Security Directory

Z

Zeitverlag Gerd Bucerius GmbH & Co. KG

zeitverlag.de

51

Die ZEIT Verlagsgruppe ist ein etabliertes und renommiertes Medienunternehmen mit einem breiten Portfolio an Print-, Online-, Audio- und Eventangeboten. Die Website präsentiert das Unternehmen als eines der führenden Medienhäuser Europas mit einem starken Fokus auf Innovation, digitale Angebote und Bildungsprogramme. Die Zielgruppe umfasst Leser, Geschäftskunden sowie potenzielle Mitarbeiter. Technisch basiert die Website auf WordPress mit modernen Plugins und Frameworks, die eine gute Performance und mobile Optimierung gewährleisten. Die Sicherheitsmaßnahmen umfassen HTTPS, Cookie-Consent-Management und reCAPTCHA, jedoch fehlen explizite Sicherheitsrichtlinien und Incident-Response-Informationen. Insgesamt zeigt die Website eine hohe Professionalität, gute Datenschutzkonformität und eine vertrauenswürdige Marktposition.

C

Cube Infrastructure Managers

cubeinfrastructure.com

10

Cube Infrastructure Managers is an independent European asset manager specializing in mid-market infrastructure investments since 2007. The company focuses on sectors such as energy transition, telecommunications, transport, and environment, emphasizing sustainable and socially responsible investments. Their market position is solid with over €4 billion capital raised and a portfolio of 40+ investments. The website reflects a mature digital presence built on WordPress with modern technologies and good SEO practices. Security posture is strong with HTTPS and reCAPTCHA implemented, though some security headers are missing and no public security policy is found. Privacy compliance is well addressed with clear privacy and cookie policies. The absence of WHOIS data is a concern but does not outweigh the professional presentation and trust signals on the site. Overall, the site is trustworthy and professionally managed.

C

Centous Solutions

techdignity.com

57

Centous Solutions is a small, India-based company specializing in developing Shopify apps aimed at enhancing e-commerce store performance, customer experience, and operational efficiency. Their portfolio includes apps for shipping protection, customer reviews, background music, product options, bulk image import, tagging, and inventory automation. The company also offers related services such as store setup, sales marketing, app installation, and troubleshooting. The website is built on WordPress and integrates modern technologies including Bootstrap, jQuery, and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the Shopify app niche.

E

Ericsson Nikola Tesla d.d.

ericsson.hr

67

Ericsson Nikola Tesla d.d. is a well-established regional provider of telecommunications products, innovative ICT solutions, and related services. The company targets telecommunication service providers, government agencies, and various industries requiring digital transformation and ICT innovation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content highlighting their key services and business achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, demonstrating a moderate to good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and error monitoring, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

B

Bundeskonferenz Veranstaltungswirtschaft

bundeskonferenz.org

63

Bundeskonferenz Veranstaltungswirtschaft is a German non-profit organization representing the event industry. The website serves as a platform for advocacy, event information, and industry representation. It targets professionals and stakeholders within the German event sector, providing information about conferences, programs, and organizational goals. The organization positions itself as a strong voice for the event industry in Germany. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Fonts and reCAPTCHA for form security. The site is mobile-optimized and uses HTTPS with HSTS enabled, indicating a good baseline security posture. However, there is a lack of explicit privacy and cookie policies, which impacts privacy compliance. Security-wise, the site benefits from HTTPS and HSTS but lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain ownership verification, but the website content and social media presence support legitimacy. Overall, the website is professional and trustworthy for its intended audience but would benefit from improved privacy compliance and enhanced security headers. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response contact information.

J

Jaroslav Buriánek

vinarstviburiankovi.cz

46

The website represents a small family-owned winery and pension business located in the Czech Republic, specializing in wine production, sales via an e-shop, wine tasting events, and accommodation services. The business has a strong regional presence with awards such as the Grand Prix Vinex 2021 and inclusion in the 2024 Salon of Czech Wines, indicating a reputable market position. The website is professionally designed using Joomla CMS and VirtueMart e-commerce platform, incorporating modern web technologies such as Bootstrap, UIkit, and Google reCAPTCHA for form security. The site is mobile optimized and provides clear navigation and relevant content for its target audience of wine enthusiasts and tourists.

