Security Directory

G

Grad Prelog

prelog.hr

45

The website www.prelog.hr serves as the official digital presence of the City of Prelog, Croatia. It provides comprehensive information about city governance, local news, events, public tenders, EU projects, and community services. The site targets residents, local businesses, and visitors seeking municipal information. The business model is that of a government municipal portal, focusing on transparency and public service. The domain age and WHOIS data confirm a long-standing and legitimate presence consistent with a municipal entity. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and accessibility tools from EqualWeb, ensuring good mobile optimization and accessibility compliance. Hosting is managed under Croatian academic network infrastructure (CARNET), which is appropriate for government entities. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and includes CAPTCHA mechanisms in forms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed with cookie and privacy policies and consent mechanisms, though GDPR-specific details are minimal. Overall, the website is trustworthy, professional, and serves its purpose well. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve security posture and transparency.

G

Gesellschaft Anthroposophischer Ärzte in Deutschland

gaed.de

51

The Gesellschaft Anthroposophischer Ärzte in Deutschland (GAÄD) operates a professional and comprehensive website focused on promoting Anthroposophic Medicine in Germany. The organization provides education, research, publications, events, and networking opportunities primarily targeting medical professionals, students, and patients interested in this integrative medical approach. The website is well-structured, content-rich, and professionally designed, reflecting a mature digital presence. Technically, the site is built on Drupal 9 with modern libraries and frameworks, and it employs Matomo analytics with privacy-conscious settings. Security posture is good with HTTPS enforced, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is mostly met with a clear privacy policy, but cookie consent mechanisms are missing. Contact information is clearly provided, enhancing business credibility. WHOIS data is limited but does not raise concerns. Overall, the site scores well in content quality, technical implementation, and business credibility, with room for improvement in privacy and security best practices.

C

COMPACT s.r.o.

compactsro.sk

50

COMPACT s.r.o. is a Slovakian company specializing in electronic security solutions for businesses and households, including security camera systems, access control, and attendance systems. The company positions itself as the exclusive distributor of Shopguard technologies in Slovakia, offering comprehensive services from consulting to installation and maintenance. The website is professionally designed, mobile-optimized, and provides clear contact and company information, supporting its credibility in the local market. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Analytics and Smartlook for user behavior tracking, and implements GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and anonymized analytics but lacks advanced HTTP security headers and explicit security policies. Overall, the site is trustworthy and well-maintained with room for improvement in security transparency and incident response readiness.

S

Slovenský zväz biatlonu

biathlon.sk

44

Slovenský zväz biatlonu operates as the official Slovak Biathlon Federation, providing comprehensive information, event updates, and resources related to biathlon in Slovakia. The website serves athletes, clubs, fans, and the broader sports community with news, competition calendars, documents, and an e-commerce platform. The organization maintains partnerships with national sponsors and integrates social media channels to engage its audience. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by plugins such as Yoast SEO and Complianz for GDPR compliance. The site uses modern web technologies including Bootstrap and jQuery, hosted on Slovak nameservers, and implements HTTPS with a good SSL configuration. Performance and mobile optimization are adequate, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policy disclosures and incident response information. Security headers are not fully evident, suggesting potential areas for enhancement. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, the website presents a professional and trustworthy digital presence for the Slovak Biathlon Federation, with strong compliance to privacy regulations and a solid technical foundation. Strategic improvements in security policies and accessibility could further strengthen its posture.

ROYAL MEDIA s.r.o. operates the website webroyal.sk, providing comprehensive e-commerce solutions including e-shop creation, hosting, SEO optimization, and integration with payment gateways and courier services. The company targets Slovak businesses and entrepreneurs seeking affordable, customizable online store platforms with marketing and technical support. Established in 2012, the company has a solid market presence supported by a decade-old domain and consistent branding. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for UI and analytics, hosted on VPS servers with SSD storage, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic but includes cookie consent mechanisms and a privacy policy in Slovak. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

L

LIPEX PLUS spol. s.r.o.

