Security Directory

C

Coolify

tivtools.de

45

Coolify is an open-source and self-hostable alternative to popular deployment platforms such as Heroku, Netlify, and Vercel. The website serves primarily as a login portal for users of the Coolify platform, targeting developers and technology users seeking deployment solutions. The business model revolves around providing an open-source platform that users can self-host, positioning itself as a niche alternative in the deployment ecosystem. The website branding is moderately consistent, with a clear focus on the Coolify product name and logo. Technically, the website employs modern frontend technologies including Alpine.js and Laravel Livewire, with DOMPurify used for sanitizing HTML content to prevent XSS attacks. Hosting is provided via Hetzner, a reputable German hosting provider, as indicated by the nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The login form includes CSRF protection, and password fields have visibility toggling features enhancing usability. From a security perspective, the site shows some best practices such as CSRF tokens and input sanitization but lacks visible security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is weak, with no privacy or cookie policies found, and no GDPR compliance indicators. Business credibility is moderate due to the lack of contact information and trust indicators. Overall, the website is functional and technically sound for its purpose but would benefit from enhanced privacy compliance, security transparency, and contact information to improve trust and regulatory adherence.

D

Digital Hub Rhein-Neckar GmbH

5-ht.com

61

5-HT Chemistry & Health operates as a digital innovation hub connecting established companies in the chemistry and health sectors with tech startups globally. The organization fosters collaboration, innovation, and digital transformation through workshops, scouting, matchmaking, and events. Their market position is that of a specialized ecosystem facilitator in the Rhein-Neckar region with global outreach. Technically, the website employs modern frontend technologies such as Alpine.js, Swiper.js, and Laravel Livewire, with a responsive and well-structured design. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS registration data reduces trustworthiness, though the professional content and social media presence support legitimacy. Overall, the site is well-built and business-focused but would benefit from enhanced transparency and security disclosures.

P

pixx.io GmbH

pixx.io

75

pixx.io GmbH operates a German-based Digital Asset Management (DAM) platform leveraging artificial intelligence to enhance media management workflows. The company targets businesses and teams requiring secure, GDPR-compliant cloud solutions for organizing, tagging, licensing, and sharing digital media assets. With over 1,600 customers and a strong ROI claim, pixx.io positions itself as a reliable and efficient DAM provider in the German and broader European market. The website is professionally designed, mobile-optimized, and rich in content including extensive customer testimonials and detailed product information. Technically, the site uses modern frameworks such as Alpine.js and Tailwind CSS, integrates Google Tag Manager and Usercentrics for analytics and consent management, and employs reCAPTCHA for form security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be confirmed. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. WHOIS data is unavailable due to a malformed query response, limiting domain registration transparency, but the overall business credibility and website professionalism support legitimacy. Strategic recommendations include publishing incident response contacts and vulnerability disclosure policies to enhance trust further.

M

Müpa

mupa.hu

51

Müpa is a well-established Hungarian cultural institution providing a broad spectrum of arts and entertainment programs including concerts, festivals, and family events. The website serves as a comprehensive platform for event information, ticket sales, and loyalty programs, targeting a general audience interested in cultural activities. Technically, the site employs modern frameworks such as Laravel and Livewire, with Alpine.js for interactivity and Tailwind CSS for styling, indicating a mature and modern digital infrastructure. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and includes CSRF protection, but lacks explicit published security policies or incident response contacts. Privacy and cookie policies are present and appear GDPR compliant, with Google Tag Manager used for analytics and tracking. Overall, Müpa's website is trustworthy, professionally maintained, and aligned with its business goals as a cultural venue.

S

Dynamic Pricing and Digital Solutions Enhancing the Guest Experience. | Spotlio

spotliodata.com

60

Spotlio is a technology company specializing in dynamic pricing and digital solutions aimed at enhancing the guest experience for resorts, parks, and attractions. Their platform focuses on providing seamless guest ticketing journeys to improve operational efficiency and customer satisfaction. The website is built using modern web technologies such as Gatsby, React, and Tailwind CSS, indicating a contemporary and scalable technical infrastructure. However, the absence of WHOIS registration data and lack of visible contact or compliance information limits the ability to fully verify business legitimacy and compliance posture. Security posture is weak due to missing security headers and lack of published policies, which could expose the business to risks. Overall, while the business offering appears professional and targeted, improvements in transparency, security, and compliance documentation are recommended to enhance trust and reduce risk.

