Security Directory

P

Provozně ekonomická fakulta ČZU v Praze

vu3v.cz

58

The website vu3v.cz serves as the official portal for the Virtual University of the Third Age (VU3V), operated by the Provozně ekonomická fakulta of the Czech University of Life Sciences Prague. It provides lifelong learning opportunities primarily targeting seniors aged 50 and above, including retirees and unemployed persons. The platform offers both virtual and in-person educational courses, consultation centers, and free bonus courses, aiming to support active aging and social engagement through education. The site is well-positioned as a niche educational provider within the Czech and Slovak regions, leveraging Moodle as its learning management system.

K

Kooperationsprogramm Freistaat Sachsen – Tschechische Republik

sn-cz2020.eu

55

The website www.sn-cz2020.eu serves as an informational portal for the EU-funded cooperation program between the Free State of Saxony and the Czech Republic for the 2014-2020 funding period. It primarily targets public sector entities and project partners involved in cross-border collaboration. The site provides program details, project listings, and links to successor programs. Technically, the site uses standard JavaScript libraries including Piwik for analytics and Modernizr for feature detection, with a custom or unknown CMS. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and SEO features. Security posture is moderate with no explicit HTTPS or security headers detected in the provided data, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. The domain registration aligns well with the program's governmental nature and regional focus, supporting high legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy features.

M

MeteoLux

meteolux.lu

57

MeteoLux is the official meteorological portal for Luxembourg, operated as a government service providing weather forecasts, climatological data, and aviation weather services. The website targets the general public, meteorological professionals, and the aviation sector, offering comprehensive weather information and alerts. The portal is well-branded with consistent government logos and links to official government sites, reinforcing its trustworthiness and official status. Technically, the site uses modern web technologies including RequireJS and CSS media queries, and is likely hosted on Luxembourg government infrastructure, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though the absence of visible security headers and explicit cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain trust verification, but the official nature of the site and its content mitigate this concern. Overall, MeteoLux presents a professional, secure, and user-friendly platform for meteorological information in Luxembourg.

M

Met Office

metoffice.gov.uk

67

The Met Office website serves as the official digital presence of the UK's national meteorological service, providing comprehensive weather forecasts, climate research, and specialist meteorological services. It targets a broad audience including the general public, government bodies, businesses, and researchers. The site offers a wide range of services such as weather warnings, maps, climate change information, and consulting services, positioning itself as a trusted leader in meteorological science and public service. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript frameworks like RequireJS, and video streaming via Video.js. It integrates analytics and advertising networks with user consent mechanisms, ensuring compliance with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing discoverability. From a security perspective, the site enforces HTTPS and uses consent-based script loading to protect user privacy. However, explicit security headers and a public security policy or incident response information are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards. The lack of WHOIS data is mitigated by the official .gov.uk domain and consistent branding. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms to further strengthen the security posture.

T

Toyota Česko

toyota.cz

68

Toyota Central Europe - Czech s.r.o. operates as the official Toyota branch in the Czech Republic, providing a comprehensive range of Toyota vehicles, accessories, and customer support services. The company holds a strong market position as a leading automotive brand in the region, targeting consumers seeking reliable and innovative transportation solutions. The website reflects a professional corporate presence with consistent branding and clear communication of business offerings. Technically, the website leverages Adobe Experience Manager as its CMS platform, integrating advanced analytics tools such as Google Analytics, Datadog RUM, and Adobe Launch for performance monitoring and user behavior insights. The infrastructure includes modern JavaScript libraries and content delivery networks, ensuring moderate to good performance and mobile optimization. Accessibility features are present but could be enhanced. From a security perspective, the site employs HTTPS with good SSL configuration and uses cookie consent mechanisms to comply with privacy regulations. However, explicit security headers are not clearly visible in the HTML content, and no dedicated security or incident response policies are published. The absence of WHOIS data is noted but likely due to registry restrictions rather than malicious intent. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing clear privacy and security policies, and maintaining regular audits of third-party scripts to mitigate potential vulnerabilities.

L

Lindt & Sprüngli

lindt.com

66

Lindt.fi is the Finnish e-commerce platform for Lindt & Sprüngli, a globally recognized premium Swiss chocolate brand established in 1845. The website offers a wide range of luxury chocolates and gift packaging, targeting general consumers in Finland. The site demonstrates a mature digital presence with a Magento-based infrastructure, integration of advanced marketing and analytics tools such as Adobe Target, Google Tag Manager, and New Relic Browser monitoring. The platform is well-branded, mobile-optimized, and provides a professional user experience. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks visible privacy and terms of service documentation in the provided content. Overall, the site is trustworthy and professionally maintained, suitable for its retail business model.

