Security Directory

K

Kantonale Verwaltung Appenzell Ausserrhoden

ar.ch

41

The website ar.ch is the official online portal for the canton of Appenzell Ausserrhoden in Switzerland, providing comprehensive information and services related to the cantonal government. It serves citizens, businesses, and other stakeholders with access to government departments, news, legal resources, and public services. The site is well-structured, professionally designed, and consistent with government branding, reflecting a medium-sized government entity's digital presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Matomo for analytics and Google reCAPTCHA for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security is robust with HTTPS enforced and appropriate security headers, but lacks some advanced security disclosures and cookie consent mechanisms. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, it could improve privacy compliance by implementing explicit cookie consent and publishing detailed security policies and incident response contacts. The WHOIS data aligns well with the official government identity, supporting the site's legitimacy. Overall, the site is a trustworthy, professional government portal with solid technical and security foundations but would benefit from enhanced privacy and security transparency to fully comply with modern regulations and best practices.

J

Jugendcafé Camäleon

camaleon.li

50

Jugendcafé Camäleon is a small non-profit youth center based in Vaduz, Liechtenstein, providing a community space for youth engagement, projects, and events. The website serves as an informational and promotional platform targeting local youth and community members, offering details about their services, events, and gallery. The organization appears well-established since 2018 with a clear local focus and active social media presence. Technically, the website is built on WordPress with standard plugins such as Yoast SEO and Contact Form 7, ensuring basic SEO and contact functionalities. The site is mobile-optimized and uses modern libraries like Swiper.js and FontAwesome for UI enhancements. Security posture is adequate with HTTPS enforced and Google reCAPTCHA protecting forms, though it lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present but lack an explicit consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

L

Liechtensteinische Kraftwerke

energieportal.li

60

The website energieportal.li is a digital portal operated by Liechtensteinische Kraftwerke, a regional energy provider in Liechtenstein. It primarily serves as a login gateway for users to access energy consumption and production data. The site currently displays a maintenance message indicating limited data availability due to technical issues. The business targets energy consumers and stakeholders within Liechtenstein, providing essential energy data services. The portal uses modern web technologies including Angular framework, Google Maps API, and Google reCAPTCHA for bot protection, hosted on Microsoft Azure Blob Storage for static assets. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is good with HTTPS enforced and basic security headers, though additional headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and terms of service pages, and no contact or incident response information is provided. Overall, the site is legitimate and trustworthy, but could improve transparency and compliance documentation.

T

ThemeFreesia

themefreesia.com

58

ThemeFreesia is a small technology company specializing in the development and distribution of free and premium responsive WordPress themes and plugins. Their market position is focused on providing accessible, stylish, and functional WordPress solutions primarily targeting business owners, designers, and bloggers. The company offers a business model combining free themes with paid 'Plus' plugins to enhance functionality and support. The website demonstrates a good level of digital maturity with a WordPress CMS infrastructure, integration of modern technologies such as Google Analytics, reCAPTCHA, WooCommerce, and SEO optimization via Yoast. Hosting is provided by Bluehost with Cloudflare DNS services, ensuring reliable uptime and performance. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy and cookie consent banner present, though GDPR compliance is not explicitly indicated. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in security policies and technical hardening.

A

Autodesk, Inc

tinkercad.com

56

Tinkercad is a free, web-based application developed by Autodesk, Inc, focused on providing accessible tools for 3D design, electronics, and coding. It targets educators, students, and hobbyists, serving as an introductory platform to Autodesk's broader design technologies. The website demonstrates a high level of digital maturity with modern frameworks like Angular, service workers for offline capabilities, and integration with Autodesk APIs. The content is rich, well-structured, and optimized for various devices, reflecting excellent user experience and design quality. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, complemented by kidSAFE COPPA certification ensuring child safety and privacy compliance. However, the absence of explicit cookie consent mechanisms and security headers suggests room for improvement in privacy compliance and security best practices. WHOIS data is unavailable, likely due to privacy protections, but the website's professional presentation and Autodesk branding support its legitimacy. Overall, the site is trustworthy, well-maintained, and suitable for its educational audience.