C

Caritas Switzerland

caritas.ch

65

Caritas Switzerland is a well-established non-profit organization dedicated to humanitarian aid, development cooperation, and social services. The website reflects a strong market position as a leading Swiss charity with a clear mission and professional presentation. The technical infrastructure leverages modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response information are not prominently published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

W

World Organization of the Scout Movement

scout.org

77

The World Organization of the Scout Movement (WOSM) operates the website www.scout.org as a global platform to promote scouting as the world's leading educational youth movement. The organization focuses on empowering young people through leadership development, community service, and addressing social and environmental challenges. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting youth, volunteers, and member organizations worldwide. Technically, the site is built on Drupal 10 with modern front-end technologies and implements privacy and cookie consent mechanisms, indicating a good level of digital maturity. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting the organization's global non-profit mission.

M

Mountain Cart à Villars | Activité de descente fun en été en montagne | TVGD | Villars-Gryon-Les Diablerets

mountaincartvillars.ch

59

The website www.tvgd.ch/mountaincart/ presents a mountain cart activity located in Villars, Switzerland, offering a 5 km downhill summer experience suitable for groups and children aged 12 and above. The site targets outdoor enthusiasts and families seeking fun mountain activities during the summer season. The business appears to be small-scale and focused on tourism and recreational services in the mountain sports sector. Technically, the website is built using modern frontend technologies including Gatsby, React, and Tailwind CSS, which provide a good user experience and mobile optimization. However, the site lacks critical privacy and security features such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact information or incident response details are provided, limiting direct communication channels for users or security reporting. Overall, the website is functional and content-rich for its niche but requires improvements in security and compliance to enhance trust and regulatory adherence.

meinestadt.de GmbH operates a comprehensive regional portal serving all cities in Germany, offering a wide range of local services including job listings, real estate, automotive sales, dating, leisure, events, and business directories. The company has an established market presence since 1996 and targets a broad general audience seeking localized information and services. Technically, the website employs modern frontend technologies such as Vue.js and Tailwind CSS, hosted on AWS infrastructure, and integrates advertising and tracking services like Google DoubleClick and Tealium. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit security policies. Privacy compliance is limited in the provided content, with no clear privacy or cookie policies detected. Overall, the domain registration and WHOIS data align well with the business claims, indicating a legitimate and trustworthy operation.

A

Alta Valsugana Smart Valley

altavalsuganasmartvalley.it

54

Alta Valsugana Smart Valley is a regional coworking space provider focused on serving professionals and remote workers in the Alta Valsugana area of Italy. The company offers multiple coworking hubs in Levico, Civezzano, and Tenna, providing fast internet connectivity, networking events, and membership services to foster a professional community. Their market position is that of a local, community-oriented coworking provider supported by the Fondazione Cassa Rurale Alta Valsugana. Technically, the website is built on modern frameworks including Remix and Tailwind CSS, hosted on the RevasOS platform, and optimized for performance, mobile responsiveness, and accessibility. The site uses HTTPS and includes standard SEO and social media integration, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers, published security policies, and cookie consent mechanisms, which are recommended for enhanced security and compliance. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

A

Avvenire

avvenire.it

67

Avvenire.it is a well-established Italian media website providing news and multimedia content primarily in Italian. The site targets a general audience interested in current events and media content. Technically, the website employs modern web technologies including Nuxt.js framework, Tailwind CSS for styling, and is hosted on Microsoft Azure CDN infrastructure, ensuring good performance and scalability. The site integrates Cookiebot for cookie consent management and uses Google Tag Manager and Matomo for analytics, indicating a moderate level of user tracking and privacy compliance. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks explicit security headers and published security policies, which could be improved to enhance security posture. Overall, the site is professional and trustworthy with no signs of blocking or WAF interference, but it would benefit from publishing comprehensive privacy and security policies to improve compliance and user trust.

M

Mx3.ch

mx3.ch

69

Mx3.ch is a reputable Swiss music portal established in 2006, serving as a digital public service utility that promotes Swiss music across multiple media channels including radio and TV. It offers a rich catalog of music tracks, bands, playlists, and concert listings, targeting Swiss music fans and media professionals. The platform benefits from strong partnerships with major Swiss radio stations and provides a commercial-free music discovery experience. Technically, the website leverages modern web technologies such as Ruby on Rails, Tailwind CSS, and Google Fonts, with a responsive design optimized for mobile devices. Security-wise, the site enforces HTTPS, includes CSRF protection, and implements cookie consent via Usercentrics, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site demonstrates a solid security posture and business credibility with transparent WHOIS data consistent with its Swiss media focus.

