Security Directory

W

Wienerberger GmbH

creaton.de

65

Wienerberger GmbH operates the website creaton.de, positioning itself as an expert in steep roofs offering high-quality clay roof tiles and economical concrete roof tiles with extensive original and system accessories. The website targets both business customers and end consumers in the roofing and construction sectors, providing product information, tools, and e-commerce capabilities including PayPal payment integration. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript integrations such as Google Tag Manager and Cookiebot for analytics and consent management. The site is well-optimized for mobile and SEO, with good accessibility features and a professional design. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is robust, featuring a comprehensive privacy and cookie policy with GDPR adherence and user consent mechanisms. Overall, the website demonstrates a mature digital presence suitable for a large enterprise in the energy and construction sector.

R

Radicenter

radicenter.fi

62

Radicenter is a small technology company specializing in web hosting and domain registration services primarily targeting customers in Finland and Estonia. The company offers a range of hosting packages featuring cPanel management, malware scanning, automatic backups, and website acceleration tools. Their market position is regional with a focus on providing reliable and developer-friendly hosting solutions. Technically, the website is built on WordPress with modern plugins and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and malware scanning, though additional security headers and policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a small hosting provider.

R

Radicenter OÜ

radicenter.ee

62

Radicenter OÜ is a small Estonian technology company specializing in web hosting and domain registration services. The company targets businesses and individuals primarily in Estonia and neighboring regions, offering a range of hosting packages with modern features such as cPanel control panels, SSD storage, and malware scanning. The website is professionally designed using WordPress CMS with a modern tech stack including Bootstrap and jQuery, and it supports multiple languages to cater to regional audiences. The presence of a cookie consent mechanism and comprehensive privacy and terms of service documents indicates good compliance with GDPR regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although the absence of security headers suggests room for improvement. Overall, Radicenter presents a trustworthy and professional online presence with clear contact channels and customer support integration via live chat.

R

Radicenter

radicenter.eu

63

Radicenter is a small Estonian technology company specializing in web hosting and domain registration services. The company offers a range of hosting packages featuring cPanel management, malware scanning, and website optimization tools, targeting individuals and businesses primarily in Estonia and neighboring regions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information including privacy and terms of service documents. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses popular plugins like Contact Form 7 and WPBakery Page Builder. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though security headers could be improved. No WHOIS registrant data is publicly available due to EURid privacy policies, but the website's professionalism and compliance suggest legitimacy. Overall, Radicenter demonstrates a mature digital presence with good privacy compliance and business credibility.

G

Greaton OÜ

greaton.ee

46

Greaton OÜ is an Estonian technology service provider specializing in the development of user-friendly websites, e-commerce platforms, mobile applications, and payment solutions tailored to business needs. The company demonstrates a strong market position with a diverse portfolio of clients across various sectors, emphasizing custom software and web solutions. Their website reflects a professional and modern digital presence, leveraging technologies such as Vue.js and Laravel, and supporting mobile platforms including Android, iOS, and Smart TV. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the business appears legitimate and credible, with consistent WHOIS data and a transparent client showcase.

Aura kohvik is a small local café and catering service based in Tartu, Estonia, operating since 2010. The business offers daily meals, snacks, and catering for events such as birthdays and corporate gatherings. The website is built on WordPress using common plugins like Revolution Slider and Contact Form 7, hosted by Radicenter OÜ. The site is well structured with good SEO metadata and clear contact information, targeting local customers and event organizers. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. No privacy or cookie policies are present, which is a compliance gap. Overall, the website is functional and professional but could improve in privacy and security best practices.

INFO WEB s.r.o. is a Czech-based software company founded in 2015 specializing in custom web and mobile application development, e-commerce solutions, online marketing, and IoT projects. The company targets businesses seeking tailored digital solutions and offers additional services such as product photography and 360-degree imaging. Their market position is that of a reliable small enterprise with a focus on modern technologies and customer-centric service. Technically, the website employs a modern tech stack including Java, PHP, Angular, and various frameworks, hosted by REG-WEDOS. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is average with no visible security headers or explicit policies, and privacy compliance is limited by the absence of cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

H

HexaDesign s.r.o.

hexadesign.cz

50

HexaDesign s.r.o. is a Czech Republic-based small web design and development agency specializing in creating custom websites, visual identities, and advertising campaigns. The company emphasizes bespoke solutions tailored to client needs and has a portfolio showcasing diverse client projects. The website is professionally designed, mobile-optimized, and uses modern web technologies including HTML5, CSS3, PHP, and popular analytics tools such as Google Analytics, Hotjar, and Smartlook. Cookie consent and privacy policies are implemented in compliance with GDPR requirements. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, although the website content and client references partially mitigate these concerns. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed.