B

BAVARIA Bratislava s.r.o.

bavariabratislava.sk

10

BAVARIA Bratislava s.r.o. operates as an authorized BMW dealership and service center located in Bratislava, Slovakia. The company offers a comprehensive range of BMW vehicles including new and used cars, alongside financial services, servicing, and original accessories. Positioned as the largest and most modern BMW showroom in Slovakia, it targets BMW customers seeking premium automotive products and services. The website reflects a professional and consistent brand image aligned with BMW standards. Technically, the website is built on the siteLAB CMS platform and incorporates modern JavaScript libraries such as Swiper.js and Owl Carousel for UI components, along with Google reCAPTCHA for form security and Facebook SDK for customer chat integration. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and integrates anti-bot measures via reCAPTCHA. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

Jablotron Alarmsysteme s.r.o. is a reputable technology company specializing in security systems, smart home automation, and energy management solutions. The company targets residential and commercial customers primarily in Central Europe, offering innovative alarm and monitoring products. Their website demonstrates a strong market position with professional branding and comprehensive service offerings. Technically, the site is built on a modern React and Next.js stack with excellent mobile optimization and fast performance. Security measures such as HTTPS, security headers, and reCAPTCHA are properly implemented, reflecting a mature security posture. However, the absence of WHOIS domain registration data and lack of public vulnerability disclosure policies slightly reduce trust. Overall, the website is professional, secure, and compliant with GDPR, making it a trustworthy digital presence for the company.

V

Virtualna Tvornica

virtualna-tvornica.com

10

Virtualna Tvornica is a Croatian digital agency specializing in web development and online marketing services, established in 2012. The company offers a broad range of services including web shop creation, website and web application development, AI and ERP integration, and various digital marketing solutions such as Google, Meta, and TikTok advertising. Their market position is that of a specialized, small-sized agency with a consistent brand presence and a portfolio of successful projects. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile devices, and integrates standard marketing and security tools like Google Tag Manager and reCAPTCHA. Security posture is good with HTTPS and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

N

Nacionalna i sveučilišna knjižnica u Zagrebu

nsk.hr

10

The website represents the Nacionalna i sveučilišna knjižnica u Zagrebu, the largest Croatian national and university library. It serves as a central resource for academic and public users in Croatia, providing extensive library services and resources. The domain is well-established since 1997 and registered under CARNET, a reputable Croatian academic network, supporting its legitimacy. Technically, the site is built on WordPress with modern SEO and accessibility features, including multilingual support and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA usage, though security headers and explicit policies could be enhanced. User tracking is moderate via Google Analytics and Tag Manager. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Thomastik-Infeld GmbH

thomastik-infeld.com

71

Thomastik-Infeld GmbH is a well-established Austrian company specializing in the development and production of high-quality music strings since 1919. The company targets musicians and music professionals worldwide, offering a broad portfolio including orchestral, guitar, and folk strings. Their website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce and consulting tools. Technically, the site employs modern frameworks such as Bootstrap and jQuery, enhanced with Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is trustworthy, professional, and compliant with GDPR, serving as a strong digital asset for the company.

Časopis Zagreb moj grad is a Croatian online magazine dedicated to the culture, history, and education about the city of Zagreb. It targets local residents and enthusiasts of Zagreb, providing well-curated articles without sensationalism. The website is built on WordPress with modern plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity. Hosting is provided by cyber_Folks d.o.o., a Croatian registrar and hosting provider, which aligns with the local focus of the publication. Security posture is good with HTTPS enforced and use of Google reCAPTCHA on forms, but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

D

Datalab

datalab.al

57

Datalab is a well-established Slovenian technology company specializing in ERP software solutions, primarily through their flagship product PANTHEON. The company has a strong regional presence with sister sites across multiple Balkan countries, indicating a broad market reach. Their website is built on a modern WordPress CMS with a professional design and good SEO practices, integrating essential marketing and analytics tools such as Google Tag Manager, Google Analytics, Hotjar, and Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and explicit security policies. The absence of clear privacy and terms of service pages slightly impacts privacy compliance scores. Overall, the website reflects a mature digital infrastructure suitable for a medium-sized enterprise in the technology sector.

D

Datalab BH d.o.o.

datalab.ba

53

Datalab BH d.o.o. operates a professional ERP and business information system platform named PANTHEON, targeting small to medium enterprises and accounting services primarily in Bosnia and Herzegovina and the wider Southeast European region. The company offers a comprehensive suite of software solutions including ERP modules, cloud hosting, and digital business tools, supported by consulting and training services. The website reflects a mature digital presence with multilingual support and a strong focus on customer engagement through testimonials and educational content. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

D

Datalab

datalab.si

57

Datalab is a well-established Slovenian technology company specializing in ERP software solutions, notably the PANTHEON business information system. With a domain age dating back to 1997 and multiple regional partner sites, Datalab demonstrates a mature market presence in the technology sector, targeting businesses seeking comprehensive ERP solutions. The website is built on a modern WordPress platform using the Enfold theme, integrated with standard SEO and analytics tools such as Yoast SEO, Google Analytics, and Cookiebot for GDPR compliance. The technical infrastructure is hosted on Azure DNS, indicating a reliable hosting environment. Security measures include HTTPS encryption and reCAPTCHA integration; however, the absence of security headers suggests room for improvement in security posture. The site implements a robust cookie consent mechanism, reflecting good privacy compliance practices, though explicit privacy policy and terms of service pages were not detected in the provided content. Overall, the website presents a professional and trustworthy digital presence with moderate to good performance and user experience.

