Security Directory

L

legalia.sk

legalia.sk

56

The website legalia.sk appears to be a Slovak business site likely related to legal or business services, established in 2013. The domain is well-aged and registered with a reputable registrar and hosting provider, with DNSSEC enabled, indicating a legitimate and stable online presence. The site uses modern web technologies such as React, Gatsby, and Tailwind CSS, suggesting a contemporary technical infrastructure. However, the content quality is basic with limited visible textual content and no detected privacy or cookie policies, which impacts compliance and user trust. Security posture is moderate with HTTPS and DNSSEC but lacks important security headers and formal security or incident response policies. No contact information or social media links were found, limiting direct communication channels. Overall, the site is accessible and safe for general audiences but would benefit from enhanced privacy compliance and security best practices.

Delia Potraviny is a Slovak retail grocery chain focused on providing fresh and quality food products through a network of approximately 30 stores primarily located in Bratislava and its surroundings. The website reflects a business model centered on local physical stores offering convenience, fresh produce, coffee, bakery items, and other grocery essentials. The target audience is local Slovak consumers seeking quality and convenience in grocery shopping. The company has been operational since 2015, with steady growth and expansion in the regional market. Technically, the website is built using modern web technologies including React and Next.js, with integration of Google Maps API for store location services. Hosting is provided by Websupport, a Slovak hosting provider, and the domain is secured with HTTPS and DNSSEC. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks visible security headers and explicit privacy or cookie policies, indicating areas for improvement in compliance and security best practices. No incident response or vulnerability disclosure information is provided, and no analytics or tracking scripts were detected in the analyzed content. Contact information is available primarily via social media and a contact form, but no direct company emails or phone numbers with explicit labels were found. Overall, the website presents a professional and trustworthy image consistent with a legitimate retail grocery business. However, it would benefit from enhanced privacy compliance, security header implementation, and transparency regarding incident response and data protection to strengthen its security posture and regulatory adherence.

A

Adria Databanka

adriadatabanka.com

69

Adria Databanka operates as an online accommodation booking platform specializing in apartments and robinson houses in Croatia. The website targets tourists and travelers seeking verified accommodation by the sea with easy online booking options. The business appears to be a small hospitality sector player based in the Czech Republic, focusing on niche Croatian holiday rentals. Technically, the website is built on modern frameworks such as Next.js and React, incorporating third-party services like Cookiebot for cookie consent, Google Tag Manager for analytics, and Tawk.to for live chat support. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and compliance measures suggest a professional operation. Overall, the site scores moderately well on content quality, technical implementation, and privacy compliance but has room for improvement in business credibility and security posture.

V

Visual Capitalist

voronoiapp.com

56

Voronoi by Visual Capitalist is a specialized media platform focused on delivering data-driven visual stories and visualizations sourced from top creators worldwide. The platform offers a curated feed of charts and maps, enabling users to explore data narratives with transparency and engagement features such as sign-in, saving favorites, commenting, and following creators. The presence of mobile applications for iOS and Android further extends its reach and usability. Technically, the website leverages modern web technologies including React and Next.js, ensuring a responsive and performant user experience. Integration with analytics tools like Google Tag Manager and Hotjar indicates a mature approach to user behavior tracking and optimization. However, the site lacks explicit privacy and cookie policies, which is a gap in compliance and user transparency. From a security perspective, the site enforces HTTPS and uses asynchronous loading of third-party scripts, which is positive. Nonetheless, the absence of security headers and clear incident response contacts suggests room for improvement. The missing WHOIS registration data is a notable concern, as it raises questions about domain legitimacy despite the professional appearance and association with Visual Capitalist. Overall, the website presents a good user experience and technical foundation but requires enhancements in privacy compliance, security best practices, and domain registration transparency to strengthen trust and reduce risk.

Jablotron Alarms a.s. is a well-established Czech company specializing in security and smart home systems. The company offers a broad range of products including alarm systems, cameras, and home automation solutions targeting both residential and commercial customers. Their market position is strong within Europe, supported by ISO certifications and a comprehensive product portfolio. The website reflects a mature digital presence with modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security measures are robust, including HTTPS enforcement and security headers, though the absence of public vulnerability disclosure and incident response contacts suggests room for improvement. Overall, the company demonstrates a high level of professionalism and trustworthiness, though the lack of WHOIS data slightly impacts domain trust. Strategic recommendations include enhancing transparency around security incident response and establishing a formal vulnerability disclosure policy.