O

Ondřej Firla

ondrejfirla.eu

43

Ondřej Firla operates a professional web and graphic design business based in Olomouc, Czech Republic, with over 10 years of experience. The website showcases services including responsive web design, e-commerce solutions, custom CMS development, SEO optimization, and graphic design such as logos and corporate identity materials. The business targets local companies and individuals seeking quality digital and print design services. Technically, the site uses a custom CMS built on PHP with NETTE framework, JavaScript, and MySQL, hosted by WEDOS Internet, a.s. The site is mobile optimized and integrates Google Analytics and Google Tag Manager for tracking. Security posture is moderate with HTTPS enabled and reCAPTCHA on forms, but lacks important security headers and privacy compliance elements. No privacy or cookie policies are present, which is a compliance gap. The domain registration is consistent with the business history and shows no suspicious patterns. Overall, the site is professional and functional but could improve in security and privacy compliance.

MS Australia is a reputable Australian non-profit organization dedicated to accelerating research into Multiple Sclerosis (MS) with the goal of prevention, better treatments, and ultimately a cure. The organization serves a broad audience including people living with MS, their families, carers, researchers, and healthcare professionals. Their business model focuses on funding research projects, providing educational resources, and supporting clinical trials. The website reflects a strong market position as a leading MS research entity in Australia, supported by partnerships and a comprehensive digital presence. Technically, the website is built on WordPress with modern frameworks such as Elementor and integrates various analytics and tracking tools including Google Analytics and Facebook Pixel. The site demonstrates good performance, mobile optimization, and accessibility features. Structured data and SEO best practices are implemented, enhancing discoverability and user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses secure forms. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure or security.txt file was found. The WHOIS data is privacy protected, which is typical for non-profits, but limits direct verification of domain registration details. Overall, the security posture is good but could be improved with more transparency and formal policies. The overall risk assessment is low, with no signs of malicious activity or vulnerabilities. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing DNSSEC deployment. These steps would strengthen trust and compliance. The website quality is excellent, with professional design, clear navigation, and relevant content, making it a trustworthy resource for its audience.

F

Foire du Dauphiné

foire-dauphine.com

56

Foire du Dauphiné is a well-established regional event organizer hosting one of France's leading fairs in Romans-sur-Isère, Rhône-Alpes. The website presents comprehensive information about the event, including exhibitors, programming, ticketing, and a professional Club Pro membership offering. The site targets both the general public and professional exhibitors, providing a rich user experience with clear navigation and up-to-date content. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, analytics, and user interaction. Security posture is adequate with HTTPS and reCAPTCHA integration, though explicit security headers are not detected, and no visible security or incident response policies are published. The absence of WHOIS data for the domain reduces trust slightly, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site is a reliable digital presence for the event, with room for improvement in security transparency and compliance documentation.

L

Light Touch Studio

light-touch.fr

53

Light Touch Studio is a small creative agency based in Guadeloupe, France, specializing in graphic design, web development, and content strategy. With 15 years of experience, the company emphasizes collaborative and tailored communication solutions for brands seeking to enhance their visibility and identity. The website is professionally designed using WordPress and Elementor, showcasing a portfolio of client projects and clear contact options including a GDPR-compliant contact form. The technical infrastructure is modern and hosted by OVH, a reputable provider. Security posture is good with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the website reflects a trustworthy and credible business with a focus on quality creative services.

B

bookingkit

bookingkit.net

69

bookingkit is a mature, medium-sized SaaS company specializing in booking, marketing, and administration software for the European tours, activities, and attractions industry. The company positions itself as a market leader in Europe, offering a comprehensive platform that integrates booking generation, channel management, and centralized administration to simplify operations and increase sales for its customers. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a high level of digital maturity. The technical infrastructure leverages WordPress CMS with modern marketing and analytics tools such as Facebook Pixel, Hotjar, and HubSpot, ensuring robust data collection and user engagement capabilities. Security posture is strong with HTTPS, domain locking, and no visible vulnerabilities, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligned with GDPR requirements. Overall, bookingkit demonstrates a high level of business credibility and operational professionalism, making it a trustworthy platform in its niche.

I

Interessengemeinschaft Veranstaltungswirtschaft e. V.

igvw.org

49

The Interessengemeinschaft Veranstaltungswirtschaft e. V. (IGVW) is a non-profit association representing the event industry across Germany, Austria, and Switzerland. The organization focuses on setting industry standards, public representation, education, and research within the event sector. Their website is professionally designed, content-rich, and targets industry professionals and associations in the DACH region. The business model centers on collaboration among industry stakeholders to promote quality and compliance standards. Technically, the website is built on WordPress using a modern tech stack including plugins for event management, downloads, and SEO optimization. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and content suggest legitimacy. Overall, the site presents a low risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, maintaining plugin updates, and improving WHOIS transparency to boost trust further.

