Security Directory

C

Château d'Hélécine

chateaudhelecine.be

40

Château d'Hélécine is a cultural and recreational venue located in Hélécine, Belgium, offering visitors access to a historic castle, park, and various leisure activities including mini-golf, fishing, and a pop-up bar. The site targets tourists, families, and local visitors, with a focus on promoting regional tourism and outdoor activities. The business is affiliated with the Province du Brabant wallon, indicating a public or governmental backing. The website is multilingual, supporting French, Dutch, and English, enhancing accessibility for diverse visitors. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Slider Revolution, hosted by OVH. It uses HTTPS and modern web technologies, providing a moderate performance and good mobile responsiveness. SEO is well addressed with structured data for events and proper meta tags. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide a cookie consent mechanism or detailed privacy policy, which are important for GDPR compliance. There is no incident response or vulnerability disclosure information available. The site does not appear to be behind a WAF or security challenge, and no critical vulnerabilities were detected in the visible content. Overall, the website is professionally designed and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection and incident response to improve its security posture and regulatory adherence.

S

Seiler Medical

seilermedical.com

59

Seiler Medical is a well-established company specializing in high-quality medical optical instruments such as surgical dental microscopes, colposcopes, ENT devices, and related accessories. With over 80 years of industry presence, the company targets medical professionals requiring precision optics and offers a comprehensive product line alongside services like repair, training, and demos. The website reflects a mature digital presence built on WordPress with modern technologies and SEO optimizations, providing a professional user experience with rich multimedia content and clear navigation. Security posture is generally good with HTTPS and form protections, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which should be further investigated to ensure full trustworthiness.

S

Seiler Medical

seilermicro.com

65

Seiler Medical is a well-established company specializing in high-quality medical optical equipment, including surgical dental microscopes, colposcopes, ENT microscopes, and related accessories. With over 80 years of industry experience, the company targets medical professionals seeking precision optics solutions. The website reflects a mature digital presence built on WordPress with modern plugins and integrations, supporting multimedia content and customer engagement through testimonials and product showcases. Security posture is generally good with HTTPS and anti-bot measures, though improvements in security headers and vulnerability disclosure mechanisms are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the overall professional presentation and trust indicators support a positive business credibility assessment.

S

SurgiVision

surgivision.com.au

56

SurgiVision is a specialized supplier of ophthalmic equipment and instruments serving healthcare professionals primarily in Australia and New Zealand. With over 20 years of industry experience, the company offers a broad portfolio of products including intraocular lenses, surgical instruments, and consumables from reputable brands. The website reflects a professional B2B business model focused on quality and trusted partnerships. Technically, the site is built on WordPress using the Divi theme and includes common plugins for SEO and forms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche but should enhance compliance and security measures to reduce risk and improve user trust.

V

Vr Buddy

vr-buddy.com

53

Vr Buddy is a small educational technology company based in Switzerland, founded in 2022. The company specializes in connecting schools and companies through Virtual Reality to provide vocational trainees with immersive career insights. The website is built on WordPress and uses common plugins such as Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is well-structured with good SEO metadata and mobile optimization, but lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and relevant to its niche but would benefit from enhanced privacy and security transparency.

CLT Slovakia is a specialized supplier and technical support provider for renewable wood construction materials, focusing on CLT panels, KVH beams, laminated wood, and related products. The company serves architects, construction firms, and individual builders in Slovakia, positioning itself as a distributor and technical partner for Stora Enso materials. The website is built on WordPress with modern plugins and includes multimedia content and product details. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable, limiting trust assessment, but the website presents clear contact information and professional content. Overall, the site is functional and informative but could improve privacy compliance and security transparency.

D

designme

designme.sk

51

The website designme.sk represents Marek Levak, a seasoned digital product designer with over 15 years of experience and a portfolio of 400+ projects. The business focuses on UI and web design services targeting modern brands and startups, positioning itself as a small but highly professional entity within the technology sector in Slovakia. The website is built on WordPress using the Semplice theme and incorporates SEO best practices via Yoast plugin, demonstrating a moderate to high level of digital maturity. Technically, the site is well-structured, mobile-optimized, and visually appealing, though some accessibility features could be enhanced. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap. Overall, the site is trustworthy and professional but would benefit from improved privacy and security disclosures to enhance compliance and user trust.

