Security Directory

Focus Rostfrei is a specialized German trade magazine dedicated to stainless, acid-resistant, and heat-resistant steels. It serves industry professionals by providing news, technical articles, event information, and directories. The website is professionally designed using WordPress CMS and integrates multiple plugins for enhanced user experience, including e-paper subscriptions and event management. The site is GDPR compliant with a clear privacy and cookie policy, and it supports multilingual sister publications targeting broader European markets. Technically, the site uses modern web technologies and maintains good performance and mobile optimization. Security posture is solid with HTTPS and secure login forms, though improvements like implementing a Content-Security-Policy header and publishing incident response contacts are recommended. The domain WHOIS data is missing or not publicly available, which raises concerns about registration legitimacy despite the active and professional website presence. Overall, the site is a credible industry resource but should address WHOIS transparency and enhance security headers to improve trust and compliance.

P

Play Puls

playpuls.pl

60

Play Puls is a Polish media service delivering enhanced terrestrial digital TV viewing experiences via HbbTV technology. It allows users with internet-connected TVs to pause, rewind, and watch programs from Puls and Puls 2 channels live or on demand for free. The website is professionally designed with modern frontend technologies such as Tailwind CSS and Font Awesome, hosted by OVH SAS, and uses Cloudflare Insights for analytics. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide contact or security incident response information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, supporting a stable business presence.

S

SOLEN, s. r. o.

solen.sk

58

SOLEN, s. r. o. is a Slovak company specializing in professional healthcare events, medical journals, and books. The website serves healthcare professionals by providing access to specialized medical publications and organizing relevant medical congresses and events. The company appears to hold a solid position in the Slovak healthcare publishing market with a focused business model on education and professional development. The website content is well-structured, professionally presented, and targeted primarily at medical practitioners and healthcare professionals in Slovakia. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, and Owl Carousel, with additional tools for form validation and cookie consent management. The site is mobile-optimized and uses HTTPS with CSRF protection, indicating a mature digital infrastructure. Google Analytics and Cookiebot are used for analytics and privacy compliance, respectively, reflecting adherence to GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF tokens, and a comprehensive cookie consent mechanism. However, some standard security headers are missing, and there is no public incident response or security policy documentation. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is consistent with the website's business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong privacy compliance and a professional online presence. Strategic improvements could include adding security headers, publishing incident response policies, and enhancing accessibility features to further strengthen security and compliance posture.

N

Nemocnice České Budějovice, a.s.

csklg.cz

43

The website csklg.cz serves as the official platform for the 1st Czechoslovak Congress of Medical Genetics, scheduled for April 2025 in Luhačovice, Czech Republic. It is organized by Nemocnice České Budějovice and associated professional genetics societies from Czechia and Slovakia. The site provides detailed program schedules, speaker information, venue details, registration instructions, and contact information, targeting medical genetics professionals and researchers. The business model focuses on event organization and professional networking within the healthcare genetics sector. The domain is newly registered in 2024, aligning with the event timeline, and hosted via Active24.

L

Ljubljanske mlekarne

l-m.si

45

Ljubljanske mlekarne is a leading Slovenian dairy company specializing in the production and wholesale of milk and dairy products. Established in 2007, it maintains strong ties with over 2000 local farms, ensuring product traceability and quality. The company operates a professional website built on WordPress, featuring multiple product brands and comprehensive company information. The technical infrastructure includes modern JavaScript libraries and analytics tools, with hosting supported by Google Cloud DNS services. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie banners and policies. Overall, the website reflects a mature digital presence with good content quality and user experience.

P

Podjetniski portal

podjetniski-portal.si

9

Podjetniški portal is a Slovenian business information website targeting potential entrepreneurs, beginner entrepreneurs, and growing companies. It serves as a centralized resource for business-related information and guidance in Slovenia. The domain is well-established since 2006 and is registered through a local registrar, indicating a stable and legitimate online presence. The website uses modern marketing and analytics technologies such as Google Tag Manager, Google Analytics, LinkedIn Insight, and MailerLite, reflecting a moderate level of digital maturity. However, it lacks explicit privacy and cookie policies, which impacts its compliance posture. Security-wise, the site uses HTTPS and reCAPTCHA for form protection but does not implement visible security headers, which could be improved to enhance security. Overall, the website is professional and relevant to its target audience but should address privacy compliance and security best practices to strengthen trust and regulatory adherence.

