Security Directory

E

European Medical Journal

emjreviews.com

74

The European Medical Journal (EMJ) operates a professional, open-access medical publishing platform dedicated to delivering insights and advancements across multiple therapeutic areas. The website targets healthcare professionals and researchers, offering journals, podcasts, webinars, and medical calculators. The platform is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various analytics and marketing tools. The site demonstrates good design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and reputable third-party scripts, though explicit security headers and privacy policies are lacking. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance and content. Overall, the site is functional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and privacy compliance.

C

Carl von Ossietzky Universität Oldenburg

uni-oldenburg.de

62

Carl von Ossietzky Universität Oldenburg is a well-established public university in Germany, founded in 1973, offering a broad range of academic programs and research activities. The website serves as an information portal for students, researchers, staff, and international visitors, providing access to study programs, research news, events, and administrative resources. The university emphasizes research excellence, international cooperation, and lifelong learning. Technically, the site is built on TYPO3 CMS with modern frontend libraries and is served securely over HTTPS. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. However, explicit privacy and cookie policies are not clearly presented, and no incident response or vulnerability disclosure information is available, which are areas for improvement. Overall, the site reflects a professional and trustworthy academic institution with a solid digital presence.

Campus Halensis serves as the official news and information portal for Martin-Luther-Universität Halle-Wittenberg, providing timely updates on academic events, research, and campus life primarily targeting students, faculty, and researchers. The website is well-branded and consistent with the university's identity, offering content in German with an English language option. It functions as a communication channel to keep the university community informed and engaged. Technically, the site uses a moderate technology stack including jQuery, Magnific Popup, Slick Carousel, and Piwik/Matomo for analytics, hosted likely on university infrastructure. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a clear privacy policy and cookie banner. The WHOIS data aligns well with the university's domain infrastructure, indicating legitimacy and trustworthiness. Overall, the website is a professional, trustworthy academic portal with good content quality and privacy practices. However, improvements could be made in security header implementation, incident response transparency, and accessibility compliance to enhance the security posture and user experience.

C

Carl von Ossietzky Universität Oldenburg

uol.de

62

Carl von Ossietzky Universität Oldenburg is a well-established public university in Germany, founded in 1973, offering a broad range of academic programs and research activities. The website serves students, researchers, academic staff, and the general public with comprehensive information about study programs, research, campus life, and international cooperation. The university positions itself as a research-oriented institution with a strong regional and international presence.

K

Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V.

kompetenzz.de

50

Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V. is Germany's largest network dedicated to technology, diversity, and equal opportunity. The organization operates as a non-profit entity focusing on educational activities, networking, and advocacy to promote equal opportunities in technical and social fields. Their website reflects a mature and professional presence with a comprehensive range of services including data tools, workshops, and seminars aimed at various stakeholders such as educational institutions and policymakers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Matomo analytics, and Google reCAPTCHA, ensuring a secure and user-friendly experience. The site is mobile-optimized, accessible, and SEO-friendly, with a custom CMS indicated. Hosting and DNS are managed via GoDaddy's DomainControl, a reputable provider. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA on forms, and manages cookie consent effectively. However, it lacks explicit security policies and incident response information publicly available, and security headers are not detected, which could be improved. No vulnerabilities or suspicious activities were found. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. Strategic recommendations include publishing a security policy, enhancing security headers, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

D

Datamatic Sistemi & Servizi S.p.A.

sistemieservizi.net

48

Datamatic Sistemi & Servizi S.p.A. is an Italian company specializing in healthcare IT solutions, cybersecurity and digital forensics, IT storage, and marketing & communication services. The company targets healthcare institutions, law enforcement, public and private organizations, offering a comprehensive portfolio of technology-driven services. Their market position is that of a versatile and professional group with vertical expertise in multiple sectors. The website reflects a medium-sized enterprise with consistent branding and professional content. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Flexslider, and Google Tag Manager for analytics. It is built on Vida CMS 3.0 and shows good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. The site is fully accessible without any WAF or blocking mechanisms. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating GDPR compliance. However, it lacks visible security headers, published security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data raises concerns about domain registration transparency, which impacts the overall trustworthiness assessment. Overall, the website is professional and trustworthy based on content and design, but the missing WHOIS data and limited security disclosures suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to improve legitimacy and trust.

