Security Directory

ش

شتورك الشرق الأوسط وإفريقيا

storck.ae

60

The website for Storck Middle East and Africa presents a professional and well-structured digital presence focused on confectionery products and corporate information. The company operates in the retail sector with a strong brand presence in the UAE and globally, supported by multiple localized domains. The site is built on TYPO3 CMS with a modern JavaScript technology stack and includes essential privacy and cookie consent mechanisms, indicating a good level of digital maturity. However, direct contact information such as emails and phone numbers are not prominently displayed, which could impact user engagement and trust. Security posture is solid with HTTPS and cookie consent, but lacks explicit security policies or incident response details. Overall, the site is trustworthy, well-branded, and compliant with GDPR, suitable for its target audience in the Middle East and Arabic-speaking consumers.

S

Storck USA, L.P.

storck.us

65

Storck USA, L.P. operates as a confectionery company with a portfolio of well-known candy brands targeted at consumers in the United States. The website serves as a corporate and brand information portal, showcasing products, company vision, career opportunities, and latest news. The site is built on TYPO3 CMS and employs modern JavaScript libraries and Piwik PRO for analytics, indicating a moderate level of digital maturity. The presence of cookie consent and a comprehensive privacy policy reflects attention to privacy compliance. However, the absence of visible contact emails or phone numbers on the homepage suggests contact is managed through dedicated service pages. Security posture is moderate with no visible security headers and no explicit incident response or security policy information publicly available. The domain WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and brand consistency support its legitimacy. Overall, the site is well-structured, user-friendly, and trustworthy for its intended audience.

S

Storck

storck.sg

63

Storck Singapore operates as the local corporate website for the international confectionery company Storck, presenting its brand portfolio, corporate vision, career opportunities, and consumer services. The website targets consumers, potential employees, and business partners within Singapore and the broader region. The business model focuses on manufacturing and retailing confectionery products with a strong brand presence. Technically, the site is built on TYPO3 CMS and employs modern JavaScript libraries, ensuring a responsive and accessible user experience. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though security headers and explicit incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which should be monitored. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

S

Storck UK Limited

storck.co.uk

61

Storck UK Limited operates a corporate website focused on its confectionery business in the United Kingdom. The site provides detailed brand information, career opportunities, and consumer services, positioning Storck as a reputable confectionery manufacturer and retailer. The website is built on TYPO3 CMS with a modern JavaScript stack and includes multimedia content such as videos and image sliders. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS enforced, though some security headers and incident response disclosures could be improved. The domain www.storck.co.uk itself is not registered according to WHOIS data, indicating the site may be served on a different domain or subdomain, which slightly impacts domain trustworthiness but does not detract from the professional presentation and legitimacy of the content.

A

AUGUST STORCK KG

storck.com

73

Storck is a well-established confectionery company presenting a professional corporate website with comprehensive information about its brands, sustainability initiatives, career opportunities, and consumer services. The website targets general consumers, potential employees, and business partners, reflecting a large enterprise operating primarily in the retail and manufacturing sectors. The digital infrastructure is built on TYPO3 CMS with modern JavaScript libraries, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers are not detected in the provided data. The absence of WHOIS registration data is a notable anomaly that reduces domain trustworthiness, but the website content and branding strongly indicate legitimacy. Privacy compliance is well addressed with clear policies and GDPR adherence.

T

Programme SAFIR

telesanteautisme-safir.org

60

The website telesanteautisme-safir.org serves as an educational platform for the SAFIR program, which focuses on training and support services related to autism and reciprocal interactions. It is affiliated with several academic and research institutions in France, indicating a credible and specialized educational offering. The platform is built on Moodle LMS, leveraging modern web technologies such as YUI, jQuery, and RequireJS, providing a functional and moderately optimized user experience. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site is safe, professional, and targeted at learners and professionals in the healthcare and education sectors.

K

KPMG Česká republika

kpmg.cz

69

KPMG Česká republika is a leading professional services firm providing audit, tax, advisory, and legal services in the Czech Republic. As part of the global KPMG network, it holds a strong market position with a comprehensive portfolio of services tailored to business clients and professionals. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting business audiences. Technically, the site leverages modern frameworks such as Bootstrap 5 and RequireJS, hosted on Akamai CDN, and managed via Adobe Experience Manager CMS, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although DNSSEC is not enabled and explicit security policies could be more visible. Overall, the domain's WHOIS data confirms legitimacy with a long registration history and proper domain management. The site integrates marketing and analytics tools like Demandbase and OneTrust, balancing user tracking with privacy compliance. No adult or questionable content is present, making it safe for general audiences.

