Security Directory

ERGO Lithuania is a well-established insurance provider offering a broad range of insurance products including vehicle, property, travel, life, health, and personal insurance. The company targets private individuals and businesses primarily in the Baltic region, maintaining a strong market presence with over 640,000 customers. The website reflects a professional and user-friendly digital presence, leveraging modern web technologies such as Next.js and integrating comprehensive consent management and analytics tools. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Overall, ERGO Lithuania demonstrates a mature digital infrastructure and trustworthy business operations with room for improvement in transparency around security and vulnerability disclosures.

O

Open House Praha, z. ú.

openhousepraha.cz

0

Open House Praha, z. ú. is a Czech non-profit organization dedicated to promoting architecture and urban culture through its annual Open House festival and year-round guided tours. The organization opens over 120 normally inaccessible buildings and spaces in Prague to the public, attracting a large audience and fostering community engagement. The website reflects a mature digital presence with comprehensive content, strong branding, and active social media integration. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly impacts trust but the organization's transparency and partner endorsements mitigate concerns. Overall, the site is professional, trustworthy, and well-positioned in its niche.

A

aria-studio.cz

aria-studio.cz

0

Aria-Studio.cz is a small Czech web design and development studio operated by Pavel Kovanda and Aleš Rubáš, offering services including web presentation creation, graphics, and web programming. The business has been active since 2004 and targets small businesses and individuals seeking professional web presence solutions. The website is built on WordPress using the Fluida theme and Elementor page builder, reflecting a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy/cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear consistent and professional. Overall, the site presents a trustworthy small business with a solid digital presence but should address privacy and security best practices to enhance compliance and trust.

A

Associazione nazionale Pionieri dell'Aeronautica

pionieriaeronautica.org

0

The Associazione nazionale Pionieri dell'Aeronautica is Italy's oldest aeronautical association dedicated to promoting and preserving the history and culture of Italian aeronautics. The website serves as an informational and cultural platform targeting enthusiasts, members, and the general public interested in aeronautical heritage. Technically, the site is built on WordPress using the Divi theme and Slider Revolution plugin, with Google Analytics integrated for visitor tracking. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. Security posture is moderate, with HTTPS enabled but lacking explicit security headers and detailed privacy policies. The absence of WHOIS data limits full trust verification of the domain registration, which slightly impacts overall credibility. Strategic improvements in security headers, privacy compliance, and domain transparency would enhance trust and compliance.

A

Associazione Trasvolatori Atlantici

trasvolatoriatlantici.it

0

The Associazione Trasvolatori Atlantici website serves as the official online presence for a small non-profit association focused on the history and commemoration of transatlantic aviators. The site provides historical content, galleries, and information about cruises and events related to aviation history. The business model is cultural and educational, targeting enthusiasts and members of the association. The website is built on Joomla! CMS with the JA T3 Framework, indicating a moderate level of technical maturity but with basic design and content quality. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks security headers and privacy compliance documentation. No contact information or forms are present, limiting user engagement and trust signals. Overall, the site is functional but could benefit from enhanced privacy, security, and user experience improvements.

A

Associazione Nazionale Ufficiali Aeronautica

anua.it

0

The Associazione Nazionale Ufficiali Aeronautica (ANUA) is a non-profit organization dedicated to supporting members of the Italian Air Force and promoting their interests. The website serves as an information hub with news, events, and resources for its members and the broader Aeronautica Militare community. It maintains a professional online presence with consistent branding and regularly updated content. Technically, the site is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site is trustworthy and well-maintained, serving its niche audience effectively.

The website www.globalgiving.org is currently inaccessible due to a security challenge implemented by PerimeterX, which blocks access via a captcha verification. This prevents retrieval of any meaningful content, metadata, or business information from the site. The WHOIS query also failed, returning no usable registration data, indicating privacy protection or query restrictions. Consequently, no contact details, privacy policies, or terms of service could be identified. The technical infrastructure appears to include PerimeterX for bot mitigation, but no other technologies or CMS platforms are detectable. Security posture is limited due to lack of accessible data, but the presence of a WAF indicates some level of security enforcement. Overall, the site cannot be fully assessed, and the risk is elevated due to lack of transparency and accessibility.

