts. The site targets local residents and social service users, operating as a government public service platform. The presence of ISO 9001 certification and official city links reinforces its credibility and trustworthiness. Technically, the site is built on the vismo CMS platform, employs standard web technologies including HTML5, CSS, and JavaScript, and integrates Google Translate for multilingual support. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate.

A

Aira Communication

aira.media

60

Aira Communication is a Czech media and communication company with over 25 years of experience, operating multiple niche magazines targeting both male and female audiences. They provide a range of services including copywriting, advertising on their media platforms, communication and PR, and SEO services. The company positions itself as a comprehensive communication partner for businesses seeking tailored campaigns and content solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO and UIkit, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement by adding security headers and formal security policies. WHOIS data is privacy protected, which is typical and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

A

Association des Centraliens de Lyon (ACL)

technica-magazine.fr

57

Technica Magazine is a professional publication serving the alumni and engineering community of Centrale Lyon. It offers specialized content including dossiers, articles, and newsletters focused on engineering, career development, and alumni activities. The website demonstrates a solid technical infrastructure using modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security measures include HTTPS enforcement, CSRF tokens, and hCaptcha for form protection, reflecting a mature security posture. However, the absence of WHOIS data and explicit security policies slightly reduce transparency and trust. Overall, the site is professional, compliant with GDPR, and trustworthy for its target audience.