Security Directory

6

655bet

ae.org

55

655bet is an online gambling platform focused on the Brazilian market, offering a wide range of casino games, live dealer experiences, and sports betting with localized payment options such as PIX. The website is professionally designed with excellent content quality and clear navigation, targeting adult Brazilian users interested in gambling entertainment. Technically, the site uses modern frameworks like Bootstrap and Font Awesome, with good mobile optimization and SEO practices. Security measures include SSL encryption and regular audits, although some security headers are missing and no explicit cookie consent mechanism is present. The WHOIS data is unavailable due to malformed responses, which reduces domain trustworthiness and raises concerns about registration transparency. Overall, the platform appears legitimate and professional but would benefit from improved transparency and security header implementation.

Ledini.lv is a small Latvian creative studio specializing in 3D printing and professional photography services. The business combines technological precision with artistic expression, targeting clients who require custom 3D prototypes and event photography. The website is well-designed, mobile responsive, and provides clear service descriptions and contact information, positioning the company as a niche local service provider in the technology and media sectors. Technically, the website uses standard modern web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is mobile optimized and offers a good user experience, though no CMS or advanced frameworks are detected. Performance is moderate with no visible errors or broken elements. However, security posture is moderate due to lack of visible security headers and unknown SSL configuration. Privacy compliance is low as no privacy or cookie policies are present. From a security perspective, the site does not exhibit any blocking or WAF challenges and contains no exposed sensitive data or vulnerable libraries. The WHOIS data is minimal but consistent with a Latvian natural person registrant, aligning with the website's local business focus. The absence of detailed registrant or registrar information limits full trust assessment but no suspicious patterns are found. Overall, the website presents a professional and trustworthy front for a small creative business but would benefit from enhanced security headers, privacy policies, and SSL verification to improve compliance and trustworthiness.

The website hvawei.com presents itself as a smart hardware and IoT solutions provider offering schematic design, PCB layout, prototyping, firmware development, and mass production services. However, the domain WHOIS data indicates that the domain is not registered or is expired, which raises significant concerns about the legitimacy of the business claims. The website content is minimal, primarily serving as a navigation portal linking to other electronics and search engine sites, with no direct contact information or privacy policies provided. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks HTTPS and security headers, indicating a low level of digital maturity and security posture. Overall, the site appears to be a low-trust, low-quality web presence with critical security and compliance gaps.

T

ThreatAft

threataft.com

58

ThreatAft is a comprehensive Cyber Threat Intelligence platform designed to provide real-time security insights and threat analysis for both IT and OT (Operational Technology) environments. It empowers security professionals, IT teams, and industrial security operators with actionable intelligence to protect critical infrastructure and business operations from evolving cyber threats.

I

indevis

indevis.de

63

indevis is a leading Managed Security Service Provider (MSSP) based in Germany, offering tailored IT security solutions including protection, detection, response, consulting, and support services. The company positions itself as a market leader with a comprehensive portfolio addressing modern cybersecurity challenges for enterprises and medium-sized businesses. Their website reflects a mature digital presence built on HubSpot CMS and hosted on AWS infrastructure, demonstrating modern technical capabilities and good performance. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit incident response contacts and vulnerability disclosure policies are not publicly visible. Overall, indevis presents a professional and trustworthy brand with solid business credibility and technical maturity.

The website is a personal cybersecurity portfolio belonging to Kaspars Kusiņš, focusing on showcasing the latest cybersecurity vulnerabilities (CVEs) and security insights. It targets cybersecurity professionals and enthusiasts by providing real-time CVE data and research content. The site is built with modern web technologies and emphasizes secure data transmission via HTTPS and a valid SSL certificate. The business model is informational and portfolio-based, with no commercial transactions or services offered directly on the site. Technically, the site uses standard HTML5, CSS3, and JavaScript with external resources such as Google Fonts and Font Awesome icons. It does not rely on a CMS or major frameworks, indicating a lightweight and custom-built platform. Performance is moderate with good mobile optimization and basic accessibility features. SEO optimization is basic but present through meta tags and structured content. From a security perspective, the site benefits from HTTPS and SSL but lacks advanced security headers and formal security policies such as privacy, cookie, or incident response policies. No contact information or vulnerability disclosure mechanisms are provided, which limits transparency and user trust. The WHOIS data shows privacy protection but contains a suspicious future domain creation date, which reduces domain trustworthiness. Overall, the website is a well-designed personal portfolio with good content quality and security basics but lacks formal compliance and business credibility elements. Strategic improvements in privacy compliance, contact transparency, and domain registration legitimacy would enhance trust and security posture.

E

Ela Works

elaworks.lv

54

Ela Works is a small architecture and interior design studio based in Riga, Latvia, operating under the brand Le Classy Design. The company offers architectural and interior design services, including online interior design, targeting clients seeking professional design solutions. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS3, and JSON-LD structured data. The technical infrastructure is modern and adequate for a small design studio, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and some security-related scripts in place, though it lacks comprehensive security headers and incident response information. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the website presents a professional image with consistent branding and relevant content, but could improve in privacy and security transparency.