S

Synology Inc.

synology.com

0

Synology Inc. is a prominent technology company specializing in network-attached storage (NAS), data management, backup, surveillance, networking, and cloud solutions. The company positions itself as a leader in providing scalable and secure data management platforms for both business and individual users. Their website reflects a mature digital presence with comprehensive product offerings, customer resources, and a strong emphasis on data security and privacy. Technically, the site employs modern JavaScript frameworks such as Vue.js and jQuery, integrates Google Tag Manager for analytics, and uses LiveChat for customer engagement. The site is well-optimized for mobile devices and provides clear navigation and professional design. From a security perspective, Synology demonstrates good practices including HTTPS enforcement, detailed privacy and cookie policies with consent mechanisms, and public disclosure of security programs such as a bounty program. No critical vulnerabilities or exposed sensitive data were detected in the website content. WHOIS data for the domain is unavailable or restricted, which is common for privacy-conscious enterprises, but the website content and external trust signals strongly support the legitimacy of the domain. Overall, Synology's website reflects a robust security posture, strong privacy compliance, and a high level of business credibility. The company effectively communicates its value proposition and maintains transparency in security and data protection matters, making it a trustworthy technology provider in its market segment.

U

Ubiquiti Inc.

ui.com

0

Ubiquiti Inc. is a well-established enterprise technology company specializing in networking hardware and software solutions, particularly under the UniFi brand. The company targets enterprise customers and IT professionals with a comprehensive portfolio of products designed to unify networking and security management through an advanced software interface. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting a strong market position in the technology and telecommunications sectors. Technically, the website leverages modern web technologies including React and JavaScript, hosted on Amazon AWS infrastructure, ensuring fast performance and scalability. The site employs best practices in SEO, accessibility, and user experience, with comprehensive metadata and structured data supporting search engine visibility. Analytics and marketing tools are integrated responsibly with user consent mechanisms in place. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, DNSSEC is not enabled, which is a recommended enhancement for DNS security. The absence of a public security policy or incident response contact is noted as an area for improvement. Overall, the security posture is strong with no critical vulnerabilities detected. The domain WHOIS data confirms the legitimacy of the website, showing a long registration history consistent with the company's founding date and no use of privacy protection, which aligns with the public nature of the business. The website is free from WAF or blocking mechanisms, allowing full content access and analysis. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

S

Switch

switch.com

0

Switch is a global technology company specializing in the design, construction, and operation of ultra-advanced data centers that enable powerful technology ecosystems. The company positions itself as a world-renowned leader in the data center industry, targeting technology enterprises and organizations requiring high-performance infrastructure solutions. The website reflects a mature digital presence with professional design and comprehensive content focused on their core business offerings. Technically, the site is built on WordPress using the Divi theme and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, indicating a sophisticated approach to user engagement and data collection. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS data for the domain www.switch.com is a notable gap, reducing trust from a domain registration perspective despite the professional website content. Overall, the site demonstrates strong business credibility and technical implementation but would benefit from enhanced privacy compliance and security transparency.

A

Allegion

isonas.com

0

Allegion, through its ISONAS brand, offers advanced IP-to-the-door access control solutions targeting commercial security markets. The website reflects a mature enterprise presence with a focus on simplifying access control technology for integrators and facility managers. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates marketing and analytics tools such as Adobe Analytics and Marketo, indicating a digitally mature platform. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA, though explicit incident response and vulnerability disclosure information are absent. Overall, the website is professional, secure, and compliant with privacy regulations, supporting Allegion's market position as a leading access control provider.

D

DEKORHOME, s.r.o.

dekorhome.sk

0

DEKORHOME, s.r.o. operates an e-commerce platform specializing in furniture, home accessories, garden products, and design items primarily targeting the Slovak market. The website presents a professional and consistent brand image with a clear focus on quality and customer service. The technical infrastructure leverages modern marketing and analytics technologies such as Google Tag Manager, Facebook Pixel, and Bing Ads, hosted on a CDN-backed platform (searchready.cz) with good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit privacy and terms policies are missing, which impacts compliance. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized retail operation.

R

RIKA Innovative Ofentechnik GmbH

rika.de

0

RIKA Innovative Ofentechnik GmbH is an Austrian manufacturer specializing in high-quality pellet and wood-burning stoves, offering innovative heating solutions with a strong emphasis on efficiency and smart home integration. The company maintains a solid market position with a medium-sized operation and an international presence supported by a dealer network and online configurator tools. Their website reflects a professional and user-friendly digital presence with comprehensive product information and customer engagement features such as newsletters and social media integration. Technically, the site leverages modern JavaScript libraries and CDN hosting to ensure fast performance and mobile optimization. Security practices include HTTPS enforcement, reCAPTCHA for forms, and consent management via Cookiebot, although some security headers and explicit incident response policies are absent. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable digital asset for the company.