Jablotron Alarmsysteme s.r.o. is a medium-sized technology company specializing in the development and manufacture of security systems and smart home solutions. The company targets both residential and commercial customers, offering alarm systems, smart home automation, and security monitoring services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating compliance with GDPR regulations. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and security headers in place. However, the absence of publicly available WHOIS data limits the ability to fully verify domain legitimacy. Security posture is solid with HTTPS enforcement and security best practices, though the lack of a dedicated security policy or vulnerability disclosure page suggests room for improvement. Overall, the website is safe, trustworthy, and well-structured, serving its business purpose effectively.

T

Turistička Zajednica Grada Zagreba

infozagreb.hr

52

The website www.infozagreb.hr serves as the official tourism portal for the city of Zagreb, Croatia, managed by the Turistička Zajednica Grada Zagreba. It provides comprehensive information about the city's cultural heritage, attractions, events, accommodation, and lifestyle, targeting tourists and visitors. The site is well-positioned as a trusted source for Zagreb tourism, offering detailed guides and multimedia content to enhance visitor experience. Technically, the website employs modern web technologies including React and Cloudflare services for DNS and CDN, ensuring moderate performance and good mobile optimization. The site structure and navigation are clear, with SEO-friendly metadata and structured data enhancing search visibility. However, accessibility features could be improved. From a security perspective, the site uses HTTPS and benefits from Cloudflare's infrastructure, but lacks explicit security headers and formal security policies. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement to enhance compliance and trust. Overall, the website is professional and trustworthy with a strong business credibility score. The absence of privacy and cookie policies and limited security headers slightly reduce the security and privacy posture. Strategic enhancements in these areas would improve compliance and user trust.

S

Shore GmbH

shore.com

67

Shore GmbH operates a professional website offering SaaS solutions focused on appointment scheduling, customer management, and marketing automation primarily targeting small to medium-sized businesses in Germany. The company has a strong market presence supported by a domain age of over 25 years and a modern technology stack based on React and Gatsby frameworks. The website is well-designed, mobile-optimized, and provides a good user experience, although explicit privacy and cookie policies are not detected in the provided content. Security posture is moderate with no detected security headers or explicit policies, and DNSSEC is not enabled, which could be improved. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and stable operation.

K

Kroll

kroll.com

77

Kroll is a leading independent provider of financial and risk advisory solutions, offering services such as financial advisory, risk management, cyber risk, and compliance consulting. The company targets corporate clients, financial institutions, and legal professionals, positioning itself as a trusted advisor in complex financial and risk environments. The website reflects a mature enterprise with a professional digital presence, leveraging modern web technologies including React and Next.js, and integrating advanced consent management and analytics tools. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is not publicly available, which slightly impacts transparency but does not detract from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing detailed security and incident response policies and improving WHOIS transparency to enhance trust.

N

Noerr

noerr.com

76

Noerr is a prominent European law firm specializing in corporate legal advisory services, including finance, M&A, regulatory compliance, and real estate. The website reflects a mature digital presence with professional design, clear navigation, and rich content such as legal insights, briefings, and press releases targeting corporate clients and legal professionals. The technical infrastructure leverages modern web technologies including React, Next.js, and Material-UI, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data introduces some uncertainty about domain registration transparency, but the overall website professionalism and content quality support the legitimacy of the business. Strategic recommendations include publishing a dedicated security policy, incident response information, and improving WHOIS transparency to enhance trust.

Ably is a mature and well-established realtime platform founded in 2002, specializing in streaming data instantly between services and end-user devices. It offers a suite of developer-focused products such as Ably Pub/Sub, Chat, LiveObjects, and LiveSync, targeting businesses that require scalable, reliable, and low-latency realtime messaging infrastructure. The company positions itself as a leader in the realtime messaging market, supporting over 2 billion connected devices monthly with a strong uptime record. Technically, the website is built on modern frameworks like Gatsby and React, hosted with Cloudflare DNS and Amazon Registrar, and integrates various marketing and analytics tools including Google Tag Manager, Intercom, and HubSpot. The site is fast, mobile-optimized, and accessible with a professional design and clear navigation. Security-wise, the site enforces HTTPS, implements security headers, and uses domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit privacy policy or terms of service pages were found, which are areas for improvement. Contact information is limited to a contact form without direct emails or phone numbers. Overall, Ably demonstrates a strong security posture and business credibility, but could enhance privacy compliance and transparency to further build trust.

L

Livens

livens.co

61

Livens is a Croatia-based digital solutions provider specializing in web development, booking systems, CMS, and dashboards. The company targets businesses seeking to establish or enhance their digital presence with innovative and engaging digital experiences. Their portfolio includes projects in luxury sailing, vacation rentals, and financial services, positioning them as a niche player in the technology sector. The website demonstrates a modern technical infrastructure built on Next.js and React, hosted likely on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, Livens presents a professional and trustworthy digital presence with room for enhanced security transparency.

