Security Directory

I

Cabinet infirmier de Faye d'Anjou | Bellevigne-en-Layon

infirmiers.site

46

The website represents a small local healthcare provider specializing in nursing services in Faye d'Anjou, France. It offers a range of nursing care including injections, dressings, blood tests, sutures, and hygiene care both at home and at the cabinet. The business is conventioned with French health insurance entities and accepts third-party payment, targeting residents in Bellevigne-en-Layon and surrounding communes. The website is professionally designed with responsive layout and clear navigation, though it lacks privacy and cookie policies which are important for compliance. Technically, it uses modern frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate but can be improved by enabling DNSSEC, adding security headers, and enforcing HTTPS. Contact information is clearly presented, but no email or social media presence is visible. Overall, the site is functional and trustworthy for its local healthcare niche but requires enhancements in privacy and security compliance.

L

Le nouvel Econnomiste

lenouveleconomiste.fr

49

Le nouvel Economiste is a French media company specializing in economic, political, and management news and analysis. It operates a professional news website offering subscription-based digital and print content, podcasts, and advertising services. The site targets professionals, business leaders, and policy makers interested in in-depth economic and political coverage. The company maintains a consistent brand presence with active social media channels and partner services such as legal formalities and event listings. Technically, the website is built on WordPress with modern technologies including jQuery, Yoast SEO, and push notification services. It demonstrates good SEO, mobile optimization, and accessibility standards. Security posture is solid with HTTPS enforcement and secure form handling, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. WHOIS data is not publicly available due to AFNIC policies, but the domain is active and professionally maintained, indicating legitimacy.

F

Friconix

friconix.com

50

Friconix is a specialized provider of free and beautiful vector icons, offering a large searchable collection of icons in multiple formats such as SVG, PNG, and JPG. The website targets web developers, designers, and content creators who need high-quality icons for their projects. The business operates on a free resource model with optional user accounts to save icon boards, positioning itself as a niche player in the icon resource market. Technically, the website employs a modern frontend stack including Bootstrap 4.3.1, jQuery, and various third-party ad and analytics services such as Google Analytics, Criteo, and Moneytizer. The site is mobile optimized and has good SEO practices, although performance is moderate due to multiple external scripts and ad networks. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no security headers were detected in the provided data, representing areas for improvement. Privacy compliance is partially addressed with a cookie policy and consent mechanism, but no explicit privacy policy page was found. Contact information is limited to a contact form and login modal; no direct emails or phone numbers are published. Overall, the website is professionally designed and functional with moderate security and privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance trust and compliance.

I

IndieLogin.com

indielogin.com

47

IndieLogin.com is a specialized technology service that enables users to sign in to applications using their own domain names, leveraging the IndieAuth protocol and fallback authentication methods such as Twitter, GitHub, email, or PGP keys. The service targets developers and website owners seeking decentralized and domain-based authentication solutions. The website is well-structured, with clear navigation and professional design, and it openly links to its GitHub repository, indicating transparency and open source development. Technically, the site uses a modern frontend stack including Bootstrap 4.1.0, jQuery 3.3.1, and FontAwesome 5.0.8, hosted on Linode with domain registration via NameCheap. The site is mobile-optimized and performs moderately well, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. No cookie consent or detailed privacy compliance mechanisms are present. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. The domain age and registration details align well with the business history, supporting legitimacy. Overall, IndieLogin.com presents a trustworthy, niche authentication service with good technical implementation and moderate security maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and user trust.

E

Experimental Aircraft Association, Inc.

eaabuilderslog.org

46

EAABuildersLog.org is a niche online platform provided by the Experimental Aircraft Association, Inc. (EAA) to support its members in logging and sharing their experimental aircraft building projects. The website offers project tracking, search, and mapping features tailored to the aviation enthusiast community. It operates as a non-profit service with a focus on community engagement and project documentation. The platform is designed with Bootstrap and jQuery, providing a responsive and user-friendly experience, although some technologies are dated. The site is hosted on JustHost and secured with HTTPS, but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is basic, with a privacy policy page but no cookie consent mechanism. Contact is primarily via a login popup and contact form, with no explicit emails or phone numbers listed. Overall, the website is functional, trustworthy, and serves its target audience well, but could enhance security and privacy features to align with best practices.

O

Oneplay Sport

o2tvsport.cz

48

Oneplay Sport is a Czech sports media and streaming platform launched in 2024, offering live sports broadcasts, news, and program schedules primarily targeting Czech sports fans. The website integrates with partner services such as O2 and Oneplay for subscription and bundled offerings. Technically, the site uses modern web technologies including Google Tag Manager, Adobe Analytics, and a CMP for cookie consent, hosted by Active24. The security posture is adequate with HTTPS and consent management but lacks explicit security headers and published privacy policies. No direct contact information or incident response channels are provided, which limits transparency. Overall, the site is professionally designed with good content relevance and user experience but would benefit from enhanced privacy and security disclosures.

