Security Directory

E

Einwohnergemeinde Lostorf

lostorf.ch

61

The website www.lostorf.ch serves as the official municipal portal for the Gemeinde Lostorf in Switzerland. It provides residents and visitors with comprehensive information about local government services, political updates, cultural events, education, and administrative resources. The site targets local citizens and stakeholders seeking access to community services and information. The business model is that of a public government entity focused on transparency and service delivery. Technically, the website is built on the i-web.ch CMS platform, utilizing modern web technologies including JavaScript modules and responsive CSS. The site is mobile-optimized and offers a moderate performance profile. While basic SEO and accessibility features are present, there is room for enhancement in security headers and advanced SEO practices. From a security perspective, the site enforces HTTPS and employs anonymized web analytics with user consent mechanisms, reflecting a good privacy posture. However, the absence of explicit security headers and incident response contact details suggests opportunities for strengthening security practices. No vulnerabilities or suspicious elements were detected in the content or technical setup. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively serves its purpose as a municipal information hub with a low risk profile. Strategic improvements in security headers and transparency around security policies would further enhance its security posture and user trust.

G

Gemeinde Gunzgen

gunzgen.ch

60

Gemeinde Gunzgen is a municipal government website serving the local community in Switzerland. It provides a broad range of public services and information including politics, administration, education, social services, events, and waste management. The site targets residents and visitors seeking official information and online services such as the Online-Schalter. The website is well-structured, professionally designed, and consistent with the branding of a local government entity. Technically, the site uses a modern CMS platform (i-web CMS) with standard web technologies such as JavaScript, CSS, and HTML5. It is mobile-optimized and accessible, with good SEO practices and a moderate performance profile. The site employs HTTPS and includes a cookie consent mechanism, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and anonymizes web statistics data, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a clear privacy policy and cookie consent banner, aligned with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility as a government entity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and security posture.

G

Gemeinde Fulenbach

fulenbach.ch

59

Gemeinde Fulenbach operates an official municipal website serving the local community of Fulenbach, Switzerland. The site provides comprehensive information about local government services, news, events, and administrative contacts. It targets residents and visitors seeking municipal information and online services. The website is positioned as a trusted local government portal with clear navigation and relevant content. Technically, the website is built on the i-web.ch CMS platform, utilizing modern web technologies including JavaScript, CSS, and responsive design. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements could focus on enhancing security headers and publishing a vulnerability disclosure policy to further strengthen trust and security posture.

G

Gemeindeverwaltung Egerkingen

egerkingen.ch

61

The website www.egerkingen.ch serves as the official digital presence of the municipal administration of Egerkingen, Switzerland. It provides comprehensive information about the community, local politics, administrative services, events, and official publications. The site targets residents and visitors seeking municipal services and information. The business model is that of a government entity delivering public services and community engagement. The website is well-structured, professionally designed, and consistent with the branding expected from a local government authority. Technically, the site utilizes a Swiss municipal CMS (iCMS) with modern web technologies including JavaScript, CSS, and HTML5. It employs Matomo analytics with a clear user consent mechanism, indicating a mature approach to privacy. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, suitable for the content and audience. From a security perspective, the website enforces HTTPS and uses secure login forms. However, it lacks explicit security headers and does not publish a security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the municipal identity. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further improve trust and security posture.

Schule Wettingen is a public educational institution serving the Wettingen community in Switzerland, offering comprehensive educational services from kindergarten through secondary school, including special education and music school programs. The website reflects a well-structured organization with multiple subdomains dedicated to different school levels and services, targeting parents, students, and local residents. The content is primarily in German and focuses on educational information and integration support for foreign language speakers. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and Piwik/Matomo for analytics. The site is served over HTTPS, ensuring secure communication, but lacks advanced security headers and visible privacy or cookie policies, which are areas for improvement. Mobile optimization and accessibility are basic but functional, with moderate performance. From a security perspective, the site shows a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, privacy policies, and incident response information indicates gaps in security maturity and compliance, particularly with GDPR requirements. The use of analytics without a consent mechanism further highlights privacy compliance risks. Overall, Schule Wettingen presents a trustworthy and professional online presence appropriate for a public educational institution. Strategic improvements in privacy compliance, security headers, and mobile accessibility would enhance the site's security posture and user trust.