I

isdv e.V.

isdv.net

52

isdv e.V. is a professional association representing self-employed and freelance service providers in the event industry in Germany. The organization serves as a lobby and voice for various professions within the event sector, including technical, logistical, and creative roles. The website is well-structured, professionally designed, and provides comprehensive information about the association's mission, services, and news updates. Technically, the site is built on WordPress with Elementor, uses HTTPS, and integrates Google Analytics and Tag Manager for visitor tracking. Privacy and cookie policies are detailed and GDPR-compliant, with active consent mechanisms. However, no explicit security or incident response policies are publicly available, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site demonstrates a solid digital presence with room for improvement in security transparency and domain legitimacy verification.

I

IGORA-Genossenschaft für Aluminium-Recycling Schweiz

igora.ch

38

IGORA-Genossenschaft für Aluminium-Recycling Schweiz operates as a cooperative focused on the collection and recycling of aluminium packaging in Switzerland. The organization emphasizes environmental protection by promoting aluminium recycling, which significantly reduces energy consumption and greenhouse gas emissions compared to new aluminium production. The website positions IGORA as a key player in the Swiss aluminium recycling sector, targeting both consumers and businesses interested in sustainable waste management. Technically, the website is built on WordPress and integrates modern technologies such as Google reCAPTCHA for security, Google Maps for location services, and EmbedSocial for social media content integration. The site employs a professional cookie consent mechanism compliant with GDPR and Swiss data protection laws, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, supporting a good user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and manages user consent effectively. No critical vulnerabilities or suspicious activities were detected. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, IGORA's website reflects a trustworthy and professional organization with a solid security posture and compliance framework. Strategic enhancements in security documentation and accessibility could further strengthen its digital maturity and stakeholder trust.

C

Centar Velike Zvijeri

centar-velikezvijeri.eu

40

Centar Velike Zvijeri is a Croatian public institution visitor center dedicated to the education and conservation of large carnivores in the Gorski kotar region. The center operates under EU-funded projects and regional partnerships, providing educational services, research dissemination, and public engagement. The website is professionally designed using WordPress with modern plugins and offers bilingual content in Croatian and English. Technically, the site is well-structured, mobile-optimized, and integrates Google Tag Manager and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and some best practices, though it lacks explicit security policies and vulnerability disclosures. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience effectively.

B

Beli Visitor Centre

belivisitorcentre.eu

41

Beli Visitor Centre is a specialized non-profit organization focused on the conservation and rehabilitation of griffon vultures in Cres, Croatia. The center provides educational exhibits, workshops, volunteer programs, and operates a rehabilitation facility for these birds. It serves both local visitors and international nature enthusiasts, positioning itself as a key regional conservation hub. The website is professionally designed using WordPress, with good mobile optimization and accessibility features, reflecting a mature digital presence. Security measures include HTTPS and Google reCAPTCHA, though some improvements in security headers and privacy compliance are recommended. Overall, the site is trustworthy and well-aligned with its mission, with clear contact information and partner affiliations.

The website azlp.mk represents the official online presence of the Agency for Personal Data Protection in North Macedonia, a government regulatory body established around 2020. The agency's mission is to strengthen, promote, and protect personal data rights in compliance with national laws and GDPR. The site targets citizens, controllers, and officers with informational resources, guidelines, and services related to data protection. Technically, the site is built on WordPress using the Avada theme, enhanced with multilingual support and cookie consent management. The infrastructure is modern and secure, with HTTPS enforced and a comprehensive cookie consent mechanism implemented. Security posture is solid with no critical vulnerabilities detected, though additional HTTP security headers could improve defenses. Privacy compliance is strong, with clear GDPR-aligned policies and user consent controls. Overall, the site is professional, trustworthy, and well-positioned as a government resource. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

W

WPVIP Inc

wordpressvip.com

74

WordPress VIP is an enterprise-grade content platform specializing in WordPress hosting and content management solutions tailored for large organizations and enterprises. The company positions itself as a leading provider delivering speed, security, and scalability to meet the demands of enterprise clients. Their services include managed WordPress hosting, security enhancements, and flexible content publishing capabilities. The website reflects a mature digital presence with professional design, clear branding, and comprehensive content targeting enterprise customers. Technically, the site is built on WordPress CMS, enhanced with modern frameworks such as Bootstrap and JavaScript libraries including jQuery. It integrates multiple third-party services like HubSpot for forms and marketing automation, Google Tag Manager for analytics, and Vimeo for video content. The site is hosted on a robust infrastructure likely managed by WordPress VIP/Automattic, ensuring fast performance and mobile optimization. SEO and accessibility best practices are well implemented. From a security perspective, the website enforces HTTPS, employs Cloudflare Bot Management cookies, and implements a detailed cookie consent mechanism compliant with GDPR. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. The domain WHOIS data corroborates the legitimacy and long-standing operation of the business. Overall, WordPress VIP demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations. The risk profile is low, with recommendations focusing on enhancing DNS security via DNSSEC, publishing a security.txt file, and making incident response contacts more explicit.