A

Autoškolský ombudsman

autoskolsky-ombudsman.cz

50

The website 'Autoškolský ombudsman' serves as an independent advisory and mediation portal focused on driving schools and related stakeholders in the Czech Republic. It is a joint project of two professional associations representing driving schools, providing free expert advice, mediation services, and legislative input collection. The site targets driving school students, instructors, examiners, and operators, positioning itself as a niche expert resource within the transportation and education sectors. The business model is non-profit, funded initially by sponsorships and planned contributions from driving schools. Technically, the site employs a modern but basic technology stack including Bootstrap, jQuery, and Google Analytics. The design is professional and mobile-optimized with clear navigation and consistent branding. However, the site lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies. No incident response or security contact information is provided. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and partner affiliations support legitimacy. Tracking via Google Analytics is present, but privacy compliance is minimal. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and compliance posture.

NET.mede is an official internet speed testing service operated by ANACOM, the Portuguese national communications authority. The website provides users with tools to measure fixed and mobile internet speeds, test for traffic shaping, and access aggregated statistics. It also offers a mobile app for regular testing and a user account area called My NET.mede. The service targets residential internet users in Portugal and positions itself as a trusted, government-backed resource for internet quality assessment. Technically, the website employs modern JavaScript libraries such as jQuery and Handlebars, with custom scripts for speed testing functionality. It supports mobile platforms via dedicated apps on iOS and Android. The site is well-optimized for performance, accessibility, and SEO, with clear navigation and responsive design. Privacy and cookie policies are implemented with consent mechanisms, and analytics are used responsibly. From a security perspective, the site uses HTTPS with good SSL configuration and basic security headers. No critical vulnerabilities or exposed sensitive data were detected. However, there is no explicit security policy or incident response contact information published, which could be improved. The WHOIS data confirms the domain is legitimately registered to ANACOM, consistent with the website's official nature. Overall, NET.mede presents a professional, trustworthy, and secure platform for internet speed testing in Portugal. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and enhancing HTTP security headers to further strengthen security posture.

Český červený kříž is a well-established national non-profit humanitarian organization in the Czech Republic focused on providing first aid training, blood donation services, social activities, and humanitarian aid. The website serves as an official portal offering comprehensive information, news, event planning, and educational resources targeted at the general public, donors, volunteers, and partner institutions. The organization maintains a strong market position as a trusted entity in the humanitarian sector with a large operational scale. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and integrates Google Analytics and Facebook Pixel for user tracking and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are lacking and no explicit security or incident response policies are published. WHOIS data is not publicly available due to EURid privacy policies, but the website content and branding strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

N

Národní divadlo Brno, p. o.

janacek-brno.cz

58

Janáček Brno is an internationally recognized opera and music festival organized by Národní divadlo Brno, a reputable cultural institution in the Czech Republic. The festival celebrates the legacy of composer Leoš Janáček and holds a strong position in the European cultural landscape, evidenced by its International Opera Awards recognition. The website is professionally designed, multilingual, and provides comprehensive information about the festival, partners, and media resources. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and GDPR compliance mechanisms, though some security headers could be improved. Overall, the site reflects a mature and trustworthy cultural event with strong business credibility.

W

wp-admin.com domain name is for sale. Inquire now.

wp-admin.com

50

The website www.wp-admin.com is a premium domain sales landing page offering the domain for purchase with a fixed price or via offer. The business model is focused on domain brokerage, leveraging the Efty platform for secure transactions and PayPal for payment processing. The site targets domain investors and businesses seeking a premium domain name to establish credibility and online identity. The market position is that of a niche domain sales listing with no active business operations beyond the sale offer. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, Google Fonts, and Google reCAPTCHA for form security. Google Analytics and Tag Manager are implemented for visitor tracking. The site is mobile-optimized with a clean, professional design but lacks comprehensive privacy and cookie policies. Security posture is moderate with HTTPS enforced and reCAPTCHA protecting forms, but no security headers are present. WHOIS data is missing, indicating the domain may not be registered or WHOIS data is unavailable, which reduces trustworthiness. Overall, the site is functional and professional for domain sales but lacks transparency and compliance documentation.

N

Nadační fond Proni

fondproni.cz

48

Nadační fond Proni is a Czech non-profit foundation dedicated to supporting families in childbirth and women's health in the Jihomoravský region. The organization focuses on building and supporting a modern gynecological and obstetric clinic, providing educational activities, and fundraising through donations. The website reflects a professional and consistent brand image with clear messaging targeted at women, families, healthcare professionals, and donors. Technically, the site employs modern web technologies including the Nette framework, jQuery, Google reCAPTCHA, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS and form protections, though the absence of explicit security headers and WHOIS data are notable gaps. Overall, the site is trustworthy and well-designed, but domain registration transparency should be improved to enhance credibility.