The website www.genomeweb.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks content access until human verification is completed. No meaningful website content, metadata, or business information is available for analysis. The WHOIS query for the domain returned no registration data, indicating the domain may be unregistered or WHOIS data is withheld, which raises concerns about domain legitimacy. The technical infrastructure includes Cloudflare security services but lacks visible security headers or policies. Due to the blocked content and missing WHOIS data, the overall risk assessment is high, and the website's trustworthiness and business credibility cannot be established.

1

1xBet

esp-congress.org

57

The website www.esp-congress.org appears to be a gambling and sports betting platform branded as 1xBet, targeting users in Bangladesh. It offers a wide range of betting and casino services, including sports betting, live bets, online slots, poker, and a mobile app for Android and iOS. The platform claims to operate under a Curacao license issued to Caecus N.V. and emphasizes localized payment methods and bonuses for Bangladeshi customers. The site is professionally designed with good navigation and mobile optimization, providing detailed information about registration, deposits, withdrawals, and promotions. Technically, the website uses standard web technologies such as HTML5, CSS, and JavaScript, with no detected CMS or advanced frameworks. The site is mobile-friendly and optimized for performance, though no explicit security headers or analytics scripts were detected in the provided HTML content. The WHOIS data is unavailable or malformed, limiting the ability to verify domain registration details and reducing trustworthiness from a domain perspective. From a security standpoint, the site uses HTTPS as implied by canonical links but lacks visible security headers and formal privacy or cookie policies. Incident response contact is provided via a security-related email address. No critical vulnerabilities or malware indicators were found in the content. The content is focused on gambling, which is considered questionable content requiring adult user targeting but no explicit adult material was detected. Overall, the site presents a functional and professional gambling platform with moderate trustworthiness due to missing WHOIS data and privacy compliance gaps. Strategic recommendations include improving security headers, publishing privacy and cookie policies, enhancing incident response visibility, and verifying domain registration information to increase user trust and compliance.

W

Werkk Baden

werkk-baden.ch

51

Werkk Baden is a small cultural venue and youth center located in Baden, Switzerland, offering a variety of events including concerts, parties, workshops, and community gatherings. The website presents a well-structured and content-rich platform targeting youth and music enthusiasts, positioning itself as a local cultural hub. Technically, the site uses a CMS likely Redaxo, with a tech stack including jQuery and lazysizes for performance optimization. The site is mobile optimized and SEO friendly, though some technologies like jQuery are outdated. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a formal security policy. Contact information is clearly provided, and the site maintains transparency with cookie management and privacy policy links. Overall, the site is trustworthy and professionally maintained with a strong local presence.

The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which indicates that the actual website content is inaccessible or blocked. The page content is primarily the offline dinosaur game embedded in Chrome and does not represent a real website. Consequently, no business information, privacy policies, or contact details are available. The technical infrastructure is limited to client-side JavaScript for the game, with no server-side or hosting details. Security posture is minimal with no HTTPS or security headers detected. Overall, the site is non-functional from a user or business perspective and cannot be properly assessed for compliance or security.

F

Foundation for Environmental Education

fee.global

63

The Foundation for Environmental Education (FEE) is a well-established non-profit organization focused on environmental education and sustainable development with a global presence spanning over 110 member organizations in 85 countries. Their core activities include managing internationally recognized sustainability certification programs such as Blue Flag and Green Key, youth empowerment initiatives like Eco-Schools and Young Reporters for the Environment, and global campaigns addressing climate action and ecosystem restoration. The website reflects a professional and consistent brand image aligned with their mission. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager and Mailchimp for analytics and marketing. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. Security posture is strong with HTTPS enforced and HSTS enabled, but the absence of visible privacy and cookie policies indicates room for improvement in compliance. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the lack of explicit privacy and cookie policies, as well as missing contact information for security incidents, represents compliance and transparency gaps. The domain WHOIS data is privacy protected, which is common for non-profits, and no suspicious patterns were detected. The website is safe for general audiences and free from adult or questionable content. Strategically, the organization should prioritize publishing comprehensive privacy and cookie policies with consent mechanisms, establish a vulnerability disclosure process, and improve accessibility to enhance trust and compliance. These steps will strengthen their security culture and align with global data protection standards.