V

Volontaires.lu

volontaires.lu

0

Volontaires.lu is a Luxembourg-based volunteer service platform aimed at engaging youth in meaningful volunteer projects both locally and internationally. The website serves as an informational hub providing access to volunteer programs, mission listings, and training opportunities. It appears to be affiliated with government or official entities, supported by the presence of government logos and social media channels. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and uses Google Tag Manager and Matomo for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data is unavailable due to a malformed query, which slightly reduces trustworthiness but does not negate the legitimacy suggested by the content and branding. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

S

Service national de la jeunesse

animateur.lu

0

Animateur.lu is an official government portal operated by the Service national de la jeunesse in Luxembourg, targeting current and prospective youth animators. The site provides comprehensive resources including training, certifications, event listings, and material lending to support youth animation activities. It holds a strong market position as a trusted government resource with consistent branding and clear navigation. Technically, the website is built on WordPress with a modern stack including WooCommerce for e-commerce capabilities, Contact Form 7 for forms, and Complianz for GDPR compliance. The site uses Matomo analytics hosted on its own server, enhancing privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be improved. Overall, the website is professional, accessible, and trustworthy, serving its audience effectively.

O

On Stéitsch

onsteitsch.lu

0

On Stéitsch is an annual cultural and art festival organized by the Luxembourg National Youth Service, targeting young people under 30 years old. The website serves as an official platform to promote the event, providing information about dates, participation, and past editions. It is positioned as a government-affiliated event with a focus on youth culture and arts. The site uses WordPress CMS with plugins such as Yoast SEO and Ninja Forms, indicating a moderate level of digital maturity and standard web infrastructure. The technical setup includes modern JavaScript libraries and responsive design elements, ensuring good user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a trustworthy and professional government event site with good compliance to privacy regulations. The lack of WHOIS data limits domain registration insights, but the site’s content and branding strongly support its legitimacy.

B

Base1

base1.lu

0

Base1 is a youth-focused makerspace and creativity hub based in Luxembourg, offering open access to a makerspace, workshops, and events for young people aged 8 to 30. The organization supports a wide range of creative projects including drone building, coding, video production, and more, fostering innovation and learning in a community environment. The website is multilingual, primarily in French, and integrates modern web technologies with WordPress CMS and various plugins for multilingual support, forms, and cookie management. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published privacy and security policies. The domain registration aligns well with the organization's Luxembourg location and youth focus, indicating legitimacy. Overall, the site is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security transparency are recommended.

IN:CUBATOR is a small non-profit organization based in Luxembourg that supports youth initiatives and non-profit organizations by providing a comprehensive support package including coworking spaces, guidance, workshops, networking, and financial assistance. The website is built on WordPress using Elementor and presents a professional and consistent brand image targeted at young people up to 29 years old and youth sector organizations. Technically, the site uses modern web technologies but lacks some advanced security headers and privacy compliance features. The absence of WHOIS data limits domain trust analysis, but the presence of clear contact information and relevant content supports its legitimacy. Security posture is moderate with HTTPS enabled but missing some best practices. Privacy and cookie policies are not found, indicating compliance gaps.

N

Nuit du Sport

nuitdusport.lu

0

Nuit du Sport is a government-backed initiative in Luxembourg aimed at promoting sports activities among youth and the general population by organizing annual sports events across various communes. The website serves as an informational and promotional platform, providing program details, partner information, and news updates. It is supported by official government bodies such as the Service National de la Jeunesse and the Ministère des Sports, indicating a strong institutional backing. Technically, the website employs modern web technologies including jQuery, lazy loading for images, and tracking via Matomo analytics. The site is mobile-optimized and accessible, with good SEO practices and a consistent branding strategy. No CMS or hosting provider details are explicitly identified from the content. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and there is no public security or incident response policy. Privacy compliance is indicated by the presence of a legal aspects page covering privacy and cookie policies, with GDPR compliance implied. Overall, the website presents a low-risk profile with a solid business credibility due to government affiliation, though the lack of WHOIS data and explicit security policies slightly reduce trust scores. Strategic improvements could focus on enhancing security headers, publishing incident response contacts, and providing clearer contact information.