L

Lukáš Churý

lukaschury.cz

46

Lukáš Churý's website serves as a personal portfolio and project showcase highlighting his expertise in project management, programming, graphic design, and education. The site presents a well-established personal brand with multiple successful projects primarily in technology and media sectors, targeting a general audience interested in these fields. The domain age and WHOIS data align well with the business history, reinforcing legitimacy. Technically, the website uses a simple but effective tech stack including jQuery and custom JavaScript, hosted on a Czech hosting provider. The site is mobile-optimized and SEO-friendly but lacks advanced frameworks or CMS. Performance is moderate with good design and navigation clarity. From a security perspective, the site lacks visible security headers and privacy compliance documents such as privacy or cookie policies. No forms collect sensitive data, reducing immediate risk, but the absence of GDPR compliance indicators and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices to improve compliance and user trust.

T

Tron Laser Aréna

tronlaserarena.cz

50

Tron Laser Aréna is a specialized entertainment business operating in Brno, Czech Republic, offering modern laser game experiences in two advanced arenas. The business targets a broad audience including families, children, students, and corporate groups, positioning itself as a leading laser game provider in the region. The website is professionally designed with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern JavaScript libraries and integrates social media and marketing tools such as Facebook Pixel, ensuring good digital maturity. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and incident response transparency. Privacy compliance is well addressed with detailed GDPR and cookie policies. However, the absence of WHOIS data reduces domain trustworthiness, warranting further verification. Overall, the site presents a low-risk profile with strong business credibility and user engagement.

S

Sudum (Судум)

sudum.net

50

Sudum is a technology-driven service operating under the 1+1 media group, specializing in protecting copyright and digital content from piracy and unauthorized distribution. The company offers automated monitoring and complaint submission services to safeguard media content online, targeting content owners and media companies primarily in Ukraine. The website reflects a professional and consistent brand image with clear contact information and partner affiliations, positioning Sudum as a credible player in the media copyright protection sector. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, integrates Google services including reCAPTCHA and Tag Manager for analytics and spam protection, and demonstrates good mobile optimization and SEO practices. However, some security best practices like DNSSEC and security headers are not implemented, and no explicit privacy or cookie policies are published, which could affect compliance and user trust. From a security perspective, the site uses HTTPS and Google reCAPTCHA to secure forms but lacks published security policies and incident response contacts. The domain registration is consistent and legitimate, with a stable history and no suspicious patterns. Overall, the security posture is moderate but could be improved with enhanced transparency and technical controls. The overall risk is low given the business nature and content safety rating as safe. Strategic recommendations include publishing privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing incident response information to enhance compliance and trust.

1

1+1 Media

1plus1.international

52

The website distribution.1plus1.international represents 1+1 International, the international broadcasting arm of 1+1 Media, a leading Ukrainian media company. The site offers information about their TV content, including popular series and news programming, targeting Ukrainian audiences both domestically and abroad. The business model centers on content distribution via satellite, cable, IPTV, and online platforms, positioning itself as a major player in Ukrainian prime-time television. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and HLS.js for video streaming. It integrates Google Tag Manager and Google reCAPTCHA for analytics and spam protection respectively. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, indicating a baseline security posture. However, it lacks visible security headers and published privacy or cookie policies, which are important for compliance and trust. WHOIS data is unavailable due to privacy or query failure, but the domain and content appear consistent with a legitimate media entity. Overall, the website is professional and trustworthy with good content quality and business credibility. Key recommendations include publishing privacy and cookie policies, adding security headers, and providing explicit security and incident response information to enhance compliance and user trust.

C

Conexiant

aegisdentalnetwork.com

60

Conexiant operates as a global healthcare content platform specializing in dental publications and clinical education. The website positions itself as a leading destination for trusted clinical content and educational resources aimed at healthcare professionals, particularly in the dental sector. The business appears established with a domain age dating back to 2001, indicating a mature presence in the healthcare information market. The platform's business model revolves around content delivery, audience engagement, and educational services, targeting healthcare practitioners and specialists. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and advanced analytics tools such as Matomo, Hotjar, Microsoft Clarity, and Marketo Munchkin. Hosting is inferred to be on Amazon AWS infrastructure, supported by DNS and cookie data. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. The presence of multiple marketing and tracking scripts indicates a sophisticated approach to user engagement and advertising. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and does not appear to implement or advertise comprehensive security headers or policies. No explicit privacy policy or terms of service pages were found on the analyzed page, which is a compliance gap. The cookie consent mechanism is robust, implemented via Cookiebot with detailed cookie categorization and user controls. No direct contact or incident response information is published, limiting transparency. Overall, Conexiant's website is professional and trustworthy with a strong business credibility score. The main risks relate to privacy compliance and security best practices, particularly the absence of explicit policies and security headers. Strategic improvements in these areas would enhance trust and regulatory adherence.

