Security Directory

I

IT2GO s.r.o.

it2go.cz

60

IT2GO s.r.o. is a Czech Republic-based small technology company specializing in IT solutions for church communities, including parish management systems and websites. Founded in 2020, the company emphasizes user-friendly software that bridges traditional and modern approaches for church organizations. Their market position is niche but well-defined, focusing on accessible church IT services. Technically, the website employs modern JavaScript libraries and analytics tools like Matomo, hosted behind Cloudflare for performance and security. The site is well-designed with good navigation and mobile optimization but lacks some advanced accessibility features. Security posture is adequate with HTTPS and Cloudflare protection, though missing security headers and anti-bot measures on forms are notable gaps. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security hardening would enhance trust and compliance.

T

Teijin Aramid

teijinaramid.com

71

Teijin Aramid is a prominent manufacturer specializing in sustainable, high-performance aramid fibers and materials. The company positions itself as a leader in innovation and sustainability within the manufacturing sector, targeting industrial and business clients. The website reflects a professional B2B business model with a focus on sustainability and advanced material solutions. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Hotjar, Facebook Pixel, and Piwik PRO, indicating a mature digital infrastructure. The presence of a comprehensive cookie consent mechanism demonstrates attention to privacy compliance, although explicit privacy and terms of service policies were not detected in the provided content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but the lack of WHOIS data raises some concerns about domain registration transparency.

Z

ZHT Group

zht.cz

47

ZHT Group is a Czech-based manufacturer specializing in firefighting and rescue equipment, including fire carts, ATVs, pumps, and modular vehicle bodies. The company targets municipalities, fire brigades, and rescue services, offering flexible and reliable solutions for water transport and technical interventions. Their market position is that of a niche provider with a focus on quality and customization. The website is built on WordPress with Elementor, featuring modern design and good mobile optimization. Social media presence is established on Facebook and Instagram, supporting brand visibility. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and policies are missing. No blocking or WAF challenges were detected, allowing full content access. Overall, the website reflects a legitimate and professional business with room for improvement in privacy and security disclosures.

T

Thomas Jefferson University

jefferson.edu

67

Thomas Jefferson University is a well-established higher education institution based in Philadelphia, PA, offering a broad range of undergraduate and graduate programs. The website reflects a professional and comprehensive digital presence with strong branding and extensive academic and research content. The university targets prospective students, current students, faculty, and researchers, positioning itself as a leader in education and research within its region. Technically, the site is built on Adobe Experience Manager with modern analytics and marketing tools integrated, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is partially met with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though WHOIS data for the domain was not retrievable, likely due to querying the subdomain rather than the root domain.

A

AFM-Téléthon

afm-telethon.com

66

AFM-Téléthon is a prominent French non-profit organization dedicated to combating rare diseases through family support, research funding, and public awareness. The organization operates a comprehensive digital platform that facilitates donations, volunteer engagement, and dissemination of scientific and patient information. Their market position is strong within the healthcare non-profit sector in France, supported by multiple research subsidiaries and partners. Technically, the website is built on Drupal CMS with modern analytics and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a mature, trustworthy, and professionally managed digital presence aligned with its mission.

Stredná odborná škola Pruské is a Slovak secondary vocational school specializing in agricultural and horticultural education, including niche fields such as kynology. The institution operates under the regional government of Trenčiansky samosprávny kraj and offers a variety of study programs, vocational training, and extracurricular activities. The website serves as an information portal for students, parents, and the community, providing news, event updates, galleries, and virtual tours. The school maintains active social media channels and uses EduPage for student management. Technically, the website is built on the BUXUS CMS platform and employs modern web technologies including Google Tag Manager, YouTube APIs, and Bootstrap Icons. The site is mobile-optimized with good SEO and accessibility features, although accessibility could be improved. Cookie consent and privacy policies are implemented in compliance with GDPR, reflecting a mature approach to privacy and user consent. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and preparedness. The WHOIS data aligns well with the website content, confirming legitimacy and consistent registration details. Overall, the website is professional, trustworthy, and well-maintained, serving its educational mission effectively. Strategic improvements in security transparency and contact information could further strengthen its posture.

A

Agra poisťovňa

agrapoistovna.sk

58

Agra poisťovňa is a Slovak insurance company offering various insurance products and services targeted at individuals and businesses within Slovakia. The website presents a professional and consistent brand image with a focus on customer engagement through contact forms and informational content. The technical infrastructure leverages WordPress CMS, Bootstrap framework, and integrates third-party services such as Google Tag Manager and Usercentrics for analytics and cookie consent management, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are absent, representing an area for improvement. Overall, the website is trustworthy and functional, serving its business purpose effectively.

