Security Directory

W

W.A.G. payment solutions, a.s.

cvs-mobile.com

52

W.A.G. payment solutions, a.s., operating under the Eurowag brand, is a leading European provider of integrated mobility and payment solutions focused on the transportation sector. The company offers a comprehensive suite of services including fleet management telematics, fuel cards, toll payment solutions, tax refund services, and eMobility options. Their recent integration of CVS Mobile enhances their fleet management capabilities with advanced real-time tracking and route planning, positioning them strongly in the European transport market. The website reflects a mature digital presence with multi-language support and country-specific offerings, targeting fleet operators and logistics managers across Europe. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager for analytics and tracking, and intl-tel-input for phone input handling. The site is well-optimized for mobile devices, accessible, and fast-loading, demonstrating a high level of digital maturity. The presence of comprehensive legal, privacy, and cookie policies indicates a strong commitment to compliance and user privacy. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation, regulatory disclosures, and trust signals support a strong security posture. Overall, the website presents a low-risk profile with robust business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing an incident response page, and adding a vulnerability disclosure policy to further strengthen security transparency and resilience.

S

SPL-XDEMAT

maelis.info

47

Maelis.info is the official website for the MAELIS application, a service provided by SPL-XDEMAT aimed at facilitating local community engagement through a smartphone app. The app offers practical information, alerts, incident reporting, and access to local public services and associations. The website is professionally designed with clear navigation and mobile optimization, targeting French local government citizens and community members. The business model focuses on providing a digital platform for local government communication and citizen participation. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery and AOS for animations. It supports mobile platforms with links to iOS and Android app stores. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common but reduces transparency. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with no signs of malicious content or suspicious behavior. Strategic recommendations include implementing security headers, adding cookie consent, improving privacy disclosures, and providing clear contact information for security incidents to enhance trust and compliance.

Manpower France operates as a leading recruitment and temporary staffing agency in France, providing a wide range of employment services including permanent and fixed-term contracts. The company is part of the global ManpowerGroup, which enhances its market position and credibility. The website is professionally designed, targeting job seekers and employers with clear navigation and comprehensive service offerings. The content is primarily in French, reflecting its local market focus. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. Security best practices are observed with HTTPS enforcement and appropriate security headers, although there is room for improvement in accessibility and incident response transparency. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Contact information is readily available, including a dedicated Data Protection Officer email, enhancing trust and compliance. Overall, the website presents a low risk profile with a solid business credibility and technical foundation. The main limitation is the absence of WHOIS data, which is likely due to registry policies but should be monitored. Strategic recommendations include establishing a public vulnerability disclosure policy and enhancing accessibility features.

ICTUS o.p.s. is a Czech non-profit organization established in 2007, dedicated to supporting individuals recovering from stroke through rehabilitation and therapeutic stays in the Krkonoše region. The website communicates the organization's mission clearly and provides information about upcoming therapeutic stay dates and services. The target audience primarily includes stroke survivors and their families seeking rehabilitation support. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons, with a simple slideshow and basic mobile optimization. However, it lacks advanced frameworks or CMS platforms and does not implement modern security headers or privacy policies. Security posture is moderate with HTTPS assumed but no explicit security headers or privacy compliance mechanisms in place. No forms or analytics scripts are present, reducing data exposure risks but also limiting user engagement tracking. Overall, the website is functional and professional but could benefit from enhanced security and compliance features.

N

Nadační fond Čas je mozek

nfcasjemozek.cz

42

Nadační fond Čas je mozek is a Czech non-profit organization dedicated to stroke awareness, education, and patient rehabilitation support. The foundation educates the public on stroke symptoms and the importance of timely emergency response, organizes fundraising events, and provides financial aid to stroke survivors. The website reflects a focused mission with clear content and active social media engagement. Technically, the site uses standard web technologies including jQuery, Font Awesome, and Google Analytics, with a cookie consent mechanism implemented. However, the absence of a privacy policy and security headers indicates room for improvement in privacy and security compliance. The WHOIS data is missing, which limits domain trust verification, but the website content and contact information support legitimacy. Overall, the site is well-structured and professional, serving a clear non-profit healthcare mission.

N

Nadační fond Čas je mozek

casjemozek.cz

44

The website www.casjemozek.cz represents a Czech non-profit initiative named 'Čas je mozek' focused on educating the public about stroke symptoms, prevention, and treatment. Founded in 2015, it is affiliated with reputable Czech medical societies, providing authoritative content and organizing charitable events. The site offers extensive educational resources, patient stories, and news updates, targeting the general public and healthcare professionals in the Czech Republic. Technically, the site uses modern web technologies including JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and professional design. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, slightly reduce its trustworthiness. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response contacts. Overall, the site is a credible and valuable resource for stroke awareness but would benefit from enhanced transparency and security best practices.