U

Urząd Miasta Zielona Góra

zielonagora.pl

60

The website www.zielona-gora.pl is the official online portal for the City Office of Zielona Góra, Poland. It serves as a government information hub providing residents, visitors, and businesses with access to city authorities, departments, local districts, public services, cultural events, and tourism information. The site is positioned as a trusted municipal government resource with clear branding and official social media presence. The business model is public service oriented, focusing on transparency and accessibility for the local community. Technically, the website is built on WordPress using the Avada theme, incorporating common plugins such as Contact Form 7, Cookie Notice, and WP Accessibility Helper. The site demonstrates moderate performance and good mobile optimization, with accessibility features implemented to support diverse users. SEO is basic but functional, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and a dedicated security policy page. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic with a privacy policy present and GDPR considerations addressed. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a safe, legitimate government portal with a solid foundation but could benefit from enhanced security policies and technical hardening. The risk level is low, with recommendations focusing on improving security headers, incident response transparency, and privacy documentation to strengthen compliance and user trust.

M

Masteriyo

masteriyo.com

61

Masteriyo is a specialized WordPress LMS plugin provider focused on enabling users to create and sell online courses efficiently. The company positions itself as a leading solution in the WordPress LMS market, offering advanced features such as quizzes and an integrated order system. The website demonstrates a high level of professionalism with excellent content quality, SEO optimization, and mobile responsiveness. Technically, the site is built on WordPress with modern JavaScript libraries and uses Cloudflare DNS for domain management. Security posture is good with HTTPS enabled and domain transfer protection, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies. Overall, the site is trustworthy and well-maintained, with moderate tracking and marketing tools in use.

S

Schweizerische Gesellschaft für Ultraschall in der Medizin

sgum-ssum.ch

49

The Schweizerische Gesellschaft für Ultraschall in der Medizin (SGUM) is a Swiss non-profit medical society specializing in ultrasound diagnostics. It serves as an umbrella organization for medical professionals involved in ultrasound applications, offering certification, education, and professional development. The website reflects a well-established organization with a clear market position in the Swiss healthcare sector, supported by partnerships with European ultrasound societies. Technically, the site is built on WordPress with modern plugins and themes, providing a good user experience and multilingual support. Security posture is solid with HTTPS and no exposed sensitive data, though improvements can be made in security policy transparency and cookie consent. Overall, the site is professional, trustworthy, and well-maintained, supporting the organization's mission effectively.

T

ThemeGrill

themegrilldemos.com

48

ThemeGrill Demos is a comprehensive WordPress theme demo portal offering over 130 ready-to-import demos across multiple popular themes such as ColorMag, Spacious, Flash, eStore, and others. The platform targets WordPress users, developers, and businesses seeking quick and professional website setups. The technical infrastructure is based on WordPress with a rich ecosystem of plugins and page builders including Elementor, Gutenberg, and SiteOrigin, supported by modern web technologies and analytics tools like Google Tag Manager. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are not found, indicating a gap in compliance. Overall, the website is professional, well-structured, and trustworthy, but could improve in privacy compliance and security best practices.

Sekce Výživy a nutriční péče, z. s. is a Czech registered non-profit association dedicated to nutrition and nutritional care in healthcare, social care, and community settings. The organization provides educational seminars, workshops, and collaborates with other professional bodies to improve nutritional standards. The website is built on WordPress with common plugins and presents professional content targeting healthcare professionals and students. Technically, the site uses modern web technologies and is mobile optimized, but lacks some security headers and privacy compliance features. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and partnerships indicate legitimacy. Security posture is moderate with HTTPS enabled and CAPTCHA on forms, but improvements are recommended in security headers and privacy policies. Overall, the site is functional and professional but should address compliance and transparency gaps to enhance trust.