D

Digestive Cancers Europe

digestivecancers.eu

40

Digestive Cancers Europe (DiCE) is a European non-profit umbrella organization dedicated to uniting patient organizations and stakeholders focused on digestive cancers. The organization provides advocacy, research support, awareness campaigns, and patient resources to improve survival and quality of life for affected individuals across Europe. The website serves as a comprehensive platform for patients, carers, and healthcare professionals, offering educational materials, clinical trial databases, and policy advocacy information. DiCE maintains a strong presence through multiple social media channels and provides clear contact information and privacy compliance mechanisms. Technically, the website is built on WordPress with modern technologies including React, jQuery, and Stripe for payment processing. It employs performance optimizations such as deferred scripts and Autoptimize. The site is mobile-optimized, accessible, and SEO-friendly, with structured data markup enhancing search visibility. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and secure payment integration, although some security headers could be improved. The security posture is solid with no critical vulnerabilities detected in the content. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policies and incident response information. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a healthcare non-profit organization. Strategically, DiCE should enhance its security headers, publish a formal security policy, and consider adding vulnerability disclosure information to further strengthen trust and compliance. Regular security audits and updates are recommended to maintain a robust security posture.

L

Lovezagreb

uhpa.hr

10

The website represents UHPA, a well-established Croatian tourism industry association founded in 2002, serving over 330 members including travel agencies and key tourism stakeholders. It focuses on promoting sustainable tourism, professional development, and industry advocacy. The site is professionally designed with good content quality, clear navigation, and bilingual support. Technically, it uses modern web technologies including React and Cloudflare services, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a public vulnerability disclosure policy and incident response contacts. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy, professional, and serves as a credible resource for the Croatian tourism sector.

AroundZagreb.hr is a tourism promotion website operated by the Turistička Zajednica Grada Zagreba, the official tourism board of Zagreb, Croatia. The site provides multilingual content aimed at tourists interested in exploring Zagreb and its surroundings, featuring local attractions, weather updates, and social media integration. The business model focuses on information dissemination and tourism promotion, positioning itself as a trusted official source for visitors. Technically, the website is built using React with modern asynchronous script loading and is hosted behind Cloudflare DNS services, ensuring good performance and availability. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data.

T

Turistička zajednica Zagrebačke županije

odmornikadblize.hr

56

The website odmornikadblize.hr is a regional tourism promotion platform managed by the Zagreb County Tourist Board, Croatia. It offers detailed listings of vacation houses, hotels, wine roads, gastronomy, and cultural experiences in Zagreb County. The site targets tourists, families, and digital nomads seeking authentic local experiences. The business model focuses on promoting regional tourism and accommodation providers to increase visitor engagement and economic activity in the area. Technically, the site is built on modern frameworks such as Next.js and React, hosted likely on Vercel with Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-branded, but could improve compliance and security transparency.

B

Bajkazyl Olomouc

bajkazylolomouc.cz

48

Bajkazyl Olomouc is a small local business specializing in bicycle recycling, repair, custom bike building, and sales, serving the Olomouc community in the Czech Republic. The website presents a clear description of their services and target audience, positioning itself as a community hub for cycling enthusiasts. Technically, the site is built using modern React and Gatsby frameworks, with Google Analytics integrated for visitor tracking. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks important security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data suggests privacy protection on domain registration, which is common for small businesses. Overall, the site is professional and trustworthy but could enhance compliance and security posture.

W

Wolters Kluwer ČR, a. s.

rizeniskoly.cz

64

Řízení školy is a Czech educational platform operated by Wolters Kluwer ČR, a. s., providing comprehensive resources, legal guidance, and management tools for school directors and educational staff. The website offers subscription-based access to magazines, articles, calendars, and training events tailored to the Czech education sector. The platform is well-positioned as a trusted mentor for school administration, supported by a professional design and consistent branding. Technically, the site leverages modern web technologies including React and Cream CMS, with integrations for Google Tag Manager and consent management to ensure privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected. The absence of WHOIS domain registration data limits domain legitimacy verification, but the website's content and affiliation with Wolters Kluwer indicate a credible business. Overall, the site provides a safe, professional, and user-friendly experience for its target audience.