C

Commissariat aux Assurances

caa.lu

61

The Commissariat aux Assurances website serves as the official regulatory authority for the insurance sector in Luxembourg. It provides comprehensive information and resources for insurance operators, consumers, and stakeholders, including regulatory documents, circulars, and consumer alerts. The site is professionally designed with clear navigation and bilingual support (French and English), targeting industry participants and the general public interested in insurance regulation. Technically, the website employs a modern but straightforward technology stack including jQuery and tarteaucitron.js for cookie consent management. The site is accessible, mobile-optimized, and includes SEO best practices. However, no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the official .lu domain and professional content support legitimacy. Google Analytics is used with user consent, indicating privacy awareness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility to further strengthen trust and compliance.

The website at thrive-production.fr is a default landing page hosted and managed by IONOS SE, a well-known European web hosting and domain registration provider. The site currently serves as a placeholder indicating the domain is registered and accessible, but no custom business content or branding is present. The page promotes IONOS services such as domain registration, web hosting, virtual servers, and website building tools, targeting individuals and businesses seeking to establish an online presence. The domain is newly registered in 2023 and is consistent with IONOS's domain management practices. Technically, the site uses standard HTML5, CSS3, and JavaScript without any detected CMS or advanced frameworks. The hosting provider is IONOS SE, and the site shows moderate performance and good mobile optimization. However, SEO optimization is poor due to missing meta tags and structured data. No analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by IONOS hosting), but no security headers are detected in the HTML content. The form present uses POST method but no advanced security or privacy policies are visible. No vulnerabilities or exposed sensitive data were found, but the absence of privacy and cookie policies and security headers lowers the security posture score. Overall, the site is safe with no adult or questionable content. The lack of custom content and policies suggests it is a placeholder rather than an active business site. Strategic recommendations include adding privacy and cookie policies, implementing security headers, improving SEO metadata, and providing clear contact information to enhance trust and compliance.

JSB stavební is a small family-owned construction company operating primarily in Prague and the Central Bohemian region since 2016. The company specializes in comprehensive renovations of apartments, family houses, and offices, as well as the construction of smaller commercial projects and family homes. Their website presents a professional image with clear service descriptions and galleries showcasing completed projects, targeting local residential and commercial clients. Technically, the website is built using standard web technologies including Bootstrap, jQuery, and Font Awesome, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS usage or hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site lacks HTTPS verification in the provided data, security headers, and privacy or cookie policies, indicating potential compliance and security gaps. The absence of WHOIS data limits domain legitimacy verification, although the website content and contact details appear consistent with a legitimate small business. Overall, the site is functional and informative but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

LTDesign.sk is a small Slovakian web design and e-commerce development service provider operated by Ing. Ján Chudý. The company offers affordable website and e-shop creation services targeting small businesses and individuals in the local market. The website is minimalistic, providing basic contact information and branding but lacks comprehensive content and policies. Technically, the site uses standard HTML5 and CSS3 with Google Fonts but does not demonstrate advanced frameworks or CMS usage. The absence of HTTPS and security headers indicates a weak security posture, and no privacy or cookie policies are present, which may impact compliance with GDPR regulations. Overall, the site is functional but basic, with room for significant improvements in security, privacy, and content richness.

F

Fachverband Elektro- und Informationstechnik Sachsen/Thüringen

elektro-sachsen-thueringen.de

38

The Fachverband Elektro- und Informationstechnik Sachsen/Thüringen is a regional trade association representing electrical and information technology craftsmen and companies in the German states of Saxony and Thuringia. The website serves as a professional platform offering information about the association, upcoming events, employee training, and member services. It targets electrical trade professionals and companies seeking industry support and networking. The business model focuses on member representation, training, and industry promotion within the regional market. Technically, the website is built on TYPO3 CMS, hosted on Strato servers, and integrates modern marketing and analytics tools such as Usercentrics CMP, Google Tag Manager, and TikTok Pixel. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with consent management, reflecting good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the association's credibility and member engagement.

L

Landesinnungsverband für Elektro- und Informationstechnik Niedersachsen / Bremen

eh-nb.de

40

The Landesinnungsverband für Elektro- und Informationstechnik Niedersachsen / Bremen is a regional trade association serving professionals in the electrical and information technology sectors within the German states of Niedersachsen and Bremen. The organization provides member services including certification as E-Marken Betrieb, educational seminars, industry news, and representation. Their website reflects a professional and consistent brand image, targeting trade members and stakeholders with relevant content and resources. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as SVG, CSS3, and JavaScript. It integrates Usercentrics for cookie consent management and TikTok analytics for user tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. Overall, the website presents a low-risk profile with a solid business credibility and privacy posture. Strategic improvements could focus on enhancing security headers, publishing security policies, and expanding incident response information to further strengthen trust and compliance.