H

Homepage

helago-cz.com

48

Helago-cz.com operates as an e-commerce platform specializing in educational, healthcare, and laboratory equipment, targeting institutions and professionals in these sectors. The website offers a broad catalog of products including simulators, training kits, and laboratory instruments, positioning itself as a niche provider in the education and healthcare markets. Technically, the site employs modern web technologies such as jQuery, Bootstrap 5, and Google Tag Manager, indicating a moderate level of digital maturity. The presence of HTTPS and reCAPTCHA enhances security, though the absence of explicit security headers and privacy policies suggests room for improvement in compliance and security posture. The lack of WHOIS data for the domain is a notable anomaly that impacts trust and legitimacy assessments. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

I

Izzy Trading, s.r.o.

foxii.cz

39

FOXii is a specialized cloud-based service software targeting companies with field service operations, primarily in the Czech and Slovak markets. The platform enables digitalization of service workflows including planning, protocol creation, and technician tracking. The company behind FOXii, Izzy Trading, s.r.o., founded in 2019, presents a professional and consistent online presence with clear contact information and GDPR compliance. Technically, the website uses modern JavaScript libraries and cloud hosting on DigitalOcean, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers are missing. The site employs comprehensive cookie consent mechanisms and integrates multiple analytics and marketing tools with user consent.

C

CNC

cnc.cz

51

CNC is a Czech Republic-based company specializing in video communication and collaboration solutions, offering a broad portfolio of videoconferencing and teleconferencing equipment and services. With over 25 years of experience and more than 600 installations, CNC serves small to large companies across various sectors, emphasizing tailored solutions, ergonomic design, and comprehensive support including installation and training. The website is professionally designed, mobile-optimized, and provides clear contact channels and GDPR-compliant privacy and cookie policies. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with secure HTTPS and reCAPTCHA protections on forms. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though the site lacks a dedicated security policy or incident response page. Overall, CNC presents a trustworthy and credible business with a solid digital presence.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitnovalja.net

35

visitnovalja.net is an established Croatian hospitality platform specializing in private accommodation listings on the island of Pag. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct contact options for travelers. It targets tourists seeking affordable and diverse lodging options in popular destinations such as Novalja, Stara Novalja, and surrounding areas. The business model focuses on connecting travelers directly with property owners, avoiding intermediaries. Technically, the site uses a custom CMS with common web technologies including jQuery, Bootstrap, and Google services for analytics and bot protection. The site is mobile optimized and provides a user-friendly search experience. Security posture is moderate with HTTPS enabled and reCAPTCHA integration, but lacks advanced security headers and has minor form input issues. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the domain registration is consistent and supports the legitimacy of the business. Strategic improvements in security and privacy compliance would enhance trust and user safety.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

visitpag.net

35

Visitpag.net is an established Croatian online accommodation platform specializing in private rentals on the island of Pag, particularly in Novalja and surrounding areas. The website offers a comprehensive catalog of apartments, rooms, villas, and family hotels with direct booking contact forms, targeting tourists seeking affordable and direct accommodation options. The business operates with a mature domain registered since 2014 and maintains a consistent brand presence with a focus on local hospitality services. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Google Analytics, providing a moderately optimized user experience including mobile responsiveness. Security posture is basic with HTTPS implied but lacking advanced security headers and best practices, and privacy compliance is minimal with no cookie consent mechanisms despite GDPR applicability. Overall, the site is functional and credible but would benefit from enhanced security and privacy features to improve trust and compliance.

S

Sveučilište u Rijeci

uniri.hr

60

Sveučilište u Rijeci is a well-established public university in Croatia, recognized as the second oldest with continuous operation in the country. The institution offers a broad range of higher education programs, research initiatives, and community engagement activities. The website reflects a strong academic and institutional presence, targeting students, researchers, and the general public interested in education and research. It maintains a consistent brand identity and provides comprehensive information about its services and partnerships, including international collaborations such as ERASMUS and YUFE.

T

TJ studio d.o.o.

tjstudio.info

50

TJ studio d.o.o. is a Croatian-based technology company specializing in web hosting, web design, and internet application development. Established since 2009, the company positions itself as a reliable and innovative service provider for businesses and individuals seeking professional digital solutions. Their offerings include a variety of hosting packages, domain registration, website maintenance, and custom web development services. The company maintains an active online presence with social media channels and a customer support portal, emphasizing customer service and technical support availability. Technically, the website is built on WordPress using the Betheme theme and integrates modern plugins such as Yoast SEO Premium and Slider Revolution. It employs Google Analytics for traffic analysis and Google reCAPTCHA for form security. The site is mobile-optimized and demonstrates good SEO practices. However, some security headers are not explicitly detected, and there is no dedicated security policy or incident response contact information visible. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is limited due to privacy protection, with no public registrant details, but the website content and contact information appear consistent and professional. Overall, TJ studio d.o.o. presents a trustworthy and professional digital presence with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers and incident response transparency could further enhance their security posture and customer trust.