L

Ljudska univerza Murska Sobota

tkpomurje.si

46

The website tkpomurje.si represents a regional educational project named 'Projekt Temeljne kompetence 2023-2029' focused on foundational competencies in the Pomurje region of Slovenia. It offers various educational programs including computer courses, language courses, and professional exam preparation, supported by EU co-funding. The site is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and maintainable technical infrastructure. Hosting is provided by a reputable Slovenian provider NEOSERV.si. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. The site lacks explicit incident response and vulnerability disclosure information. Overall, the website is professional, trustworthy, and well-suited for its educational mission.

E

EBONITETE.SI

ebonitete.si

44

EBONITETE.SI is a Slovenian business credit rating agency established in 2012, offering creditworthiness evaluations and financial reliability information for companies. Positioned as the first credit rating agency in Slovenia, it targets businesses seeking reliable partner evaluations. The website is built on WordPress with Elementor, integrating modern technologies such as Google Tag Manager and Microsoft Clarity for analytics and marketing. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS and security headers implemented, but lacks publicly disclosed security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the site is legitimate and professionally maintained but would benefit from enhanced transparency and compliance documentation.

M

MDS Display

mdsdisplays.com

47

MDSdisplays.com is a professional website representing MDS Display, a Swiss-based company specializing in LED display solutions for various applications. The company offers a wide range of products including LED wall displays, hologram displays, LED posters, shelf displays, and innovative transparent LED films. With over 16 years of experience, MDS Display positions itself as a reliable supplier focused on quality, energy efficiency, and environmental protection. The website targets businesses and organizations seeking customized LED display solutions, providing multimedia content and downloadable catalogs to support customer engagement. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by Hostpoint AG, as inferred from the DNS nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, and no explicit security or incident response policies are published. The site does not expose sensitive data and uses a honeypot plugin to protect forms. Overall, the security posture is moderate but could be improved with additional headers and compliance measures. The domain registration is transparent and consistent with the business location and claims, though the domain age (registered in 2020) is younger than the company's stated experience, suggesting a possible rebranding or domain migration. No WAF or blocking mechanisms are detected, and the content is fully accessible. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

Pomursko društvo za kakovost is a well-established Slovenian non-profit organization founded in 1993, dedicated to promoting quality management principles through education, consulting, and annual conferences. The organization targets professionals and educational institutions interested in quality assurance and management systems. Their website reflects a consistent brand and provides clear contact information and event details, supporting their role as a regional quality association. Technically, the website uses common JavaScript libraries such as jQuery and Modernizr, with a custom or unknown CMS. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional with no signs of malicious content or blocking mechanisms. The domain age and WHOIS data align well with the organization's history, supporting legitimacy. However, improvements in security policies, vulnerability disclosure, and analytics transparency would enhance compliance and trust. The risk level is low, but strategic security enhancements and clearer privacy documentation are recommended to maintain and improve stakeholder confidence.

S

Slovenski podjetniški sklad

podjetniskisklad.si

54

Slovenski podjetniški sklad is a Slovenian government-related institution dedicated to supporting entrepreneurship, startups, and innovation through financial incentives, development partnerships, and promotional activities. The website serves as an information hub for entrepreneurs seeking funding and support programs. The organization holds a strong market position as a key national player in fostering business growth and innovation in Slovenia. Technically, the website is built on WordPress with a modern theme and multiple plugins enhancing user experience and functionality. It employs HTTPS and standard security headers, with a cookie consent mechanism ensuring GDPR compliance. However, it lacks explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, targeting Slovenian entrepreneurs and startups.

F

flyo.cloud - flyo.cloud

flyo.cloud

64

flyo.cloud is a technology-focused SaaS platform aimed at revolutionizing content workflows, targeting content creators and teams. The website presents a professional login page with modern design elements and uses technologies such as Vue.js, Font Awesome, and Google reCAPTCHA to enhance user experience and security. The domain is registered since 2021 and uses Cloudflare for DNS and hosting, indicating a reliable technical infrastructure. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS and bot protection but lacks security headers and published security policies. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security transparency.

G

Gibraltaz

gibraltaz.fr

10

Gibraltaz is a French technology company founded in 2020, specializing in custom digital business solutions and software services primarily serving enterprises, associations, and territorial organizations in the Grand Est region and Luxembourg. The company offers a broad range of services including consulting, software development, UX/UI design, maintenance, and digital transformation support. They are recognized partners of regional industry initiatives and have won awards for innovation. Technically, the website is built on WordPress with modern plugins and frameworks, hosted by OVH, and uses HTTPS with some security best practices but lacks explicit security headers and formal policies. Contact is primarily via email and web forms, with social media presence on LinkedIn and Facebook enhancing credibility. Privacy and cookie policies are missing, representing compliance gaps. Overall, the website is professional, content-rich, and trustworthy, with moderate technical and security maturity.