T

Tanja Milich & Armin Manus GbR

trail-hunting.de

68

Trail Hunting® is a small German business specializing in dog training and bonding activities, focusing on strengthening the relationship between dog owners and their dogs through guided experiences. The website is professionally designed using WordPress with the Enfold theme and includes GDPR-compliant privacy and cookie policies. The business targets dog owners seeking positive training and bonding experiences, including those with young, older, or rescue dogs. The company operates primarily through event-based services and instruction.

Rádio Expres is a prominent Slovak radio station delivering entertainment and music content to a broad Slovak-speaking audience. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content relevant to its media broadcasting business. The site leverages WordPress CMS and integrates modern web technologies such as Owl Carousel and Cookiebot for cookie consent management, ensuring compliance with GDPR and user privacy standards. Advertising is managed through reputable ad networks with transparent consent mechanisms. Security posture is strong with HTTPS enforcement and appropriate security headers, though the site lacks a dedicated security policy or incident response page. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

S

Steve Zeidler

froodmat.com

42

The website froodmat.com serves as the professional portfolio for photographer Steve Zeidler, showcasing his photography work primarily in Germany and Switzerland. The site targets photography enthusiasts and potential clients seeking commercial and personal photography services. The business model is focused on portfolio presentation and commissions, positioning itself as a niche professional photographer with a small business footprint. The website is built on the Koken CMS platform and employs modern web technologies including jQuery, Google Analytics, and Matomo for visitor tracking. The design is professional and mobile optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks critical privacy and cookie policies, as well as contact information, which impacts its compliance and trustworthiness.

W

Wittelsbacher Land e. V.

wittelsbacherland-verein.de

49

Wittelsbacher Land e. V. is a regional non-profit organization focused on promoting sustainable development, regional products, and community projects within the Wittelsbacher Land region in Germany. The website serves as an information hub for local initiatives, events, and quality regional products, targeting residents and visitors interested in regional culture and sustainability. The organization positions itself as a key regional player supporting local economic and environmental goals. Technically, the website is built on the Contao Open Source CMS platform, leveraging modern frontend technologies such as Bootstrap, jQuery, and Google Charts. It is hosted on a professional DNS provider with HTTPS enforced, ensuring secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and regularly updated content. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, no explicit security headers or incident response policies are found, which could be improved. The use of self-hosted Matomo analytics suggests a moderate level of user tracking with good privacy considerations. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. It effectively supports the organization's mission and provides a positive user experience. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

K

Kreativkombinat

ade25.de

43

The website ade25.de is currently a minimal 'coming soon' placeholder page for the entity Kreativkombinat, indicating that the site is under construction. The business overview is limited due to lack of content, but the presence of a logo linking to kreativkombinat.de suggests a relationship or parent company. The technical infrastructure is based on WordPress with the Divi theme, hosted on Hetzner servers with HTTPS enabled, indicating a standard modern setup. However, the site lacks critical security headers and any privacy or cookie policies, which are essential for compliance and security. No contact information or forms are present, limiting user engagement and trust. Overall, the security posture is basic with room for improvement, and the site currently provides minimal business information or services.

S

Sparkassen Immobilien GmbH Aachen

s-immo-aachen.de

64

Sparkassen Immobilien GmbH Aachen operates as a leading real estate brokerage firm in the Aachen region, offering comprehensive services including property sales, rentals, valuations, energy consulting, and new development projects. The company leverages its strong regional expertise and partnerships, notably with Sparkasse Aachen for financing solutions, to maintain a dominant market position. The website reflects a mature digital presence built on WordPress with modern plugins and integrations, supporting a professional user experience and effective customer engagement. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie management. Overall, the business credibility is high, supported by multiple certifications and positive customer reviews.

S

Spoločnosť TAKATA s.r.o.

poliankovo.sk

43

Poliankovo is a small hospitality and digital art business located in the High Tatras, Slovakia, operated by Spoločnosť TAKATA s.r.o. The company offers a unique combination of a digital gallery featuring modern technologies such as virtual reality and augmented reality, alongside a cafe serving Italian coffee and a gallery shop with souvenirs. The website is built on WordPress with Elementor and integrates modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy and security policies. No contact emails or phone numbers are provided, only a physical address in the footer. Overall, the website is professional and trustworthy, with room for improvement in privacy compliance and security headers.