B

BEE SECURE

bee-secure.lu

0

BEE SECURE is a government-backed digital safety awareness platform based in Luxembourg, focused on educating children, youth, parents, and educators about responsible and safe use of digital technologies. The platform offers a variety of services including awareness campaigns, a helpline, a stopline for reporting illegal content, educational resources, and youth consultations. It is co-financed by the European Union and operated in partnership with national agencies such as the police and justice departments. The website is professionally designed, content-rich, and well-structured primarily in French, targeting a broad audience concerned with digital safety. Technically, the website is built on WordPress, utilizing modern web technologies such as jQuery and FontAwesome, and employs Matomo analytics hosted locally in Luxembourg to ensure privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and incident response information. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The use of Matomo analytics with local hosting aligns with GDPR compliance. However, the absence of WHOIS data due to a malformed query reduces domain transparency and trust from a registration standpoint. Overall, the platform appears legitimate and trustworthy based on content and government affiliations. Strategically, BEE SECURE should focus on enhancing domain registration transparency, publishing security and incident response policies, and maintaining rigorous audits of third-party scripts to sustain and improve its security posture and user trust.

Maison Eisenborn is a government-affiliated non-profit organization providing accommodation and support services to young adults involved in international mobility programs in Luxembourg. The website is professionally designed using WordPress and integrates standard technologies such as jQuery, Ninja Forms, and Google Maps API. The site includes a comprehensive application form collecting detailed personal and financial information, indicating a structured approach to service delivery. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit privacy policies are recommended. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate government service.

S

S-Team

s-team.lu

0

S-Team is a government-backed non-profit initiative based in Luxembourg focused on preventing violence among youth in schools and educational institutions. The project engages young people to lead prevention activities and peer mediation, supported by national youth services and partner organizations. The website is well-structured, professionally designed, and provides clear information about the project, partners, and contact details. Technically, it is built on WordPress with modern libraries and frameworks, including Bootstrap and jQuery, and integrates Google reCAPTCHA and Matomo analytics with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, limiting domain legitimacy assessment, but the presence of government logos and partner sites supports trustworthiness. Overall, the site is a credible, safe, and well-maintained platform for its intended audience.

J

Jugendpräis

jugendprais.lu

0

Jugendpräis is a government-organized platform in Luxembourg dedicated to recognizing and promoting youth projects. Managed by the Service national de la jeunesse, it serves as a biennial award event highlighting diverse youth initiatives. The website targets youth groups and organizations, providing visibility and recognition through awards and public engagement. The platform enjoys strong partnerships with governmental and European entities, as well as media support from RTL Luxembourg. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Complianz for GDPR cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The infrastructure is secure with HTTPS enforced, though security headers could be enhanced. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and an opt-in consent mechanism. However, explicit security policies and incident response contacts are not present, which could be improved to enhance trust and readiness. Overall, Jugendpräis presents a professional, trustworthy, and well-maintained digital presence aligned with its governmental and non-profit mission. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and stakeholder confidence.

S

Service national de la jeunesse

colonies.lu

0

The website colonies.lu is an official government-operated portal managed by the Service national de la jeunesse in Luxembourg. It serves as a centralized platform aggregating a wide variety of leisure activities such as weekends, camps, and colonies organized by multiple partner organizations. The portal targets children and youth in Luxembourg, providing event listings, registration capabilities, and practical information. The site is well-branded with consistent government logos and clear navigation, reflecting a professional and trustworthy presence. Technically, the site is built on WordPress 6.8.1 with modern plugins including Yoast SEO and Complianz GDPR for privacy compliance. It uses Bootstrap for responsive design and integrates Google Maps for location services. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Analytics are handled via Matomo with anonymized statistics, respecting user privacy. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with opt-in for non-essential cookies. However, it lacks explicit HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration data aligns well with the website’s government affiliation and Luxembourg location, indicating high legitimacy. Overall, colonies.lu is a well-maintained, secure, and privacy-conscious government portal providing valuable services to youth in Luxembourg. Strategic improvements include adding security headers, publishing a security policy, and providing incident response contact information to enhance trust and compliance.

S

Service national de la jeunesse

echwellechkann.lu

0

The website echwellechkann.lu is an official Luxembourg government youth engagement platform managed by the Service national de la jeunesse. It provides a portal for young people to discover activities, engagement offers, and projects to organize their free time. The platform is positioned as a trusted government resource with clear contact information and official branding. Technically, the site is built on WordPress with modern plugins and uses Matomo analytics for privacy-conscious tracking. The site is well-structured, mobile-optimized, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy page, though cookie consent is implemented. Overall, the site is trustworthy, safe, and professionally maintained, serving its government and youth audience effectively.