O

Oakley

oakley.com

75

Oakley is a globally recognized brand specializing in the design and retail of high-performance sunglasses, eyewear, apparel, and accessories. The website serves the European Union market, providing a comprehensive e-commerce platform with multiple product categories and regional language support. The site is professionally designed with a strong brand presence and consistent user experience. Technically, the site leverages modern JavaScript frameworks, SAP Hybris commerce platform, and integrates advanced analytics and personalization tools, ensuring a fast and responsive user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although public WHOIS data is unavailable likely due to privacy protection. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting mature data protection practices. Overall, the site demonstrates a high level of digital maturity and business credibility.

B

Bagalio

bagalio.eu

70

Bagalio is a European e-commerce retailer specializing in backpacks, travel suitcases, shoulder bags, and messenger bags. The website targets students, travelers, and general consumers seeking quality luggage and bags. The company operates multiple localized domains across Europe, indicating a regional market presence. The business model is focused on online retail with a clear product offering and a professional web presence. Technically, the site is built on Magento 2, leveraging RequireJS, jQuery, and other modern JavaScript libraries. The site is mobile-optimized and uses Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a moderate to good level of digital maturity and business credibility.

G

Gransy s.r.o.

bagalio.si

64

Bagalio.si is a Slovenian e-commerce website specializing in retailing school backpacks, travel suitcases, shoulder bags, and related accessories. The site targets the Slovenian market and neighboring countries through multiple country-specific sister domains. The business operates on a Magento Commerce platform, leveraging modern web technologies and providing a professional user experience with clear navigation and mobile optimization. The company behind the domain registration is Gransy s.r.o., a Czech entity, which aligns partially with the regional market focus. The website demonstrates GDPR awareness through cookie consent mechanisms and privacy policies, although explicit security policies and incident response contacts are not published. The domain WHOIS data shows an anomalous creation date in the future, which may be a data error but slightly impacts trust. Overall, the site is professionally maintained, secure with HTTPS, and integrates Google Tag Manager for analytics and marketing.

B

Bagalio

bagalio.gr

65

Bagalio.gr is a professional e-commerce website specializing in retailing backpacks, travel bags, school bags, shoulder bags, and briefcases primarily targeting the Greek and Central European markets. The website is part of a regional network with sister sites in multiple European countries, indicating a strong market presence in the retail sector for travel and school bags. The business model is focused on online retail with a clear emphasis on product variety and regional localization. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and third-party modules to enhance user experience and functionality. The site demonstrates good SEO practices, mobile optimization, and multi-language support, contributing to a positive digital maturity profile. Security-wise, the site enforces HTTPS, uses security headers, and integrates monitoring tools like New Relic, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, suggesting room for improvement in transparency and compliance documentation. Overall, the website is trustworthy, professionally maintained, and well-positioned in its market niche.

B

Bagalio

bagalio.hr

65

Bagalio.hr is a Croatian e-commerce retailer specializing in backpacks, travel suitcases, shoulder bags, and briefcases, targeting primarily students, school children, and travelers within Croatia. The website positions itself as the largest selection provider in Croatia for these product categories, leveraging a Magento 2 platform with modern JavaScript frameworks and integrations such as Google Tag Manager and New Relic for performance monitoring. The site demonstrates good content quality, professional design, and GDPR compliance through cookie consent mechanisms and privacy policies. However, the WHOIS data shows inconsistencies such as a future domain creation date and registrant country mismatch, which may require further verification. Security posture is strong with HTTPS enforcement and security headers, but lacks a dedicated security policy or incident response information. Overall, the site is trustworthy and professionally maintained with room for improvement in transparency and security documentation.

B

Пътуването започва

bagalio.bg

62

Bagalio.bg is an e-commerce retail website specializing in backpacks, suitcases, school and sports bags, and travel bags. It targets a general audience primarily in Bulgaria and operates multiple regional domains for other European countries, indicating a multi-market presence. The website is built on the Magento platform and integrates modern web technologies including RequireJS, jQuery, and Google Tag Manager for analytics and marketing. The site implements HTTPS with Cloudflare DNS, ensuring secure communications. However, it lacks visible privacy and terms of service pages, and no direct contact information is found on the homepage, which may affect user trust and compliance transparency. Cookie consent mechanisms are implemented, showing some GDPR compliance efforts.

