Security Directory

5

5mods

gta5-mods.com

65

GTA5-Mods.com is a well-established community platform dedicated to providing a comprehensive repository of mods for the Grand Theft Auto V PC game. It serves a global audience of gamers and modders by offering a wide variety of downloadable content including vehicles, scripts, player skins, and tools. The platform operates primarily on a user-generated content model supported by advertising revenue and community engagement through social media and Discord. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, and Prebid.js for advertising and analytics, ensuring a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and includes CSRF tokens, with a consent management system for GDPR compliance, though it lacks explicit security policy disclosures or incident response information. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the site's legitimacy given its active community and professional presentation. Overall, the site demonstrates a mature digital infrastructure with room for improvement in security transparency and domain registration clarity.

P

Pastebin

pastebin.com

69

Pastebin.com is a well-established online platform founded in 2002 that provides users with the ability to store and share text snippets and code online. It holds a strong market position as a leading paste tool, offering features such as syntax highlighting, API access, and a Pro membership for enhanced capabilities. The website targets a broad audience including developers, programmers, and general users needing temporary text storage. Technically, the site employs modern web technologies including Bootstrap, jQuery, and the Yii framework, hosted with Cloudflare DNS and secured with HTTPS. The site demonstrates good mobile optimization and SEO practices, though accessibility is basic. Security posture is solid with HTTPS and CSRF protections, but could be improved by enabling DNSSEC and adding security headers. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place for tracking and advertising. Overall, the website is professional, trustworthy, and safe for general audiences.

A

Ashok P. Nadkarni

magicsplat.com

53

Magicsplat is a niche website dedicated to programming in Tcl, providing resources such as binary distributions, documentation, open source software, tutorials, and FAQs. The site targets programmers interested in Tcl, offering educational content and software downloads. The business model appears to be content and software distribution with a focus on community support and education. Technically, the site uses a simple stack including Bootstrap and jQuery, with a clean and responsive design. However, there is no evidence of a CMS or advanced hosting details. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. The WHOIS data is missing, indicating potential domain registration issues which impact trust. Overall, the site is functional and content-rich but requires improvements in security, compliance, and transparency to enhance trust and professionalism.

P

Paul Obermeier

tcl3d.org

38

Tcl3D is an open source software project providing 3D graphics capabilities to the Tcl scripting language by wrapping OpenGL and other 3D libraries using SWIG. The project is maintained by Paul Obermeier and has been active since 2005, positioning itself as a niche technology resource for developers interested in Tcl-based 3D programming. The website offers documentation, downloads, demos, and historical information, with source code hosted on SourceForge and additional builds available via BAWT. Technically, the site uses a modern Bootstrap framework with jQuery, delivering a responsive and user-friendly experience. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. No signs of tracking or advertising are present, indicating a privacy-respecting approach. Overall, the domain registration is consistent with the project's history, enhancing trustworthiness.

E

eDIY Software

ediy.co.nz

51

eDIY Software is a New Zealand-based small business specializing in web design, ecommerce software, and web hosting services primarily targeting small to medium businesses and organizations within New Zealand. The company offers a proprietary CMS and ecommerce platform with features such as Bitcoin payment integration, bulk email marketing, and custom web development. Their market position is that of a local, established provider with over two decades of domain presence and a focus on affordable, DIY website solutions. Technically, the website uses Bootstrap and custom JavaScript, with a proprietary CMS platform. Hosting is provided by Dreamscape Networks International Pte Ltd (Crazy Domains), a known NZ registrar and hosting provider. The site performance is moderate with basic mobile optimization and accessibility. Analytics are handled via a self-hosted Matomo instance, indicating some privacy consideration, though no cookie consent or privacy policies are present. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies is a compliance gap, especially for GDPR. The domain WHOIS data is consistent with a legitimate business, with a long registration history and no privacy protection. Overall, the website is professional and trustworthy but would benefit from improved security headers, privacy compliance, and enhanced mobile and accessibility features. Strategic improvements in these areas would strengthen the company's digital maturity and customer trust.

T

The R Foundation

r-project.org

45

The R Project for Statistical Computing is an established open source initiative providing a free software environment for statistical computing and graphics. Supported by The R Foundation, it serves a global audience of statisticians, data scientists, and researchers. The website reflects a mature project with comprehensive documentation, community engagement, and regular updates. Technically, the site uses standard web technologies such as Bootstrap and jQuery, delivering a responsive and navigable user experience. However, some modern security practices like security headers and privacy policies are missing, which could be improved to enhance compliance and trust. The WHOIS data is unavailable due to privacy restrictions, which is common for open source foundations and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the technology sector.