F

Figest B.V.

elektriskegardiner.dk

10

Elektriskegardiner.dk is a Danish e-commerce retailer specializing in electric curtains and smart home automation products. The company offers a range of motorized curtains with app control, free color samples, and free delivery, targeting consumers interested in smart home convenience and DIY installation. The website is built on Magento 2, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Trusted Shops for marketing and trust. The site demonstrates good content quality, clear navigation, and GDPR-compliant privacy and cookie policies with active consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA, though some security headers could be enhanced. WHOIS data is unavailable, likely due to privacy protection, which is common for small e-commerce businesses. Overall, the website is professional, trustworthy, and safe for general audiences.

(

(주)솜피

somfymall.com

60

Somfy Shop KR operates as a specialized e-commerce platform focused on motorized blinds, curtains, and smart home window covering solutions in South Korea. The company offers a broad product range including IoT-enabled blinds and remote controls, targeting tech-savvy consumers seeking home automation. The website is built on the Magento platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and Naver Analytics, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and provides comprehensive customer support information, including consulting services and multiple contact channels. Security posture is solid with HTTPS enforced and secure cookies, though some security headers could be improved. Privacy and cookie policies are present, supporting basic GDPR compliance, though no explicit advanced compliance frameworks are evident. The absence of WHOIS data for the domain is a notable anomaly that slightly detracts from overall trust but does not undermine the professional presentation and operational maturity of the site. Strategic partnerships with platforms like Naver Smartstore and Samsung SmartThings enhance market reach and product integration. Overall, the site presents a trustworthy and professional front for a medium-sized retail business in the smart home sector.

S

STORCK Česká republika, s.r.o.

storck.cz

60

STORCK Česká republika, s.r.o. operates as a regional subsidiary of the international Storck group, specializing in the manufacturing and distribution of confectionery products in the Czech Republic. The website serves as a corporate portal providing brand information, product news, and consumer services. The company maintains a consistent brand presence with multiple official brand pages linked and a clear focus on consumer engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and asynchronous loading for performance and user experience. The site is mobile optimized and includes accessibility features, ensuring broad usability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response information are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and brand association. Overall, the site is well-maintained, GDPR compliant, and trustworthy for general audiences.

O

OMAX Holding s.r.o.

befity.cz

56

Befity.cz is a Czech online magazine dedicated to promoting an active lifestyle through fitness, health, nutrition, and psychological well-being content. Operated by OMAX Holding s.r.o., the site maintains a strong market position within the Czech media landscape, supported by partnerships with related media brands such as bety.cz and prostreno.cz. The platform offers a mix of editorial content, product testing, and advertising services, targeting a general adult audience interested in health and fitness. Technically, the site employs modern JavaScript libraries and ad technologies, with a custom CMS backend. It demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from additional security headers and explicit incident response documentation. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable source for its audience.

O

OMAX Holding s.r.o.

bety.cz

48

Bety.cz is a Czech online magazine primarily targeting women and mothers, offering lifestyle content including horoscopes, recipes, discussions, and product testing. Operated by OMAX Holding s.r.o., the site has a solid market position within the Czech media sector, focusing on family and women's interests. The website demonstrates a mature digital presence with structured data, social media integration, and a comprehensive content offering. Technically, it employs modern JavaScript frameworks and ad management tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and consent management, though lacking explicit security headers and incident response information. The absence of WHOIS registrant data reduces domain trust verification but does not detract significantly from the overall legitimacy given the business transparency and policy disclosures.

H

HAIR SERVIS

grismagazine.cz

33

Hair Servis is a well-established Czech e-commerce platform specializing in professional hair care and styling products, serving primarily hair salons and wholesale customers. The website offers a broad range of brands and product categories, positioning itself as a key player in the regional hair care retail market. The business has been operating since 2002, supported by a consistent domain registration and a professional online presence. Technically, the website is built on Magento 2, utilizing modern JavaScript libraries such as RequireJS and jQuery, and integrates essential tools like Google Tag Manager, Facebook Pixel, and Cookiebot for analytics and cookie consent management. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, Hair Servis presents a professional and trustworthy e-commerce platform with room for improvement in privacy transparency and security policy publication. Strategic enhancements in these areas would strengthen compliance and customer trust.

A

AEDIVE

aedive.es

56

AEDIVE is a Spanish business association dedicated to the development and promotion of electric mobility, representing a broad industrial, technological, service, and institutional value chain. The organization holds a strong market position in Spain, supported by institutional partners and a diverse membership base. Their services include advocacy, networking, events, consultancy, and legislative influence, positioning them as a key player in the electric vehicle ecosystem. Technically, the website employs a modern technology stack including jQuery, Handlebars, RequireJS, Bootstrap 5, and Swiper.js, with good mobile optimization and performance. The site integrates analytics and marketing tools with a GDPR-compliant cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent controls, but lacks visible security headers and explicit incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to .es domain query restrictions, but the website's professional presentation and institutional backing support its legitimacy. Overall, AEDIVE's website is professional, secure, and compliant, with strong business credibility and user experience. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

L

Lawi sport s.r.o.

lawi.cz

61

Lawi sport s.r.o. is a leading Czech manufacturer and retailer specializing in sportswear, particularly cycling apparel. The company operates a professional e-commerce platform offering a wide range of products including custom-made jerseys, cycling accessories, sports nutrition, and body care products. Their market position is strong within the Czech Republic, targeting sports enthusiasts and athletes with quality products and services. The website reflects a mature digital presence with comprehensive product offerings and customer engagement features.