B

Bagalio

bagalio.hu

65

Bagalio.hu is a Hungarian e-commerce retailer specializing in backpacks, travel luggage, and related accessories. Established in 2018, the company operates a multi-country online presence targeting Central and Eastern European markets. The website is built on Magento 2, leveraging modern web technologies and analytics tools such as Google Tag Manager and New Relic Browser monitoring. The platform demonstrates good technical maturity with responsive design, SEO optimization, and cookie consent mechanisms indicating GDPR compliance. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Bagalio.hu presents a professional and trustworthy online retail experience with room for enhanced transparency in security and vulnerability disclosures.

B

Rucsacuri pentru școală, valize de calatorie, genti de umar, truse | Bagalio.ro

bagalio.ro

62

Bagalio.ro is an established Romanian e-commerce website specializing in the retail of backpacks, travel suitcases, shoulder bags, and travel kits. The website targets a general audience interested in travel and school bags, offering a variety of products suitable for students, women, and city use. The business operates multiple country-specific sister sites, indicating a regional market presence in Central and Eastern Europe. The site is built on the Magento platform, leveraging modern web technologies and third-party extensions to enhance user experience and functionality. The presence of cookie consent mechanisms and Google Tag Manager indicates a moderate level of digital maturity and compliance awareness. Security posture is adequate with HTTPS enabled and Cloudflare DNS usage; however, the absence of security headers and explicit privacy policies suggests room for improvement. Overall, the website is professional and functional, with moderate risk due to missing explicit compliance documentation and contact information.

B

Bagalio

bagalio.sk

64

Bagalio.sk is a Slovak-based e-commerce retailer specializing in backpacks, travel luggage, shoulder bags, and handbags. Established in 2016, the company operates a Magento-based online store targeting school children, travelers, and general consumers seeking quality bags and luggage. The website supports multiple regional domains, indicating a broad Central and Eastern European market presence. The business model focuses on direct online sales with a professional and consistent brand presentation. Technically, the site leverages Magento Commerce with RequireJS, jQuery, and Google Tag Manager, hosted behind Cloudflare DNS and CDN services. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, but lacks published security policies or incident response details. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency and contact information completeness.

B

Bagalio

bagalio.at

70

Bagalio is a regional e-commerce retailer specializing in backpacks, suitcases, and travel bags, targeting customers primarily in Austria and Central Europe. The company operates a multi-language, multi-country online platform built on Magento, demonstrating a mature digital infrastructure with modern JavaScript libraries and performance monitoring tools such as New Relic and Google Tag Manager. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security-wise, the site enforces HTTPS, implements standard security headers, and complies with GDPR through comprehensive privacy and cookie policies with consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and trustworthy platform. Overall, Bagalio presents a solid business and technical profile suitable for its market segment.

S

Seattle Manufacturing Corporation

smcgear.com

61

Seattle Manufacturing Corporation (SMC Gear) operates an e-commerce platform specializing in high-quality climbing, rescue, and industrial gear. Their product range includes carabiners, pulleys, descenders, and specialized rescue equipment, targeting professionals in rescue, alpine, and climbing sectors. The company has a stable market position as a niche manufacturer and retailer with a medium-sized business footprint, founded in 2010. Technically, the website is built on Magento 2, leveraging modern JavaScript libraries such as RequireJS, jQuery, and KnockoutJS, with Bootstrap and Font Awesome for styling and UI components. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting is managed via Go Montenegro Domains, LLC as registrar, with no DNSSEC enabled. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is available via a customer service email and contact page, but no dedicated security or incident response contacts are provided. Overall, the website is professional, trustworthy, and safe for general audiences, but improvements in privacy policy visibility, security headers, and DNS security would strengthen its security posture and compliance standing.

B

Školní batohy, cestovní kufry, tašky přes rameno, brašny | Bagalio.cz

bagalio.cz

63

Bagalio.cz is an e-commerce retail website specializing in school backpacks, travel suitcases, shoulder bags, and briefcases, targeting primarily the Czech Republic market. The website is part of a broader network of localized partner sites serving Central and Eastern European countries. The business appears to be medium-sized, established since 2016, and positioned as a leading retailer in its niche within the Czech Republic. The site uses Magento 2 as its e-commerce platform and integrates multiple third-party extensions and analytics tools to enhance user experience and marketing capabilities. Technically, the website is well-structured with good mobile optimization and moderate performance, leveraging Cloudflare DNS and New Relic monitoring for operational insights. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit privacy and security policies publicly available on the site. No contact information or incident response details are found, which could impact user trust and compliance. Overall, the site is professional and functional but would benefit from enhanced transparency and security documentation.