Z

Z Sea Line

zsealine.com

63

Z Sea Line is a maritime transportation company specializing in the shipping of crude oil and energy products, operating since 2019 under the Zeren Group Holding Companies. The company positions itself as a reliable partner in global shipping with a focus on sustainable and cost-effective maritime logistics. Their website reflects a professional and business-oriented approach targeting industry professionals and businesses in the energy and transportation sectors. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS. The site is mobile optimized with good navigation and design quality, though no CMS or advanced backend platform is detected. Performance is moderate with no evident broken elements. However, the site lacks advanced SEO and accessibility features. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no privacy or cookie policies, nor vulnerability disclosure mechanisms, indicating compliance and security maturity gaps. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency policies to improve trust and regulatory adherence.

Z

ZEREN Energy

zerenenergy.com

62

ZEREN Energy is a relatively new company founded in 2022, operating in the European energy trading sector with a focus on natural gas. The company offers a range of services including forward contracts, market access and capacity products, financial derivatives, and physical delivery of natural gas across multiple European countries. The website reflects a professional business presence with consistent branding and clear contact information, targeting energy market participants in Western, Central, and Southeastern Europe. Technically, the website uses a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS and CDN services. The site is mobile optimized and performs moderately well, though SEO and accessibility features are basic. No CMS or backend platform was detected from the provided data. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks important security headers and DNSSEC is not enabled. There are no visible privacy or cookie policies, nor any incident response or vulnerability disclosure information, which indicates gaps in compliance and security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency measures to improve trust and regulatory adherence.

M

MYZ Trading

myztrading.com

63

MYZ Trading is a newly established energy trading company founded in 2024, specializing in the global supply and trading of crude oil, petrochemical products, and investments. The company serves a diverse clientele including national oil companies, multinational corporations, and industrial firms, emphasizing sustainability and responsible business practices. The website reflects a professional and consistent brand image aligned with its parent company, Zeren Group Holding. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, hosted behind Cloudflare DNS, and uses HTTPS for secure communication. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit contact information is provided, which may affect user trust and regulatory compliance. Overall, the website is functional, well-designed, and content-rich but requires enhancements in security and privacy transparency to strengthen its digital maturity and trustworthiness.

T

Turkticaret.net Yazilim Hizmetleri Sanayi ve Ticaret A.S.

myzcocharge.com

61

MYZ Co Charge is a Turkish-based service providing a mobile application platform to help electric vehicle owners locate nearby charging stations with real-time availability. The company targets EV drivers in Turkey, offering convenience through its app available on both the Apple App Store and Google Play. The business is newly established in late 2024, positioning itself in the growing energy and transportation sector focused on sustainable mobility solutions. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Swiper, hosted behind Cloudflare DNS services, ensuring decent performance and mobile responsiveness. However, DNSSEC is not enabled, and security headers are missing, indicating room for improvement in security hardening. The website is accessible without WAF or blocking challenges, and contact information including a corporate email and physical address is clearly provided, enhancing business credibility. Privacy and terms of service documents are present but cookie consent mechanisms are absent, which may affect GDPR compliance. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, scoring 74 out of 100 in AI evaluation.

Digitális Erőmű is a Hungarian educational and cultural institution focused on providing digital pedagogical resources and interactive exhibition spaces. It serves teachers, students, and the local community by offering modern educational tools such as the Digipédia system and hosting various exhibitions and events. The website reflects a regional cultural hub with a clear focus on education and community engagement. Technically, the site is built on WordPress and uses common front-end libraries like jQuery and Bootstrap, delivering a moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

Nemzeti Filmtörténeti Élménypark is a Hungarian cultural institution dedicated to preserving and presenting the history of Hungarian film through interactive exhibitions, educational programs, and event services. The website serves as an information portal for visitors, schools, and event organizers, highlighting key attractions and services. It maintains a strong national cultural identity with affiliations to government and cultural bodies. Technically, the site is built on WordPress with common front-end libraries and includes standard tracking tools like Google Analytics and Facebook SDK. The site is mobile-optimized and provides basic accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with clear policies and cookie banners. Overall, the site is professional, trustworthy, and well-suited for its cultural and educational mission.