citroencl.cz

45

LIPEX PLUS spol. s.r.o. operates the website citroencl.cz as a specialized Citroën dealership and service center located in Česká Lípa, Czech Republic. The company offers automotive sales, servicing, emission testing, and financing services primarily targeting Citroën vehicle owners in the local region. The website presents a professional and consistent brand image with clear contact details and social media presence, supporting its local market position. Technically, the website uses a traditional tech stack including jQuery, Bootstrap, and Google Analytics, with a responsive but basic mobile optimization. The site is moderately performant with clear navigation and SEO basics in place. However, there is no evidence of advanced CMS or modern frameworks, and accessibility features are minimal. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, indicating gaps in GDPR compliance and security best practices. No incident response or vulnerability disclosure information is present. The domain registration data is consistent and supports the legitimacy of the business. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the website is functional and credible for its business purpose but would benefit from enhanced security measures, privacy compliance improvements, and modern technical upgrades to strengthen trust and regulatory adherence.

L

LIPEX PLUS spol. s r.o.

hondacl.cz

43

Honda Česká Lípa, operated by LIPEX PLUS spol. s r.o., is a small-sized authorized dealer and service provider specializing in Honda vehicles and garden machinery in the Czech Republic. The company offers a comprehensive range of automotive services including sales of new and used cars, authorized repairs, tire services, emission testing, and garden equipment sales. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, positioning the company as a trusted local business with over 20 years of experience. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. However, the absence of detected security headers and privacy policies indicates room for improvement in security and compliance. The site is accessible without any WAF or blocking mechanisms, but the lack of WHOIS data reduces domain trustworthiness and raises questions about domain registration transparency. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but the missing privacy and cookie policies and lack of incident response information highlight compliance gaps, particularly with GDPR. The use of Google Analytics suggests moderate user tracking, but without clear privacy disclosures. Overall, the security posture is moderate but could be enhanced with standard best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and verify domain registration details to improve trust and compliance. Enhancing incident response readiness and communicating data protection officer contacts would further strengthen their security culture and customer confidence.

P

PyWaw

pywaw.org

54

PyWaw is a well-established Python user group based in Warsaw, Poland, founded in 2011. It serves as a community hub for Python enthusiasts ranging from students to professional developers. The website provides information about regular meetings, speakers, sponsors, and partners, fostering knowledge exchange and community integration. The business model is community-driven, relying on sponsorships and partnerships to support events and activities. Technically, the site is built on a Python/Django stack with Bootstrap and jQuery for frontend, and integrates Google Maps and Google Analytics for enhanced user experience and tracking. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and serves its community well, but could enhance compliance and security practices.

Č

Český Institut Metabolického syndromu

cims-ops.cz

45

Český Institut Metabolického syndromu is a Czech healthcare-focused non-profit organization dedicated to educating patients and professionals about metabolic syndrome. The website serves as a platform for disseminating information, organizing seminars, and providing resources such as articles and publications. It maintains partnerships with reputable pharmaceutical companies, enhancing its credibility in the healthcare sector. Technically, the website is built on WordPress with modern libraries and plugins, offering a good user experience and mobile optimization. However, the absence of privacy and cookie policies indicates compliance gaps, and the lack of WHOIS data reduces domain trustworthiness. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Z

Zväz odpadového priemyslu

zopsr.sk

51

Zväz odpadového priemyslu (ZOPSR) is a Slovak industry association focused on promoting sustainable and efficient waste management solutions within Slovakia. The organization advocates for environmentally responsible waste processing technologies, energy recovery, and legislative improvements. Positioned as a key national player, ZOPSR serves waste industry stakeholders, policymakers, and environmental professionals through advocacy, research, and events. The website reflects a professional and consistent brand image, providing comprehensive information about the association's mission, activities, and membership.

I

Ing. Zuzana Balková EKO-IN®

eko-in.sk

47

EKO IN, operated by Ing. Zuzana Balková, is a Slovak-based environmental consultancy and training provider specializing in legislative compliance, audits, and support related to environmental and waste management laws. The website presents a professional and focused business offering services primarily to Slovak businesses and individuals seeking expertise in environmental legislation. The site is well-structured with clear navigation and modern frontend technologies, providing a good user experience and mobile optimization. However, it lacks critical privacy and cookie policies, security headers, and analytics transparency, which impacts its overall security and compliance posture. No blocking or WAF mechanisms were detected, indicating full accessibility. Contact information is clearly provided, but no phone numbers or social media links are present.