Z

Zentrum Fünfbrunnen / Centre Cinqfontaines

cinqfontaines.lu

0

The website cinqfontaines.lu represents a Luxembourg government-operated educational and memorial center focused on Holocaust remembrance, antisemitism, racism, democracy, and human rights education. The site serves children, youth, educators, and the general public interested in historical and human rights topics. It is managed by the Luxembourg government and related youth and political education services, positioning itself as a niche cultural and educational institution. The content is well-structured, multilingual, and professionally presented with clear navigation and consistent branding. Technically, the website is built on WordPress 6.8.1 with jQuery, Google Maps API, and Font Awesome. It uses Matomo for analytics and implements a cookie consent mechanism compliant with GDPR principles. The site is hosted likely on Luxembourg infrastructure, uses HTTPS with excellent SSL configuration, and shows moderate performance and good mobile optimization. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS, uses cookie consent, and does not expose sensitive data. No vulnerabilities or WAF blocking were detected. Privacy compliance is partial due to the absence of an explicit privacy policy page and terms of service. Contact information is available but lacks email addresses and security incident contacts. Overall, the website is trustworthy, professional, and serves its educational and memorial purpose effectively. Strategic improvements include publishing a privacy policy and terms of service, adding security headers, and providing incident response contact information to enhance security posture and compliance.

B

BookAthon

bookathon.lu

0

BookAthon is a youth-focused creative initiative based in Luxembourg, organizing 24-hour hackathons where young participants aged 14 to 27 collaboratively create children's books for ages 0 to 4. Supported by professional authors, illustrators, and graphic designers, the event fosters creativity and cultural engagement among youth. The website is professionally designed using WordPress and integrates modern technologies such as Gravity Forms for data collection, Yoast SEO for optimization, and Complianz for GDPR-compliant cookie management. Analytics are handled via Matomo, ensuring privacy-conscious tracking. Security posture is strong with HTTPS enforced and anti-spam measures in place, though explicit security headers could be improved. The site complies with GDPR and provides clear privacy and cookie policies. Contact information is transparent, including a contact email and physical address linked to the Service national de la jeunesse (SNJ). Overall, BookAthon presents a trustworthy, well-managed digital presence aligned with its educational and cultural mission.

S

Service National de la Jeunesse (SNJ)

chalets.lu

0

Chalets.lu is an official Luxembourg government-affiliated website providing comprehensive information and booking options for youth accommodations including chalets, camping grounds, and youth hostels across Luxembourg. The platform targets youth groups, families, and tourists seeking affordable lodging options, positioning itself as a trusted government resource. The website leverages WordPress CMS with modern technologies such as Bootstrap, jQuery, and Google Maps API to deliver a responsive and accessible user experience. Privacy compliance is robust, featuring a detailed cookie policy with opt-in consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its government service role.

C

Crème fraîche

creme-fraiche.lu

0

Crème fraîche is a Luxembourg-based video contest platform targeting young people aged 12 to 30, focusing on promoting creativity and film-making through organized contests and events. The website provides detailed information about contest editions, winners, and related cultural activities, positioning itself as a niche media and cultural event organizer in Luxembourg. The platform leverages modern web technologies including Drupal 10 and Alpine.js to deliver a responsive and engaging user experience, optimized for mobile devices and accessibility. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible platform. Overall, the website demonstrates good professionalism and trustworthiness, supported by active social media channels and clear business focus.

F

Festival des Cabanes

cabanes.lu

0

The Festival des Cabanes website represents a youth-focused architecture competition organized in Luxembourg, targeting young people aged 12 to 26. The event is supported by recognized local organizations such as the Service national de la jeunesse and the Ordre des Architectes et Ingénieurs-conseils, positioning it as a niche cultural and educational initiative. The website content is professionally presented, with clear information about the event, its objectives, and timelines, supporting good user engagement and trust. Technically, the site is built on WordPress with modern front-end technologies and is mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is trustworthy and well-suited for its purpose but would benefit from enhanced privacy compliance and security hardening.

