Security Directory

H

Handpan s.r.o.

neo-handpan.cz

53

Handpan s.r.o., operating the website neo-handpan.cz, is a small Czech company specializing in the artisanal production of NEO handpans, unique handcrafted musical instruments. The business is led by Jiří Káš, who personally manufactures the instruments and offers workshops and courses. The company has a strong local presence and is recognized by Czech musicians and media. Technically, the website is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy compliance mechanisms. The site does not expose sensitive data and shows no signs of vulnerabilities. Overall, the business is credible and trustworthy, but it should improve privacy and cookie policies to enhance compliance and user trust.

L

La Quadrature du Net

mamot.fr

57

Mamot.fr is a French-language Mastodon social networking server operated by La Quadrature du Net, a recognized non-profit organization advocating for digital rights. The platform serves a niche community interested in privacy-focused federated social media, with approximately 2.7K active users. The website is built on the Mastodon 4.4.7 platform, leveraging modern web technologies including React and ES modules, hosted by ScaleWay. The technical infrastructure is solid, with good SSL configuration and secure resource loading practices. However, the site lacks explicit cookie consent mechanisms and terms of service pages, which slightly impacts privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a vulnerability disclosure policy would enhance trust. Overall, Mamot.fr presents a professional, trustworthy, and privacy-conscious social platform with room for improvement in compliance documentation and user contact transparency.

S

Somfy

somfy.sk

63

Somfy Slovakia operates as a regional branch of the global Somfy Group, specializing in home automation products including motors for blinds, shutters, awnings, gates, and smart home solutions such as alarms, cameras, heating, and lighting control. The website targets Slovak consumers and businesses interested in smart home technology, offering a comprehensive product catalog and support services. The company is well-established, founded in 1969, and maintains a strong market presence with consistent branding and professional digital assets. Technically, the website employs modern web technologies, is mobile optimized, and integrates tracking and analytics tools responsibly. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

I

Internationale Hofer Filmtage

hofer-filmtage.com

60

The Hof International Film Festival is a well-established and important cultural event in Germany, focusing on independent and new cinema. Founded in 1967, it serves as a platform for emerging filmmakers and presents a diverse program of feature films, documentaries, and shorts. The festival is supported by a range of sponsors and partners, including government bodies and media organizations, and maintains a strong presence in the film industry. The website reflects a professional and user-friendly digital presence with comprehensive content and clear navigation. Technically, the site uses modern web technologies and Matomo analytics for user tracking, with good mobile optimization and accessibility. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements could be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not detract from the overall legitimacy of the organization. Strategic recommendations include enhancing security policies, publishing incident response contacts, and improving privacy compliance transparency.

T

Toyota Financial Services Czech s.r.o.

toyotafinance.cz

65

Toyota Financial Services Czech s.r.o. is a specialized financial services provider focused on branded vehicle financing for Toyota and Lexus in the Czech Republic. The company offers a range of financial products including loans for new and used cars, operational leasing, and insurance services tailored for both private individuals and businesses. With over 25 years of market experience and strong partnerships with Toyota and Lexus dealer networks, the company holds a solid position in the automotive finance sector within the region. The website reflects a professional and consistent brand image, providing clear and accessible information to its target audience. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics and marketing, and a proprietary CMS platform (Edee.one). The site is mobile-optimized, accessible, and SEO-friendly with structured data enhancing search engine visibility. Performance is moderate with no critical errors detected. Privacy and cookie policies are implemented with consent mechanisms, indicating compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no public security policy or incident response information is provided. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for financial institutions. Overall, the security posture is solid but could be improved by adding explicit security headers and incident response details. The overall risk assessment is low with recommendations to enhance security transparency and header implementation. The website is trustworthy, professionally maintained, and compliant with relevant privacy regulations, making it a reliable platform for its users.

B

Trending - berlin.social

berlin.social

64

berlin.social is an independent Mastodon social networking instance focused on the Berlin community, providing a platform for local discussions and trending posts. It operates on the open-source Mastodon platform version 4.4.7, leveraging modern web technologies including React and ES modules. The site is accessible without WAF or security challenges and presents a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliance appears basic but adequate for the platform type. WHOIS data is unavailable due to TLD restrictions, but the site shows legitimacy through visible admin accounts and active user statistics.