I

Inductive AS

progsbase.com

55

progsbase.com is a technology-focused website operated by Inductive AS, offering future-proof software development tools and services aimed at business automation. The platform provides a library of programs, command line clients, and private repository management under a subscription business model. The website targets software developers and businesses seeking stable automation solutions. Technically, the site uses Bootstrap for responsive design and integrates Google Analytics and Tag Manager for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and SEO enhancements. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies published. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and business information appear professional and consistent with a small technology company based in Norway. Overall, the site is functional and trustworthy but would benefit from improved security practices and clearer domain registration transparency.

The website www.isn.cz is a small-scale, niche project site operated by Jiří Blažek, focusing on two main projects: an electronic timing system for fire sport and an e-learning platform for volunteer firefighters in the Czech Republic. The business model appears to be community and project-driven, targeting volunteer fire brigades and fire sport enthusiasts with affordable and modular technical solutions and accessible online education. The site content is well-structured, informative, and uses modern web technologies such as Bootstrap and jQuery, with backend technologies including Java EE and Spring frameworks for the e-learning platform. However, the site lacks visible privacy, cookie, or terms of service policies and does not provide explicit contact information, which limits its compliance and business credibility. Security posture is moderate, with some use of Spring Security but no visible HTTPS or security headers information. WHOIS data is unavailable, likely due to privacy protection, which reduces trust verification. Overall, the site is functional and relevant for its audience but would benefit from improved security, compliance, and contact transparency.

Q

QM Sports Care

qmsportscare.eu

44

QM Sports Care is a small retail business specializing in premium, natural-based massage and sports care products targeted at professional and recreational athletes. The company positions itself as a trusted supplier in the sports care market, emphasizing natural ingredients and quality. The website reflects a professional brand image with consistent branding and a clear focus on its target audience. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, and various UI libraries, providing a good user experience with mobile optimization and clear navigation. However, the site lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS implied but no visible security headers or vulnerability disclosures. Overall, the site is safe and trustworthy but would benefit from enhanced privacy compliance and security best practices.

B

British Constructional Steelwork Association Ltd.

steelconstruction.org

68

The British Constructional Steelwork Association (BCSA) is a well-established trade body representing UK and Irish steelwork contractors and the wider structural steelwork supply chain. With a domain age dating back to 1997 and a history spanning over a century, BCSA provides membership services, industry directories, technical resources, training programs, and organizes events to support its members. The website targets industry professionals and stakeholders, offering comprehensive information and tools relevant to the steel construction sector. The business model centers on membership and industry support, positioning BCSA as a key national organization within its sector. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome, Google reCAPTCHA, and a cookie consent management system. It is hosted via Cloudflare, ensuring robust performance and security. The site is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be considered. The technical infrastructure supports a professional and user-friendly experience. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the analysis. Overall, the security posture is solid but could be enhanced by adding security headers and formal policies. The overall risk assessment is low, with the site demonstrating strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include implementing security headers, publishing security policies, enhancing accessibility, and maintaining up-to-date third-party libraries to further strengthen the security and compliance posture.

MEA Group GmbH is a well-established German manufacturing company specializing in building systems and water management products, including light wells, drainage channels, and related technical solutions. The company positions itself as a market leader with over 130 years of experience, targeting professional users such as architects and construction industry professionals. Their website offers comprehensive product catalogs, technical documentation, and digital services such as BIM and CAD data, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins and frameworks like Bootstrap, ensuring good mobile optimization and SEO. The presence of cookie consent mechanisms and Google Tag Manager indicates attention to privacy and analytics. However, some security headers and explicit security policies are not clearly visible, suggesting room for improvement in security posture. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the lack of published incident response or vulnerability disclosure policies limits transparency. The WHOIS data is unavailable, which slightly impacts domain trustworthiness, though the professional website content mitigates concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration details.

Focus Rostfrei is a specialized German trade magazine dedicated to stainless, acid-resistant, and heat-resistant steels. It serves industry professionals by providing news, technical articles, event information, and directories. The website is professionally designed using WordPress CMS and integrates multiple plugins for enhanced user experience, including e-paper subscriptions and event management. The site is GDPR compliant with a clear privacy and cookie policy, and it supports multilingual sister publications targeting broader European markets. Technically, the site uses modern web technologies and maintains good performance and mobile optimization. Security posture is solid with HTTPS and secure login forms, though improvements like implementing a Content-Security-Policy header and publishing incident response contacts are recommended. The domain WHOIS data is missing or not publicly available, which raises concerns about registration legitimacy despite the active and professional website presence. Overall, the site is a credible industry resource but should address WHOIS transparency and enhance security headers to improve trust and compliance.

W

WarnerMedia Direct, LLC

cartoonnetwork.pl

69

HBO Max, operated by WarnerMedia Direct, LLC, is a leading subscription-based streaming service offering a wide range of entertainment content including movies, TV shows, originals, and live sports. The website analyzed is a 404 error page in German language, indicating the requested content is unavailable. Despite this, the site demonstrates a mature technical infrastructure using modern web technologies such as React and Next.js, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place. Privacy policies are comprehensive and GDPR compliant. However, direct contact and security policy information are not present on this error page, limiting some aspects of compliance verification. WHOIS data for the domain is not publicly available in the provided raw output, but the branding and domain usage strongly indicate legitimacy as part of WarnerMedia's portfolio.