B

BIOPEL, a. s.

biopel.sk

44

BIOPEL, a. s. is a Slovak company specializing in the production and sale of wood biofuels including pellets, briquettes, and wood chips. The company also offers complementary products such as hygienic bedding and garden supplies, alongside services in heat production and distribution. Positioned as one of the few ENplus certified producers and traders in Slovakia, BIOPEL maintains a reputable market presence with a focus on ecological and renewable energy solutions. Their target audience includes residential and commercial customers seeking sustainable heating options. The website reflects a medium-sized enterprise with a consistent brand image and professional content presentation. Technically, the website is built on Joomla CMS with modern frontend technologies including jQuery and Bootstrap. It incorporates Google Analytics for traffic monitoring and a cookie consent mechanism to comply with basic privacy regulations. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the website uses HTTPS with a good SSL configuration and implements cookie consent. However, it lacks visible security headers and published security or privacy policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns well with the business claims, supporting the legitimacy of the domain and company. Overall, BIOPEL's website is professional and trustworthy, serving its business goals effectively. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture, further strengthening user trust and regulatory adherence.

C

Capexus

capexus.sk

54

Capexus SK is a Slovak company specializing in custom commercial interior design and build services. Operating since 2011 and part of the Esco Slovensko group, it offers a comprehensive portfolio including architecture, workplace consultancy, acoustics, building technologies, and project documentation. The company has a strong market presence, evidenced by awards such as the Office Roka 2022 for Healthy Office. The website reflects a mature digital infrastructure built on WordPress with modern technologies and performance optimizations. Security posture is solid with HTTPS, DNSSEC, and best practices in place, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site projects professionalism, trustworthiness, and business credibility.

P

Property & Enviroment s.r.o.

odpady-portal.sk

59

ODPADY-PORTAL.SK is a Slovak-language specialized online news and information portal focused on waste management and environmental topics. Operated by Property & Enviroment s.r.o., the site provides up-to-date news, legislative information, company directories, and event announcements relevant to professionals and stakeholders in the waste management sector. The portal maintains a consistent brand presence and offers subscription services alongside advertising revenue streams. Technically, the website is built on a custom ASP.NET Web Forms CMS, leveraging modern libraries such as jQuery and Bootstrap, and integrates marketing and analytics tools including Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good SEO and navigation clarity. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR, although it lacks some advanced security headers and incident response disclosures. Overall, the domain registration and business information are consistent and trustworthy, with no signs of blocking or WAF interference.

P

Property & Enviroment s.r.o.

voda-portal.sk

57

VODA-PORTAL.SK is a Slovak information and news portal specializing in water and water management topics. Operated by Property & Enviroment s.r.o., it serves professionals and stakeholders in the water industry by providing news, event information, and subscription services. The portal has a consistent brand presence and a niche market position within Slovakia's energy and environmental sectors. Technically, the site is built on ASP.NET WebForms with modern frontend libraries such as Bootstrap and jQuery, and integrates common marketing and analytics tools like Google Tag Manager and Facebook Pixel. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and secure form submissions but lacks some important HTTP security headers, which could be improved to enhance protection. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is legitimate, professional, and trustworthy, with room for security enhancements and more explicit contact information.

K

Oficiální web DA Krušné hory | Krušné hory

krusnehory.eu

50

The website krusnehory.eu serves as an official regional tourism guide for the Krušné hory area in the Czech Republic. It provides comprehensive information on tourist destinations, hiking and cycling routes, events, accommodation, dining, and local services. The target audience includes tourists, families, hikers, and cyclists interested in exploring the region. The business model is primarily informational, supporting regional tourism promotion. The site maintains a consistent brand presence and integrates social media channels to engage users. Technically, the website employs common web technologies such as jQuery, Bootstrap, Google Analytics, and Google Tag Manager. It is hosted by WEDOS Internet, a reputable Czech hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in technical modernization and security hardening. From a security perspective, the site uses HTTPS (implied by URLs) and secure form inputs but lacks visible security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is present. The absence of contact emails and phone numbers reduces transparency. Overall, the security posture is moderate but could benefit from enhanced compliance and security best practices. The overall risk is low given the nature of the site as a public tourism guide with no sensitive data collection. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving accessibility, and providing clear contact and incident response information to enhance trust and compliance.