O

OVVD GmbH

ovvd.de

44

OVVD GmbH is a municipal waste disposal company operating primarily in the German districts of Mecklenburgische Seenplatte, Vorpommern-Greifswald, and Vorpommern-Rügen. Founded in 1991, it manages landfill operations, waste transfer stations, and mechanical-biological waste treatment through its subsidiary ABG mbH. The company emphasizes environmental sustainability and economic efficiency, offering vocational training and engaging in climate protection initiatives. The website reflects a professional and regionally focused business with clear contact information and certifications. Technically, the website is built on a modern stack using Next.js and React, with integration of Usercentrics for cookie consent and Matomo for analytics. The site is mobile-optimized and well-structured, though some security headers are missing. Cookie consent mechanisms indicate GDPR awareness, but explicit privacy and terms of service pages are not found on the main page. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure reduces the overall security maturity. The WHOIS data aligns well with the business claims, showing consistent domain registration and trustworthy hosting. Overall, OVVD GmbH presents a credible and professional municipal waste management service with room for improvement in privacy documentation and security transparency.

3

300.codes

300.codes

66

300.codes is a Polish software house specializing in web and mobile development using technologies such as PHP, Vue, React, Python, WordPress, and Webflow. The company positions itself as a boutique-quality software delivery provider focused on achieving marketing and sales goals for its clients. The website is professionally designed with good SEO and mobile optimization, leveraging modern frameworks and tools including Astro, Yoast SEO, Google Tag Manager, and Cookiebot for consent management. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its business domain.

U

Universitat Pompeu Fabra

upf.edu

63

Universitat Pompeu Fabra (UPF) is a well-established public university based in Barcelona, Spain, founded in 1990. The website presents a comprehensive digital presence with detailed information about academic programs, research activities, and university services targeting students, researchers, alumni, and other stakeholders. The site uses modern web technologies including Liferay CMS, React, and Usercentrics for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and content security policies, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the www.upf.edu subdomain is a notable anomaly but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing security transparency and verifying domain registration details.

B

Bundesagentur für Arbeit

mein-beruf.de

62

The website 'meinBERUF' is an official portal operated by the Bundesagentur für Arbeit, Germany's Federal Employment Agency. It provides comprehensive career guidance, educational resources, and application support for users seeking information on training, study, and job applications. The portal is well-positioned as a national government service with a clear focus on assisting citizens in their professional development. Technically, the site leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. The use of Matomo analytics reflects a commitment to privacy-conscious data collection. The site is hosted on reliable infrastructure with secure DNS and HTTPS configurations. From a security perspective, the website demonstrates strong practices such as HTTPS enforcement, security headers, and cookie consent mechanisms. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR and other privacy standards. It serves its target audience effectively with high-quality content and clear navigation. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data retention.

A

ARKANCE USA

caddmicrosystems.com

10

ARKANCE USA is a technology solutions and consulting company specializing in the Architecture, Engineering, and Construction (AEC) industry. They provide a comprehensive suite of services including software solutions (notably Autodesk, Bluebeam, and Egnyte), training, consulting, BIM services, and support contracts. Positioned as a trusted Autodesk Platinum Partner, ARKANCE serves a broad audience including architects, engineers, contractors, government agencies, and facility managers. Their market presence is supported by detailed customer success stories, active event participation, and a strong digital footprint. Technically, the website leverages modern web technologies such as React and Next.js, integrates marketing and analytics tools like Marketo, Google Tag Manager, and LinkedIn Insight, and is hosted with a CMS backend likely powered by Strapi. The site is well-optimized for mobile and SEO, with good accessibility features and fast performance. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in cookie consent mechanisms and publishing formal security policies. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this type of business. No security challenges or WAF blocks were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, trustworthy, and mature digital presence aligned with its business objectives. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

A

AI-TOMATICA

ai-tomatica.cz

67

AI-TOMATICA is a Czech-based technology company specializing in the development of custom AI software and IoT solutions aimed at modern business automation and digitalization. The company positions itself as an innovative player with active product development such as SmartTom and EnergoLog, targeting businesses seeking intelligent automation technologies. Their website reflects a high level of digital maturity, utilizing modern frameworks like Next.js and hosting on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not prominently provided. Privacy compliance is well addressed with clear privacy and cookie policies, indicating GDPR awareness. Overall, the company presents a professional and trustworthy online presence with clear contact channels and social media engagement.

R

React Norway

reactnorway.com

56

React Norway is a specialized event organizer focusing on the React developer community by hosting an annual conference and festival that combines technology talks with live music performances. The event is held in Oslo, Norway, at the Rockefeller venue, and targets frontend developers, React enthusiasts, and tech professionals. The business model revolves around ticket sales, sponsorships, and community engagement through both in-person and online formats. The company has established a consistent brand presence since its founding in 2018 and maintains partnerships with reputable technology companies and sponsors.