J

Jan Becher – Karlovarská Becherovka, a.s.

becherovka.cz

50

Jan Becher – Karlovarská Becherovka, a.s. operates a professional and well-branded website promoting its iconic Czech herbal bitter liqueur, Becherovka. The company has a strong market position as a traditional and internationally recognized brand with a history dating back to 1807. The website offers product information, cocktail recipes, company history, and visitor experiences, targeting adult consumers with appropriate age verification. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with multilingual support and mobile optimization. Security measures include HTTPS, cookie consent management, and an age gate, although no explicit incident response or vulnerability disclosure policies are published. WHOIS data is missing, which slightly impacts trust but the overall digital presence and compliance indicate a legitimate and professional operation.

I

INFO WEB s.r.o.

ladnafotografie.cz

49

LADNÁ FOTOGRAFIE is a small local photography studio based in Ladná near Břeclav, Czech Republic, specializing in portrait, still life, product, and other photographic services. The website serves as a professional portfolio showcasing various photographic works and targets local customers seeking photography services. The business is operated by INFO WEB s.r.o., founded in 2019, and maintains an active social media presence on Facebook and Instagram. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various plugins to deliver a visually appealing and responsive user experience. However, the site lacks critical compliance documents such as privacy and cookie policies, and no explicit contact information is provided on the pages analyzed. Security posture is moderate with HTTPS assumed but no security headers detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

M

Metadata ehf.

metadata.is

56

Metadata ehf. is a small Icelandic technology-focused local business specializing in metadata evaluation services, as indicated by their website and structured data. The company operates primarily within the Icelandic market and targets local businesses or individuals interested in metadata services. The website is professionally designed using the Wix platform, featuring modern web technologies and good mobile optimization. However, the content is relatively basic and lacks comprehensive privacy or cookie policies, which impacts compliance and trustworthiness. Security posture is moderate with HTTPS enforced and some security hardening scripts, but lacks explicit security headers and visible incident response information. The absence of WHOIS data for the domain www.metadata.is is notable and reduces confidence in domain legitimacy, though the website itself appears legitimate and professionally maintained. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security transparency.

H

H2G Internetagentur AG

h2g.ch

46

H2G Internetagentur AG is a Swiss-based web agency located in Aarau, specializing in consulting, design, development, and hosting of websites and web applications. The company targets businesses and institutions seeking innovative and user-centric digital solutions. Their market position is that of a reputable regional agency with a diverse client base, including international companies and local institutions. The website reflects a professional and modern digital presence with clear service offerings and client references. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Hosting appears to be managed internally or via trusted providers, with HTTPS enforced and minimal tracking. From a security perspective, the site uses HTTPS and respects user privacy by disabling cookies in analytics and honoring Do Not Track signals. However, it lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. The risk profile is low, with recommendations to enhance security headers and add explicit cookie consent mechanisms to further improve privacy compliance and security posture.

C

Catalystic

catalystic.cz

43

Catalystic.cz is a small, Czech Republic-based independent platform focused on interdisciplinary research, non-formal education, and public outreach related to exponential changes in technology and society. The website presents a clear business model centered on fostering creativity, criticality, and exponentiality through research initiatives, educational programs, and partnerships. The site uses modern web technologies including Three.js for interactive graphics and is hosted on Forpsi servers with Webflow CMS. While the website is well-designed with good navigation and mobile optimization, it lacks critical compliance documents such as privacy and cookie policies, and does not provide incident response or vulnerability disclosure information. Security posture is moderate with HTTPS assumed but no visible security headers or advanced protections. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

P

Pikant

pikant.hr

46

Pikant is a Croatian design and marketing studio providing a broad range of creative and IT services including web design, graphic design, product design, branding, IT support, and marketing consulting. The company positions itself as a regional leader with a focus on quality and client satisfaction, serving businesses primarily in Croatia and the EU. The website is professionally designed, mobile-optimized, and provides clear contact information and client references. Technically, the site uses modern web technologies such as Google Fonts, Revolution Slider, and Cognito Forms for contact management, with Google Analytics for traffic analysis. Security posture is good with HTTPS enabled and secure form handling, though some security headers and cookie consent mechanisms are missing. The WHOIS data is privacy protected due to GDPR, which is justified for this business type. Overall, the website reflects a legitimate, small-sized business with a solid digital presence.

B

Brainz Immersive s. r. o.

immersive.cz

42

Brainz Immersive s. r. o. is a Prague-based immersive creative studio specializing in virtual and augmented reality experiences. Founded in 2019 and part of the BRAINZ STUDIOS group, the company offers a comprehensive suite of services including AR/VR creative development, 360° video production, multi-platform app development, and immersive installations. Their client portfolio includes notable brands such as ŠKODA AUTO, Vogue, and Czech Radio, positioning them as a niche leader in immersive technology solutions for brands and entertainment. The website reflects a professional and modern digital presence with rich multimedia content and clear navigation. Technically, the site uses modern web technologies and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Analytics and marketing tracking are implemented via Google Analytics and Facebook Pixel, but without explicit cookie consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, Brainz Immersive demonstrates a strong market position in immersive technology with a professional online presence but should enhance privacy compliance and security best practices to further strengthen trust and regulatory adherence.