C

CSL Computer Service Langenbach GmbH d/b/a joker.com

novalja-pag.net

33

Novalja-pag.net is a well-established Croatian hospitality website specializing in private accommodation listings on the island of Pag. Founded in 2002, it offers a comprehensive catalog of apartments, rooms, villas, and hotels with direct booking contact options. The platform targets tourists seeking affordable and diverse lodging options near popular destinations such as Novalja and Zrće beach. Technically, the site uses a custom CMS with common web technologies including jQuery, Bootstrap, and Google services for analytics and reCAPTCHA. While the site is mobile-optimized and provides a good user experience, it lacks HTTPS enforcement and advanced security headers, which are critical for protecting user data and enhancing trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is credible and functional but would benefit from security and privacy improvements.

T

Turistička zajednica grada Novalje

visitnovalja.hr

52

Visit Novalja is the official tourism website for the city of Novalja and the island of Pag in Croatia, operated by the local tourism board (Turistička zajednica grada Novalje). The site provides comprehensive information for tourists including local attractions, events, gastronomy, accommodation options, and cultural heritage. It targets tourists and visitors seeking detailed and official travel information about the region. The business model is focused on tourism promotion and information dissemination, positioning itself as a trusted local authority in the hospitality sector.

C

Centar dr. R. Steinera

centar-rudolf-steiner.com

36

Centar dr. R. Steinera is a small educational/spiritual center based in Donji Kraljevec, Croatia, focused on Rudolf Steiner's teachings. The website is multilingual and built on WordPress using the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure includes modern elements such as HTTPS, Google reCAPTCHA, and Cloudflare DNS, but lacks advanced security headers and DNSSEC. The security posture is adequate but could be improved by implementing additional security headers and publishing formal security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is present. Overall, the website is functional and moderately professional but would benefit from enhanced compliance and security documentation.

M

Međimurska energetska agencija d.o.o. MENEA

menea.hr

46

Međimurska energetska agencija d.o.o. MENEA is a Croatian regional energy agency established in 2008, focusing on energy consulting, project management, energy planning, and systematic energy management. The agency serves municipalities, businesses, and stakeholders in the energy sector, leveraging EU funding and regional initiatives to promote sustainable energy solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and accessibility. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the business's mission and market position.

T

Tehnološko-inovacijski centar Međimurje d.o.o.

ticm.hr

10

Tehnološko-inovacijski centar Međimurje (TICM) is a well-established regional technology and innovation center based in Croatia, founded in 2012. It supports technology-based entrepreneurship through incubation, coworking, educational courses, and business advisory services. The website reflects a professional and consistent brand with a clear focus on regional development and innovation. The technical infrastructure is modern, leveraging WordPress CMS with Bootstrap and various JavaScript libraries, and integrates Google Analytics and reCAPTCHA for analytics and security. Security posture is good with HTTPS enforced and some best practices observed, though there is room for improvement in security headers and formal security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and serves its target audience effectively.

I

Invest in ZAGORJE

investinzagorje.hr

45

Invest in ZAGORJE is a regional investment promotion website focused on the Krapinsko-zagorska županija region in Croatia. It promotes the region's strategic advantages, quality of life, entrepreneurial climate, and diverse industrial sectors including tourism, manufacturing, agriculture, and healthcare. The website serves as a portal for investors and businesses seeking information and support for economic development in the region. It features business success stories, news updates, and a contact form for direct inquiries. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, WPBakery, and Slider Revolution, ensuring good SEO and user experience. Security measures include HTTPS and Google reCAPTCHA on forms, but lack visible security headers and published privacy or cookie policies, which are recommended for compliance and trust. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy compliance and security transparency.

M

Morgan Code

morgancode.com

52

Morgan Code is a small software development agency founded in 2020, specializing in custom software solutions, mobile applications, web development, and IT consulting. The company emphasizes a personalized approach to client problems and aims to improve business scalability through technology. Their market position is that of a niche agency with a focus on tailored solutions for businesses. Technically, the website is built on WordPress using Elementor, with modern JavaScript and PHP technologies, and is hosted behind Cloudflare DNS. The site is moderately performant and mobile-optimized with good SEO practices. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA for form protection but lacks DNSSEC and security headers, and does not publish security or incident response policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

P

Rekonštrukcia Bratislava (rekonštrukčné práce) | Prerábka

profi-prerabka.sk

44

The website www.profi-prerabka.sk is a Slovakian local service provider specializing in apartment and home renovation and reconstruction services, primarily targeting customers in Bratislava. The site is built on WordPress using the GeneratePress theme and Elementor page builder, with standard SEO optimization via Yoast SEO. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy and cookie policies are absent, indicating a gap in GDPR compliance. Contact information and social media presence are not explicitly found, which may affect user trust and business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

I

IN LEASE

inlease.cz

41

IN LEASE is a Czech Republic based company specializing in operativní leasing, vehicle leasing, and fleet management services. The website presents a professional and well-structured digital presence targeting businesses and individual customers seeking leasing solutions. The company has been operating since 2015, with domain registration data consistent with its business claims. The technical infrastructure is built on WordPress CMS with modern tracking and analytics tools such as Google Tag Manager, Piwik PRO, and Microsoft Clarity, indicating a mature digital marketing approach. Security measures include HTTPS enforcement and use of Google reCAPTCHA, but lack explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is functional, secure, and credible but could improve transparency and compliance documentation.