I

IFLR1000

iflr1000.com

71

IFLR1000 is a well-established publishing entity specializing in financial and corporate law firm rankings, serving legal professionals and corporate clients globally. The website provides annual rankings and editorial content, positioning itself as a market leader in its niche. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and integrates multiple analytics and advertising platforms such as Google Analytics, Microsoft Clarity, and Adition, hosted on Azure DNS infrastructure. The site demonstrates good digital maturity with responsive design and comprehensive cookie consent mechanisms ensuring GDPR compliance. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit published security policies and incident response contacts. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen trust and compliance.

D

Diamond Experts

rezani-vrtani.cz

52

Diamond Experts is a specialized service provider in the Czech Republic focusing on core drilling and concrete cutting services. With over 25 years of experience, the company serves both businesses and households primarily in Prague and the surrounding regions. Their offerings include a wide range of concrete-related services such as wall saw cutting, joint cutting, chemical anchoring, and structural reinforcement. The website reflects a mature business with clear contact information, certifications, and customer testimonials that enhance trust and credibility. Technically, the site employs modern JavaScript libraries and Google services for analytics and advertising, with a cookie consent mechanism that aligns with GDPR requirements. Security measures include the use of hCaptcha for bot protection, but there is room for improvement in security headers and incident response transparency. Overall, the website is professional, well-structured, and trustworthy, supporting the company's market position as a local expert in construction services.

G

G2O Brand Builders

g2o.nl

62

G2O Brand Builders is a specialized branding bureau based in Veenendaal, Utrecht, Netherlands, focusing on building strong brands through comprehensive brand strategy, design, and marketing services. The company positions itself as more than a traditional advertising agency, emphasizing brand building and strategic consultancy. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with a robust tech stack including Bootstrap, jQuery, and various marketing and analytics tools. The site is well-optimized for performance, mobile responsiveness, and SEO, providing a rich user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though there is room for improvement in security headers and explicit cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

K

Kreishandwerkerschaft Prignitz

handwerk-prignitz.de

9

The website 'Kreishandwerkerschaft Prignitz' serves as an informational platform for a regional crafts association in the Prignitz area of Germany. It provides an overview of partners and services relevant to local craftsmen. The site is built on Joomla! CMS and employs common frontend technologies such as jQuery, Bootstrap, and UIkit, along with Usercentrics for cookie consent management, indicating compliance efforts with GDPR. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is present in the analyzed content. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the site is functional and serves its informational purpose but could improve in transparency and security best practices.

C

Comité régional du Tourisme de la région Centre-Val de Loire

tourisme-pro-centre-valdeloire.fr

10

The website 'Tourisme Pro' serves as the official digital platform for the Comité régional du Tourisme de la région Centre-Val de Loire, targeting tourism professionals within the region. It offers a comprehensive range of services including tourism data, professional training, innovation support, publications, and sustainable tourism initiatives. The site positions itself as a key regional resource and authority in tourism promotion. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for content management, GDPR compliance, and user engagement. Hosting is provided by Infomaniak Network SA, a reputable provider. The site demonstrates good mobile optimization, moderate performance, and solid SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully detected, no vulnerabilities or exposed sensitive data were found. The absence of direct contact emails or phone numbers suggests reliance on contact forms for communication. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. It maintains good privacy compliance and provides a safe browsing experience. Strategic recommendations include enhancing security headers, expanding contact information transparency, and continuous security monitoring.

T

Tours City Pass

tourscitypass.com

65

Tours City Pass is a small-sized tourism-focused business founded in 2020, offering digital city passes and related tourism packages for visitors to Tours, France. The website serves as an e-commerce platform enabling users to purchase passes, access interactive maps, and benefit from discounts and cultural offers. The business is positioned as a local tourism enabler with a clear target audience of tourists and visitors seeking cultural and leisure activities in the Tours metropolitan area. The parent company is Otipass, which provides the technological platform and payment processing services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, React, and various analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site demonstrates good practices such as encrypted communications, cookie consent, and no visible sensitive data exposure. There is no evidence of a published security policy or incident response plan, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company’s founding date and no privacy protection, which supports transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate technical sophistication and a solid security posture. Recommendations include enhancing security headers, enabling DNSSEC, and publishing formal security and incident response policies to further strengthen trust and compliance.