6E operates as an invite-only referral network focused on trust-first hiring, targeting employers and senior professionals who act as referrers. The business model emphasizes paying only for successful hires and rewarding credible referrers, positioning itself as a niche player aiming to disrupt traditional and algorithmic hiring methods. The website content is professional, well-structured, and mobile responsive, with clear navigation and a modern design aesthetic. Technically, the site is built with standard HTML5 and CSS3, uses Google Fonts for typography, and is hosted on Amazon AWS infrastructure. The site lacks advanced frameworks or CMS indications and does not include analytics or tracking scripts, reflecting a minimalistic technical footprint. Performance is moderate with good mobile optimization but basic accessibility features. From a security perspective, the site uses HTTPS (implied by domain registrar and hosting), but lacks DNSSEC and security headers, which are recommended for enhanced protection. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR compliance indicators. WHOIS data shows inconsistencies, notably a future domain creation date, which raises questions about domain legitimacy. Overall, the website presents a moderate risk profile with good business credibility but technical and compliance improvements needed. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and clarifying domain registration details to enhance trust and security posture.

B

Betterskin

betterskin.app

56

Betterskin is a small technology-driven healthcare company offering an AI beauty companion focused on helping women understand their skin health. The website is professionally designed using Framer, providing a good user experience with clear navigation and relevant content. The technical infrastructure is modern, leveraging Framer's platform and JavaScript for interactive features, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in privacy compliance and published security policies. Overall, the risk profile is moderate with no critical vulnerabilities detected, but enhancements in privacy and incident response transparency are recommended.

L

Latvijas tenisa amatieru līga (LTAL)

ltal.lv

49

Latvijas tenisa amatieru līga (LTAL) operates as a niche sports league focused on organizing amateur tennis competitions in Latvia, including men's and women's singles matches and the Pāvilostas kauss tournament. The website serves as a platform for scheduling, ranking, and providing news related to amateur tennis players. The organization targets Latvian amateur tennis enthusiasts and maintains an active presence on social media platforms. Technically, the website is built on a modern Ruby on Rails stack with contemporary JavaScript libraries and frameworks, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS enforced and CSRF protections in place, but lacks explicit security headers and cookie consent mechanisms, which are important for GDPR compliance. Overall, the domain registration data aligns well with the website content and business purpose, indicating legitimacy and consistency.

oHo.lv is a well-established Latvian social and dating portal operating since 2000, offering a variety of services including dating, photo sharing, diaries, jokes, and film reviews. The site targets Latvian-speaking users interested in social networking and entertainment. Technically, the site uses standard web technologies with Google Adsense for monetization and Google Consent for privacy compliance. The site is mobile optimized and provides a good user experience with clear navigation. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and some security headers. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy. Overall, the site is legitimate and trustworthy with a moderate risk profile.

S

ss sia

ss.com

61

SS.COM is a prominent Latvian online classified ads platform offering a wide range of categories including jobs, transport, real estate, construction, electronics, clothing, home goods, children’s products, animals, agriculture, and entertainment. The platform serves as a marketplace for individuals and businesses in Latvia to post and search for advertisements, positioning itself as a market leader in the Latvian classifieds sector. The business model is primarily based on free and paid classified listings, targeting Latvian residents and companies seeking to buy, sell, or advertise various goods and services. Technically, the website employs standard web technologies including JavaScript, Google Tag Manager, and Google Analytics for tracking and marketing purposes. The site is mobile-optimized with a responsive design and good SEO practices. However, there is no evidence of a CMS or advanced frameworks, and some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a good SSL configuration, but lacks several important security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms indicating GDPR awareness. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website’s content and verifications suggest legitimacy. No adult or explicit content is present, making the site safe for general audiences. Overall, SS.COM presents a solid online classifieds platform with good content quality and user experience but could improve its security posture and transparency. The missing WHOIS data and lack of direct contact information are notable gaps. Strategic recommendations include enhancing security headers, publishing security and privacy policies more explicitly, and improving contact transparency to strengthen trust and compliance.

R

Recorded Future

tria.ge

62

Recorded Future Triage is a specialized cybersecurity service offering a malware analysis sandbox designed for security professionals to dissect malware samples, track malware trends, and classify threats. The platform supports high-volume sample submissions and provides public reports, positioning itself as a valuable tool in the cybersecurity threat intelligence market. The website reflects a mature business with a domain age consistent with its founding in 2014 and is part of the Recorded Future brand. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google reCAPTCHA for security on its login forms. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security best practices such as HTTPS, CSRF tokens, and CAPTCHA are implemented, but additional security headers and explicit security policies could enhance the posture. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with a cookie consent banner and privacy policy, though direct contact information and incident response details are not publicly available. The site maintains a professional appearance with consistent branding and trustworthy external links. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact channels for incident response to further improve trust and compliance.

Alfred Emken Lackierfachbetrieb GmbH is a well-established small manufacturing business specializing in automotive and industrial painting services based in Aurich, Germany. Founded in 1984, the company offers a broad range of services including vehicle accident repairs, industrial coatings for construction materials, powder coating with a unique facility in the region, and special coatings using premium products. The website reflects a professional and consistent brand image targeting local customers and businesses. Technically, the site uses a modern but basic tech stack including Bootstrap and jQuery, with Google Maps integration for location display. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and advanced security policies. Privacy compliance is strong with a detailed GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the site is functional, trustworthy, and well-suited for its business purpose.