N

Nux s.r.o.

flatzone.cz

67

Flat Zone is a Czech Republic-based real estate search platform specializing in new development projects. It aggregates a large number of listings for new apartments and houses across the country, providing users with a modern, digital-first experience including online reservation capabilities. The platform also offers additional services such as real estate market news, analytics, and business services for companies. The website is professionally designed, mobile-optimized, and integrates modern analytics and tracking tools with GDPR-compliant privacy and cookie policies. However, the absence of publicly available WHOIS data limits domain trust assessment. Security posture is generally good with HTTPS and reCAPTCHA usage, but could be improved by adding explicit security headers and incident response information.

K

Kiwis & Brownies

app-helper.com

56

The website www.app-helper.com/.adm/ represents a promotion builder platform named Prombu, developed by Kiwis & Brownies. It targets businesses and marketers seeking tools to create and manage promotional campaigns. The site provides user registration, login, and social login via Facebook integration. The business model appears to be SaaS-based, focusing on promotion creation services. The market position is niche with a small-scale operation and basic branding consistency. Technically, the site uses a standard web technology stack including jQuery, Bootstrap, Facebook SDK, Google Analytics, Google reCAPTCHA, and Klaro for cookie consent management. The site is moderately optimized for performance and mobile devices but lacks advanced SEO optimization and accessibility features. The presence of Google Adsense indicates monetization through advertising. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection. However, it lacks visible security headers such as Content-Security-Policy and HSTS, which are recommended best practices. No explicit security or incident response policies are published, and WHOIS data is unavailable, raising concerns about domain legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, but contact information is missing. Overall, the site is functional and provides basic business and privacy information but has gaps in security posture and domain transparency. The absence of WHOIS data and minimal security headers reduce trustworthiness. Strategic improvements in security headers, domain registration transparency, and enhanced privacy disclosures are recommended to strengthen the site's credibility and compliance.

Nesdekk ehf is a well-established Icelandic company specializing in tire sales and automotive services, operating since 2008 with multiple physical locations across Iceland. The company offers a broad range of tires for various vehicle types, including passenger cars, trucks, and heavy machinery, complemented by professional advice and service. Their business model combines retail and service with an online presence featuring tire search and appointment booking functionalities. The website reflects a medium-sized enterprise with a strong market position in Iceland's automotive retail sector. Technically, the website is built on WordPress with WooCommerce, leveraging popular plugins such as WPBakery Page Builder, Contact Form 7, and Chaty Pro for enhanced user interaction. The hosting is provided by 1984 Hosting, a known Icelandic hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. The presence of Meta Pixel indicates some user tracking, but Google Analytics is commented out. Overall, the security posture is adequate but could be improved. The website content is safe for general audiences, focusing solely on automotive products and services without any adult or questionable content. Contact information is comprehensive and clearly presented, enhancing business credibility. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

InSense Clinic | Kardiolitos klinikos

insenseclinic.lt

62

InSense Clinic is a healthcare provider specializing in dermatology and plastic surgery, operating clinics in Vilnius and Kaunas, Lithuania. The website reflects a professional healthcare service with detailed doctor profiles and clear service offerings. The business is part of the Kardiolitos klinikos group, indicating a strong market position in the Lithuanian healthcare sector. The domain is newly registered in 2024, consistent with a recent launch or rebranding. Technically, the website uses AngularJS framework, integrates Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The site is hosted on Hostex.lt and uses HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO is adequately addressed with proper meta tags and Open Graph data. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and no published security or incident response policies were found. No vulnerabilities or exposed sensitive data were identified in the HTML content. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

V

Vědecká knihovna v Olomouci

vkol.cz

11

Vědecká knihovna v Olomouci is a well-established public scientific library in the Czech Republic, recognized as the second oldest and third largest of its kind nationally. It offers a broad range of services including an online catalog, digital libraries, electronic resources, and organizes cultural and educational events. The institution is funded by the Olomoucký kraj regional government, targeting students, researchers, and the general public interested in scientific and cultural literature. The website demonstrates a mature technical infrastructure utilizing modern web technologies such as the Nette Framework, Bootstrap, lazy loading with Lozad.js, and integrates analytics tools like Google Analytics and Hotjar. It is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS, employs Google reCAPTCHA on forms, and implements a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found, but the absence of a public security policy or incident response contact is noted. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The lack of WHOIS data due to privacy protection is justified given the public nature of the institution. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing incident response contacts to further strengthen trust and security posture.