B

BoursoBank (ex-Boursorama Banque)

boursobank.com

70

BoursoBank, formerly known as Boursorama Banque, is a French online bank positioned as the least expensive bank for 17 years, offering a range of financial services including free bank cards, mortgage loans, life insurance, stock market services, and savings products. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Technically, the site uses modern JavaScript frameworks and fonts, ensuring a good user experience and accessibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be further investigated. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response information. Overall, the site presents a trustworthy and professional banking service with room for improvement in transparency and security disclosures.

M

MPOHODA

mpohoda.sk

63

mPohoda is a well-established Slovak company providing comprehensive accounting and economic software solutions tailored for small and medium-sized enterprises. The website reflects a professional and consistent brand image, targeting SMEs primarily in Slovakia. Their key services include accounting, payroll, invoicing, and business analytics, positioning them as a leading software provider in their regional market. The technical infrastructure is modern, leveraging Tailwind CSS and JavaScript, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contact could enhance trust further. Overall, the website is compliant with GDPR and cookie regulations, providing clear privacy and cookie policies. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Maison de L'Environnement

maison-environnement.fr

45

Maison de L'Environnement is a well-established non-profit association founded in 1994, focused on promoting ecological transition within the Lyon metropolitan area. The organization coordinates about fifty partner associations and offers services including event organization, a mediathèque, training, and cooperative projects. The website reflects a professional and consistent brand image, targeting both citizens and professionals interested in environmental issues. Technically, the site is built on WordPress, uses modern web technologies, and is optimized for performance and mobile devices. Privacy-conscious analytics via Matomo is implemented, though cookie consent mechanisms are absent. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response policies. Overall, the website is trustworthy, accessible, and aligns well with the organization's mission and domain registration data.

S

Studdio

studdio.com

52

Studdio is a French communication agency specializing in comprehensive marketing services including website creation, SEO, social media management, graphic design, logo creation, printing, and signage. The company offers subscription-based communication solutions with monthly fees over 24 to 48 months, targeting businesses seeking efficient and budget-controlled marketing support. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions, positioning Studdio as a small but operationally focused agency in the French market. Technically, the website employs modern web technologies such as Google Tag Manager for analytics, Google Fonts for typography, and SVG icons for graphics. The site is served over HTTPS with good SSL configuration, though no explicit security headers were detected. Performance is moderate, with good mobile optimization and basic accessibility features. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit incident response or security policy pages were found. From a security perspective, the website shows a solid baseline with HTTPS and no exposed sensitive data. However, the absence of WHOIS registration data for the domain www.studdio.com is a notable concern, as it raises questions about domain legitimacy and registration consistency. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the HTML content. The site lacks explicit security best practices such as security headers and incident response contacts. Overall, Studdio presents a professional and trustworthy front for its communication services, but the missing WHOIS data and limited security disclosures suggest areas for improvement in transparency and security posture. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

S

Swiss National Bank

snb.ch

75

The Swiss National Bank (SNB) operates as Switzerland's central bank, providing essential services including monetary policy implementation, issuance of banknotes and coins, payment transaction facilitation, asset investment, and financial stability oversight. The website serves a broad audience including the general public, financial market participants, media, researchers, and government entities. It positions itself as a key national financial institution with a strong market presence and government backing. Technically, the website employs modern web technologies such as JavaScript, SVG icons, and CSS, likely managed via a custom CMS. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, avoids exposing sensitive data, and implements secure forms. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure or security.txt files are found. Analytics are conducted via a custom SNB service with moderate user tracking and a two-year data retention policy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high legitimacy score based on WHOIS data consistency. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to enhance transparency and security posture.

Č

Česká hiporehabilitační společnost, z.s.

kone-hiporehabilitace.com

60

Česká hiporehabilitační společnost, z.s. operates a specialized website focused on hiporehabilitation, providing educational resources, certification information, and community engagement for professionals and enthusiasts in the field. The organization positions itself as a key non-profit entity in the Czech Republic dedicated to therapeutic and social applications of horse-assisted therapy. The website serves as an information hub with links to partner sites offering courses and events. Technically, the site is built on WordPress with a custom theme and standard web technologies, hosted on Wedos servers. It offers a moderate performance and good mobile optimization but lacks advanced security headers and DNSSEC. Security posture is adequate with HTTPS enabled and cookie consent implemented, though privacy policy and incident response information are missing. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve compliance and security transparency.