B

Bard College

bardathletics.com

64

Bard College Athletics operates an official website dedicated to providing comprehensive information about the college's sports teams, schedules, rosters, and related athletics resources. The site serves students, athletes, alumni, and sports enthusiasts interested in Bard College's Division III athletics programs. The business model focuses on community engagement and information dissemination within the educational sector. Technically, the website leverages a modern JavaScript stack including jQuery, RequireJS, and Knockout.js, hosted on Cloudfront CDN with DNS managed by Rackspace. The site is mobile optimized and accessible, with good SEO practices and structured navigation. Security-wise, the site enforces HTTPS and uses reputable hosting but lacks DNSSEC and some security headers, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

D

Django Software Foundation

djangoproject.com

66

Django is a mature, open source Python web framework supported by the Django Software Foundation, a non-profit organization. The website serves developers and organizations seeking a robust, scalable, and secure web development framework. It offers extensive documentation, community forums, and active engagement channels such as Discord and GitHub. The business model is community-driven with funding through donations and sponsorships, positioning Django as a leading technology project in the web development ecosystem. Technically, the website employs modern JavaScript technologies including RequireJS and custom scripts, with a clean, responsive design optimized for mobile and accessibility. The site uses HTTPS exclusively, ensuring secure communications. SEO and social media metadata are well implemented, enhancing discoverability and sharing. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. The project maintains a documented vulnerability disclosure process, though no dedicated security.txt file was found. Privacy compliance is basic, with no explicit privacy or cookie policies prominently displayed, which could be improved to meet GDPR standards. WHOIS data is unavailable, which is unusual but likely due to privacy or registry policies, though this does not detract from the site's legitimacy given its foundation backing. Overall, the site is professional, trustworthy, and technically sound, with minor areas for improvement in privacy and security transparency. Strategic recommendations include adding explicit privacy and cookie policies, implementing security headers, and publishing a security.txt file to enhance trust and compliance.

A

Auchan

auchan.fr

60

Auchan is a major French retail and e-commerce company providing a wide range of products including groceries, household goods, electronics, and more. The website offers multiple shopping channels such as drive, click & collect, and home delivery, targeting general consumers in France. The site is professionally designed with clear navigation and strong branding consistency, reflecting its enterprise-level market position. Technically, Auchan.fr uses modern JavaScript libraries, asynchronous loading, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized and performs well with responsive design and lazy loading techniques. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website's content and external links support legitimacy. Overall, Auchan.fr is a high-quality, trustworthy retail website with good privacy and security practices.

O

On line System s.r.o.

onlinesystem.cz

46

On line System s.r.o. operates a professional sports timing and results service platform primarily focused on athletics and mass sports events in the Czech Republic. The company offers advanced timing technologies including SWISS TIMING cameras, active J-Chip technology, and passive RFID UHF chips, catering to a broad spectrum of sports such as running, cycling, triathlon, and skiing. Their market position appears as a specialized regional service provider with a clear focus on delivering precise timing and results management for sports events. Technically, the website is built on a modern ASP.NET MVC framework with integration of popular JavaScript libraries such as jQuery, Bootstrap, RequireJS, and Kendo UI. The site includes Google Analytics and Facebook SDK for tracking and marketing purposes. The website is mobile-optimized with good navigation and content structure, though accessibility features are basic. Cookie consent mechanisms are implemented, reflecting some level of privacy compliance. From a security perspective, the site uses HTTPS and has implemented client-side error logging. However, no HTTP security headers (CSP, HSTS, X-Frame-Options) were detected, and no explicit privacy policy or terms of service pages were found. The WHOIS data for the domain is unavailable, which raises concerns about domain registration legitimacy and reduces overall trust. No signs of malware or phishing were detected, and the content is safe and professional. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but has room for improvement in privacy compliance and security posture. Strategic recommendations include publishing clear privacy and terms policies, implementing security headers, and verifying domain registration details to enhance trust and compliance.

C

Creative Opportunities Unlimited

creativeopportunities.org

56

Creative Opportunities Unlimited is a small non-profit organization dedicated to supporting participants of Odyssey of the Mind through scholarships and association support. Their website, built on the Wix platform, presents a professional and consistent brand image focused on educational and creative development for youth. The technical infrastructure is standard for Wix-hosted sites, with modern JavaScript polyfills and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. The WHOIS data is unavailable or privacy-protected, which is common for small non-profits but slightly reduces transparency. Overall, the site is trustworthy and safe, with room for improvement in privacy compliance and security best practices.