S

Služby města Pardubic a.s.

smp-pce.cz

49

Služby města Pardubic a.s. is a well-established municipal services company operating in Pardubice, Czech Republic, with over 25 years of experience. The company provides a broad range of public services including waste management, public lighting, road maintenance, green care, funeral services, and energy management. Their market position is strong locally, supported by a clear and professional web presence and active social media engagement. The website is designed to serve local residents and public institutions with relevant, accessible information and service offerings. Technically, the site uses a modern CMS platform with standard web technologies and is mobile optimized, though some improvements in accessibility and security headers could be made. Security posture is adequate with HTTPS and privacy compliance, but lacks explicit security policies or vulnerability disclosure mechanisms. Overall, the site is trustworthy and professionally maintained, reflecting the company's credibility and public service mission.

C

Care Access

careaccess.com

11

Care Access is a clinical research company dedicated to accelerating the future of medicine by improving access to clinical trials and medical research, especially for underrepresented communities. Their innovative approach includes deploying virtual PIs, pop-up research sites, and community-based engagement to dramatically reduce enrollment times and increase patient participation. The company operates a large network of research sites across the United States and partners with community organizations to bring health screenings and research opportunities directly to patients. Technically, the website is built using modern web technologies including Tailwind CSS, JavaScript frameworks, and integrates with multiple analytics and marketing platforms such as HubSpot, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized, fast-loading, and accessible, with comprehensive metadata and structured data for SEO. From a security perspective, the site enforces HTTPS, uses security headers, and has domain protections in place. However, DNSSEC is not enabled, and there is no publicly available security or incident response policy. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Overall, Care Access presents a professional, trustworthy, and well-structured online presence that aligns with its mission to democratize clinical research access. The domain is long-established and consistent with the business claims, enhancing credibility. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

R

Recykluji! Neskládkuji! – Konference Recykluji! Neskládkuji!

recyklujineskladkuji.cz

54

The website www.recyklujineskladkuji.cz represents a professional conference titled 'Recykluji! Neskládkuji!' focused on recycling and sustainable management of construction waste. It targets construction companies, transporters, municipal representatives, recycling advocates, and students in construction fields. The conference offers expert lectures, practical case studies, moderated discussions, and networking opportunities. The event is supported by regional authorities such as the Plzeňský kraj and features reputable industry partners. Technically, the site is built on WordPress using Elementor, with common web technologies like jQuery and Font Awesome. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but security headers are missing, and no privacy or cookie policies are present, indicating compliance gaps. No contact emails or phone numbers are explicitly provided, which limits direct communication channels. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable for this type of small conference site. Overall, the site is legitimate, professional, and safe, but improvements in privacy compliance and security hardening are recommended.

S

Storm Bowling

stormbowling.com

62

Storm Bowling operates a professional e-commerce platform specializing in bowling equipment and accessories. The website showcases multiple brands and a wide product range targeting bowling enthusiasts. The business model is retail-focused with a medium-sized market presence. Technically, the site uses Magento CMS with modern JavaScript libraries and analytics tools, hosted on DigitalOcean infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced, but lacks visible security headers and privacy compliance mechanisms. WHOIS data is unavailable, which slightly impacts trust but the site content and branding appear legitimate. Overall, the site is functional and trustworthy for its business purpose but could improve privacy and security transparency.

I

INFINITY ACADEMY

infinityacademy.cz

53

INFINITY ACADEMY is a specialized educational organization focused on waste management, particularly in the recycling of construction and demolition waste. With 25 years of industry experience, it offers training programs, workshops, conferences, and consulting services targeted at recycling companies, construction engineers, architects, and related professionals in the Czech Republic. The website is built on a modern WordPress platform using Elementor and Astra theme, providing a professional and responsive user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data limits full trust verification, though the website content and contact information support legitimacy. Strategic improvements in privacy compliance and security hardening are recommended.