C

CEWEP e.V.

cewep.eu

57

CEWEP e.V. is a European non-profit confederation representing waste-to-energy plants across Europe. The organization focuses on promoting sustainable waste management and circular economy principles, advocating for energy recovery from residual waste. The website positions CEWEP as a leading industry association with a strong presence in Brussels and Düsseldorf, targeting policymakers, industry professionals, and environmental stakeholders. The business model centers on advocacy, information dissemination, event organization, and member services. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating Google Analytics and YouTube for content and tracking. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response information. WHOIS data is privacy protected, which is typical for European domains, and the domain appears legitimate based on website content and contact details. Overall, the site demonstrates good digital maturity and compliance with GDPR.

F

FETMED

fetmed.cz

47

FETMED is a specialized healthcare provider in the Czech Republic focusing on fetal medicine, genetics, and gynecology. The company operates two physical centers in Olomouc and Ostrava, offering comprehensive prenatal diagnostics, genetic consultations, psychological counseling, and pediatric cardiology. Their market position is that of a trusted regional specialist with experienced medical professionals and advanced diagnostic technologies. The website is professionally designed, mobile-optimized, and provides clear service information and contact channels. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, and Google reCAPTCHA, ensuring a functional and user-friendly experience. Performance is moderate with good mobile responsiveness and basic accessibility features. However, some security best practices such as security headers are missing, and no privacy policy or terms of service pages are present, which impacts compliance and trust. Security posture is generally good with HTTPS enforced and use of CAPTCHA for forms, but the absence of security headers and WHOIS transparency reduces the overall security confidence. No vulnerabilities or exposed sensitive data were detected. Cookie consent is implemented properly, supporting GDPR compliance to some extent. Overall, the website is a credible and professional healthcare service platform with room for improvement in privacy disclosures and security hardening. The lack of WHOIS data is a concern but may be due to local registry policies. Strategic recommendations include publishing privacy and terms policies, adding security headers, and maintaining updated libraries to enhance security and compliance.

N

Nemocnice České Budějovice, a.s.

csklg.cz

43

The website csklg.cz serves as the official platform for the 1st Czechoslovak Congress of Medical Genetics, scheduled for April 2025 in Luhačovice, Czech Republic. It is organized by Nemocnice České Budějovice and associated professional genetics societies from Czechia and Slovakia. The site provides detailed program schedules, speaker information, venue details, registration instructions, and contact information, targeting medical genetics professionals and researchers. The business model focuses on event organization and professional networking within the healthcare genetics sector. The domain is newly registered in 2024, aligning with the event timeline, and hosted via Active24.

achatpublic.info is a French media and information platform specializing in public procurement news, updates, and documentation. It serves public sector professionals, buyers, and suppliers by providing continuous coverage of market developments, regulatory changes, and practical tools. The website demonstrates a solid market position within the niche of government procurement information. Technically, the site is built on Drupal CMS, uses modern web technologies including Bootstrap and Google Tag Manager, and implements a GDPR-compliant cookie consent mechanism via Didomi. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. WHOIS data is unavailable due to privacy or query failure, which slightly reduces transparency but is common for such websites. Overall, the site is professional, trustworthy, and well-optimized for its audience.

S

Semenarna Ljubljana d.o.o.

semenarna.si

57

Semenarna Ljubljana d.o.o. is a well-established Slovenian company specializing in the sale of high-quality agricultural and gardening products, including seeds and various tools. The company targets farmers, gardeners, and agricultural professionals primarily within Slovenia but also maintains an international presence. Their website reflects a medium-sized business with a professional online presence, offering comprehensive contact options and product catalogs. Technically, the website is built on the NBSHOP CMS platform and utilizes modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses anti-spam measures on forms but lacks some advanced security headers and explicit cookie consent mechanisms. Overall, the domain's long registration history and consistent WHOIS data support the legitimacy and trustworthiness of the business.

L

KVM

linux-kvm.org

50

The linux-kvm.org website serves as the official information portal for the Kernel-based Virtual Machine (KVM) open source project, which provides full virtualization capabilities for Linux systems on x86 hardware. The site offers technical documentation, news, and community resources targeted at Linux users, developers, and IT professionals interested in virtualization technology. The project is mature, with a domain age of over 15 years, and is integrated into the Linux kernel and QEMU userspace, reflecting a strong market position in open source virtualization. Technically, the website is built on MediaWiki with Bootstrap and JavaScript, delivering a fast and well-structured user experience. The site uses HTTPS and modern web standards but lacks advanced security headers and comprehensive privacy or cookie policies. Mobile optimization and accessibility are basic, and no analytics or tracking technologies are detected, indicating a minimal user tracking approach. From a security perspective, the site shows good baseline practices such as HTTPS usage and no exposed sensitive data. However, the absence of security headers and published security or incident response policies suggests room for improvement. The WHOIS data is transparent and consistent with the open source nature of the project, enhancing trustworthiness. Overall, linux-kvm.org is a credible, well-maintained technical resource with a strong reputation in the open source community. Strategic enhancements in privacy compliance, security headers, and contact transparency would further strengthen its security posture and user trust.