I

ipcom GmbH

rcodezero.com

71

RcodeZero is a specialized DNS service provider leveraging Anycast technology to deliver fast, reliable, and resilient DNS solutions for enterprises, ISPs, and registries. The company is positioned as a leading DNS provider in Europe, supported by ISO 27001 certification and GDPR compliance, reflecting a strong commitment to security and data protection. Their product offerings cater to a diverse B2B audience, emphasizing high availability and security of DNS infrastructure. Technically, the website employs modern frameworks such as Tailwind CSS and Alpine.js, integrates Matomo for privacy-conscious analytics, and demonstrates good performance and accessibility standards. Security posture is robust with HTTPS enforcement, security headers, and a comprehensive cookie consent mechanism. However, the absence of a Terms of Service page and explicit incident response contacts are minor gaps. Overall, the website and business present a trustworthy and professional image with strong compliance and security practices.

V

Verkehrsverbund Steiermark GmbH

verbundlinie.at

59

Verbundlinie.at is the official website of Verkehrsverbund Steiermark GmbH, a regional public transportation authority in Austria's Steiermark region. The site provides comprehensive information on public transport services, including schedules, ticketing, tariffs, and customer service. It targets residents and visitors who use buses, trains, and trams in the region, offering tools like an online route planner and real-time updates. The business operates as a medium-sized essential entity within the transportation sector, maintaining a strong regional presence and digital engagement through social media channels.

D

D+H Verwertung Gmbh

dh-verwertung.de

50

D+H Verwertung Gmbh is a German company specializing in waste management, recycling, and container rental services. The company targets businesses and individuals in the Kamp-Lintfort region and offers a range of services including acceptance and delivery catalogs, container ordering, and environmental protection consulting. The website presents a professional and consistent brand image with clear contact information and legal documentation, supporting its credibility in the regional market. Technically, the website employs modern frontend technologies such as Alpine.js and Tailwind CSS, hosted on Strato servers. The site is mobile-optimized and uses HTTPS with appropriate security headers, indicating a good level of digital maturity. However, there is no visible cookie consent mechanism or advanced analytics, suggesting room for improvement in privacy compliance and data transparency. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CSRF token usage, but lacks published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected in the provided content. Overall, the security posture is solid but could be enhanced by formalizing policies and improving user privacy controls. The overall risk assessment is moderate with a recommendation to implement cookie consent, publish security and incident response policies, and consider adding a vulnerability disclosure framework. These steps would improve compliance, user trust, and security readiness, aligning the company with best practices in digital governance.

CURANTO is a German container rental service specializing in providing containers for construction debris, bulky waste, and garden waste. The company targets both private and business customers, positioning itself as a reliable and cost-effective service provider with TÜV certification enhancing its trustworthiness. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, hosted on maxcluster infrastructure, and optimized for mobile devices. Tracking and analytics tools like eTracker and Google Tag Manager are implemented with a cookie consent mechanism via Cookiebot, indicating basic privacy compliance. Security posture is adequate with HTTPS enabled, but lacks explicit security policies and some security headers. Overall, the domain registration and website content are consistent and legitimate, reflecting a medium-sized transportation sector business.

D

D'Filmakademie

dfilmakademie.lu

52

D'Filmakademie is a Luxembourg-based film academy dedicated to promoting cinema and audiovisual arts within the country. It organizes key cultural events such as the Lëtzebuerger Filmpräis, supports film professionals, and fosters community engagement through various activities and membership programs. The organization holds a significant position in Luxembourg's cultural landscape, supported by official sponsors including the Chamber of Commerce Luxembourg, CNA, and FilmFund Luxembourg. Technically, the website is built on WordPress, utilizing modern plugins and frameworks such as WPBakery Page Builder, Smart Slider 3, and Contact Form 7. It employs standard web technologies including jQuery, Tailwind CSS, and integrates Google Analytics and Tag Manager for analytics. Hosting is provided by OVH, a reputable provider. The site is mobile-optimized with good SEO practices and a professional design. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and publicly available security policies or incident response documentation. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website demonstrates a strong commitment to privacy compliance and user experience, with clear contact information and trust indicators. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen the security posture.

E

Estúdio Visio

estudiovisio.com.br

55

Estúdio Visio is a small creative duo based in Brazil specializing in design and technology projects, including UX/UI, prototyping, web development, CMS, and brand identity. Their market position is that of a niche creative agency serving businesses seeking innovative digital branding and web solutions. The website demonstrates a modern technical infrastructure built on Nuxt.js, Vue.js, Tailwind CSS, and Sanity CMS, hosted on Nsone nameservers. The site is well-designed, mobile-optimized, and provides a professional portfolio showcasing recent work. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security documentation.