G

Gerstenberg Verlag GmbH & Co. KG

die-kleine-raupe-nimmersatt.de

61

Gerstenberg Verlag GmbH & Co. KG is a reputable German publishing company specializing in children's literature, notably the internationally acclaimed 'Die kleine Raupe Nimmersatt' by Eric Carle. The website serves as a blog and information portal for their publications, events, and educational content, targeting parents, educators, and children. Their market position is that of an established niche publisher with a strong brand presence and consistent content quality. Technically, the website is built on WordPress with Bootstrap framework, enhanced by Matomo analytics for user tracking. The site is hosted likely by Deutsche Telekom, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks some advanced security headers and does not publish a formal security policy or incident response contacts. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy standards. It provides a safe environment focused on children's educational content. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

M

Discover Top OnlyFans Telegram Channels | Free Content Previews | mayndrive.fr

mayndrive.fr

6

The website mayndrive.fr operates as a niche content aggregator focusing on adult entertainment, specifically promoting and linking to OnlyFans Telegram channels with free preview content. The business model revolves around aggregating and providing access to various Telegram groups, many of which contain explicit or leaked adult content. The site targets an adults-only audience and positions itself as a resource for discovering popular adult content groups on messaging platforms. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS. The design and content quality are basic, with moderate mobile optimization and limited SEO features. Security posture is weak, lacking essential security headers and privacy compliance mechanisms. The domain is very new with minimal WHOIS data, which raises concerns about legitimacy and trustworthiness. Overall, the site presents moderate technical maturity but low security and compliance readiness.

V

VDE VERLAG GmbH

vde-verlag.de

66

VDE VERLAG GmbH operates as a specialized technical publisher and seminar provider focused on electrical engineering standards, technical literature, and professional training. The company serves professionals and organizations in the energy and electrical engineering sectors primarily in Germany. Their business model centers on publishing DIN-VDE and IEC standards, technical books, journals, and offering subscription services and seminars. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, hosted on German Telekom infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Analytics are implemented via etracker with user consent mechanisms in place. Security best practices such as HTTPS enforcement and anti-clickjacking scripts are present, though HTTP security headers and a formal security policy are absent. Security posture is solid but could be improved by adding explicit security policies and incident response contacts. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. WHOIS data is minimal but consistent with a legitimate German entity. No suspicious or malicious indicators were found. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's position as a reputable technical publisher. Strategic improvements in security transparency and header implementation would enhance trust and resilience.

Zweckverband Verkehrsverbund Oberlausitz-Niederschlesien (ZVON) operates a regional public transportation portal serving the Oberlausitz and Niederschlesien regions in Germany. The website provides comprehensive information on public transit schedules, ticketing, network maps, and current service updates, targeting local commuters and travelers. The business model centers on facilitating access to public transport services and enhancing user experience through digital tools such as real-time departure monitors and fare calculators. The organization holds a solid regional market position as a trusted mobility service provider.

F

Fahrgastforum Sachsen-Anhalt

fahrgastforum.de

64

Fahrgastforum Sachsen-Anhalt operates a regional public transport passenger forum website focused on collecting and sharing ideas, questions, and feedback about regional trains, S-Bahn, and PlusBus services in Sachsen-Anhalt, Germany. The site targets local passengers and community members interested in improving public transport services. It is positioned as a community engagement platform with a clear focus on regional transportation issues. The website uses TYPO3 CMS and Bootstrap for a responsive and accessible user experience, supported by Cookiebot for cookie consent management and Piwik (Matomo) for analytics. The technical infrastructure is modern and adequate for the site's purpose, hosted on domaincontrol.com nameservers.

V

VMV – Verkehrsgesellschaft Mecklenburg-Vorpommern mbH

vmv-mbh.de

54

VMV – Verkehrsgesellschaft Mecklenburg-Vorpommern mbH operates as a regional public transportation company in Mecklenburg-Vorpommern, Germany, providing services related to public transit schedules, ticketing, and regional transport network management. The website serves as an information portal for residents and travelers, offering schedule information, news updates, and contact options. The company positions itself as a key regional transportation authority with a focus on accessibility and customer engagement. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is evident with a comprehensive privacy and cookie policy, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's regional transportation mission.