Ú

Údolí Svratky a.s.

udolisvratky.cz

51

Údolí Svratky a.s. operates as a regional tourism promoter focused on the Vysočina region of the Czech Republic, offering a broad range of services including accommodation, dining, sports activities, cultural events, and e-commerce for local edible souvenirs. The company targets tourists and visitors interested in nature, culture, and active leisure in this region. The website is professionally designed with good content quality and clear navigation, supporting the business model effectively. Technically, the site uses modern web technologies including Google Fonts, YouTube API, and Google Maps API, hosted likely by a Czech hosting provider. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness and warrants further verification. Overall, the website presents a trustworthy and professional front for the company with room for security and compliance improvements.

C

Cushman & Wakefield

cushmanwakefield.com

66

Cushman & Wakefield is a global leader in commercial real estate services, offering a broad portfolio of services including agency leasing, asset services, capital markets, tenant representation, and valuation. Founded in 1917 and headquartered in Chicago, the company operates at an enterprise scale with a workforce of approximately 52,000 employees. The website reflects a mature digital presence with comprehensive content, strong branding, and global reach. Technically, the site uses modern technologies such as jQuery, Google Tag Manager, Vidyard, and Coveo search, and is likely built on the Sitecore CMS platform. Security posture is solid with HTTPS and Content-Security-Policy headers, though some advanced security headers and explicit vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with cookie consent and privacy policies aligned with GDPR. The WHOIS data is unavailable, which limits domain registration trust analysis, but the overall site professionalism and market presence strongly indicate legitimacy.

K

Kestria ry

kestria.com

68

Kestria ry operates as the world’s largest executive search alliance, connecting boutique executive search firms globally to provide leadership recruitment services across multiple industries and functions. Founded in 2020, the organization has established a strong market position with offices spanning 6 continents, 40+ countries, and 90+ cities, targeting companies seeking executive talent and search firms wishing to join the alliance. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, jQuery, and Google Maps API, likely running on a Django backend. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Privacy and cookie policies are well implemented with explicit consent mechanisms, indicating good compliance with GDPR. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and visible security headers. There is no public security policy or incident response information, nor a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, Kestria’s website presents a trustworthy and professional digital presence with strong business credibility and privacy compliance. Strategic enhancements in security policies and technical security controls would further strengthen its posture.

Demcon is a technology company focused on attracting and recruiting technology professionals through its careers website. The site is designed to showcase career opportunities and engage talent interested in technology sectors. The company appears to be medium-sized and founded in 2018, with a consistent domain registration and hosting setup. The technical infrastructure leverages modern JavaScript frameworks such as Nuxt.js, integrates Google Tag Manager and YouTube APIs, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service in the provided content. Overall, the website is professional and functional, but could improve transparency and security practices to enhance trust and compliance.

Jinak o.p.s. is a Czech non-profit organization dedicated to providing social services such as support for independent living, social therapeutic workshops, social rehabilitation, education, and counseling. The website targets individuals seeking social support within the Czech Republic and presents a clear, consistent brand with relevant content for its audience. The organization maintains an active presence with contact information and partner links, indicating a community-focused approach. Technically, the website uses older but functional technologies including jQuery 1.11 and integrates multimedia features like YouTube and text-to-speech services. However, the site lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact details suggest a legitimate entity. Overall, the site is functional and professional but would benefit from technical and security improvements.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

E

Eiffage

eiffage.ca

63

Eiffage Canada operates as a multiskilled construction group focused on sustainable infrastructure development and local economic contribution. The company is part of the larger Eiffage Group, a well-established European construction and engineering conglomerate. Their Canadian website emphasizes quality, health and safety, environmental responsibility, and strong corporate values. The site targets construction industry clients, local communities, and suppliers in Canada, offering services in maintenance, rehabilitation, and new construction works. Technically, the website is built on the Jahia CMS platform, utilizing modern JavaScript libraries such as jQuery and APIs from YouTube and Vimeo for media integration. It employs Google Analytics and TagCommander for analytics and marketing, alongside OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and displays a security alert warning users about impersonation attempts, reflecting a proactive security posture. However, the absence of WHOIS data for the domain www.eiffage.ca is a notable anomaly, though the website content and external links strongly associate it with the legitimate Eiffage Group. No critical vulnerabilities or exposed sensitive data were detected. Overall, Eiffage Canada's website presents a professional, secure, and compliant digital presence aligned with its business objectives. The main risk lies in the missing WHOIS data, which should be investigated further to ensure domain registration transparency and trustworthiness.