The website mep.lt is currently a parked domain page indicating that the domain is for sale. It does not represent an active business or service provider. The content is minimal, primarily advertising the domain sale with no substantive business information, contact details, or privacy policies. The technical infrastructure relies on basic HTML, CSS, and JavaScript with embedded third-party iframes and ad scripts, which introduces potential security risks. There is no evidence of HTTPS enforcement or security headers, and no compliance with privacy regulations is demonstrated. Overall, the site lacks professionalism and trustworthiness, reflecting its status as a domain parking page rather than an operational business website.

Ž

Žinau, ką renku

zinaukarenku.lt

52

Žinau, ką renku is a Lithuanian non-profit political monitoring platform focused on engaging young citizens across Lithuania in election processes and political awareness. The website provides election information, candidate monitoring, volunteer opportunities, and a blog to inform and empower voters. The platform positions itself as a neutral and civic-minded entity, leveraging modern web technologies to deliver content effectively. Technically, the site uses Laravel Livewire, Alpine.js, and Cloudflare DNS services, ensuring a modern and responsive user experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF protections in place, although some security headers could be improved. Privacy compliance is evident through a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the site is trustworthy, professional, and well-maintained, with no detected blocking or WAF interference.

The website 'Crveni popis Hrvatske' is an official Croatian government portal managed by the Ministry of Environment and Green Transition, specifically the Institute for Environmental Protection and Nature. It serves as a comprehensive resource for data on endangered wild species in Croatia, providing risk assessments, conservation information, and public education. The portal targets a broad audience including researchers, policymakers, and the general public interested in biodiversity and environmental protection. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, Chart.js for data visualization, and Leaflet.js for mapping. The presence of a CSRF token and HTTPS indicates a secure infrastructure, although some security headers are missing. Accessibility is addressed but with room for improvement, particularly in image alt attributes and text scaling. The site is moderately performant and mobile-optimized. From a security perspective, the portal demonstrates good practices including GDPR compliance, cookie consent mechanisms, and secure form handling. However, it lacks explicit incident response contact details and a published vulnerability disclosure policy. No critical vulnerabilities or suspicious activities were detected. WHOIS data confirms the domain's legitimacy and alignment with the governmental nature of the site. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic improvements in security headers, accessibility, and incident response transparency would further enhance its posture.

P

Pučko otvoreno učilište Katarina Zrinska – Ozalj

poukz.hr

54

Pučko otvoreno učilište Katarina Zrinska – Ozalj is a small educational institution based in Croatia, founded in 2022. The organization offers a variety of educational and creative programs targeting children, youth, retirees, and adults, focusing on lifelong learning and community engagement. The website reflects a local community-oriented business model with clear contact information and social media presence, positioning itself as a trusted local educational provider. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries to provide a responsive and visually appealing user experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO optimization. Hosting and domain registration are consistent with the business location, enhancing trustworthiness. From a security perspective, the website implements a cookie consent mechanism compliant with GDPR, but lacks visible advanced security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The absence of terms of service and security policies suggests an opportunity to strengthen compliance and user trust. Overall, the website is functional, professional, and safe for general audiences. The risk level is low, but strategic improvements in security posture and privacy transparency would enhance the institution's digital maturity and trustworthiness.

G

Gradska knjižnica i čitaonica Ivana Belostenca

gkc-ivanabelostenca.hr

47

Gradska knjižnica i čitaonica Ivana Belostenca is a small, non-profit public library and cultural institution located in Ozalj, Croatia. It offers library services, cultural events, and access to significant historical works such as the Gazophylacium bilingual dictionary. The website serves as an informational portal for the local community and cultural enthusiasts. Technically, the site is built on Joomla CMS using common web technologies including jQuery, Bootstrap, and Google Maps API. The hosting is provided by ZoNet, a reputable Croatian hosting provider. The site is accessible, with clear navigation and consistent branding, but shows room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance documentation. No forms or tracking scripts are present, minimizing privacy risks but also limiting interactivity. Overall, the website is trustworthy and professionally presented but would benefit from enhanced security and privacy measures.

