Security Directory

C

Cruelty Free Europe aisbl

crueltyfreeeurope.org

53

Cruelty Free Europe aisbl is a small non-profit organization dedicated to ending animal testing across Europe. The website serves as a platform to advocate for animal protection, provide news updates, and promote cruelty-free products through partnerships such as the Leaping Bunny program. Their target audience includes animal welfare advocates and consumers seeking cruelty-free alternatives. The organization maintains a clear and consistent brand presence with professional content and a user-friendly website. Technically, the website is built on Drupal 7 with common web technologies including jQuery, Font Awesome, and Typekit fonts. It employs cookie consent mechanisms and tracking pixels from Facebook and Twitter for analytics and marketing. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The domain is privacy protected but shows no suspicious patterns, consistent with a legitimate non-profit entity. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website demonstrates a solid digital presence with good content quality and business credibility. Security posture is adequate but could be improved with additional headers and published policies. Privacy compliance is well addressed with GDPR-aligned cookie controls and a comprehensive privacy policy.

O

Općina Podravska Moslavina

podravskamoslavina.hr

41

Općina Podravska Moslavina is the official local government entity serving the Podravska Moslavina municipality in Croatia. The website functions as a public information portal providing residents and stakeholders with access to local government news, official documents, public calls, and contact information. The site is positioned as a trusted source for municipal information and transparency, targeting local citizens and interested parties. The business model is typical for government entities, focusing on service delivery and information dissemination rather than commercial activities. Technically, the website is built on WordPress CMS using Elementor page builder and Yoast SEO for optimization. It employs modern web technologies including jQuery, Bootstrap, and Font Awesome. The site is hosted under a Croatian registrar (CARNET), indicating local hosting and compliance with regional standards. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are implemented adequately. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a dedicated security policy or incident response contact. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or malicious content were detected. Overall, the security posture is acceptable but could be improved with additional headers and compliance features. The overall risk assessment is low given the nature of the site and its content. Strategic recommendations include implementing cookie consent for GDPR, adding security headers, publishing a security policy, and maintaining regular updates to WordPress and plugins. These steps will enhance trust, compliance, and security resilience.

E

Exdizajn

exdizajn.com

39

Exdizajn is a Croatian small business specializing in web design, hosting, and digital marketing services primarily targeting companies, crafts, and associations. The company claims to have been operating since 2011, providing tailored digital solutions to help clients grow their online presence. The website is built on WordPress using Elementor and Yoast SEO, reflecting a modern and professional digital infrastructure. Tracking tools such as Google Analytics and Facebook Pixel are implemented, indicating a moderate level of user behavior analysis. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration consistency, which impacts overall trust. Strategic improvements in privacy compliance, contact transparency, and security best practices are recommended to enhance credibility and compliance.

E

Eco Valley Foundation

ecovalley.hu

55

Eco Valley Foundation is a small, established non-profit organization based in Hungary, dedicated to promoting ecological sustainability through education, volunteer programs, and organic farming projects. Their website reflects a clear mission focused on community engagement and environmental awareness, targeting volunteers, students, and supporters of sustainable living. The organization has a consistent brand presence and provides transparent contact information, enhancing trustworthiness. Technically, the website is built on WordPress with common libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. However, it lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies, which are critical for GDPR adherence. The site uses HTTPS, ensuring secure communication. From a security perspective, the site demonstrates basic best practices like HTTPS and CAPTCHA on forms but lacks published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence, supporting the organization's credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security posture improvements to align with modern standards and regulations.

S

Suzana Stojković

suzanastojkovic.com

54

Suzana Stojković operates a professional creative services website specializing in branding, graphic design, web design, photography, and video/animation services. The website presents a strong market position with a portfolio of satisfied clients and testimonials, targeting businesses and individuals seeking tailored creative solutions. Technically, the site is built on WordPress using Elementor and several modern plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response mechanisms are recommended. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional, user-friendly, and compliant with privacy regulations, making it a credible digital presence for the business.

I

ION Network Solutions s.à r.l.

ion.lu

45

ION Network Solutions s.à r.l. is an established IT services company based in Luxembourg with over 20 years of experience and a medium-sized team of more than 20 collaborators. The company targets both professional and individual clients, offering IT solutions including custom software development. Their market position is solid within the Luxembourg IT sector, supported by a professional website showcasing client logos and social media presence. Technically, the website uses modern JavaScript libraries such as Dojo Toolkit, Bootstrap, jQuery, and Glide.js, along with Google Maps API integration. The hosting appears to be managed via mbox.lu, a Luxembourg-based provider. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and vulnerability disclosure information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional, well-branded, and trustworthy but could improve in privacy and security transparency.