O

Open Roberta Initiative

open-roberta.org

61

Open Roberta is an educational initiative under the Fraunhofer IAIS umbrella, focusing on teaching programming and robotics in a playful manner. The website serves as a portal for learners, educators, and makers interested in programming education. Technically, the site is built on WordPress with the Divi theme, leveraging common JavaScript libraries for UI enhancements. The site is well designed, mobile optimized, and provides clear navigation, although it lacks visible contact and privacy-related pages. Security posture is good with HTTPS enforced, but could be improved by adding security headers and formal policies. Overall, the site appears legitimate and professional, but would benefit from enhanced privacy compliance and security transparency.

C

CAF ACLI SRL - CENTRO ASSISTENZA FISCALE ACLI

mycaf.it

57

CAF ACLI SRL operates as a fiscal assistance center in Italy, providing a broad range of tax-related services including tax declarations, document management, appointment scheduling, and online assistance through its myCAF platform. The website targets individuals seeking convenient and comprehensive fiscal support, leveraging digital tools to enhance user experience. The company maintains a solid market position with a medium-sized operation and a consistent brand presence. Technically, the website employs a mature technology stack based on ASP.NET WebForms and popular JavaScript libraries, integrating Google Analytics and Cookiebot for analytics and compliance. The site is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and privacy-conscious analytics configurations, though it lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, professional, and compliant with GDPR, with room for improvement in security transparency and incident response readiness.

C

Caf Acli

cafacli.it

10

CAF ACLI is an Italian fiscal assistance center providing consultancy and support services related to tax declarations, IMU, TARI, and other fiscal obligations. The website targets Italian taxpayers and individuals seeking professional fiscal assistance. It offers detailed information on tax deadlines and services, positioning itself as a trusted intermediary in the Italian fiscal services market. Technically, the website is built on ASP.NET with a modern JavaScript stack including jQuery and UI libraries, integrated with Google Analytics, Facebook Pixel, and Cookiebot for tracking and consent management. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and policies could improve the overall security maturity. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, but could enhance transparency and security documentation.

S

SEA Corporate

milanairports.com

10

SEA Corporate operates the Milan Linate and Milan Malpensa airports, providing comprehensive airport management and passenger services. The company holds a significant market position as a major transportation hub in Italy, targeting general travelers and business clients. The website reflects a professional corporate presence with clear branding and consistent messaging focused on airport operations and sustainability. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance and mobile optimization. Security measures include HTTPS, cookie consent management via Cookiebot, and integration with Google Tag Manager for controlled script deployment. However, some security headers and explicit incident response contacts are not evident in the provided data. Overall, the site demonstrates a mature digital presence with strong privacy compliance and user tracking transparency.

S

Saturnales

saturnales.ch

59

Saturnales is a well-established student association based in Geneva, Switzerland, with a history spanning over 120 years. The organization is composed of third-year students from medical, dental, and biomedical science faculties who organize annual events, including parties and social gatherings, targeting the student community and local attendees. Their business model revolves around event management, ticket sales, and merchandise offerings, positioning them as a key player in the local student event scene. The website reflects a consistent brand identity and provides essential contact information and social media links to engage their audience. Technically, the website is built using the Infomaniak Site Creator platform and leverages modern frontend technologies such as jQuery, Bootstrap, and animation libraries. Hosting is provided by Infomaniak, a reputable Swiss hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. The cookie consent mechanism is implemented, indicating some level of privacy compliance. From a security perspective, the site enforces HTTPS and disables right-click on images to protect content. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. No privacy policy or terms of service pages were found, which may impact compliance and user trust. Overall, the security posture is moderate but could benefit from enhancements in headers, policies, and transparency. The overall risk assessment is low to moderate, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, improving accessibility, and enhancing transparency to build greater trust with users and comply with regulations.

J

JVAL Openair

jval.ch

46

JVAL Openair is a well-established regional music festival in Switzerland with a 20-year history, focusing on contemporary music and community engagement. The website provides detailed event programming, artist lineups, and volunteer information, targeting festival attendees and local cultural enthusiasts. Technically, the site is built on WordPress using modern plugins and themes, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which could impact user trust and compliance. Overall, the site is professional and credible but would benefit from enhanced privacy compliance and security practices.

D

DGSV e.V.

pro-xperts.de

47

proXPERTS is a specialized German electronic magazine serving the expert and appraiser community, operated under the auspices of DGSV e.V. The website provides industry news, practical advice, and advertising opportunities tailored to professionals in various appraisal sectors. The business model is subscription-based with additional free access for association members. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, with cookie consent managed by Usercentrics, ensuring GDPR compliance. The site is well-structured, mobile-optimized, and uses HTTPS with no detected security vulnerabilities in the content. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site demonstrates a solid security posture and professional business credibility.