L

LogTech

logtech.cz

60

LogTech is a Czech Republic-based company specializing in the integration of logistics technologies, including conveyors, sorting systems, software, and robotics, aimed at optimizing warehouse operations. The company leverages nearly three decades of experience to provide tailored automation and material handling solutions supported by comprehensive service and technical support. Their website reflects a professional and consistent brand presence targeting industrial and logistics sectors seeking efficiency improvements. Technically, the website employs modern web standards with responsive design, Google Fonts, and SVG icons, ensuring good user experience across devices. However, there is no evidence of advanced frameworks or CMS usage, and performance is moderate. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. From a security and compliance perspective, the site includes GDPR and cookie policies with consent mechanisms, but lacks visible incident response contacts, vulnerability disclosure, or security certifications. The absence of WHOIS data for the domain is a concern, reducing trust in domain legitimacy despite the professional site content and clear company contact information. Overall, the website is functional, professional, and privacy-conscious but would benefit from enhanced security practices and domain registration transparency to improve trust and compliance.

O

OX Point - Homepage

oxpoint.cz

68

OX Point operates a network of modern smart lockers designed for municipalities, companies, and households primarily in the Czech Republic. Their services include parcel delivery boxes, luggage storage, municipal smart boxes, corporate logistics solutions, and residential parcel boxes. The website presents a professional and consistent brand image with clear contact information and a focus on accessibility and user experience. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools, including Google Analytics, Hotjar, and Facebook Pixel, with a cookie consent mechanism in place. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers are not explicitly detected and privacy policy documentation is missing. WHOIS data is unavailable, which limits domain trust verification, but the website content and technical setup suggest a legitimate business. Overall, the site is well-positioned in its niche with room for improvement in privacy compliance and security transparency.

S

SFBA.social

sfba.social

70

SFBA.social is an independent Mastodon instance serving the San Francisco Bay Area community, providing a federated social networking platform for microblogging and community engagement. The website leverages the Mastodon 4.4.3 platform with modern web technologies including React and WebSockets, delivering a responsive and user-friendly experience. The platform emphasizes community interaction without advertising or intrusive tracking, focusing on organic social engagement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks certain security headers and cookie consent mechanisms, which are recommended to enhance security posture and privacy compliance. The absence of WHOIS data due to unsupported TLD or privacy protection limits external trust verification, but the active community and transparent platform usage support its legitimacy. Overall, SFBA.social presents a well-maintained, community-focused social platform with good technical implementation and a moderate security posture. Strategic improvements in privacy compliance and security headers would further strengthen its trustworthiness and user protection.

S

SlotsUp

pl-slotsup.com

10

SlotsUp is a well-established online platform specializing in comprehensive online casino reviews, free slot games, bonus offers, and expert guides primarily targeting the Polish-speaking gambling community. Founded in 2015 and operating under a domain registered in 2022, the company positions itself as a leading collector and provider of casino-related data and content worldwide. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and responsive design optimized for mobile users. Technically, the site leverages modern web technologies including React and Vite, with Cloudflare DNS and Google Tag Manager integrations, ensuring a robust and scalable infrastructure. Security posture is solid with HTTPS enforced and domain protection statuses active, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, SlotsUp presents a trustworthy and credible online presence with room for enhancements in security and privacy transparency.

S

SlotsUp

slotsup.com

72

SlotsUp is a well-established online casino guide and review platform, operating since 2015 and headquartered in Hong Kong. The company offers a comprehensive data-driven and expert content approach to provide users with detailed casino, bonus, and game information, along with safety indexes and ratings. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting adult online casino players globally. Technically, the site uses modern web technologies including React and Vite, with Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, SlotsUp presents a trustworthy and professional front but should improve domain registration transparency and privacy compliance to enhance trust further.

T

Technologické centrum Praha

tc.cz

52

Technologické centrum Praha is a Czech national technology center focused on supporting the country's participation in the European Research Area. It provides strategic studies, technology transfer, and innovation support services primarily targeting research institutions, SMEs, and public sector entities. The website is professionally designed, mobile-optimized, and uses modern web technologies including Google Analytics and reCAPTCHA for security. While the site enforces HTTPS and includes CSRF tokens in forms, it lacks some security headers and an explicit cookie consent mechanism. The absence of WHOIS data reduces trust assessment confidence but the overall presentation and content quality indicate a legitimate and established organization. Social media presence on major platforms further supports credibility.