The Hradec Králové Region Convention Bureau operates as a regional government-supported entity promoting congress, exhibition, and incentive tourism within the Hradec Králové Region of the Czech Republic. The website offers a comprehensive catalogue of venues, accommodation, and services tailored for event organizers and corporate clients. The bureau acts as a facilitator for planning conferences and incentive programs, positioning itself as a key regional player in the hospitality and tourism sector. Technically, the website employs a moderate technology stack including RequireJS, jQuery, and Bootstrap components, with a focus on client-side scripting and dynamic content loading. While the site is accessible and well-structured with good SEO practices, mobile optimization and accessibility are basic and could be improved. No CMS or hosting provider details are evident from the content. From a security perspective, the site lacks visible security headers and explicit privacy or terms of service documentation, though it implements a cookie consent mechanism inline. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, despite the professional presentation and partner affiliations. No critical vulnerabilities or exposed sensitive data were detected, but security posture is moderate and could benefit from enhancements. Overall, the website is a credible regional tourism promotion platform with good content quality and business credibility but requires improvements in security transparency, privacy compliance, and domain registration verification to strengthen trust and compliance.

E

Enfold Systems

enfoldsystems.com

58

Enfold Systems is a specialized technology company focused on providing solutions and services around the Plone open-source content management system. Their offerings include software products, hosting, consulting, and support tailored to organizations seeking robust CMS solutions. The company has a long-standing presence since 2004 and positions itself as a premier Plone expert with a strong emphasis on open-source technologies and client partnerships. Technically, the website is built on the Plone CMS platform and leverages modern web technologies such as jQuery, RequireJS, Bootstrap, and Google Fonts. The site is mobile-optimized and demonstrates good design quality and user experience. Hosting and DNS services involve Cloudflare and Squarespace Domains, providing a reliable infrastructure. Google Analytics is used for visitor tracking, though no explicit cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, indicating gaps in privacy compliance. Contact information is limited to a contact form without direct emails or phone numbers, which may affect user trust and accessibility. Overall, the website is professional, trustworthy, and technically sound but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen its security and compliance posture.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

max-planck.de

62

The Max-Planck-Gesellschaft website represents a leading German non-profit research organization focused on fundamental scientific research across 84 institutes. The site targets researchers, academics, students, and the general public interested in science. It offers extensive information on research, career opportunities, publications, and innovation initiatives. Technically, the website employs modern JavaScript frameworks, a modular AMD architecture, and a professional CMS (JustRelate CX Cloud). It is hosted on infrastructure consistent with the organization's domain and uses HTTPS with cookie consent managed by Usercentrics. Security posture is strong with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages in the provided content, but cookie consent mechanisms are in place. Overall, the website is professional, trustworthy, and well-structured, reflecting the organization's high credibility and market position.

S

Swiss Design Association

swiss-design-association.ch

44

The Swiss Design Association is a professional membership organization based in Switzerland that supports design professionals through legal advice, insurance consulting, and advocacy. It is recognized by the Swiss Federal Office of Culture, indicating a reputable position within the cultural and design sector. The website provides information about awards, events, membership benefits, and a directory of designers, targeting primarily design professionals and organizations within Switzerland. Technically, the website uses a mature technology stack including jQuery, Backbone.js, Google Analytics, and reCAPTCHA v3, running on Craft CMS. The site is mobile optimized with good navigation and consistent branding. Security posture is solid with HTTPS and anti-bot protections, but lacks visible security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

Creative Market is a well-established online marketplace founded in 1998, specializing in high-quality digital creative assets such as stock photos, graphics, fonts, and design templates. The platform targets creative professionals, designers, marketers, and small businesses seeking unique digital content. It operates a mature e-commerce business model with a strong market position supported by a large catalog of over 3 million assets from independent creators worldwide. The website demonstrates excellent content quality, professional design, and clear navigation, providing a seamless user experience across devices.

M

Max Planck Institute for Security and Privacy

mpi-sp.org

63

The Max Planck Institute for Security and Privacy is a research institute founded in 2019 and affiliated with the Max Planck Society in Germany. It focuses on advancing security and privacy technologies through foundational research, systems development, and societal impact. The website serves academics, researchers, students, and professionals interested in security and privacy research, offering information about research areas, people, career opportunities, and contact details. The business model is centered on academic research and education within the technology sector, positioning itself as a leading institution in its field. Technically, the website is built on the JustRelate CX Cloud CMS platform, utilizing modern JavaScript libraries such as RequireJS and Slick Carousel for UI components. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate with deferred loading of styles and scripts. Security is well implemented with HTTPS enforced and CSRF protection on forms, though explicit security headers are not detected. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Security posture is strong overall with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in adding security headers, publishing a security policy, and providing vulnerability disclosure information. The absence of WHOIS data reduces trust slightly, but the strong affiliation with the Max Planck Society and professional website design mitigate concerns. No advertising or tracking services are detected, supporting user privacy. Overall, the website is safe, professional, and trustworthy, serving its academic audience effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response and vulnerability disclosure information, and improving accessibility features to further strengthen compliance and user trust.