D

Deka Investments

deka.de

68

Deka Investments is a well-established financial services provider in Germany, focusing on investment products for private customers. The website presents a professional and consistent brand image, targeting private investors with asset management and investment fund services. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js with PrimeVue and Tailwind CSS, alongside marketing and analytics tools like Adobe Launch and Google Tag Manager, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and nonce attributes on scripts, but lacks explicit security headers and publicly available security policies, which are areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which could impact user trust and regulatory compliance. Overall, the website is trustworthy and professionally maintained, but enhancing privacy disclosures and security headers would strengthen its security and compliance posture.

F

Flowly.cz

libristo.pl

71

Libristo.pl is an online bookstore specializing in foreign language books, offering over 22 million titles in more than 100 languages. The business targets readers in Poland seeking foreign literature, providing a loyalty program, a 30-day return policy, and a network of pickup points. The website is professionally designed with a consistent brand presence and good content quality. Technically, it employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent, Alpine.js, Swiper.js, and Tailwind CSS, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies are not evident. The absence of WHOIS data limits domain trust assessment but the website's content and technology usage suggest legitimacy. Advertising and analytics integrations are extensive, with multiple third-party ad networks and tracking pixels in use. Privacy compliance is basic, with cookie consent but no clear privacy policy or terms of service found in the provided content.

Pan Africa ILGA is a well-established non-profit organization founded in 2014, dedicated to advancing LGBTIQ+ rights and equality across Africa. The organization operates through advocacy, community building, support services, and regional conferences, targeting activists, allies, and organizations continent-wide. Their website reflects a professional and modern digital presence with clear navigation and event registration capabilities, including donation processing via PayPal and conference registration through SurveyMonkey. Technically, the website employs modern front-end technologies such as Tailwind CSS and Google Fonts, with custom JavaScript for interactive elements like slideshows and countdown timers. The site is mobile-optimized and visually appealing, though some accessibility features could be enhanced. Hosting details are limited, but domain registration data is consistent and trustworthy. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, it lacks visible security headers, vulnerability disclosure mechanisms, and formal privacy or cookie policies, which are important for compliance and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website presents a moderate risk profile with strengths in design and business credibility but gaps in privacy compliance and security best practices. Strategic improvements in policy publication, security headers, and vulnerability disclosure would enhance trust and compliance.

F

Fort Wayne LightFest

fwlightfest.org

67

Fort Wayne LightFest is a seasonal holiday event in Fort Wayne, Indiana, combining two major light shows: Blue Jacket's Fantasy of Lights and the Fort Wayne Zoo's Wild Lights, along with a Christmas Village featuring vendors and family activities. The website effectively communicates event details, ticketing options, schedules, and FAQs targeting families and local community members. Technically, the site uses modern frontend technologies including Tailwind CSS, Mantine UI, Mapbox GL JS, and FontAwesome, hosted behind Cloudflare with Squarespace as the registrar, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, but would benefit from enhanced privacy and security disclosures.

F

Frisco.pl

frisco.pl

68

Frisco.pl is a Polish online grocery supermarket offering a wide range of food products with home delivery services, including same-day delivery in Warsaw and across Poland. The website is professionally designed using modern web technologies such as React, with integrated analytics and error monitoring tools like Google Tag Manager, Hotjar, Pingdom, and Sentry. The business model focuses on convenience and promotions to attract consumers seeking efficient grocery shopping online. Security posture is solid with HTTPS and service workers implemented, though explicit security headers and privacy policies are not clearly present in the analyzed content. The absence of WHOIS data limits transparency but is common for privacy protection in e-commerce. Overall, the site is trustworthy and functional with room for improvement in privacy compliance and security best practices.

A

Anses - Agence nationale de sécurité sanitaire de l’alimentation, de l’environnement et du travail

anses.fr

52

Anses is the French national agency responsible for health safety in food, environment, and work sectors. It provides scientific expertise, risk assessment, regulatory decisions, and public communication. The agency holds a strong market position as a government authority with a large organizational size and a comprehensive digital presence. The website is built on Drupal 10 with modern frontend technologies and includes multilingual support. Privacy and cookie consent mechanisms are implemented effectively. However, WHOIS data is missing, which slightly impacts domain trustworthiness. The site demonstrates good security practices but lacks explicit security policy and incident response information.