B

Bundesverband des Elektro-Großhandels (VEG) e.V.

veg.de

45

The Bundesverband des Elektro-Großhandels (VEG) e.V. is a professional association representing the electrical wholesale industry in Germany. It serves as a central body for industry representation, education, and information exchange, with a membership base of 58 companies and a significant workforce. The website reflects a well-established organization with clear business focus and industry partnerships. Technically, the site is built on WordPress with Elementor, using modern web technologies and hosted by a reputable German provider. The site is mobile-optimized and presents content professionally, though some privacy compliance aspects like cookie consent are missing. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with security headers and incident response information. Overall, the website is trustworthy and serves its target audience effectively.

V

Ville de Vandœuvre

vandoeuvre.net

52

The website www.vandoeuvre.fr serves as the official digital presence of the city of Vandœuvre in France, providing residents and visitors with access to city news, event agendas, and a variety of public services including online administrative procedures. The site is positioned as a municipal government portal with a medium-sized audience primarily localized to the city and surrounding region. The content is well-structured, professionally presented, and consistent with official city branding, targeting a general audience with information relevant to local governance and community engagement. Technically, the site is built on WordPress CMS, utilizing common plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The technology stack includes modern JavaScript libraries and UI frameworks, ensuring a good user experience with mobile responsiveness and moderate performance. However, some accessibility features could be improved, and security headers are not explicitly detected in the provided data. From a security standpoint, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism, reflecting awareness of privacy regulations. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. However, the absence of a published privacy policy, terms of service, and security incident contact information represents compliance and transparency gaps. The WHOIS data for the domain is unavailable, which reduces trust signals but may be due to AFNIC's query restrictions or privacy protections. Overall, the website demonstrates a solid foundation for municipal digital services with good content quality and technical implementation. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance trust and compliance. The risk profile is moderate with no immediate critical issues detected.

D

e-Documenta Pannonica – Čezmejna baza podatkov o kulturni dediščini izbranih 120 krajev na čezmejnem slovensko-madžarskem območju – Prekmurja v Sloveniji in Železne županije na Madžarskem

documenta-pannonica.eu

10

The website www.documenta-pannonica.si serves as a comprehensive cross-border cultural heritage database focusing on 120 selected locations in the Slovenian-Hungarian border region. It provides detailed archival, immovable and intangible cultural heritage data, profiles of notable personalities, and audio-visual materials. The platform targets researchers, cultural enthusiasts, and local communities interested in the preservation and study of regional heritage. Technically, the site is built on WordPress with multilingual support via WPML, uses modern JavaScript libraries such as Leaflet for interactive maps, and integrates Google Analytics for visitor tracking. Performance optimizations like WP Rocket are employed, and the site is hosted by a Slovenian provider consistent with its regional focus. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. Overall, the site is professionally designed with good content quality and navigation, though it would benefit from enhanced privacy compliance and clearer contact information. The domain registration data aligns well with the website's purpose and origin, supporting its legitimacy.

S

SOGO

pluginsmarket.com

60

Sogo WordPress Plugins Market is a small technology business specializing in the development and sale of WordPress plugins. The website offers a range of plugins including calendar widgets, author recent posts, accessibility tools, and premium support services. The target audience primarily consists of WordPress site owners and developers seeking specialized plugin solutions. The business operates an e-commerce model leveraging the Easy Digital Downloads platform for sales and distribution. The domain age and registration details align well with the business history, supporting legitimacy and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several third-party integrations such as Google Analytics, Google reCAPTCHA, and Tawk.to live chat. The site demonstrates good mobile optimization and accessibility features, including a dedicated accessibility plugin and UI controls. Performance is moderate with room for improvement in SEO and technical optimization. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks explicit security headers and DNSSEC. There is no published security policy or incident response information, and no vulnerability disclosure mechanism is present. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and policy disclosures to strengthen trust and security posture.