M

Mikroregion Hranicko, MAS Hranicko

regionhranicko.cz

33

Mikroregion Hranicko and MAS Hranicko operate as regional development and community support organizations in the Czech Republic, focusing on grant programs, local business support, cultural events, and energy initiatives. The website serves as an information portal for local residents, businesses, and stakeholders, providing news updates and project information. Technically, the site uses a traditional jQuery-based stack with Google Analytics and reCAPTCHA integration, hosted by a Czech hosting provider. The site is mobile-optimized with good navigation and content quality but lacks modern CMS indicators and advanced accessibility features. Security posture is adequate with HTTPS and bot protection but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and legitimate, with a domain age consistent with the organization's history.

Teplo Přerov a.s. is a municipal utility company based in Přerov, Czech Republic, specializing in the production and distribution of heat and hot water for residential and commercial sectors. Founded in 1997 following the transformation of a former municipal housing enterprise, it is fully owned by the Statutory City of Přerov. The company operates with a medium-sized business model focused on local energy supply and related services including maintenance, electrical installations, and limited transport operations. The website reflects a professional municipal service provider with clear business information and contact details. Technically, the website employs a legacy jQuery stack alongside Google reCAPTCHA and Matomo analytics for user tracking and security. The site uses a proprietary CMS system (IPO Redakční systém) and implements a cookie consent mechanism compliant with EU regulations. However, the site shows room for improvement in mobile optimization, accessibility, and modern security practices such as security headers and HTTPS enforcement verification. From a security perspective, the site lacks visible security headers and a published security policy or incident response contacts. The absence of WHOIS data limits domain trust analysis, although the business information and municipal ownership provide strong legitimacy signals. The site does not present any adult or questionable content, targeting a general audience in the local community. Overall, the website is functional and professional but would benefit from enhanced security measures, improved privacy disclosures, and updated technical infrastructure to strengthen trust and compliance.

K

Královéhradecký kraj

stansenahradnimrodicem.cz

56

The website 'Staň se náhradním rodičem' is a regional government initiative by Královéhradecký kraj aimed at promoting foster care and supporting children without families. It serves as an informational and resource platform targeting potential foster parents and stakeholders involved in child welfare. The site provides comprehensive content about foster care processes, benefits, and related news, reflecting a well-structured and professionally maintained digital presence. Technically, the website is built on WordPress using the Avada theme, incorporating modern web technologies such as jQuery, Google Analytics, Google Recaptcha, and Cloudflare Bot Management for security and performance. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the website enforces HTTPS, employs bot protection mechanisms, and includes a detailed cookie consent system compliant with GDPR. While some security headers are not explicitly detected, the overall security posture is solid with no apparent vulnerabilities or exposed sensitive data. Overall, the website presents a trustworthy and credible platform with a clear mission in social welfare. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and possibly adding explicit contact emails and terms of service to improve transparency and user trust.

RealSelf is an online platform specializing in cosmetic and aesthetic healthcare, providing consumers with reviews, Q&A, and provider listings related to cosmetic treatments. The website is positioned as a marketplace and information hub for individuals interested in cosmetic procedures. However, the current analysis is limited due to the website being blocked by a security mechanism that requires CAPTCHA verification, preventing access to the full content and features. The technical infrastructure includes Google Analytics for tracking and PerimeterX for bot mitigation, indicating a focus on security and user behavior analysis. Despite these measures, the absence of accessible content and WHOIS data limits the ability to fully assess the website's security posture and compliance. The security posture shows some strengths in bot protection but lacks visible security headers and privacy compliance indicators. Overall, the site presents a moderate risk due to limited transparency and accessibility issues.

R

RJFM

rjfm.net

56

RJFM is a well-established local radio station based in Montluçon, France, providing regional news, music hits, and podcasts primarily targeting local residents. The website reflects a professional media outlet with a consistent brand presence and a focus on delivering local content digitally. The business operates a multi-channel digital presence including streaming, podcasts, and mobile applications, positioning itself as a key local media player in the Allier region. Technically, the website uses modern web technologies and CDNs to deliver content efficiently, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS, domain locking, and reCAPTCHA integration, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic but includes cookie consent and a privacy policy in French. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

T

TigerHostings

tigerhostings.com

44

TigerHostings is a small technology company specializing in WordPress hosting services, offering multiple subscription plans tailored for various customer needs worldwide. The company emphasizes speed, security, and customer support, positioning itself as a reliable hosting provider recommended by WordPress.com. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and responsive design. However, the site lacks explicit privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS enabled and reCAPTCHA integration, but missing DNSSEC and security headers reduce overall security maturity. The domain registration is consistent with the business age and claims, registered through a reputable registrar without privacy protection, enhancing trustworthiness.