D

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH

giz.de

70

The Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH is a German government-owned enterprise specializing in international development cooperation. The organization operates globally to promote sustainable development, offering solutions and partnerships to improve living conditions worldwide. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting governments, international partners, businesses, and professionals in the development sector. Technically, the site is built on Drupal CMS, uses Matomo for privacy-respecting analytics, and employs a consent management system (Klaro) to comply with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and compliance policies are transparent and comprehensive, supporting GDPR compliance. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission and market position.

T

ThinkDoBeCreate - Stephanie Eckles

moderncss.dev

62

ModernCSS.dev is a specialized educational website authored by Stephanie Eckles under the ThinkDoBeCreate brand, focusing on modern CSS solutions and frontend development techniques. The site offers a rich collection of articles, tutorials, and resources aimed at frontend developers and CSS enthusiasts, positioning itself as a niche expert content provider with strong author credibility and community endorsements. Technically, the site is built using the Eleventy static site generator, leveraging modern web standards including HTML5, CSS3, and JavaScript, with excellent mobile optimization and fast performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. The site uses minimal tracking via Plausible Analytics and monetizes through Carbon Ads and BuySellAds, maintaining a good balance between user experience and advertising. Overall, the website is trustworthy, professional, and well-maintained, though it could improve compliance by adding privacy and cookie policies and enhancing security headers.

S

Sex18babes.com - XXX Video Free

sex18babes.com

57

Sex18babes.com is an adult entertainment website established in 2018, offering free pornographic video streaming and downloads. The site targets adult audiences with a wide range of explicit content categories and leverages affiliate marketing and advertising for monetization. Technically, it runs on the DataLife Engine CMS with jQuery and SVG icons, hosted behind Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. Privacy compliance is minimal, with no visible privacy or cookie policies, and contact options are limited to a feedback form. The site is accessible without WAF or security challenges, but security posture is weak due to missing HTTPS enforcement and security headers.

S

Sangel Systemtechnik GmbH

helulight.de

48

The website helulight.de represents HELU Connectivity Solutions Bielefeld GmbH, formerly known as Sangel Systemtechnik GmbH, a medium-sized German company specializing in intelligent lighting concepts, cable assemblies, and LED industrial luminaires. The company is part of the HELUKABEL Group, which enhances its market position and product portfolio. The site targets industrial manufacturers and machine builders, offering B2B solutions for process visualization and industrial lighting. Technically, the website is built on the Shopware CMS platform with modern JavaScript and Bootstrap frameworks, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is moderate with a privacy policy linked on a partner domain but no dedicated cookie or terms of service pages on the site itself. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Alaio Inc.

bitrix24.net

71

Bitrix24, operated by Alaio Inc., is a comprehensive SaaS platform offering a free online workspace for businesses, integrating CRM, task management, collaboration, and sales tools. It targets businesses and teams seeking to streamline sales, communication, and project management. The platform is positioned as a mature and established player in the business software market, offering extensive features including AI-powered CoPilot tools across various modules. Technically, the website leverages the Bitrix Framework and modern web technologies, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, though security headers and incident response details are not evident. The site is transparent with privacy and cookie policies, showing GDPR compliance. Overall, Bitrix24 presents a professional, trustworthy, and feature-rich platform with room for security enhancements.

D

DB SCHENKER

dbschenker.cz

66

DB SCHENKER operates as a leading global logistics and supply chain management provider, offering comprehensive services including land transport, air and ocean freight, contract logistics, and advanced 4PL solutions. The company is positioned as a major player in the transportation sector, supported by its parent company DSV. The website reflects a mature digital presence with multilingual support and customer portals, targeting business clients requiring sophisticated logistics solutions. Technically, the site employs modern web technologies such as web components, Adobe Launch for marketing and analytics, and enforces HTTPS with a strong Content Security Policy, indicating a robust security posture. While WHOIS data is unavailable, the website's professional presentation and linkage to known domains affirm its legitimacy. Overall, the site demonstrates high content quality, technical sophistication, and business credibility, with minor recommendations to enhance security headers and monitoring.

P

Preciosa

preciosa.com

73

Preciosa Group is a well-established manufacturer specializing in crystals, fine jewelry stones, designer lighting, traditional Czech beads and glass, and related machinery and packaging solutions. The company operates globally with a presence on six continents and serves a B2B audience in various manufacturing and decorative sectors. The website reflects a professional and consistent brand image with comprehensive content about their divisions and products. Technically, the site uses modern web technologies including Angular framework and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a concern for domain legitimacy but the overall digital footprint suggests a credible business. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency.