E

Eiffage

eiffage-aevia.com

56

Eiffage Ævia is a specialized subsidiary of the Eiffage Group focused on the conservation, maintenance, and improvement of civil engineering infrastructure and heritage. The company offers both services and products tailored to the construction and repair of civil engineering works, leveraging specialized equipment and in-house developed systems. The website reflects a professional B2B orientation targeting infrastructure professionals and stakeholders in the energy, transportation, and real estate sectors. Technically, the site uses modern JavaScript libraries, integrates Google reCAPTCHA for form security, and employs OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and visible security alerts, though some security headers are missing and no explicit incident response contacts are published. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the strong branding and affiliation with the reputable Eiffage Group mitigate these concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

B

Bosch Energy and Building Solutions

go-to-bosch.com

56

Bosch Energy and Building Solutions is a large, well-established business entity operating in Germany, specializing in integrated building technologies including security systems, energy efficiency, building automation, and digital services. The website reflects a professional and comprehensive digital presence with strong Bosch branding, targeting commercial building operators, planners, and partners. The company offers a broad portfolio of services and maintains active engagement through events and webinars. Technically, the site uses modern web technologies, including Google Tag Manager and custom Bosch frameworks, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong brand presence and professional content. Overall, the site is trustworthy, well-maintained, and compliant with GDPR regulations.

F

F5, Inc.

f5.com

77

F5, Inc. is a well-established enterprise technology company specializing in application delivery, security, and multicloud networking solutions. Founded in 1996 and headquartered in Seattle, USA, F5 serves a global enterprise audience including IT professionals and security teams. The company offers a broad portfolio of services such as application delivery controllers, API security, bot management, and DDoS protection, positioning itself as a leader in the technology sector. The website reflects this with professional design, comprehensive content, and clear navigation tailored to enterprise users. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, Tealium tag management, and Adobe Helix RUM for performance monitoring. It integrates third-party platforms like YouTube and Coveo for media and search functionality. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure supporting a global user base. From a security perspective, F5 demonstrates strong posture with HTTPS enforcement, multiple security headers, and recognized certifications such as ISO 27001 and SOC 2. The presence of a vulnerability disclosure program and incident response contacts further underscores their commitment to security and compliance. No vulnerabilities or suspicious content were detected in the analysis. Overall, the website and business exhibit high trustworthiness and professionalism. The absence of WHOIS data is mitigated by consistent business information and strong security and privacy practices. Strategic recommendations include maintaining up-to-date third-party components, enhancing transparency on data retention, and continuing proactive security monitoring to sustain their leadership position.

D

DATENKNOTEN

datenknoten.at

47

DATENKNOTEN is a small Austrian IT service provider focused on delivering creative IT concepts and remote support services primarily to customers in the Gasteinertal region. The website presents a professional and consistent brand image with clear navigation and German language content. The technical infrastructure relies on common web technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. Security measures include cookie consent with opt-out for analytics and IP anonymization, but lack explicit security headers and documented security policies. Overall, the website is accessible, functional, and compliant with basic privacy regulations, though it could benefit from enhanced security practices and more transparent contact information.

G

Golf Eichenheim - Kitzbühel

eichenheim.com

48

Golf Eichenheim - Kitzbühel operates a prestigious 18-hole championship golf course located in the scenic Kitzbühel Alps, Austria. Established in 2000, it offers a comprehensive golf and hospitality experience including memberships, a golf school, pro shop, and partnerships with local hotels such as the Grand Tirolia. The website is professionally designed, SEO optimized, and provides detailed information about memberships and services, targeting golf enthusiasts and business clients. Technically, the site runs on WordPress with modern plugins and includes multimedia content, though some performance and accessibility improvements are possible. Security posture is solid with HTTPS and cookie consent, but lacks some security headers and a published privacy policy. The absence of WHOIS data raises concerns about domain registration legitimacy, though the business presence and content suggest a legitimate operation. Strategic recommendations include publishing privacy and terms policies, enhancing security headers, and verifying domain registration details.

M

MG Motor

mgmotor.pl

9

MG Motor Poland operates as a regional automotive brand offering a diverse portfolio of vehicles including gasoline, hybrid, plug-in hybrid, and fully electric models. The website is professionally designed, targeting Polish consumers interested in MG vehicles, providing detailed model information, pricing, and promotional offers. The brand is a subsidiary of SAIC Motor, a major automotive company, and is establishing a growing presence in the Polish market with increasing vehicle registrations and dealer network expansion. Technically, the website employs modern web technologies such as responsive design, WebP images, Google Tag Manager, and YouTube APIs, ensuring a good user experience across devices. However, some security best practices like security headers and explicit privacy and cookie policies are missing or not detected in the provided content, which could be improved to enhance compliance and user trust. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of security headers and lack of visible privacy compliance measures represent areas for enhancement. The WHOIS data is unavailable from the Polish registry, which slightly reduces domain trustworthiness, though the professional branding and content suggest legitimacy. Overall, MG Motor Poland's website is a solid digital presence for an automotive brand with room for improvement in privacy compliance and security hardening to align with best practices and regulatory requirements.