H

Henrich Kubík

hk-photo.cz

41

HK-PHOTO is a small professional photography business based in Brno, Czech Republic, specializing in newborn, children, maternity, wedding, portrait, and reportage photography. The website presents a well-structured portfolio and client testimonials, positioning the business as a trusted local service provider. The domain age and WHOIS data align with the business history, indicating legitimacy and consistency. Technically, the website is built on WordPress using the Divi theme, with common plugins and Facebook integration. While the site is mobile optimized and visually appealing, some video playback issues and lack of security headers slightly detract from the user experience. Security posture is moderate with HTTPS enabled and copy protection scripts in place, but missing standard security headers and privacy compliance elements. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

M

Music Story

music-story.com

57

Music Story is a well-established company founded in 2004, specializing in providing customized music metadata, licensing, and integration services to leading digital music brands worldwide. Their business model focuses on B2B services, offering high-quality metadata and rights clearance to enhance music experiences for their clients. The website reflects a professional and consistent brand image, targeting digital music platforms and content providers globally, with multilingual support and a strong emphasis on client trust and satisfaction. Technically, the site is built on WordPress with Elementor and Yoast SEO, integrating Google Analytics and a compliant cookie consent mechanism. The infrastructure is modern and moderately performant, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and demonstrates a mature digital presence suitable for its industry niche.

R

RED BALLOON FILM GMBH

redballoonfilm.de

47

Red Balloon Film GmbH is a small, creative media company based in Hamburg, Germany, specializing in film production with a focus on children, family entertainment, and arthouse content. The company collaborates with talent and partners to deliver unique film projects, some of which have premiered at prestigious international film festivals such as Venice and Berlinale. Their website reflects a professional and consistent brand image, targeting film industry professionals and arthouse audiences. Technically, the website is built on WordPress using the Semplice theme, leveraging common JavaScript libraries like jQuery and GSAP for animations. Hosting is provided via rzone.de, and the site uses HTTPS with an excellent SSL configuration. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. No analytics or advertising scripts were detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, which could be a gap in transparency and readiness. The WHOIS data is limited but does not raise immediate concerns, though more detailed registrant information would improve trust. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

I

Internet Society Foundation

isocfoundation.org

68

The Internet Society Foundation is a reputable non-profit organization dedicated to supporting initiatives that strengthen the Internet's function and reach globally. It operates multiple grant programs aimed at digital inclusion, resiliency, research, and emergency response, positioning itself as a key player in the Internet development ecosystem. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of non-profits, Internet communities, and global stakeholders. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Analytics, and CookieYes for consent management. The infrastructure supports good performance and accessibility, with mobile optimization and SEO best practices in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, reflecting GDPR awareness. Contact information is transparent and includes phone, email, and physical address, enhancing business credibility. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the site presents a low-risk profile with strong trust indicators and a professional online presence, suitable for its mission and audience.

WakeUpFestival.cz is the official website for a Pentecostal Christian street festival held annually in České Budějovice, Czech Republic. The festival focuses on community worship, prayer, and cultural events organized by the non-profit association Spolek Most in cooperation with the local diocese. The website provides detailed event information, participant lineups, and contact details, targeting Christian groups and local attendees interested in spiritual and cultural activities. Technically, the site is built on WordPress using the Enfold theme and LayerSlider plugin, with modern web technologies and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features. Overall, the site is professional, trustworthy, and well-suited for its niche audience but would benefit from improved privacy and security practices.

M

Marek Chaloupka

marekchaloupka.com

43

Marek Chaloupka is a freelance creative professional specializing in UI/UX design, branding, photography, and art direction. The website serves as a portfolio showcasing a variety of projects in branding, web design, and visual arts, targeting businesses and individuals seeking high-quality creative services. The business operates primarily as a small freelance entity based in the Czech Republic, with a domain registered since 2009, reflecting a mature and stable presence. Technically, the website is built on WordPress 6.7.2 using the Semplice theme and Yoast SEO plugin, indicating a modern and SEO-optimized infrastructure. It employs Google Analytics and Google Tag Manager for user tracking, with a moderate level of performance and good mobile optimization. Hosting is provided by Webglobe, as inferred from the nameservers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and important security headers, which are recommended to enhance security posture. Privacy and cookie policies are absent, representing a compliance gap with GDPR requirements. No incident response or vulnerability disclosure information is provided. Overall, the website is professional, trustworthy, and well-maintained, but improvements in privacy compliance and security hardening are advised to reduce risk and enhance user trust.