D

Deng Zukunft - Däi Wee

dzdw.lu

0

The website 'Deng Zukunft - Däi Wee' serves as an informational platform primarily targeting young people and their parents in Luxembourg, offering guidance on education and career paths. The site is built on Drupal 10 CMS and employs modern frontend technologies such as Alpine.js and Tailwind CSS, indicating a contemporary technical infrastructure. The website is mobile-optimized and accessible, with a clear navigation structure and professional design. Security measures include HTTPS enforcement and a cookie consent mechanism compliant with GDPR requirements. However, the absence of WHOIS data and lack of explicit business contact information limit the overall business credibility assessment. No security policy or incident response information is provided, which could be improved to enhance trust and compliance. Overall, the site presents a solid digital presence with room for improvement in transparency and security documentation.

Т

ТОВ "АІН"

ain.ua

0

AIN.ua is a leading Ukrainian online media platform specializing in IT, business, startups, and investment news. Established in 1999, it holds a strong market position as the oldest and most trusted media outlet in its niche within Ukraine. The website offers a wide range of content including news articles, analytical reports, interviews, and special projects targeting IT professionals, entrepreneurs, investors, and the broader business community. Its business model primarily revolves around digital publishing supported by advertising and sponsored content. Technically, the website employs a modern technology stack including JavaScript frameworks, Google Tag Manager, Microsoft Clarity for analytics, and Facebook Pixel for marketing. It uses asynchronous loading for performance optimization and is mobile-optimized with good SEO practices. The platform appears to be custom-built without reliance on common CMS platforms, indicating a tailored infrastructure. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and uses several tracking and advertising scripts responsibly. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly declared, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Contact information is limited but includes a feedback email for technical issues. Overall, AIN.ua presents a professional, trustworthy, and content-rich platform with a solid security posture and compliance framework. Strategic recommendations include enhancing security headers, publishing a formal security policy, and expanding contact channels to improve incident response readiness and user trust.

A

Aittakoodi Oy

synergybus.fi

0

SynergyBus, operated by Aittakoodi Oy, is a Finnish web platform specializing in connecting taxi and bus companies with customers seeking chartered transportation services. The platform aggregates over 15,000 annual booking requests, positioning itself as a leading service in the Finnish transportation sector. The website offers features such as daily email notifications of new requests, the ability to advertise available fleet capacity, and tools to foster long-term customer relationships. The business targets transportation operators and customers within Finland, emphasizing efficiency and market reach.

R

Rideer Nordic Oy

tilausajot.net

0

Tilausajot.net, operated by Rideer Nordic Oy, is a well-established Finnish online platform specializing in competitive bidding for charter taxi and bus transportation services. Founded in 2011, it serves a broad audience including private individuals, companies, and associations across Finland. The platform facilitates efficient request and offer management, supported by a growing network of transportation providers. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Cloudflare for security and performance. It integrates comprehensive analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, balanced with a detailed cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and Cloudflare protection, though some security headers could be improved. The domain registration is consistent and transparent, reinforcing business legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly service with good privacy and security practices.

A

Aittakoodi Oy

tilaataksi.fi

0

Tilaataksi.fi is a Finnish online taxi booking platform operated by Aittakoodi Oy, providing customers with a convenient way to pre-book taxis and receive competitive offers from taxi operators across Finland. The service targets both private individuals and organizations, offering a streamlined multi-step form for detailed ride requests. The platform is supported by Rideer Nordic Oy and integrates with various third-party services for analytics, customer support, and hosting. Technically, the website uses modern frameworks like Bootstrap and jQuery, with performance and mobile optimization rated as good. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information presented on the site.

F

Finnair

finnair.fi

0

Finnair is a well-established Finnish airline providing passenger flights and travel services to over 80 destinations worldwide. The company holds a strong market position in Northern Europe and operates with a large-scale business model supported by subsidiaries such as Norra and Finnair Cargo. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to a general audience of travelers. The technical infrastructure leverages modern web technologies including Angular, Google Tag Manager, and Akamai CDN, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although public incident response and vulnerability disclosure information are limited. Privacy compliance is well addressed with detailed policies and consent mechanisms aligned with GDPR requirements. Overall, the website and business demonstrate high professionalism and trustworthiness, despite the absence of WHOIS domain registration details which may be due to registry restrictions.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

P

PoriExpress

poriexpress.fi

0

PoriExpress is a Finnish regional transportation company specializing in affordable bus travel primarily between Pori and Helsinki, as well as seasonal travel packages to Lapland (Ylläs). The company targets general consumers seeking economical and convenient bus travel options and related accommodation services through partnerships. The website is professionally designed using WordPress with modern SEO and content management plugins, providing a good user experience and clear navigation. Technical infrastructure is solid with HTTPS and standard WordPress technologies, though some security headers are missing. Contact information is clearly provided, but privacy compliance could be improved with cookie consent mechanisms and more detailed security policies. Overall, the site is trustworthy and well-positioned in its niche.