R

Recisio

jamzone.com

69

Jamzone is a professional music backing tracks platform operated by Recisio, offering a large catalog of studio-quality tracks with advanced features such as multitrack mixing, tempo and pitch control, and offline mode. The platform targets musicians, educators, and live performers, positioning itself as a leading solution in the music backing tracks market. Technically, the website uses modern web technologies including Google Tag Manager, Facebook Pixel, and YouTube APIs, delivering a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response contacts are missing. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, though the website's professionalism and branding suggest legitimacy. Strategic recommendations include improving security headers, adding cookie consent, and publishing vulnerability disclosure information.

E

Embed Private YouTube Video

embedprivatevideo.com

49

Embed Private YouTube Video is a small technology-focused business founded in 2017 that provides a specialized service and WordPress plugin enabling website owners to securely embed private YouTube videos. The company targets website owners and businesses requiring private video sharing solutions, positioning itself as a niche provider in this space. The website content is well-structured, professional, and consistent with the business model, offering clear service descriptions and customer testimonials that enhance trust. Technically, the website is built on WordPress and leverages common web technologies including jQuery, YouTube iframe API, and Google Fonts. The site is hosted under a domain registered with GoDaddy.com, LLC, with a stable registration status and no privacy protection, indicating transparency. Performance and mobile optimization are good, though accessibility is basic. SEO practices are adequately implemented with proper metadata and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. There is no visible security policy or incident response information, and no cookie consent mechanism is present, which may impact privacy compliance. The use of Facebook Pixel indicates moderate user tracking. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to enhance trust and compliance.

E

Emirates Group

emiratesgroupcareers.com

64

The Emirates Group Careers website serves as a comprehensive employment portal for the Emirates Group, a major global airline and aviation services provider headquartered in the United Arab Emirates. The site offers detailed information on career opportunities across various sectors including airline operations, corporate roles, IT, and more. It highlights employee benefits, company awards, and promotes a diverse and inclusive work environment. The website is professionally designed with a strong brand presence and multimedia content that enhances user engagement. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Hotjar for user behavior analytics, and integrates YouTube content. It is optimized for mobile devices and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, though some security headers could be improved for enhanced protection. The WHOIS data for the domain is unavailable, indicating possible privacy protection or a new registration. Despite this, the website content and external references strongly support the legitimacy of the site as an official Emirates Group platform. No critical security vulnerabilities or compliance issues were detected. Overall, the site presents a secure, user-friendly, and trustworthy platform for prospective employees. Strategic recommendations include enhancing security headers, maintaining up-to-date privacy compliance, and improving contact information visibility to strengthen user trust and engagement.

V

Virgin Money Foundation

virginmoneyfoundation.org.uk

67

Virgin Money Foundation is a UK-based non-profit organization affiliated with Virgin Money UK, focused on supporting and transforming communities for the better. The website presents a professional and consistent brand image aligned with Virgin Money, targeting UK communities and charitable organizations. The business model centers on charitable grants and social impact initiatives, positioning the foundation as an established player in the UK non-profit sector. Technically, the website employs modern JavaScript libraries, Adobe DTM for tag management, and Evidon for consent management, indicating a mature digital infrastructure. The site is HTTPS secured and includes meta tags for SEO and social media integration, though no CMS or hosting provider details are evident. Performance and mobile optimization are moderate to good, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses consent management scripts to comply with GDPR. However, the absence of a full Content-Security-Policy header, security.txt, and explicit incident response policies suggests room for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS lookup failed due to domain naming rules, which raises some trust concerns, but the website content and branding mitigate these to an extent. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in privacy, security policies, and contact information to improve compliance and user trust.