F

fit GmbH

fit.de

57

fit GmbH is a German manufacturing and retail company with a diversified portfolio of consumer brands focused on personal care and household products. The website presents a professional and well-structured digital presence built on TYPO3 CMS, featuring multiple brand pages, career opportunities, and press information. The company targets a general consumer audience primarily in Germany. Technically, the website employs modern JavaScript libraries and privacy-conscious analytics via Matomo, with a cookie consent mechanism that supports opt-out and revocation, indicating good privacy practices. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security policies and headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

ONI Temperiertechnik RHYTEMPER GmbH is a medium-sized German manufacturing company specializing in innovative and energy-efficient temperature control solutions for the plastics and metal processing industries. As part of the ONI Group, it holds a leading market position in multi-channel tempering technology, serving prominent industrial clients such as Audi, BMW, and Volkswagen. The website reflects a professional and comprehensive presentation of their products, services, and corporate history, supporting their B2B business model effectively. Technically, the site uses modern web technologies including jQuery, Leaflet.js, and slick carousel, built on the ProcessWire CMS platform, hosted likely by Oberberg-Online. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and incident response contact information. Privacy compliance is mostly met with a clear privacy policy but missing cookie consent mechanisms. Overall, the website is trustworthy and professional, with strong business credibility and good content quality.

S

SIGIC - The Slovenian Music Information Center

musicslovenia.si

41

Music Slovenia is a consortium of Slovenian musical institutions dedicated to promoting Slovenian music both nationally and internationally. The website serves as a platform to connect various stakeholders in the Slovenian music scene, offering news, event information, playlists, tours, and showcases. The organization targets musicians, cultural institutions, and music enthusiasts interested in Slovenian music. The business model focuses on cultural promotion and collaboration facilitation within the music industry niche. Technically, the website employs a modern but somewhat dated technology stack including jQuery 2.2.4, Bootstrap, and various UI libraries. It uses HTTPS with good SSL configuration but lacks security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Analytics are handled via Plausible Analytics, indicating a privacy-conscious approach but lacking cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data but misses important security headers and formal security policies such as privacy, cookie, and incident response disclosures. No vulnerability disclosure or security contact information is provided, which could be improved to enhance trust and compliance. The domain registration data is consistent and appropriate for the business, supporting legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility but requires improvements in privacy compliance and security best practices to reach higher maturity levels.

S

Swiss Music Export

swiss-music-export.com

46

Swiss Music Export is a well-established platform dedicated to promoting Swiss music artists internationally. Founded in 2002, it serves as a key cultural export organization providing artist showcases, news, event information, and business support to the Swiss music industry. The website targets music professionals, artists, and fans interested in Swiss music, positioning itself as a trusted national resource. Technically, the site is built on WordPress with a moderate performance profile, leveraging common web technologies such as jQuery, Google Analytics, and Google reCAPTCHA for analytics and security. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the business history, supporting legitimacy. Overall, the website demonstrates a solid digital presence with room for security improvements.

M

muensterLAND.digital e.V.

muensterhack.de

45

MÜNSTERHACK is a well-established civic technology hackathon based in Münster, Germany, focused on bringing together professionals, students, and civic activists to collaboratively develop ideas and prototypes that enhance the livability of the city and region. Supported by local government, businesses, and community organizations, it has a strong market position as a key event in the regional tech and civic engagement ecosystem. The website reflects a professional and community-driven business model emphasizing open data and sustainable urban development solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and Matomo analytics, hosted on Alfahosting infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in security headers and cookie consent mechanisms are recommended. The use of Matomo indicates a privacy-conscious approach to user tracking. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of explicit security headers and cookie consent mechanisms suggests room for improvement in compliance and security posture. No incident response or vulnerability disclosure information is provided, which could be enhanced to build trust. Overall, the website is trustworthy, professionally maintained, and serves its community well. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and adding incident response contacts to improve compliance and security maturity.