V

Ville Myllymäki

villemyllymaki.fi

50

The website www.villemyllymaki.fi is a personal branding site for Ville Myllymäki, a Finnish sprinter athlete. It serves as a platform to share news updates, competition results, and acknowledge sponsors and partners. The site targets a general audience interested in athletics and sports. The business model is focused on athlete promotion and collaboration opportunities. The site is small scale and niche, with consistent branding and good content quality. Technically, the site is built on WordPress using common plugins such as Yoast SEO and Flow-Flow Social Streams for social media integration. It uses Bootstrap for responsive design and Font Awesome for icons. Performance is moderate with good mobile optimization. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and explicit security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact information is limited to a contact form and social media links, with no explicit emails or phone numbers. No vulnerabilities or suspicious content were detected. Overall, the website is legitimate and trustworthy as a personal athlete site but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.

R

Rheinfähre Maul GmbH

rheinfaehre.de

61

Rheinfähre Maul GmbH operates a regional car ferry service connecting Ingelheim and Oestrich-Winkel across the Rhine river in Germany. Established in 1968, the company has a longstanding presence in the transportation sector and was recently acquired by the Flensburger Reederei FRS, a reputable shipping group. The website provides detailed operational information including schedules and tariffs, targeting local commuters and tourists. Technically, the site is built on WordPress with modern plugins for SEO, maps, and galleries, and implements GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and cookie controls, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data supports the legitimacy of the domain and business. Overall, the site reflects a professional and trustworthy transportation service with good digital maturity.

A

Asociatia Veganilor din Romania

asociatiaveganilor.ro

52

Asociatia Veganilor din Romania is a Romanian non-profit organization dedicated to promoting veganism as a healthy lifestyle and ethical philosophy. The website serves as an informational hub offering news, events, campaigns, and educational content related to veganism, animal rights, and environmental sustainability. The organization targets Romanian-speaking audiences interested in adopting or learning about veganism. The website is built on WordPress using the Avada theme and integrates several plugins for SEO, event management, and user engagement. It employs Google Analytics and Facebook SDK for visitor tracking and marketing purposes. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. The domain WHOIS data is privacy protected as per ROTLD policies, which is typical for Romanian domains and does not raise immediate concerns. Overall, the website is professionally designed, content-rich, and serves its niche audience effectively, though it could enhance compliance and security practices.

V

Vegan France Interpro

vegan-france.fr

51

Vegan France Interpro is a French non-profit association dedicated to the economic development of vegan businesses in France. The website serves as a platform for news, events, and advocacy related to veganism and vegan economic activities. It targets French vegan businesses, startups, and stakeholders interested in the vegan market. The association positions itself as a key player in promoting vegan economic interests within France, providing networking opportunities and visibility for vegan enterprises. Technically, the website is built on WordPress, utilizing common libraries such as jQuery, Font Awesome, and Owl Carousel for UI components. The site is mobile-optimized with a professional design and clear navigation, though some accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with a privacy policy present and GDPR considerations, but cookie consent mechanisms are absent. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is professional and trustworthy in content and presentation but would benefit from enhanced security headers, explicit cookie consent, and more transparent contact information. The absence of WHOIS data limits domain legitimacy verification, which slightly reduces trustworthiness. Strategic improvements in security and privacy compliance would strengthen the site's risk posture and user trust.

Ö

Öko-völgy Alapítvány

okovolgy.hu

55

Öko-völgy Alapítvány is a Hungarian non-profit organization dedicated to fostering a sustainable, ecological, and organic farm community. The organization emphasizes education, volunteer work, and community engagement to promote environmental stewardship. The website serves as an informational and engagement platform, providing news, project details, and contact avenues for interested parties. The domain is well-established since 2007, supporting the organization's credibility and longevity. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Facebook Pixel for user tracking and marketing insights. The site is mobile-optimized with good SEO practices but lacks some advanced security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS with a valid SSL configuration, but no advanced security headers were detected. There is no visible incident response or vulnerability disclosure information. The presence of multiple external gambling-related links and hidden promotional content may pose reputational risks and affect content safety ratings. Overall, the security posture is moderate but could be enhanced with better policies and headers. The overall risk is moderate with no critical security issues detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a security.txt file, and reviewing third-party content to ensure alignment with the organization's mission and audience expectations.