S

Sectigo Limited

hackerguardian.com

10

HackerGuardian is a PCI compliance and vulnerability scanning service operated under the Sectigo brand, a recognized leader in digital certificates and security solutions. The website offers automated PCI compliance scanning, live SAQ support, and streamlined reporting aimed at online merchants and businesses needing to meet PCI DSS requirements. The market position is strong due to Sectigo's established reputation and comprehensive service offerings. Technically, the site employs a modern JavaScript stack with analytics and marketing integrations, ensuring a good user experience and mobile optimization. Security posture is robust with HTTPS enforcement and trust seals, though some security headers and explicit policies could be improved. The absence of WHOIS data for the domain is a notable concern, potentially indicating domain registration issues or privacy protection. Overall, the site is professional and trustworthy but would benefit from enhanced transparency regarding domain registration and security policies.

S

Sectigo Limited

positivessl.com

72

PositiveSSL.com is the official website for PositiveSSL certificates, a product line of Sectigo Limited, one of the world's largest commercial certificate authorities. The site offers a range of SSL certificates including domain validated, organization validated, extended validation, and code signing certificates. It targets businesses and website owners seeking cost-effective and trusted digital security solutions. The website is professionally designed with clear navigation, comprehensive product information, and multiple purchase options, reflecting a mature e-commerce business model with a strong market position in the digital security industry. Technically, the website employs modern JavaScript libraries such as RequireJS, jQuery, and Slick Carousel, alongside marketing and analytics tools including Google Tag Manager, Visual Website Optimizer, HubSpot, and Cookiebot. The site is mobile optimized and uses HTTPS with strong security headers, indicating a good digital maturity level. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site demonstrates strong SSL configurations and uses WebTrust certified certificates, enhancing trustworthiness. Security best practices such as HTTPS enforcement and security headers are in place. However, there is no explicit security policy or vulnerability disclosure page, and no data protection officer contact information is found, suggesting areas for compliance enhancement. Overall, the website presents a low-risk profile with high professionalism and trust indicators. The missing WHOIS data slightly reduces trust but is mitigated by the strong brand presence and security certifications. Strategic recommendations include publishing a security policy, vulnerability disclosure, and improving accessibility to further strengthen the security posture and compliance.

E

Euro-BioImaging

eurobioimaging-access.eu

55

Euro-BioImaging Access Portal serves as a European research infrastructure platform providing access to advanced imaging technologies and image data analysis services for biological and biomedical sciences. The portal targets researchers and scientists across Europe, facilitating proposal submissions for imaging services. The website reflects a professional and consistent brand image aligned with its scientific mission. Technically, the site employs modern frontend technologies including jQuery, Bootstrap 5, RequireJS, and integrates Google Analytics and Tag Manager for user tracking and analytics. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, security headers and explicit security policies are absent, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, indicating GDPR awareness. WHOIS data is privacy protected, which is typical for research infrastructure domains, and no suspicious patterns were detected. Overall, the site is trustworthy, professional, and safe for general audiences.

A

A1 Slovenija

a1.si

64

A1 Slovenija is a leading private telecommunications provider in Slovenia, offering a wide range of communication services including mobile subscriptions, prepaid packages, triple play bundles, and devices. The company serves over 700,000 users with a strong market presence and a workforce of more than 500 employees. Their website reflects a mature digital infrastructure with modern technologies such as Liferay CMS, Vue.js, and various accessibility and analytics tools. The site is well-optimized for SEO, mobile-friendly, and compliant with GDPR regulations, including a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Overall, the domain registration and business information align well, indicating a trustworthy and legitimate enterprise.

E

Essimo B.V.

essimo-judo.com

51

Essimo B.V. operates the website essimo-judo.com, an e-commerce platform specializing in judo and martial arts equipment. The company offers a range of IJF approved products, uniforms, mats, and accessories targeting martial arts practitioners and clubs primarily in the Netherlands. The website is built on Magento Open Source, leveraging modern web technologies such as RequireJS, jQuery, and Knockout.js, providing a responsive and user-friendly shopping experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, although additional security headers could enhance protection. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, suggesting the domain may be newly registered or privacy protected. Overall, the website presents a professional and trustworthy front for its niche retail market.