M

MOL Nyrt.

molplugee.ro

45

MOL Plugee operates as a regional electric vehicle charging service provider primarily focused on Romania, supported by a network of partner sites in neighboring countries. The company is part of MOL Nyrt., a well-established energy sector entity, and benefits from EU co-financing, indicating a strong market position in the sustainable energy and transportation sector. Their services include electric vehicle charging stations, a mobile app for charging management, and customer support, targeting electric vehicle owners and users. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. The technical infrastructure leverages modern web technologies such as Bootstrap, jQuery, and Google Analytics, hosted on Microsoft Azure DNS, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA to protect forms, though the absence of explicit security headers and incident response contacts suggests room for improvement. Privacy compliance is robust with comprehensive cookie consent mechanisms and detailed privacy policies in Romanian, aligned with GDPR requirements. Overall, the website and business demonstrate a credible, trustworthy, and professional operation with moderate technical sophistication and good compliance practices.

H

HOGENT

hogent.be

67

HOGENT is a well-established higher education institution based in Belgium, with a domain age dating back to 1995, reflecting its long-standing presence in the education sector. The website serves to inspire and stimulate individuals to make a difference in society, targeting students, educators, and the broader community. It offers educational services, research, and community engagement, positioning itself as a key regional player in higher education. Technically, the website employs a modern technology stack including Mura CMS, jQuery, Bootstrap, and various third-party libraries for UI and analytics. It integrates Google Tag Manager, Google Analytics, and Cookiebot for consent management, demonstrating a reasonable level of digital maturity. The site is mobile-optimized and shows good SEO and accessibility practices, although accessibility could be further improved. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, and a comprehensive cookie consent mechanism. However, explicit privacy policies, terms of service, and incident response information are not clearly found, indicating areas for compliance enhancement. No critical vulnerabilities or suspicious activities were detected, and the WHOIS data aligns well with the institution's profile, reinforcing legitimacy. Overall, the website is professional, secure, and trustworthy, with moderate to good privacy compliance. Strategic recommendations include publishing detailed privacy and security policies, implementing incident response disclosures, and enhancing accessibility and security transparency to further strengthen trust and compliance.

M

MOL Nyrt.

molplugee.si

63

MOL Plugee operates as a regional provider of electric vehicle charging infrastructure, primarily targeting Slovenia and neighboring countries. The company offers DC and AC charging stations, supported by user account management and mobile applications, positioning itself as a key player in the emerging electric mobility sector. The website reflects a professional and consistent brand presence, supported by EU co-financing under the NEXT-E project, enhancing its market credibility. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Owl Carousel, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Hosting appears to be supported by Microsoft Azure DNS infrastructure, indicating a reliable hosting environment. The site is mobile-optimized and SEO-friendly, with clear navigation and structured content. From a security perspective, the site enforces HTTPS, uses CSRF protection tokens, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, security headers are not explicitly detected and no incident response contacts or vulnerability disclosure policies are published, representing areas for improvement. No critical vulnerabilities or suspicious patterns were identified. Overall, the website demonstrates a solid security posture, good privacy compliance, and strong business credibility. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security and trust.

M

MOL Nyrt.

molplugee.hu

67

MOL Plugee is a Hungarian electric vehicle charging service operated by MOL Nyrt., a major energy company. The website offers comprehensive information about their diversified portfolio of fast DC and AC chargers primarily located in Budapest, targeting both individual EV owners and corporate clients. The platform supports user registration and account management through a dedicated subdomain, enhancing customer engagement and service delivery. The site is well-branded, consistent with MOL's corporate identity, and supported by EU co-financing, indicating strong market positioning and credibility. Technically, the website employs modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA to secure forms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

T

True Digital

true-digital.eu

43

True Digital is a small digital agency specializing in website creation, e-commerce solutions, applications, graphic design, video, photo, and advertising services. The company appears to target businesses and individuals in Slovakia and Central Europe seeking custom digital marketing and web development solutions. The website employs common web technologies such as jQuery, Google Analytics, and Slick Carousel, indicating a moderate level of technical maturity. However, the site lacks comprehensive privacy and cookie policies, and no explicit contact information is provided, which may impact user trust and compliance with regulations such as GDPR. The absence of WHOIS registrant data due to privacy protection limits transparency but is common for small businesses. Overall, the website is functional but could benefit from enhanced security practices and clearer compliance documentation.