D

Dansk Vegetarisk Forening

vegetarisk.dk

43

Dansk Vegetarisk Forening is a Danish non-profit organization dedicated to supporting vegetarians, vegans, and advocates of a green lifestyle. The organization offers memberships, political advocacy, education, and information services to its community. It holds a leading position in Denmark's vegetarian movement and maintains a strong digital presence with comprehensive content and active social media engagement. The website is built on WordPress using modern themes and plugins, ensuring good SEO and mobile responsiveness. Security measures such as HTTPS, security headers, and cookie consent mechanisms are properly implemented, reflecting a mature security posture. However, the site lacks explicit security policies and vulnerability disclosure information, which could enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its mission, with recommendations to improve incident response transparency and accessibility features.

I

Infenso d.o.o.

infenso.hr

44

Infenso d.o.o. is a Croatian technology company specializing in system integration, network equipment design and implementation, IoT solutions, application development, and advanced 3D visualization. Established in 2013, the company targets businesses and organizations seeking digital transformation and integration services. Their market position is that of a niche technology integrator within Croatia, leveraging modern digital tools and platforms to deliver tailored solutions. The website reflects a professional and consistent brand image with good content quality and relevant business information. Technically, the site is built on WordPress with Elementor, utilizing a modern tech stack including jQuery, Google Analytics, and various JavaScript libraries for enhanced user experience. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security policies and vulnerability disclosures. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Gradsko društvo Crvenog križa Valpovo

crvenikrizvalpovo.hr

42

Gradsko društvo Crvenog križa Valpovo is a local branch of the Croatian Red Cross focused on humanitarian aid, blood donation, social support, and community health initiatives. The organization serves the local community in Valpovo, Croatia, providing essential services to vulnerable populations and coordinating volunteer efforts. Their website reflects a well-established non-profit with consistent branding and clear communication of their mission and services. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and Swiper.js, hosted by CARNET, a reputable Croatian academic network. The site is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. Security-wise, the site uses HTTPS and common security plugins but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and trustworthiness.

G

Gradsko društvo Crvenog križa Đakovo

gdcrvenikrizdjakovo.hr

44

Gradsko društvo Crvenog križa Đakovo is a local branch of the Croatian Red Cross focused on providing humanitarian aid, social services, health-related activities, and volunteer coordination within the Đakovo region. The organization operates as a non-profit entity with a clear community-oriented mission, offering services such as first aid training, blood donation campaigns, and disaster response. Their website reflects this mission with relevant content and official documentation, targeting the general public and volunteers in the local area. Technically, the website is built on WordPress with common plugins such as MasterSlider and Bootstrap for responsive design. The site is hosted under Croatian academic network infrastructure (CARNET), ensuring local presence and reliability. The website demonstrates good mobile optimization and accessibility features, although SEO and advanced technical optimizations are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS properly but lacks several security headers and advanced protections such as anti-CSRF tokens on forms. There is no visible cookie consent mechanism, which is a GDPR compliance gap. The WHOIS data is consistent with the organization's location and purpose, enhancing trustworthiness. No critical vulnerabilities or suspicious indicators are found, but improvements in security policies and technical safeguards are recommended. Overall, the website is a trustworthy and functional digital presence for a small non-profit humanitarian organization. Strategic enhancements in security posture and privacy compliance would further strengthen their digital maturity and user trust.

G

Gradsko društvo Crvenog križa Beli Manastir

gdck-belimanastir.hr

42

Gradsko društvo Crvenog križa Beli Manastir is a local branch of the Croatian Red Cross focused on humanitarian aid, first aid education, blood donation, and volunteer coordination within the Beli Manastir community. The organization operates as a small non-profit entity with a clear mission to support vulnerable populations and promote community health and safety. Their market position is that of a trusted regional humanitarian organization affiliated with the national Croatian Red Cross and supported by European solidarity programs. Technically, the website is built on WordPress with a modern but moderate tech stack including Google Analytics and accessibility tools. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and anonymized analytics, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its community well, but could improve in security and privacy transparency.

Kryt Folimanka is a public underground shelter located in Prague 2, serving as the largest shelter in the district with capacity for 1300 people. The website provides information about the shelter, public tours, and related tourist services. The site is maintained by a government or municipal entity, indicated by the nature of the content and sector classification. Technically, the website uses a traditional web stack including Bootstrap, jQuery, and Google Analytics, hosted by Wedos. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, it lacks critical privacy and cookie policies, and no contact information is provided, which impacts compliance and user trust. Security posture is adequate with HTTPS but missing security headers and formal policies. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