OnniBus operates as a leading Finnish bus ticket sales platform, offering affordable and reliable bus travel across Finland and to international destinations such as the Baltics and Poland. The company positions itself as a well-known and cheerful brand in the Finnish transportation market, providing various ticketing options including season passes and reward programs. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. Technically, the site employs modern analytics and consent management tools such as Google Analytics, Microsoft Clarity, and Cookiebot, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is a notable anomaly, potentially due to privacy protection or recent domain registration, but the website content and business presence support legitimacy. Overall, the site demonstrates a strong business and technical foundation with moderate risk due to incomplete WHOIS transparency.

M

Trusted Magento 2 Extensions‎ by Magezon

magezon.com

0

Magezon is a specialized provider of Magento 2 extensions and related e-commerce services, targeting Magento store owners and developers. The company offers a wide range of products including page builders, form builders, mega menus, and other Magento 2 enhancements, supported by installation and custom development services. Their market position is that of a trusted Magento extension vendor emphasizing quality, support, and continuous updates. Technically, the website is built on Magento 2 platform with modern JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and secure form handling, though some security headers are not explicitly detected. Privacy compliance is basic with a refund policy present but no explicit cookie consent or privacy policy page found. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and business information appear professional and consistent. Overall, Magezon presents a credible e-commerce software business with room for improvement in privacy and security transparency.

M

Magefan

magefan.com

0

Magefan is a Ukraine-based e-commerce agency specializing in Magento 2 and Shopify solutions since 2015. They offer a broad portfolio of Magento 2 extensions and Shopify apps, alongside customization services aimed at improving store performance, security, and user experience. The company has a strong market presence with over 120,000 customers and more than 50 Magento extensions, positioning itself as a reputable provider in the e-commerce technology sector. Technically, the website is built on Magento 2 with modern JavaScript libraries such as jQuery and Owl Carousel, and leverages Cloudflare for DNS services. The site demonstrates good performance, mobile optimization, and SEO practices. Security is well addressed with HTTPS, multiple security headers, and domain status protections, although DNSSEC is not enabled. The site integrates marketing and analytics tools like Facebook Pixel, Google Tag Manager, and Hotjar, indicating moderate user tracking. From a security posture perspective, Magefan shows maturity with enforced HTTPS, domain lock statuses, and no visible vulnerabilities. However, the absence of explicit privacy, cookie, and security policies, as well as incident response contacts, represents compliance gaps, especially under GDPR and related regulations. No suspicious or malicious content is detected, and the site is safe for general audiences. Overall, Magefan presents a professional and trustworthy e-commerce solutions provider with solid technical infrastructure and business credibility. Strategic improvements in privacy compliance and security transparency would further enhance their risk profile and customer trust.

H

Hartman Videoproducties

hartmanvideo.nl

0

Hartman Videoproducties is a small media production company based in the Netherlands, specializing in video production, photography, livestreaming, and videopodcasts. The company presents a professional online presence with a well-structured WordPress website built using Elementor, showcasing their services and portfolio. The domain is relatively new, registered in 2022, consistent with the business's founding date, and secured with DNSSEC and HTTPS. However, the website lacks critical compliance elements such as privacy and cookie policies, which are essential for GDPR adherence. No incident response or security policies are published, and no analytics or tracking tools are detected, indicating a minimal data collection approach. Contact information is clearly provided, enhancing business credibility.

P

POST Luxembourg

eboo.lu

0

The website www.eboo.lu is a digital banking platform operated by POST Luxembourg, offering eBanking services accessible via smartphones, tablets, and computers. It targets customers of POST Luxembourg's financial services, providing a seamless and intuitive banking experience without the need to visit physical branches. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages including English and French. The business is well-established in Luxembourg's finance and telecommunications sectors, leveraging POST Luxembourg's strong market position.