E

Log in to the site | eju-education.net

eju-education.net

42

The website eju-education.net serves as an educational login portal, likely supporting students and educators involved with the Examination for Japanese University Admission (EJU). It provides user authentication features including account creation, guest access, and password recovery. The platform is built on Moodle, a widely used open-source learning management system, indicating a focus on structured educational content delivery. The site targets learners preparing for EJU or related educational programs, offering a secure and user-friendly interface for accessing course materials. From a technical perspective, the site employs modern web technologies including Moodle LMS, YUI JavaScript libraries, jQuery, RequireJS, and MathJax for mathematical content rendering. The platform is served over HTTPS with secure login forms incorporating CSRF tokens, reflecting a good baseline security posture. The site is mobile-optimized and accessible, with clear navigation and consistent branding. However, the absence of explicit privacy and terms of service pages, as well as lack of contact information, limits transparency and user trust. Security-wise, the site benefits from HTTPS encryption and secure form handling but lacks visible security headers and formalized privacy compliance mechanisms. No vulnerabilities or malicious content were detected, and no WAF or blocking mechanisms interfere with access. The missing WHOIS data for the domain raises some concerns about registration transparency, though the active and professional nature of the site suggests legitimate operation. Overall, the security posture is solid but could be improved with enhanced privacy disclosures and security headers. Strategically, the site should prioritize publishing comprehensive privacy and cookie policies, implement explicit consent mechanisms, and provide clear contact channels for user support and incident response. Regular security audits and updates to third-party libraries will further strengthen resilience. These steps will enhance user trust, regulatory compliance, and overall platform credibility.

C

Corneliani S.p.A.

corneliani.com

74

Corneliani S.p.A. is a well-established Italian luxury menswear brand specializing in high-end clothing, shoes, and accessories. The company targets discerning male customers seeking timeless elegance and quality craftsmanship. The website serves as an official e-commerce platform offering the latest collections, gift cards, and store locator services, supporting a global audience with multiple language and country versions. The business model focuses on direct retail through an online store, complemented by physical retail presence. Technically, the website is built on the Magento Commerce platform, leveraging modern JavaScript libraries such as RequireJS, KnockoutJS, and jQuery. It integrates advanced marketing and payment tools including Google Tag Manager, Klarna, Amazon Pay, and Hotjar for analytics and user experience enhancement. The site is mobile optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on login forms, and applies secure cookie settings. However, some security headers are not explicitly visible in the HTML source and could be verified or improved. No explicit security policy or incident response contact is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy front for Corneliani's luxury retail business. The main concern is the absence of WHOIS registration data, which is unusual for a commercial domain and slightly reduces domain trustworthiness. This may be due to privacy protection or a WHOIS server issue. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing a security policy and incident response information.

A

ALPINA Sports

alpina-sports.com

56

ALPINA Sports operates an official e-commerce webshop specializing in high-quality sports safety equipment such as bicycle helmets, ski helmets, and sports eyewear. The website targets sports enthusiasts primarily in Germany and offers direct sales with customer support and product guidance. The digital infrastructure is built on Magento Commerce with modern JavaScript frameworks and includes integrations for analytics, consent management, and search optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA implementations, although the absence of a public security policy and vulnerability disclosure reduces transparency. The missing WHOIS registration data is a notable anomaly that impacts domain trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving a medium-sized retail business effectively.

F

Filip Sodomka

filipsodomka.cz

55

Filip Sodomka operates a professional creative services website specializing in graphic design, photography, art, web design, and corporate identity. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills to ensure compatibility and performance. The business appears to be a small creative professional entity with a niche market focus on artistic and design services. The website content is well-structured and professionally presented, targeting a general audience interested in creative design and photography services. Technically, the site uses modern web technologies but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance documentation. No WHOIS data is publicly available, indicating privacy protection which is typical for small personal or creative business websites. Overall, the site is legitimate but could improve in privacy, security, and contact transparency.

F

FUJIFILM Cellular Dynamics, Inc.

fujifilmcdi.com

63

FUJIFILM Cellular Dynamics, Inc. is a specialized biotechnology company focused on providing human induced pluripotent stem cell (iPSC) services and products to support scientific research and cell therapy development. The company operates a professional and well-branded website targeting researchers, pharmaceutical, and biotech firms. Their market position is that of an established leader in the iPSC field, supported by a medium-sized business infrastructure and backed by the FUJIFILM Holdings Corporation. Technically, the website leverages a modern Magento eCommerce platform integrated with WordPress for content, using advanced search and analytics tools such as Algolia, Google Tag Manager, and Hotjar. Privacy and cookie compliance are well implemented with a consent mechanism and comprehensive policies. Security posture is good with HTTPS, security headers, and form protections, though the absence of a published security policy and incident response details is noted. The lack of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence. Overall, the website is secure, compliant, and professionally maintained, suitable for its B2B healthcare audience.

Simpleview is a well-established technology company specializing in marketing solutions and software for Destination Marketing Organizations (DMOs) and the tourism industry. Their offerings include CMS, CRM, digital marketing services, event management, and data insights. The company operates under the parent company Granicus, indicating a strong market position and backing. The website reflects a mature, professional business with a clear focus on B2B services in the tourism technology sector. Technically, the site employs modern frameworks such as Vue.js and RequireJS, uses secure HTTPS protocols, and integrates advanced analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with proper headers and no visible vulnerabilities, though explicit security policies and incident response details could be improved. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and parent company association support its legitimacy.

