Security Directory

K

Klinika JL

kjl-mr.cz

59

Klinika JL operates a specialized MRI diagnostic service in Prague, Czech Republic, with over 15 years of experience. The clinic uses advanced Philips Ingenia 3 Tesla MRI scanners to provide diagnostic imaging primarily for neurology, neurochirurgy, gastroenterology, gynecology, orthopedics, and oncology. The website is professionally designed using WordPress and modern plugins, offering online appointment booking and contact forms with file upload capabilities. The target audience is local patients seeking high-quality MRI diagnostics. Technically, the site employs a robust WordPress infrastructure with popular plugins and Google services for analytics and marketing. Security posture is moderate with HTTPS enabled and reCAPTCHA on forms, but lacks some security headers and cookie consent mechanisms. WHOIS data is missing, which impacts domain trustworthiness, though the site content and business information appear legitimate and professional.

Državni hidrometeorološki zavod (DHMZ) is the official Croatian government meteorological and hydrological service, providing comprehensive weather data, forecasts, warnings, climate monitoring, air quality information, and research services. The organization serves a broad audience including the general public, government agencies, researchers, mariners, and agricultural sectors. The website reflects a mature digital presence with clear navigation, professional design, and authoritative content consistent with a national service provider. Technically, the site uses modern JavaScript libraries such as Leaflet.js for mapping, jQuery, and Select2, hosted by CARNET, Croatia's academic network, ensuring reliable infrastructure. Security posture is strong with HTTPS enforced, cookie consent implemented, and certifications displayed, though some security headers could be improved. No blocking or WAF challenges were detected, and no vulnerabilities or suspicious patterns were found. Overall, the site demonstrates high trustworthiness and compliance with GDPR and other regulations.

M

Met Éireann

met.ie

64

Met Éireann is the official Irish National Meteorological Service providing authoritative weather forecasts, warnings, climate data, and specialized meteorological services for Ireland. The website serves a broad audience including the general public, government agencies, farmers, marine, and aviation sectors. It offers comprehensive weather information, educational resources, and research programs, positioning itself as a trusted government entity in the meteorology domain. The technical infrastructure leverages modern web technologies such as Vue.js, Bootstrap, jQuery, and integrates third-party services like Google Tag Manager and CookieYes for analytics and privacy compliance. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS, security headers, CSRF protection, and a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with good privacy and security practices, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include publishing a formal security policy and incident response contacts, enhancing Content-Security-Policy headers, and maintaining regular audits of third-party scripts.

M

Ministrstvo za digitalno preobrazbo

gov.si

63

The website www.gov.si is the official Slovenian government portal managed by the Ministry of Digital Transformation. It serves as a comprehensive platform providing citizens and residents with information about government operations and easy access to various public administration services. The portal includes links to specialized government service portals such as eUprava, SPOT, eDavki, and zVem, enhancing its role as a central hub for e-government services in Slovenia. The site targets a broad audience including citizens, businesses, and travelers, offering multilingual support to accommodate diverse users. From a technical perspective, the website employs a modern technology stack including Matomo for analytics, jQuery, and other JavaScript libraries to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly, with proper use of meta tags and structured data. Performance is moderate, with asynchronous loading of scripts to improve responsiveness. However, the CMS platform is not explicitly identified, suggesting a custom or proprietary solution. Security posture is strong with HTTPS enforced and secure form handling, but there is room for improvement in security headers and explicit publication of security policies. No cookie consent mechanism was detected, which is a compliance gap. The WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the Slovenian government and a domain age appropriate for a long-established official portal. Overall, the website demonstrates a high level of professionalism, trustworthiness, and functional completeness, making it a reliable source for government-related information and services. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

L

Letiště Praha, a.s.

prg.aero

60

Letiště Praha, a.s. operates the Václav Havel Airport Prague, the primary international airport serving the Czech capital. The company provides comprehensive airport services including passenger flights, cargo handling, parking, VIP lounges, and transportation facilitation. It holds a leading market position in Central Europe with a large operational scale and a strong brand presence. The website is professionally designed, mobile-optimized, and rich in content, targeting travelers, airlines, and local businesses. Technically, the website is built on Drupal 10 and integrates multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Adform, and Bloomreach Exponea. The site demonstrates good performance and accessibility standards, with comprehensive privacy and cookie policies supported by a consent management platform. External service integrations for booking and transportation are clearly linked. From a security perspective, the site enforces HTTPS and maintains privacy compliance with GDPR. However, the absence of WHOIS data and security.txt files slightly reduces trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. The site could improve by implementing security headers and publishing a vulnerability disclosure policy. Overall, Letiště Praha's digital presence is robust and professional, supporting its business operations effectively. Strategic improvements in security transparency and WHOIS data availability would enhance trust and compliance further.

6

6K spol. s r.o.