G

Google

skinnycrawlinglax.com

70

Google LLC is a global leader in technology, primarily known for its search engine and extensive portfolio of internet-related services including advertising, cloud computing, software, and hardware products. As a subsidiary of Alphabet Inc., Google maintains a dominant market position with a broad target audience ranging from individual consumers to enterprises worldwide. The company’s business model is heavily reliant on advertising revenue, supported by its advanced technological infrastructure and data analytics capabilities. The website reflects Google's brand strength and market leadership with a professional, user-friendly design optimized for performance and accessibility. Technically, the website leverages modern web technologies and proprietary frameworks, hosted on Google Cloud Platform, ensuring fast load times and excellent mobile optimization. The site employs robust security measures including HTTPS, strict security headers, and content security policies, reflecting a mature security posture. No vulnerabilities or security concerns were detected in the analyzed content. Privacy compliance indicators such as explicit privacy or cookie policies were not found in the provided HTML snippet, which may be due to partial content or separate dedicated pages. However, Google's known compliance with GDPR and other regulations supports a good privacy posture. The absence of direct contact information in the HTML is typical for a large corporation directing users to dedicated support channels. Overall, Google’s website demonstrates high professionalism, security, and technical maturity, with a low risk profile. Strategic recommendations include maintaining up-to-date security practices, enhancing visible privacy compliance disclosures, and continuing to optimize user experience and accessibility.

G

Gemeinde Urdorf

urdorfnord.ch

55

Gemeinde Urdorf operates the Urdorf-Nord website to promote and inform about the urban development project in Urdorf, Switzerland. The site targets residents, investors, and businesses interested in the mixed-use development, emphasizing connectivity, education, healthcare proximity, and lifestyle offerings. The business model is municipal-driven urban planning and community engagement, positioning itself as a sustainable and innovative local development. Technically, the website employs modern web technologies including Bootstrap, CreateJS for animations, and a consent management system for GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-handled with HTTPS and cookie consent, though some security headers are missing and no explicit security policy is published. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Contact information is transparent and trustworthy, enhancing business credibility. No suspicious or malicious content is detected, and the site is fully accessible without WAF blocking. Overall, the website is a professional municipal project site with good content quality, technical implementation, and compliance. Recommendations include adding security headers, publishing a security policy, and improving accessibility for enhanced compliance and trust.

G

GlobalProtect Portal

geoglatt.ch

64

The website geoglatt.ch/global-protect/login.esp serves as a GlobalProtect VPN login portal, primarily targeting corporate users requiring secure remote access. The portal is designed to authenticate users via username, password, and importantly, a valid client certificate, indicating a focus on secure access control. The site’s content is minimal and functional, lacking broader business or marketing information, privacy policies, or contact details, which limits transparency and user trust signals. Technically, the site employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap for layout and responsiveness. While the site appears moderately optimized for performance and mobile use, it lacks advanced SEO and accessibility features. No content management system or hosting provider information is discernible from the page. From a security perspective, the portal enforces client certificate validation and includes a CSRF token in the login form, which are positive controls. However, the absence of visible HTTP security headers, multi-factor authentication, CAPTCHA, or bot protection mechanisms suggests room for improvement. No explicit privacy or cookie policies are present, which may raise compliance concerns, especially under GDPR. Overall, the site functions as a secure access point but lacks comprehensive business, privacy, and security disclosures. Strategic improvements in security headers, multi-factor authentication, privacy compliance, and user trust indicators are recommended to enhance the portal’s security posture and user confidence.

G

Gemeinde Russikon

russikon.ch

58

Gemeinde Russikon is the official municipal government website for the community of Russikon, Switzerland. It provides residents and visitors with access to local government services, news, events, and administrative resources. The site offers digital services such as an online counter (Online-Schalter), event calendars, and contact forms to facilitate communication and service delivery. The target audience primarily includes local residents and stakeholders interested in municipal affairs. Technically, the website is built on the i-web.ch CMS platform, utilizing modern web technologies including JavaScript ES modules, CSS3, and Bootstrap for responsive design. The site is mobile-optimized and includes accessibility features such as skip links and ARIA labels. Performance is moderate with a well-structured navigation system and clear content hierarchy. From a security perspective, the website enforces HTTPS and uses secure login forms. While no advanced security headers were detected, the site follows good practices by anonymizing analytics data and providing user consent mechanisms. There is no public security policy or incident response contact, which could be improved. The WHOIS data confirms the domain is legitimately registered to the municipality, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for the municipality, with good content quality and user experience. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

G

Gemeindeverwaltung Henggart

henggart.ch

61

The website www.henggart.ch serves as the official digital presence of the municipal government of Henggart, Switzerland. It provides residents and visitors with comprehensive information about the community, local administration, political affairs, social services, education, events, and online services. The site is well-structured with clear navigation and multiple interactive modals for contact, login, and search functionalities, enhancing user engagement. The target audience primarily includes local citizens and stakeholders interested in municipal services and community news. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and Bootstrap framework elements. It integrates Matomo analytics with a user consent mechanism, demonstrating a commitment to privacy compliance. The site is hosted securely over HTTPS and embeds multimedia content via Vimeo. The CMS appears to be i-web, a platform commonly used by Swiss municipalities. From a security perspective, the website enforces HTTPS and uses secure forms for user input. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are published. Security headers are not evident in the provided data, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional municipal portal with good content quality and technical implementation. Strategic recommendations include enhancing security posture by implementing security headers, publishing incident response and vulnerability disclosure policies, and adding terms of service to improve legal clarity and user trust.