P

Praha2proobcana.cz

praha2proobcana.cz

57

Praha2proobcana.cz is the official citizen portal for the Prague 2 municipal district, providing a wide range of public services including housing applications, document verification, fee payments, education enrollment, environmental issues, personal document management, transport permits, offense proceedings, construction permits, public space rentals, social services, subsidies, business registration, complaints, and an information center. The website serves residents and citizens of Prague 2, offering easy access to municipal services and information. Technically, the website is built on WordPress CMS using Elementor page builder and Yoast SEO plugin, with integration of Google Analytics for visitor tracking. The site is hosted under a Czech registrar and uses Forpsi name servers, indicating local hosting. The website is mobile optimized, uses HTTPS with good SSL configuration, and implements a GDPR-compliant cookie consent banner. However, it lacks published privacy policy and terms of service pages, which are important for compliance and transparency. From a security perspective, the site uses HTTPS and cookie consent mechanisms but does not publish explicit security policies or incident response contacts. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the HTML content. The site uses common and reputable plugins and libraries, but regular security audits are recommended to ensure plugin safety. Overall, the website is a trustworthy and professional government portal with good content quality and technical implementation. To improve, it should publish privacy and terms policies, security policies, and incident response contacts to enhance compliance and user trust. Regular security reviews and header enhancements are also recommended to strengthen security posture.

H

HMP - Mestska policie hl. m. Prahy

mppraha.info

42

The website mppraha.info is the official online presence of the Municipal Police of Prague, Czech Republic. It serves as an information portal for residents and visitors, providing details about police units, contact information, news updates, recruitment, and public safety services. The site is well-branded with official logos and consistent municipal police identity, targeting a general audience interested in public safety and municipal services in Prague. The business model is government public service with a large organizational size and established presence since 2014. Technically, the site is built on Joomla CMS with modern web technologies including jQuery, Leaflet for interactive maps, and Revolution Slider for visual content. It integrates social media platforms such as Facebook, Twitter, YouTube, and Instagram, and uses Google Analytics for visitor tracking. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Cookie consent is implemented, indicating some level of privacy compliance, but no explicit privacy policy or terms of service were found on the homepage. No incident response or vulnerability disclosure information is provided. Suspicious hidden links to adult content domains were detected in hidden HTML elements, likely spam injections, but these are not visible to users. Overall, the website is trustworthy and professional, with a strong business credibility score. Recommendations include enabling DNSSEC, adding security headers, publishing a privacy policy, and monitoring third-party scripts for vulnerabilities to improve security posture and compliance.

H

HONEWA

honewa.com

52

HONEWA is a creative studio based in Prague, Czech Republic, specializing in brand, packaging, digital, print, and video design services. The company showcases a strong portfolio with award-winning packaging designs and a professional online presence targeting businesses seeking creative design solutions. Their business model focuses on providing comprehensive creative services to a diverse client base. Technically, the website uses modern JavaScript libraries such as jQuery and Font Awesome, along with Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and offers a good user experience with clear navigation and professional design quality. Security-wise, the website uses HTTPS but lacks visible security headers and published security policies, which are areas for improvement. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. WHOIS data is unavailable, raising concerns about domain registration legitimacy, although the website content and contact information appear professional and consistent with a legitimate business. Overall, the site scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility, with recommendations to enhance security and compliance documentation.

M

MINISTRY OF EDUCATION

gov.gh

34

The Ministry of Education Ghana operates as the national government authority responsible for education policy, reform, and implementation in Ghana. The website serves as an official communication channel to disseminate information about education reforms, virtual learning initiatives, and government projects. It targets a broad audience including students, educators, policymakers, and the general public interested in education in Ghana. Technically, the site is built on WordPress with modern plugins such as Elementor and Revolution Slider, and uses Google Analytics for visitor tracking. The site is mobile optimized and presents a professional design consistent with government branding. Security-wise, the site uses HTTPS and has no visible exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the government entity, indicating high legitimacy.

A

App Elevate

appelevate.cz

54

App Elevate is a small technology company specializing in rapid development of interactive applications across multiple platforms including web, Android, iOS, and macOS. The company emphasizes close client collaboration and offers prototype trials to attract customers. The website is professionally designed with clear navigation and good mobile optimization, hosted on Cloudflare infrastructure. The technical stack includes Bootstrap, jQuery, Font Awesome, and Google Fonts, reflecting a modern front-end approach. Security posture is moderate with Cloudflare protection but lacks explicit security headers and privacy policies, indicating areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and aligned with the domain registration data, but would benefit from enhanced privacy compliance and security hardening.

C

Czech Union of the Deaf, z.ú.

cun.cz

54

The Czech Union of the Deaf, z.ú. is a well-established non-profit organization dedicated to supporting the deaf community in the Czech Republic. Their website presents a clear and professional overview of their services, including activation services, sign language interpreting, simultaneous transcription, educational courses, and publications. The organization maintains multiple regional branches and active social media presence, indicating a strong community engagement and outreach. Technically, the website is built on WordPress with WooCommerce integration for e-commerce functionality, leveraging common web technologies such as jQuery and Google Fonts. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data is a notable concern, reducing domain registration transparency and trustworthiness. Overall, the website is functional, trustworthy, and serves its community well, but could improve in privacy compliance and security best practices.