6k.cz

50

6K spol. s r.o. is a Czech company specializing in modular accounting and economic software solutions tailored for small and medium-sized businesses and accounting firms. Established in 1992, the company offers a suite of software modules including accounting, invoicing, payroll, asset management, and inventory control, complemented by services such as installation, training, and customer support. The company maintains a strong market presence with over 1000 satisfied clients and notable references including KPMG and BDO. Technically, the website employs a modern JavaScript stack with various libraries and integrates third-party services for analytics and customer engagement. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks comprehensive security headers and published security policies. The absence of WHOIS data and a privacy policy page presents compliance and trust challenges. Overall, the website is professional, user-friendly, and content-rich, supporting the company's credibility in the accounting software market.

Č

Česká unie sportu, z.s.

cuscz.cz

50

Česká unie sportu, z.s. is the largest umbrella and service sports organization in the Czech Republic, managing thousands of sports clubs, units, and facilities. The organization operates multiple sports centers, including swimming and skiing facilities, and provides educational services through its higher vocational school. The website targets sports organizations, athletes, and the general public interested in sports within the Czech Republic. It maintains a strong market position as a key non-profit entity in the sports sector. Technically, the website uses a modern tech stack including jQuery, Select2, Swiper, Owl Carousel, and AOS for animations. It is mobile-optimized with good navigation and a professional design. The site uses HTTPS and includes a cookie consent mechanism, but lacks some advanced security headers and explicit privacy and terms of service documentation. From a security perspective, the site demonstrates good baseline practices such as HTTPS and cookie consent but would benefit from enhanced security headers, published privacy policies, and incident response contacts. No vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the website is professional, trustworthy, and serves its audience well, though improvements in privacy compliance and security documentation are recommended to enhance user trust and regulatory adherence.

Č

Česká průmyslová zdravotní pojišťovna

cpzp.cz

57

Česká průmyslová zdravotní pojišťovna (ČPZP) is a well-established Czech health insurance provider founded in 2009. The company offers a broad range of health insurance services including preventive programs, travel insurance, and electronic customer services. It operates nationwide with a large client base and multiple physical branches. The website reflects a professional and consistent brand image, targeting insured individuals and payers within the Czech Republic. Technically, the site is built on the Yii PHP framework with modern JavaScript libraries and provides a responsive and accessible user experience. Security measures such as HTTPS, CSRF tokens, and cookie consent mechanisms are implemented, although some security headers could be more explicitly defined. The site uses extensive analytics and marketing tools, including Google Analytics, Facebook Pixel, and TikTok Analytics, with GDPR-compliant privacy and cookie policies. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website demonstrates a mature digital presence with good security and compliance posture.

Č

Česká obec sokolská

sokol.eu

48

Česká obec sokolská is a large, well-established non-profit organization in the Czech Republic focused on promoting sports, culture, and community engagement. With a membership base of approximately 160,000 across more than 1,000 units, it offers a wide range of sports and cultural activities, educational programs, and community events. The website reflects this mission with rich content, event calendars, and project descriptions. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Facebook SDK for tracking and marketing. It is served over HTTPS with cookie consent mechanisms in place, indicating a moderate level of digital maturity. However, the absence of a privacy policy and terms of service pages represents a compliance gap. Security posture is generally good with HTTPS and some best practices, but lacks explicit security headers and vulnerability disclosure information. Overall, the site is professional and trustworthy but would benefit from improved privacy and security documentation.

E

Energy Ogre

energyogre.com

66

Energy Ogre operates as a service provider specializing in finding and managing the best electricity plans for consumers in Texas, aiming to reduce electricity bills by up to 40%. The company positions itself as a trusted intermediary that simplifies the complex electricity market for its customers. The website features professional design elements, testimonial videos, and a clear business proposition targeting Texas residents seeking energy savings. Technically, the website employs a modern technology stack including Google Tag Manager, HubSpot, TikTok Pixel, Facebook Pixel, and other marketing and analytics tools. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. HTTPS is enabled, ensuring secure communication, but security headers are not evident in the provided data. From a security perspective, the site shows strengths such as HTTPS usage and absence of visible vulnerabilities. However, the lack of explicit privacy and cookie policies, absence of security headers, and missing WHOIS domain registration data present compliance and trust concerns. The domain's WHOIS information is unavailable, which raises questions about domain legitimacy and ownership transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and verification of domain registration to improve trustworthiness and regulatory adherence.

E

eUbytko.cz

eubytko.cz

55

eUbytko.cz is an established online accommodation booking platform focused on the Czech Republic market. It offers a wide range of lodging options including apartments, pensions, hotels, cottages, and wellness resorts, targeting tourists and travelers seeking vacation stays within the country. The website features rich content, including categorized accommodation listings, travel guides, and blog articles, enhancing user engagement and decision-making. Technically, the site employs modern JavaScript libraries such as jQuery, Owl Carousel, and Google Tag Manager, with asynchronous script loading to optimize performance. SEO is supported through structured data (JSON-LD) and Open Graph metadata, improving search engine visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and terms of service pages are not clearly found. The WHOIS data is privacy protected, which is common and justified for this business type. Overall, the site demonstrates a mature digital presence with good usability and trust indicators.