L

lafree.ch - Site évangélique d'information

eglisesfree.ch

50

The website eglisesfree.ch serves as the official online presence for the Fédération romande d'Églises évangéliques (FREE), a non-profit federation of evangelical churches in French-speaking Switzerland. It provides news, event information, resources, and community support tailored to evangelical communities. The site is well-structured, content-rich, and targets a specific religious audience with relevant services such as podcasts, theological commissions, and youth programs. The business model is non-profit and community-focused, with partnerships to support its mission. Technically, the site is built on Joomla CMS using the Helix3 framework, integrating common web technologies like jQuery, Google Analytics, and YouTube embeds. The site is mobile-optimized and performs moderately well, with good SEO practices. However, it lacks some advanced accessibility features and security headers that could enhance its robustness. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or security.txt files are present, and security headers are missing, indicating room for improvement in security posture. The WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

The Schweizerische Pfingstmission (SPM) operates as a Swiss non-profit umbrella organization for autonomous Christian churches, focusing on promoting biblical values, youth work, and global mission projects. Their website reflects a clear organizational mission with accessible contact information and multilingual support (German and Italian). The site is built on a WordPress platform with modern UIkit styling and integrates multimedia content such as videos and image sliders to engage visitors. Technically, the infrastructure is stable with standard web technologies and moderate performance. Security posture is adequate with HTTPS enforced and secure login mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, serving its community effectively.

A

APOMEDICA Pharmazeutische Produkte

magnesium-sport.at

45

The website magnesium-sport.at represents APOMEDICA Pharmazeutische Produkte's brand Dr. Böhm® Magnesium Sport®, specializing in mineral supplements tailored for sports and active lifestyles. The site targets athletes and fitness enthusiasts in Austria, emphasizing product quality, doping-free certification, and exclusive pharmacy distribution. The business holds a solid niche position in the healthcare supplement market with a focus on magnesium and potassium products that support muscle function and recovery. Technically, the website is built on WordPress with the Avada theme and uses common plugins such as Revolution Slider and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and delivers moderate performance. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and uses an older jQuery version, which could be improved. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. The site integrates social media channels and maintains trust through doping-free certifications and transparent product information. Overall, the website is professional, trustworthy, and well-suited for its target audience, though security enhancements and explicit incident response policies could further strengthen its posture.

House of Energy is a medium-sized German company specializing in integrated building services engineering, including sanitary, heating, ventilation, and electrical systems. With approximately 200 employees and multiple locations, it holds a solid market position in the construction sector, focusing on quality and customer satisfaction. The website is built on WordPress with modern plugins and demonstrates good technical maturity, including GDPR compliance and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

L

liverelations gmbh

liverelations.at

48

liverelations gmbh operates a German-language website focused on corporate magazines and event organization, targeting corporate clients primarily in Austria. The website is built on WordPress using the Enfold theme and integrates modern web technologies such as Google Fonts, YouTube embeds, and Google reCAPTCHA for bot protection. While the site is functional and moderately optimized for mobile, it lacks explicit privacy and cookie policy pages, though a cookie consent mechanism is present. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but missing security headers and absence of a published security policy reduce overall security maturity. No contact emails or phone numbers are directly visible on the homepage, which may impact user trust and compliance. Overall, the site is a small media business with basic digital maturity and moderate security and privacy compliance.

W

Wiener Kaiserwiesn

kaiserwiesn.at

58

Wiener Kaiserwiesn is a well-established event organizer hosting the annual Oktoberfest-style festival in Vienna, Austria. The website provides comprehensive information about the event, including schedules, ticket sales, partner acknowledgments, and multimedia content. The business targets local and international visitors interested in traditional and party music festivals. Technically, the website is built on WordPress with a modern theme and plugins, supporting multilingual content and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies are absent. Overall, the site is professional, trustworthy, and well-maintained, supporting a medium-sized hospitality business.

M

Meinplatz

meinplatz.ch

36

Meinplatz.ch is an online platform dedicated to providing current offers in housing, work, and day structure for adult people with disabilities in Switzerland. It serves as a centralized resource for institutions offering these services and includes information about advisory centers for personalized support. The platform targets a niche audience within the disability support sector and positions itself as a trusted resource in this domain. Technically, the website leverages modern web technologies such as SvelteKit, Google Fonts, and Google Tag Manager, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a good security posture. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information, indicates compliance gaps that should be addressed to enhance trust and regulatory adherence. Overall, the website is professional and functional but would benefit from improved privacy compliance and clearer contact channels.