The International Congress and Convention Association (ICCA) operates a professional global network serving the international association meetings industry. Their website provides comprehensive resources, networking opportunities, and business intelligence services to meeting strategists, associations, and suppliers. The organization positions itself as a global leader and knowledge hub in this niche market. Technically, the website employs a modern technology stack including jQuery, Vue.js, RequireJS, and Google Tag Manager, hosted on a CMS platform likely Simpleview. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but no explicit security policy or incident response information is publicly available. WHOIS data is unavailable due to privacy protection, which is typical for such organizations and does not detract from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained, supporting ICCA's role as a key industry association.

C

COLOP CZ

razitkacolop.cz

51

COLOP CZ operates as the largest distributor and manufacturer of COLOP stamps in the Czech Republic, boasting over 30 years of experience. The company offers a comprehensive range of stamp products including company stamps, date and numbering stamps, special stamps, and related accessories. Their business model integrates e-commerce with a robust local dealer network, allowing customers to select branches via an interactive map for personal pickup or postal delivery. The website is primarily in Czech and targets businesses and individuals within the Czech market seeking stamp products and services. Technically, the website is built on the Magento e-commerce platform, utilizing modern JavaScript libraries such as jQuery, KnockoutJS, and Google Maps API for interactive dealer location mapping. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO optimization is basic but functional, with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy policies and cookie banners are present and comprehensive, indicating a good privacy posture. Overall, the website presents a professional and trustworthy front for COLOP CZ, with a solid business presence and technical infrastructure. The lack of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, improving accessibility compliance, and auditing third-party scripts regularly to maintain security and compliance.

D

Deutsche Multiple Sklerose Gesellschaft, Bundesverband e.V.

dmsg-coach.de

55

The Deutsche Multiple Sklerose Gesellschaft operates the DMSG-COACHES platform, a specialized online educational and coaching service aimed at improving the quality of life for Multiple Sclerosis patients in Germany. The organization is a recognized non-profit entity providing structured courses and personal development opportunities through a Moodle-based learning management system. The platform targets patients, caregivers, and professionals involved in MS care, positioning itself as a trusted national resource. Technically, the website leverages a mature and stable Moodle LMS infrastructure with modern JavaScript libraries such as jQuery and YUI, ensuring a responsive and accessible user experience. The site is well-structured with clear navigation and mobile optimization, although SEO practices are basic. Hosting details and domain registration are consistent with a legitimate organization, and HTTPS is properly enforced. From a security perspective, the site demonstrates good baseline practices including HTTPS and no visible sensitive data exposure. However, it lacks advanced security headers and published security policies or incident response information. GDPR compliance is partially addressed with a clear privacy policy, but no cookie consent mechanism is present. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

C

Citadele

xrewards.lv

65

The website www.xrewards.lv represents the C REWARDS program, a loyalty and rewards platform for Citadele Bank cardholders in the Baltic region. It offers users the ability to earn points on purchases and redeem them for various rewards, positioning itself as a key value-added service within the banking sector. The site is professionally designed, mobile-optimized, and integrates modern web technologies including Magento CMS, RequireJS, and Google Tag Manager for analytics and marketing. From a technical perspective, the site demonstrates a mature digital infrastructure with performance monitoring via New Relic and a comprehensive cookie consent mechanism aligned with GDPR requirements. However, there is room for improvement in security posture, particularly in implementing and exposing security headers and publishing a formal security policy or incident response contacts. Security-wise, the site uses HTTPS and does not expose sensitive data in its HTML content. No WAF or blocking mechanisms interfere with accessibility. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, reinforcing trustworthiness. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic enhancements in security headers and incident response transparency would further strengthen its security posture and trust signals.

C

Citadele

xrewards.lt

64

The website www.xrewards.lt represents the C REWARDS loyalty and discount program operated by Citadele bank for its C card users in the Baltic region. It offers customers the ability to earn points and redeem prizes, as well as access partner discounts. The site is well-branded with Citadele logos and integrates with the bank's services, targeting existing and potential bank customers. Technically, the site is built on Magento with modern JavaScript frameworks and includes Google Tag Manager for analytics. It is mobile-optimized and provides a good user experience with clear navigation and content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers appear missing. The absence of WHOIS data limits domain trust analysis, but the site content and external links strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations.

H

HARTMANN – RICO a.s.

zivotsestomii.cz

10

The website www.zivotsestomii.cz represents a healthcare-focused business under the brand Dansac, operated by HARTMANN – RICO a.s. It specializes in the development, manufacturing, and distribution of ostomy care products, targeting stomy patients and their families in the Czech Republic. The site offers comprehensive educational content, product information, and customer support, positioning itself as a trusted resource in the stomy care market. Technically, the site employs modern JavaScript frameworks, cookie consent management via Cookiebot, and analytics tools including Google Analytics and Sitecore Engagement Analytics. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are missing and should be implemented to enhance protection. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms in place. However, the WHOIS data for the domain is unavailable, limiting the ability to fully verify domain legitimacy and registration details. Overall, the site is a credible and professional platform with minor technical and security improvements recommended.