D

Dimedia internet tehnologije d.o.o.

dimedia.hr

43

Dimedia internet tehnologije d.o.o. is a Croatian technology company specializing in custom software development, mobile applications, web design, and internet marketing services. Established in 2010, the company targets businesses seeking comprehensive digital solutions to enhance their online presence and operational efficiency. Their market position is supported by a portfolio of clients across real estate, tourism, and corporate sectors, demonstrating a solid foothold in the regional IT services market. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA, ensuring basic security and user engagement features. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Hosting and domain registration are consistent with the company's Croatian location, enhancing trust. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic with presence of privacy and cookie policies, but no explicit GDPR compliance statements or data retention policies were found. Overall, the website is trustworthy and professionally maintained, with moderate technical sophistication and a solid business credibility profile. Strategic improvements in security policy transparency and accessibility would further enhance their posture.

R

Registry Services, LLC

uipm.tv

42

UIPM TV is a specialized media streaming platform dedicated to broadcasting live and recorded events related to Modern Pentathlon and associated sports disciplines such as Biathle, Triathle, Laser Run, and Obstacle events. The platform targets sports enthusiasts and fans of these niche sports, providing official content likely authorized by the governing body UIPM. The website is built on WordPress using the Divi theme, integrating Dailymotion's API for video streaming and Matomo for analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security measures include HTTPS, reCAPTCHA for form protection, and GDPR cookie consent mechanisms, although some security best practices like DNSSEC and security headers are missing. The domain registration is consistent and legitimate, registered with OVH sas and publicly associated with Registry Services, LLC. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which impacts privacy compliance and business credibility scores. Overall, the site is functional, professionally designed, and serves its niche audience effectively but would benefit from enhanced security and compliance documentation.

A

Auto*Mat

auto-mat.cz

46

Auto*Mat is a small, community-focused organization based in the Czech Republic dedicated to urban mobility and sustainable transportation solutions. The website serves as an informational and engagement platform for the local community and stakeholders interested in city transportation projects. The business operates primarily as a non-profit or advocacy group with a niche market position in transportation within the Czech Republic. Technically, the website is built on WordPress, hosted by GreenGeeks, and employs modern web technologies including Google Tag Manager, Facebook Pixel, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security posture is adequate with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing advanced security headers and publishing a security policy. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the domain is legitimate, well-aged, and consistent with the business claims, indicating a trustworthy online presence.

Hrvatska akreditacijska agencija (HAA) is a Croatian national accreditation agency operating as an independent, non-profit public institution. It provides accreditation services and manages the e-Akreditacija portal, which offers electronic services and maintains registers of accreditations. The agency is positioned as the authoritative accreditation body in Croatia with international cooperation ties to organizations such as ILAC and EA. The website is professionally designed, uses WordPress CMS, and integrates standard web technologies including Google Analytics and reCAPTCHA for security and analytics purposes. The site is accessible, mobile-optimized, and provides clear navigation and relevant content for its target audience of accredited entities and government bodies. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements could be made by adding security headers and explicit privacy policies. WHOIS data is redacted due to GDPR, but the domain and website content align with a legitimate government agency. Overall, the website demonstrates a good balance of professionalism, technical implementation, and business credibility.

H

HŽ Putnički prijevoz

hzpp.hr

50

HŽ Putnički prijevoz is the Croatian national passenger rail transport company providing domestic and international train services. The website serves as an information and ticketing portal for passengers, offering travel schedules, ticket purchase options, and travel advisories. The company targets general public users traveling within Croatia and to European destinations by rail. The business model is that of a public transportation service provider with a large market presence as the national rail operator. Technically, the website employs modern web standards including HTTPS, Google Tag Manager, and reCAPTCHA for security and analytics. Accessibility features such as font size adjustment and dyslexia mode enhance user experience. However, the site lacks visible privacy and terms of service pages, and no direct contact information is found in the provided content. Security posture is good with HTTPS and bot protection but could be improved by adding security headers and explicit security policies. Overall, the domain and website appear legitimate and professionally maintained, consistent with a national transportation entity.