Gorivo.com operates as a regional ride-sharing platform primarily serving Croatia and neighboring countries. It facilitates peer-to-peer transportation by allowing users to offer and request rides, focusing on routes within Croatia and nearby European nations. The platform has been active since 2003, indicating a mature presence in its niche market. The website's business model centers on connecting drivers and passengers, providing a cost-effective and community-driven transportation alternative. Its market position is niche but stable, targeting individuals seeking carpooling options in the region. Technically, the website is built on ASP.NET WebForms with supporting libraries such as jQuery and Bootstrap, reflecting a legacy but functional technology stack. The site includes standard web fonts, UI components, and Google Adsense for monetization. Performance and mobile optimization are basic, with room for modernization. The site employs cookie consent mechanisms and basic privacy compliance features, though lacks advanced SEO and accessibility optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be a gap in compliance and trust. Advertising practices involve multiple ad networks and tracking vendors, indicating moderate user tracking. The overall security posture is average, with recommendations to enhance headers, enable DNSSEC, and publish security policies. Overall, Gorivo.com presents a functional but basic digital presence with moderate trustworthiness and compliance. Strategic improvements in security, privacy transparency, and technical modernization would enhance its risk profile and user confidence.

C

Coop Eesti

coop.ee

67

Coop Eesti is the oldest and largest retail cooperative group in Estonia, operating approximately 330 stores with around 6000 employees and serving about 70,000 client-owners. The website reflects a mature retail business with a cooperative model focused on Estonian consumers. Technically, the site is built on Drupal 10, integrating modern analytics and advertising tools such as Google Analytics, Hotjar, and Adform, with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, secure, and compliant, supporting Coop Eesti's market position as a trusted retail cooperative.

May First Movement Technology is a US-based non-profit cooperative focused on providing technology services and hosting to social movements and activists primarily in the US and Mexico. The organization emphasizes democratic control, data protection, and movement-building through technology. Their website reflects a well-structured, bilingual platform offering member services such as email hosting, web hosting, and collaborative tools. Technically, the site uses modern frameworks like Bootstrap and Hugo, with integration of Mastodon social feeds, indicating a moderate level of digital maturity. Security practices include encrypted disk hosting and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Overall, the site is professional, trustworthy, and content-rich, but could improve privacy compliance and security transparency.

K

Kuratorium Deutsche Altershilfe

einzelhelfer.de

46

The website einzelhelfer.de is a German-language informational platform dedicated to neighborhood help (Nachbarschaftshilfe) for care-dependent individuals, primarily funded and supported by the German Federal Ministry of Health and implemented by the Kuratorium Deutsche Altershilfe. It serves as a resource hub for recognized neighborhood help programs in several German federal states, aiming to support elderly and care-dependent people to live independently at home. The project was active from 2017 to 2020, and the website remains online as an archive and informational resource. Technically, the site is built on WordPress, utilizing common plugins such as SiteOrigin Panels, Toolset Blocks, and accessibility enhancements. It is hosted on Strato servers in Germany, uses HTTPS with a good SSL configuration, and includes accessibility features. The site performs moderately well with good mobile optimization and SEO practices. However, it lacks some modern security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses an accessibility plugin and Jetpack Stats for minimal user tracking. No critical vulnerabilities or security incidents are evident. Privacy compliance is partial, with a privacy policy page present but no cookie consent banner. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is a trustworthy, government-backed informational resource with good content quality and technical implementation. Strategic improvements include adding cookie consent, security headers, and more explicit contact and incident response information to enhance compliance and trust.

L

Lesoochranárske zoskupenie VLK

abies.sk

45

Abies.sk is an e-commerce website operated by Lesoochranárske zoskupenie VLK, a Slovak environmental organization focused on publishing and distributing ecological literature and related merchandise. The website offers a catalog of books, DVDs, CDs, and promotional goods centered on deep ecology and forest conservation. The business operates a niche publishing model targeting environmentally conscious readers and activists. Technically, the site uses the CubeCart CMS platform with Foundation CSS and jQuery libraries, hosted likely by Websupport, and benefits from DNSSEC and HTTPS security. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with encrypted connections and DNSSEC but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are visible, relying on contact forms for communication. Overall, the website is trustworthy and professionally maintained but could improve privacy compliance and security transparency.

Focus Nerez is a specialized professional magazine dedicated to stainless and corrosion-resistant steels, targeting industry professionals and businesses in the manufacturing sector. The website provides news, technical articles, e-paper subscriptions, and advertising opportunities, positioning itself as a niche media outlet within the Czech Republic and neighboring regions. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. However, some technical improvements are needed, particularly in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure appear professional and trustworthy. Overall, the site demonstrates a moderate level of digital maturity with room for security and compliance enhancements.