Plus Hosting is a Croatian-based hosting service provider offering a range of services including domain registration, web hosting, reseller hosting, dedicated servers, VPS servers, SSL certificates, affiliate programs, and business mail solutions. The website analyzed is a placeholder page indicating that no active website is configured at the domain lun.hr. The business targets individuals and companies seeking hosting and domain services primarily in Croatia. The market position appears regional with a focus on technology infrastructure services. Technically, the website uses modern HTML5 and CSS3 standards with SVG graphics and a web font from a CDN. However, the site is minimalistic with no dynamic content, forms, or tracking scripts. The hosting provider is Plus Hosting itself, and the site performance and mobile optimization are basic but functional. There is no evidence of a CMS or advanced frameworks. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which lowers its security posture. No privacy or cookie policies are present, and no incident response or security contact information is provided. The WHOIS data is unavailable due to GDPR restrictions and query limits, but this is consistent with privacy regulations and does not raise immediate suspicion. Overall, the security score is low due to missing best practices and policies. The overall risk is moderate given the site is a placeholder with no active content or user interaction. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving contact and compliance information to enhance trust and security posture.

H

Hrvatski savez za sportski ribolov na moru

hssrm.hr

42

Hrvatski savez za sportski ribolov na moru (HSSRM) is a well-established Croatian non-profit sports federation dedicated to marine sport fishing. Founded in 1953, it serves approximately 25,000 members and provides key services such as fishing permit distribution, organizing competitions, and educational programs. The website reflects a consistent brand and offers relevant content for its target audience of fishing enthusiasts in Croatia. Technically, the site uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Leaflet.js, with integration of Facebook social plugins for community engagement. The site is moderately optimized for mobile and performance, with clear navigation and good content quality. Security posture is adequate but could be improved by adding security headers and formal policies. Privacy compliance is lacking as no privacy or cookie policies are present. WHOIS data confirms domain legitimacy and consistency with the organization's profile. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.

T

Turistička zajednica Ličko-senjske županije

visit-lika.com

58

The website visit-lika.com serves as the official regional tourism portal for Ličko-senjska County in Croatia, providing comprehensive information on travel planning, cultural heritage, activities, and gastronomy. It targets tourists and visitors interested in exploring the region, positioning itself as a key regional tourism authority. The site offers event announcements, travel resources, and promotes local attractions and services. Technically, the website uses a custom CMS with Bootstrap and jQuery, integrates Google Analytics for tracking, and AddToAny for social sharing. The design is professional, mobile-optimized, and offers clear navigation, though accessibility features are basic. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-established with a domain age consistent with its business history.

Športsko ribolovno društvo LUC Novalja is a well-established Croatian sports fishing society founded in 1973. The organization focuses on promoting fishing sports through competitions and community events, serving a local and regional audience of fishing enthusiasts. Their website reflects a community-oriented non-profit model with clear contact information and active event updates. Technically, the site uses a modern tech stack including AMP for mobile optimization, Bootstrap for responsive design, and JavaScript libraries for enhanced user experience. However, the CMS is custom or unknown, and hosting details are not explicit. Security posture is moderate; HTTPS is used, and cookie consent is implemented, but security headers and vulnerability disclosures are lacking. Privacy compliance is basic with a cookie banner and a linked cookie policy page but no explicit privacy policy or terms of service pages. Overall, the website is professional and trustworthy but could improve in security and compliance areas.

G

Gradska uprava Novalja

novalja.hr

45

The website www.novalja.hr serves as the official digital portal for the city of Novalja, Croatia, providing residents, tourists, and businesses with comprehensive information about municipal services, news, public procurement, and community events. It holds a strong position as the primary communication channel for the local government, offering transparency and accessibility to public data and administrative resources. The site targets a broad audience including local citizens, government officials, and visitors interested in the city. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO practices. Security-wise, the site uses HTTPS and trusted external libraries but lacks several important security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

The website vhm.nl is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to any substantive content. The domain is long-established, registered since 1999 with a reputable registrar, indicating legitimacy of the domain ownership. However, no business information, contact details, or compliance policies are visible on the landing page, limiting the ability to assess the company's operations or market position. The technical infrastructure relies on Cloudflare for security and performance, but the lack of accessible content prevents a full evaluation of the website's digital maturity or user experience. Security posture is difficult to evaluate fully due to the blocking mechanism, but the presence of Cloudflare indicates some level of protection. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the lack of accessible information.

B

Bureau Veritas

bureauveritas.com

77

Bureau Veritas is a globally recognized leader in testing, inspection, and certification services, offering a broad portfolio of solutions across multiple industries including energy, transportation, manufacturing, and government sectors. The website reflects a mature digital presence built on Drupal 10, with modern consent management and analytics integration, demonstrating a commitment to privacy and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

The website bradatiguru.hr is a small-scale personal or freelance business site focused on web development and blockchain advocacy. It uses a unique retro terminal interface to engage visitors and promote the owner's portfolio and blockchain-related projects. The site targets web developers and blockchain enthusiasts, offering educational content and links to related blockchain resources. Technically, the site is built with basic HTML, CSS, and JavaScript without any CMS or advanced frameworks, resulting in fast loading times but limited SEO and accessibility features. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is safe and trustworthy but would benefit from improved security and privacy practices to enhance credibility and user trust.