The website represents Kancelář Ombudsmana pro zdraví, a Czech non-profit organization providing free legal advice and support related to healthcare rights. Established in 2014, it has built a recognized presence in the Czech healthcare sector, offering services such as complaint handling, educational seminars, and legal internships. The organization targets patients, healthcare professionals, and legal students, aiming to improve awareness and protection of healthcare rights. Technically, the website is built on WordPress 4.9.28 with Gantry 5 framework and uses plugins like Smart Slider 3 and MonsterInsights for analytics. While HTTPS is enforced, the site uses outdated core software and libraries, lacks advanced security headers, and does not publish privacy or cookie policies, indicating moderate digital maturity. Security posture is moderate with enforced HTTPS but missing security headers and outdated software increasing risk. No incident response or security policy information is published. WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and business presence suggest legitimacy. Overall, the site is functional and informative but requires updates to software, security practices, and privacy compliance to improve trust and security posture.

D

Doktor PC Břeclav - Jan Daněk

doktorpc.cz

53

Doktor PC Břeclav - Jan Daněk is a small, local Czech IT service provider specializing in custom PC builds, IT device servicing, web development, and PPC campaign management. The company targets customers primarily in the Břeclav region, offering a comprehensive range of technology-related services with over 10 years of experience. The website reflects a professional and trustworthy business with positive customer testimonials and a strong local reputation. Technically, the website is built on WordPress using the Bricks Builder framework, enhanced with LiteSpeed caching and modern JavaScript libraries such as Swiper.js. Security measures include HTTPS enforcement and Cloudflare Turnstile captcha integration for form protection. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a good level of digital maturity. Security posture is solid with HTTPS and spam protection, though explicit security headers are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation and operational business. Overall, the website is safe, well-structured, and compliant with privacy regulations, making it a reliable digital presence for the business. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving transparency with direct contact details.

B

Blooberry Design

blooberrycreative.co.uk

45

Blooberry Creative is a small UK-based creative design agency specializing in branding, website design, marketing communications, and integrated campaigns. The company targets businesses seeking innovative and high-quality creative solutions, positioning itself as a professional and collaborative partner in the media sector. The website reflects a consistent brand identity and provides clear information about services and contact channels. Technically, the site is built on WordPress with modern JavaScript libraries and caching plugins, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and cookie consent compliance. Overall, the site is trustworthy and professionally maintained, with active social media presence and GDPR-aligned privacy policies.

E

European Society for Emergency Nursing

eusen.org

55

The European Society for Emergency Nursing (EuSEN) is a well-established non-profit professional society founded in 2012, focused on supporting emergency nursing professionals across Europe. The website serves as a hub for news, events, educational webinars, newsletters, and organizational information, targeting healthcare professionals in emergency nursing. The society maintains a consistent brand presence and active social media engagement, reinforcing its position in the healthcare non-profit sector. Technically, the website is built on WordPress CMS with a modern tech stack including Google Analytics, reCAPTCHA, and common plugins for forms and RSS aggregation. Hosting is provided by OVH sas, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with structured metadata and SEO best practices implemented. From a security perspective, the site uses HTTPS and domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy and cookie policies are absent, representing a compliance gap with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security hardening are advised to mitigate risks and align with best practices.

E

European Society of Gastroenterology and Endoscopy Nurses and Associates

esgena.org

56

The European Society of Gastroenterology and Endoscopy Nurses and Associates (ESGENA) is a well-established non-profit professional society focused on advancing gastroenterology and endoscopy nursing in Europe. The organization provides membership services, educational activities including webinars and training, events, and publications to its target audience of healthcare professionals. The website reflects a mature digital presence with a clear structure and relevant content tailored to its professional audience. Technically, the site is built on WordPress using the Genesis Framework and Business Pro theme, hosted by Alfahosting, and incorporates modern web technologies and analytics tools such as Google Analytics and Mailchimp. Security posture is good with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

E

European Operating Room Nurses Association (EORNA)

eorna.eu

54

The European Operating Room Nurses Association (EORNA) is a well-established non-profit professional association founded in 1980, serving perioperative nurses across Europe with 24 member associations. The website provides comprehensive information about the organization's mission, educational accreditation, events, and member services, positioning EORNA as a key player in the European healthcare nursing sector. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. Overall, the site reflects a credible and professional organization with a strong digital presence and active engagement through social media and events.