E

Enigma SA

enigma.swiss

56

Enigma SA is a Swiss-based digital marketing agency with a regional presence in Geneva, Bern, and Zurich. The company offers a comprehensive suite of digital marketing services including strategy, design, branding, digital trading, and growth hacking. The website reflects a professional business model targeting businesses seeking digital marketing expertise in Switzerland. The company was founded in 2016, consistent with the domain registration date, and maintains a consistent brand presence online. Technically, the website is built on WordPress with modern JavaScript frameworks like Svelte and uses Cloudflare for DNS management. It integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Facebook Pixel, and Bing Ads, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, has domain transfer locks, and uses Cloudflare DNS, but could improve by enabling DNSSEC and adding more HTTP security headers. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, explicit terms of service and security policies are not found. Overall, the website is trustworthy, professionally maintained, and compliant with key privacy regulations.

M

Magazine Présences Grenoble

presences-grenoble.fr

54

Magazine Présences Grenoble is a regional economic media outlet affiliated with the Chamber of Commerce and Industry (CCI) Grenoble. It provides news, event information, business rankings, and resources primarily targeting business professionals, entrepreneurs, and economic stakeholders in the Grenoble region. The website is built on Drupal 10 and integrates modern technologies including Google APIs, YouTube API, Matomo analytics, and Google DoubleClick advertising. It features a professional design with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's affiliation with CCI Grenoble and professional presentation support its legitimacy. Overall, the site is a credible and valuable resource for its target audience.

S

skills.lab

skills-lab.com

74

skills.lab is a specialized company offering high-tech football training systems that combine digital gamification with objective measurement and talent development. Positioned as a world market leader, the company serves football players, coaches, and clubs with innovative products such as the skills.lab Arena, Studio, and Cube. The website is professionally designed, mobile-optimized, and provides comprehensive content about their offerings and partnerships with notable football clubs. Technically, the site is built on WordPress with modern JavaScript libraries and integrates video content and analytics tools. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust. Overall, the domain registration is consistent and legitimate, supporting the company's credibility.

S

Students Go West

studentsgowest.com

65

Students Go West is an Austrian agency specializing in securing sports scholarships for athletes at US universities. Established in 2018, it holds a leading market position in Austria for this niche. The website is built on WordPress with Elementor and integrates modern technologies such as CookieYes for consent management and analytics tools like Google Analytics and Hotjar. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of student-athletes. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and consistent branding support business credibility. Privacy policy and terms of service pages are not clearly found, indicating room for compliance improvement.

A

ALSO Schweiz AG

also.ch

73

ALSO Schweiz AG operates a comprehensive B2B technology distribution platform serving approximately 120,000 resellers with hardware, software, and IT services from over 700 vendors. The company is positioned as a leading technology provider in Europe, offering a broad portfolio including cloud services, cybersecurity, virtualization, and AI solutions. The website reflects a mature digital infrastructure with modern technologies and integrated marketing and analytics tools, supported by a consent management platform ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the site demonstrates professionalism, trustworthiness, and a clear business focus on B2B technology distribution and services.

A

ALSO Finland Oy

also.fi

65

ALSO Finland Oy operates a large B2B marketplace focused on technology products and IT services, serving approximately 120,000 resellers with offerings from over 700 suppliers across 1,450 product categories. The company positions itself as a key regional distributor and service provider in Finland's technology sector, providing hardware, software, cloud, and digital services. The website reflects a mature digital infrastructure with a custom CMS, modern JavaScript libraries, and integration of multiple analytics and marketing tools, including Webtrekk, Google Ads, Facebook Pixel, and LinkedIn Insight Tag, all managed with a GDPR-compliant consent mechanism. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response information are absent. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and extensive business content. Overall, the site is well-structured, user-friendly, and targeted at B2B technology resellers and partners.

L

Lexus

discoverlexus.com

60

DiscoverLexus.com serves as a global lifestyle and brand marketing platform for Lexus, a premium automotive brand. The website focuses on delivering luxury and lifestyle content that aligns with Lexus's market positioning as a leader in the transportation sector. The site targets luxury vehicle enthusiasts and Lexus customers worldwide, providing brand storytelling and vehicle-related information. The business model centers on brand engagement and lifestyle marketing rather than direct sales. The domain age and WHOIS data support the legitimacy and maturity of the brand presence online. Technically, the website employs modern frontend technologies including Vue.js and Nuxt.js, with a CMS likely based on Statamic. Hosting is supported by Microsoft Azure DNS infrastructure. The site demonstrates good mobile optimization and SEO practices, with cookie consent managed by Cookiebot. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and enforces domain transfer protection. However, DNSSEC is not enabled, and security headers are not detected in the provided data. There is no visible privacy policy or terms of service, which are critical for compliance and user trust. No incident response or vulnerability disclosure mechanisms are found. The site integrates Google Tag Manager for analytics and tracking, balanced with a cookie consent mechanism. Overall, the website is professionally designed and trustworthy, with a strong brand presence. To enhance security posture and compliance, it is recommended to publish privacy and terms policies, enable DNSSEC, implement security headers, and provide clear contact information for incident response. These steps will improve user trust, regulatory compliance, and resilience against threats.