J

JIZERSKÁ, obecně prospěšná společnost

jnlm.cz

49

The website www.jnlm.cz represents the Bedřichovský Night Light Marathon, a niche winter sports event organizer based in the Jizera Mountains, Czech Republic. The site provides event information, registration links, and live updates targeting winter sports enthusiasts, particularly cross-country skiers interested in night skiing. The business operates as a small regional event organizer with a clear focus on promoting and managing this annual marathon event. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Slick Carousel, and FancyBox, with Google Fonts and reCAPTCHA integration. The site is mobile optimized with a responsive design and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and transparency are recommended. The absence of WHOIS data limits domain trust verification, though the website content and contact information appear legitimate. Overall, the site is professionally presented, trustworthy, and compliant with privacy regulations, but would benefit from enhanced security practices and domain registration transparency to improve its risk profile and trustworthiness.

T

Tým silniční bezpečnosti

nakolejensprilbou.cz

45

The website 'Na kole jen s přilbou' is a Czech Republic-based cycling safety awareness project managed by the Tým silniční bezpečnosti (Road Safety Team). It focuses on educating cyclists about the importance of helmet use and safe cycling practices through articles, news, downloadable materials, videos, and events. The project is supported by multiple government and safety organizations, indicating a strong partnership ecosystem and a credible market position within the transportation safety sector. The domain has been active since 2012, consistent with the project's maturity and content depth. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Slick Carousel, and Google Fonts, with Google Analytics and Facebook Pixel for tracking. The site is mobile optimized and uses HTTPS with Google reCAPTCHA for form security. However, it lacks explicit privacy and terms of service pages and does not display advanced security headers, which are areas for improvement. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent with granular categories. No critical vulnerabilities or WAF blocking were detected. The absence of a published privacy policy and terms of service, as well as missing explicit contact information, slightly reduce privacy compliance and business credibility scores. Overall, the website is a trustworthy, well-branded educational platform with good technical implementation and moderate security posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels for incident response to improve compliance and trust further.

Б

Благодійний фонд «Схід SOS»

east-sos.org

60

Благодійний фонд «Схід SOS» є українською неприбутковою організацією, що надає всебічну допомогу постраждалим від збройного конфлікту, внутрішньо переміщеним особам, а також підтримує громади через гуманітарні, правові, психологічні та освітні проєкти. Організація має стабільну позицію на ринку благодійних фондів в Україні, активно співпрацює з міжнародними донорами та партнерами. Технічна інфраструктура сайту базується на WordPress з використанням сучасних плагінів для SEO, доступності та інтерактивності, що забезпечує добру продуктивність та мобільну оптимізацію. З точки зору безпеки, сайт використовує HTTPS, має налаштований статус домену clientTransferProhibited, але не використовує DNSSEC, а також не має видимих політик безпеки чи контактів для інцидентів. Загалом, сайт є професійним, надійним і орієнтованим на користувача, але може покращити відповідність GDPR шляхом впровадження механізму згоди на куки та публікації політики безпеки.

L

Lead Media s.r.o.

dognet.sk

45

Dognet.sk operates as a leading affiliate marketing network focused on the Central and Eastern European and Balkan markets. The company, legally known as Lead Media s.r.o., has been active for over 13 years, providing performance-based marketing services primarily to e-commerce businesses and publishers. Their business model is based on CPA, ensuring advertisers pay only for real business outcomes. The website is professionally designed, multilingual, and rich in content, showcasing strong client testimonials and trust signals such as high Google and Facebook ratings. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and mobile optimization. Security practices include HTTPS enforcement, cookie consent mechanisms, and use of reCAPTCHA, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance with GDPR.

Ł

Łódzka Organizacja Turystyczna

lodz.travel

62

Lodz.Travel is the official tourism portal for the city of Łódź, Poland, managed by the Łódzka Organizacja Turystyczna. The website serves as a comprehensive information hub for tourists, offering details on attractions, accommodations, dining, events, and cultural activities. It targets families, event organizers, and cultural visitors, positioning itself as a key regional tourism platform with government backing and strong social media presence. Technically, the site is built on TYPO3 CMS and leverages a modern JavaScript ecosystem including jQuery, Slick Carousel, and various UI libraries. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing strategy. The site is mobile optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish privacy or incident response policies, which are areas for improvement. The WHOIS data is privacy protected, which is typical for organizational domains, and no suspicious patterns were detected. Overall, Lodz.Travel presents a professional, trustworthy, and content-rich platform for promoting tourism in Łódź. Strategic enhancements in privacy transparency and security hardening would further strengthen its posture.

S

SWAT - Strategie, Branding en Creatie. Merkenbureau.

swat.nl

45

SWAT is a Dutch branding and creative agency specializing in building, creating, and strengthening brands through strategic design, creative concepts, and thoughtful branding. The company targets businesses seeking impactful brand identities and communication materials. Their market position is that of a dedicated, passionate agency focused on delivering strong and distinctive brands. Technically, the website is built on WordPress using modern plugins and frameworks, with good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. Recommendations include enhancing security headers, adding incident response information, and maintaining plugin security.