CIRCUS DESIGN s.r.o. is a Czech Republic-based UX agency specializing in user experience design, user research, consulting, prototyping, and design services. The company has a clear market position supported by a portfolio of reputable clients and active community engagement through events like UX Circus. Their website reflects a professional and consistent brand image targeting businesses seeking UX expertise. Technically, the site uses modern frameworks such as Bootstrap and jQuery, with integration of analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies suggests gaps in compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the business information on the site appears credible and transparent. Overall, the website is well-designed and functional but would benefit from enhanced security and privacy practices.

D

Društvo Crvenog križa Istarske županije

hck-istra.hr

58

Društvo Crvenog križa Istarske županije is a well-established regional humanitarian non-profit organization based in Croatia, focusing on blood donation, first aid, disaster response, and community social programs. With over 30 years of operation, it holds a strong market position in Istria County, supported by volunteers and partnerships. The website reflects a professional and consistent brand image, providing clear information and contact details to its audience. Technically, the site uses modern open-source libraries and frameworks like Bootstrap and jQuery, ensuring good mobile responsiveness and user experience. Security posture is moderate with room for improvement in HTTP security headers and documented security policies. Privacy compliance is strong, featuring GDPR-aligned privacy and cookie policies. Overall, the website is trustworthy, safe, and serves its community-focused mission effectively.

A

aria-studio.cz

aria-studio.cz

43

Aria-Studio.cz is a small Czech web design and development studio operated by Pavel Kovanda and Aleš Rubáš, offering services including web presentation creation, graphics, and web programming. The business has been active since 2004 and targets small businesses and individuals seeking professional web presence solutions. The website is built on WordPress using the Fluida theme and Elementor page builder, reflecting a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy/cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear consistent and professional. Overall, the site presents a trustworthy small business with a solid digital presence but should address privacy and security best practices to enhance compliance and trust.

IN:CUBATOR is a small non-profit organization based in Luxembourg that supports youth initiatives and non-profit organizations by providing a comprehensive support package including coworking spaces, guidance, workshops, networking, and financial assistance. The website is built on WordPress using Elementor and presents a professional and consistent brand image targeted at young people up to 29 years old and youth sector organizations. Technically, the site uses modern web technologies but lacks some advanced security headers and privacy compliance features. The absence of WHOIS data limits domain trust analysis, but the presence of clear contact information and relevant content supports its legitimacy. Security posture is moderate with HTTPS enabled but missing some best practices. Privacy and cookie policies are not found, indicating compliance gaps.

L

Lobby X

lobbyx.army

55

Lobby X is a Ukrainian employment and recruiting platform focused on supporting progress and victory in Ukraine. The platform targets Ukrainian job seekers and employers, likely with a focus on government or military-related employment. Technically, the website is built on WordPress using Bootstrap and jQuery, hosted with Cloudflare DNS and registered via GoDaddy with privacy protection. The site uses modern tracking tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and professionally designed but would benefit from enhanced privacy and security measures.

B

Bloomington Tutors

bloomingtontutors.com

59

Bloomington Tutors is a specialized tutoring service focused on providing one-on-one academic support for Indiana University Bloomington students, particularly in courses such as finite math, calculus, business, and statistics. The company emphasizes personalized tutoring sessions, both online and in-person, with flexible scheduling to meet student needs. Their market position is that of a trusted local educational service with a strong reputation supported by student testimonials and a professional online presence. Technically, the website is built on the UserFrosting PHP framework and leverages modern web technologies including jQuery, Bootstrap, and Google Analytics. The site is well-optimized for mobile devices and offers a fast, accessible user experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for bot protection, but lacks DNSSEC and some advanced security headers, which are recommended for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

IRTA d.o.o. is a medium-sized regional tourism development agency based in Istria, Croatia, established in 2004. The company manages official tourism portals, contact and sales centers, and develops cultural and outdoor tourism products to promote the Istrian region. Their market position is strong within the regional tourism sector, serving tourists and local businesses with comprehensive information and services. Technically, the website uses a custom CMS with modern JavaScript libraries and Google services, but lacks HTTPS which is a significant security gap. The privacy policy is comprehensive and GDPR compliant, with a named data protection officer, reflecting good privacy awareness. However, the absence of HTTPS and security headers lowers the security posture. Overall, the site is professional and trustworthy but requires security improvements to align with best practices.