Č

Čáslavské referendum

caslavske-referendum.cz

42

Čáslavské referendum is a small-scale civic initiative based in the Czech Republic focused on organizing and informing the public about a local referendum concerning the expansion of a waste landfill. The website serves as an information hub for residents of Čáslav, providing updates, media links, and calls to action for participation and financial support. Technically, the site is built on WordPress using the Kadence theme and blocks, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. The absence of privacy and cookie policies represents a compliance gap. WHOIS data is unavailable, which slightly reduces trust but the site content and external references support legitimacy.

Mayfield Brain & Spine operates a professional healthcare blog focused on neurosurgery, brain, and spinal conditions. The website serves as an educational and informational platform targeting patients and healthcare professionals interested in spine care and neurosurgical advancements. The business is positioned as a leading regional neurosurgery practice with a medium-sized operation founded in 2012. Technically, the website is built on WordPress using the Gridbox theme, hosted by Bluehost, and employs modern web technologies such as jQuery and SVG icons. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is trustworthy and professional but could improve in privacy and security policy transparency.

T

TILL CONSULT a.s.

dunamedik.cz

10

The website www.dunamedik.cz represents TILL CONSULT a.s., a Czech company specializing in healthcare software solutions tailored for medical offices, including dental and general practitioners. Their flagship product, DUNA MEDIK, supports electronic communication with health insurance companies and other health authorities, facilitating patient record management, appointment scheduling, billing, and vaccination tracking. The company holds a solid market position in the Czech healthcare software sector, targeting medical professionals with specialized software variants. Technically, the website employs modern web technologies such as Google Analytics, Smartsupp Live Chat, Bootstrap framework, and SVG icons, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response information. The absence of WHOIS data reduces domain transparency and trust slightly, but the overall professional presentation and clear contact information mitigate this concern. Strategic recommendations include enhancing security headers, publishing security policies, and improving domain registration transparency.

E

Envibus

envibus.fr

55

Envibus operates as the public transportation network for the Communauté d'Agglomération Sophia Antipolis, providing urban and school bus services, transport on demand, and real-time traffic information. The website is well-structured, professionally designed, and targets residents and commuters in the Sophia Antipolis region. It promotes mobile applications and offers multiple ticket purchasing options, including SMS ticketing. Technically, the site is built on TYPO3 CMS with modern web technologies and includes accessibility and cookie consent features, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent, but lacks explicit security headers and published security policies. The absence of WHOIS data is a concern for domain legitimacy, though the website content and official affiliations suggest a legitimate entity. Overall, the site is trustworthy and functional but would benefit from enhanced transparency in privacy and security disclosures.

O

Office de Tourisme de l'Agglomération de La Rochelle

larochelle-tourisme.com

55

The website www.nous-larochelle.fr is the official online presence of the Office de Tourisme de l'Agglomération de La Rochelle, serving as a comprehensive portal for tourism-related information, local culture, events, and sustainable initiatives in the La Rochelle region of France. It targets tourists, local residents, and visitors interested in exploring the territory through various thematic content and practical services. The business model is that of a public tourism office providing information, event ticketing, and promotion of local attractions and services. Technically, the site is built using modern web technologies including React and Next.js, hosted on Scaleway infrastructure. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. The site uses secure HTTPS connections and implements key security headers, indicating a strong security posture. However, it lacks a publicly available security policy or incident response information. From a security and privacy perspective, the site employs privacy protection for its domain registration, which is common for public entities. It uses analytics tools such as Matomo and Google Tag Manager with moderate user tracking and includes a GDPR-compliant privacy and cookie policy with consent mechanisms. Contact information is clearly provided, including phone numbers, physical addresses, and a contact form. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a security policy, vulnerability disclosure information, and incident response contacts to further enhance trust and compliance.

L

LOBSTER BISTRO

lobster-bistro.cz

49

LOBSTER BISTRO is a small hospitality business operating a restaurant in the Czech Republic, offering a harmonious dining experience with creative food and a pleasant atmosphere. The website reflects a local restaurant's digital presence with a focus on user experience and basic analytics integration. The technical infrastructure includes modern analytics tools such as Google Analytics and Matomo, with cookie consent mechanisms implemented to comply with privacy regulations. However, the absence of visible privacy policies, terms of service, and contact information limits the website's compliance and trustworthiness. Security posture is moderate, with no detected security headers and unknown SSL configuration, suggesting room for improvement in hardening the website's defenses. Overall, the website is functional and professionally designed but lacks critical compliance and security documentation, which should be addressed to enhance trust and legal standing.