G

GoDaddy Operating Company, LLC

klemmsecurity.com

71

The website is a domain sales landing page operated by GoDaddy Operating Company, LLC, offering the domain klemmsecurity.com for sale. It targets individuals and businesses interested in acquiring premium domains, providing options to buy outright or lease to own. The platform leverages GoDaddy's established domain aftermarket infrastructure and integrates partner services such as Afternic and Trustpilot for trust and transaction facilitation. The site is professionally designed with a focus on secure and straightforward domain transactions. Technically, it uses modern web frameworks including Next.js and JavaScript, hosted on GoDaddy's infrastructure, with basic SEO and accessibility features. Security posture is moderate with HTTPS implied and reCAPTCHA implemented, but lacks explicit security headers and detailed policies. Overall, the domain sales platform is credible and trustworthy, though WHOIS data for the parking subdomain is unavailable, which is typical for such sales platforms.

B

Borealis

borealis.agency

45

Borealis is a Croatia-based digital agency specializing in the creation of custom digital products including complex web applications, e-commerce platforms, multimedia applications, and promotional games. The company emphasizes long-term client relationships and serves a global clientele with a comprehensive service offering from concept through post-launch support. Their website reflects a professional and modern digital presence built on WordPress, with integration of Google Tag Manager and reCAPTCHA for analytics and security. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS and form protection, but could be improved by adding security headers and formal incident response disclosures. Overall, Borealis presents as a credible and established digital agency with a solid market position and trustworthy online presence.

Ż

Żywiec Zdrój

wolewode.pl

69

The website 'Mamo, tato, wolę wodę!' is an established educational program initiated by Żywiec Zdrój, targeting preschools in Poland to promote healthy hydration habits among children. The program offers educational materials, contests, and certification, positioning itself as a trusted and recognized initiative in the Polish education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google services for analytics and spam protection. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, though it lacks advanced security headers and a published security policy. The domain is stable and consistent with the business claims, enhancing trust. Overall, the site is secure, compliant with GDPR, and professionally maintained, suitable for its educational mission.

Všudehrálové.cz is a Czech Republic-based niche community website dedicated to golf enthusiasts, providing news, tournament information, golf course rankings, and community updates. The site targets local golf players and fans, offering relevant content about golf courses and events primarily in the Czech region. The business model appears to be community-driven, possibly supported by membership or event fees, with a focus on fostering engagement among golf players. Technically, the website runs on WordPress 5.3.20 with jQuery 1.10.2, Google Analytics, and Google reCAPTCHA integrated for analytics and bot protection. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and reCAPTCHA usage; however, the absence of security headers and use of outdated JavaScript libraries present vulnerabilities. Privacy compliance is weak due to missing privacy and cookie policies, and no GDPR consent mechanisms are evident. Overall, the site is functional and relevant to its audience but requires improvements in security and privacy to enhance trust and compliance.

Obec Klíčany operates as the official municipal government website for the village of Klíčany in the Czech Republic. The site provides residents and visitors with essential information about local governance, community news, public notices, and administrative contacts. It serves a small population of approximately 610 inhabitants and focuses on transparency and accessibility of municipal services. The website is well-structured, professionally designed, and targets local citizens and stakeholders. Technically, the website employs a custom CMS platform (IPO Redakční systém) and uses established JavaScript libraries such as jQuery and jQuery UI, alongside Google reCAPTCHA for form security and Matomo for privacy-conscious analytics. The site is mobile responsive and includes cookie consent mechanisms aligned with GDPR requirements. However, some libraries are outdated, and security headers are not visibly implemented, which could be improved. From a security perspective, the site benefits from HTTPS encryption and user consent for cookies, but lacks explicit security policies and incident response information. The absence of WHOIS data reduces domain trust slightly, though the website content and domain usage appear legitimate for a local government entity. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with good privacy compliance and a solid foundation for municipal communication. Strategic improvements in security headers, updated libraries, and enhanced transparency on security policies would further strengthen its posture.

P

Poule et Toque

poule-et-toque.fr

64

Poule et Toque is a French company specializing in supplying poultry products to the professional foodservice and catering sectors. Their website presents a well-structured, professionally designed platform targeting restaurateurs and catering professionals with segmented product lines such as 'Prêt à Cuire', 'Prêt à réchauffer', and 'Prêt à Servir'. The company positions itself as an expert in French poultry, offering solutions tailored to various foodservice needs. The site includes rich content, social media integration, and a dedicated subdomain for a poultry competition, indicating active engagement in their industry. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Matomo for analytics, showing a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and compliance with GDPR suggest legitimacy. The site is accessible with no blocking or WAF challenges detected.