K

Konplast d.o.o.

kipos.hr

40

Kipos.hr is a Croatian business website serving as a login portal for KIPOS, a bookkeeping and business information system developed by Konplast d.o.o. The platform targets business users requiring accounting and bookkeeping software solutions. The website is primarily a secure login interface with client-side encryption for credentials, indicating a focus on protecting user data during authentication. The business appears to be a small-sized technology provider with a niche market in Croatia, founded in 2014, and maintains consistent branding with its parent company Konplast d.o.o. The website lacks public-facing content such as privacy or cookie policies and does not provide contact information on the login page, which limits transparency for external users.

C

CESI

cesi.hr

50

CESI is a Croatian non-profit organization dedicated to advancing the social position of women and achieving gender equality through education, consulting, research, and advocacy. The organization has a strong market presence with over 200 successful projects and numerous collaborations, targeting a broad audience interested in social justice and women's rights. Their website reflects a professional and consistent brand image with clear navigation and relevant content in Croatian and English. Technically, the site uses modern web standards, including HTTPS and JavaScript modules, and integrates Google Analytics for visitor insights. Accessibility and mobile optimization are well addressed, contributing to a positive user experience. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks some advanced security headers and formal security policies, indicating room for improvement. Privacy compliance is basic with cookie consent implemented, but explicit privacy and security policies could be enhanced. Overall, CESI's digital presence is credible and trustworthy, supporting their mission effectively.

U

Ugandi Resto

ugandiresto.ee

44

Ugandi Resto is a well-established restaurant located in Otepää, Estonia, offering a unique blend of Nordic and Mediterranean cuisine. The business has a strong local presence with over 23 years of history and multiple prestigious awards, positioning it as a reputable hospitality provider in the region. The website reflects a professional and customer-friendly approach with clear service offerings including dining, private event hosting, and gift cards. Technically, the website uses modern web technologies and a proprietary CMS, delivering a good user experience with mobile optimization and rich content. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies and limited security headers. The security posture is adequate but could be enhanced to meet higher standards. Overall, the site is trustworthy and well-maintained but should address compliance and security improvements to reduce risk and enhance user trust.

PUNKS.MY is a Malaysia-based NFT project that offers a unique collection of 1000 iconic Malaysian figures as digital collectibles on the Ethereum blockchain. The project emphasizes on-chain SVG storage for permanence and has historical significance with public billboard exposure during the NFT craze. The website integrates with Metamask for wallet connection and links to reputable platforms such as OpenSea and Etherscan for marketplace and contract transparency. The business targets NFT collectors and crypto enthusiasts within Malaysia and operates as a small niche player in the NFT space. Technically, the website uses a modern JavaScript stack including ethers.js, jQuery, Bootstrap, and various UI plugins. Hosting is supported by Cloudflare DNS and nameservers, ensuring good SSL configuration and moderate performance. However, mobile optimization and accessibility are basic, and SEO practices are minimal. The site lacks a CMS and appears custom-built. From a security perspective, HTTPS is enforced, and the site uses nonce-based Metamask signature challenges for authentication. However, no explicit security headers (CSP, HSTS, etc.) are detected, and there are no published privacy or cookie policies, which are compliance gaps. Google Analytics is used without visible cookie consent mechanisms, indicating moderate user tracking but poor privacy compliance. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professional with moderate trustworthiness but has room for improvement in privacy compliance, security hardening, and user transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and providing clear contact and incident response channels.

E

Emma Marie Andersson

opassande.se

48

Emma Marie Andersson's website serves as a personal portfolio and blog focused on her artwork, particularly drawings and alcohol ink techniques, as well as her professional work as a graphic designer. The site targets art enthusiasts and potential clients interested in original artwork or graphic design services. The business model is primarily a personal showcase with potential for direct sales through contact. The website is built on WordPress using the Twenty Seventeen theme, with integration of social media platforms such as Instagram, YouTube, and Bluesky to extend reach and engagement. Hosting and domain registration are managed by Loopia AB, a Swedish provider, consistent with the website's Swedish language and content.

J

Johnson & Johnson Health Care System Inc.

jjcustomerconnect.com

61

Johnson & Johnson Customer Connect is a specialized order management platform designed for Johnson & Johnson's direct customers and distributors. The website serves as a portal to search for markets that have opted into this service, facilitating streamlined order processing within the healthcare sector. The platform is clearly targeted at B2B users within the Johnson & Johnson ecosystem, reflecting an enterprise-grade business model supported by a well-established parent company. Technically, the website employs a traditional web stack including Bootstrap for responsive design, jQuery for interactivity, and several UI enhancement libraries such as DataTables and Swiper. The site demonstrates basic mobile optimization and a moderate performance profile. However, there is no evidence of advanced CMS or analytics integration, suggesting a focused, internal-use application rather than a public-facing marketing site. From a security perspective, the domain is registered with appropriate safeguards such as clientTransferProhibited status and uses DNS servers consistent with Johnson & Johnson's infrastructure. However, the absence of visible HTTPS confirmation, security headers, and privacy or cookie policies indicates room for improvement in security posture and compliance. No contact or incident response information is publicly available, which may limit transparency and user trust. Overall, the website is functional and consistent with its business purpose but lacks several modern security and privacy best practices. Strategic improvements in HTTPS deployment, security headers, and policy disclosures would enhance trust and compliance, supporting the platform's role within a global healthcare enterprise.