Antero & Ca SA is a well-established Portuguese steel products company with over 90 years of history, operating as a steel service center and distributor. It is part of the Hiemesa Group, a recognized entity in the Iberian steel market. The company offers a wide range of steel products and industrial supplies, targeting industrial clients, construction companies, locksmiths, and equipment industries. The website reflects a professional and comprehensive digital presence with detailed product information, multiple contact points, and integration with the parent group's ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and basic form protections but lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with clear privacy and cookie policies, though no explicit cookie consent mechanism is present. The absence of WHOIS domain registration data is a notable concern, slightly reducing trustworthiness from a domain legitimacy perspective.

PROHELP SERVICES, s.r.o. is a Czech-based company specializing in communication solutions across various sectors including office environments, retail, industrial settings, security forces, and marine applications. The company offers a range of products such as telephones, radios, headsets, voice communicators, intercoms, and safety equipment, complemented by services like web design, marketing, and support. Their market position is that of a niche specialist providing tailored communication solutions to business clients. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the website is built on WordPress, leveraging modern plugins for SEO, GDPR compliance, and customer support. It uses common web technologies such as jQuery and Google Maps API, and implements HTTPS with good SSL configuration. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, explicit security policies, incident response plans, and vulnerability disclosure information are not present. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate. Overall, the website presents a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and WHOIS data verification are recommended to enhance trust and compliance.

S

Sdružení hasičů Čech, Moravy a Slezska (SH ČMS)

vzdelavani-dh.cz

39

The website www.vzdelavani-dh.cz serves as an e-learning platform dedicated to the education of voluntary firefighters affiliated with the Sdružení hasičů Čech, Moravy a Slezska (SH ČMS) in the Czech Republic. It offers multimedia courses, interactive tests, and performance tracking to facilitate knowledge acquisition and verification. The platform targets members of SH ČMS and aims to provide an accessible and intuitive online learning experience. The website branding and content align well with the stated mission, although no detailed company founding or registration data is provided. From a technical perspective, the site employs common web technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking user interactions. The design is responsive and user-friendly, with clear navigation and relevant content. However, the absence of detected security headers and privacy policies indicates room for improvement in security and compliance maturity. The WHOIS data is unavailable, which limits the ability to verify domain legitimacy and age, impacting trustworthiness assessments. Security posture is moderate; HTTPS is assumed but not explicitly confirmed in the data. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The site lacks privacy and cookie policies, which is a compliance gap under GDPR. No contact information for security incidents or data protection officers is provided. Overall, the site appears safe and professional but would benefit from enhanced security controls and transparency. The overall risk is moderate with no immediate red flags, but the lack of WHOIS data and privacy compliance measures suggest the need for strategic improvements to bolster trust and regulatory adherence.

K

Konplast

konplast.hr

50

Konplast is a Croatian IT company specializing in the development, implementation, and support of business software solutions tailored for small, medium, and large enterprises across various sectors. With over 33 years of experience, the company offers a range of services including remote support, AI-powered virtual assistance for fiscalization and software usage, fintech services, and web shop development. The website reflects a mature digital presence built on Joomla CMS with modern frameworks and libraries, providing a professional and user-friendly experience. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Overall, Konplast demonstrates strong business credibility and technical maturity, positioning itself as a trusted IT solutions provider in Croatia.

C

COMPACT s.r.o.

compactsro.sk

50

COMPACT s.r.o. is a Slovakian company specializing in electronic security solutions for businesses and households, including security camera systems, access control, and attendance systems. The company positions itself as the exclusive distributor of Shopguard technologies in Slovakia, offering comprehensive services from consulting to installation and maintenance. The website is professionally designed, mobile-optimized, and provides clear contact and company information, supporting its credibility in the local market. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Analytics and Smartlook for user behavior tracking, and implements GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and anonymized analytics but lacks advanced HTTP security headers and explicit security policies. Overall, the site is trustworthy and well-maintained with room for improvement in security transparency and incident response readiness.

R

Reuzenpanda

reuzenpanda.nl

57

Reuzenpanda is a small retail business operating a website built on WordPress using the Elementor page builder. The site presents a professional and consistent design with good mobile optimization and user experience. The business appears to target a general audience in the Netherlands, offering products or services typical of a retail ecommerce model. Technically, the site uses modern frontend libraries such as Swiper.js and Font Awesome, but lacks advanced analytics or marketing tools. Security posture is basic with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.