N

Národní pedagogický institut České republiky

rvp.cz

56

The website rvp.cz is a professionally maintained educational portal operated by the Národní pedagogický institut České republiky, serving educators primarily in the Czech Republic. It offers a wide range of teaching materials, expert articles, webinars, and community resources aimed at improving teaching quality and supporting educators. The portal is well-established, with a domain age dating back to 2004, reflecting its longstanding presence in the educational sector. The business model is non-profit and government-affiliated, focusing on educational content and community engagement rather than commercial activities. Technically, the site employs a modern technology stack including Bootstrap 5, jQuery, Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. It uses a custom CMS hosted by REG-WEBGLOBE, with good mobile optimization and moderate performance. The site implements cookie consent mechanisms compliant with GDPR and provides clear privacy and terms of service documentation. Security best practices such as HTTPS enforcement and secure login forms with OAuth social login options are in place, though explicit security headers like Content-Security-Policy could be more visible. From a security perspective, the portal demonstrates a mature posture with no detected vulnerabilities or exposed sensitive data. The use of reCAPTCHA and cookie consent indicates attention to user privacy and bot mitigation. However, the absence of a public security policy or incident response page and lack of a security.txt file suggest areas for improvement in transparency and vulnerability disclosure. Overall, rvp.cz is a trustworthy, high-quality educational resource with strong compliance and security foundations. It effectively serves its target audience of educators with relevant content and community tools. Strategic recommendations include enhancing security header visibility, publishing formal security policies, and expanding accessibility features to further improve compliance and user experience.

M

Ministerstvo školství, mládeže a tělovýchovy České republiky

msmt.cz

69

The website represents the official online presence of the Ministry of Education, Youth and Sports of the Czech Republic (MŠMT ČR). It serves as a comprehensive portal providing information and services related to education policy, youth programs, sports administration, research and development, and international cooperation. The site targets a broad audience including educators, students, researchers, journalists, and the general public. It holds a strong market position as a national government entity responsible for education and youth affairs. Technically, the website is built on the Marwel CMS platform and utilizes a range of JavaScript libraries such as jQuery, Prototype.js, and Scriptaculous for interactive features. The site is moderately performant with good mobile optimization and accessibility features. SEO practices are well implemented with appropriate meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. The WHOIS data is unavailable, likely due to registry policies, which slightly impacts trust but is mitigated by the official government domain and consistent branding. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving as a reliable resource for its stakeholders. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

L

Leofoto Schweiz

leofoto.ch

52

Leofoto Schweiz operates as a specialized e-commerce retailer focusing on high-quality carbon tripods and photography accessories, targeting professional photographers and enthusiasts in Switzerland. The company emphasizes product durability and quality, supported by a 10-year warranty, positioning itself as a niche market leader in its segment. The website is built on WordPress with WooCommerce, leveraging modern web technologies and SEO tools to enhance user experience and visibility. Security measures include HTTPS and reCAPTCHA, but lack explicit security policies and comprehensive privacy compliance mechanisms. Overall, the site demonstrates a solid business presence with room for improvement in privacy and security transparency.

T

Technische Universität Dortmund

tu-dortmund.de

60

Technische Universität Dortmund is a reputable German university offering approximately 80 study programs with a focus on innovation, interdisciplinarity, and internationality. The website is professionally designed using TYPO3 CMS and integrates modern web technologies such as jQuery UI and Matomo analytics. It provides comprehensive academic and campus information, event calendars, and access to university services. The technical infrastructure appears solid with good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though security headers and explicit security policies are not evident. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain and website are legitimate and trustworthy, consistent with an academic institution.

S

SGD SWISS GRAPHIC DESIGNERS

sgd.ch

54

SGD Swiss Graphic Designers is a professional association and network representing Swiss graphic designers. The organization supports its members with professional resources, honorarium systems, educational documents, and networking opportunities. The website is well-branded and targets graphic design professionals and clients in Switzerland. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO. Security posture is adequate with HTTPS and reCAPTCHA, but could be improved with additional security headers and cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained.

U

Universitätsallianz Ruhr

uaruhr.de

51

The Universitätsallianz Ruhr (UA Ruhr) website represents a cooperative alliance of three major universities in the Ruhr region of Germany: Ruhr-Universität Bochum, TU Dortmund, and Universität Duisburg-Essen. Established in 2007, the alliance focuses on joint research, study programs, and knowledge transfer. The website serves as an information hub for students, researchers, and partners, showcasing news, events, and collaborative initiatives. The site is professionally designed with clear navigation and multilingual support (German and English), reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS, a robust open-source content management system favored by academic institutions. It employs modern frontend libraries such as jQuery, Photoswipe, and Select2, and integrates Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the site uses HTTPS and asynchronous script loading, but lacks visible security headers and explicit security or incident response policies. No privacy or cookie policies were detected in the provided content, which may impact GDPR compliance. The domain registration aligns well with the academic institutions involved, enhancing trustworthiness. No signs of malicious activity or content blocking mechanisms were found. Overall, UA Ruhr's website is a credible, well-maintained academic portal with strong business credibility and good technical implementation. However, improvements in privacy compliance and security policy transparency are recommended to enhance user trust and regulatory adherence.