S

Service de médiation scolaire

mediationscolaire.lu

63

The website mediationscolaire.lu represents the official Service de médiation scolaire, a government entity in Luxembourg dedicated to supporting parents, students, and school personnel in resolving conflicts within the educational system. The service operates independently within the Ministry of National Education and targets the Luxembourg community with mediation services related to primary and secondary education. The site is professionally designed with clear navigation, multilingual support, and accessibility features, reflecting a strong commitment to user experience and inclusivity. Technically, the website is built on WordPress 6.7.1, utilizing Bootstrap for responsive design, jQuery, and Matomo for analytics. It employs GDPR-compliant cookie consent mechanisms and demonstrates good mobile optimization and SEO practices. The hosting provider is not explicitly identified, but the site uses HTTPS with excellent SSL configuration, ensuring secure data transmission. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's government affiliation and Luxembourg location, supporting the site's legitimacy. Overall, mediationscolaire.lu is a trustworthy, well-maintained government service website with strong privacy compliance and good technical implementation. Strategic improvements include adding security headers, publishing a security policy, and providing incident response contact information to enhance security posture and user trust.

N

NextGi

nextgi.com

68

NextGi is a small technology company founded in 2008, specializing in managed IT and security services with a strong emphasis on cybersecurity and customer support. Their website presents a professional and consistent brand image, targeting small to medium businesses seeking comprehensive IT solutions including managed security, VoIP, cloud hosting, and network optimization. The company leverages partnerships with major technology providers such as AWS, Microsoft, and Bitdefender, enhancing their market credibility. Technically, the website uses modern JavaScript libraries and analytics tools, is hosted behind Cloudflare, and employs HTTPS for secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies, security headers, and incident response information. From a security perspective, the domain registration is consistent and trustworthy, with no signs of suspicious activity. The company demonstrates a security-first approach in its service offerings but should improve its website security posture by implementing recommended headers and compliance documentation. Overall, the website is functional and professional but could benefit from enhanced privacy and security transparency. The risk assessment indicates moderate security maturity with no critical vulnerabilities detected but highlights compliance gaps that could expose the company to regulatory risks. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response contacts to strengthen trust and compliance.

L

Lobby X

thelobbyx.com

60

Lobby X is a Ukrainian employment platform and recruiting agency focused on supporting job seekers and employers, with a special emphasis on veterans and military personnel. The company operates a professional website with a clear business model centered on job listings, recruitment services, and career consultations. Their market position is niche but important within Ukraine, supporting progress and victory through employment. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, jQuery, and Lottie animations, and integrates Google services such as reCAPTCHA and Tag Manager. The site is mobile optimized and SEO friendly, though accessibility is basic. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, enabling DNSSEC, and improving privacy compliance to strengthen trust and security.

The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven cybersecurity entity serving as the national CERT/CSIRT for Luxembourg's private sector, communes, and non-governmental organizations. CIRCL provides a broad range of cybersecurity services including threat intelligence sharing via the MISP platform, dynamic malware analysis, passive DNS historical data, and document sanitization from untrusted USB devices. The organization maintains a strong market position as a trusted government-affiliated cybersecurity resource with a history dating back to 2008 and operates under the Luxembourg House of Cybersecurity (LHC). The website reflects a professional and authoritative presence with comprehensive security advisories and publications.

E

EPICUR Alliance

epicur.education

56

EPICUR Alliance is a consortium of nine European higher education institutions collaborating to provide innovative educational programs, research initiatives, and regional ecosystem engagement. The website serves as a multilingual portal offering information on educational offers, research projects, events, and partner universities. The technical infrastructure is based on WordPress with modern web technologies including Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, the website reflects a professional and trustworthy educational alliance with a strong digital presence.

C

culture.lu, Inc.

culture.lu

47

culture.lu is a specialized cultural portal serving the Luxembourg cultural community and enthusiasts. It offers a variety of content including articles, videos, podcasts, event listings, calls for participation, and job offers, positioning itself as a key media hub in the Luxembourg cultural sector. The website is built on Drupal 10 with modern web technologies and integrates social media and newsletter marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some HTTP security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of explicit contact information and terms of service pages is noted but does not significantly detract from overall credibility. The domain registration aligns well with the website's cultural and governmental affiliations, supporting legitimacy. Overall, culture.lu presents a professional, trustworthy, and content-rich platform for its target audience.