P

Pigolabs

piwigo.com

47

Piwigo.com is a mature and reputable online image library and digital asset management platform operated by Pigolabs, founded in 2008. The company targets a broad range of professional users including travel and tourism organizations, public sector entities, businesses, non-profits, and photographers. Their SaaS business model offers a free trial and subscription pricing, emphasizing ease of use, collaboration, and GDPR compliance. The website is professionally designed with clear navigation and rich content, supporting multiple languages and showcasing strong trust indicators such as client logos and testimonials. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted under a domain registered with Gandi SAS. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Security evaluation shows no critical vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure policy are areas for improvement. Overall, the site is trustworthy, safe, and professionally maintained with a high AI score reflecting content quality, technical implementation, security, privacy, and business credibility.

M

MonoSystems

monosystems.com

10

MonoSystems is a specialized manufacturer and direct seller of cable management systems including cable trays, raceways, power poles, and j-hooks. The company positions itself as a unique direct manufacturer with over 50 years of industry experience and is part of the NIEDAX GROUP. Their website targets electrical contractors, engineers, architects, and general contractors, offering detailed product information, downloadable resources, and customer engagement through forms and social media. Technically, the site is built on WordPress with WooCommerce and uses modern libraries such as jQuery and Bootstrap, integrating Google Analytics and Tag Manager for tracking. Security measures include HTTPS and Google reCAPTCHA on forms, but the site lacks visible privacy and cookie policies as well as security headers, which are areas for improvement. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business presence indicate a legitimate operation. Overall, the site is professional and functional with moderate technical maturity and good business credibility.

P

Pomurska gospodarska zbornica

pgz.si

10

Pomurska gospodarska zbornica (PGZ) is a regional economic chamber based in the Pomurje region of Slovenia, established in 2008. The organization focuses on uniting and supporting local businesses through networking events, consulting services, public documentation, and educational programs. The website reflects a professional and consistent brand presence, targeting a broad audience including businesses and stakeholders in the region. The site content is primarily in Slovenian and provides comprehensive information about the chamber's activities, projects, and regional economic data. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, FontAwesome, and Owl Carousel, with Google Analytics integrated for user tracking. The site is mobile-optimized and demonstrates good SEO practices.

C

Conseil départemental de la Haute-Marne

haute-marne.fr

52

The Conseil départemental de la Haute-Marne operates as the official local government authority for the Haute-Marne department in France, providing a wide range of public services including road maintenance, education management, social support, and cultural activities. The website serves as a comprehensive portal for residents and stakeholders to access information and services. Technically, the site is built on WordPress using Elementor and Yoast SEO, with Matomo analytics for user tracking. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS and security headers properly configured, but lacks published security policies or incident response details. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the domain registration data aligns well with the website's governmental nature, supporting high legitimacy and trustworthiness.

F

Forstbetrieb Region Aarau

forst-aarau.ch

51

Forstbetrieb Region Aarau is a regional forestry management organization serving multiple municipalities in Switzerland, primarily Aarau, Biberstein, and Unterentfelden. The organization manages approximately 916 hectares of forest land, focusing on sustainable wood harvesting and diverse forestry services including garden and park forestry, tree care, root stock milling, consulting, and sales of firewood and forest products. The website is professionally designed using Joomla CMS and Bootstrap framework, providing clear navigation and relevant content in German for its target audience. Contact information is prominently displayed, enhancing business credibility. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some security headers and privacy compliance mechanisms such as cookie consent. No blocking or WAF challenges were detected, allowing full content access.

Hottgenroth Software AG is a German software company specializing in energy and building technology solutions. The company targets professionals and businesses within the energy sector, offering software products and customer support services. Their website is professionally designed, consistent in branding, and primarily in German, reflecting their focus on the German market. The business model centers on providing specialized software tools for energy management and building technology, positioning them as an established player in this niche industry. Technically, the website is built on ASP.NET WebForms and utilizes common web technologies such as jQuery, Bootstrap, Google Tag Manager, and Google reCAPTCHA for security. Cookie consent is managed through Consentmanager.net, indicating a basic level of privacy compliance. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. SEO optimization is basic but present. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks explicit security headers such as Content Security Policy and HSTS, and there is no publicly available privacy policy, terms of service, or vulnerability disclosure information. Incident response contacts and data protection officer details are also missing, which are important for compliance and trust. Overall, the website is safe and professional but could improve its privacy and security posture by publishing comprehensive policies, implementing security headers, and providing clear incident response channels. These improvements would enhance trustworthiness and compliance with GDPR and other regulations.