D

D'aucy

daucy.fr

51

D'aucy is a well-established French cooperative brand specializing in vegetable products including canned, frozen, and prepared foods. The website reflects a mature digital presence with a focus on sustainability, cooperative values, and consumer engagement through recipes and educational content. Technically, the site uses WordPress with modern JavaScript libraries and analytics tools such as Matomo and Microsoft Clarity, ensuring a good user experience and data-driven insights. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and parent company association. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations.

S

Shell Privat

shellservice.dk

66

Shellservice.dk is a professionally maintained website representing Shell Privat's services in Denmark, focusing on fuel supply, electric vehicle charging, and car wash services. The site targets private vehicle owners seeking high-quality energy and transportation services. The business is well positioned in the Danish market with a clear brand presence and consistent messaging. Technically, the site is built on WordPress with modern SEO and marketing tools, including Google Tag Manager and Cookiebot for consent management. Security posture is good with HTTPS and bot protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the analyzed content. Overall, the site is trustworthy, professional, and safe for general audiences.

T

The Video Game Fans

cotegamers.com

55

The Video Game Fans operates a specialized e-commerce platform focused on retro gaming books, magazines, and games. Founded in 2014 and based in France, the company targets video game enthusiasts and collectors with a curated catalog. The website is built on PrestaShop, integrating modern payment options such as Amazon Pay and PayPal, and shipping services like Mondial Relay and Boxtal Connect. Multi-language support enhances accessibility for international customers. Technically, the site is moderately performant and mobile-optimized, though there is room for improvement in security headers and SEO. Security posture is solid with HTTPS and bot protection via Google reCAPTCHA, but explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stable operation.

D

DEREZA, s.r.o.

dereza.cz

45

DEREZA, s.r.o. is a Czech construction company established in 2000, specializing in comprehensive building services including technical building equipment, earthworks, and transport. The company has a solid market position supported by references to significant projects such as Rudolfinum and Prague Castle. Their website is built on WordPress using the Avada theme, integrating modern technologies like Google Analytics and reCAPTCHA for security and analytics. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and security policies. Security posture is moderate with HTTPS and reCAPTCHA implemented but missing security headers and incident response information. Overall, the website is trustworthy and functional with room for improvement in privacy compliance and security best practices.

RE/MAX Alfa is a professional real estate agency operating primarily in the Czech Republic, offering a wide range of services including property sales, rentals, appraisals, auctions, and legal support. The company is part of the international RE/MAX network and positions itself as a market leader with a strong focus on customer satisfaction and high-quality service delivery. The website is well designed, multilingual, and provides comprehensive information about services, agents, and legal policies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, ensuring good performance and user experience. Security measures include HTTPS and Google reCAPTCHA, although additional security headers could enhance protection. The absence of WHOIS data is a notable gap, but the overall digital presence and business information suggest a legitimate and trustworthy operation.

R

Repair Café Graz

repaircafe-graz.at

45

Repair Café Graz is a small, community-driven non-profit initiative based in Austria focused on sustainability by promoting repair culture to reduce waste. The website serves as an informational platform for local community members interested in repair events and workshops. Technically, the site is built on WordPress using the Divi theme, incorporating standard web technologies and Google reCAPTCHA for form security. The website is accessible, mobile-optimized, and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and reCAPTCHA, but missing security headers and formal policies reduce overall security maturity. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, matching the local community focus. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and security.

S

SchloR

schlor.org

42

SchloR is a self-managed non-profit community project based in Vienna-Simmering, Austria, focused on providing solidarity-based housing and creative workspaces. The organization operates under the umbrella of recognized entities such as habiTAT and Mietshäuser-Syndikat, emphasizing collective living and cultural engagement. Their business model includes direct loans from supporters to finance their projects, reflecting a strong community trust and engagement. The website is well-structured, content-rich, and targets local community members interested in alternative housing and cultural activities. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. The presence of Google reCAPTCHA on forms enhances security against automated abuse. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved to strengthen the security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, indicating a legitimate and controlled domain. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Privacy compliance is adequate with a privacy policy present, though cookie consent mechanisms are lacking. No incident response or vulnerability disclosure information is found, which could be areas for future enhancement. Overall, SchloR presents a trustworthy, community-oriented project with a solid web presence and moderate technical maturity. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would enhance their security and compliance posture further.