E

European Association of Zoos and Aquaria (EAZA)

eaza.net

68

The European Association of Zoos and Aquaria (EAZA) operates a professional and comprehensive website serving as a hub for over 400 member zoos and aquariums across Europe and Western Asia. The organization focuses on species conservation, animal welfare, education, research, and advocacy. The website is built on modern technologies including Gatsby and React, with a headless CMS (Strapi) backend, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are present and indicate GDPR compliance, though direct contact emails and phone numbers are not publicly listed, relying instead on contact forms. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding strongly indicate a legitimate and established non-profit entity. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with recommendations to improve security headers and domain registration transparency.

ENGIE Home Services is a leading French company specializing in home maintenance and energy-related services. The company offers a broad range of services including heating system maintenance, plumbing, and energy efficiency consulting, targeting residential customers across France. The website reflects a strong market position with professional branding and clear service offerings. Technically, the site is built using modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers implemented, though the absence of published security policies and incident response information suggests room for improvement. The lack of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the professional presentation and market presence. Strategic recommendations include publishing formal security and incident response policies and enhancing transparency around analytics and tracking.

I

Inforca

inforca.mc

48

Inforca is a Monaco-based Enterprise Services Network (ESN) specializing in digital transformation services for businesses in Monaco and France. The company positions itself as a leading digital solutions provider in the Monaco market, offering expertise and realizations tailored to its target audience. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site leverages modern technologies including Alpine.js, Tailwind CSS, and the Ibexa CMS platform, with privacy-focused analytics via Matomo and a robust cookie consent mechanism using Tarte Au Citron. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence aligned with business goals and compliance requirements.

A

Aller Service

allerservice.dk

72

Aller Service is a Danish media subscription service specializing in providing subscriptions to Allers weekly magazines and other publications in both print and digital formats. The company targets Danish-speaking magazine readers and operates under the parent company Aller Media. The website is professionally designed with a clear focus on subscription services, offering a user-friendly experience optimized for mobile devices. The technical infrastructure leverages modern web technologies including Nuxt.js, Tailwind CSS, and is hosted on Microsoft Azure, indicating a mature digital presence. Security measures such as HTTPS, security headers, and cookie consent mechanisms are implemented, reflecting a good security posture. However, the absence of a public security policy and vulnerability disclosure limits transparency. Overall, the website is trustworthy and compliant with GDPR, with no signs of malicious activity or adult content.

T

Trustfolio

trustfolio.co

65

Trustfolio is a French-based online platform specializing in trust and reputation management within professional sectors such as recruitment, HR, marketing, and sales. The platform offers categorized business listings and services aimed at enhancing trust signals for companies and professionals. The website is built on modern web technologies including Nuxt.js and Tailwind CSS, hosted on Vercel, and incorporates performance and accessibility best practices. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and cookie policies are absent, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and contact transparency.

P

Počítačové a manažérske kurzy a školenia - Macrosoft

macrosoft.sk

10

Macrosoft is a reputable Slovakian company specializing in computer and managerial training courses, offering both in-person and online education. The company holds ISO 9001:2015 certification, underscoring its commitment to quality management. Its website targets individuals and organizations seeking professional development in IT and business skills, positioning itself as a leading training and certification center in Bratislava and online. The business model revolves around delivering educational services, including certification preparation and summer camps.

C

Commune de Kopstal

kopstal.lu

50

The Commune de Kopstal website serves as the official digital presence for the local government of Kopstal, Luxembourg. It provides residents and visitors with comprehensive information about municipal services, news, events, publications, and administrative procedures. The site is well-structured, professionally designed, and targets local citizens and stakeholders. The business model is typical of a government entity focused on public service delivery and community engagement. Technically, the website is built on Drupal 10, leveraging modern web technologies including Tailwind CSS and Alpine.js for frontend interactivity. It integrates Piwik PRO for analytics and Usercentrics for GDPR-compliant cookie consent management, indicating a mature digital infrastructure with attention to privacy and user experience. The site is mobile-optimized and accessible, with good SEO practices. From a security standpoint, the site enforces HTTPS and implements cookie consent mechanisms. However, there is a lack of visible security headers and no published security or incident response policies, which are areas for improvement. The absence of WHOIS data due to a failed query reduces domain registration transparency, though the official .lu domain and consistent branding support legitimacy. Overall, the website is a reliable and professional government portal with strong content and technical foundations but could enhance its security posture and transparency regarding domain registration and privacy policies.