G

Gemeinde Wettingen

wettingen.ch

59

Gemeinde Wettingen operates as the official municipal government website for the town of Wettingen in Switzerland. It provides comprehensive information about local government services, political participation, community events, and administrative resources. The site targets residents and visitors seeking municipal services and information. The business model is centered on public service and community engagement, positioning itself as a trusted local government portal. Technically, the website employs modern web technologies including JavaScript modules, CSS, and HTML5, and is built on the i-web CMS platform. It demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The site uses HTTPS and includes a privacy policy and cookie consent mechanism, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and anonymizes web statistics data, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is adequate but could be improved by implementing additional headers and formalizing security policies. The website is safe for general audiences, containing no adult or questionable content. The domain registration details align well with the municipal identity, supporting high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and improving SEO and accessibility compliance.

G

Gemeinde Suhr

suhr.ch

62

The website www.suhr.ch serves as the official digital presence of the municipality of Suhr in Switzerland. It provides comprehensive information about the community, local government, services, events, and digital offerings such as an online service portal. The site targets residents and visitors seeking municipal information and services. The business model is that of a government service portal, focusing on transparency, accessibility, and community engagement. The website is well-branded, consistent, and trustworthy, reflecting its official status. Technically, the site is built on a modern stack including HTML5, CSS3, JavaScript, and a proprietary CMS platform (i-web.ch). It uses Matomo for analytics, indicating a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. The presence of accessibility features and a dedicated accessibility mode enhances inclusivity. From a security perspective, the site enforces HTTPS and employs secure login forms with password reset capabilities. However, it lacks explicit security headers and does not publish a security policy or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no critical issues detected. Strategic recommendations include implementing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to enhance trust and security culture. The site is suitable for its purpose as a municipal information portal and demonstrates good digital maturity.

K

Kursaal Engelberg AG

kursaalengelberg.ch

62

Kursaal Engelberg AG operates as a regional hospitality venue in Engelberg, Switzerland, specializing in hosting weddings, congresses, seminars, banquets, and cultural events. The company targets private, business, and cultural event organizers seeking a stylish and well-equipped location. The website is professionally designed using the Wix platform, featuring relevant content and structured data that supports business legitimacy. However, the site lacks critical privacy and cookie policies, which impacts compliance and user trust. Technically, the site leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the business presents a trustworthy and professional image but should improve privacy compliance and security transparency to enhance user confidence and regulatory adherence.

The website www.stadtwil.ch serves as the official digital presence of the city of Wil in Switzerland, providing residents and visitors with comprehensive information about municipal services, local news, and community resources. The site is built on the OneGov Town CMS platform, which is widely used by Swiss municipalities, indicating a mature and specialized technical infrastructure. The website demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is strong with HTTPS enforced and minimal third-party tracking, though the absence of explicit privacy and cookie policies suggests room for improvement in compliance. Overall, the site reflects a trustworthy government entity with a focus on public service delivery.

T

TablePress

tablepress.org

72

TablePress is a well-established WordPress plugin provider specializing in creating and managing tables easily and efficiently on WordPress websites. The company offers a freemium business model with premium plans that enhance functionality and support. The website is professionally designed, highly accessible, and optimized for mobile devices, targeting WordPress users who need advanced table features without coding. Technically, the site leverages WordPress CMS, modern JavaScript libraries like DataTables, and is hosted with Cloudflare DNS and registrar services, ensuring good performance and security. Security posture is strong with HTTPS enforced and multiple security headers present, though DNSSEC is not enabled. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and credible with strong user testimonials and a clear market position as a leading WordPress table plugin.