M

Miele Center Faulmann

mielecenter-faulmann.at

63

Miele Center Faulmann is a specialized retailer and service provider for Miele household appliances located in Vienna, Austria. The company offers a comprehensive range of products including kitchen appliances, laundry care, vacuum cleaners, and accessories, supported by an online shop and repair services. The website reflects a professional e-commerce platform with clear navigation and a focus on customer service. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS enforcement, reCAPTCHA for form protection, and a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and compliance. Overall, the website is well-structured, secure, and compliant with privacy regulations, representing a trustworthy local business.

N

Nase Media a.s.

parlamentnilisty.cz

10

ParlamentniListy.cz is a well-established Czech political news and commentary website operated by Nase Media a.s. It offers a broad range of political news, interviews, opinion pieces, and profiles of politicians and institutions. The site targets Czech-speaking audiences interested in politics and current affairs, leveraging advertising and subscription models for revenue. Technically, the site employs modern web technologies including Google services for ads and analytics, Facebook SDK, and a consent management platform to ensure GDPR compliance. The website is mobile-optimized and structured for SEO with JSON-LD data. Security-wise, the site enforces HTTPS and uses reCAPTCHA to mitigate bots, but lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection.

TAC-TAC agency s.r.o. is a small Czech advertising company specializing in promotional products and client advertising services. The website presents basic information about the company and its offerings, targeting businesses seeking advertising solutions. The company has been established since 2000, indicating a stable presence in the local market. The website uses SuitableCMS and is hosted by Wedos, with integrations of common marketing and analytics tools such as Google Analytics, Google Tag Manager, Hotjar, and Google reCAPTCHA for bot protection. From a technical perspective, the website employs older technologies such as jQuery 1.7.2, which is outdated and poses security risks. The site lacks modern security headers and visible privacy or cookie policies, indicating compliance gaps with GDPR and other privacy regulations. The website is accessible without WAF or blocking mechanisms, but the security posture is moderate due to missing best practices and outdated libraries. Security-wise, the site uses HTTPS (implied by origin-trial meta tag referencing HTTPS Google services) and reCAPTCHA, but lacks explicit security headers and incident response information. No vulnerabilities such as exposed credentials or SQL injection are visible, but the outdated jQuery version is a concern. Contact information is minimal but present, with a company email and phone number displayed. Overall, the website scores moderately on AI evaluation with strengths in business credibility and basic technical implementation but weaknesses in privacy compliance and security best practices. Strategic improvements in updating technology, adding privacy and cookie policies, and enhancing security headers would significantly improve the site's security posture and compliance.

D

DreamHost

dreamhost.com

67

DreamHost is a well-established web hosting and domain registration provider offering a variety of services including managed WordPress hosting and business email solutions. The company targets small to medium businesses, developers, and enterprises seeking reliable hosting with a 100% uptime guarantee and 24/7 support. Their market position is strong within the technology sector, emphasizing growth and customer service. Technically, the website leverages modern frameworks such as React and Gatsby, ensuring fast performance, mobile optimization, and good accessibility. Integration of Google Tag Manager and OneTrust for cookie consent reflects a mature digital infrastructure. The site is hosted likely on DreamHost's own infrastructure or CDN, with excellent SSL and security headers implemented. From a security perspective, DreamHost demonstrates good practices including HTTPS enforcement, security headers, and captcha on forms. However, explicit security policies, incident response details, and vulnerability disclosure programs are not publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. The lack of WHOIS data transparency slightly impacts trust but is likely due to privacy protection or query limitations. Strategic recommendations include publishing detailed security policies and establishing a vulnerability disclosure program to further strengthen security posture.

S

Startup Tech Valley

startuptechvalley.org

59

Startup Tech Valley is a small event organization focused on fostering the startup ecosystem in the Capital Region of the United States. They organize premier startup events featuring pitches, networking, and community engagement, targeting entrepreneurs, investors, and business leaders. The website is professionally designed using Squarespace, with good mobile optimization and moderate performance. Social media presence is strong, supporting community outreach and event promotion. Security posture is good with HTTPS and HSTS enabled, and Google reCAPTCHA implemented to protect forms. However, the absence of privacy and cookie policies, lack of explicit contact information, and missing WHOIS data reduce overall trust and privacy compliance. The domain's legitimacy is partially uncertain due to unavailable WHOIS records, though the website content and external event registration links suggest a legitimate business. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance.