N

NordSüd Verlag AG

nord-sued.com

50

NordSüd Verlag AG is a well-established Swiss children's book publisher with a strong market presence and a comprehensive digital platform. The website showcases a rich catalog of children's books, events, and related materials, targeting a general audience including parents, educators, and book enthusiasts. The company leverages modern web technologies including WordPress, WooCommerce, and Matomo analytics to provide a performant and user-friendly experience. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. Overall, the website reflects a professional and trustworthy business with consistent branding and high-quality content.

C

Centous Solutions

centous.com

61

Centous Solutions is a small e-commerce focused service provider specializing in Shopify web development and tailored online business solutions. The company positions itself as a trusted Shopify partner, targeting e-commerce businesses seeking to enhance their online presence. The website is built using modern technologies such as React, Gatsby, and Bootstrap, indicating a contemporary technical infrastructure with moderate performance and good mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms. Overall, the site is professional but would benefit from enhanced transparency and security practices.

C

Centous Solutions

techdignity.com

57

Centous Solutions is a small, India-based company specializing in developing Shopify apps aimed at enhancing e-commerce store performance, customer experience, and operational efficiency. Their portfolio includes apps for shipping protection, customer reviews, background music, product options, bulk image import, tagging, and inventory automation. The company also offers related services such as store setup, sales marketing, app installation, and troubleshooting. The website is built on WordPress and integrates modern technologies including Bootstrap, jQuery, and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the Shopify app niche.

D

DPD

dpd.fr

68

DPD France operates as a major parcel delivery service provider, offering comprehensive shipping, tracking, and delivery management solutions for both professional and individual customers. The website reflects a mature digital presence with multilingual support and integration into the broader DPDgroup network. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, ensuring responsive design and good user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and fraud alert information, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy and professionally maintained, supporting DPD's market position in France and internationally.

I

investpgz.hr is under construction

investpgz.hr

40

The website investpgz.hr is currently under construction and displays only a placeholder page indicating ongoing work. The business behind the domain appears to be newly established in 2022, based in Croatia, but no detailed business description, services, or contact information is provided. The site uses WordPress with an under construction plugin and includes basic styling libraries such as Bootstrap and Font Awesome. The technical infrastructure is minimal, with no advanced frameworks or analytics detected. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. No vulnerabilities or malicious content were detected, but the lack of content and security best practices limits trustworthiness. Overall, the site is not yet operational and provides limited information for users or stakeholders.

V

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN)

vbn.de

64

Verkehrsverbund Bremen/Niedersachsen GmbH (VBN) operates as a regional public transportation authority providing integrated ticketing, timetable information, and mobility services across Bremen and Lower Saxony. The website serves a broad audience including commuters, families, students, and groups, offering comprehensive transport options and customer support. The business model focuses on facilitating seamless public transport usage through digital platforms and partnerships with transport operators. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet for interactive maps and widgets. The integration of HAFAS public transport widgets enhances user experience for timetable and ticketing queries. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and follows good security practices, though explicit security headers like Content-Security-Policy could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear GDPR-aligned policies and cookie management. Overall, the website presents a trustworthy, professional, and user-friendly platform supporting VBN's mission. Strategic improvements in security policy transparency and header implementation would further enhance its posture.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

N

NFE Norddeutscher Fachverband Elektro- und Informationstechnik e.V.

nfe.de

46

NFE Norddeutscher Fachverband Elektro- und Informationstechnik e.V. is a well-established regional association representing approximately 350 medium-sized companies in the electrical and information technology sectors in Hamburg. The organization provides advocacy, certification, training, and networking services to its members, positioning itself as a key industry stakeholder in the region. The website reflects a professional and member-focused approach with clear communication of benefits and services. Technically, the site is built on TYPO3 CMS with Bootstrap, ensuring responsive design and good accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