A

ACOVENE

acovene.org

46

ACOVENE is a small healthcare and lifestyle content website focused on providing educational articles and information related to medical topics, health, lifestyle, and learning. The website targets a general audience interested in healthcare improvements and lifestyle enhancements. It operates on a WordPress platform with a modern tech stack including Bootstrap and popular plugins such as Yoast SEO and Contact Form 7. The site demonstrates good SEO practices and mobile optimization, with clear navigation and consistent branding. Contact information including email, phone, and physical address is clearly presented, enhancing business credibility. Technically, the website is hosted with a registrar DomainPicking LLC and uses cloudns.net for DNS. It employs HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for improved security posture. The site uses Fathom Analytics for minimal user tracking and does not implement cookie consent mechanisms, indicating partial privacy compliance. No terms of service or security policies are published, and no incident response contacts or vulnerability disclosure mechanisms are found. Security-wise, the website is generally secure with no visible vulnerabilities or exposed sensitive data. However, improvements such as enabling DNSSEC, adding security headers, and publishing security policies would strengthen its security posture. The domain registration data is consistent and transparent, with no suspicious patterns, supporting the legitimacy of the website. Overall, ACOVENE presents a professional and trustworthy informational platform with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas will improve user trust and regulatory adherence.

D

Duran Lubricants & Chemicals GmbH

fosser.de

63

FOSSER is a premium German brand specializing in the production and distribution of high-quality lubricants and motor oils under the parent company Duran Lubricants & Chemicals GmbH. The company operates internationally, distributing products in over 50 countries, targeting automotive professionals and consumers seeking reliable lubricant solutions. The website is professionally designed, multilingual, and provides comprehensive product catalogs and company information. Technically, the site is built on WordPress with modern frameworks and includes analytics and cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with HTTPS and privacy compliance, though improvements in security headers and incident response disclosures are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Casino Online Sicuri

casinoonlinesicuri.com

55

CasinoOnlineSicuri.com is an Italian-language informational website dedicated to providing a comprehensive and updated list of safe and legally authorized online casinos certified by ADM/AAMS. The site targets Italian online gamblers seeking trustworthy platforms and offers detailed casino reviews, bonus information, game guides, and safety advice. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. It demonstrates good mobile optimization and fast performance. Security-wise, the site enforces HTTPS and uses nofollow on affiliate links but lacks advanced security headers and visible privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear consistent and professional. Overall, the site is a valuable resource for its niche audience but should improve transparency and compliance aspects.

C

Casinoonlineaams.com

casinoonlineaams.com

10

Casinoonlineaams.com is a specialized Italian website dedicated to providing comprehensive information, reviews, and comparisons of legally licensed online casinos under the ADM (Agenzia delle Dogane e dei Monopoli) framework. The site emphasizes responsible gambling and educates users on safe gaming practices, legal compliance, and detailed insights into casino bonuses, game RTPs, and platform features. It serves as a trusted guide for Italian players seeking secure and regulated online gambling experiences. Technically, the site is built on WordPress with modern SEO and analytics tools, offering a well-structured and content-rich user experience optimized for mobile devices. Security posture is solid with HTTPS and SSL encryption, though explicit security headers and privacy policies are not prominently found. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency despite the professional appearance and detailed business information presented on the site. Overall, the site is a valuable resource for its niche audience but would benefit from enhanced privacy disclosures and WHOIS transparency to improve trust and compliance.

N

N/A

livecasinoonline.ca

55

LiveCasinoOnline.ca is a Canadian-focused affiliate marketing website specializing in providing information, reviews, and access to live casino games online. The site targets Canadian players interested in online gambling, offering curated casino provider listings, bonus offers, and affiliate links to partner casinos. The business model revolves around affiliate commissions and informational content. Technically, the site is built on WordPress, hosted on DigitalOcean, and uses common plugins such as Mega Menu and VegasHero. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and DNSSEC. Privacy compliance is minimal with no privacy or terms of service pages, though a cookie consent banner is present. WHOIS data shows consistent Canadian registration with no privacy protection, supporting legitimacy. Overall, the site is functional but would benefit from enhanced security, privacy policies, and richer business contact information to improve trust and compliance.

S

Casino ohne Limit | Ohne Einschränkungen spielen

starwarsidentities.de

48

The website www.starwarsidentities.de operates as an affiliate and informational platform focused on online casinos without limits, specifically targeting German players interested in casinos that bypass common deposit and betting restrictions. It provides detailed casino reviews, bonus information, and payment method guides, positioning itself as a trusted source within this niche market. The business model relies on affiliate marketing, linking users to various online casinos. Technically, the site is built on WordPress, uses Cloudflare for DNS and likely CDN services, and integrates Google Analytics and Google Tag Manager for user tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security-wise, the site uses HTTPS and Cloudflare DNS, but no explicit security headers or incident response contacts are found. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR compliance indicators. Overall, the site is professional and consistent in branding but should improve privacy and security disclosures to enhance trust and compliance.