F

Farstad & Co

farstad.co

59

Farstad & Co is a specialty coffee roastery and coffee bar located in Skien, Norway, with a rich history dating back to 1955. The company operates a physical coffee bar, an online store offering specialty single-origin coffees, subscription services, and corporate coffee solutions. Positioned as Skiens eneste kaffebrenneri, Farstad & Co emphasizes quality, origin transparency, and a passion for the coffee experience. The website reflects a modern digital presence built on Next.js and Crystallize, integrating analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers, though cookie consent mechanisms are absent. Contact information is clearly presented, enhancing business credibility. The domain registration aligns well with the business claims, supporting legitimacy.

N

Nomono

nomono.co

63

Nomono is a Norway-based technology company specializing in AI-powered spoken audio platforms and wireless recording devices. Their business model combines hardware sales with cloud-based SaaS subscription services, targeting creators such as podcasters and storytellers who require high-quality audio production tools. The website presents a professional and modern digital presence, leveraging advanced web technologies including Next.js, React, and integrations with HubSpot and Segment for marketing and analytics. The site is well-optimized for performance and mobile use, with clear navigation and strong branding consistency. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and security policies are not publicly linked. Overall, Nomono demonstrates a mature technical infrastructure and a credible market position within the audio technology niche.

A

Assetto

assetto.com

56

Assetto is a Norwegian entrepreneurial corporate finance advisory firm focused on helping entrepreneurs and business owners develop growth strategies, prepare companies for financial transactions, and support them through funding and exit processes. The company operates as a small, specialized consultancy with a strong emphasis on hands-on partnership and strategic involvement. The website reflects a professional and consistent brand image with clear contact channels and client success stories, positioning Assetto as a trusted advisor in its niche market. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and moderate performance. However, there is room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could enhance its compliance and security transparency.

S

Snowball Digital AS

snowball.digital

67

Snowball Digital AS is a Norwegian-based design and technology agency specializing in digital product strategy, UX/UI design, branding, development, and growth marketing. The company targets growth-focused businesses seeking innovative digital solutions and seamless end-to-end experiences. Their market position is that of a specialized boutique agency with a focus on digital transformation and product innovation. Technically, the website is built on modern frameworks such as React and Next.js, leveraging a headless CMS (Crystallize) and integrating analytics tools like Google Analytics and Hotjar. The site is mobile-optimized and presents a professional, consistent brand image. Security-wise, the website uses HTTPS and asynchronous loading of tracking scripts but lacks some security headers and a cookie consent mechanism, which are recommended for improved compliance and security posture. Overall, the domain WHOIS data is privacy protected, which is typical for small agencies, and the website content and contact information support the legitimacy of the business.

O

Okay

okaythis.com

63

Okay is a Norway-based company founded in 2018 that provides advanced, modular authentication solutions tailored for fintechs, banks, and enterprises. Their platform focuses on balancing security, compliance, and user experience by offering identity verification, strong customer authentication, passwordless access, and compliance management services. The company positions itself as a trusted partner in the financial technology sector, emphasizing rapid deployment and regulatory adherence such as PSD2 and GDPR. Technically, the website is built using modern frameworks like Next.js and React, hosted on Vercel, and integrates analytics and consent management tools to ensure performance and privacy compliance. Security posture is strong with HTTPS enforcement and clientTransferProhibited domain status, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, well-structured, and trustworthy, with comprehensive content and clear business focus.

D

Dimension Four AS

dimensionfour.io

67

Dimension Four AS operates a specialized IoT platform designed to unify and simplify IoT data management across industries and smart cities. Their platform offers a native GraphQL API, real-time data subscriptions, and tools for rapid deployment, positioning them as a flexible and scalable solution provider in the IoT technology sector. The company emphasizes eliminating data silos and vendor lock-in, enabling faster product development and innovation. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates privacy-conscious analytics via Matomo. The presence of comprehensive privacy and cookie policies with consent mechanisms reflects a strong commitment to GDPR compliance. Security posture is robust with HTTPS, security headers, and secure forms, although the absence of a published security policy or incident response contact is noted. Overall, the domain registration is privacy protected but consistent with a legitimate business profile, and the website demonstrates high professionalism and trustworthiness.

G

graz.social

graz.social

71

graz.social operates as a regional Mastodon social networking server primarily serving the Graz area and its surroundings. It is managed by a non-profit association focused on promoting ethical digital culture. The platform leverages the open-source Mastodon software (version 4.4.7) and provides a community-driven social media experience within the fediverse. The website content includes user-generated posts on diverse topics, reflecting an active and engaged user base. The business model is community-centric, emphasizing privacy and ethical digital interaction rather than commercial gain. Technically, the site employs modern web technologies including React and Ruby on Rails frameworks, with modular JavaScript and SVG-based UI elements. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with no significant technical debt or errors detected. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks some security headers and does not provide a cookie consent mechanism or terms of service, which are areas for improvement. No vulnerabilities or malicious content were detected. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance indicators or data protection officer contact information. Overall, graz.social presents a trustworthy and well-maintained community platform with a strong ethical focus. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing terms of service, adding security headers, and providing clearer contact and incident response information to strengthen trust and security posture.