F

Foire Internationale de Bordeaux | 24 au 1er juin 2025

foiredebordeaux.com

57

The website www.foiredebordeaux.com represents the Bordeaux International Fair event scheduled for 2025. It serves as an informational and promotional platform targeting visitors and exhibitors in the Nouvelle-Aquitaine region of France. The site provides event details, exhibitor lists, programming, and visitor FAQs, positioning itself as a regional event organizer with a medium-sized digital presence. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates Google Tag Manager and reCAPTCHA for analytics and security, and uses OneTrust for cookie consent management. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and CAPTCHA protections, though explicit security headers and policies are not evident. The absence of WHOIS data for the domain is a notable concern, suggesting either a recent registration or privacy protection, which impacts trustworthiness. Overall, the website is professional and functional but would benefit from clearer business and privacy disclosures to enhance credibility and compliance.

F

Foire de printemps de Montpellier

foiredeprintemps-montpellier.com

46

The website www.foiredeprintemps-montpellier.com represents a professionally managed event platform for the Foire de Printemps in Montpellier, France. It serves as an information hub for visitors and exhibitors, offering details on event schedules, exhibitor lists, ticketing, and various contests and animations. The site targets a general audience including families and local businesses. Technically, it is built on WordPress using Elementor and several modern plugins, ensuring good performance, mobile responsiveness, and SEO optimization. Security measures include HTTPS, reCAPTCHA, and a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Contact information is provided primarily via forms, with no explicit emails or phone numbers visible. Overall, the site is well-structured and trustworthy from a content and technical perspective but would benefit from clearer domain registration transparency and enhanced security policy disclosures.

D

Dijon Bourgogne Events

dijonbourgogne-events.com

55

Dijon Bourgogne Events operates the Parc des Expositions et Congrès de Dijon, providing venue services for fairs, congresses, and exhibitions in the Dijon and Bourgogne region of France. The company appears to be a regional event venue operator founded recently in 2023, with a medium-sized business profile. The website is built on WordPress using the Divi theme and incorporates SEO and user experience best practices such as Yoast SEO and Google Fonts. The site is mobile optimized and includes social media integration with LinkedIn, Facebook, and Instagram. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information such as emails and phone numbers are not explicitly found in the provided content, which may impact user trust and compliance. Overall, the website is professional and relevant to its business domain but could benefit from enhanced security and compliance documentation.

Multilanguage for Weebly is a small technology business specializing in providing a SaaS application that enables Weebly website owners to add multiple languages and translate their websites easily. The company targets Weebly users who want to internationalize their online presence and increase traffic and sales by offering multilanguage support and translation services, including store product and checkout translation. The business maintains a niche market position with a focused service offering and positive user testimonials, supported by a clear contact presence and social media engagement. Technically, the website is built on the Weebly platform, utilizing jQuery 1.8.3, Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics, marketing, and security. Hosting is provided via EditMySite CDN, likely part of Weebly's infrastructure. The site demonstrates moderate performance and good mobile optimization but uses an outdated jQuery version and lacks some modern security headers. SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but it lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a GDPR info page but no cookie consent banner or terms of service page. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. The risk level is moderate due to missing cookie consent and outdated libraries. Strategic improvements in privacy compliance, security headers, and updated libraries would enhance the security posture and user trust.

G

GoDaddy Operating Company, LLC

belgrade.org

71

The website forsale.godaddy.com/forsale/belgrade.org is a professionally designed domain sales landing page operated by GoDaddy Operating Company, LLC. It offers the premium domain belgrade.org for sale with options to buy immediately or make an offer. The site targets German-speaking customers and emphasizes secure transactions, fast domain transfers, and multiple payment methods. The presence of trust indicators such as a high Trustpilot rating and verified domain badges reinforces its credibility. Technically, the site uses modern web technologies including React and Next.js, hosted on AWS, with good performance and mobile optimization. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site demonstrates a mature digital infrastructure and a strong security posture appropriate for an enterprise-level e-commerce platform focused on domain aftermarket sales.