L

LIPEX PLUS spol. s r.o.

hondacl.cz

43

Honda Česká Lípa, operated by LIPEX PLUS spol. s r.o., is a small-sized authorized dealer and service provider specializing in Honda vehicles and garden machinery in the Czech Republic. The company offers a comprehensive range of automotive services including sales of new and used cars, authorized repairs, tire services, emission testing, and garden equipment sales. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, positioning the company as a trusted local business with over 20 years of experience. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. However, the absence of detected security headers and privacy policies indicates room for improvement in security and compliance. The site is accessible without any WAF or blocking mechanisms, but the lack of WHOIS data reduces domain trustworthiness and raises questions about domain registration transparency. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but the missing privacy and cookie policies and lack of incident response information highlight compliance gaps, particularly with GDPR. The use of Google Analytics suggests moderate user tracking, but without clear privacy disclosures. Overall, the security posture is moderate but could be enhanced with standard best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and verify domain registration details to improve trust and compliance. Enhancing incident response readiness and communicating data protection officer contacts would further strengthen their security culture and customer confidence.

K

Karki s.r.o.

indickadiyalo.cz

44

Diyalo Restaurant is a small hospitality business specializing in authentic Indian and Nepalese cuisine located in Česká Lípa, Czech Republic. The company, legally registered as Karki s.r.o., was founded in 2023 and has quickly established a strong local presence, supported by excellent customer reviews and recognition from Restaurant Guru. The website provides comprehensive information about the restaurant's offerings, including dine-in, online ordering through multiple partners, and event hosting services. The digital infrastructure is built on standard web technologies with a focus on responsive design and user experience, though it lacks advanced security headers and privacy compliance documentation. Security posture is moderate with HTTPS usage but could be improved with additional headers and policies. Overall, the website is professional and trustworthy but should address privacy and security policy gaps to enhance compliance and user trust.

I

Ing. Zuzana Balková EKO-IN®

eko-in.sk

47

EKO IN, operated by Ing. Zuzana Balková, is a Slovak-based environmental consultancy and training provider specializing in legislative compliance, audits, and support related to environmental and waste management laws. The website presents a professional and focused business offering services primarily to Slovak businesses and individuals seeking expertise in environmental legislation. The site is well-structured with clear navigation and modern frontend technologies, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, security headers, and analytics transparency, which impacts its overall security and compliance posture. No blocking or WAF mechanisms were detected, indicating full accessibility. Contact information is clearly provided, but no phone numbers or social media links are present.

F

Fundacja Academic Partners

thehacksummit.com

63

The Hack Summit is a prominent cybersecurity conference in Poland, organized by Fundacja Academic Partners. It serves as a major gathering for cybersecurity professionals, government officials, and industry experts, offering a mix of online and onsite events with extensive educational content and networking opportunities. The conference is well-established since 2020 and attracts over 2,000 participants annually, positioning itself as a key event in the Polish cybersecurity landscape. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, and multiple tracking pixels, hosted with reputable providers and secured with HTTPS. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy organization with a clear business model focused on event hosting and community engagement.

C

Cornelissen aannemingsbedrijf

cornelissenbouw.nl

43

Cornelissen aannemingsbedrijf is a Dutch construction contracting company specializing in managing both large and small building projects with an emphasis on craftsmanship and customer involvement. The company targets individuals and businesses in the Netherlands seeking reliable construction services. The website is built on WordPress, utilizing Yoast SEO for search engine optimization and Google Analytics for visitor tracking. The technical infrastructure is modern but lacks some advanced security headers and privacy compliance features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to align with best practices and regulatory requirements.

A

Arbeitskreis für Jugendliteratur e.V.

jugendliteratur.org

58

Arbeitskreis für Jugendliteratur e.V. is a German non-profit organization dedicated to promoting youth literature through awards such as the Deutscher Jugendliteraturpreis, publications, and various cultural activities. The website serves as an information hub for these initiatives, targeting educators, authors, publishers, and youth literature enthusiasts. The organization appears established within its niche, offering specialized services and community engagement opportunities. Technically, the website employs modern JavaScript libraries including Matomo for analytics and a cookie management system that respects user consent, particularly for marketing cookies. The site is mobile-optimized with good navigation and SEO practices, although no specific CMS or hosting provider was identified. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to manage tracking. However, no explicit security headers were detected, and there is no public incident response or vulnerability disclosure information. The absence of WHOIS data limits domain trust verification, but the website content and structure suggest legitimacy. No adult or inappropriate content is present, making the site safe for general audiences. Overall, the site scores well in content quality, privacy compliance, and business credibility but could improve in security best practices and transparency. Strategic recommendations include implementing security headers, publishing incident response details, and enhancing accessibility features to strengthen trust and compliance.