N

Nux s.r.o.

nux.cz

69

Nux s.r.o. is a Czech technology company specializing in web development, online office solutions, and comprehensive internet consulting services. Established in 2004, the company has a solid market presence in the Czech Republic, targeting businesses and organizations seeking tailored digital solutions. Their offerings include custom software development, e-learning platforms, client portals, e-commerce solutions, and communication tools such as Mattermost and Jitsi. The website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the website employs modern technologies including Tailwind CSS, Google Tag Manager, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be enhanced. The CMS used is a proprietary or custom system (cms1.nux.cz), and the site is served over HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate automated abuse. However, explicit security headers are not evident, and there is no published security policy or incident response contact information. Cookie consent is implemented, supporting GDPR compliance, but no explicit privacy policy or terms of service were found on the main page. The WHOIS data confirms the domain's legitimacy and long-term registration consistent with the company's history. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include publishing comprehensive privacy and security policies, enhancing accessibility, and implementing additional security headers to strengthen the security posture.

Le Biau Germe is a small French collective of organic and traditional seed producers, operating an e-commerce platform focused on selling biological, reproducible, and traditional seeds to both individuals and professionals. The website presents a consistent brand image with good content quality and clear business focus on organic agriculture. Technically, the site uses modern CSS frameworks like Tailwind CSS and is hosted by Infomaniak Network SA, a reputable hosting provider. The site is mobile optimized and SEO friendly with proper metadata and Open Graph tags. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly found, limiting direct communication channels. Overall, the domain registration data supports legitimacy with a long-standing registration since 2002.

M

Mondelēz International, Inc.

mondelezinternational.com

66

Mondelēz International, Inc. is a leading global snacks company operating in over 150 countries, specializing in manufacturing and marketing cookies, crackers, gum, chocolate, and candy. The company holds a strong market position as one of the largest snack producers worldwide, targeting consumers, retailers, and investors. Their business model focuses on global manufacturing and distribution of snack foods with a well-established brand presence. The website reflects a mature digital infrastructure built on modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS data introduces some uncertainty in domain registration legitimacy, though the overall business credibility remains high due to strong branding and trust signals.

M

MaFormation

maformation.fr

58

MaFormation.fr is a large French online platform specializing in aggregating and listing professional training courses across France. It offers a wide range of educational services including CPF-financed training, alternance programs, online courses, and competency assessments. The platform targets individuals seeking to enhance their professional skills and certifications. The website is well-branded, consistent, and provides comprehensive content relevant to its audience. Technically, it employs modern web technologies such as Tailwind CSS, StimulusJS, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Abtasty. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the association with the Hellowork Group parent company and professional presentation mitigate this risk. Overall, the site is professional, trustworthy, and serves a critical role in the French education sector.

I

Inbound Back Office

inboundbackoffice.com

45

Inbound Back Office is a service provider specializing in white-label virtual assistant and marketing support services tailored for marketing agencies, fractional CMOs, and small businesses. The company positions itself as a scalable and seamless support partner, trusted by hundreds of teams globally to handle marketing execution and administrative tasks without the complexities of hiring. Their website reflects a professional and consistent brand image with clear messaging and client testimonials that reinforce trust. Technically, the website leverages modern front-end technologies including Bootstrap, Tailwind CSS, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. The site is built on Zephyr CMS and demonstrates good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved. Security-wise, HTTPS is properly implemented, but the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and protection. The security posture is moderate with no immediate vulnerabilities detected in the visible content, but the lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. This discrepancy between professional website content and missing domain registration information suggests the need for further verification. Overall, the site is functional and credible from a business perspective but requires improvements in privacy compliance and security best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and resolve WHOIS registration transparency to strengthen trust and compliance. Enhancing accessibility and SEO will also improve user reach and satisfaction.

R

Ruby Tree Software, Inc.

advancementform.com

64

Advancement Form, operated by Ruby Tree Software, Inc., is a specialized SaaS provider offering an online giving and event registration platform tailored for non-profit organizations. The website positions itself as a solution to maximize participation and fundraising success for non-profits, featuring a professional design, clear messaging, and client testimonials that reinforce its market niche. The platform emphasizes ease of use and customization to empower advancement professionals in their fundraising efforts. Technically, the website employs modern frontend technologies including Tailwind CSS, DaisyUI, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS and maintains privacy and security policy pages, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. The absence of WHOIS data is a notable anomaly that impacts trust, though the website content and business presentation remain professional and credible. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