S

saarVV

saarfahrplan.de

50

The website 'saarfahrplan.de' serves as a public transportation schedule and route planning platform for the Saarland region in Germany. It provides users with timetable information and journey planning tools primarily through a web application built on the HAFAS WebApp framework. The target audience is general commuters and residents within the Saarland area seeking transit information. The business model focuses on delivering transit data and real-time updates, positioning itself as a regional transportation information provider. Technically, the site employs a modern JavaScript-based tech stack with Leaflet.js for mapping and a modular HAFAS framework. While the site is functional and moderately optimized for performance and mobile use, it lacks advanced SEO and accessibility features. The absence of a CMS or hosting details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS as indicated by the URL, but no explicit security headers are present in the HTML content. There are no visible forms or data collection points, reducing attack surface but also limiting user interaction. The lack of privacy, cookie, and terms of service policies indicates compliance gaps, especially under GDPR. No incident response or security contact information is provided. Overall, the site is moderately trustworthy and functional for its purpose but would benefit from enhanced security practices, privacy compliance, and clearer business identity disclosures. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

R

Radenska d.o.o.

srcnozajutri.si

40

The website www.srcnozajutri.si is a well-developed corporate campaign platform for Radenska d.o.o., a Slovenian company focused on mineral water production and environmental sustainability. The site highlights Radenska's commitment to ecological projects such as tree planting, circular economy, green energy, water resource protection, and social sponsorships. It targets environmentally conscious consumers and local communities. Technically, the site uses modern web technologies, is mobile-optimized, and hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with cookie consent and a comprehensive cookie policy. Overall, the site reflects a trustworthy and professional brand presence with strong environmental and social responsibility messaging.

R

Revija GLOBAL

revijaglobal.si

55

Revija GLOBAL is a Slovenian media publication focused on issuing a monthly magazine, targeting Slovenian-speaking readers interested in its content. The website serves primarily as an informational portal for the magazine, offering sections about the publication, content, advertising, contact, and subscription. The business model revolves around magazine sales and advertising revenue, positioning it as a small local media entity founded in 2020. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, Google Fonts, and Google Tag Manager for analytics. The site shows basic mobile optimization and SEO practices but lacks advanced frameworks or CMS detection. Performance is moderate with room for improvement in accessibility and modern technical implementations. From a security perspective, the site lacks visible security headers and privacy or cookie policies, indicating potential GDPR compliance gaps. The SSL configuration could not be verified from the provided data, and no incident response or security policy information is available. Google Tag Manager is used for tracking, but no explicit consent mechanism is present. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is functional but basic, with moderate trustworthiness. Key recommendations include implementing HTTPS with strong SSL, adding security headers, publishing privacy and cookie policies, and providing clear contact information to improve compliance and user trust.

G

Gostovanje in domene NEOSERV.si

neoserv.si

58

NEOSERV.si is a well-established Slovenian web hosting and domain registration provider founded in 2009. The company offers a broad range of services including domain registration, web hosting (shared, reseller, turbo), email hosting, VPS and dedicated servers, and SSL certificates. Their market position is strong within Slovenia, targeting businesses, developers, and IT agencies seeking reliable and fast hosting solutions. The website demonstrates a professional design with clear navigation and good mobile optimization, supported by modern technologies and analytics tools. Security practices include HTTPS, anti-spam and anti-virus protections, and 2FA for email servers, although explicit security policies and incident response contacts are not publicly visible. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

R

Radenska ADRIATIC

radenska.si

51

Radenska ADRIATIC is a well-established beverage manufacturing company with a history dating back to 1869, specializing in mineral and spring waters, as well as carbonated and non-carbonated soft drinks. The company operates primarily in Slovenia and Croatia, offering a diverse portfolio of beverage brands and emphasizing quality and corporate responsibility. The website reflects a mature digital presence with good design, clear navigation, and active social media engagement. Technically, the site uses modern web technologies and Google Analytics for visitor insights, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Overall, the domain registration is consistent with the company's profile, supporting legitimacy and trustworthiness.

A

ArchiXL B.V.

archixl.nl

58

ArchiXL B.V. is a specialized Dutch company focused on enterprise and information architecture consulting, knowledge management platforms, and training services. Their website presents a professional and comprehensive overview of their offerings, targeting organizations seeking to improve their data, information, and knowledge management capabilities. The company positions itself as a trusted expert in the Dutch market with a strong emphasis on knowledge sharing and pragmatic solutions. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Tag Manager, and SVG graphics. The site is mobile optimized, accessible, and well-structured, providing a good user experience. Performance is moderate with no critical technical issues detected. However, the CMS appears custom or proprietary with no common CMS identified. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is available. Analytics usage is moderate with Matomo and Google Tag Manager tracking users, but privacy compliance is basic. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. There are no indications of malicious content or blocking mechanisms, making it fully accessible for analysis.