S

Schule Fehraltorf

schulefehraltorf.ch

60

Schule Fehraltorf is a Swiss educational institution providing comprehensive schooling services from kindergarten through secondary education, including adult education and various extracurricular offerings. The website serves as an information and service portal for students, parents, staff, and the local community, reflecting a well-established local school with a clear market position in Fehraltorf, Switzerland. The site features detailed navigation, contact options, and integration with social media platforms, supporting community engagement and transparency. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, and Matomo analytics for user tracking. The site is mobile-optimized, accessible, and demonstrates good SEO practices. The CMS used appears to be i-web, a Swiss-based content management system tailored for municipal and educational websites. From a security perspective, the site enforces HTTPS and uses secure modals for user interactions. While no explicit security headers were detected, no vulnerabilities or exposed sensitive data were found. Privacy compliance is addressed with visible privacy and cookie policies, including a consent mechanism, aligning with GDPR requirements. However, no dedicated security policy or incident response contact information is publicly available. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements could focus on enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

H

Harmoniemusik Buchs AG

harmoniemusikbuchs.ch

49

Harmoniemusik Buchs AG is a local Swiss music association based in Buchs AG, Switzerland, specializing in brass and woodwind ensemble performances with a focus on march and entertaining music. The website serves as a community portal for members and the public, providing event information, membership login, and contact details. The organization positions itself as a community-driven non-profit focused on musical enjoyment and cultural events. Technically, the website uses a custom ASP-based CMS with Bootstrap and jQuery libraries, delivering a responsive and user-friendly experience. However, there is room for improvement in security practices, including the implementation of security headers and enhanced form protections. Privacy compliance is well addressed with a visible cookie consent mechanism and a privacy policy page. Overall, the site is professional and trustworthy but could benefit from stronger security measures and the addition of terms of service documentation.

S

Schule Oensingen

primarschule-oensingen.ch

46

Schule Oensingen is a local primary school in Switzerland providing education services including kindergarten, primary school classes, and after-school care. The website serves as an information portal for parents, students, and the local community, offering news, events, contact details, and administrative information. The institution positions itself as a community-focused educational provider with clear communication channels and a structured service offering. Technically, the website is built on a modern CMS platform (i-web.ch), utilizing HTML5, CSS3, JavaScript, and responsive design techniques. It incorporates accessibility features and a user-friendly navigation structure. The site includes interactive elements such as carousels and modals for contact and search functionalities, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and uses secure forms with CSRF tokens. However, it lacks explicit published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, reflecting adherence to GDPR principles. Overall, the website is trustworthy, professionally maintained, and suitable for its educational purpose. Strategic improvements could include publishing formal security and incident response policies and enhancing HTTP security headers to further strengthen the security posture.

G

Gemeinden Erlinsbach AG und SO

erlinsbach.ch

58

The website www.erlinsbach.ch serves as the official online portal for the municipalities Erlinsbach AG and Erlinsbach SO in Switzerland, providing residents and visitors with access to municipal services, community information, and local government resources. The site is well-structured, professionally designed, and targets local citizens and stakeholders interested in municipal affairs. It offers key services such as online administrative functions, safety information, education, culture, and technical services. The business model is that of a public sector local government entity, focusing on transparency and community engagement. Technically, the website employs a modern but straightforward technology stack including jQuery, Font Awesome, and Magnific Popup, integrated within a govis CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics are handled via Matomo with a clear cookie consent mechanism, reflecting good privacy practices. However, no advanced frameworks or hosting details are explicitly identified. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with GDPR. While no explicit security policies or incident response contacts are published, no vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly noted, suggesting room for improvement. Overall, the security posture is solid for a municipal website but could benefit from enhanced transparency and technical controls. The overall risk assessment is low, with the site demonstrating high legitimacy, consistent domain registration, and no suspicious content. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, implementing security headers, and maintaining regular audits of third-party scripts to further strengthen security and compliance.

The website www.jaem.ch is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, contact information, or policies are accessible for analysis. The site appears to be protected by Cloudflare's WAF, indicating an intent to secure the site from automated or malicious traffic. However, this also limits the ability to assess the company's market position, services, or compliance posture. The technical infrastructure includes Cloudflare services and standard web technologies but lacks visible SEO or accessibility features due to the blocked content. Security posture cannot be fully evaluated, but the presence of Cloudflare WAF is a positive indicator. Overall, the site currently provides minimal information, resulting in a low trust and credibility score. For a comprehensive assessment, access beyond the WAF challenge is necessary.

The website www.genomeweb.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks content access until human verification is completed. No meaningful website content, metadata, or business information is available for analysis. The WHOIS query for the domain returned no registration data, indicating the domain may be unregistered or WHOIS data is withheld, which raises concerns about domain legitimacy. The technical infrastructure includes Cloudflare security services but lacks visible security headers or policies. Due to the blocked content and missing WHOIS data, the overall risk assessment is high, and the website's trustworthiness and business credibility cannot be established.