The website archive.li is a web archiving service that allows users to save and access snapshots of web pages. However, the content provided is a security check page requiring CAPTCHA completion before access, indicating the presence of a Web Application Firewall or bot mitigation system. This limits the ability to fully analyze the website's content, policies, and business information. The technical infrastructure includes the use of Google reCAPTCHA and is hosted on Hetzner Online GmbH's infrastructure. Security posture shows some best practices with CAPTCHA usage but lacks visible security headers and policies. Overall, the site is partially inaccessible, limiting trust and compliance assessments.

Mikroregion Horymír is a small, non-profit regional association of municipalities in the Czech Republic, focused on promoting local culture, tourism, and community events. The website serves as an information hub for residents and visitors, providing news, event updates, and regional information. The technical infrastructure is based on a custom CMS (IPO) with standard web technologies including jQuery, Owl Carousel, and Google reCAPTCHA, supported by Matomo analytics for user tracking. The site is mobile responsive and well-structured, though it lacks some modern security headers and formal privacy documentation. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved compliance and transparency measures.

Obec Karlík is a small municipal government entity located in the Prague-West district of the Czech Republic. The website serves as an official portal providing residents and visitors with information about local administration, public notices, cultural heritage, and community services. The site emphasizes historical landmarks and natural surroundings, targeting local citizens and tourists interested in the municipality. Technically, the website employs a traditional web stack with jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics, managed via the IPO CMS platform. The site is mobile responsive and includes accessibility features such as font resizing and clear navigation. Security-wise, the site uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact details align with a legitimate government entity. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security disclosures.

G

Game Lounge Ltd.

gamelounge.com

65

Game Lounge Ltd. operates as a global leader in the iGaming affiliate marketing sector, connecting online casino players with iGaming brands through a network of over 130 SEO-driven websites across more than 60 countries. The company emphasizes data-driven innovation and offers a range of services including SEO content marketing, unique player tools, brand exposure, lead generation, and data analytics. Their market position is strong within the media and affiliate marketing industry, targeting mature audiences interested in online gambling. Technically, the website is built on WordPress with modern JavaScript libraries and SEO plugins, delivering a professional and mobile-optimized user experience. Security posture is good with HTTPS and reCAPTCHA in place, though there is room for improvement in security headers and published policies. The absence of WHOIS registration data raises some legitimacy concerns, but the professional web presence and active social media mitigate these. Overall, the site is well-designed and functional, but lacks explicit privacy and cookie policies, which impacts compliance and trust scores.

Ladův kraj is a regional community and tourism promotion website focused on the area between Prague and the Sázava river, named after the famous painter and writer Josef Lada. The site serves as a hub for local municipalities, cultural events, and tourism services including equipment rental and event calendars. It targets tourists and local residents interested in cultural and outdoor activities. The website is positioned as a small regional government or community association platform with a clear focus on promoting local heritage and tourism. Technically, the site uses a custom CMS (IPO) with legacy JavaScript libraries such as jQuery 3.0 and jQuery UI 1.8.20, integrates Matomo analytics for privacy-conscious tracking, and employs Google reCAPTCHA for form security. The site is mobile responsive and has a good level of SEO and accessibility, though accessibility features could be improved. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and uses outdated libraries. WHOIS data is unavailable, which raises concerns about domain registration transparency, but the website content and external partner links suggest legitimacy. Overall, the site is functional and professional but would benefit from improved security practices and updated technical components.

M

MaM multimedia, s.r.o.

cistysvet.sk

10

ČistýSvet.SK is a Slovak-based e-commerce retailer specializing in cleaning machines, industrial vacuum cleaners, air humidifiers, purifiers, and food dehydrators. The company operates under MaM multimedia, s.r.o., with a business history dating back to 2005. The website targets consumers and businesses seeking quality cleaning and home care equipment, offering a range of products with clear pricing and promotional offers. The platform is positioned as a trusted regional player with a focus on customer service and reliable delivery. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and various JavaScript libraries for enhanced user experience such as PrettyPhoto and MagicZoomPlus. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. The content is well-structured, professionally designed, and easy to navigate. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a publicly available security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, ČistýSvet.SK demonstrates a solid business and technical foundation with good privacy compliance and trustworthy domain registration. Strategic improvements in security headers and incident response transparency would further enhance its security posture and customer trust.