F

FK Teplice, eSports.cz, s.r.o.

fkteplice.cz

37

FK Teplice is a well-established Czech football club with a strong digital presence through its official website. The site offers comprehensive information about the club's activities, including news, match schedules, team rosters, fan engagement, and community initiatives such as CSR and esports. The domain has been registered since 1998, reflecting the club's longstanding history. Technically, the website employs modern web technologies including Google Analytics, Adsense, and Google Translate, hosted on Websupport infrastructure. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is moderate with cookie consent implemented but lacks visible advanced security headers and explicit privacy or terms of service pages. No direct contact information or incident response details are provided, which could be improved to enhance trust and compliance. Overall, the website is a credible and functional digital asset for FK Teplice, serving its target audience effectively.

T

The Scottish Government

scotland.gov.uk

81

The Scottish Government website serves as the official digital presence for the devolved government of Scotland, providing comprehensive information on policies, news, publications, consultations, and statistics. It targets residents, stakeholders, and the general public interested in Scottish governance and public services. The site is authoritative and well-positioned as a primary source of government information. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Plausible Analytics, with a strong emphasis on accessibility, mobile optimization, and SEO best practices. The site is well-structured with clear navigation and uses structured data to enhance search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical and justified for government domains, and the domain is highly legitimate based on trust signals and domain usage. Overall, the website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy and reliable source for its audience.

哔

哔哩哔哩

bilibili.com

51

哔哩哔哩 (bilibili.com) is a leading Chinese video sharing platform specializing in ACG (Anime, Comics, Games) content, offering a rich ecosystem including video streaming, live broadcasts, gaming, manga, and e-commerce services. It enjoys a strong market position with a large, active user base and a vibrant community of content creators. The platform is well-branded and professionally designed, targeting primarily young audiences interested in animation and gaming culture. Technically, the site employs modern web technologies such as Vue.js, ES2015+ JavaScript, and optimized image formats (WebP, AVIF), ensuring good performance and mobile responsiveness. However, the absence of visible privacy and cookie policies and the lack of WHOIS transparency slightly reduce its compliance and trust scores. Security posture is moderate with HTTPS enforced but missing explicit security headers and published policies. Overall, bilibili.com is a mature, reputable media platform with room for improvement in privacy compliance and security transparency.

B

BK Olomoucko z.s.

bkredstone.cz

40

BK Olomoucko is a Czech basketball club competing in the top-tier Kooperativa NBL league. The website provides comprehensive information about the team roster, match schedules, league standings, and news updates, targeting basketball fans and the local community. The club maintains partnerships with local organizations and sponsors, enhancing its market presence. Technically, the website employs modern web technologies including Bootstrap, SVG icons, and Google Analytics, hosted by REG-GRANSY. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and privacy compliance mechanisms such as privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the club's credibility.

D

Duell

duell.no

54

Duell is a Norwegian company specializing in point-of-sale (POS) systems and related software solutions tailored for various industries such as retail, hospitality, logistics, museums, restaurants, workshops, and beauty salons. The company offers extensive integrations with popular accounting and business management software, enhancing operational efficiency for its clients. The website demonstrates a professional and modern digital presence built on WordPress with Elementor, indicating a mature technical infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of privacy and cookie policies suggests room for improvement in compliance. Overall, Duell presents as a credible and established business in its sector, with a solid market position in Norway.

D

DB SCHENKER

dbschenker.com

67

DB SCHENKER is a global logistics and supply chain solutions provider, recently merged with DSV to form a world-leading transport and logistics entity. The website offers comprehensive information on their services including digital services, transport modes, contract logistics, advanced logistics, industry solutions, and customs services. The site targets businesses requiring international shipping and supply chain optimization. Technically, the website is modern, mobile-optimized, and uses advanced tracking and analytics tools such as Adobe Analytics and Elastic Path. Security posture is strong with HTTPS and Content-Security-Policy headers, though explicit security policies and incident response information are not found. WHOIS data is missing, which reduces transparency but does not detract from the professional presentation and trustworthiness of the site. Overall, the site is well-designed, secure, and business credible.