The website tavokraujas.lt represents the Vilniaus Universiteto Ligoninės Santaros Klinikų Kraujo centras, a major Lithuanian healthcare institution specializing in blood donation and transfusion services. The site provides comprehensive information about blood donation, donor registration, donor eligibility, and blood donation events. It serves as an important resource for potential donors and healthcare professionals in Lithuania. The business is well-positioned as a trusted healthcare provider with ISO 9001:2015 certification and affiliation with a leading university hospital. Technically, the website uses a variety of established JavaScript libraries and CSS frameworks such as jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. The site is mobile optimized and features multiple interactive forms for donor registration and event organization. However, there is no evidence of a CMS, and hosting details are not disclosed. From a security perspective, the website uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

T

Testly AB

xn--bst-i-testet-gcb.se

39

Bäst-i-testet.se is a Swedish independent product review and comparison website operated by Testly AB. The site offers comprehensive product tests, expert and user reviews, and buying guides across multiple categories such as electronics, home appliances, and family products. It targets consumers seeking trustworthy and objective information to aid their purchase decisions. The business model relies primarily on affiliate marketing and content publishing. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Overall, the domain registration is consistent with the business age and operations, indicating legitimacy and trustworthiness.

W

Weingut Christen

weingutchristen.at

56

Weingut Christen is a small regional wine producer based in Austria, specializing in the production and sale of wines from Niederösterreich. The company operates through direct sales including an Ab-Hof-Verkauf (farm gate sales) and participates in local wine festivals and events, targeting wine enthusiasts and regional customers. The website reflects a professional and consistent brand image with clear business and contact information. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and libraries such as jQuery and FontAwesome. SEO is well implemented with Yoast SEO plugin and the site is mobile optimized. Security posture is good with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

J

Jaroslav Buriánek

vinarstviburiankovi.cz

46

The website represents a small family-owned winery and pension business located in the Czech Republic, specializing in wine production, sales via an e-shop, wine tasting events, and accommodation services. The business has a strong regional presence with awards such as the Grand Prix Vinex 2021 and inclusion in the 2024 Salon of Czech Wines, indicating a reputable market position. The website is professionally designed using Joomla CMS and VirtueMart e-commerce platform, incorporating modern web technologies such as Bootstrap, UIkit, and Google reCAPTCHA for form security. The site is mobile optimized and provides clear navigation and relevant content for its target audience of wine enthusiasts and tourists.

I

Izzy Trading, s.r.o.

foxii.cz

39

FOXii is a specialized cloud-based service software targeting companies with field service operations, primarily in the Czech and Slovak markets. The platform enables digitalization of service workflows including planning, protocol creation, and technician tracking. The company behind FOXii, Izzy Trading, s.r.o., founded in 2019, presents a professional and consistent online presence with clear contact information and GDPR compliance. Technically, the website uses modern JavaScript libraries and cloud hosting on DigitalOcean, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers are missing. The site employs comprehensive cookie consent mechanisms and integrates multiple analytics and marketing tools with user consent.

C

CNC

cnc.cz

51

CNC is a Czech Republic-based company specializing in video communication and collaboration solutions, offering a broad portfolio of videoconferencing and teleconferencing equipment and services. With over 25 years of experience and more than 600 installations, CNC serves small to large companies across various sectors, emphasizing tailored solutions, ergonomic design, and comprehensive support including installation and training. The website is professionally designed, mobile-optimized, and provides clear contact channels and GDPR-compliant privacy and cookie policies. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with secure HTTPS and reCAPTCHA protections on forms. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though the site lacks a dedicated security policy or incident response page. Overall, CNC presents a trustworthy and credible business with a solid digital presence.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitnovalja.net

35

visitnovalja.net is an established Croatian hospitality platform specializing in private accommodation listings on the island of Pag. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct contact options for travelers. It targets tourists seeking affordable and diverse lodging options in popular destinations such as Novalja, Stara Novalja, and surrounding areas. The business model focuses on connecting travelers directly with property owners, avoiding intermediaries. Technically, the site uses a custom CMS with common web technologies including jQuery, Bootstrap, and Google services for analytics and bot protection. The site is mobile optimized and provides a user-friendly search experience. Security posture is moderate with HTTPS enabled and reCAPTCHA integration, but lacks advanced security headers and has minor form input issues. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the domain registration is consistent and supports the legitimacy of the business. Strategic improvements in security and privacy compliance would enhance trust and user safety.