B

bauexpert S.p.A

domusbauexpert.it

11

DOMUS bauexpert is a medium-sized Italian company specializing in high-quality interior and exterior finishing products, including flooring, coverings, bathroom furnishings, and doors. It operates primarily in the Trentino Alto Adige region, offering a comprehensive customer experience through multiple showrooms and expert consultancy services. The website reflects a strong regional market position with a focus on professional design and customer support. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google reCAPTCHA, and Iubenda for cookie compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, although some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

A

Apecita

agrorientation.com

48

Agrorientation.com is a specialized French portal operated by Apecita, focusing on careers and training in agriculture, agro-food, and environmental sectors. It serves students, professionals, and job seekers by providing comprehensive information on métiers, formations, events, and employment opportunities. The site is well-branded, consistent, and integrates partner content from Apecita and Apecita Media. Technically, the site uses modern JavaScript libraries such as jQuery, Select2, and Magnific Popup, with asynchronous script loading and cookie consent managed via axept.io, ensuring GDPR compliance. The site is mobile-optimized and accessible, with good SEO practices and structured data markup. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are absent. WHOIS data confirms legitimacy with consistent registrant information matching the business entity. Overall, the site is professional, trustworthy, and well-suited for its educational and career guidance purpose.

F

Film Association of South Tyrol (FAS)

fas-film.net

46

The Film Association of South Tyrol (FAS) is a professional organization representing film industry professionals in South Tyrol, Italy. It serves as a hub for filmmakers, actors, production companies, and service providers, promoting the region as a film-friendly location and supporting local film productions with international aspirations. The website is well-structured, bilingual (German and Italian), and provides clear information about the association's mission, membership, and news. The presence of partner logos and a newsletter subscription indicates active community engagement. Technically, the website is built on WordPress using WPBakery Page Builder and common JavaScript libraries such as jQuery and MediaElement.js. It employs HTTPS with a valid SSL certificate and includes a GDPR-compliant cookie consent mechanism. The site is moderately optimized for performance and mobile devices, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers and does not provide visible security policies or incident response contacts. The WHOIS data for the domain is unavailable, which is unusual but the website content and professional presentation suggest legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a trustworthy and professional front for the Film Association of South Tyrol, with minor improvements recommended in security headers and transparency around security policies. The missing WHOIS data warrants monitoring but does not currently indicate malicious intent.

I

ILGA World

ilga.org

73

ILGA World is a well-established global non-profit organization advocating for the human rights of lesbian, gay, bisexual, trans, and intersex people worldwide. Founded in 1978, it operates as a federation of over 2,000 member organizations across 170 countries, providing advocacy, research, and grassroots support. The website reflects a mature digital presence with comprehensive content, strong branding, and clear navigation targeting activists, civil society, and human rights stakeholders. Technically, the site is built on WordPress with modern plugins for SEO, accessibility, and user engagement. It uses Cloudflare DNS and integrates Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and cookie consent mechanisms in place. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and no visible vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled and security headers are not explicitly detected, indicating areas for improvement. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, ILGA World’s website is trustworthy, professional, and secure, supporting its mission effectively. Strategic recommendations include enhancing DNS security, publishing explicit security policies, and implementing security.txt or vulnerability disclosure channels to further strengthen trust and compliance.

D

Datackathon

datackathon.com

56

Datackathon is a French digital magazine specializing in data, digital technology, cybersecurity, AI, cloud computing, SaaS, marketing, and e-commerce. It targets professionals and enthusiasts interested in these domains by providing regularly updated articles and news. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. Advertising is primarily managed through Google Adsense and affiliate marketing via ThirstyAffiliates. The website enforces HTTPS, ensuring secure communication, but lacks some advanced security headers and explicit cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data for the domain is missing or unavailable, which raises questions about domain registration transparency, though the website content and structure appear legitimate and professional.

The website workspace-solution.com represents a small French technology company named Addona Editions offering customizable web management solutions including CRM, invoicing, email marketing, websites, and mobile/web applications. The business targets organizations seeking modular ERP and management tools tailored to their specific needs. The site is professionally designed with consistent branding and clear navigation, providing good user experience and relevant content for its audience. Technically, the site uses a variety of modern front-end libraries such as Bootstrap, jQuery, Font Awesome, and Ionicons, but lacks evidence of a CMS or backend framework. Performance is moderate with good mobile optimization but basic accessibility and SEO features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the site is functional and business-focused but requires improvements in security, compliance, and domain registration transparency.