I

Ilmatieteen laitos

weatherproof.fi

64

Ilmatieteen laitos is the Finnish Meteorological Institute, a government agency providing authoritative weather forecasts, meteorological data, and related services primarily for Finland. The website serves a broad audience including the general public, meteorological professionals, and government agencies. It offers comprehensive weather information, mobile applications, warnings, and meteorological news, positioning itself as the national leader in meteorological services. The digital infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with mobile-optimized responsive design and integration with official app stores. Security posture is strong with HTTPS, security headers, and privacy-compliant cookie consent mechanisms, although explicit security and incident response policies are not publicly detailed. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's authoritative status.

L

Luonnonvarakeskus (Luke)

luke.fi

63

Luonnonvarakeskus (Luke) is a Finnish government research and expert organization focused on building wellbeing and a sustainable future through renewable natural resources. The website serves as a comprehensive portal offering research, expert services, statistics, policy recommendations, and publications targeted at researchers, policymakers, and stakeholders in the bioeconomy and environmental sectors. The site is built on Drupal 10, employs modern web technologies, and integrates privacy-compliant analytics and cookie consent mechanisms. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response information are not prominently published. Overall, the website reflects a mature digital presence consistent with a large government entity, providing trustworthy and professional content.

O

Open Access Scholarly Publishing Association (OASPA)

oaspa.org

62

The Open Access Scholarly Publishing Association (OASPA) operates a professional and well-structured website focused on supporting open scholarship through membership services, advocacy, and resources. The organization targets institutions and individuals involved in open access publishing, positioning itself as a key non-profit entity in the education sector. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and privacy-conscious analytics, ensuring good performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site presents a low-risk profile with strong business credibility and compliance with privacy regulations.

World Nuclear Association is a well-established UK-based industry association focused on the nuclear energy sector. It provides authoritative information, advocacy, events, and membership services to a global audience of industry professionals and policymakers. The website reflects a mature digital presence with comprehensive content and professional design. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and domain registration protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

C

cOAlition S

coalition-s.org

54

cOAlition S operates as an international consortium promoting Plan S, an initiative to accelerate full and immediate Open Access to scientific publications. The organization targets research funders, academic institutions, and publishers to ensure publicly funded research is openly accessible. The website reflects a professional and authoritative presence with clear information about their mission, principles, and tools supporting Open Access. Technically, the website is built on WordPress, leveraging modern web technologies such as jQuery, Font Awesome, Google Analytics, and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a mature digital infrastructure. However, some security headers are missing, which could be improved to enhance security posture. Security-wise, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present and indicate GDPR compliance, supporting user privacy and regulatory adherence. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. The main limitation is the absence of WHOIS data, which restricts domain registration trust analysis. Strategic improvements in security headers and explicit security policies would further strengthen the site's security posture.

O

Online Factory s.r.o.

smartform.cz

50

Smartform.cz is a Czech-based technology company operated by Online Factory s.r.o., specializing in form data validation and enrichment services. Their offerings include postal address autocompletion and validation, company data validation, email verification, name validation, and reverse geocoding. The company targets a broad audience ranging from small e-commerce shops to large enterprises, providing SaaS solutions with API integration and subscription pricing. The website demonstrates a strong market position with over 1000 companies relying on their services, including notable clients, and offers a professional, well-branded online presence.

F

Flatchr

flatchr.io

69

Flatchr is a French-based software company specializing in recruitment and candidate management solutions. Positioned as a leading ATS (Applicant Tracking System) in France, it offers a comprehensive SaaS platform that enables HR professionals and recruiters to streamline job posting, candidate sourcing, evaluation, and collaboration. The website is professionally designed, content-rich, and targets recruiters seeking efficient hiring tools. Technically, the site leverages HubSpot CMS, modern JavaScript libraries, and integrates marketing and analytics tools such as Google Tag Manager and HubSpot Analytics. Security posture is strong with HTTPS enforced and privacy policies in place, though some security headers could be improved. The WHOIS data is not publicly available, which slightly reduces trust but is mitigated by the professional web presence and compliance with GDPR. Overall, Flatchr demonstrates a mature digital infrastructure and a solid market position in the HR technology sector.

A

American Podiatric Medical Association

apma.org

70

The American Podiatric Medical Association (APMA) operates a comprehensive and professionally designed website serving as a central resource for podiatrists, students, residents, young physicians, and patients. The organization, founded in 1912, provides education, advocacy, practice management resources, and membership benefits, positioning itself as a leading professional association in podiatric medicine in the United States. The website content is rich, well-structured, and targets multiple audiences effectively. Technically, the site is built on Mura CMS 7.0 with Bootstrap 3 and uses modern web technologies including jQuery, Font Awesome, Google reCAPTCHA, and Slick Carousel. The site is mobile optimized with good SEO and accessibility basics. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is strong with HTTPS enforced and use of reCAPTCHA on forms, but lacks explicit security headers and a visible cookie consent mechanism. WHOIS data is unavailable due to a malformed response, which limits domain registration trust analysis, but the site’s professionalism and consistency with a legitimate association mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves its professional audience well. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance further.