O

Ondřej Bečva

ondrejbecva.cz

49

Ondřej Bečva operates as a small-scale full-stack developer specializing in custom WordPress website development primarily for clients in the Czech Republic. The business emphasizes a professional and pragmatic approach to web development, integrating custom programming, API connections, and optimization services. The website showcases a portfolio of projects and partnerships with local brands, positioning itself as a trusted local technology service provider. Technically, the site uses modern web standards, Google Fonts, and integrates a third-party scheduling tool, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks published security policies and headers, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security transparency.

W

Whow Games GmbH

myjackpot.hu

70

MyJackpot.hu is a Hungarian-language social casino platform operated by Whow Games GmbH, a German company. The site offers free-to-play online slot games and casino entertainment without real money gambling, targeting adult users aged 18 and above. It supports multiple platforms including web, Android, iOS, and Windows, and provides social login options for user convenience. The business operates within the niche social casino market, leveraging a consistent brand presence across multiple country-specific domains. The website is professionally designed with good content quality, clear navigation, and mobile optimization.

W

Whow Games GmbH

mojjackpot.pl

64

Mojjackpot.pl is a Polish-language social casino platform operated by Whow Games GmbH, a German company. The website offers free online slot games and casino entertainment targeted at adults aged 18 and over. It provides a no-deposit, free-to-play model with no real money payouts, positioning itself in the niche social casino market. The platform supports multiple languages and offers mobile app access, social logins, and a variety of slot games. Technically, the site uses modern web technologies, CDN hosting, and integrates cookie consent and privacy compliance tools. Security posture is good with HTTPS, security headers, and secure login forms, though explicit security policies and incident response contacts are not published. Overall, the site is professional and trustworthy but lacks public WHOIS transparency due to privacy protection.

W

Whow Games GmbH

myjackpot.fr

67

MyJackpot.fr is a French-language free social casino platform operated by Whow Games GmbH, a German company based in Hamburg. The site offers a variety of slot machine games without real money betting, targeting adult users aged 18 and over. It provides a social gaming experience with no deposits or real payouts, positioning itself in the social casino gaming niche. The platform supports multiple languages and offers mobile app access, enhancing user reach and engagement. Technically, the website uses modern web technologies including JavaScript, CSS3, and integrates social login options via Facebook, Google, and Paypal. Cookie consent is managed through OneTrust, indicating GDPR compliance. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and public security policies. WHOIS data is unavailable from the AFNIC server, limiting domain registration trust verification. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced transparency on security and incident response.

W

Whow Games GmbH

myjackpot.es

69

MyJackpot.es is a free-to-play social casino platform operated by Whow Games GmbH, a German company specializing in online gaming. The website offers a variety of slot games accessible without payment, targeting adult Spanish-speaking users. The platform supports multiple languages and provides social login options for user convenience. Technically, the site employs modern web technologies, integrates cookie consent mechanisms, and uses external services such as Facebook SDK and OneTrust for privacy compliance. Security posture is generally good with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. WHOIS data is unavailable due to registry restrictions, limiting domain trust verification. Overall, the site presents a professional and compliant gaming experience with moderate risk due to limited public business contact details and missing explicit security policies.

W

Whow Games GmbH

myjackpot.co.uk

67

MyJackpot.co.uk is a social casino platform operated by Whow Games GmbH, a German company specializing in free online slot games and social casino entertainment. The platform targets adult users aged 18 and over, offering a variety of free-to-play slot games with no real money payouts, positioning itself in the niche social casino market primarily for UK and English-speaking audiences. The business model focuses on engagement through free chips and social gaming rather than real gambling. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Facebook SDK and OneTrust for cookie consent, ensuring GDPR compliance. The platform supports multiple languages and mobile platforms, including Android and iOS, with a dedicated app available. Security-wise, the site enforces HTTPS and secure login forms, but lacks explicit security policies and incident response information. The WHOIS data for the exact domain is unavailable due to domain naming rules, indicating the domain is likely a subdomain under jackpot.de infrastructure. Overall, the site is professionally maintained with good privacy compliance but could improve transparency on security and contact information.