B

Be.Beyond GmbH & Co KG

lead-print.com

49

Lead-Print, a brand of Be.Beyond GmbH & Co KG, is a well-established provider of web-to-print solutions primarily serving the DACH region. With over 360 installations and 2500 active portals, the company offers tailored, cost-effective platforms for printers, media service providers, and corporate clients. Their product suite includes PRINT LOUNGE, DRUCKSHOP, and ONLINE CREATOR, supported by consulting and plugin services. The website reflects a professional and consistent brand image with clear contact information and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, with a responsive design and moderate performance. However, there is room for improvement in security headers and published security policies. The absence of WHOIS data is a notable gap, reducing domain transparency and trust from a registration perspective. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the lack of incident response contacts and security policy documentation suggests an opportunity to enhance trust and compliance. Overall, the website is safe, business-focused, and well-structured, suitable for its target audience in the printing and media technology sector.

I

Intelligent Membranes

intelligentmembranes.co.uk

46

Intelligent Membranes is a specialized manufacturer and retailer of high-performance liquid-applied membranes designed for airtightness, waterproofing, and protective coatings in the construction industry. The company holds a strong market position in the UK, Europe, and USA, supported by certifications such as BBA and Passivhaus. Their product portfolio includes airtight paints, vapour control membranes, fire retardant coatings, and asbestos encapsulation solutions, targeting construction professionals and retrofit specialists. Technically, the website is built on WordPress with WooCommerce, leveraging modern marketing and analytics tools like Google Analytics, Microsoft Clarity, and Klaviyo. The site is well-optimized for mobile and provides a good user experience with clear navigation and professional content. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and a published security.txt file. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy page found. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Overall, the website is professional and trustworthy but would benefit from improved transparency and security disclosures.

F

FORPSI

forpsi.it

74

FORPSI is a professional Czech technology company specializing in domain registration, web hosting, VPS, cloud services, dedicated servers, email hosting, and website building tools. The company operates its own datacenter with 24/7 monitoring and offers a broad portfolio of IT infrastructure services targeting individuals and businesses seeking reliable online presence solutions. The website is well-structured, multilingual, and provides clear navigation to various service categories including domains, hosting, WordPress, VPS, cloud, and email services. Technical infrastructure is based on ASP.NET WebForms with modern JavaScript libraries and tracking tools integrated. Security posture is adequate with HTTPS and SSL certificates in use, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy and terms of service. WHOIS data for the domain is unavailable or protected, which slightly reduces trust but the professional presentation and service offerings indicate legitimacy. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

F

FORPSI

forpsi.cz

73

FORPSI is a Czech-based technology company specializing in domain registration, web hosting, VPS, and cloud services. The company positions itself as a professional and reliable partner with its own data center, targeting both business and individual customers seeking affordable and comprehensive hosting solutions. The website content is well-structured and presented in Czech, reflecting a focus on the local market. The business model revolves around providing essential internet infrastructure services with a strong emphasis on domain and hosting offerings. Technically, the website employs a modern technology stack including jQuery, select2, Google Tag Manager, Cookiebot for consent management, and analytics tools such as Google Analytics, CrazyEgg, and Smartlook. The site is built on Kentico CMS, indicating a mature content management infrastructure. Performance and mobile optimization are good, with proper SEO and accessibility features, although some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and published security policies or incident response information, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. The absence of WHOIS registrant data reduces trust slightly but does not negate the professional appearance and functionality of the site. Overall, FORPSI presents a solid digital presence with good privacy compliance and technical implementation. Strategic recommendations include enhancing transparency by publishing security and incident response policies, improving contact information visibility, and adding security headers to strengthen the security posture further.

F

FORPSI

forpsi.net

74

FORPSI is a professional service provider specializing in domain registration, web hosting, VPS, and cloud services primarily targeting customers in the Czech Republic. The company positions itself as a reliable partner with its own data center infrastructure, offering a range of hosting and domain-related services. The website is well-structured, with clear descriptions of services and a focus on customer usability. Technically, the site uses modern web technologies including jQuery, Select2, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The presence of a cookie consent banner and detailed cookie policy demonstrates compliance with GDPR requirements. Security-wise, the site enforces HTTPS and uses CSRF protection cookies, but lacks visible security headers and explicit security policies or incident response contacts, which could be improved. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the professional presentation and comprehensive privacy compliance mitigate some of these concerns. Overall, the website scores well in content quality, technical implementation, and security posture, with room for improvement in business credibility and transparency.

E

Ebner Media Group

page-online.de

64

PAGE online is a well-established German media platform specializing in design, creativity, typography, and related industry news. It serves creative professionals and agencies with editorial content, events, webinars, and a digital and print magazine shop. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Google Tag Manager, and Usercentrics for GDPR compliance. Advertising is managed primarily through Google Ad Manager and Adsense, with clear consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

H

Handwerkskammer Rheinhessen

hwk.de

52

Handwerkskammer Rheinhessen is a regional chamber of crafts serving the Rheinhessen area in Germany, providing education, training, consulting, and support services to handcraft businesses, apprentices, and related stakeholders. The website is professionally designed, well-structured, and targets a broad audience including apprentices, businesses, migrants, and schools. It offers comprehensive services such as apprenticeship guidance, further education, business consulting, and digitalization support. The organization maintains a strong regional presence and partners with related entities to enhance its service offerings. Technically, the website is built on WordPress with modern frameworks like Vue.js and Bootstrap, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site reflects a trustworthy and credible institution with a strong digital presence.