S

Sectigo

sectigo.com

80

Sectigo is a leading global provider of SSL certificates and automated certificate management solutions, trusted by enterprises and global brands for over 20 years. The company offers a broad portfolio of security products including SSL/TLS certificates, code signing, IoT security, and private PKI solutions, targeting IT professionals and businesses requiring robust digital security. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript frameworks, analytics, and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and compliance with recognized standards such as ISO 27001 and SOC 2. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent mechanisms. WHOIS data is unavailable likely due to privacy protection, which is justified for a security company. Overall, Sectigo's website demonstrates a professional, trustworthy, and secure online presence.

U

uma Schreibgeräte Ullmann GmbH

uma-pen.com

71

uma Schreibgeräte Ullmann GmbH is a German manufacturing company specializing in high-quality, customizable promotional writing instruments including pens made from diverse materials such as metal, plastic, recycled PET, and wood. The company emphasizes sustainability and innovation, positioning itself as one of the world's leading manufacturers in the promotional ballpoint pen market. Their website offers product configurators, customization options, and detailed product information targeting business customers seeking promotional products. Technically, the website uses modern JavaScript libraries like RequireJS, jQuery, and Swiper.js, integrates Google Tag Manager and HubSpot Analytics for marketing and tracking, and implements a cookie consent mechanism via Cookiebot. The site is mobile-optimized with good navigation and professional design. Security posture is adequate with HTTPS enforced but lacks visible security headers and published security policies. WHOIS data is unavailable or inconsistent, which raises concerns about domain registration legitimacy despite the professional website presence. Contact information and certifications such as ISO 9001 and ISO 14001 are clearly presented, enhancing business credibility.

Porkbun LLC operates the domain porkbun.design as a dedicated brand resource site providing official logos, color palettes, typography, messaging guidelines, and downloadable brand assets. The website targets designers and marketing professionals who require consistent branding materials for Porkbun. The business is positioned as a small technology company based in the US, founded in 2015, with a clear focus on brand identity support rather than direct consumer services. Technically, the site is built using Adobe Muse, with static HTML, CSS, and JavaScript including RequireJS and an outdated jQuery version. The site is moderately optimized for performance and mobile, but lacks advanced accessibility and SEO features. Security posture is basic with no DNSSEC, no security headers, and outdated libraries, though domain registration is well managed with protective status flags. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

T

Thomson Reuters

reutersprofessional.com

69

Reuters Professional is a business-focused media and advertising platform operated under the Thomson Reuters brand, targeting influential decision makers across various professional sectors including business, IT, finance, and executive leadership. The website offers premium content, market-leading events, and creative content studio services to elevate brand presence globally. Technically, the site leverages modern web technologies including jQuery, Google Analytics, Google Tag Manager, and OneTrust for cookie compliance, hosted primarily on CDN and cloud infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is missing, which impacts transparency but the site’s branding and content quality support its legitimacy. Overall, the site presents a trustworthy and professional digital presence aligned with Thomson Reuters’ global media stature.

R

Race Space Ltd

race-space.com

59

Race Space Ltd operates a specialized online platform focused on race entry and endurance event management technology. The company targets race directors and athletes seeking efficient event registration and management solutions. Their market position is that of a niche technology provider offering SaaS-based race event systems. The website content is professional, well-branded, and clearly communicates their value proposition and services. Technically, the site employs modern JavaScript libraries including jQuery, RequireJS, and Facebook SDK, with Google Tag Manager for analytics and marketing. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partially met with privacy and terms pages present but no cookie consent mechanism detected. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy, though the active social media presence and professional site content mitigate this somewhat. Overall, the site scores well in content quality and technical implementation but should improve privacy and security transparency.

U

UCLA Store

uclastore.com

60

The UCLA Store website serves as the official e-commerce platform for the UCLA campus store, offering a wide range of UCLA-branded apparel, accessories, textbooks, and technology products. The site targets UCLA students, alumni, faculty, and fans, positioning itself as a trusted retail outlet with a long-standing history dating back to 1919. The business model focuses on direct-to-consumer sales of university merchandise and academic supplies, supported by a partnership with ASUCLA, the parent organization. Technically, the website is built on the SuiteCommerce Advanced platform, leveraging modern JavaScript frameworks and third-party integrations such as Zinrelo for loyalty programs and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site enforces HTTPS and employs secure login and registration forms, but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and branding strongly suggest it is an official UCLA Store site. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for UCLA merchandise sales but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration details to strengthen trust and regulatory adherence.