W

WALTHER-WERKE Ferdinand Walther GmbH

walther-werke.de

58

WALTHER-WERKE Ferdinand Walther GmbH is a well-established German manufacturer specializing in low-voltage distribution systems, CEE connectors, industrial connectors, and electromobility charging solutions. With a history dating back to 1897 and a medium-sized workforce, the company operates internationally with subsidiaries and a broad partner network. Their product portfolio includes modular power distribution, intelligent charging infrastructure, and robust industrial electrical components, positioning them as a key player in the energy and transportation sectors. The website reflects a professional and consistent brand image, targeting industrial, construction, and electromobility markets. Technically, the site is built on TYPO3 CMS with Bootstrap and includes modern JavaScript libraries, offering a responsive and user-friendly experience. Security posture is solid with HTTPS, anonymized analytics, and spam-protected emails, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact and product information.

B

Bundesverband des Elektro-Großhandels (VEG) e.V.

veg.de

45

The Bundesverband des Elektro-Großhandels (VEG) e.V. is a professional association representing the electrical wholesale industry in Germany. It serves as a central body for industry representation, education, and information exchange, with a membership base of 58 companies and a significant workforce. The website reflects a well-established organization with clear business focus and industry partnerships. Technically, the site is built on WordPress with Elementor, using modern web technologies and hosted by a reputable German provider. The site is mobile-optimized and presents content professionally, though some privacy compliance aspects like cookie consent are missing. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with security headers and incident response information. Overall, the website is trustworthy and serves its target audience effectively.

UNESCO Latvijas Nacionālā komisija is the official national commission representing UNESCO in Latvia, focusing on education, science, culture, and information sectors. The organization facilitates UNESCO program implementation, promotes sustainable development goals, and engages various stakeholders including educational institutions, scientists, and the general public. The website reflects a strong institutional presence with comprehensive content, clear navigation, and consistent branding aligned with UNESCO standards. Technically, the site is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned cookie policies and clear privacy statements. Overall, the website demonstrates high professionalism and trustworthiness suitable for a governmental/non-profit entity.

Museu.ms is a well-established online platform founded in 2010 that serves as one of the largest global cultural heritage resources, providing extensive information on museums, galleries, exhibitions, events, educational programs, and collections worldwide. The platform targets museum visitors, cultural enthusiasts, and museum employees, offering a comprehensive and user-friendly experience with multiple search and filtering options. The website demonstrates consistent branding and regularly updated content, supported by active social media channels and a newsletter subscription service. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Leaflet.js for maps, Google Analytics, Facebook SDK, Twitter widgets, Hotjar, and Google Maps API. The site is mobile-optimized with good SEO practices and basic accessibility features. Hosting details are not explicitly identified, but the site uses a custom CMS inferred from the URL structure and login portals. From a security perspective, the site uses HTTPS with a good SSL configuration and secure login forms. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data, representing areas for improvement. The site uses multiple third-party analytics and tracking tools, with a cookie consent mechanism indicating GDPR compliance. No direct contact emails or phone numbers are publicly available, and no formal security policy or incident response information is found. Overall, Museu.ms presents a trustworthy and professional platform with a solid business model and technical foundation. Strategic recommendations include enabling DNSSEC, implementing security headers, enhancing transparency with contact and security policies, and regularly auditing third-party scripts to maintain security and compliance.

W

WFB Wirtschaftsförderung Bremen GmbH

wfb-bremen.de

62

WFB Wirtschaftsförderung Bremen GmbH is a regional economic development agency responsible for promoting and strengthening the business location of Bremen, Germany. The organization provides a comprehensive range of services including business consulting, funding support, real estate and land management, marketing, tourism, and startup assistance. The website reflects a professional and well-structured digital presence targeting businesses, investors, and stakeholders interested in Bremen's economic growth. Technically, the site uses a modern tech stack including Matomo analytics, Bootstrap, and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and secure forms, though lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, supporting the organization's mission effectively.

V

Vodovod i kanalizacija d.o.o. Ogulin

vodovod-ogulin.hr

43

Vodovod i kanalizacija d.o.o. Ogulin is a local public utility company providing potable water supply and sewage services to the Ogulin region in Croatia. The company emphasizes quality water provision, environmental protection, and customer satisfaction. The website serves as an information portal for consumers, offering news, service information, and contact options. The business operates in the energy sector with a small company size and targets local residents and water consumers. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Bootstrap, and Google reCAPTCHA. It features accessibility tools and is mobile optimized, providing a good user experience. However, the site lacks some advanced SEO and security configurations, such as security headers and detailed privacy policies. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. Google reCAPTCHA is used to protect forms from abuse. However, there is no published security or incident response policy, and the domain registration uses privacy protection, which reduces transparency. No critical vulnerabilities or malicious content were detected. Overall, the website is functional, professional, and trustworthy for its purpose but would benefit from enhanced privacy disclosures, security headers, and transparency in domain registration to improve trust and compliance.