M

MaM multimedia, s.r.o.

mojmilacik.sk

39

MôjMiláčik.SK is a Slovak e-commerce website specializing in pet supplies including food, accessories, and veterinary products for dogs, cats, and other animals. Operated by MaM multimedia, s.r.o., the site offers a broad product catalog with detailed descriptions and a loyalty program to encourage repeat purchases. The business targets pet owners primarily in Slovakia and operates as a small retail e-commerce platform with a regional focus. Technically, the website uses a custom CMS platform (MaM SHOP system) with legacy technologies such as Flash and a non-UTF-8 charset, indicating some modernization opportunities. Security posture is solid with HTTPS, DNSSEC, and Google reCAPTCHA integration, but lacks advanced security headers and modern charset standards. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the site is functional and trustworthy but could benefit from technical updates and enhanced security measures.

HugeDomains operates as a leading online marketplace specializing in the sale of brandable domain names. The website offers competitive pricing, flexible payment plans, and a 30-day money back guarantee, positioning itself as a trusted intermediary for domain buyers and entrepreneurs. The platform targets businesses and individuals seeking premium domain names with a straightforward purchasing process and secure payment options. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Cloudflare services to ensure performance, security, and user tracking. The presence of cookie consent mechanisms and GDPR-compliant privacy policies reflects a mature approach to privacy and regulatory compliance. Security posture is strong with HTTPS enforced, bot management, and reCAPTCHA integration, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in domain reselling, and does not detract from the site's legitimacy. Overall, HugeDomains presents a professional, secure, and user-friendly platform for domain acquisition.

Tork is a leading global brand specializing in professional hygiene products and services, targeting businesses across various sectors such as offices, hospitality, and manufacturing. The website presents a professional and consistent brand image, reflecting its position as part of the Essity group. The digital infrastructure leverages modern technologies including React and Next.js, with integrations for analytics and consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms, although explicit incident response and vulnerability disclosure information are absent. Overall, the website is trustworthy and well-maintained, but the absence of WHOIS data introduces a minor trust concern that should be investigated further.

G

GoDaddy Operating Company, LLC

owned.xyz

71

The website forsale.godaddy.com/forsale/owned.xyz is a professional domain sales landing page operated by GoDaddy Operating Company, LLC, a leading domain registrar and aftermarket platform. It offers the premium domain owned.xyz for sale with a clear call to action, secure transaction assurances, and customer support. The site targets individuals and businesses seeking premium domain names to establish or enhance their online presence. The business model is focused on domain aftermarket sales and brokerage, leveraging GoDaddy's extensive market position and infrastructure. Technically, the site is built using modern web technologies including React with Next.js framework, served via GoDaddy's hosting infrastructure. It employs HTTPS with excellent SSL configuration, uses Google reCAPTCHA for form security, and integrates third-party trust signals such as Trustpilot. The site is optimized for performance, mobile responsiveness, and accessibility, providing a good user experience. From a security perspective, the site demonstrates strong practices such as HTTPS enforcement and secure form handling. However, explicit security headers are not detected in the provided data, and no dedicated security or incident response policies are linked on the landing page. No vulnerabilities or exposed sensitive data were found. Privacy compliance is supported by GoDaddy's comprehensive privacy and cookie policies, with GDPR compliance indicated. Overall, the domain is a subdomain of godaddy.com, explaining the absence of WHOIS data for the subdomain itself. The site is legitimate, professionally maintained, and trustworthy. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving visibility of incident response contacts to further strengthen security posture and customer trust.

U

Umlaut Recordings

umlaut.de

40

Umlaut Recordings is a small, niche music label and artist management entity focused on the Didgeridoo player Tom Fronza and associated musicians. The company offers workshops, live performances, studio music production, and music sales through an online shop. The website is professionally designed with clear navigation and good content quality, targeting music enthusiasts and event organizers. Technically, the site is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is solid with HTTPS, spam protection, and reCAPTCHA, though lacking some advanced security headers and explicit security policies. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy small business in the music sector.

F

FlowChief GmbH

flowchief.de

50

FlowChief GmbH is a German-based software company specializing in industrial automation, process control, SCADA systems, and energy management solutions. The company offers a scalable software platform built entirely on web technologies, enabling remote access and control across devices. Their key offerings include the FlowChief platform, e-Gem energy management software, and remote control solutions. The company holds ISO 27001 certification, underscoring its commitment to information security. The website demonstrates a mature digital presence with modern technologies, comprehensive content, and strong customer references. Security practices are robust, including HTTPS, reCAPTCHA, and adherence to recognized standards. Overall, FlowChief presents as a credible and professional entity with a strong market position in the energy and industrial automation sectors.