O

Open Net Sàrl

open-net.ch

52

Open Net Sàrl is a specialized Swiss company focused on Odoo ERP integration and hosting services, holding a leading market position as the top Odoo integrator in Switzerland with over 15 years of experience. Their business model revolves around providing modular ERP solutions tailored to client needs, complemented by innovative applications such as Mosaïk, CryptoSync, and CO₂ accounting. The company targets businesses seeking efficient and scalable ERP solutions with a strong emphasis on local presence and ecological commitment. Technically, the website is built on a modern Nuxt.js framework with Tailwind CSS, ensuring fast performance, excellent mobile optimization, and good accessibility. The use of Google Tag Manager indicates moderate analytics and tracking capabilities. SEO and content quality are high, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Privacy compliance is adequate with comprehensive privacy and terms policies, though cookie consent mechanisms could be enhanced. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic recommendations include enhancing security transparency, adding incident response contacts, and implementing explicit cookie consent to improve privacy compliance and user trust.

Leexi.ai is a technology company offering an AI-powered meeting assistant designed to automate note-taking, summarize meetings, and extract action items to boost productivity. The website positions itself as a SaaS solution targeting professionals and teams who want to optimize their meeting workflows. The business model revolves around providing AI-driven services to enhance workplace efficiency. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, indicating a contemporary and responsive design approach. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security practices. The WHOIS data is unavailable due to privacy protection, which is common for startups but limits trust verification. Overall, the site is professional and functional but would benefit from enhanced transparency and security measures.

E

ENGIE

engie.fr

63

ENGIE France is a major energy company focused on accelerating the transition to a carbon-neutral world through renewable electricity and gas production, distribution, and infrastructure services. The website reflects a strong market position as a leader in solar, wind, and biomethane production in France, targeting individuals, professionals, enterprises, and public entities. The digital infrastructure uses modern technologies such as Tailwind CSS, GSAP, and Matomo analytics, with a custom ENGIE design system ensuring consistent branding and good user experience. Security posture is moderate with cookie consent implemented and no obvious vulnerabilities detected, though explicit security policies and headers are not evident. WHOIS data is unavailable likely due to privacy protection, but the website's professional presentation and linkage to official ENGIE domains support legitimacy. Overall, the site is well-designed, compliant with privacy regulations, and trustworthy, though improvements in security transparency and contact information availability are recommended.

N

Not explicitly stated

pombilitiopfolda.com

64

The website provides detailed information about POMBILITI® (cipaglucosidase alfa-atga) + OPFOLDA® (miglustat), an FDA-approved two-component therapy for adults with Pompe disease. It serves as an educational and support platform targeting patients and healthcare providers, offering clinical trial results and resources. The site is built using modern web technologies including React and Gatsby, with a focus on accessibility and mobile responsiveness. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site is professional, trustworthy, and aligned with healthcare industry standards.

H

Hellowork

hellowork.com

65

Hellowork operates as a leading online job board and recruitment platform in France, offering a wide range of employment opportunities, CV management, job alerts, and recruitment services. The website targets job seekers and recruiters, positioning itself as a premier resource in the French employment market. The platform is well-branded and maintains a consistent professional image with strong social media integration and mobile app availability. Technically, the website employs modern web technologies including Turbo Frames, Tailwind CSS, and integrates multiple analytics and marketing tools such as Google Tag Manager, Piano Analytics, and Microsoft Clarity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are missing. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of explicit security headers and lack of published security policies or incident response information indicate areas for improvement. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not necessarily indicate illegitimacy given the site's professional presence. Overall, Hellowork presents a mature digital presence with strong business credibility and user engagement, though it would benefit from enhanced security transparency and domain registration clarity.

B

Bemove

ariase.com

26

Ariase.com is a well-established French online comparison platform specializing in internet boxes, mobile plans, and smartphones. Owned by Bemove, a subsidiary of the CCM Benchmark - Le Figaro group, it targets French consumers seeking to optimize their telecom subscriptions. The website offers comprehensive comparison tools, coverage maps, speed tests, and up-to-date guides, positioning itself as a trusted resource in the telecommunications sector. Technically, the site employs modern web technologies including Google Tag Manager and Tailwind CSS, delivering fast performance and excellent mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly impacts domain transparency but is mitigated by the professional presentation and affiliation with a reputable parent company. Overall, Ariase.com demonstrates strong business credibility and technical maturity with room for improvement in privacy and security disclosures.