I

IICA - Instituto Interamericano de Cooperación para la Agricultura

iica.int

65

The Instituto Interamericano de Cooperación para la Agricultura (IICA) is a well-established international organization focused on agricultural cooperation and development in the Americas. The website presents a professional and consistent brand image, targeting governments, agricultural institutions, and rural communities. It offers cooperation programs, strategic alliances, and technical assistance to promote innovation and sustainable agriculture. The domain age and WHOIS data align with the organization's history, supporting its legitimacy. Technically, the website is built on WordPress with Elementor and optimized for performance using WP Rocket and Cloudflare services. It employs modern web technologies and provides a good user experience with mobile optimization and clear navigation. However, accessibility features are basic, and explicit privacy and cookie policies are not evident in the provided content. From a security perspective, the site uses HTTPS and benefits from Cloudflare DNS, but lacks explicit security headers and visible incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency and compliance. The overall risk is low, with recommendations to enhance privacy disclosures, implement security headers, and provide clear contact information for security incidents to strengthen trust and compliance.

M

Discover Top OnlyFans Telegram Channels | Free Content Previews | mayndrive.fr

mayndrive.fr

6

The website mayndrive.fr operates as a niche content aggregator focusing on adult entertainment, specifically promoting and linking to OnlyFans Telegram channels with free preview content. The business model revolves around aggregating and providing access to various Telegram groups, many of which contain explicit or leaked adult content. The site targets an adults-only audience and positions itself as a resource for discovering popular adult content groups on messaging platforms. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS. The design and content quality are basic, with moderate mobile optimization and limited SEO features. Security posture is weak, lacking essential security headers and privacy compliance mechanisms. The domain is very new with minimal WHOIS data, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but low security and compliance readiness.

ICTUS o.p.s. is a Czech non-profit organization established in 2007, dedicated to supporting individuals recovering from stroke through rehabilitation and therapeutic stays in the Krkonoše region. The website communicates the organization's mission clearly and provides information about upcoming therapeutic stay dates and services. The target audience primarily includes stroke survivors and their families seeking rehabilitation support. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons, with a simple slideshow and basic mobile optimization. However, it lacks advanced frameworks or CMS platforms and does not implement modern security headers or privacy policies. Security posture is moderate with HTTPS assumed but no explicit security headers or privacy compliance mechanisms in place. No forms or analytics scripts are present, reducing data exposure risks but also limiting user engagement tracking. Overall, the website is functional and professional but could benefit from enhanced security and compliance features.

N

Nadační fond Čas je mozek

nfcasjemozek.cz

42

Nadační fond Čas je mozek is a Czech non-profit organization dedicated to stroke awareness, education, and patient rehabilitation support. The foundation educates the public on stroke symptoms and the importance of timely emergency response, organizes fundraising events, and provides financial aid to stroke survivors. The website reflects a focused mission with clear content and active social media engagement. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Analytics, with a cookie consent mechanism implemented. However, the absence of a privacy policy and security headers indicates room for improvement in privacy and security compliance. The WHOIS data is missing, which limits domain trust verification, but the website content and contact information support legitimacy. Overall, the site is well-structured and professional, serving a clear non-profit healthcare mission.

N

Nadační fond Čas je mozek

casjemozek.cz

44

The website www.casjemozek.cz represents a Czech non-profit initiative named 'Čas je mozek' focused on educating the public about stroke symptoms, prevention, and treatment. Founded in 2015, it is affiliated with reputable Czech medical societies, providing authoritative content and organizing charitable events. The site offers extensive educational resources, patient stories, and news updates, targeting the general public and healthcare professionals in the Czech Republic. Technically, the site uses modern web technologies including JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly reduce its trustworthiness. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response contacts. Overall, the site is a credible and valuable resource for stroke awareness but would benefit from enhanced transparency and security best practices.

I

investpgz.hr is under construction

investpgz.hr

40

The website investpgz.hr is currently under construction and displays only a placeholder page indicating ongoing work. The business behind the domain appears to be newly established in 2022, based in Croatia, but no detailed business description, services, or contact information is provided. The site uses WordPress with an under construction plugin and includes basic styling libraries such as Bootstrap and Font Awesome. The technical infrastructure is minimal, with no advanced frameworks or analytics detected. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. No vulnerabilities or malicious content were detected, but the lack of content and security best practices limits trustworthiness. Overall, the site is not yet operational and provides limited information for users or stakeholders.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

The European Theater Technicians Education (ETTE) website represents a European non-profit educational project coordinated by Deutsche Theatertechnische Gesellschaft (DTHG) e.V. The project aims to improve safety competencies for theatre technicians and stage professionals across Europe, leveraging ESCO competences and the European Safety Passport. The site provides multilingual educational content and openly licensed materials, supported by Erasmus+ funding and multiple European partners. The target audience includes theatre technicians, stage hands, and event professionals seeking safety training. Technically, the website is built using RapidWeaver CMS with Foundation framework and includes standard web technologies such as jQuery and Google Analytics. While the site is functional and professionally presented, it lacks modern security headers, updated libraries, and explicit privacy or cookie policies. No contact information or incident response channels are provided, which limits user trust and compliance. Overall, the site is safe, educational, and trustworthy but would benefit from improved security practices and privacy compliance.