U

Usermaven

usermaven.com

63

Usermaven is a technology company founded in 2020 that offers an AI-powered marketing attribution and analytics SaaS platform. The platform targets marketing teams, agencies, brands, and product teams by providing multi-touch attribution, product analytics, funnel analysis, and user journey insights. The company positions itself as privacy-conscious, emphasizing GDPR and CCPA compliance and hosting data in the EU. Technically, the website is built on modern frameworks such as Next.js and React, integrates with multiple marketing and analytics tools, and uses Cloudflare for DNS and likely CDN services. The site is fast, mobile-optimized, and professionally designed. Security posture is good with HTTPS enforced and domain transfer protection, but lacks published security policies and vulnerability disclosures. Privacy compliance is partial due to missing explicit privacy and cookie policies. Overall, the website is trustworthy and professional, with room for improvement in transparency and compliance documentation.

S

seyfro.social

seyfro.social

67

seyfro.social operates as a small Mastodon instance providing decentralized social networking services with a focus on privacy, ethical design, and no advertising. The platform is based on Mastodon version 4.2.20, an open-source social network software, and targets general users interested in privacy-respecting social media. The site currently has minimal active users, indicating a niche or early-stage community. Technically, the website uses modern web technologies including React and WebSocket for real-time communication, with a moderate performance profile and good mobile optimization. Security posture is moderate; while no critical vulnerabilities or exposed sensitive data were found, the absence of security headers and cookie consent mechanisms suggests room for improvement. Privacy compliance is basic with a privacy policy present but lacking cookie consent and GDPR explicit indicators. Business credibility is moderate due to lack of contact information and terms of service, but the site’s open-source nature and transparent admin identity provide trust signals. Overall, the site is safe, accessible, and professionally presented but would benefit from enhanced security and compliance features.

H

Heimstaden

heimstaden.cz

51

Heimstaden.cz is a professionally maintained real estate website focused on rental apartments, commercial spaces, and new construction projects primarily in the Moravskoslezský region of the Czech Republic. The company is part of the larger Heimstaden group, a significant player in the European real estate market. The website offers a user-friendly experience with clear navigation, modern design, and multiple customer support channels. Technically, the site uses modern frameworks such as Next.js and is hosted on Microsoft Azure, ensuring reliable performance and scalability. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site reflects a mature digital presence suitable for a large real estate company.

D

Divadlo pod Palmovkou

podpalmovkou.cz

60

Divadlo pod Palmovkou is a well-established classical drama theatre located in Prague, Czech Republic, offering a diverse range of theatrical performances, concerts, exhibitions, and educational programs. The theatre operates under the auspices of the City of Prague, reflecting its cultural significance and public funding model. The website presents a professional and user-friendly interface with comprehensive event listings, ticketing options, and community engagement features such as newsletters and social media integration. Technically, the site leverages modern web technologies including React and Next.js, hosted on Google Cloud infrastructure, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be enhanced. Privacy compliance is strong, with clear GDPR-aligned policies and transparent data handling practices. Overall, the website reflects a credible, trustworthy, and professionally managed cultural institution with a strong digital presence.

L

Lüneburger Heide GmbH

heidschnuckenweg.de

47

The website www.heidschnuckenweg.de serves as a comprehensive tourism portal dedicated to the Heidschnuckenweg hiking trail in the Lüneburger Heide region of Germany. It provides detailed information about the trail's 13 stages, accommodation options, seasonal hiking tips, and related services. The site is professionally designed with consistent branding and targets hikers, nature enthusiasts, and tourists seeking outdoor experiences in northern Germany. The business behind the site is Lüneburger Heide GmbH, a regional tourism organization, positioning itself as a key promoter of this popular hiking destination. Technically, the website is built using modern web technologies including React and Next.js, hosted on Hetzner servers. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site employs HTTPS with strong SSL configuration but lacks explicit security headers, which could be improved. Privacy and cookie policies are present and GDPR compliant, with a cookie consent mechanism implemented. Contact information is available via a dedicated contact page, though no direct emails or phone numbers are embedded in the main HTML. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, it lacks dedicated security or incident response policies and does not provide a vulnerability disclosure or security.txt file. The domain registration is consistent with the hosting provider and business purpose, indicating legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website is a trustworthy, well-maintained tourism information platform with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility features to further strengthen the site's security and compliance posture.