P

Private by Design, LLC

titcheck.org

61

Titcheck.org is a small US-based nonprofit organization focused on educating young adults about breast self-awareness and breast cancer risk reduction. The website promotes the #TitCheck concept, encouraging regular breast checks while getting dressed to empower early detection and advocacy. The site is professionally designed with modern frontend technologies including Bootstrap, jQuery, and animation libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain locking, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. The domain registration is consistent with the nonprofit mission and transparent. Overall, the website serves its educational purpose well but should improve privacy compliance and security disclosures to enhance trust and regulatory adherence.

Y

Young Survival Coalition

ysctourdepink.org

64

Young Survival Coalition (YSC) operates a dedicated wellness summit website targeting young adult breast cancer survivors and their support networks. The organization provides immersive wellness events blending physical, emotional, and social support activities. The website reflects a mature non-profit entity with a clear mission and community focus, supported by a consistent brand presence and multiple sponsorships. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting a medium-sized non-profit with a strong community orientation.

M

MyBookings.com

mybookings.com

51

MyBookings.com is a well-established Dutch company specializing in integrated hotel marketing services, including branding, advertising, distribution management, integration services, and analytics. With over 18 years of experience and a domain age of more than 22 years, the company holds a strong market position serving hotels aiming to optimize their customer journey and increase direct bookings. The website reflects a professional and consistent brand image targeting hotel management professionals in the hospitality sector. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and Helix Ultimate, leveraging Google Fonts, Font Awesome, and Google Analytics for enhanced user experience and tracking. Hosting and DNS are managed via Cloudflare, providing reliable performance and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements Google reCAPTCHA for form protection. However, it lacks DNSSEC, Content Security Policy headers, and other security headers like X-Content-Type-Options, which are recommended to enhance security posture. No vulnerability disclosure or incident response policies are publicly available, indicating room for improvement in transparency and security maturity. Overall, the website is trustworthy, professional, and safe for general audiences. It collects user data via contact forms with standard protections but lacks a cookie consent mechanism, which could be improved to enhance privacy compliance. The domain registration data aligns well with the business claims, supporting legitimacy and credibility.

E

Eastern Sun Tours and Safaris

easternsuntours-safaris.com

47

Eastern Sun Tours and Safaris is a Tanzania-based tour operator specializing in safari and adventure travel services. Established in 2010, the company offers a range of services including wildlife safaris, Kilimanjaro climbing expeditions, Serengeti tours, and cultural experiences. The website positions the company as a premier operator with expert guides, targeting tourists interested in exploring Tanzania's natural and cultural treasures. Technically, the website is built on WordPress using Elementor, with integrations such as Google Site Kit for SEO and analytics. Hosting is provided by NameCheap, and the site uses HTTPS with a clientTransferProhibited domain status, indicating a stable and secure domain registration. However, DNSSEC is not enabled, and security headers are missing, which are areas for improvement. The security posture is moderate, with no visible vulnerabilities but lacking advanced security configurations. Privacy compliance is weak, as no privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is not explicitly presented, which may affect user trust and compliance. Overall, the website is professional and content-rich but would benefit from enhanced security and privacy practices to improve trust and compliance.

I

Ilmatieteen laitos

fmi.fi

63

Ilmatieteen laitos is the Finnish Meteorological Institute, a government agency providing authoritative weather forecasts, warnings, and climate research for Finland. The website serves a broad audience including the general public, researchers, and government entities, offering comprehensive meteorological data and services. The site is well-positioned as the national source for weather and climate information, with a strong focus on public service and scientific research. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring clear cookie consent and privacy policies aligned with GDPR. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

M

Met Éireann

metweb.ie

49

Met Éireann operates the MetWeb website as the official Irish National Meteorological Service, providing weather and climate services primarily to registered clients. The website serves as a portal for client login and basic informational content, reflecting a government service model with a focus on meteorological data dissemination. The site uses Joomla CMS with Bootstrap and T3 Framework, hosted with AWS DNS infrastructure, indicating a moderate level of technical maturity. The design and content are basic but consistent with the organization's branding and service scope. Security posture is moderate with HTTPS implied, CSRF tokens in forms, but lacks advanced security headers and DNSSEC. Privacy compliance is supported by a cookie consent banner and a privacy policy page, though terms of service and incident response information are absent. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the website. Recommendations include enhancing security headers, enabling DNSSEC, and improving navigation and content richness to better serve users.