M

Moshbit GmbH

moshbit.com

11

Moshbit GmbH operates a professional website offering Controlling as a Service, primarily targeting tech-oriented startups and small to medium-sized enterprises (KMUs) in Austria and German-speaking markets. Their key services include financial planning, forecasting, dashboards, KPI tracking, investment calculations, and strategic consulting. The company presents itself as a niche service provider with a focus on efficient and tailored financial controlling solutions, leveraging their proprietary CoreControlling® tool. The website is well-branded, consistent, and provides clear service descriptions and team information, enhancing business credibility. Technically, the website uses modern frontend technologies such as Tailwind CSS and Alpine.js, with assets hosted on Amazon S3, indicating a modern and scalable infrastructure. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, some security best practices like DNSSEC and security headers are not implemented, representing minor improvement areas. From a security perspective, the site enforces HTTPS and has domain transfer protections, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Contact information is primarily via a web form, with no direct emails or phone numbers listed. Social media presence is limited to LinkedIn profiles of key team members. Overall, the website is professional, trustworthy, and well-suited for its target audience, but could enhance security posture and privacy compliance by implementing additional security headers, DNSSEC, cookie consent, and incident response disclosures.

C

Crownpeak Technology, Inc

crownpeak.com

67

Crownpeak Technology, Inc. is an enterprise technology company specializing in AI-driven product discovery and enterprise content management solutions. Their flagship products, Fredhopper and FirstSpirit, enable businesses to enhance digital experiences, improve conversions, and ensure accessibility compliance. The company targets large enterprises seeking scalable and flexible digital growth solutions. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding. Technically, the site employs modern analytics and marketing tools, robust consent management for GDPR compliance, and enforces HTTPS with security headers. However, the absence of WHOIS registration data raises questions about domain registration transparency. Security posture is solid but could be improved with published security policies and incident response information. Overall, Crownpeak presents as a credible and professional technology enterprise with room for enhanced transparency and security documentation.

B

Boiron

boiron.cz

66

Boiron is a French pharmaceutical company specializing in homeopathic medicinal products, positioning itself as a world leader in homeopathy since its founding in 1932. The website targets a general audience interested in gentle and natural health treatments, offering product information, health articles, and educational content. The company emphasizes quality and respect in its business philosophy. Technically, the website is built using modern frameworks such as Next.js and Tailwind CSS, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enforced and some tracking scripts present, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and consistent branding support legitimacy. Privacy compliance is partial, with cookie consent implemented but no clear privacy or terms of service pages found. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

S

Storck

dein-merci.de

62

The website www.dein-merci.de is an e-commerce platform specializing in personalized merci Finest Selection chocolates, allowing customers to customize packaging with photos and messages. It operates under the reputable Storck brand, targeting consumers seeking unique gift ideas. The site is built on a modern Shopify Oxygen infrastructure using React and Tailwind CSS, ensuring good performance and mobile optimization. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is solid with HTTPS and cookie consent, though some security headers and incident response details are missing. Overall, the site presents a professional and trustworthy online shopping experience with no signs of malicious content or blocking mechanisms.

Srovnejto.cz is a Czech Republic-based online comparison platform specializing in insurance, energy, and loan products. It serves Czech consumers by providing a user-friendly interface to compare offers and find optimal deals. The website is positioned as a trusted local player with a professional design and comprehensive service offerings. Technically, the site leverages modern frontend frameworks such as Nuxt.js and Vue.js, combined with Tailwind CSS for styling and Font Awesome for icons, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes essential security headers, though it lacks a dedicated security policy or vulnerability disclosure page. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a solid security posture and business credibility, with room for improvement in transparency around security policies and incident response.

Srovnejto.cz operates as an online energy price comparison platform primarily targeting consumers in the Czech Republic. The website facilitates comparison of electricity and gas tariffs, helping users find competitive energy prices. The business model likely revolves around affiliate partnerships or lead generation within the energy sector. The site presents a professional and consistent brand image with good content quality and user experience.

Srovnejto.cz is a Czech-based online comparison platform specializing in insurance, energy, and loan products. It serves consumers in the Czech Republic by providing a user-friendly interface to compare financial and utility offerings, helping users make informed decisions. The website demonstrates a professional design and clear service focus, positioning itself as a significant player in the local comparison market. Technically, the site leverages modern frontend technologies such as Nuxt.js and Font Awesome, ensuring a responsive and visually appealing user experience. However, performance is moderate and could benefit from optimization. Security posture is average; while HTTPS is presumably enabled, no explicit security headers or policies are detected, and privacy compliance is weak due to missing privacy and cookie policies. The absence of WHOIS data limits domain legitimacy assessment, but the website's professional appearance and content relevance suggest a legitimate business. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.