LibreriadelSanto.it is an established Italian online bookstore specializing in Catholic religious books, articles, and media. The website offers a broad catalog exceeding 100,000 items including new, used, and ebook formats. It targets Italian-speaking customers interested in religious literature and related products. The business operates an e-commerce model with customer support and a clear focus on religious retail. Technically, the site uses a mix of legacy and modern technologies including jQuery, Google Tag Manager, and Iubenda for privacy compliance. The site is hosted on Amazon Cloudfront CDN, ensuring reasonable performance and availability. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. WHOIS data aligns well with the business profile, indicating legitimacy and transparency. Overall, the site is professional, privacy-conscious, and well-positioned within its niche market.

L

Landessportbund Berlin e.V.

familiensportfest-berlin.de

42

The website familiensportfest-berlin.de represents the Landessportbund Berlin e.V., promoting the Familiensportfest Berlin, a family-oriented sports festival held across various districts in Berlin. The event aims to engage families and local communities in diverse sports activities, fostering health, inclusion, and community spirit. The organization holds a strong regional presence with partnerships across Berlin's sports federations and clubs. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and Font Awesome, integrating accessibility tools and Matomo analytics for privacy-conscious user tracking. Security posture is solid with HTTPS and some privacy measures, though explicit security headers and policies are absent. Contact information is comprehensive, supporting business credibility. Overall, the site is professional, accessible, and trustworthy, serving its community-focused mission effectively.

S

Stiftung Deutsche Sporthilfe

sporthilfe.de

54

Stiftung Deutsche Sporthilfe is a well-established non-profit organization dedicated to supporting young and elite athletes in Germany. With a history dating back to 1967, it plays a pivotal role in private sports funding, contributing significantly to Germany's international sports successes. The website reflects a professional and comprehensive presentation of their services, partnerships, and events, targeting donors, sponsors, and sports enthusiasts. Technically, the site is built on TYPO3 CMS with modern integrations such as Google Tag Manager, reCAPTCHA, and consent management, ensuring a good digital maturity level. Security posture is strong with HTTPS, secure forms, and privacy compliance, though explicit security policies and vulnerability disclosures are absent. Overall, the site is trustworthy, well-branded, and provides a positive user experience with clear navigation and rich content.

ÖKK is a Swiss insurance company specializing in providing health insurance products tailored to private clients. The company positions itself as a reliable and sensible insurance provider with a focus on customer needs. The website reflects a professional and consistent brand image, targeting private clients primarily within Switzerland. The business model revolves around offering various insurance models and supplementary services to meet diverse client requirements. Technically, the website employs modern web technologies including JavaScript frameworks, font services, and third-party consent management tools, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS, implements strong security headers, and uses reCAPTCHA to protect forms, although it lacks a dedicated security policy or incident response page. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

G

Gebäudeversicherung Bern (GVB)

fachstelle-naturgefahren.ch

63

The Fachstelle Naturgefahren website represents a specialized division of the Gebäudeversicherung Bern, focusing on natural hazard protection and building insurance within the Canton of Bern, Switzerland. It offers advisory services, hazard maps, and support for protective measures such as automated hail protection systems. The organization holds a strong regional market position as the mandatory building insurer and provides additional voluntary insurance products through affiliated entities. The website targets property owners and professionals seeking to mitigate natural hazard risks.

G

GARANT Türen und Zargen GmbH

garant.de

57

GARANT Türen und Zargen GmbH is a German manufacturer specializing in interior and functional doors, offering a wide range of products including premium door edges and digital configurator tools. The company targets architects, planners, carpenters, dealers, and end customers, positioning itself as an established player within the manufacturing sector under the Arbonia Group umbrella. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics and social media effectively. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response information. Overall, the site is compliant with GDPR and provides comprehensive contact details, supporting business credibility and trust.