H

Hanácký Večerník

hanackyvecernik.cz

54

Hanácký Večerník is a regional news media outlet focused on delivering news, interviews, cultural, sports, and societal information primarily for the Olomouc region in the Czech Republic. The website presents a well-structured and categorized content layout, targeting local residents and readers interested in regional affairs. The business model is based on online news publication supported by advertising, with evident partnerships for event promotion and ticketing. Technically, the site uses modern web technologies including Google Tag Manager for analytics, CookieYes for cookie consent management, and Google Fonts for typography. Hosting is provided by WEDOS, a Czech hosting provider, consistent with the domain registration data. The website is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with GDPR-aligned cookie consent and a basic privacy policy. Business credibility is supported by consistent branding, structured content, and social media presence. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy regional news source.

Miele is a premium global brand specializing in high-quality household appliances, including kitchen equipment, laundry care, vacuum cleaners, and cleaning agents. The Polish website serves as an e-commerce and brand showcase platform targeting consumers seeking premium appliances. The site is built on modern web technologies such as Nuxt.js and integrates with Contentstack CMS and Hybris commerce platform, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent implemented, though explicit security headers and privacy policy details are lacking. The absence of WHOIS data from the .pl registry is noted but does not detract from the site's legitimacy given the brand's global recognition and professional presentation. Overall, the site is well-designed, accessible, and trustworthy, with moderate tracking via Google Tag Manager.

Miele Nederland is a premium household appliance provider with a strong market presence in the Netherlands. The company offers a wide range of products including kitchen appliances, washing and drying machines, vacuum cleaners, and cleaning products. Their website reflects a mature digital infrastructure using modern frameworks like Nuxt.js and integrates with platforms such as SAP Commerce Cloud and Contentstack CMS. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though a dedicated security policy and incident response contact could enhance trust further. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the brand's premium positioning.

V

Veolia Canada

veolia.ca

70

Veolia Canada is a subsidiary of the global Veolia Group, specializing in environmental solutions including water, waste, and energy management. The company serves cities, industries, and communities with a focus on sustainability and resource protection. The website reflects a mature enterprise with a comprehensive digital presence, including multi-language support and regional site links. Technically, the site is built on Drupal CMS, uses modern web technologies, and implements strong privacy and consent management tools such as Didomi and Google Tag Manager. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

V

Veolia España

veolia.es

66

Veolia España is the Spanish branch of Veolia Group, a global leader in optimized resource management including water, energy, and waste. The website presents a professional corporate image with clear navigation and detailed service offerings targeting industries, cities, and public administrations. The technical infrastructure is based on Drupal CMS with integration of modern marketing and analytics tools such as Google Tag Manager and HubSpot, complemented by a robust cookie consent mechanism via Didomi. Security posture is good with HTTPS and standard security headers, though explicit privacy and terms of service pages are not found in the provided content. Overall, the site reflects a mature digital presence consistent with a large enterprise.

V

Veolia

veolia.org

69

Veolia is a global leader in environmental services, specializing in water management, energy, and waste recycling. The company operates worldwide with a strong presence in multiple countries and offers comprehensive solutions for decarbonation, resource regeneration, and pollution control. The website reflects a mature digital presence with clear corporate branding and extensive content targeting municipal and industrial clients, investors, and job seekers. Technically, the site is built on Drupal CMS, uses modern privacy and analytics tools, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS and privacy SDKs, though explicit security headers could be more visible. The absence of WHOIS data is notable but likely due to privacy or registry policies rather than malicious intent. Overall, the site is professional, trustworthy, and well-structured.

F

Fastmail Pty Ltd

messagingengine.com

68

Fastmail Pty Ltd operates a professional, privacy-focused email and calendar hosting service targeting both individuals and businesses. The company positions itself as a secure, ad-free alternative to major providers like Gmail and iCloud, emphasizing privacy, productivity, and ease of use. Their service includes native apps across platforms and a strong commitment to open standards and open source contributions. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content supporting their business model. Technically, the website employs modern web technologies including JavaScript, SVG icons, and web fonts, delivering a fast and mobile-optimized experience. The presence of security headers and HTTPS indicates a strong security posture. The company also maintains a bug bounty program and provides clear channels for reporting security issues, demonstrating a proactive approach to security management. Despite the strong website and business presence, the absence of WHOIS registration data is a notable gap, reducing transparency and slightly impacting trustworthiness. However, the overall security and privacy focus, combined with positive customer testimonials and no detected vulnerabilities, suggest a low risk profile. Strategically, Fastmail should consider publishing a security.txt file to facilitate vulnerability disclosures and enhance incident response visibility. Continued emphasis on privacy compliance and transparent business information will further strengthen their market position.