B

Bundesanzeiger Verlag

bundesanzeiger.de

63

The Bundesanzeiger website serves as the official publication platform for the Federal Republic of Germany, operated by the Bundesanzeiger Verlag under the auspices of the Federal Ministry of Justice and Consumer Protection. It provides legally mandated announcements, corporate disclosures, and various specialized services such as the Fondsdata platform, shareholder forums, and restructuring forums. The platform targets companies, government entities, investors, and the general public seeking official legal and financial information. The business model is centered on providing authoritative, government-backed publication and information services, positioning it as a critical infrastructure in the German legal and corporate transparency ecosystem. Technically, the website is built on the Apache Wicket framework with modern JavaScript libraries such as jQuery and Select2, hosted on PlusServer infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a professional and consistent design. The presence of secure login forms, cookie consent mechanisms, and strict referrer policies indicate a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs secure form handling, and provides security policy information, though explicit security headers are not visible in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is readily available, enhancing trust and transparency. Overall, the Bundesanzeiger website exhibits a high level of professionalism, security, and compliance suitable for its role as a government publication platform. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen its security posture and trustworthiness.

L

LUTHER Rechtsanwaltsgesellschaft mbH

luther-lawfirm.com

72

LUTHER Rechtsanwaltsgesellschaft mbH is a large, internationally active German law firm headquartered in Cologne, specializing in economic and tax law advisory services. The website reflects a professional and comprehensive digital presence with detailed information about their competencies, international offices, and news updates. The technical infrastructure is based on TYPO3 CMS with modern web technologies including Bootstrap and jQuery, and incorporates privacy-conscious analytics via Matomo with cookies disabled. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit privacy or terms of service pages in the provided content. WHOIS data is unavailable or privacy protected, which is common for professional firms but reduces transparency. Overall, the website is well-designed, user-friendly, and trustworthy for its target audience of business professionals seeking legal services.

D

Dentons

antibriberylaws.com

67

Dentons is a global law firm providing legal advisory services with a strong digital presence exemplified by the Global ABAC Tracker tool. This website offers comprehensive guidance on anti-bribery and anti-corruption laws worldwide, targeting legal professionals and corporate compliance officers. The platform is professionally branded and consistent with Dentons' global reputation. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site reflects a mature digital infrastructure supporting Dentons' business model of professional legal services.

C

cosinex GmbH

cosinex.de

54

cosinex GmbH is a well-established German company specializing in digital solutions for public procurement. Their offerings include a comprehensive suite of software products that enable fully digital procurement processes for government entities at federal, state, and municipal levels. The company positions itself as a pioneer in e-procurement with a strong focus on innovation and customer support. The website reflects a professional and modern digital presence, leveraging WordPress and WooCommerce platforms with various plugins to enhance functionality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, cosinex GmbH demonstrates a credible and trustworthy business with clear contact information, social media engagement, and compliance with GDPR requirements.

L

Loloyal

loloyal.com

61

Loloyal is a loyalty and rewards program provider focused on Shopify merchants, offering features such as points programs, referral incentives, VIP tiers, and customizable reward panels. The company is rebranding under the Trustoo.io brand to provide broader retention solutions. The website is professionally designed using WordPress and WooCommerce with Elementor, integrating modern web technologies and marketing tools like Google Tag Manager and Calendly. The platform targets small to medium-sized e-commerce businesses seeking to enhance customer engagement and retention through loyalty programs. Technically, the website demonstrates a solid infrastructure with HTTPS enabled and a modern tech stack, though some improvements in security headers and privacy compliance mechanisms are recommended. The absence of WHOIS registration data is a notable anomaly, potentially impacting trustworthiness, but the site maintains strong branding consistency and partner relationships. Analytics usage is moderate, with Google Analytics present but not fully configured. Security posture is generally good with no obvious vulnerabilities detected, but the lack of published security policies and incident response information suggests room for maturity. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site presents a low to moderate risk profile with recommendations to enhance transparency and security practices.

A

American International Concession Products, Corp. (AICP)

aicpcorp.com

49

American International Concession Products, Corp. (AICP) is a well-established broker and distributor specializing in concession products, premium merchandise, packaging, and crowd control equipment primarily serving the entertainment and hospitality industries. With over 35 years of experience, AICP positions itself as a leading provider in its niche, offering curated solutions to enhance guest experiences and operational efficiency. The website reflects a professional business model targeting entertainment venues, concession operators, and related clients. Technically, the website is built on WordPress with modern front-end libraries such as Bootstrap 5 and Swiper.js, ensuring a responsive and user-friendly experience. SEO is supported by Yoast SEO plugin, and performance is moderate with good mobile optimization. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. From a security perspective, the site uses HTTPS and Google reCAPTCHA on its contact forms, which are positive indicators. However, the absence of DNSSEC, security headers, and explicit security or incident response policies suggests room for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website presents a credible and professional front for AICP Corp., with moderate technical maturity and basic security posture. Strategic enhancements in security headers, privacy compliance, and incident response transparency would strengthen trust and resilience.