T

TOTOHOST d.o.o.

totohost.hr

59

TOTOHOST d.o.o. is a Croatian web hosting company established in 2004, offering a range of hosting services including NVMe SSD hosting, business-grade NVMe hosting, VPS cloud servers, domain registration, and reseller hosting. The company serves over 5000 customers and manages more than 7500 domains, positioning itself as a trusted local provider with a strong emphasis on performance and security technologies such as LiteSpeed web servers, CloudLinux, and Imunify360. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. Contact and support options are robust, including email, phone, live chat, and ticketing systems.

P

Pixelmanufaktur Patrick Bonetti

pixelmanufaktur.ch

49

Pixelmanufaktur Patrick Bonetti is a small, specialized web development consultancy based in Stäfa, Switzerland, founded in 2003. The company focuses on delivering tailored digital solutions including modern websites, intuitive frontends, and specialized widgets. Their market position is that of a boutique digital workshop with a strong emphasis on quality, user experience, and technical excellence. The website reflects a professional and consistent brand image with comprehensive service descriptions and client testimonials. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and advanced frontend technologies such as React and TypeScript. Hosting is provided by METANET AG in Switzerland, ensuring local data handling. The site is fast, mobile-optimized, accessible, and SEO-friendly. No third-party analytics or tracking scripts are present, enhancing user privacy. From a security perspective, the site uses HTTPS with strong SSL configuration and incorporates best practices such as anti-spam honeypot fields in forms. However, explicit security headers are not detected, and no formal security or incident response policies are published. The privacy policy is comprehensive and GDPR-compliant, but no cookie consent mechanism is present due to the absence of cookies. Overall, the website demonstrates a high level of professionalism, security awareness, and privacy respect, suitable for a small technology service provider. Strategic recommendations include adding security headers, publishing incident response contacts, and implementing cookie consent if cookies are introduced in the future.

H

Casino ohne Limit | Ohne Einschränkungen spielen

handycasinos24.com

53

HandyCasinos24 is a German-language online platform specializing in affiliate marketing and reviews for online casinos that operate without typical German restrictions such as deposit limits, betting limits, and regulatory exclusions. The site targets German players seeking more flexible gambling options and provides detailed casino listings, bonuses, and payment method guides. Technically, the website is built on WordPress, uses Cloudflare for DNS, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and has a professional design with clear navigation. Security-wise, the site uses HTTPS and has domain transfer protections but lacks explicit privacy and cookie policies, as well as security incident contacts or vulnerability disclosures. Overall, the site is legitimate and consistent with its domain registration data but should improve compliance and security transparency.

M

Mikro Trading a.s.

mikrotrading.cz

55

Mikro Trading a.s. is a Czech Republic-based company specializing in the import, export, and distribution of toys. The company positions itself as one of the most stable businesses in the Czech market, with over 30 years of operational history. Their business model focuses on direct import and export, as well as exclusive product development, targeting children and toy distributors. The website reflects a medium-sized enterprise with a professional online presence and clear contact information.

The website 'India MS Map' is a non-profit initiative by the Multiple Sclerosis Society of India aimed at crowd-sourcing data about people living with Multiple Sclerosis in India. It serves as an awareness and data collection platform targeting patients, healthcare professionals, and researchers. The site is built on WordPress and uses common web technologies such as jQuery, Smart Slider 3, and AmCharts for interactive mapping. Hosting appears to be via Bluehost, inferred from the domain structure. The website is accessible without any WAF or security challenge blocking access. However, there is a lack of transparency in domain registration data due to privacy protection or malformed WHOIS responses, which impacts trustworthiness. No privacy or cookie policies are present, and no contact information is explicitly provided, which are gaps in compliance and user trust. Security headers and advanced security configurations are absent, indicating room for improvement in security posture.

A

Afghan Midwives Association

afghanmidwives.org

41

Afghan Midwives Association (AMA) is a well-established non-profit professional association dedicated to strengthening midwifery in Afghanistan. Founded in 2005, AMA advocates for well-trained and empowered midwives and is an active member of the International Confederation of Midwives (ICM). The website reflects a strong market position within Afghanistan's healthcare sector, targeting midwives, healthcare professionals, donors, and partners. Key services include advocacy events, professional development, membership management, and project collaborations with international organizations. Technically, the website is built on WordPress using modern plugins like Elementor and Slider Revolution, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Weingut Hauser is a traditional German winery located in Bötzingen am Kaiserstuhl with over 200 years of history. The company specializes in producing and selling a variety of regional wines including Burgunder, Spätburgunder, Müller-Thurgau, Riesling, and Gewürztraminer, as well as pilzwiderstandsfähige (fungus-resistant) grape varieties. Their business model focuses on quality wine production, direct sales, and wine tasting experiences, targeting wine enthusiasts and regional customers. The website reflects a well-established small business with consistent branding and a clear presentation of their offerings. Technically, the website is built on WordPress using the Enfold theme, hosted on Kasserver infrastructure. It employs standard web technologies such as jQuery and MediaElement.js, and includes SEO optimizations and mobile responsiveness. The site uses HTTPS with good SSL configuration and implements a GDPR-compliant cookie consent mechanism. However, there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of terms of service and security policy pages suggests an opportunity to enhance trust and compliance. Overall, the security posture is solid but could benefit from additional formal documentation and security headers. The overall risk assessment is low, with no signs of malicious activity or blocking mechanisms. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining up-to-date software. These steps will improve compliance, security posture, and user trust.