U babičky is a small hospitality business based in Banská Bystrica, Slovakia, specializing in preparing and delivering weekly lunch menus with soup, catering services for various social events, and large-volume food delivery for corporate clients. The website presents a clear and consistent brand image with detailed menu offerings including allergen information, and provides multiple contact channels including phone and email. The business targets local residents and companies seeking convenient and quality meal options. Technically, the website uses common web technologies such as jQuery, Bootstrap, FontAwesome, and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

A

Automobile Tierhold GmbH

tierhold.com

48

Automobile Tierhold GmbH is a well-established family-owned automobile dealership based in Germany since 1981. The company specializes in selling new vehicles from Kia, Volvo, and Mazda brands, alongside a large inventory of over 600 certified used cars. Their service offerings include vehicle maintenance, tire changes, smart repair, and e-mobility solutions, targeting both private customers and commercial clients. The website reflects a professional and consistent brand image with clear navigation and comprehensive service information. Technically, the website employs modern web technologies such as Bootstrap and jQuery, with integration of Matomo analytics for user behavior tracking. The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. However, there is room for improvement in security headers and accessibility features. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible HTTP security headers and explicit incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website presents a trustworthy and professional front for the business, though the missing WHOIS data and minor security header gaps suggest areas for enhancement. Strategic recommendations include improving HTTP security headers, maintaining up-to-date libraries, and establishing clear incident response contacts to bolster security posture and trust.

S

Stiftung Naturschutzfonds Brandenburg

naturwacht.de

52

Stiftung Naturschutzfonds Brandenburg is a regional non-profit foundation dedicated to practical nature conservation in Brandenburg, Germany. The organization focuses on funding and implementing projects that protect biotopes and species, securing natural areas for future generations. Their website reflects a professional and well-structured digital presence, emphasizing transparency, accessibility, and user engagement through clear navigation and comprehensive content. The foundation targets a broad audience including local communities, environmental groups, and private individuals interested in conservation efforts. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and privacy-conscious analytics via Matomo. The site demonstrates good performance, mobile optimization, and accessibility features, ensuring a positive user experience. The cookie consent mechanism is robust and GDPR-compliant, reflecting a strong commitment to privacy. From a security perspective, the site enforces HTTPS and employs privacy-respecting analytics, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and published policies. The website is trustworthy, with consistent WHOIS data and legitimate domain registration. It maintains high standards of content quality and privacy compliance, making it a reliable source of information and engagement for its audience.

E

ENJOY CULTURE

enjoyculture.cz

48

ENJOY CULTURE operates as an e-commerce retailer specializing in lifestyle and culture-themed apparel and merchandise. The website offers a catalog of products including hoodies, t-shirts, crewnecks, caps, and towels, targeting consumers interested in branded lifestyle goods. The site is built using modern web technologies such as AngularJS and Bootstrap, with integration of tracking and marketing tools like Google Tag Manager and LFeeder. Social media presence is established on YouTube, Instagram, and Facebook, supporting brand engagement. However, the absence of a visible privacy policy and terms of service pages, combined with missing WHOIS registration data, presents transparency and compliance concerns. The site uses HTTPS with good SSL configuration but lacks important security headers, which could be improved to enhance security posture.

H

Honey

honeymerch.com

50

Honeymerch.com is an e-commerce website specializing in branded apparel and accessories under the Honey brand. The site offers a variety of products including hoodies, t-shirts, leggings, and other merchandise, targeting a general audience interested in fashion and lifestyle products. The website is built using modern web technologies such as AngularJS, Bootstrap 4, and integrates tracking tools like Google Tag Manager and LFeeder for marketing and analytics purposes. The site is mobile-optimized and provides a user-friendly shopping experience with a shopping cart and product filtering features. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit privacy policy or terms of service were found, which impacts compliance and trust. The site uses HTTPS but lacks visible security headers, indicating room for improvement in security posture. Overall, the website appears functional and professional but would benefit from enhanced transparency and security measures.

By Simona is an e-commerce retail website specializing in fashion apparel and beauty products, targeting primarily adult consumers interested in premium casual wear and organic skincare. The website demonstrates a moderate level of digital maturity with a hybrid technology stack including AngularJS, jQuery, and Bootstrap 4, and integrates third-party services such as Google Tag Manager and LFeeder for analytics and tracking. The site is accessible over HTTPS and includes a cookie consent mechanism, reflecting some compliance with privacy regulations. However, the absence of explicit privacy policy and terms of service pages, along with missing WHOIS domain registration data, limits the overall trust and compliance posture. Security headers are not detected, indicating room for improvement in security best practices. Overall, the website is functional and professionally designed but would benefit from enhanced transparency and security measures.

Z

Zweckverband Lausitzer Seenland Brandenburg

senftenberger-see.de

45

Senftenberger-see.de is a professionally maintained tourism and hospitality website focused on the Senftenberger See region in Germany. It offers a variety of accommodation options including holiday homes, camping sites, hotel rooms, and unique tree houses, targeting families and leisure travelers. The site integrates an external booking platform for seamless reservations and provides comprehensive information about leisure activities, gastronomy, and events in the area. Technically, the website employs modern JavaScript libraries such as jQuery and Masonry, with responsive design and conditional loading of Google Maps respecting user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers and explicit policies could be improved. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, the site presents a reliable and user-friendly platform for regional tourism promotion.