B

BNI Osmose & Co

meetsuo.com

61

Meetsuo is a French technology company founded in 2023 that offers a SaaS platform designed to enhance the efficiency and quality of professional business meetings. Their solution targets professional networking groups and meeting organizers, providing tools such as attendance tracking, badge generation, QR code stands, photo directories, PowerPoint generation, satisfaction surveys, guest tracking, and payment management. The company positions itself as a niche provider with clear subscription pricing and positive customer testimonials, indicating a growing presence in its market segment. Technically, the website is built on a modern stack including Bootstrap, jQuery, and various UI libraries, hosted by OVH with DNS managed via Cloudflare. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and Google reCAPTCHA is used on the contact form, but DNSSEC is not enabled and no explicit security headers are detected, representing areas for improvement. Privacy compliance is basic with a privacy policy present but lacking explicit GDPR details. Overall, the website is trustworthy and functional but could benefit from enhanced security and privacy practices.

J

Jez Koncept

jezkoncept.cz

47

Jez Koncept is a Czech hospitality and catering company with a history dating back to the 1990s. The company operates multiple gastronomic outlets including restaurants, canteens, cafes, catering services, and fine dining concepts. Their market position is that of an established regional player offering a wide range of food services targeting both corporate clients and general consumers. The website presents a professional image with clear branding and multiple service brands linked from the main site. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup. Security measures include HTTPS enforcement and Google reCAPTCHA on the contact form, along with GDPR consent mechanisms. However, the absence of WHOIS data and some missing security headers slightly reduce the overall trust score. The site is fully accessible with no blocking or WAF challenges detected.

C

Curated Capital & Planning LLC

curatedcp.com

58

Curated Capital & Planning LLC is a specialized financial advisory firm focusing on remarried baby boomers with blended families. The company offers fee-only, fiduciary financial planning and investment management services, operating virtually across the United States. The website is professionally designed, with clear branding and trust indicators such as CFP certification and industry memberships. Technically, the site uses modern web technologies including Bootstrap, jQuery, and MailerLite for marketing and forms, hosted on Zephyr CMS. The site is mobile optimized and performs moderately well. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site is safe, professional, and trustworthy for its target audience. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing terms of service and incident response policies, and verifying domain registration details to improve legitimacy and trust.

A

Artisan Financial Planning

artisanfinancialplanning.com

60

Artisan Financial Planning is a specialized financial advisory firm offering flat-fee financial planning and investment management services tailored specifically for musicians, performing artists, and creatives. The company positions itself as an affordable, transparent, and client-aligned alternative to traditional asset-based fee advisors, emphasizing simplicity and empathy in its service delivery. The website content is professionally crafted, targeting a niche market segment with clear messaging and trust signals such as professional certifications and media features. Technically, the website is built on a modern stack including jQuery, Bootstrap, Font Awesome, and Zephyr CMS. It integrates marketing and analytics tools such as Google Tag Manager, MailerLite, and Plausible Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which could impact privacy compliance. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness, though the professional presentation and certifications mitigate some concerns. Overall, the website presents a low-risk profile with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response policies, and clarifying domain registration details to enhance trust and compliance.

O

Objective Wealth

objectivewealthfp.com

63

Objective Wealth is a small financial advisory firm specializing in tax-conscious comprehensive financial planning and investment management. The website presents a professional image with clear descriptions of services including financial and retirement planning, investment management, tax planning and preparation, and small business retirement plans. The firm targets individuals and small businesses seeking personalized financial guidance. The website is built on a modern technical stack including jQuery, Bootstrap, FontAwesome, and uses Zephyr CMS. Tracking technologies such as Google Tag Manager and Facebook Pixel are implemented for analytics and marketing purposes. Security posture is moderate with HTTPS usage implied, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trust. No forms or direct contact information were found in the provided content, limiting user engagement options. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and verified domain registration information.

P

Phototendance

phototendance.com

49

Phototendance is a French language website focused on photography trends or related content, built on WordPress using the Divi theme and several plugins. The site appears to target French-speaking photography enthusiasts or professionals, offering informational content without explicit business descriptions or commercial services. Technically, the site uses modern web technologies and SEO plugins but lacks visible security headers and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is accessible and professional in design. Security posture is moderate but could be improved with better header configurations and documented policies. Overall, the site is functional and moderately trustworthy but lacks critical compliance and contact transparency.