W

Whow Games GmbH

myjackpot.dk

67

Myjackpot.dk is a Danish-language social casino platform operated by Whow Games GmbH, offering free-to-play online slot games with no real money payouts. The site targets adult users aged 18 and above, providing a variety of slot machine games accessible via web and mobile platforms. The business model focuses on engagement through free chips and social gaming rather than real gambling. Technically, the website employs modern web technologies including JavaScript, CSS3, and integrates social login options via Facebook, Google, and PayPal. It uses a CDN for asset delivery and includes a cookie consent mechanism compliant with GDPR. Security posture is moderate with HTTPS enforced and secure forms, but lacks explicit security headers visible in the HTML. The absence of WHOIS data limits domain trust verification, and no direct company contact information is publicly available, which impacts business credibility. Overall, the site is professionally designed, mobile optimized, and provides a safe environment for adult users interested in social casino gaming.

B

Beck Solutions AB

kreditkoll.nu

53

Kreditkoll.nu is a Swedish financial comparison website operated by Beck Solutions AB, providing comprehensive loan and savings product comparisons from 163 lenders. The site targets private individuals and businesses in Sweden, offering updated interest rates, credit score insights, and financial advice to facilitate informed borrowing and saving decisions. The platform operates as an affiliate model, generating revenue through referrals to lenders and financial institutions. Technically, the site employs modern web technologies including HTTPS with Let's Encrypt SSL, jQuery, Google Tag Manager, and lazy loading for performance optimization. The design is professional, mobile-optimized, and accessible, with strong SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though additional security headers could enhance protection. No WHOIS data was found for the www subdomain, but business legitimacy is supported by consistent branding, regulatory references, and transparent policies. Overall, Kreditkoll.nu presents a trustworthy, user-friendly, and well-maintained financial comparison service for the Swedish market.

The website diariocritico.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, which blocks direct access to the site's content. As a result, no business, contact, or compliance information is publicly visible on the landing page. The domain is long-established, registered since 2003, and uses Cloudflare for DNS and security, indicating a legitimate and stable web presence. However, the lack of accessible content prevents a full assessment of the business model, services, or compliance posture. The technical infrastructure is minimal on the challenge page, focused on security verification rather than content delivery. Security posture benefits from Cloudflare's protection, but the absence of visible security headers or policies limits detailed evaluation. Overall, the site is currently in a blocked state, limiting analysis and reducing trust and content quality scores.

I

ibericode BV

ibericode.com

52

ibericode BV is a small European company specializing in developing open-source software products for the web, primarily focusing on WordPress plugins such as Mailchimp for WordPress and Koko Analytics. The company has a significant market presence with over 73 million downloads and active use on more than 2.1 million websites, positioning it as a reputable niche player in the WordPress ecosystem. Their business model revolves around open-source software with premium plugin offerings, targeting web developers and WordPress site owners. Technically, the website employs modern web technologies including Bootstrap and JavaScript, with a clean and professional design optimized for mobile devices. The site uses self-hosted analytics to respect user privacy and demonstrates good SEO practices. However, some technical aspects such as security headers and cookie consent mechanisms are missing, indicating room for improvement in security and compliance. From a security perspective, the website shows no immediate vulnerabilities or exposed sensitive data, but lacks visible security headers and formal security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear trustworthy. Overall, the security posture is moderate but could be enhanced by implementing recommended best practices. The overall risk assessment suggests a generally trustworthy and professional website with minor security and compliance gaps. Strategic recommendations include improving security headers, adding cookie consent for GDPR compliance, publishing security policies, and clarifying domain registration details to enhance trust and security culture.

S

Sparkasse Bank Macedonia

sparkasse.mk

69

Sparkasse Bank Macedonia is a well-established financial institution serving private clients in North Macedonia. The bank offers a comprehensive portfolio of retail banking products including accounts, cards, loans, savings, investments, insurance, and digital banking services. The website reflects a mature digital presence with consistent branding aligned with its parent company, Erste Group. The technical infrastructure leverages modern web technologies and a proprietary CMS framework, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service pages are not detected in the provided content. The absence of public WHOIS data suggests privacy protection, which is typical for financial institutions. Overall, the website is professional, trustworthy, and safe for general audiences.

D

Develey Senf & Feinkost GmbH

develey.com

50

Develey Senf & Feinkost GmbH is a long-established family-owned company based in Germany, specializing in the manufacturing and distribution of mustard, sauces, dressings, and fine foods. With a history dating back to 1845, the company operates internationally with a strong brand portfolio including Develey, Löwensenf, Bautz’ner, and others. The website reflects a mature digital presence with comprehensive content about careers, sustainability, and product offerings. Technically, the site uses modern web technologies such as Google Tag Manager and YouTube APIs, and is built likely on the Pimcore CMS platform. Security posture is good with HTTPS enforced and a robust cookie consent mechanism, though explicit security headers are not detected in the HTML source. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional site content and branding. Overall, Develey presents a credible and professional online presence consistent with its market position.