A

Abicart.se

abicart.se

57

Abicart.se is a Swedish e-commerce platform operated by Textalk AB, offering a comprehensive SaaS solution for businesses to start and manage online shops. The platform provides modern payment integrations, logistics support, multilingual capabilities, and AI-powered features such as automatic product description generation and translations. Positioned as one of Sweden's leading e-commerce platforms, Abicart targets entrepreneurs and businesses seeking affordable and scalable online store solutions. Technically, the website employs modern web technologies including React and Bootstrap, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and a public security policy are absent. WHOIS data for the www subdomain is unavailable, but the main domain and business legitimacy are supported by consistent branding and contact information. Overall, the site demonstrates a professional, trustworthy, and user-friendly e-commerce service with strong market positioning in Sweden and the Nordic region.

T

Taquiri GmbH & Co. KG

taquiri.de

50

Taquiri GmbH & Co. KG is a well-established German internet agency specializing in WordPress website development, online shops, SEO, advertising, and web hosting services. With over 25 years of experience, the company targets businesses seeking professional digital presence and marketing solutions. The website reflects a mature digital infrastructure built on WordPress with modern frameworks like Bootstrap and privacy-respecting analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The company demonstrates strong business credibility through consistent branding, comprehensive contact information, and excellent customer reviews. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

SOGO

pluginsmarket.com

60

Sogo WordPress Plugins Market is a small technology business specializing in the development and sale of WordPress plugins. The website offers a range of plugins including calendar widgets, author recent posts, accessibility tools, and premium support services. The target audience primarily consists of WordPress site owners and developers seeking specialized plugin solutions. The business operates an e-commerce model leveraging the Easy Digital Downloads platform for sales and distribution. The domain age and registration details align well with the business history, supporting legitimacy and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several third-party integrations such as Google Analytics, Google reCAPTCHA, and Tawk.to live chat. The site demonstrates good mobile optimization and accessibility features, including a dedicated accessibility plugin and UI controls. Performance is moderate with room for improvement in SEO and technical optimization. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks explicit security headers and DNSSEC. There is no published security policy or incident response information, and no vulnerability disclosure mechanism is present. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and policy disclosures to strengthen trust and security posture.

Gorivo.com operates as a regional ride-sharing platform primarily serving Croatia and neighboring countries. It facilitates peer-to-peer transportation by allowing users to offer and request rides, focusing on routes within Croatia and nearby European nations. The platform has been active since 2003, indicating a mature presence in its niche market. The website's business model centers on connecting drivers and passengers, providing a cost-effective and community-driven transportation alternative. Its market position is niche but stable, targeting individuals seeking carpooling options in the region. Technically, the website is built on ASP.NET WebForms with supporting libraries such as jQuery and Bootstrap, reflecting a legacy but functional technology stack. The site includes standard web fonts, UI components, and Google Adsense for monetization. Performance and mobile optimization are basic, with room for modernization. The site employs cookie consent mechanisms and basic privacy compliance features, though lacks advanced SEO and accessibility optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be a gap in compliance and trust. Advertising practices involve multiple ad networks and tracking vendors, indicating moderate user tracking. The overall security posture is average, with recommendations to enhance headers, enable DNSSEC, and publish security policies. Overall, Gorivo.com presents a functional but basic digital presence with moderate trustworthiness and compliance. Strategic improvements in security, privacy transparency, and technical modernization would enhance its risk profile and user confidence.

B

BLITZ - CINESTAR d.o.o.

blitz-cinestar.hr

58

CineStar Cinemas, operated by BLITZ - CINESTAR d.o.o., is the largest multiplex cinema chain in Croatia, established in 2003. The company operates 16 locations across 11 cities, offering a wide range of cinema experiences including premium formats such as IMAX, 4DX, ScreenX, and Gold Class. The website provides comprehensive information about movie screenings, ticket sales, loyalty programs, and concessions, targeting a general audience including families and cinema enthusiasts. The business model focuses on retail cinema operations with an integrated online ticketing platform and ancillary services such as snacks and event hosting. Technically, the website is built using modern web technologies including Bootstrap, FontAwesome, Swiper.js, and Google Tag Manager for analytics. It is hosted behind Cloudflare CDN and DNS services, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, although some improvements could be made. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present. No vulnerability disclosures or incident response contacts are published, which could be areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, CineStar Cinemas presents a professional, trustworthy, and user-friendly online presence with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party scripts to maintain a robust security posture.