D

DEEP

deep.eu

0

DEEP is a professional IT services company specializing in cloud computing, data management, artificial intelligence, and cybersecurity, primarily serving clients in Luxembourg and France. The company positions itself as a trusted partner for digital transformation challenges, targeting a broad range of business sectors including SMEs, large enterprises, public institutions, and banking. The website is well-structured, multilingual, and provides comprehensive information about their services and business focus. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, React, and Clay UI components. The presence of cookie consent mechanisms and GDPR compliance indicators reflects a mature approach to privacy and regulatory adherence. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of explicit security policies and incident response contacts suggests room for improvement. WHOIS data is privacy protected, which is common for European domains and does not detract from the site's legitimacy. Overall, the website demonstrates a solid digital presence with good technical and security practices, supporting DEEP's credibility as an IT services provider.

K

Kappa Data

kappadata.eu

0

Kappa Data is a value-added distributor specializing in innovative network connectivity, security, and IoT solutions. Established in 1998 and operating across five countries with 75 employees, the company serves resellers and end customers by providing technical support and knowledge sharing. The website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and providing good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are present, indicating basic GDPR compliance. Overall, the site is trustworthy and well-maintained, supporting the company's regional market position.

K

Kappa Data France

exer.fr

0

Kappa Data France is a value-added IT distributor specializing in network infrastructure and security solutions, serving businesses and IT resellers primarily in France and neighboring countries. The company has a strong market presence with over 20 years of experience and offers a portfolio of reliable IT products, technical expertise, and training services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern performance optimizations and uses Cloudflare DNS services. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned but would benefit from enhanced compliance and security transparency.

K

Kappa Data

kappadata.pl

0

Kappa Data is a value-added distributor (VAD) specializing in networking, security, and IoT solutions primarily serving the Polish market. The company offers technical and sales support, ongoing training, and consulting services, partnering with reputable manufacturers to deliver innovative IT solutions to businesses and institutions. The website reflects a professional and consistent brand presence with multilingual support and a focus on IT infrastructure and cybersecurity expertise. Technically, the site is built on WordPress with modern performance optimizations such as lazy loading and asynchronous script loading. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable from the Polish registry, which slightly impacts trust but the website content and structure support legitimacy. Overall, the site is well-positioned in its market segment with room for improvement in privacy compliance and security transparency.

K

Kappa Data

kappadata.nl

0

Kappa Data is a well-established Value-Added Distributor specializing in IT network, security, and IoT solutions primarily serving B2B IT partners in the Netherlands, Belgium, France, and Poland. Founded in 1998, the company has over two decades of experience and offers a broad portfolio including network infrastructure, security, IoT connectivity, training, and technical services. Their market position is solid within the regional IT distribution sector, supported by a professional and multilingual web presence. Technically, the website is built on WordPress using modern plugins and optimization tools, delivering moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and published security policies is noted. Privacy compliance is lacking as no privacy or cookie policies are found, representing a compliance risk. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

L

Lobby X

lobbyx.army

0

Lobby X is a Ukrainian employment and recruiting platform focused on supporting progress and victory in Ukraine. The platform targets Ukrainian job seekers and employers, likely with a focus on government or military-related employment. Technically, the website is built on WordPress using Bootstrap and jQuery, hosted with Cloudflare DNS and registered via GoDaddy with privacy protection. The site uses modern tracking tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and professionally designed but would benefit from enhanced privacy and security measures.

The website antydot.info operates as an independent Ukrainian investigative journalism platform managed by the Асоціація УМДПЛ. It focuses on critical coverage of the law enforcement system, anti-corruption efforts, and justice reforms in Ukraine. The site offers a variety of content types including news, investigations, analytics, videos, and lectures, targeting a Ukrainian-speaking audience interested in governance and human rights issues. The business model aligns with a non-profit media outlet providing public interest journalism. Technically, the site is built on WordPress 4.8.25 with common web technologies such as jQuery and Slick Carousel. It integrates multiple analytics tools including Google Analytics and Yandex Metrika, and uses Disqus for comments. Hosting is provided by Hosting Ukraine LLC, consistent with the domain's Ukrainian focus. The site is mobile-optimized and SEO-friendly with structured data and meta tags, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Tracking scripts are used without visible consent mechanisms. The WHOIS data shows a stable domain registration since 2016 with a reputable Ukrainian registrar, supporting legitimacy. Overall, the site is a credible and professionally maintained media platform with good content quality and moderate technical maturity. Security and privacy compliance require improvements to reduce risk and enhance user trust. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing privacy and cookie policies, and adding user consent mechanisms for tracking.