G

GULE FOOD TRUCK

gulefoodtruck.cz

52

GULE Food Truck is a Czech social enterprise operating a food truck in Prague, specializing in fresh curd mini-doughnuts, coffee, and catering services. The business focuses on creating employment opportunities for people with disabilities, positioning itself as a socially responsible local food provider. The website is built on WordPress with modern SEO and analytics tools, demonstrating a moderate level of digital maturity. While the site is well-designed, mobile-optimized, and provides clear navigation, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response contacts. The absence of WHOIS data reduces domain trustworthiness, but the active social media presence and quality content support the legitimacy of the business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

R

Ryan Barrett

snarfed.org

53

snarfed.org is a personal blog operated by Ryan Barrett, focusing on technology, open source software, personal essays, and photography. The site is a niche platform targeting general internet users interested in these topics. It operates on WordPress.com hosting using the Jetpack plugin and related WordPress technologies. The blog has a consistent branding and provides clear author identity, including a public PGP key for trust. Technically, the site uses modern web technologies but lacks advanced security headers and explicit privacy or cookie policies. Security posture is adequate with HTTPS enforced and domain registration consistent with the website's identity. Overall, the site is trustworthy and safe for general audiences but could improve privacy compliance and security best practices.

T

The Trace

thetrace.org

60

The Trace is an independent, nonpartisan nonprofit newsroom dedicated to reporting on America's gun violence crisis. It operates a comprehensive website featuring investigative journalism, data resources, newsletters, and local reporting. The organization targets a general audience interested in gun violence issues and policy. The website is professionally designed, well-branded, and content-rich, reflecting a mature digital presence for a nonprofit media entity. Technically, the site is built on WordPress with modern plugins such as Yoast SEO Premium and uses Google Tag Manager and Parsely for analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy and cookie policies are not explicitly found in the provided content, though a cookie consent mechanism is implied. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable due to query failure or privacy protection, which is common and justified for nonprofit organizations. The site maintains trust through consistent branding, social media presence, and transparent donation mechanisms. Recommendations include publishing explicit privacy and security policies and adding security headers to enhance protection and compliance.

D

Double Academy s.r.o.

doubleacademy.cz

60

Double Academy s.r.o. is a Czech-based business coaching and educational company founded in 2023. The company offers a range of services including monthly memberships, seminars, consultations, online courses, and bootcamp workshops aimed at helping entrepreneurs and business owners increase visibility, profitability, and freedom in their ventures. The website is professionally designed, mobile-optimized, and provides comprehensive contact and legal information, including GDPR-compliant privacy and cookie policies. Technically, the site runs on WordPress with modern JavaScript libraries and integrates Google Analytics, Facebook Pixel, and other marketing tools for tracking and retargeting. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some HTTP security headers are not detected. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

Dibuk, s.r.o. operates as the largest distributor of e-books in Slovakia, providing a comprehensive catalog of over 34,000 titles to sellers and publishers. The company also supports authors through its self-publishing platform Publico. The website is professionally designed using WordPress and Elementor, with modern technologies and tracking tools like Hotjar integrated for user analytics. While the site is well-structured and mobile-optimized, it lacks visible privacy and cookie policies, as well as direct contact information, which are important for compliance and trust. The absence of WHOIS data due to EURid privacy policies slightly impacts trust but is common for .eu domains. Overall, the business presents a credible and professional front in the e-book distribution retail sector.

O

Ondřej Klymčiw

ondrejklymciw.cz

54

Ondřej Klymčiw's website serves as an official personal brand platform focused on rally navigation, particularly related to the Dakar rally. It provides fans and followers with online tracking, news updates, photo galleries, videos, and an e-commerce shop. The site targets motorsport enthusiasts, especially those interested in rally racing. The business model is centered on personal branding and fan engagement with some commercial activity via the e-shop. The website is well-branded and consistent, with good content quality and a clear focus on its niche audience in the Czech Republic.

T

Traffective GmbH

traffective.com

63

Traffective GmbH is a German-based technology company specializing in digital advertising monetization platforms for publishers, media houses, and website owners. Established in 2009, the company has built a solid market position with over 350 publishers, reaching 45 million unique users monthly and generating 1 billion page impressions. Their platform focuses on maximizing advertising revenue while ensuring compliance with data protection regulations such as GDPR. Key services include programmatic marketing, publisher tools, reporting, and technical setup support. The website reflects a professional and consistent brand image with clear contact channels and multilingual support.