P

PAUL HARTMANN AG

hartmann.info

76

PAUL HARTMANN AG operates a global healthcare business specializing in medical and hygiene products. Their website serves as a country selection portal, directing users to localized content and product information. The company maintains a strong market position with a professional online presence and comprehensive privacy and cookie policies, reflecting compliance with GDPR and other regulations. Technically, the site uses modern technologies including Sitecore CMS, Cloudflare hosting, and various analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS enforcement and consent mechanisms, though additional security headers could enhance protection. Overall, the website is trustworthy and professionally managed, with no signs of malicious activity or content blocking.

D

Destillation und Likörfabrik Ernst F. Ullmann

lauterbacher-tropfen.de

55

The website www.lauterbacher-tropfen.de represents a small, family-owned German business specializing in the production and retail of traditional spirits and liqueurs since 1869. The company operates both physical locations including a museum and tasting events, as well as an online shop powered by Magento 2. The site is well-structured, professionally designed, and targets mature consumers interested in alcoholic beverages and regional heritage. Technically, the site uses modern eCommerce technologies with integrations such as Google Analytics, Google Tag Manager, and Amazon Pay, ensuring a functional and user-friendly experience. Security posture is good with HTTPS enforced and secure cookie settings, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the site is trustworthy and credible, with no signs of blocking or malicious activity.

BNP Paribas is a leading European banking and financial services provider, targeting primarily individual and family customers in France. The website offers a range of financial products including bank accounts, credit simulations, insurance, savings, and stock market services. The company is well-established with a domain age consistent with its business history and strong brand presence. Technically, the site uses a modern technology stack including Adobe Experience Manager, jQuery, and various JavaScript libraries, supporting mobile platforms iOS and Android. The site is well-optimized for SEO and mobile use, though accessibility features are basic. Security posture is good with HTTPS enabled and domain registration protections in place, but lacks visible security headers and published security policies. Cookie consent is implemented via OneTrust, indicating some privacy compliance efforts. Overall, the site is professional, trustworthy, and safe for general audiences.

H

Hotel Koflík

hotel-koflik.cz

56

Hotel Koflík is a small four-star hotel located in a historic building in the center of Strakonice, Czech Republic. The hotel offers a limited number of rooms and apartments with standard amenities and includes breakfast. The website is professionally designed using the Wix platform, featuring clear navigation and relevant business information. The technical infrastructure relies on Wix's hosting and CMS services, with Google Analytics and Tag Manager integrated for visitor tracking. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance features. No WHOIS data is available from the CZ.NIC server, indicating privacy protection or data unavailability, which is common for small businesses. Overall, the site presents a trustworthy and professional online presence for a local hospitality business.

ProAlergiky.cz is a specialized e-commerce and informational portal serving individuals with allergies, asthma, and atopic eczema in the Czech Republic. It offers a wide range of specialized products such as inhalers, air purifiers, humidifiers, and allergy-friendly bedding, combined with practical advice and health-related content. The site positions itself as the largest portal of its kind in the Czech market, targeting a niche healthcare audience with a medium-sized business model focused on retail and education. Technically, the website leverages modern JavaScript frameworks like Vue.js, integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, and operates on a custom e-commerce platform (CMTrade). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses secure login forms with CSRF tokens, and includes several security headers, though some recommended headers like Content-Security-Policy are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service found in the provided content. WHOIS data is not publicly available, indicating privacy protection, which is common for commercial sites but slightly reduces transparency. Overall, the site is trustworthy and professionally managed but could improve privacy disclosures and security header implementations.

P

Pěkný - Unimex s.r.o.

itsnatural.cz

63

ItsNatural.cz is an e-commerce website operated by Pěkný - Unimex s.r.o., specializing in the sale of ecological and organic spices and herbs. The company emphasizes natural ingredients and sustainable farming practices, targeting health-conscious consumers primarily in the Czech Republic. The website features a blog for educational content and a newsletter subscription to engage its audience. Technically, the site is built on the Magento platform, uses modern JavaScript libraries, and is hosted with OVH and Cloudflare DNS services. It employs Google Analytics and Google Tag Manager for tracking, with a cookie consent mechanism in place. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. No contact emails or phone numbers are directly listed, relying on contact forms instead. Overall, the site is professional, well-branded, and trustworthy with a moderate security and privacy compliance level.