E

Eurener

eurener.com

47

Eurener is a Spanish photovoltaic module manufacturer specializing in high-quality, durable solar panels primarily targeting the European residential and commercial markets. The company emphasizes sustainability, advanced solar technologies, and premium design, supported by industry certifications and awards such as the TOP Brand seal and Ecovadis platinum medal. The website is built on WordPress with Elementor, featuring modern web technologies and multilingual support, providing a professional user experience with good navigation and mobile optimization. Security posture is adequate with HTTPS and domain registration protections, but lacks advanced DNS security and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website reflects a credible and established business with room for improvement in privacy and security transparency.

The website tavokraujas.lt represents the Vilniaus Universiteto Ligoninės Santaros Klinikų Kraujo centras, a major Lithuanian healthcare institution specializing in blood donation and transfusion services. The site provides comprehensive information about blood donation, donor registration, donor eligibility, and blood donation events. It serves as an important resource for potential donors and healthcare professionals in Lithuania. The business is well-positioned as a trusted healthcare provider with ISO 9001:2015 certification and affiliation with a leading university hospital. Technically, the website uses a variety of established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. The site is mobile optimized and features multiple interactive forms for donor registration and event organization. However, there is no evidence of a CMS, and hosting details are not disclosed. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitpag.net

35

Visitpag.net is an established Croatian online accommodation platform specializing in private rentals on the island of Pag, particularly in Novalja and surrounding areas. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct booking contact forms, targeting tourists seeking affordable and direct accommodation options. The business operates with a mature domain registered since 2014 and maintains a consistent brand presence with a focus on local hospitality services. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics, providing a moderately optimized user experience including mobile responsiveness. Security posture is basic with HTTPS implied but lacking advanced security headers and best practices, and privacy compliance is minimal with no cookie consent mechanisms despite GDPR applicability. Overall, the site is functional and credible but would benefit from enhanced security and privacy features to improve trust and compliance.

R

Regional Development Agency DUNEA LLC.

dubrovnik-neretva.eu

42

The website represents the official Representation Office of the Dubrovnik-Neretva Region in Brussels, serving as a liaison and promotional platform for the region within the European Union. It highlights the Regional Development Agency DUNEA, which coordinates sustainable development and project management for the region. The site targets regional stakeholders, investors, EU institutions, and the general public interested in regional development. Technically, the site is built on Joomla CMS with a modern but moderate tech stack including Bootstrap, jQuery, and Revolution Slider, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but would benefit from enhanced privacy and security measures.

V

Vodovod i kanalizacija d.o.o.

vik-ka.hr

55

Vodovod i kanalizacija d.o.o. Karlovac is a well-established regional utility company founded in 2002, providing water supply and sewage management services primarily in Karlovac and surrounding areas in Croatia. The company emphasizes quality and environmental responsibility, as evidenced by its ISO 9001 and ISO 14001 certifications. Their website reflects a professional and user-focused approach, offering comprehensive information, customer support, and transparency through detailed policies and contact channels. Technically, the site uses Joomla CMS with modern web technologies and is hosted behind Cloudflare, ensuring good performance and security. The presence of cookie consent and privacy policies indicates compliance with GDPR regulations. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website and business demonstrate high legitimacy and trustworthiness with a solid digital presence.

The website www.prekmurjevsrcu.si is a small regional cultural site dedicated to the Prekmurje Slovene community, emphasizing cultural unity with the mother nation. The site is modest in content and design, primarily serving informational and community awareness purposes. It does not appear to operate as a commercial business and lacks detailed business information or contact channels. Technically, the site uses common frontend libraries such as jQuery, Bootstrap, Font Awesome, Fancybox, and Owl Carousel, indicating a basic but functional technical infrastructure. The site is mobile responsive and moderately performant but lacks advanced SEO and accessibility features. Security posture is weak due to the absence of HTTPS enforcement information, security headers, and privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance. Overall, the site is safe with no adult or questionable content but requires significant improvements in security, privacy compliance, and business transparency to enhance credibility and user trust.