B

BLOOM'UP

bloomup.net

51

Bloom'Up is a French accredited domain registrar specializing in the acquisition and resale of recently expired domain names with strong SEO potential. The company offers services such as dropcatching, backorder programming, immediate domain purchase, and auctions, targeting SEO professionals and digital marketers seeking to leverage domain authority and traffic. The website is professionally designed, mobile-optimized, and provides clear business information including contact details and accreditation by AFNIC, enhancing trustworthiness. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, and Owl Carousel, ensuring a responsive and visually appealing user experience. While the site uses HTTPS and secure transfer codes for domains, it lacks visible security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site demonstrates a good baseline with HTTPS and secure domain transfer processes. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy or recent registration status. No critical vulnerabilities or exposed sensitive data were identified. The site would benefit from enhanced security headers, explicit incident response policies, and GDPR-compliant cookie consent. Overall, Bloom'Up presents a credible and professional business with a niche market focus. The main risk lies in the missing WHOIS data which impacts domain trustworthiness. Strategic recommendations include improving security headers, implementing cookie consent, and publishing detailed security and incident response policies to bolster compliance and user trust.

A

ATX-DYNO LTD.

atx-dyno.com

55

ATX-DYNO LTD. is a Czech-based manufacturing company founded in 2015 specializing in precision metrological devices and control systems integration for automotive and agricultural machinery sectors. The company serves notable clients such as New Holland, John Deere, and Fendt, positioning itself as a niche player with customized dynamometer solutions. The website is professionally designed, mobile-optimized, and provides comprehensive contact information, including multiple physical locations and social media presence. Technically, the site uses modern frameworks like Bootstrap and integrates marketing and analytics tools such as Google Tag Manager and Pipedrive CRM forms. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces domain trustworthiness, though website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but should improve privacy transparency and security practices.

X

XTUNING s.r.o.

dpf-xtuning.cz

49

XTUNING s.r.o. operates the website dpf-xtuning.cz, providing specialized cleaning services for diesel particulate filters (DPF) primarily targeting vehicle owners with diesel engines in the Czech Republic. The company positions itself as a niche service provider focusing on emission compliance and vehicle inspection readiness through professional DPF cleaning. The website is well-structured, with clear service descriptions and a professional design that supports user engagement and conversion via contact forms and ordering options. The business model revolves around service delivery with partnerships in related automotive performance sectors.

X

XTUNING LTD. - pobočka

xtuning.cz

50

XTuning is a professional automotive tuning company specializing in chip tuning services for passenger cars, agricultural machinery, and trucks. Established since 1999, the company operates primarily in the Czech Republic and neighboring countries, offering performance optimization and fuel consumption reduction services. The website reflects a mature digital presence with certifications from the Ministry of Transport and TÜV SÜD, enhancing trust and credibility. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools with proper consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract from the professional presentation and business legitimacy. Overall, XTuning demonstrates a solid market position with clear service offerings and customer engagement channels.

NRW Partner Zoo is a consortium of 12 major zoos and animal parks in North Rhine-Westphalia, Germany, focused on conservation, education, and providing visitor benefits such as discounted entry. The website is well-structured, informative, and targets families, zoo visitors, and conservation enthusiasts. Technically, it uses modern front-end frameworks like Bootstrap and jQuery, with responsive design and conditional Google Analytics tracking respecting user consent. Security posture is moderate with cookie consent implemented and anonymized analytics, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and strong partner representation.

Gočárova Galerie is a regional cultural institution based in Pardubice, Czech Republic, focused on art and architecture exhibitions, educational programs, and community engagement. The gallery operates under the auspices of the Pardubice regional government and offers a variety of exhibitions, workshops for children and adults, and event space rentals. The website is professionally designed, primarily in Czech, with clear navigation and a modern technical stack including jQuery, Foundation, and Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit security policies are not evident. The domain registration aligns well with the gallery's founding date, supporting legitimacy. Overall, the site presents a trustworthy and well-maintained digital presence for a government-supported cultural entity.

O

Otipass

otipass.com

57

Otipass is a French company specializing in the digitization of territorial and cultural passes, including tourist and multiservice passes. The company positions itself as a market leader in France with a strong presence in public procurement catalogs and a network of city clients. The website is built on Joomla CMS using modern frameworks and includes integrations with analytics and marketing tools such as Matomo and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though explicit privacy policies and terms of service are not clearly found. WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and client testimonials support a credible business presence. Overall, the site is professional, well-branded, and targets local governments and tourism sectors.