Z

Zweckverband Lausitzer Seenland Brandenburg

zweckverband-lsb.de

46

Zweckverband Lausitzer Seenland Brandenburg (LSB) is a regional public entity focused on the development and promotion of the Lausitzer Seenland area in Brandenburg, Germany. The organization supports municipalities in infrastructure projects, operates tourism facilities such as family parks and camping sites, and engages in sustainable project development to foster economic and touristic growth. The website reflects a professional and consistent brand presence targeting local governments, investors, tourists, and job seekers. Technically, the site uses modern web technologies including jQuery and Modernizr, is mobile optimized, and implements privacy-conscious practices by not activating Google Analytics and providing comprehensive cookie consent mechanisms. Security posture is good with HTTPS enforced, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

G

GoMerch

gomerch.sk

51

GoMerch is a Slovakia-based merchandising and promotional items company specializing in full-service merchandising solutions for influencers, personalities, and companies. The company operates an e-commerce platform offering original merch and promotional products, positioning itself as a leading provider in the Slovak and Czech markets. Their services include design, production, and delivery, supported by client testimonials that reinforce their market credibility. Technically, the website uses modern web technologies including AngularJS, Bootstrap 4, jQuery, and integrates Google Tag Manager and CookieYes for analytics and privacy compliance. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and published privacy policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

BEST AöR – Bottroper Entsorgung und Stadtreinigung Anstalt des öffentlichen Rechts

best-bottrop.de

62

BEST AöR is a municipal public service provider specializing in waste disposal and city cleaning services for the city of Bottrop, Germany. The organization offers a comprehensive range of services including waste collection, recycling yard management, street cleaning, winter services, container rental, and customer support. The website reflects a well-established entity celebrating 25 years of service, targeting local residents and businesses with a strong emphasis on sustainability and community engagement through workshops and digital tools such as a dedicated mobile app. Technically, the website employs modern web technologies including jQuery, Vue.js, Google Fonts, and Google Maps API, hosted on a CMS platform called FLYcms. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Privacy and cookie compliance are well implemented with a detailed cookie consent mechanism and a comprehensive privacy policy. Analytics are conducted via Matomo with anonymized data collection, aligning with GDPR requirements. From a security perspective, the site uses HTTPS and secure forms with CAPTCHA protections. However, explicit HTTP security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or suspicious activities were identified in the content or WHOIS data. The domain and DNS setup are consistent with a legitimate municipal entity. Overall, BEST AöR demonstrates a strong digital presence with good security and privacy practices suitable for a public service organization. Strategic improvements could include enhancing HTTP security headers and publishing formal security policies to further strengthen trust and compliance.

A

ADIP, spol. s r. o.

adipsk.sk

46

ADIP SLOVAKIA, spol. s r. o. is a well-established distributor of automotive spare parts and accessories primarily serving the transportation sector in Slovakia and the Czech Republic. With over 28 years of market presence, the company offers a comprehensive product catalog exceeding one million items from more than 300 suppliers, supported by a proprietary distribution system and customer e-commerce platform. The website reflects a professional business presence with clear navigation, relevant content, and legal compliance documents. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring a responsive and user-friendly experience. Security measures include HTTPS, cookie consent with granular controls, and Google reCAPTCHA integration, although some security headers and policies are absent. Overall, the site demonstrates good privacy compliance and business credibility, with room for improvement in formal security policies and accessibility.

A

ADIP, spol. s r. o.

adip.cz

42

ADIP, spol. s r. o. is a well-established distributor of automotive spare parts and accessories operating primarily in the Czech Republic and Slovakia. With over 34 years in the market, the company offers a comprehensive product catalog exceeding one million items from more than 300 suppliers, supported by a proprietary distribution system and customer e-commerce platform. The website reflects a professional business presence targeting automotive industry clients including truck, bus, and passenger vehicle operators. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS and GDPR compliance, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and business credible, though the absence of WHOIS data slightly reduces domain trustworthiness.

A

Awesome Projects SRL

sahiavintage.ro

42

Sahia Vintage is a Romanian digital platform dedicated to preserving and showcasing documentary films produced by the Alexandru Sahia Studio between 1950 and 1990. Operated by Awesome Projects SRL since 2019, it serves a niche cultural audience interested in historical film archives. The website employs a standard WordPress CMS with common web technologies such as Bootstrap and jQuery, hosted on Romanian infrastructure. It features a bilingual interface (Romanian and English) and integrates Google Analytics for visitor tracking. Security posture is moderate with HTTPS usage and cookie consent mechanisms but lacks advanced security headers and DNSSEC. Privacy compliance is basic, relying on a PDF terms document rather than a dedicated privacy policy page. Contact information is not directly available on the homepage, limiting user engagement channels.