W

Werkk Baden

werkk-baden.ch

51

Werkk Baden is a small cultural venue and youth center located in Baden, Switzerland, offering a variety of events including concerts, parties, workshops, and community gatherings. The website presents a well-structured and content-rich platform targeting youth and music enthusiasts, positioning itself as a local cultural hub. Technically, the site uses a CMS likely Redaxo, with a tech stack including jQuery and lazysizes for performance optimization. The site is mobile optimized and SEO friendly, though some technologies like jQuery are outdated. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a formal security policy. Contact information is clearly provided, and the site maintains transparency with cookie management and privacy policy links. Overall, the site is trustworthy and professionally maintained with a strong local presence.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which indicates that the actual website content is inaccessible or blocked. The page content is primarily the offline dinosaur game embedded in Chrome and does not represent a real website. Consequently, no business information, privacy policies, or contact details are available. The technical infrastructure is limited to client-side JavaScript for the game, with no server-side or hosting details. Security posture is minimal with no HTTPS or security headers detected. Overall, the site is non-functional from a user or business perspective and cannot be properly assessed for compliance or security.

F

Foundation for Environmental Education

fee.global

63

The Foundation for Environmental Education (FEE) is a well-established non-profit organization focused on environmental education and sustainable development with a global presence spanning over 110 member organizations in 85 countries. Their core activities include managing internationally recognized sustainability certification programs such as Blue Flag and Green Key, youth empowerment initiatives like Eco-Schools and Young Reporters for the Environment, and global campaigns addressing climate action and ecosystem restoration. The website reflects a professional and consistent brand image aligned with their mission. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager and Mailchimp for analytics and marketing. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. Security posture is strong with HTTPS enforced and HSTS enabled, but the absence of visible privacy and cookie policies indicates room for improvement in compliance. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the lack of explicit privacy and cookie policies, as well as missing contact information for security incidents, represents compliance and transparency gaps. The domain WHOIS data is privacy protected, which is common for non-profits, and no suspicious patterns were detected. The website is safe for general audiences and free from adult or questionable content. Strategically, the organization should prioritize publishing comprehensive privacy and cookie policies with consent mechanisms, establish a vulnerability disclosure process, and improve accessibility to enhance trust and compliance. These steps will strengthen their security culture and align with global data protection standards.

G

Gemeinde Suhr

suhr.ch

62

The website www.suhr.ch serves as the official digital presence of the municipality of Suhr in Switzerland. It provides comprehensive information about the community, local government, services, events, and digital offerings such as an online service portal. The site targets residents and visitors seeking municipal information and services. The business model is that of a government service portal, focusing on transparency, accessibility, and community engagement. The website is well-branded, consistent, and trustworthy, reflecting its official status. Technically, the site is built on a modern stack including HTML5, CSS3, JavaScript, and a proprietary CMS platform (i-web.ch). It uses Matomo for analytics, indicating a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. The presence of accessibility features and a dedicated accessibility mode enhances inclusivity. From a security perspective, the site enforces HTTPS and employs secure login forms with password reset capabilities. However, it lacks explicit security headers and does not publish a security policy or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include implementing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to enhance trust and security culture. The site is suitable for its purpose as a municipal information portal and demonstrates good digital maturity.

K

Kursaal Engelberg AG

kursaalengelberg.ch

62

Kursaal Engelberg AG operates as a regional hospitality venue in Engelberg, Switzerland, specializing in hosting weddings, congresses, seminars, banquets, and cultural events. The company targets private, business, and cultural event organizers seeking a stylish and well-equipped location. The website is professionally designed using the Wix platform, featuring relevant content and structured data that supports business legitimacy. However, the site lacks critical privacy and cookie policies, which impacts compliance and user trust. Technically, the site leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the business presents a trustworthy and professional image but should improve privacy compliance and security transparency to enhance user confidence and regulatory adherence.

The website www.stadtwil.ch serves as the official digital presence of the city of Wil in Switzerland, providing residents and visitors with comprehensive information about municipal services, local news, and community resources. The site is built on the OneGov Town CMS platform, which is widely used by Swiss municipalities, indicating a mature and specialized technical infrastructure. The website demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is strong with HTTPS enforced and minimal third-party tracking, though the absence of explicit privacy and cookie policies suggests room for improvement in compliance. Overall, the site reflects a trustworthy government entity with a focus on public service delivery.