T

The Thaiger Pte Ltd

thethaiger.com

65

The Thaiger is a well-established English-language news and information portal focused on Thailand, providing daily news, video content, and lifestyle updates. Founded in 2016, it serves a broad audience interested in Thailand's national and regional news, business, travel, and culture. The site operates on a WordPress CMS with a commercial theme and integrates advertising and affiliate marketing as part of its business model. The company behind the site is The Thaiger Pte Ltd, based in Bangkok, Thailand, with a clear digital presence and active social media engagement. Technically, the website uses modern web technologies including jQuery, Owl Carousel, and Google Adsense, hosted with Cloudflare DNS and registered via GoDaddy. The site is mobile-optimized and SEO-friendly, offering a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and security headers, though DNSSEC is not enabled and no explicit security or privacy policies are published on the homepage. Privacy compliance is limited, lacking cookie consent mechanisms and privacy policy visibility. Overall, the site is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

E

ETI Bangladesh | Ethical Trading Initiative Bangladesh

etibd.org

43

ETI Bangladesh is a non-profit organization focused on promoting ethical trading and workers' rights in Bangladesh, operating as a subsidiary of the global Ethical Trading Initiative. The website presents a professional and well-structured platform offering information about their programs, research, case studies, and events related to social dialogue, environmental sustainability, and labor rights. The organization targets companies, trade unions, NGOs, and stakeholders in the garment industry. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

F

Faun Environnement

faunsav.fr

47

Faun Environnement operates a professional after-sales service website focused on spare parts cataloging and ordering for environmental and waste management vehicles. The website targets business customers and service technicians, providing tools for incident declaration, order management, and returns. The company is established since 2011 and operates primarily in France. The website is built on ASP.NET WebForms with a mix of modern JavaScript libraries and Bootstrap for styling, indicating a moderately mature technical infrastructure. While the site is functional and professionally presented, it uses some outdated libraries and lacks explicit security policies. Security posture is adequate with HTTPS and cookie consent but could be improved with modern security headers and updated libraries. Overall, the site is trustworthy and serves its niche well but would benefit from technical and security modernization.

E

Euronext Securities Oslo

vps.no

72

Euronext Securities Oslo operates as a central securities depository (CSD) within the Euronext group, providing critical post-trade services including custody, settlement, issuance, and data services to the Norwegian financial market. The website reflects a mature and professional financial institution with a strong market position in the Nordic region. It targets financial institutions, issuers, and investors, offering a comprehensive suite of services aligned with regulatory requirements and market needs. Technically, the site is built on Drupal 10 with modern front-end libraries and is optimized for mobile devices, ensuring a good user experience and accessibility. Security posture is strong with HTTPS enforcement, secure forms, and privacy compliance, although explicit security policies and incident response contacts are not prominently published. Overall, the domain's legitimacy is supported by the professional presentation and affiliation with the Euronext group, despite the absence of WHOIS registration details due to registry restrictions. Strategic recommendations include enhancing transparency around security policies and incident response, improving accessibility features, and publishing a security.txt file to facilitate vulnerability reporting.

B

Bourguignon Lease

bourguignonlease.nl

53

Bourguignon Lease is a well-established leasing company based in Friesland, Netherlands, with over 35 years of experience providing leasing solutions for passenger cars, commercial vehicles, electric bikes, and scooters. The company positions itself as a knowledgeable, personal, and brand-independent leasing provider, targeting both business and individual customers. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their market segment. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though dedicated security and incident response policies are not published. Overall, the site demonstrates a mature digital presence with moderate user tracking and basic GDPR compliance mechanisms.

Q

Qode Interactive

edge-themes.com

66

Qode Interactive is a well-established WordPress theme author founded in 2011, offering a large portfolio of over 150 premium WordPress themes under the Edge brand. The company targets web designers, developers, and agencies seeking high-quality, customizable WordPress themes. Their business model focuses on digital product sales, including themes and plugins, supported by affiliate marketing and digital downloads. The website demonstrates a good level of digital maturity, utilizing modern WordPress plugins such as Easy Digital Downloads, WPBakery Page Builder, and Slider Revolution, alongside integration with Google Tag Manager and Facebook SDK for analytics and marketing purposes. Hosting and DNS are managed via Cloudflare, providing reliable infrastructure and SSL encryption.

G

Grafotisak d.o.o.

grafotisak.com

51

Grafotisak d.o.o. is a Croatian/Bosnian graphic printing company established in 1983, specializing in the production and distribution of graphic products. The company maintains a professional online presence with a WordPress-based website optimized for SEO and multilingual support. The website demonstrates good design quality, mobile responsiveness, and clear navigation, targeting businesses and individuals seeking printing services. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership verification. The technical infrastructure relies on common WordPress plugins and libraries, ensuring moderate performance and ease of maintenance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and cookie policies, which are critical for compliance and trust. Overall, the business appears credible and established, but improvements in privacy compliance and domain registration transparency are recommended.