Spacebear OÜ is a small Estonian technology company specializing in DevOps solutions, providing tools and expertise to help companies deliver reliable software faster. Their key services include container registries, CI/CD pipelines, infrastructure as code, and automated application monitoring. The company targets businesses seeking to improve their software delivery processes through modern DevOps practices. The website reflects a professional and consistent brand image with clear contact information and a focus on technology services. Technically, the website is built using modern frameworks such as Next.js and React, styled with Tailwind CSS, and hosted on bunny.net infrastructure. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. No major technical issues or vulnerabilities are evident from the HTML content. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers, a security policy, incident response information, and a cookie consent mechanism, which are areas for improvement. The WHOIS data is consistent with the company’s location and founding date, supporting legitimacy. Overall, the website presents a trustworthy and professional front with room for enhancement in privacy compliance and security posture to better align with industry best practices.

C

Decision 21

cernosickasance.cz

52

The website 'Decision 21' hosted at cernosickasance.cz is a small-scale Czech platform focused on enabling users to express their opinions through multiple votes, enhancing collective decision-making. The content is minimal but clearly targeted at a general audience interested in voting or decision processes. The site uses modern web technologies including React and Google Tag Manager, with images hosted on Cloudinary. However, it lacks comprehensive business information, contact details, and formal policies such as privacy or cookie policies. Security posture is adequate with HTTPS and some caching headers but lacks advanced security headers and incident response information. Overall, the site is functional but basic in content and compliance, with room for improvement in transparency and security.

I

Innovasjon Norge

innovationnorway.com

74

Innovasjon Norge is a Norwegian government agency dedicated to fostering sustainable growth and export opportunities for Norwegian businesses. The agency provides a range of services including startup support, scaling assistance, internationalization programs, and sustainability initiatives. Their market position is that of a national innovation and business development authority, targeting Norwegian enterprises seeking to innovate and expand globally. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Sanity CMS. It employs Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms. However, it lacks explicit security policy pages, vulnerability disclosure, and direct contact information for incident response, which are areas for improvement. The absence of WHOIS data is due to Norid's privacy policies for .no domains, but the site branding and content strongly support legitimacy. Overall, Innovasjon Norge's website presents a professional, secure, and privacy-conscious platform suitable for its government agency role. Strategic recommendations include publishing clear security and privacy policies, enhancing transparency with vulnerability disclosures, and providing explicit contact channels for security incidents to further strengthen trust and compliance.

HanseWerk AG is a large regional energy service provider based in Germany, offering a broad portfolio of energy and telecommunications services to households, businesses, and municipalities. The company operates multiple subsidiaries and focuses on electricity, gas, heating solutions, and emerging technologies such as electric vehicle charging. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site uses modern frameworks like React and integrates consent management and analytics tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces trust signals but does not negate the legitimacy indicated by the website content. Overall, the site is professional, compliant with GDPR, and suitable for its target audience.

W

Webthinx

webthinx.com

63

Webthinx is a technology service provider specializing in web page creation, mobile application development, e-commerce solutions, and custom software tailored to client needs. The company targets businesses and individuals seeking digital transformation and custom development services. The website is built using modern technologies such as React and Next.js, indicating a contemporary technical infrastructure. Google Tag Manager is employed for analytics and tracking, reflecting a moderate level of digital maturity. Security posture is moderate with HTTPS usage implied, but lacks visible security headers and detailed privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a professional front but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and credibility.

I

Intercontinental Exchange

theice.com

66

Intercontinental Exchange (ICE) operates a comprehensive digital platform offering global exchanges, clearing services, market data, and technology solutions primarily in the energy and financial sectors. The website demonstrates a strong market position with a focus on innovation and digitization of traditional markets. Technically, the site uses modern web technologies including React and various JavaScript libraries, delivering a professional and responsive user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit privacy policies are missing. The absence of WHOIS data is notable but likely due to privacy or registry restrictions rather than malicious intent. Overall, the site is professional, trustworthy, and business-focused.