R

Renault Hrvatska

renault.hr

54

Renault Hrvatska operates as the official Croatian website for the Renault automotive brand, providing comprehensive information on new and used vehicles, financing options, after-sales services, and vehicle configurators. The website targets Croatian consumers interested in purchasing Renault vehicles, offering a broad portfolio including electric and hybrid models. The site reflects a mature digital presence consistent with a large automotive brand, supported by structured navigation and official branding. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Plausible Analytics, alongside a cookie consent mechanism compliant with GDPR signals. Security posture is strong with HTTPS enforced and privacy-respecting analytics loading conditioned on user privacy signals. However, explicit privacy policies, terms of service, and security incident response information are not directly visible in the provided content. WHOIS data confirms domain legitimacy and consistency with Renault's global presence. Overall, the site is professional, trustworthy, and well-optimized for its audience.

M

MONERE DIGITAL

themonere.net

45

MONERE DIGITAL is a Croatia-based small technology company specializing in innovative digital experiences, including 3D holographic displays and sound masking solutions. Their website showcases a professional portfolio with client testimonials and emphasizes creativity and problem-solving in marketing and communication technologies. The technical infrastructure is based on standard web technologies with moderate performance and good mobile optimization. However, the site lacks advanced security headers and explicit HTTPS enforcement details, and no privacy or cookie policies are present, indicating gaps in privacy compliance. The WHOIS data is consistent with the business claims, showing a domain registered since 2017 without privacy protection, supporting legitimacy. Overall, the website is professional but could improve security and privacy posture.

M

MICRO-LINK d.o.o.

microlink.hr

53

MICRO-LINK d.o.o. is a well-established Croatian telecommunications company founded in 1996, specializing in a broad range of communication technology solutions including private and public mobile networks, microwave radio systems, professional Wi-Fi, IoT, network, security, and defense systems. The company targets business and government sectors requiring reliable and advanced communication infrastructure. Their market position is solid within Croatia and the surrounding region, supported by partnerships with recognized technology providers and EU funding acknowledgments. Technically, the website employs a moderate technology stack with jQuery 1.8.3, Flexslider, and Slick Carousel, indicating a somewhat dated but functional infrastructure. The site is mobile optimized and provides a good user experience, though accessibility and SEO could be improved. Hosting and domain registration are consistent with the company's Croatian base. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and published security policies. The use of an outdated jQuery version presents a potential vulnerability. No exposed sensitive data or obvious vulnerabilities were detected. Privacy compliance is limited due to the absence of a privacy policy and terms of service. Overall, the website is professional and trustworthy with a strong business credibility score. However, improvements in privacy compliance, security best practices, and technical modernization are recommended to enhance security posture and regulatory adherence.

V

VDE VERLAG GmbH

et-magazin.de

58

The website energie.de hosts the magazine 'et - Energiewirtschaftliche Tagesfragen', a professional publication focused on the energy sector, covering news, expert articles, interviews, and future-oriented topics. Operated by VDE VERLAG GmbH, it targets professionals and stakeholders in the energy industry, providing specialized content and subscription services. The site demonstrates a solid market position as a specialized energy media publisher in Germany. Technically, the website is built on TYPO3 CMS with Yoast SEO integration, employing modern web technologies including JavaScript and CSS. Hosting is managed via agenturserver nameservers, indicating a professional hosting environment. The site is mobile-optimized with good SEO and basic accessibility features, delivering moderate performance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Advertising is managed transparently with GDPR consent, and analytics are performed via etracker with moderate user tracking. Overall, the website is professional, secure, and compliant with privacy regulations, suitable for its target audience. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

V

VDE VERLAG GmbH

ew-magazin.de

58

The website energie.de hosts the ew-Magazin, a specialized media platform focused on the energy sector in Germany. It provides current news, expert articles, interviews, and industry insights targeted at energy professionals and decision makers. The business operates as a media publisher under VDE VERLAG GmbH, offering both print and digital magazine content, including e-magazines and job listings. The site is well-positioned in the German energy media market with a consistent brand and professional content quality. Technically, the site is built on TYPO3 CMS with Yoast SEO integration, hosted on a professional hosting provider (agenturserver). It employs modern web technologies, is mobile optimized, and uses structured data for SEO. Performance is moderate with good SEO and accessibility basics. Advertising and analytics are implemented with user consent, primarily using AdSpirit and etracker. From a security perspective, the site enforces HTTPS and respects privacy with cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website demonstrates a solid business and technical foundation with good privacy compliance and a professional security posture. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