J

Julianus Inkasso

julianus.ee

44

Julianus Inkasso is a well-established Estonian debt collection company founded in 1995, operating as a leading provider in Estonia and the Baltic region. The company offers comprehensive credit management services including debt collection, legal proceedings, and purchase of debt portfolios. It is part of the Aktiva Finance Group, which enhances its market position and operational scale. The website reflects a professional and consistent brand image, targeting both debtors and creditors with multilingual support and self-service portals. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and website content align well, indicating a trustworthy and credible business presence.

A

AS LHV Pank

lhv.ee

60

AS LHV Pank is a leading Estonian financial institution offering a broad range of services including banking, loans, investments, insurance, and pension management. The company targets both individual and business customers within Estonia, positioning itself as a trusted and comprehensive financial services provider. The website reflects this with professional design, clear navigation, and extensive service information. Technically, the site employs modern frameworks such as Bootstrap and uses analytics tools like Google Analytics and PostHog, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure login mechanisms, although there is room for improvement in publishing dedicated security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

May First Movement Technology is a US-based non-profit cooperative focused on providing technology services and hosting to social movements and activists primarily in the US and Mexico. The organization emphasizes democratic control, data protection, and movement-building through technology. Their website reflects a well-structured, bilingual platform offering member services such as email hosting, web hosting, and collaborative tools. Technically, the site uses modern frameworks like Bootstrap and Hugo, with integration of Mastodon social feeds, indicating a moderate level of digital maturity. Security practices include encrypted disk hosting and domain transfer protection, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Overall, the site is professional, trustworthy, and content-rich, but could improve privacy compliance and security transparency.

M

medhochzwei Verlag

medhochzwei-verlag.de

52

medhochzwei Verlag is a specialized German publishing company focused on healthcare media, providing knowledge and resources related to the health system, hospital management, nursing, dementia, and case management. The company targets healthcare professionals and institutions, offering journals, books, and online subscription services. The website reflects a professional and consistent brand presence with a clear focus on its niche market. Technically, the site employs modern web technologies including Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Cookiebot for GDPR-compliant cookie management. Hosting is provided by SchlundTech, a reputable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could improve defenses. No critical vulnerabilities or exposed sensitive data were detected. The website demonstrates good privacy compliance and transparent advertising practices. Overall, the site is well-structured, user-friendly, and trustworthy, supporting the company's position as a reputable healthcare media publisher.

K

Krajská hygienická stanice Moravskoslezského kraje se sídlem v Ostravě

khsova.cz

50

Krajská hygienická stanice Moravskoslezského kraje se sídlem v Ostravě is a regional governmental public health authority responsible for health supervision, epidemiological monitoring, and public health support in the Moravian-Silesian region of the Czech Republic. The website serves as an official portal providing information, updates, and contact details to the public and stakeholders. It maintains a consistent and professional presence with regular updates and official publications. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and the Nette framework, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS assumed but lacks explicit security headers and published security policies. Privacy compliance is partial with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting its governmental nature.

H

Heroina | Samo još jedna WordPress web-stranica

heroina.hr

39

Heroina.hr is a small-scale WordPress website primarily using the Brooklyn theme by United Themes. The site appears to be a minimal or placeholder site with very limited business content, no privacy or cookie policies, and no contact information. The technical infrastructure is based on WordPress with multiple JavaScript libraries and plugins, indicating a moderate level of digital maturity but lacking in SEO and accessibility optimizations. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance measures. Overall, the site presents a low-risk profile but lacks professionalism and trust indicators, limiting its business credibility.

C

Colorful Black

colorfulblack.com

70

Colorful Black is a niche e-commerce retailer specializing in haircare and skincare products tailored for curly, afro, black, and mixed skin types. Established since 2009, the company offers a curated selection of products including haircare brands, beauty accessories, fashion items, and home decor, with a physical presence in Paris. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations for marketing, analytics, and customer engagement. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, possibly due to privacy protection, which slightly impacts trust but is common for small e-commerce businesses. Overall, the site presents a professional and trustworthy online presence with room for improvement in transparency and contact accessibility.

S

Sdružení hasičů Čech, Moravy a Slezska (SH ČMS)

vzdelavani-dh.cz

39

The website www.vzdelavani-dh.cz serves as an e-learning platform dedicated to the education of voluntary firefighters affiliated with the Sdružení hasičů Čech, Moravy a Slezska (SH ČMS) in the Czech Republic. It offers multimedia courses, interactive tests, and performance tracking to facilitate knowledge acquisition and verification. The platform targets members of SH ČMS and aims to provide an accessible and intuitive online learning experience. The website branding and content align well with the stated mission, although no detailed company founding or registration data is provided. From a technical perspective, the site employs common web technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking user interactions. The design is responsive and user-friendly, with clear navigation and relevant content. However, the absence of detected security headers and privacy policies indicates room for improvement in security and compliance maturity. The WHOIS data is unavailable, which limits the ability to verify domain legitimacy and age, impacting trustworthiness assessments. Security posture is moderate; HTTPS is assumed but not explicitly confirmed in the data. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The site lacks privacy and cookie policies, which is a compliance gap under GDPR. No contact information for security incidents or data protection officers is provided. Overall, the site appears safe and professional but would benefit from enhanced security controls and transparency. The overall risk is moderate with no immediate red flags, but the lack of WHOIS data and privacy compliance measures suggest the need for strategic improvements to bolster trust and regulatory adherence.