Nanxia is a French software development agency specializing in creating customized software solutions and digital platforms for various sectors including event management, construction project tracking, energy optimization, and artisan web services. The website showcases multiple partner projects and platforms, indicating a diversified portfolio and a focus on B2B clients. The company positions itself as a specialized agency delivering tailored software products to professional audiences. Technically, the website employs modern frontend technologies such as Bootstrap 4.3.1 and jQuery 3.3.1, with Google Analytics integrated for visitor tracking. The site is mobile responsive and well-structured, though it lacks advanced accessibility features and explicit privacy or cookie policies. The absence of security headers and WHOIS data reduces the overall security posture and trustworthiness. From a security perspective, the site uses HTTPS (implied by URL), but no explicit security headers were detected. There are no visible forms collecting sensitive data, reducing immediate risk, but the lack of privacy and cookie consent mechanisms is a compliance gap. The WHOIS query returned no registration data, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, Nanxia's website is professional and business-focused with good content quality and technical implementation. However, improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and security posture.

Weydemann Bros. is a German film production company established in 2008, specializing in producing films and series. Their website showcases completed and in-development projects, targeting film industry professionals and enthusiasts. The company maintains a consistent and professional online presence with clear branding and social media engagement on Facebook and Instagram. Technically, the website uses jQuery and Typekit fonts, is hosted via DomainControl (GoDaddy), and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, with room for improvements in security and privacy practices.

DanCzek Teplice a.s. is a leading distributor of cigars, cigarillos, selected cigarette types, and tobacco products in the Czech Republic, targeting adult consumers and tobacco retailers. The website reflects a professional retail and wholesale business model with a clear focus on tobacco product distribution and a retail network. Technically, the website uses modern frontend technologies such as jQuery, Bootstrap, and FontAwesome, providing a responsive and visually consistent user experience. However, the site lacks visible security headers, privacy policies, and contact information, which are critical for trust and compliance. The WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the site is functional and well-branded but requires improvements in security posture and compliance documentation.

P

Pivovar Hulvát, s.r.o.

pivovarhulvat.cz

52

Pivovar Hulvát is a small Czech brewery specializing in craft beer production and sales, with a focus on the southern Bohemia region. The company operates a brewery pub, sells keg and bottled beer through wholesale and retail channels, and maintains an e-commerce platform for direct consumer sales of beer and branded merchandise. The website reflects a regional business with a growing online presence and community engagement through charity projects. Technically, the website uses common JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for tracking. It also employs MapLibre GL JS for interactive maps showing sales locations. Security-wise, the site includes an age verification modal to comply with alcohol sales regulations but lacks visible advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

FAPA truhlářství s.r.o. is a small Czech family-owned business specializing in the manufacturing of high-quality solid wood furniture, including custom-made pieces and antique replicas. With over 20 years of experience, the company targets customers seeking durable and authentic wooden furniture for homes, hotels, and restaurants. The website presents a professional image with clear contact details and a focus on craftsmanship and customer satisfaction. Technically, the site uses standard web technologies such as HTML5, CSS3, and jQuery, with basic mobile optimization and accessibility features. Security measures include CAPTCHA on the contact form and a cookie consent mechanism, but lack visible HTTPS confirmation and security headers, which are recommended for improvement. The absence of WHOIS data limits domain trust verification, though the website content and contact information support legitimacy. Overall, the site is functional and informative but would benefit from enhanced security and transparency.

Arubio s.r.o. is a Czech company specializing in the construction of turnkey wooden houses primarily serving the regions around Hradec Králové and Pardubice. The company emphasizes natural building materials, avoiding harmful chemicals, and offers customizable home designs with a focus on quality and speed of construction. Their website reflects a professional and regionally focused business with clear contact information and social media presence. Technically, the site uses modern JavaScript libraries and tracking tools with a cookie consent mechanism ensuring GDPR compliance. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security posture. Overall, the website is accessible, well-structured, and trustworthy for its target audience.

Escaparium is a small regional entertainment business specializing in premium escape room games with multiple locations in Quebec, Canada. The website presents a professional and consistent brand image with clear navigation and relevant content focused on team building and group activities. The technical infrastructure uses modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, hosted on SiteGround. While the website is accessible and functional, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is explicitly provided, which may impact user trust and regulatory compliance. Security posture is moderate with domain protections in place but missing DNSSEC and security headers. Overall, the website is suitable for its business purpose but requires improvements in privacy, security, and contact transparency.

M

MODEL PACK SHOP Bratislava

packshop.sk

58

MODEL PACK SHOP Bratislava operates a well-established e-commerce platform specializing in packaging materials including cardboard boxes, adhesive tapes, foils, and bags. With over 24 years of tradition and own manufacturing capabilities under the parent company Model Obaly, a.s., the company holds a strong position in the Slovak packaging market. The website offers a comprehensive product catalog, loyalty programs, and free shipping above a purchase threshold, targeting both businesses and individual customers. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and Ekko Lightbox, with responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

F

Fondation C.Genial

cgenial.org

47

Fondation CGénial is a French non-profit organization established in 2006, dedicated to promoting science, technology, and related careers among youth. It acts as a bridge between the education sector and industry, engaging students, educators, engineers, and companies through various programs and contests. The foundation enjoys a solid market position supported by partnerships with major corporations such as EDF, Sanofi, and Arkema. The website reflects this mission with relevant content, testimonials, and partner showcases. Technically, the site uses a modern JavaScript stack including jQuery, Matomo analytics, Google Tag Manager, and Google reCAPTCHA for form security. Hosting is provided by OVH, a reputable French provider. Security posture is good with HTTPS enforced and anti-bot measures on forms, but lacks published security policies and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-structured, serving its educational and non-profit goals effectively.