G

Gemeinde Vaduz

lokalundfair.li

59

Lokal+Fair is a government-backed initiative by the Gemeinde Vaduz, the first Fair Trade Town in Liechtenstein, aimed at promoting fair trade and local commerce. The website serves as an informational and promotional platform, providing details about the campaign, criteria for local businesses to participate, news updates, and a newsletter subscription. The target audience includes local residents, businesses, and visitors interested in sustainable and fair trade products. The business model is community and label-driven, focusing on fostering sustainable consumption and supporting local enterprises. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Storyblok CMS. It is well optimized for mobile devices, accessible, and performs well. The newsletter subscription is integrated with Mailchimp, indicating a professional approach to user engagement. SEO and accessibility best practices are observed, enhancing user experience and discoverability. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. However, it lacks explicit security headers and does not provide a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a privacy policy and cookie information present, though no explicit consent mechanism is implemented. Contact information is transparent and professional, enhancing trust. Overall, Lokal+Fair presents a trustworthy, professional, and well-maintained digital presence for a local government initiative. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and implementing a cookie consent mechanism to improve compliance and security posture further.

P

PAQ Research

datapaq.cz

53

DataPAQ is a Czech Republic-based data visualization platform focused on regional educational and social data. It aggregates data from official Czech institutions and provides interactive tools for analysis, targeting researchers, policymakers, and educators. The platform is developed in collaboration with PAQ Research and other educational partners, positioning itself as a niche tool for regional data insights. Technically, the website is built using modern web technologies including React and Next.js, with analytics powered by Matomo and PostHog. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which impacts compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, though the partnership with recognized organizations mitigates some concerns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and transparent contact information to improve trust and regulatory adherence.

P

PAQ Research

mapavzdelavani.cz

38

Mapa vzdělávání is a Czech Republic-based educational research platform operated by PAQ Research, focusing on data analyses and research-backed solutions addressing educational inequalities in the country. The website offers analytical reports, data visualization tools, and a blog with research articles, targeting policymakers, educational institutions, and researchers. The platform positions itself as a specialized provider in the Czech educational sector with a small organizational size and consistent branding. Technically, the website is built using modern frameworks such as Next.js and React, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is incomplete due to missing privacy and cookie policies. Contact information is clearly presented with named individuals and direct emails, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences.

P

PAQ Research

chytrejsidane.cz

40

Chytřejší daně is a Czech Republic based research and advocacy project focused on proposing comprehensive tax reforms to improve economic growth, fairness, and public finance sustainability. The website is professionally designed using modern web technologies such as Next.js and React, hosted on a Czech hosting provider, and integrates analytics tools like Google Tag Manager and Matomo for user tracking and performance monitoring. The project is supported by reputable research organizations including PAQ Research, Centrum veřejných financí, and IDEA CERGE-EI, lending credibility and trustworthiness to the content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, with a user consent mechanism implemented. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility appropriate for a public policy research initiative.

L

LILA HILFE e.V.

lilahilfe.org

61

Lila Hilfe e.V. is a German non-profit feminist solidarity organization dedicated to supporting women affected by gender-based violence and structural discrimination. The organization operates primarily within Germany, providing financial aid, resources, and community support to its target audience. The website reflects a clear mission and offers membership and donation options to sustain its activities. Technically, the site is built on a modern React and Next.js framework, ensuring fast performance, excellent mobile optimization, and good accessibility. The content is rich, professionally presented, and highly relevant to its audience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is moderate, with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection common in non-profits. The site maintains a high trust level with clear branding and social media presence.

Müller Handels GmbH & Co. KG operates a large retail and e-commerce platform primarily serving the German market and neighboring German-speaking countries. The company offers a wide range of products including perfumes, cosmetics, toys, multimedia, and household goods, positioning itself as a comprehensive drugstore and lifestyle retailer. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting general consumers with a focus on convenience and variety. Technically, the website leverages modern web technologies such as Next.js and React, combined with Usercentrics for cookie consent management and Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is mobile-optimized and performs moderately well, with good SEO and accessibility features. Hosting details are not explicitly disclosed, but the infrastructure supports a robust e-commerce experience. From a security perspective, the site enforces HTTPS and integrates consent mechanisms for privacy compliance. While explicit security headers and policies are not fully visible, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security header implementation, and providing clear incident response contacts to further strengthen trust and compliance.

S

Slovan Bratislava

smebelasi.sk

9

The website smebelasi.sk represents the rebranding initiative of Slovan Bratislava sports clubs under the ownership of JTRE sports & entertainment. It focuses on showcasing a unified visual identity for multiple sports disciplines including hockey, basketball, and volleyball. The site targets sports fans and stakeholders interested in the club's new branding and identity. Technically, the site is built using modern web technologies such as React and Next.js, hosted on Webglobe infrastructure, and includes Google Tag Manager for analytics and a cookie consent mechanism for privacy compliance. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or terms of service documentation. The domain WHOIS data is mostly consistent but contains an anomalous future creation date that should be verified. Overall, the site is professional and safe, but improvements in privacy transparency and security hardening are recommended.