C

Comvation AG

cubetech.ch

64

Comvation AG is a Swiss digital and web agency based in Bern and Thun, specializing in developing customized digital products including web applications, websites, online shops, SEO, and consulting services. The company positions itself as a passionate and human-centric digital partner, serving businesses seeking tailored digital solutions. Their website demonstrates a professional and modern design with rich content, customer testimonials, and client references, indicating a strong market presence in their regional niche. Technically, the site leverages modern frameworks such as Astro, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is generally good with HTTPS enforced and secure form handling, though explicit security headers and published security policies are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility and digital maturity are solid. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust.

V

Verband der Veranstaltungsorganisatoren e.V.

vdvo.de

59

The website vdvo.de represents the Verband der Veranstaltungsorganisatoren e.V., a German industry association focused on innovation within the MICE (Meetings, Incentives, Conferences, and Exhibitions) sector. The organization provides startup support, education, political advocacy, and sustainability initiatives tailored to the event industry. The site positions itself as a niche player supporting MICE innovation with a clear target audience of industry professionals and startups. The business model revolves around membership, education, and sector advocacy, with a small organizational size and a strong German regional focus. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, a professional design, and clear navigation, although accessibility features are basic. Performance is moderate, typical for a CMS-based site. Structured data in JSON-LD format enhances SEO and provides clear organization and local business information. From a security perspective, the site enforces HTTPS with HSTS enabled, uses Google reCAPTCHA to protect forms, and includes security headers. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and comprehensive privacy and cookie consent implementations, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data is minimal but consistent enough with the website's claims, supporting legitimacy. Overall, vdvo.de is a professionally presented, secure, and credible website for a specialized industry association. Strategic recommendations include adding explicit privacy and cookie consent policies, implementing a security.txt file, enhancing accessibility, and maintaining regular security audits to uphold compliance and trust.

I

IGORA-Genossenschaft für Aluminium-Recycling Schweiz

igora.ch

38

IGORA-Genossenschaft für Aluminium-Recycling Schweiz operates as a cooperative focused on the collection and recycling of aluminium packaging in Switzerland. The organization emphasizes environmental protection by promoting aluminium recycling, which significantly reduces energy consumption and greenhouse gas emissions compared to new aluminium production. The website positions IGORA as a key player in the Swiss aluminium recycling sector, targeting both consumers and businesses interested in sustainable waste management. Technically, the website is built on WordPress and integrates modern technologies such as Google reCAPTCHA for security, Google Maps for location services, and EmbedSocial for social media content integration. The site employs a professional cookie consent mechanism compliant with GDPR and Swiss data protection laws, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, supporting a good user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and manages user consent effectively. No critical vulnerabilities or suspicious activities were detected. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, IGORA's website reflects a trustworthy and professional organization with a solid security posture and compliance framework. Strategic enhancements in security documentation and accessibility could further strengthen its digital maturity and stakeholder trust.

S

SchemaRabbit

schemarabbit.com

54

SchemaRabbit is a specialized SaaS platform providing AI-driven schema markup generation and maintenance services to improve website visibility across traditional and AI-powered search engines. The company targets businesses and website owners aiming to enhance SEO performance with structured data. The platform offers a free audit and paid subscription tiers, positioning itself as a leader in future-proofing search visibility. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Analytics, Google Tag Manager, Hotjar, and Google reCAPTCHA, indicating a mature digital infrastructure. Performance and mobile optimization are excellent, supporting a high-quality user experience. Security posture is good with HTTPS enforced and anti-bot measures in place, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data reveals an unusual future domain creation date, which slightly impacts trust but does not detract from the professional presentation and business legitimacy. Overall, the website scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance due to missing cookie policies.

M

Međimurska županija

medjimurska-zupanija.hr

43

Međimurska županija operates as the official regional government entity for the Međimurje County in Croatia, providing a comprehensive digital platform for residents, businesses, and visitors. The website offers extensive information on local governance, administrative departments, EU-funded projects, transparency in budget and procurement, and public announcements. It targets local citizens, stakeholders, and tourists, positioning itself as a trusted source of regional governmental information and services. Technically, the website is built on WordPress 6.8.3 using the Oxygen Builder theme, integrating modern web technologies such as Google Fonts, Flickity carousel, and Google reCAPTCHA for security. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although some minor improvements in security headers could enhance its posture. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses reCAPTCHA to mitigate automated abuse. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, additional HTTP security headers and regular updates are recommended to maintain a robust security posture. Overall, the website presents a professional, trustworthy, and user-friendly interface consistent with government standards. It complies with privacy regulations and provides clear contact information, enhancing its credibility and user trust.