H

Hotel Kaštieľ Mojmirovce

kastielmojmirovce.sk

50

Hotel Kaštieľ Mojmirovce is a historic hospitality business located in Slovakia, offering accommodation, wellness, gastronomy, and event hosting services. The website reflects a well-established regional hotel with a focus on quality guest experience, leveraging its historic charm and modern amenities. The business targets general audiences including leisure travelers, corporate clients, and event organizers. Technically, the website is built on WordPress with the Divi theme, integrating modern JavaScript libraries and SEO best practices. It supports multilingual content and online booking via a partner platform. Security posture is solid with HTTPS, security headers, and secure form handling, though lacks published privacy and terms policies. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and accessibility.

SMS-služby s.r.o. is a specialized service provider focused on supporting municipalities, towns, and schools across the Czech Republic. As a wholly owned subsidiary of the Sdružení místních samospráv České republiky (SMS ČR), it offers professional and cost-effective services primarily in data protection (GDPR), public procurement administration, grant advisory, strategic planning, copyright management, and website auditing. The company targets public sector entities and nonprofit organizations, leveraging its affiliation with SMS ČR to maintain a trusted market position. Technically, the website is built on the WebWorks WebCreator CMS platform, utilizing modern JavaScript libraries such as jQuery and Popper.js, and includes responsive design elements for mobile optimization. The site employs HTTPS with a good SSL configuration and integrates Google Analytics for user tracking, complemented by a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and organizational affiliation support its legitimacy. Overall, SMS-služby s.r.o. presents a professional and trustworthy online presence aligned with its business focus. However, improvements in security header implementation, domain registration transparency, and publication of security policies would enhance its security posture and trustworthiness.

Biblica is a well-established global Bible ministry focused on releasing widely read Scriptures and providing innovative resources to support Bible ministry worldwide. The organization targets a global Christian audience and mission organizations, positioning itself as a leader in the non-profit religious sector. The website reflects a mature digital presence built on WordPress with modern technologies and monitoring tools, offering a professional user experience with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response information. The absence of WHOIS registration data introduces some uncertainty about domain registration legitimacy, but the overall branding and content quality support the organization's credibility. Strategic recommendations include enhancing transparency around security and incident response, clarifying domain registration details, and continuing to monitor third-party scripts for vulnerabilities.

K

Käte Ahlmann Stiftung

kaete-ahlmann-stiftung.de

46

The Käte Ahlmann Stiftung is a German non-profit organization focused on mentoring success-oriented women entrepreneurs through its #TWINmentoring program. The website presents a professional and well-structured platform offering a year-long mentoring experience with experienced businesswomen, fostering personal and business growth. The target audience is women entrepreneurs seeking guidance and networking opportunities. Technically, the site is built on WordPress using common frameworks and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, though lacking advanced security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear contact information and partner affiliations.

FISAF International operates as a non-profit federation dedicated to the promotion and development of sport aerobics, fitness, and hip hop on a global scale. The organization provides education, certifications, workshops, and organizes international championships, serving a community of athletes, coaches, judges, and fitness professionals across more than 30 countries. The website reflects a professional and consistent brand image aligned with its mission and target audience. Technically, the website is built on a modern WordPress platform using the Enfold theme, incorporating standard libraries such as jQuery and FontAwesome. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking tools are detected, indicating a minimal data collection approach. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks important security headers and visible privacy or cookie policies, which are critical for compliance with data protection regulations such as GDPR. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and social presence suggest a legitimate organization. Overall, the website presents a low to moderate risk profile but should address compliance gaps and improve transparency to enhance trust and security posture.

S

SINGLE QUEEN s.r.o.

singlequeen.cz

58

SINGLE QUEEN s.r.o. is a Czech media publishing company operating multiple successful online magazines with a large monthly audience. The company has over 10 years of experience and maintains a strong presence on major Czech web portals. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and reCAPTCHA for analytics and security. The security posture is solid with HTTPS and form protections, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the Czech media market.