W

Windway OÜ

kodulehetegemine.net

10

Windway OÜ operates the website kodulehetegemine.net, providing website creation, e-commerce development, SEO, and digital marketing services primarily targeting Estonian businesses and individuals. The company has been established since 2013 and maintains a professional online presence with over 100 satisfied clients, as evidenced by testimonials and client logos. The website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the website uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, representing a compliance gap with GDPR and related regulations. Google Analytics is used for user tracking, but no explicit cookie consent mechanism is implemented. Overall, the website is functional, professional, and trustworthy, but improvements in security hardening and privacy compliance are advised to reduce risk and enhance user trust. The domain registration data aligns well with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

X

xpecto AG

xpecto.de

71

xpecto AG is a German software company specializing in digital solutions for managing real assets and financial products such as bonds, subordinated loans, ELTIFs, AIFs, tokenized securities, and derivatives. Established since 1982, the company positions itself as a leading provider in the niche market of real asset management software, serving over 150 client companies with 40 years of market experience. Their offerings include modules for investor and sales management, controlling, reporting, risk management, asset and portfolio management, and digital portals for investors and sales partners. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence.

I

IBC SOLAR AG

ibc-blog.de

54

IBC SOLAR AG operates a professional German-language blog focused on photovoltaics and renewable energy solutions. The company is a well-established full-service provider in the energy sector, offering comprehensive photovoltaic system planning and turnkey delivery services. The website demonstrates a mature digital presence with good SEO, structured data, and mobile optimization. The technical infrastructure is based on WordPress CMS with modern plugins and themes, ensuring a stable and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent managed via Usercentrics, though some security headers and explicit policies could be improved. No blocking or WAF mechanisms interfere with content access. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

J

Junod Wasser + Wärme AG

junodag.ch

48

Junod Wasser + Wärme AG is a Swiss-based company specializing in energy-related services including solar panel installations, heating systems, sanitary installations, and building modernization. Established in 1990, the company serves the Wil region with a focus on sustainable and efficient energy solutions. Their website reflects a professional and consistent brand image, highlighting partnerships with reputable energy and solar companies, which strengthens their market position as a regional specialist. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and mobile responsiveness. The site uses HTTPS with an excellent SSL configuration, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of published security policies, incident response information, and vulnerability disclosure mechanisms suggests room for maturity in security governance. The WHOIS data is consistent with the business claims, showing a legitimate and established domain. Overall, the website is trustworthy, professional, and well-maintained, but could enhance compliance and security posture by implementing cookie consent, security headers, and publishing relevant policies.

C

CKW

solarville.ch

11

CKW is a prominent Swiss energy company specializing in renewable energy solutions, particularly photovoltaic systems for residential, commercial, and community customers. The website demonstrates CKW's commitment to supporting Switzerland's energy transition by providing comprehensive information, services, and tools related to solar energy. The company holds a strong market position with a large workforce dedicated to solar energy expansion and offers a variety of services including installation, consulting, and financing options. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern technologies such as Google Tag Manager, reCAPTCHA, and Usercentrics for consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site employs HTTPS with strong SSL configuration and security headers. It uses CAPTCHA to protect forms and manages user consent effectively. However, there is no explicit security policy or incident response contact information published, which could be improved. Overall, CKW's website is professional, trustworthy, and compliant with privacy regulations, providing a positive user experience and strong business credibility. The risk level is low, with recommendations focusing on enhancing transparency around security policies and incident response.

E

EBITSCHenergietechnik GmbH

ebitsch-energietechnik.de

44

EBITSCHenergietechnik GmbH is a well-established German company specializing in renewable energy solutions, particularly photovoltaic systems, battery storage, and heat pumps. Founded in 1990, it has a strong regional presence with over 45 employees and more than 5000 completed solar projects. The company holds multiple industry certifications and awards, reinforcing its market credibility. The website reflects a professional digital presence built on WordPress with modern plugins and themes, providing a good user experience and clear navigation. Security posture is solid with HTTPS and some security headers, though improvements in cookie consent and vulnerability disclosure are recommended. Overall, the site is trustworthy and aligns well with the company's business claims.