T

Tokić

autocheckcenter.hr

47

Auto Check Center - Tokić is a well-established automotive service network operating multiple service centers across Croatia. The company offers comprehensive vehicle servicing, repairs, diagnostics, and related automotive services, targeting vehicle owners seeking professional and reliable maintenance solutions. The website reflects a mature digital presence with detailed service descriptions, multiple locations, and integration of modern web technologies such as WordPress, Yoast SEO, and Google Maps API. Security posture is strong with HTTPS, security headers, and use of reCAPTCHA for forms, though privacy and cookie policies are missing, representing a compliance gap. Overall, the business demonstrates high credibility and trustworthiness in its sector.

C

Centar Velike Zvijeri

centar-velikezvijeri.eu

40

Centar Velike Zvijeri is a Croatian public institution visitor center dedicated to the education and conservation of large carnivores in the Gorski kotar region. The center operates under EU-funded projects and regional partnerships, providing educational services, research dissemination, and public engagement. The website is professionally designed using WordPress with modern plugins and offers bilingual content in Croatian and English. Technically, the site is well-structured, mobile-optimized, and integrates Google Tag Manager and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and some best practices, though it lacks explicit security policies and vulnerability disclosures. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and serves its niche audience effectively.

B

Beli Visitor Centre

belivisitorcentre.eu

41

Beli Visitor Centre is a specialized non-profit organization focused on the conservation and rehabilitation of griffon vultures in Cres, Croatia. The center provides educational exhibits, workshops, volunteer programs, and operates a rehabilitation facility for these birds. It serves both local visitors and international nature enthusiasts, positioning itself as a key regional conservation hub. The website is professionally designed using WordPress, with good mobile optimization and accessibility features, reflecting a mature digital presence. Security measures include HTTPS and Google reCAPTCHA, though some improvements in security headers and privacy compliance are recommended. Overall, the site is trustworthy and well-aligned with its mission, with clear contact information and partner affiliations.

S

Software House Webixa

webixa.pl

41

Software House Webixa is a Polish-based technology company specializing in web development, e-commerce solutions, SEO, and digital marketing services. Positioned as a local software house in Poznań, it offers a range of services including PrestaShop and WordPress store creation, SEO optimization, and paid advertising campaigns such as Google Ads and Meta Ads. The company targets businesses seeking to enhance their online presence and sales through modern, scalable digital solutions. Technically, the website is built on WordPress CMS with a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, and CookieYes for consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting appears to be behind Cloudflare, providing additional security and performance benefits. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to mitigate spam and bot attacks, and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations regarding cookies, though it could improve transparency by publishing privacy and terms of service documents. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include adding security headers, publishing security and privacy policies, and providing direct contact information for incident response.

R

Rejs Sp. z o.o.

e-rejs.eu

10

Rejs Sp. z o.o. is a Polish manufacturer and online retailer specializing in furniture accessories such as kitchen drawers, cargo baskets, and handles. Established in 1993, the company has positioned itself as a leader in the furniture fittings market in Poland, serving both residential and commercial customers. Their e-commerce platform, built on Magento, offers a comprehensive product portfolio with a focus on quality and functionality. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Polish. Technical infrastructure includes modern web technologies and integrations with Google Analytics, Facebook Pixel, and Google Maps API, supporting marketing and user experience. Security posture is strong with HTTPS enforcement, reCAPTCHA protection on forms, and cookie consent mechanisms, although no explicit security policy or incident response information is published. Overall, the site demonstrates good compliance with GDPR and industry best practices, reflecting a mature digital presence for a medium-sized manufacturing and retail business.

I

Izzy Trading, s.r.o.

sprava-servisov.sk

41

FOXii is a Slovak-based software company specializing in cloud-based service management solutions tailored for field service companies. Their platform enables digitalization of service processes including scheduling, protocol creation, and technician monitoring, targeting small to medium-sized service firms. The website reflects a professional and consistent brand presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS and DNSSEC enabled, use of Google reCAPTCHA, and a cookie consent mechanism, though it lacks explicit security headers and a published security policy. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

T

Tatra-Leasing, s.r.o.

tatraleasing.sk

49

Tatra-Leasing, s.r.o. is a Slovak financial services company specializing in leasing and financing solutions for businesses and consumers. As part of the Tatra banka group, it holds a strong market position in Slovakia offering financial leasing, operational leasing, consumer loans, insurance, and digital leasing services. The website is professionally designed, mobile-optimized, and provides comprehensive information and interactive tools such as a leasing assistant and client zone. Technically, the site is built on Drupal CMS with modern integrations including Google Tag Manager, Analytics, and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS, CSP headers, and consent management, though explicit security policies and incident response details are not publicly available. Overall, the site demonstrates high business credibility and compliance with privacy regulations, making it a trustworthy platform for its target audience.