D

Deutsches Bernsteinmuseum im Kloster Ribnitz

deutsches-bernsteinmuseum.de

50

The Deutsches Bernsteinmuseum im Kloster Ribnitz is a small regional museum in Germany specializing in the natural and cultural history of Baltic amber. It offers permanent and special exhibitions, educational programs for children and groups, and hosts cultural events such as concerts and readings. The museum is owned by the city of Ribnitz-Damgarten and supported by various cultural foundations and government bodies, positioning it as a trusted cultural institution in the region. Technically, the website is built on the Contao Open Source CMS and uses a range of JavaScript libraries including jQuery 1.11.3 and carouFredSel for carousels. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting is provided by a German hosting provider (rzone.de). The website is fully accessible with no blocking or WAF challenges. From a security perspective, the site uses HTTPS but lacks important security headers and a cookie consent mechanism, which are recommended for GDPR compliance. The use of an outdated jQuery version may pose minor security risks. No incident response or security policies are published, and no analytics or tracking scripts are detected, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and serves its audience well, but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

I

INTOUCH

intouch.at

49

INTOUCH is a well-established Austrian marketing and advertising agency based in Gleisdorf near Graz, Steiermark, operating since 1996. The company offers a comprehensive range of services including corporate design, online marketing, e-commerce solutions, SEO, and full-service marketing consulting. Their market position is strong within the regional media and advertising sector, serving clients from small enterprises to large corporations. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients seeking sustainable marketing success. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and various marketing and analytics tools such as Matomo and Google Analytics. While the site is moderately optimized for performance and mobile devices, there is room for improvement in accessibility and updating legacy libraries. The presence of a cookie consent mechanism and detailed privacy policy demonstrates good digital maturity and GDPR compliance. From a security perspective, the site uses HTTPS and implements user consent for tracking technologies. However, it lacks explicit security headers and uses an older jQuery version, which could be updated to enhance security posture. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the entity. Overall, INTOUCH presents a secure, compliant, and professional online presence suitable for its business model. Strategic improvements in security headers and technical modernization would further strengthen its digital resilience and user trust.

S

SC Networks - Evalanche

evalanche.net

48

SC-Networks GmbH operates Evalanche, a mature and well-established marketing automation platform focused on B2B clients primarily in Germany. The website presents a professional and comprehensive digital presence with strong emphasis on data protection, ISO 27001 certification, and GDPR compliance. The platform offers modular marketing automation, lead management, and email marketing services with a strong ecosystem of partners and professional services. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and consent management. Security posture is solid with HTTPS and certifications, though explicit security headers and incident response disclosures are lacking. WHOIS data is missing or privacy protected, which slightly reduces domain trustworthiness but does not detract from the overall professional presentation. Strategic recommendations include enhancing security headers, publishing incident response contacts, and clarifying domain registration details to improve transparency and trust.

W

Webwerk Online-Solutions GmbH

webwerk.at

52

Webwerk Online-Solutions GmbH is a well-established digital agency based in Klagenfurt, Austria, specializing in comprehensive online solutions including web design, app development, CMS, e-commerce, and e-government services. The company targets municipalities and businesses seeking digital transformation and online marketing services. Their market position is reinforced by certifications such as Google Partner and TYPO3 Gold Member, and a portfolio featuring public sector and private clients. Technically, the website is built on WordPress with modern plugins and tools, including Borlabs Cookie for consent management and Google Analytics for tracking. The site demonstrates good mobile optimization, SEO, and accessibility features, though some security headers could be improved. Security posture is strong with HTTPS enforced and no visible vulnerabilities. Privacy compliance is robust with clear cookie consent and GDPR-aligned privacy policy. Overall, the website reflects a professional, trustworthy, and credible business presence.

H

Hunger auf Kunst und Kultur | Der Kulturpass für die Steiermark

hakuk.st

43

The website hakuk.st serves as a cultural promotion platform for the Steiermark region in Austria, focusing on providing information about a cultural pass and related events. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard web technologies and integrations such as Google Fonts and Jetpack analytics. While the site offers good design quality and user experience, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response information. The absence of security headers and vulnerability disclosure policies suggests room for improvement in security posture. Overall, the site is accessible and safe for general audiences but would benefit from enhanced compliance and security practices to improve trust and regulatory adherence.