S

saarVV

saarfahrplan.de

50

The website 'saarfahrplan.de' serves as a public transportation schedule and route planning platform for the Saarland region in Germany. It provides users with timetable information and journey planning tools primarily through a web application built on the HAFAS WebApp framework. The target audience is general commuters and residents within the Saarland area seeking transit information. The business model focuses on delivering transit data and real-time updates, positioning itself as a regional transportation information provider. Technically, the site employs a modern JavaScript-based tech stack with Leaflet.js for mapping and a modular HAFAS framework. While the site is functional and moderately optimized for performance and mobile use, it lacks advanced SEO and accessibility features. The absence of a CMS or hosting details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS as indicated by the URL, but no explicit security headers are present in the HTML content. There are no visible forms or data collection points, reducing attack surface but also limiting user interaction. The lack of privacy, cookie, and terms of service policies indicates compliance gaps, especially under GDPR. No incident response or security contact information is provided. Overall, the site is moderately trustworthy and functional for its purpose but would benefit from enhanced security practices, privacy compliance, and clearer business identity disclosures. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

R

Radenska d.o.o.

srcnozajutri.si

40

The website www.srcnozajutri.si is a well-developed corporate campaign platform for Radenska d.o.o., a Slovenian company focused on mineral water production and environmental sustainability. The site highlights Radenska's commitment to ecological projects such as tree planting, circular economy, green energy, water resource protection, and social sponsorships. It targets environmentally conscious consumers and local communities. Technically, the site uses modern web technologies, is mobile-optimized, and hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with cookie consent and a comprehensive cookie policy. Overall, the site reflects a trustworthy and professional brand presence with strong environmental and social responsibility messaging.

R

Revija GLOBAL

revijaglobal.si

55

Revija GLOBAL is a Slovenian media publication focused on issuing a monthly magazine, targeting Slovenian-speaking readers interested in its content. The website serves primarily as an informational portal for the magazine, offering sections about the publication, content, advertising, contact, and subscription. The business model revolves around magazine sales and advertising revenue, positioning it as a small local media entity founded in 2020. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, Google Fonts, and Google Tag Manager for analytics. The site shows basic mobile optimization and SEO practices but lacks advanced frameworks or CMS detection. Performance is moderate with room for improvement in accessibility and modern technical implementations. From a security perspective, the site lacks visible security headers and privacy or cookie policies, indicating potential GDPR compliance gaps. The SSL configuration could not be verified from the provided data, and no incident response or security policy information is available. Google Tag Manager is used for tracking, but no explicit consent mechanism is present. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is functional but basic, with moderate trustworthiness. Key recommendations include implementing HTTPS with strong SSL, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

G

Gostovanje in domene NEOSERV.si

neoserv.si

58

NEOSERV.si is a well-established Slovenian web hosting and domain registration provider founded in 2009. The company offers a broad range of services including domain registration, web hosting (shared, reseller, turbo), email hosting, VPS and dedicated servers, and SSL certificates. Their market position is strong within Slovenia, targeting businesses, developers, and IT agencies seeking reliable and fast hosting solutions. The website demonstrates a professional design with clear navigation and good mobile optimization, supported by modern technologies and analytics tools. Security practices include HTTPS, anti-spam and anti-virus protections, and 2FA for email servers, although explicit security policies and incident response contacts are not publicly visible. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

R

Radenska ADRIATIC

radenska.si

51

Radenska ADRIATIC is a well-established beverage manufacturing company with a history dating back to 1869, specializing in mineral and spring waters, as well as carbonated and non-carbonated soft drinks. The company operates primarily in Slovenia and Croatia, offering a diverse portfolio of beverage brands and emphasizing quality and corporate responsibility. The website reflects a mature digital presence with good design, clear navigation, and active social media engagement. Technically, the site uses modern web technologies and Google Analytics for visitor insights, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Overall, the domain registration is consistent with the company's profile, supporting legitimacy and trustworthiness.

A

ArchiXL B.V.

archixl.nl

58

ArchiXL B.V. is a specialized Dutch company focused on enterprise and information architecture consulting, knowledge management platforms, and training services. Their website presents a professional and comprehensive overview of their offerings, targeting organizations seeking to improve their data, information, and knowledge management capabilities. The company positions itself as a trusted expert in the Dutch market with a strong emphasis on knowledge sharing and pragmatic solutions. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Tag Manager, and SVG graphics. The site is mobile optimized, accessible, and well-structured, providing a good user experience. Performance is moderate with no critical technical issues detected. However, the CMS appears custom or proprietary with no common CMS identified. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is available. Analytics usage is moderate with Matomo and Google Tag Manager tracking users, but privacy compliance is basic. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. There are no indications of malicious content or blocking mechanisms, making it fully accessible for analysis.

R

Renault Hrvatska

renault.hr

54

Renault Hrvatska operates as the official Croatian website for the Renault automotive brand, providing comprehensive information on new and used vehicles, financing options, after-sales services, and vehicle configurators. The website targets Croatian consumers interested in purchasing Renault vehicles, offering a broad portfolio including electric and hybrid models. The site reflects a mature digital presence consistent with a large automotive brand, supported by structured navigation and official branding. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Plausible Analytics, alongside a cookie consent mechanism compliant with GDPR signals. Security posture is strong with HTTPS enforced and privacy-respecting analytics loading conditioned on user privacy signals. However, explicit privacy policies, terms of service, and security incident response information are not directly visible in the provided content. WHOIS data confirms domain legitimacy and consistency with Renault's global presence. Overall, the site is professional, trustworthy, and well-optimized for its audience.