R

Race Space Ltd

racespace.com

58

Race Space Ltd operates an online race event management platform targeting race directors and endurance athletes. The company offers a SaaS solution for race entry, event management, and registration technology, positioning itself as a niche technology provider in the endurance sports sector. The website branding is consistent and professional, with a clear focus on inspiring a new generation of athletes and supporting race organizers with growth tools like the Race Space Accelerator. Technically, the website employs modern JavaScript libraries including RequireJS, jQuery, and Bootstrap, alongside Facebook SDK and Google Tag Manager for marketing and analytics. The site is mobile-optimized with asynchronous script loading to enhance performance. However, some accessibility features could be improved, and explicit security headers are not detected in the HTML source. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No direct contact emails or phone numbers are published, relying instead on a contact form. The absence of WHOIS data for the domain is a concern, as it suggests either privacy protection or a registration anomaly, which impacts trustworthiness. Overall, the website is functional, professional, and safe for general audiences, but improvements in transparency, security headers, and privacy compliance would enhance trust and security posture.

E

ERDINGER Fanshop

erdinger-fanshop.de

63

The ERDINGER Fanshop website is an official e-commerce platform dedicated to selling Erdinger Weißbier and related merchandise primarily to a German-speaking audience. The site showcases a well-structured product catalog with clear pricing and branding consistent with the Erdinger brand. Technically, the site is built on the Magento platform, leveraging modern JavaScript libraries such as RequireJS, jQuery, and Swiper.js for enhanced user experience. The presence of Matomo analytics indicates a moderate level of user tracking with some privacy considerations. Security-wise, the site enforces HTTPS and uses secure cookies and form keys to protect user interactions, though it lacks explicit security headers and published security policies. Overall, the site is professional and trustworthy but could improve privacy compliance and transparency by publishing privacy policies, terms of service, and contact information.

L

Lifull Connect

trovit.nl

63

Trovit.nl is a Dutch classified ads search engine specializing in real estate, cars, and job vacancies. It aggregates listings from thousands of websites, providing users a unified search experience. The site is part of Lifull Connect, a larger parent company with a global presence. The website targets the general public in the Netherlands seeking property, vehicles, or employment opportunities. Technically, the site uses modern JavaScript libraries, Google Analytics, and a robust consent management platform (Didomi) to comply with privacy regulations. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS, implements security headers, and manages cookie consent effectively, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and maintains a good security posture.

L

Lifull Connect

trovit.com.mx

61

Trovit.com.mx is a well-established classified ads search engine focused on the Mexican market, offering listings for real estate, used cars, and employment opportunities. It operates under the parent company Lifull Connect, which provides strong brand credibility and governance. The website presents a professional design with clear navigation and good mobile optimization, targeting a general audience seeking classified ads aggregated from multiple sources. The business model centers on aggregating listings to provide users with a comprehensive search experience across multiple verticals.

L

Lifull Connect

trovit.co.in

61

Trovit India operates as a specialized search engine aggregating classified ads for properties, cars, and jobs from thousands of websites. It is part of the Lifull Connect group, a recognized player in the classified ads aggregation market with a global presence. The platform targets general consumers in India seeking real estate, automotive, and employment listings, leveraging a business model based on search aggregation and advertising revenue. The website demonstrates consistent branding and a professional online presence with localized content and app availability.

L

Lifull Connect

trovit.cl

60

Trovit.cl operates as a classified ads search engine focused on the Chilean market, aggregating listings for real estate, used cars, and employment opportunities. It is part of the Lifull Connect group, a recognized entity in the online classifieds sector. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to its target audience. The business model centers on providing a comprehensive search platform that consolidates listings from multiple sources, enhancing user convenience and market reach. From a technical perspective, the site employs modern JavaScript frameworks and integrates widely used analytics and advertising technologies such as Google Tag Manager, Google Analytics, Google Adsense, and Criteo. The website is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements, indicating a mature digital infrastructure. However, some security headers are not explicitly detected, suggesting room for improvement in security hardening. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies. The absence of direct contact information on the main page limits immediate user support visibility but aligns with typical aggregator platforms. WHOIS data for the domain is unavailable due to an invalid query on the subdomain, which slightly reduces trustworthiness from a registration transparency standpoint. Overall, Trovit.cl demonstrates a solid business and technical foundation with good security and privacy practices. Strategic enhancements in security headers and clearer contact channels could further strengthen trust and compliance. The domain registration ambiguity should be clarified to improve legitimacy perception.