S

SELA Immo

sela-immo.fr

50

SELA Immo is a regional real estate company specializing in the sale and rental of land, houses, and apartments primarily in the Loire-Atlantique region of France. The website serves both individual consumers and professional clients, offering property listings, advice, and partnership opportunities with construction companies. The company positions itself as a trusted local real estate developer with a focus on sustainable and community-oriented projects. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Analytics, providing a modern and responsive user experience. However, some technical improvements are possible, including better security header implementation and full configuration of analytics tools. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is professional, content-rich, and compliant with GDPR privacy requirements, making it a credible platform for real estate services in its market niche.

B

Brain Behind Ltd

brain-behind.com

53

Brain Behind Ltd is a UK-based medium-sized company founded in 2005, specializing in high-volume loyalty and mission-critical loyalty solutions integrated with existing payment terminals. The company serves a diverse B2B audience including financial institutions, retailers, tourism operators, and urban mobility planners. Their product suite includes enterprise vouchers, loyalty programs for banks, tourism solutions, and contract farming administration systems. The website reflects a mature business with a consistent brand and strong partner ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, hosted on UKFast infrastructure. Security posture is moderate with room for improvement in DNSSEC and HTTP security headers. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reliable provider of payment and loyalty solutions.

L

LED MULTIMEDIA s.r.o.

ledmultimedia.cz

47

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Générations Futures

shaketonpolitique.org

64

Shake Ton Politique is a French non-profit civic engagement platform operated by Générations Futures, focused on enabling citizens to participate in public health and environmental policy discussions. The website offers consultations, petitions, and interpellations to government officials and elected representatives at various levels. The platform is well-positioned in the niche of environmental advocacy and public policy engagement in France. Technically, the site is built on WordPress with modern plugins for SEO and cookie consent, hosted with OVH and using Cloudflare DNS for performance and security. The security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact information and active social media presence. No adult or explicit content is present, making it safe for general audiences.

G

Générations Futures

generations-futures.fr

68

Générations Futures is a well-established French non-profit organization founded in 1996, dedicated to protecting future generations from pesticides and other chemical pollutants. The association is accredited by the Ministry of Ecology and recognized as a public interest organization. It operates primarily through advocacy, public awareness campaigns, scientific publications, and support for victims of pesticides. The website reflects a mature digital presence with comprehensive content, active social media engagement, and clear calls to action such as donations and volunteer recruitment. Technically, the website is built on WordPress with modern JavaScript libraries and CSS frameworks like Bootstrap. It employs cookie consent management via Tarteaucitron and integrates Google Analytics for traffic analysis. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are not explicitly detected in the HTML source. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices including encrypted connections and privacy compliance with GDPR. However, the absence of WHOIS data limits domain trust verification, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were found in the content. Overall, Générations Futures presents a trustworthy and professional online presence consistent with its mission as an environmental NGO. Strategic improvements in security headers, incident response transparency, and domain registration visibility would further enhance its security posture and trustworthiness.

Z

Zephyr

zephyrcms.com

61

Zephyr is a specialized service provider focused on delivering beautiful websites and marketing solutions exclusively for fee-only Registered Investment Advisors (RIAs). The company positions itself as a niche expert helping independent fiduciary financial advisors enhance their brand identity and marketing effectiveness through tailored digital solutions. Their website showcases a professional design with clear navigation, client testimonials, and featured client case studies, reinforcing their credibility in the financial advisory sector. From a technical perspective, the website leverages modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates marketing and analytics tools such as Google Tag Manager, MailerLite, Plausible, and Fathom Analytics. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. However, some security best practices like explicit security headers and cookie consent mechanisms are missing. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain raises some concerns about domain legitimacy or recent registration status, but the professional content and consistent branding mitigate immediate trust issues. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security transparency. Overall, Zephyr presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen their security posture and regulatory alignment, supporting their business credibility and client trust.

S

Sodovkárna Kolín

sodo-kolin.cz

57

Sodovkárna Kolín is a Czech beverage manufacturer specializing in traditional non-alcoholic sodas with over 100 years of history. The company offers a variety of flavors and targets both general consumers and horeca businesses through a gastro partner program. The website reflects a well-established local brand with consistent branding and clear contact information. Technically, the site uses modern web technologies such as Bootstrap and jQuery, with tracking via Google Tag Manager and Leady. Security posture is adequate with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. The absence of WHOIS data limits domain trust assessment but does not detract from the business legitimacy evident on the site.