SMS-služby s.r.o. is a specialized service provider focused on supporting municipalities, towns, and schools across the Czech Republic. As a wholly owned subsidiary of the Sdružení místních samospráv České republiky (SMS ČR), it offers professional and cost-effective services primarily in data protection (GDPR), public procurement administration, grant advisory, strategic planning, copyright management, and website auditing. The company targets public sector entities and nonprofit organizations, leveraging its affiliation with SMS ČR to maintain a trusted market position. Technically, the website is built on the WebWorks WebCreator CMS platform, utilizing modern JavaScript libraries such as jQuery and Popper.js, and includes responsive design elements for mobile optimization. The site employs HTTPS with a good SSL configuration and integrates Google Analytics for user tracking, complemented by a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and organizational affiliation support its legitimacy. Overall, SMS-služby s.r.o. presents a professional and trustworthy online presence aligned with its business focus. However, improvements in security header implementation, domain registration transparency, and publication of security policies would enhance its security posture and trustworthiness.

Y

Yes In My Bratislava

yimba.sk

60

The website 'Yes In My Bratislava' is a Slovak local media portal dedicated to providing information about urban projects, construction, and architecture in Bratislava. It targets residents and stakeholders interested in the city's development, offering news articles, project listings, videos, and photo galleries. The business model is primarily media and information dissemination focused on real estate and urban planning topics within Slovakia. The site demonstrates consistent branding and good content quality tailored to its niche audience. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, and various advertising and analytics tools such as Google Tag Manager, Google Analytics, Gemius, and Adform. It uses HTTPS and has implemented cookie consent mechanisms via CookiePro, indicating a reasonable level of digital maturity. Mobile optimization and SEO practices are good, though accessibility is basic. From a security perspective, the site enforces HTTPS and uses cookie consent with script blocking, but lacks explicit security headers like Content-Security-Policy and does not provide a security.txt or vulnerability disclosure. No privacy policy or terms of service pages were found, and no direct contact information for security incidents is available. These gaps reduce privacy compliance and security posture scores. Overall, the website is functional, professionally designed, and serves its target audience well. However, it would benefit from enhanced privacy and security disclosures, explicit security headers, and clearer contact information to improve trust and compliance. There is no indication of malicious content or blocking mechanisms, and the domain registration data aligns well with the website's focus, supporting its legitimacy.

P

Poradca podnikateľa, spol. s r.o.

pp.sk

39

Poradca podnikateľa, spol. s r.o. is a well-established Slovak company providing reliable shortcuts and solutions in the areas of taxes, accounting, payroll, human resources, public administration, and corporate security. With over 35 years of experience, the company targets Slovak professionals, entrepreneurs, and public sector entities, offering a mix of online products, publications, podcasts, and events. The website reflects a professional and consistent brand with a clear focus on legislative and business support services. Technically, the site uses modern JavaScript frameworks such as Vue.js and Bootstrap, combined with popular libraries like jQuery and Axios, indicating a mature and maintainable digital infrastructure. The presence of Google Analytics and Tag Manager scripts shows moderate user tracking for marketing and analytics purposes. Security-wise, the site enforces HTTPS and uses verification meta tags but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.

N

Netia SA

netiaonline.pl

57

Netia SA operates a secure online login portal for its telecommunications services under the domain zaloguj.netia.pl. The website serves residential and business customers in Poland, providing access to account management and service information. The platform uses modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA to ensure usability and security. The presence of a GeoTrust SSL certificate indicates a secure HTTPS environment, essential for protecting user credentials during login. However, the absence of visible privacy and cookie policies on this login page suggests room for improvement in privacy compliance. The WHOIS data for the subdomain is not publicly available, consistent with .pl registry privacy norms, but the website branding and content strongly align with the legitimate Netia SA brand. Overall, the site demonstrates a moderate level of technical maturity and security posture appropriate for a large telecommunications provider.

W

Wolters Kluwer SR, s.r.o.

noveaspi.sk

68

Wolters Kluwer SR, s.r.o. operates the ASPI platform, a comprehensive Slovak legal information system that integrates laws, regulations, case law, and legal literature. The platform targets legal professionals, government bodies, and municipalities, offering subscription-based access to legal databases and AI-powered legal assistants. The website reflects a mature digital presence with modern JavaScript libraries, cookie consent mechanisms, and integration with global Wolters Kluwer branding. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit incident response contacts are absent. Overall, the platform is trustworthy and professionally maintained, serving a specialized legal market in Slovakia.