Podpůrný a garanční rolnický a lesnický fond, a.s. (PGRLF) is a Czech financial institution specializing in providing financial support, loan guarantees, and insurance subsidies primarily to the agriculture, forestry, and food production sectors. The organization operates multiple programs aimed at reducing interest burdens, supporting insurance, and offering investment loans to farmers, foresters, and food producers. PGRLF positions itself as a leading entity in the Czech Republic with over 30 years of experience and close ties to government agricultural policy. The website is professionally designed using WordPress and the Divi theme, featuring comprehensive program information and user-friendly navigation.

M

MZV

export.cz

45

The website export.cz serves as the official economic diplomacy portal of the Czech Ministry of Foreign Affairs (MZV). It provides news, analysis, and support services related to export promotion, international markets, and investment opportunities. The site targets business professionals, exporters, government officials, and investors interested in Czech economic diplomacy. The business model is governmental, focusing on information dissemination and export support rather than commercial transactions. The site is well-branded and consistent with official government identity. Technically, the site is built on WordPress using the Extra theme and several plugins including Google Analytics and Adform for tracking. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security is adequate with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. From a security perspective, the site shows good compliance with privacy regulations including GDPR, with a clear privacy policy and cookie consent mechanism. However, no explicit security policy or incident response information is provided. The absence of WHOIS data is a concern for domain registration transparency but is mitigated by the official nature of the content and branding. Overall, the site is a trustworthy and professional government portal with moderate technical sophistication and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and security posture.

P

Pelaaja.fi

pelaaja.fi

52

Pelaaja.fi is a leading Finnish video game media platform offering a wide range of content including news, reviews, podcasts, videos, and magazine subscriptions. It holds a strong market position as the largest gaming media outlet in Finland, targeting gaming enthusiasts and players. The website is professionally designed with consistent branding and good content quality, supporting its credibility in the media sector. Technically, the site is built on WordPress with modern technologies such as Alpine.js and integrates various advertising and tracking services. SEO and mobile optimization are well implemented, though accessibility could be improved. Security posture is solid with HTTPS and some security best practices, but lacks explicit published security policies and incident response contacts. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences, with room for improvement in privacy and security transparency.

M

MHA Oy

let-it-flow.fi

54

Let It Flow is a Finnish wellness company specializing in deep relaxation therapies, including Neurosonic low-frequency vibration therapy and flotation relaxation. The business operates primarily in Rovaniemi, Finland, targeting individuals seeking stress relief and holistic wellness experiences. The website is built on WordPress with a modern tech stack and integrates e-commerce and booking functionalities, reflecting a digitally mature infrastructure. Security posture is generally good with HTTPS enforced, though improvements in security headers and privacy compliance are recommended. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

B

Barns Furr Ltd

barnsfurr.com

56

Barns Furr Ltd operates a professional design and creative direction practice, specializing in brand identities, digital experiences, print solutions, and art direction. The company targets luxury, lifestyle, technology, and media brands, positioning itself as a trusted and experienced design partner with over a decade of expertise. The website showcases a portfolio of projects demonstrating a blend of aesthetics and functionality to help businesses grow and stand out. Technically, the website is built on WordPress, hosted by SiteGround, and uses modern web technologies including Adobe Fonts and Masonry JS. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

I

Idearäätäli Oy

virtuaalikirja.fi

42

Virtuaalikirja.fi is a Finnish website operated by Idearäätäli Oy, offering virtual or sample books likely aimed at Finnish-speaking users interested in digital publishing. The business appears to be a small niche player founded in 2016, with a focus on providing digital content related to books. The website is built on WordPress and uses common web technologies such as jQuery and Jetpack for analytics and functionality. The technical infrastructure is moderate with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies, which are recommended for compliance and trust. Overall, the site is legitimate and consistent with the registrant information, but improvements in privacy compliance and security best practices would enhance trust and user confidence.

Općina Marijanci is the official municipal government entity for the Marijanci area in Croatia, providing residents and stakeholders with comprehensive information about local governance, community projects, public procurement, and cultural events. The website serves as a central hub for official announcements, administrative contacts, and community engagement. The site is well-positioned as a trusted source for local government information, targeting residents and local organizations. Technically, the website is built on WordPress 5.7.12, utilizing common web technologies such as jQuery and MediaElement.js for multimedia content. Hosting is provided by CARNET, a reputable Croatian academic network, ensuring stable and regionally appropriate infrastructure. The site demonstrates good mobile optimization and accessibility features, including an accessibility toolbar, but lacks advanced SEO and analytics implementations. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formal security policies, which are recommended for enhancing protection and compliance. The absence of privacy and cookie policies indicates a compliance gap with GDPR and related regulations. Overall, the website is a reliable and professional municipal portal with strong business credibility but would benefit from improved privacy compliance and security hardening to align with best practices and regulatory requirements.