J

JURA Suomi

jura.com

60

JURA Suomi is the Finnish localized website for JURA, a Swiss manufacturer of high-quality automatic coffee machines and related accessories. The site targets both home consumers and professional users in Finland, offering product catalogs, support, and dealer information. The brand is well-established globally with a consistent and professional online presence. Technically, the website is built on ASP.NET WebForms with jQuery and uses Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is adequate with HTTPS and form validation, though some improvements like updated libraries and security headers are recommended. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site reflects a mature digital infrastructure supporting a medium-sized retail and professional business in the hospitality sector.

I

Infosec Exchange

infosec.exchange

73

Infosec Exchange operates as an independent Mastodon instance catering to the information and cybersecurity community. It provides a social networking platform that enables microblogging and community engagement focused on infosec topics. The platform leverages the open-source Mastodon software, positioning itself within the federated social network ecosystem known as the fediverse. The website presents a professional and consistent brand image with active user engagement, indicating a small but vibrant community presence. Technically, the website is built on a modern stack including Ruby on Rails and React, with TypeScript usage evident. It supports WebSocket streaming for real-time updates and is optimized for mobile devices. While performance is moderate, the site includes essential meta tags and basic accessibility features. However, there is room for improvement in SEO and accessibility compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, security headers are not explicitly detected, and there is no visible security policy or incident response contact information. Privacy compliance is partially addressed with a privacy policy and terms of service, but lacks a cookie consent mechanism. No direct company contact information is provided, which is typical for community-run platforms. Overall, the domain appears legitimate despite the lack of WHOIS data due to privacy protection or unsupported TLD. The site is safe for general audiences and does not contain adult or explicit content. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and improving accessibility and SEO to strengthen trust and compliance.

E

Etat luxembourgeois

public.lu

64

The website etat.public.lu serves as the official directory and portal for public administration websites of the Grand Duchy of Luxembourg. It provides comprehensive listings of ministries, administrations, public services, and related government portals. The site targets government agents, citizens, and professionals seeking official information and services. It also promotes Luxchat4Gov, a secure instant messaging platform for government employees. Technically, the site is built on Adobe Experience Manager, uses modern web standards, and is optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration insights, but the site’s branding and content strongly indicate legitimacy as a government resource. Overall, the site is professional, trustworthy, and well maintained.

B

Brands & Stories

pribehyznacek.cz

45

Brands & Stories is a specialized Czech media company publishing both printed and online magazines focused on brands, retail concepts, and POP marketing. With 15 years of market presence, it targets top management and professionals shaping the Czech business landscape. The website reflects a professional media brand with consistent branding and quality content tailored to its niche audience. Technically, the site is built on WordPress, employs modern web technologies including Google Fonts and reCAPTCHA v3, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and anti-bot measures in place, though additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. However, the absence of WHOIS registration data introduces uncertainty regarding domain legitimacy and age verification, slightly impacting overall trust. Contact information is transparent and accessible, supporting business credibility. Overall, the site is a reliable and professional platform for its target market, with room for improvement in domain registration transparency and security hardening.

C

Citadele

pensija.lv

10

The website pensija.lv is a professionally designed financial services platform operated by Citadele banka, focused on pension savings and investment plans in Latvia. It offers detailed pension plan information, including the CBL Indeksu plan, which is positioned as the most profitable 2nd pillar pension plan in Latvia for 2023. The platform includes interactive pension calculators and links to official government services for pension plan enrollment, enhancing user trust and engagement. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Google Maps API, indicating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF tokens present, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements fully. Overall, the site is trustworthy, safe for general audiences, and well-positioned in the Latvian pension market.

BMW Motorrad Czech Republic operates a professional and comprehensive website dedicated to motorcycle sales, financing, accessories, and services. The site targets motorcycle enthusiasts and potential buyers in the Czech market, leveraging the strong BMW brand and offering a wide range of models and related products. The website is built on Adobe Experience Manager, indicating a mature digital infrastructure with integrated analytics and consent management. Security posture is good with HTTPS and consent mechanisms, though explicit security headers and incident response information are absent. The lack of WHOIS data limits domain trust assessment, but the branding and content strongly support legitimacy. Overall, the site is well-positioned to serve its audience with a professional and secure online presence.