M

MONERE DIGITAL

themonere.net

45

MONERE DIGITAL is a Croatia-based small technology company specializing in innovative digital experiences, including 3D holographic displays and sound masking solutions. Their website showcases a professional portfolio with client testimonials and emphasizes creativity and problem-solving in marketing and communication technologies. The technical infrastructure is based on standard web technologies with moderate performance and good mobile optimization. However, the site lacks advanced security headers and explicit HTTPS enforcement details, and no privacy or cookie policies are present, indicating gaps in privacy compliance. The WHOIS data is consistent with the business claims, showing a domain registered since 2017 without privacy protection, supporting legitimacy. Overall, the website is professional but could improve security and privacy posture.

M

MICRO-LINK d.o.o.

microlink.hr

53

MICRO-LINK d.o.o. is a well-established Croatian telecommunications company founded in 1996, specializing in a broad range of communication technology solutions including private and public mobile networks, microwave radio systems, professional Wi-Fi, IoT, network, security, and defense systems. The company targets business and government sectors requiring reliable and advanced communication infrastructure. Their market position is solid within Croatia and the surrounding region, supported by partnerships with recognized technology providers and EU funding acknowledgments. Technically, the website employs a moderate technology stack with jQuery 1.8.3, Flexslider, and Slick Carousel, indicating a somewhat dated but functional infrastructure. The site is mobile optimized and provides a good user experience, though accessibility and SEO could be improved. Hosting and domain registration are consistent with the company's Croatian base. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and published security policies. The use of an outdated jQuery version presents a potential vulnerability. No exposed sensitive data or obvious vulnerabilities were detected. Privacy compliance is limited due to the absence of a privacy policy and terms of service. Overall, the website is professional and trustworthy with a strong business credibility score. However, improvements in privacy compliance, security best practices, and technical modernization are recommended to enhance security posture and regulatory adherence.

J

JOER s.r.o.

vasaskrina.sk

40

JOER s.r.o. operates the website vasaskrina.sk, offering luxury custom furniture manufacturing services including built-in wardrobes, kitchen units, and wardrobes with an emphasis on online configurators for customer convenience. The company positions itself as a specialist with 15 years of experience in Slovakia, targeting consumers seeking tailored furniture solutions. The website is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, the site uses modern web standards, Google Fonts, and Google Tag Manager for analytics, hosted on a provider indicated by the nameservers (websupport.sk). Security posture is solid with HTTPS and DNSSEC enabled, though explicit security headers and cookie consent mechanisms are absent. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and functional with room for improvement in privacy compliance and security transparency.

Nomad Gym in Ericeira is a new fitness facility targeting nomadic travelers and fitness enthusiasts, scheduled to open in 2025 in Ericeira, Portugal. The website serves as a promotional landing page highlighting the gym's focus on flexible workout spaces, top-tier equipment, and ultra-fast Wi-Fi to support a mobile lifestyle. The business is positioned as a niche gym catering to the growing nomad community, with a small-scale operation and a clear target audience. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted and DNS managed via Cloudflare. The site is mobile optimized and presents a professional design with good user experience. However, it lacks advanced frameworks, CMS, or analytics integrations, indicating a simple but effective digital presence. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits compliance and trust. There are no visible vulnerabilities or exposed sensitive data. Overall, the website is safe and professional but would benefit from enhanced privacy compliance, security headers, and contact information to improve trust and regulatory adherence. The domain registration is consistent with a new business launch, registered through a reputable registrar without privacy protection, which aligns with the business profile.

T

Ton a.s.

ton.cz

65

Ton a.s. is a well-established furniture manufacturer specializing in designed chairs and tables, with a heritage spanning over 160 years. The company targets a general audience interested in quality handcrafted furniture, positioning itself as a reputable player in the manufacturing sector. The website reflects this with professional design and clear branding, emphasizing craftsmanship and design excellence. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. However, some technical improvements could be made, such as adding security headers to enhance protection. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, indicating good privacy compliance. The extensive use of third-party analytics and marketing tools suggests a moderate to extensive user tracking level, but the presence of consent mechanisms aligns with GDPR requirements. The lack of a visible privacy policy or terms of service page is a minor gap. Overall, the website is professional and trustworthy, with no signs of malicious content or security risks. The domain WHOIS data is privacy protected, which is standard for .eu domains, and does not raise concerns. Strategic recommendations include publishing explicit privacy and security policies, enhancing security headers, and providing more direct contact information to improve transparency and trust.

W

Web studio Sto2

sto2.hr

41

Web studio Sto2 is a Croatian-based small technology company specializing in web design, online and mobile application development, graphic and print design, and software solutions. Established in 2012, the company serves primarily regional clients in Croatia and neighboring countries, with a portfolio including automotive, shipbuilding, healthcare, and other sectors. The website showcases a professional portfolio of client projects and emphasizes responsive design and custom CMS solutions. Technically, the site uses modern web technologies including Vue.js and jQuery, and integrates Google Analytics for user tracking. However, there are gaps in privacy compliance, notably the absence of privacy and cookie policies, which is critical for GDPR adherence given the regional focus. Security posture is moderate with no visible security headers or incident response information, but no critical vulnerabilities were detected in the content. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

M

Mono Project

mono-project.com

63

The Mono Project website presents a mature, open source software platform focused on cross platform .NET development. Sponsored by Microsoft and part of the .NET Foundation, it serves developers seeking to build applications across multiple operating systems. The site emphasizes the project's history, community involvement, and transition of stewardship to WineHQ, reflecting a legacy technology with ongoing maintenance and migration recommendations. Technically, the website employs modern web technologies including Foundation CSS, jQuery, FontAwesome, and Highlight.js, delivering a responsive and accessible user experience. The presence of a cookie consent banner and privacy links indicates attention to privacy compliance, though explicit security headers and vulnerability disclosure mechanisms are absent. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, though the website content and external links strongly support authenticity. No adult or questionable content is present, and the site is free from blocking or WAF challenges. Overall, the site is professional and trustworthy from a content perspective but would benefit from improved transparency in domain registration, enhanced security headers, and published security policies to strengthen trust and compliance.