L

Lifull Connect

trovit.com.tw

59

Trovit Taiwan is a localized classified ads search engine specializing in real estate, cars, and jobs. It aggregates listings from thousands of websites globally, providing users with a convenient one-stop search platform. The website is part of the Lifull Connect group, a recognized international operator in the classified ads sector. The platform targets general consumers in Taiwan seeking property, vehicles, or employment opportunities. The business model is based on aggregating and indexing ads rather than direct sales or listings.

L

Lifull Connect

trovit.ch

65

Trovit.ch operates as a comprehensive classified ads search engine specializing in real estate, automobiles, and job listings within Switzerland. It aggregates thousands of listings from various websites, providing users with a unified search experience. The platform is part of Lifull Connect, a larger parent company, which lends credibility and operational support. The website is professionally designed with consistent branding and clear navigation, targeting a broad audience seeking classified ads in the Swiss market. Technically, the site employs modern JavaScript frameworks and integrates Google Analytics and Tag Manager for tracking, alongside a robust consent management platform (Didomi) to ensure GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the site presents a trustworthy and professional online presence with moderate to good technical and security maturity.

L

Lifull Connect

trovit.ng

53

Trovit.ng is a classified search engine specializing in aggregating ads for property, used cars, and jobs within Nigeria. It operates under the parent company Lifull Connect, which provides global privacy and legal policies. The platform targets a broad general audience seeking classified ads and offers a user-friendly interface with consistent branding and good content quality. Technically, the site employs modern JavaScript frameworks and integrates Google Analytics, Google Tag Manager, and Criteo for advertising and tracking purposes. The site is mobile-optimized and SEO-friendly, providing a moderate performance experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

L

Lifull Connect

trovit.ae

56

Trovit.ae operates as a classified search engine specializing in aggregating property, used cars, and job advertisements within the United Arab Emirates. Owned by Lifull Connect, a recognized global entity, the platform serves a broad audience seeking streamlined access to classified ads from thousands of websites. The website demonstrates a consistent brand presence and offers mobile app availability, enhancing user accessibility. Technically, the site employs modern JavaScript frameworks and integrates major analytics and advertising tools such as Google Tag Manager and Criteo, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security policies or vulnerability disclosure channels. Overall, the platform maintains a solid security posture with no evident vulnerabilities or exposed sensitive data. The domain registration aligns well with the business entity, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen compliance and user trust.

L

Lifull Connect

trovit.co.nz

64

Trovit New Zealand operates as a classified search engine specializing in aggregating ads for property, used cars, and jobs from thousands of websites. It is part of the Lifull Connect group, a recognized global player in classified search services. The website targets a general audience in New Zealand seeking convenient access to classified listings across multiple verticals. The business model centers on providing a unified search platform to simplify user access to diverse classified ads, leveraging partnerships and data aggregation.

B

Bourguignon Bikes & Scooters

bourguignonbikesenscooters.nl

58

Bourguignon Bikes & Scooters is a specialized bicycle and scooter retailer based in Leeuwarden, Netherlands, offering a broad range of products including electric bikes, city bikes, and scooters from reputable brands such as Gazelle, Kalkhoff, and Riese & Müller. The company operates both an online e-commerce platform and a physical store, targeting local consumers seeking quality bicycles and related accessories. Their market position is that of a trusted local premium dealer with strong brand partnerships and positive customer ratings. Technically, the website is built on Magento 2, leveraging modern JavaScript libraries and frameworks such as RequireJS and jQuery, with integrations for Google Tag Manager and Smartsupp live chat. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, typical for a Magento-based e-commerce site. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and follows Magento's security best practices. However, explicit security headers like Content Security Policy and incident response contact details are absent, representing areas for improvement. Privacy compliance is addressed with visible privacy and cookie policies, including GDPR considerations. Overall, the website presents a professional and trustworthy digital presence with solid business credibility and a good security posture. Strategic improvements in security headers and incident response transparency would further enhance their risk profile and customer trust.