F

Free Journal Network

freejournals.org

43

Free Journal Network (FJN) is a small nonprofit organization based in the United States, founded in 2018, dedicated to promoting scholarly journals that adhere to the Fair Open Access model. The organization supports academic journals by facilitating coordination, funding, quality assurance, promotion, and advocacy for open access publishing without author fees. The website serves as an informational and organizational hub for members and interested parties in the scholarly publishing community. Technically, the website is built on WordPress, hosted by Bluehost, and uses common plugins and scripts such as Contact Form 7 and jQuery. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced security and privacy practices.

M

MEDIA CLUB, s.r.o.

kiss.cz

41

Radio Kiss is a well-established Czech radio station operated by MEDIA CLUB, s.r.o., part of the FTV Prima media group. The station targets a broad audience with a focus on music from the 90s and contemporary hits, complemented by events such as Kissparty and an online merchandise shop. The website demonstrates a solid digital presence with modern technologies, including responsive design, multimedia streaming, and integrated social media. Privacy compliance is robust, featuring a comprehensive GDPR-aligned consent management platform. Security posture is good with HTTPS and content security policies, though additional headers could enhance protection. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional content and clear company information. Strategic recommendations include enhancing security headers, maintaining up-to-date libraries, and conducting regular security audits to mitigate risks.

H

hollomet GmbH

hollomet.com

73

hollomet GmbH is a specialized German company providing innovative cellular materials made from metallic and ceramic substances, focusing on sectors such as heat management, process technology, lightweight construction, energy absorption, and design. The company positions itself as a competent development and manufacturing partner offering tailored solutions for industrial clients, particularly in automotive and machinery sectors. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and media content has minor loading issues. WHOIS data is unavailable or indicates a very new domain, which slightly reduces trust but does not contradict the professional business presentation. Overall, the site is trustworthy, GDPR compliant, and business credible.

S

Správa mestskej zelene v Košiciach

smsz.sk

55

Správa mestskej zelene v Košiciach is a municipal organization responsible for the management, maintenance, and development of public and private greenery in Košice, Slovakia. Their services include plant nursery operations, maintenance of playgrounds, fountains, artworks, and monuments, as well as composting and rental of non-residential spaces. The organization operates with a public service mandate supplemented by commercial activities such as retail and wholesale of ornamental plants. The website reflects a medium-sized government entity with a local focus and a well-established presence since 2009. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO, Smart Slider 3, and Contact Form 7. The site is hosted by Websupport and employs DNSSEC and HTTPS for secure communications. The site is mobile optimized and accessible with good SEO practices, though accessibility features are basic. Performance is moderate, typical for a content-rich municipal site. From a security perspective, the site enforces HTTPS and DNSSEC, but lacks advanced security headers and published security policies or incident response information. There is no visible privacy policy or terms of service, which impacts compliance posture. Cookie consent is implemented, indicating some GDPR awareness. No vulnerabilities or malicious indicators were detected in the content or scripts. Overall, the website is professional, trustworthy, and serves its public service role effectively. However, improvements in privacy documentation, security policy transparency, and advanced security controls are recommended to enhance compliance and security posture.

B

Befektető-védelmi Alap

bva.hu

51

Befektető-védelmi Alap operates as Hungary's Investor Protection Fund, providing compensation and protection services to investors within the Hungarian financial market. The website serves as an official informational portal detailing eligibility, compensation processes, regulatory framework, and organizational structure. The target audience primarily includes investors and financial market participants in Hungary. The business model is government-backed, focusing on investor protection and regulatory compliance. The site content is well-structured, professionally presented, and consistent with the organization's official role. Technically, the website is built on WordPress CMS using the Manduca theme, incorporating modern web technologies such as jQuery and MediaElement.js for multimedia content. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some multimedia content has playback issues. Performance is moderate, with no significant technical deficiencies detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating attention to privacy compliance. However, explicit security headers are missing, and there is no publicly available security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence since 2000, consistent with a government or official entity. Overall, the website presents a trustworthy and professional front for the Investor Protection Fund, with minor recommendations to enhance security posture and transparency. The risk level is low, with no critical issues identified.