D

D’Ieteren Automotive SA/NV

dieteren.be

58

D’Ieteren Automotive SA/NV is a well-established Belgian company with over two centuries of history, specializing in automotive distribution, mobility services, and energy solutions. The company targets both individual consumers and businesses, offering a broad portfolio including new and used vehicles, business mobility services, bicycles, energy solutions, and financing options. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content in French. Technically, the site employs modern JavaScript libraries and Google services for analytics and security, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and reCAPTCHA integration, though some security headers and explicit incident response contacts are absent. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. WHOIS data is privacy protected, which is justified for this corporate entity. Overall, the site is trustworthy, professional, and aligned with the company's business model and market position.

R

RED COMPUTERS

red-computers.com

48

RED COMPUTERS is an established e-commerce retailer based in Bosnia and Herzegovina, specializing in a broad range of electronics and household appliances. The website offers a well-structured online shopping experience with multiple product categories, including computers, smartphones, white goods, and gaming equipment. The business appears to target regional consumers seeking digital lifestyle products and home appliances. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins to deliver a responsive and user-friendly interface. Security-wise, the site uses HTTPS and standard e-commerce security plugins but lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and trust. The domain is mature and registered with a reputable registrar, indicating legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

P

Plus

plus.ba

55

Plus.ba is a regional e-commerce platform based in Bosnia and Herzegovina specializing in technology and consumer electronics products. The website offers a broad catalog including laptops, mobile phones, computer components, peripherals, and household appliances, targeting general consumers and technology buyers in the region. The business model is focused on online retail with additional B2B services accessible via a partner domain. The site demonstrates consistent branding and a professional online presence with active social media channels and user engagement features such as product comparison and favorites. Technically, the website employs a modern technology stack including Bootstrap, Font Awesome, jQuery, and various JavaScript libraries for UI components and analytics. It uses HTTPS with good SSL configuration and integrates tracking tools such as Google Analytics and Facebook Pixel. Mobile optimization and navigation clarity are good, though accessibility features are basic. SEO optimization is present but could be improved with more comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks several important security headers like Content-Security-Policy and X-Frame-Options, and does not provide a vulnerability disclosure policy or dedicated security contact channels. Privacy and cookie policies are not found, indicating gaps in GDPR compliance and user privacy transparency. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, Plus.ba presents a moderately strong business and technical profile with room for improvement in privacy compliance and security best practices. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure and incident response contacts to enhance trust and compliance.

A

AWS oHG

aws-online.de

60

AWS oHG is a well-established German educational provider specializing in tax law seminars and professional development. With over 30 years of experience, the company offers seminar series, individual seminars, and web seminars targeted primarily at tax advisors and professionals seeking to stay current in tax law. The website reflects a professional and consistent brand presence with clear contact information and a focus on user-friendly seminar search and registration. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, and Select2 for UI enhancements. The site is mobile optimized and SEO friendly, with a cookie consent mechanism ensuring GDPR compliance. Analytics tools such as Google Analytics and Matomo are used with moderate tracking levels. From a security perspective, the site enforces HTTPS and manages cookie consent effectively but lacks explicit security policies or incident response information. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business, showing no privacy protection or suspicious registration patterns. Overall, AWS oHG presents a trustworthy and professional online presence with good security and privacy practices. Strategic improvements could include adding explicit security policies, vulnerability disclosure, and enhanced security headers to further strengthen the security posture.

M

Modix

modix.eu

65

Modix is a European-based provider of digital vehicle retail solutions targeting automotive dealers and manufacturers. The company offers a suite of services including advanced dealer websites, digital retailing tools, digital advertising, video and imagery solutions, and vehicle management platforms. Modix positions itself as a trusted partner with over 20 years of experience and is part of the global Cox Automotive group, enhancing its market credibility and reach. The website is professionally designed, mobile-optimized, and provides a clear presentation of its offerings and client testimonials, reinforcing its business credibility. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, and integrates Google Tag Manager for analytics. The site demonstrates good SEO practices and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a mature digital presence with strong business credibility and moderate technical sophistication. The lack of publicly available WHOIS registrant data is due to privacy protection by EURid, which is common and justified for this business type. Strategic recommendations include enhancing visible privacy and security policies, implementing security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

A

Autohaus Ing. Ernst Eder GmbH

autohaus-eder.at

66

Autohaus Ing. Ernst Eder GmbH is a reputable automotive dealership specializing in Volkswagen, Audi, and used vehicles, serving the Salzkammergut region in Austria. The company offers comprehensive services including new and used car sales, vehicle servicing, financing consultation, and accessories. Their market position is that of a regional specialist with strong brand partnerships and a solid customer base, as evidenced by excellent customer ratings and active social media presence. Technically, the website is built on the Plone CMS platform and employs modern web technologies such as Google Tag Manager for analytics, OneTrust for cookie consent management, and Google Maps API for location services. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS, implements key security headers, and manages cookie consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and preparedness. Overall, the website presents a low risk profile with strong business credibility and compliance posture. Strategic improvements in security policy disclosure and incident response readiness would further strengthen their security maturity and trustworthiness.