@

@levelsio.com | techno optimist wear

levelsio.com

10

The website levelsio.com operates as a niche e-commerce platform specializing in techno optimism themed merchandise, including apparel and accessories. Founded in 2017, it targets a small but dedicated audience interested in technology-positive lifestyle products. The business leverages the Fourthwall e-commerce platform for its online store, integrating modern payment processing and analytics tools. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and consistent branding. However, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Technically, the site uses a modern tech stack including HTML5, CSS3, JavaScript, Google Tag Manager, Microsoft Clarity, and Stripe for payments. Hosting and DNS are managed via Cloudflare, providing robust infrastructure and security. The site employs HTTPS with excellent SSL configuration and some security best practices such as reCAPTCHA Enterprise for bot protection. However, DNSSEC is not enabled, and explicit security headers like Content-Security-Policy are not evident. From a security perspective, the site is well-protected against common threats but could improve by publishing formal privacy, cookie, and security policies, as well as a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. The absence of contact information and data protection officer details limits transparency and trust. Overall, levelsio.com is a professionally designed and secure e-commerce site with moderate privacy compliance and business credibility. Strategic improvements in privacy documentation and user consent mechanisms would enhance its trustworthiness and compliance posture.

@

@levelsio.com | techno optimist wear

makeeuropegreatagain.co

67

The website levelsio.com is an e-commerce platform specializing in branded apparel and merchandise themed around techno optimism and European identity. It offers a niche collection of products such as organic cotton t-shirts, hats, hoodies, mugs, and stickers. The business appears to be small-sized, founded in 2017, and operates primarily online with a focused target audience interested in techno optimism and European culture. The site is powered by the Fourthwall platform and hosted via Cloudflare, indicating a modern and scalable technical infrastructure. Technically, the website employs a robust stack including Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, TikTok Analytics, Klaviyo for marketing, Stripe for payments, and Google reCAPTCHA Enterprise for bot protection. The site is mobile-optimized, fast-loading, and uses HTTPS with a valid SSL configuration. However, DNSSEC is not enabled, and some recommended security headers are missing, which could be improved to enhance security posture. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent mechanisms, and bot protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and appear GDPR compliant, though no explicit security policy or incident response information is published. The domain WHOIS data is consistent and legitimate, with no privacy protection, indicating transparency. Overall, the website is professionally designed, secure, and compliant with privacy regulations, serving a niche retail market effectively. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

O

ORPA Papír a.s.

orpa.cz

59

ORPA Papír a.s. is a well-established Czech manufacturer specializing in paper-based tubular packaging solutions, including Tubusbox and paper tubes, serving food and industrial sectors. With over 140 years of tradition and multiple ISO and industry certifications, the company positions itself as a reliable and quality-focused packaging partner. The website reflects a professional and modern digital presence with rich multimedia content, clear navigation, and multilingual support. Technically, the site uses modern frameworks and tracking technologies with appropriate consent mechanisms, hosted by a reputable Czech provider. Security posture is good with HTTPS and consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the company's history and location, supporting legitimacy.

Z

ZB Invest

zbi.hr

62

ZB Invest is a Croatian financial investment company specializing in investment funds and related services. The website provides fund pricing, yield data, calculators, and contact options primarily targeting Croatian investors. The domain is well-established since 2000 and hosted with professional infrastructure including Akamai CDN services. The website uses standard JavaScript libraries for UI and data visualization but lacks modern CMS or frameworks. Security posture is basic with no visible security headers or privacy policies, and no contact information is explicitly provided in the analyzed content. Overall, the site is functional but could improve in privacy compliance and security best practices.

G

Games Croatia

gamescroatia.com

61

Games Croatia is an official project website dedicated to promoting the gaming industry and innovation within Croatia. The site serves as a hub for information about the project, its partners, public funding opportunities, and activities related to the Croatian games sector. The website targets game developers, industry stakeholders, and governmental bodies interested in fostering growth and collaboration in the gaming ecosystem. The business model appears to be informational and collaborative, supported by public or governmental funding, positioning itself as a niche regional initiative with a focus on technology and innovation. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google reCAPTCHA for form security, and Google Fonts for typography. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS and HSTS, uses reCAPTCHA to protect forms, and does not expose sensitive data or vulnerable libraries. However, privacy compliance could be improved by implementing a cookie consent mechanism and publishing explicit security and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and partner affiliations suggest legitimacy. Overall, the site presents a professional and trustworthy front for the Games Croatia project but would benefit from enhanced privacy compliance and clearer domain registration information to strengthen trust and regulatory adherence.