G

GECO

geco.cz

58

GECO is an established Czech company operating since 2000, providing services primarily in retail and transportation sectors. The website targets consumers, dealers, partners, and job seekers, offering various services including career and academy opportunities. The company maintains a consistent brand presence with a well-structured website and cookie consent mechanisms in place. Technically, the site is built on ASP.NET WebForms with Kentico CMS, using JavaScript and jQuery libraries. Mobile optimization is good, though SEO and accessibility are basic. Security posture is moderate with CSRF protection and cookie consent but lacks visible security headers and explicit HTTPS enforcement in the provided data. No privacy policy or terms of service were found, which impacts compliance and trust. Overall, the website is functional and professional but could improve in security and privacy transparency.

A

ALL SPORTS SLOVAKIA s.r.o.

bauerhockey.sk

44

ALL SPORTS SLOVAKIA s.r.o. operates as the official distributor of Bauer hockey equipment in Slovakia, providing a comprehensive e-commerce platform for hockey players and enthusiasts. The website offers a wide range of products including skates, sticks, protective gear, and apparel, targeting primarily Slovak customers interested in hockey sports equipment. The business model focuses on retail sales and brand distribution, positioning itself as a trusted local supplier of Bauer products.

A

APEG - Associação Portuguesa de Empresas de Gás

apeg.pt

62

APEG - Associação Portuguesa de Empresas de Gás is a non-profit scientific, technical, and professional association representing twenty-six companies in the Portuguese natural gas sector. The website serves as an information hub for industry stakeholders, providing news, events, and resources related to natural gas and renewable gases. The organization holds a solid market position within Portugal's energy sector, focusing on advocacy and sector development. Technically, the website employs AngularJS and jQuery with Google Analytics and Cookiebot for analytics and consent management, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks visible advanced security headers and uses an outdated jQuery version, which could pose minor risks. Overall, the site is professional, compliant with GDPR, and trustworthy, with room for security enhancements.

Ynovate is a Czech innovation network connecting eight professional innovation centres established by cities, regions, and universities. The network supports the development and acceleration of innovative businesses by fostering synergies, sharing contacts, and cooperating directly with entrepreneurs. The website presents a professional and well-structured platform with clear business focus on innovation support across Czech regions. Technically, the site uses Kentico CMS, Bootstrap framework, and integrates Google Tag Manager and Smartlook for analytics and user behavior tracking. The website is mobile optimized and provides good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy and cookie policies are present and indicate GDPR compliance. However, the lack of WHOIS data for the domain reduces trustworthiness and calls for further verification. Overall, the site is professional, trustworthy, and serves its business purpose effectively.

B

Bundesministerium der Finanzen

bundesfinanzministerium.de

63

The Bundesfinanzministerium website serves as the official digital presence of the German Federal Ministry of Finance, providing comprehensive information on finance, taxation, public budget, and economic policy. It targets a broad audience including citizens, businesses, media, and policymakers. The site offers key services such as tax information, public finance data, customs details, and various online calculators and publications. The ministry holds a strong market position as the federal authority responsible for financial governance in Germany. Technically, the website is built on a government-specific CMS (Government Site Builder) and employs modern JavaScript libraries including jQuery and RequireJS. It integrates Matomo analytics with a strict consent mechanism ensuring GDPR compliance and user privacy. The site demonstrates good performance, mobile optimization, and excellent accessibility features including sign language and plain language options. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and respects user consent for tracking. While explicit security policies and incident response contacts are not published, the site follows best practices for privacy and data protection. No vulnerabilities or suspicious elements were detected in the content or WHOIS data, which aligns with the official government entity. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source of official financial information for Germany.

Blue Sky Media, LLC is a film distribution company with nearly two decades of experience specializing in the acquisition and worldwide distribution of local and international film and series content. The company offers a vertically integrated digital distribution service including technical services, quality control, transcoding, and delivery to major VOD and TV platforms. Their platforms are tailored for markets such as East and West Africa, focusing on affordability and local payment integration. The website reflects a professional media business with a clear focus on content monetization and digital media technology.

KS Læring is a Norwegian e-learning platform focused on providing a comprehensive catalogue of courses tailored for municipal employees, leaders, and other public sector roles. The platform is built on the Moodle LMS and offers a wide range of educational content categorized by region, course format, target audience, and thematic areas. It serves as a key resource for public sector competence development in Norway, reflecting a strong market position within government education services. Technically, the website leverages modern web technologies including Moodle, YUI, jQuery, and MathJax, ensuring a robust and accessible learning environment. The platform is mobile-optimized and incorporates accessibility features, although some SEO and cookie consent mechanisms could be improved. The site is served over HTTPS, indicating a secure transport layer. From a security perspective, the platform demonstrates good practices such as secure session management and use of modern libraries. However, the absence of explicit security headers and cookie consent mechanisms suggests room for enhancement in compliance and security posture. The WHOIS data is unavailable due to Norid's privacy policies for .no domains, which is typical and does not raise immediate concerns. Overall, KS Læring presents a trustworthy and professional educational service with a solid technical foundation. Strategic improvements in privacy compliance and security headers would further strengthen its security and regulatory posture.