S

Sustainable Stock Exchanges Initiative

sseinitiative.org

59

The Sustainable Stock Exchanges Initiative is a globally recognized, United Nations-supported platform that promotes sustainable investment and ESG transparency among stock exchanges, investors, regulators, and companies. It offers extensive resources including databases, training programs, publications, and events aligned with the UN Sustainable Development Goals. The website is professionally designed, well-structured, and targets sustainability professionals and capital market stakeholders worldwide. Technically, the site is built on Drupal CMS with modern libraries such as Highcharts and Google Tag Manager, hosted behind Cloudflare for DNS and CDN services. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is lacking as no explicit privacy or cookie policies are found, representing a compliance gap. Overall, the site is trustworthy, authoritative, and serves as a key resource in sustainable finance.

K

Kimberly-Clark Professional

kcprofessional.com

64

Kimberly-Clark Professional is a global enterprise specializing in workplace hygiene, safety, and cleaning solutions, offering trusted brands such as Scott®, Kleenex®, and Kimtech®. The website targets business customers and authorized distributors, providing product information and a secure partner portal. The technical infrastructure employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with strong accessibility and privacy compliance features. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response details are absent. The domain WHOIS data is unavailable, which slightly impacts trust but the overall digital presence and branding strongly support legitimacy. Strategic recommendations include publishing security policies and improving transparency around domain registration.

S

Správa PPC | Profesionální správa PPC

spravappc.cz

44

Spravappc.cz is a Czech-based small business specializing in professional PPC campaign management and online marketing services. The website offers detailed information about their PPC services including search engine positioning, remarketing campaigns, branding, and sales improvement strategies. The company targets businesses and individuals seeking to optimize their online advertising efforts. The site is well-structured, mobile-optimized, and uses modern web technologies such as Bootstrap and jQuery, along with marketing tools like Google Tag Manager and Google Analytics. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a GDPR policy page but no cookie consent mechanism. Contact information is clearly provided via email, phone, and a contact form with GDPR consent. The domain is well-established since 2009, indicating a stable online presence.

BNK-FOL is a Hungarian manufacturing company specializing in the production of waterproofing PVC foils for construction and industrial applications. Established in 2000, the company holds a strong market position as a leading supplier in Hungary and neighboring Central European countries. Their product portfolio includes pond liners, roof insulation foils, deep construction waterproofing, and vapor barriers, targeting construction firms, industrial sites, and landscaping businesses. The website reflects a professional business presence with clear service descriptions and partner references. Technically, the website is built on a custom CMS using the Yii PHP framework, leveraging modern front-end technologies such as Bootstrap and jQuery. It integrates Google Analytics and Google Tag Manager for user tracking and performance monitoring, and includes a cookie consent mechanism to comply with privacy regulations. The site is mobile responsive and offers a good user experience, though some SEO and accessibility enhancements could be made. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible HTTP security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie consent banner. Contact information is clearly provided, enhancing trustworthiness. Overall, BNK-FOL's website demonstrates a solid business and technical foundation with moderate security maturity. Strategic improvements in security headers, incident response transparency, and SEO could further strengthen their digital posture and compliance standing.

L

Loftmyndum ehf.

map.is

55

Loftmyndum ehf. operates the website map.is, which provides an interactive map and aerial imagery services focused on Iceland. The site offers various map layers including planning, protected areas, weather, and webcams, targeting general users and educational institutions. The business model allows free use for individuals for non-commercial purposes while restricting commercial usage without permission. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, OpenLayers, and Proj4js, with Google Analytics integrated for visitor tracking. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No WHOIS data was found for the domain, which reduces trustworthiness but the website content and business information appear legitimate. Overall, the site is functional and trustworthy for its intended audience but could improve in security and privacy compliance.

K

Konplast

konplast.hr

50

Konplast is a Croatian IT company specializing in the development, implementation, and support of business software solutions tailored for small, medium, and large enterprises across various sectors. With over 33 years of experience, the company offers a range of services including remote support, AI-powered virtual assistance for fiscalization and software usage, fintech services, and web shop development. The website reflects a mature digital presence built on Joomla CMS with modern frameworks and libraries, providing a professional and user-friendly experience. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Overall, Konplast demonstrates strong business credibility and technical maturity, positioning itself as a trusted IT solutions provider in Croatia.