A

Agenturtipp.de

agenturtipp.de

50

Agenturtipp.de is a German online platform specializing in the comparison and matching of marketing and IT agencies, boasting a database of over 3,200 selected service providers. The platform targets businesses and individuals seeking specialized agencies in SEO, online marketing, web design, social media, content marketing, and related digital services across Germany. It offers free and non-binding agency matching services, supported by detailed agency profiles and user reviews. Technically, the website is built on the WoltLab Suite CMS, utilizing modern JavaScript libraries and multiple analytics tools such as Google Analytics, Matomo, Microsoft Clarity, and Facebook Pixel, all integrated with consent management mechanisms. The hosting is consistent with the domain's nameservers, indicating a stable infrastructure. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the provided content. Overall, the website is professional, well-branded, and trustworthy, with good SEO and user experience, but could improve in privacy transparency and security best practices.

S

STOCK SPIRITS GMBH & CO. KG

helbing-kuemmel.de

56

Helbing-Kümmel is a well-established German brand specializing in the production and online retail of traditional Kümmel alcoholic beverages, with a history dating back to 1836. The website serves as an e-commerce platform targeting adult consumers primarily in Germany, offering product sales, brand storytelling, and recipe sharing. The company operates under the parent entity STOCK SPIRITS GMBH & CO. KG, reflecting a strong market position in the alcoholic beverage segment. The site demonstrates consistent branding and a professional online presence.

F

Fashioncenter GmbH

lottosportshop.de

63

Fashioncenter GmbH operates the official Lotto Sport online shop in Germany, offering a broad range of branded sneakers, sportswear, and accessories for men, women, and children. The website positions itself as a trusted retail channel with free shipping over 30€, climate-neutral delivery via DHL, and recognized payment options including Klarna and PayPal. The business targets consumers seeking sporty and retro-inspired fashion with a family-friendly approach. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates advanced tracking and consent management tools such as Google Tag Manager and Usercentrics. Security measures include HTTPS enforcement and Google reCAPTCHA on login forms, although explicit security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site demonstrates a mature e-commerce infrastructure with good user experience and trust indicators.

M

Moodle Academy

moodle.academy

65

Moodle Academy operates as an educational platform specializing in Moodle LMS training and resources. The website presents a professional and well-structured interface targeting educators and Moodle users seeking online learning opportunities. The business model focuses on delivering Moodle-related courses and educational content, positioning itself as a niche player in the e-learning sector. Technical infrastructure is based on the Moodle LMS platform, leveraging modern JavaScript libraries such as YUI, jQuery, and RequireJS, along with third-party services like Google Analytics and Hotjar for analytics and user behavior tracking. The site implements cookie consent mechanisms via OneTrust, indicating attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although explicit security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for educational platforms, and no suspicious patterns were detected. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, though it could improve transparency by publishing security policies and contact information for incident response.

M

Moodle Pty Ltd

moodle.org

74

Moodle.org is the official website for Moodle, a leading open source Learning Management System (LMS) founded in 2002. The platform supports educators worldwide by providing a scalable, flexible LMS solution with a strong community and extensive resources including forums, documentation, plugins, and demo sites. The website reflects Moodle's position as a mature and trusted player in the education technology sector, targeting educators, administrators, and developers globally. Technically, the site uses a modern tech stack including YUI libraries, RequireJS, jQuery, and Bootstrap, hosted with Cloudflare DNS and secured with HTTPS. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented via OneTrust. Security posture is strong with standard best practices observed, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is professional, accessible, and trustworthy, with no blocking or WAF challenges detected.

M

Mageworx

mageworx.com

74

Mageworx is a specialized eCommerce software provider focusing on Magento extensions and Shopify apps. The company positions itself as a trusted Magento partner with a significant customer base of over 25,000 Magento store owners worldwide. Their website reflects a professional and well-structured digital presence built on Magento 2 technology, featuring modern JavaScript libraries and integrations such as Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content tailored to eCommerce businesses. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of WHOIS data and lack of explicit privacy policy, terms of service, and security policy pages reduce transparency and trust. No security headers were detected in the provided data, and there is no visible vulnerability disclosure or incident response information, which are areas for improvement. Overall, the website is safe and professional, with no adult or questionable content detected. The technical infrastructure is modern but could benefit from enhanced security practices and clearer compliance documentation. The lack of WHOIS data is a notable concern that impacts the domain's trustworthiness assessment. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, providing clear contact information for incident response, and improving WHOIS transparency to strengthen business credibility and user trust.

L

Last.fm

last.fm

72

Last.fm is a well-established online music service founded in 2002, offering music streaming, artist discovery, and personalized recommendations to a global audience. The platform holds a strong market position as one of the largest music services worldwide, supported by a large user base and extensive music metadata. Technically, the website employs modern web technologies including RequireJS, New Relic monitoring, and integrates with Apple Music, ensuring a fast and responsive user experience optimized for mobile and desktop platforms. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although a dedicated security policy page and incident response contacts are not publicly found. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with active consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.