The website www.zrce.info serves as an informational and booking platform focused on the Zrce beach festival and party scene, providing accommodation and event details. It targets general audiences interested in travel and nightlife at Zrce beach. The site uses basic web technologies including jQuery, Bootstrap, and Google Analytics for tracking visitor behavior. However, the technical infrastructure lacks modern security features such as HTTPS and security headers, which exposes visitors to potential risks. The absence of privacy and cookie policies further indicates low compliance with data protection standards. The WHOIS data is unavailable due to a malformed request response, limiting the ability to verify domain registration legitimacy and ownership details, which reduces trustworthiness. Overall, the site is functional but basic in design and content quality, with significant room for improvement in security and compliance.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitpag.net

35

Visitpag.net is an established Croatian online accommodation platform specializing in private rentals on the island of Pag, particularly in Novalja and surrounding areas. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct booking contact forms, targeting tourists seeking affordable and direct accommodation options. The business operates with a mature domain registered since 2014 and maintains a consistent brand presence with a focus on local hospitality services. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics, providing a moderately optimized user experience including mobile responsiveness. Security posture is basic with HTTPS implied but lacking advanced security headers and best practices, and privacy compliance is minimal with no cookie consent mechanisms despite GDPR applicability. Overall, the site is functional and credible but would benefit from enhanced security and privacy features to improve trust and compliance.

P

Printshop • Digitalni tisak

printshop.hr

54

Printshop.hr is a Croatian digital printing service provider established in 2014, offering a wide range of business and promotional printing products such as business cards, flyers, posters, and canvas prints. The company operates an e-commerce platform allowing customers to calculate prices and order online, targeting businesses and individuals within Croatia. The website is professionally designed with good navigation, mobile optimization, and relevant content focused on its core services. Technically, the site uses modern web technologies including Bootstrap, Google Analytics, Microsoft Clarity, and October CMS, hosted likely within Croatia under the CARNET registrar. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good with visible privacy and cookie policies aligned with GDPR requirements. No critical vulnerabilities or suspicious indicators were found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Zakon.hr is a well-established Croatian legal information portal operated by cyber_Folks d.o.o., providing comprehensive access to laws, regulations, and legal documents. The website targets legal professionals, businesses, and the general public seeking reliable legal information. It maintains a strong market position as a leading legal resource in Croatia, supported by updated content and a related AI legal assistant service, Zakon.ai. The business model appears to be a combination of subscription and advertising revenue streams.

The website www.prekmurjevsrcu.si is a small regional cultural site dedicated to the Prekmurje Slovene community, emphasizing cultural unity with the mother nation. The site is modest in content and design, primarily serving informational and community awareness purposes. It does not appear to operate as a commercial business and lacks detailed business information or contact channels. Technically, the site uses common frontend libraries such as jQuery, Bootstrap, Font Awesome, Fancybox, and Owl Carousel, indicating a basic but functional technical infrastructure. The site is mobile responsive and moderately performant but lacks advanced SEO and accessibility features. Security posture is weak due to the absence of HTTPS enforcement information, security headers, and privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance. Overall, the site is safe with no adult or questionable content but requires significant improvements in security, privacy compliance, and business transparency to enhance credibility and user trust.

S

Swedish Council for Higher Education

nordplusonline.org

60

Nordplusonline.org is the official platform for Nordic-Baltic educational collaboration, administered by the Swedish Council for Higher Education on behalf of the Nordic Council of Ministers. The website facilitates funding applications, project management, and dissemination of educational projects and events within Nordic and Baltic countries. It targets educational institutions and project coordinators seeking collaboration and funding opportunities. The platform holds a strong market position as an official government-backed initiative with a clear focus on education and regional cooperation. Technically, the website employs modern web technologies including Bootstrap for responsive design, privacy-friendly Plausible Analytics for user insights, and Klaro for cookie consent management. The CMS appears to be Episerver, indicating a mature content management infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting and domain registration are consistent with a legitimate government-related entity. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces clientTransferProhibited status on the domain. Cookie consent mechanisms and privacy policies are in place, reflecting GDPR compliance. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enabling DNSSEC, publishing explicit security policies, and adding terms of service to enhance transparency and trust.