S

Slovenská asociácia poisťovní

slaspo.sk

55

Slovenská asociácia poisťovní (SLASPO) is a Slovak insurance industry association representing commercial insurance companies. The website serves as an informational and educational platform providing access to insurance statistics, legislative information, and key industry topics. The association aims to protect and promote the interests of its members in relation to government bodies and the public. The website is professionally designed with clear navigation and content relevant to its target audience of insurance professionals and the public. Technically, the site uses legacy jQuery 1.9.1 and Google Analytics for tracking, hosted on websupport.sk with DNSSEC and HTTPS enabled, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by updating libraries and adding security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and legitimate with a domain age consistent with the association's history.

V

vykup.sk s.r.o.

vykupzlata.sk

40

vykupzlata.sk is a Slovakian small retail business specializing in the purchase of gold and silver items including jewelry, coins, investment gold, and dental gold. The company operates primarily in Bratislava, offering competitive prices and immediate cash payments. The website provides detailed information about services, pricing, and contact details, positioning itself as a trustworthy local gold buyer with a strong customer rating. Technically, the website uses a traditional tech stack with Bootstrap and jQuery, managed via the GlobalWeb CMS platform. While functional and moderately optimized, the site lacks modern security headers and updated libraries, which could pose risks. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy measures.

J

JOER s.r.o.

vasaskrina.sk

40

JOER s.r.o. operates the website vasaskrina.sk, offering luxury custom furniture manufacturing services including built-in wardrobes, kitchen units, and wardrobes with an emphasis on online configurators for customer convenience. The company positions itself as a specialist with 15 years of experience in Slovakia, targeting consumers seeking tailored furniture solutions. The website is professionally designed with good navigation and content relevance, supporting a positive user experience. Technically, the site uses modern web standards, Google Fonts, and Google Tag Manager for analytics, hosted on a provider indicated by the nameservers (websupport.sk). Security posture is solid with HTTPS and DNSSEC enabled, though explicit security headers and cookie consent mechanisms are absent. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and functional with room for improvement in privacy compliance and security transparency.

Nomad Gym in Ericeira is a new fitness facility targeting nomadic travelers and fitness enthusiasts, scheduled to open in 2025 in Ericeira, Portugal. The website serves as a promotional landing page highlighting the gym's focus on flexible workout spaces, top-tier equipment, and ultra-fast Wi-Fi to support a mobile lifestyle. The business is positioned as a niche gym catering to the growing nomad community, with a small-scale operation and a clear target audience. Technically, the website is built with standard HTML, CSS, and JavaScript, hosted and DNS managed via Cloudflare. The site is mobile optimized and presents a professional design with good user experience. However, it lacks advanced frameworks, CMS, or analytics integrations, indicating a simple but effective digital presence. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No privacy or cookie policies are present, and no contact or incident response information is provided, which limits compliance and trust. There are no visible vulnerabilities or exposed sensitive data. Overall, the website is safe and professional but would benefit from enhanced privacy compliance, security headers, and contact information to improve trust and regulatory adherence. The domain registration is consistent with a new business launch, registered through a reputable registrar without privacy protection, which aligns with the business profile.

T

Ton a.s.

ton.cz

65

Ton a.s. is a well-established furniture manufacturer specializing in designed chairs and tables, with a heritage spanning over 160 years. The company targets a general audience interested in quality handcrafted furniture, positioning itself as a reputable player in the manufacturing sector. The website reflects this with professional design and clear branding, emphasizing craftsmanship and design excellence. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and includes SEO best practices such as meta tags and structured data. However, some technical improvements could be made, such as adding security headers to enhance protection. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism, indicating good privacy compliance. The extensive use of third-party analytics and marketing tools suggests a moderate to extensive user tracking level, but the presence of consent mechanisms aligns with GDPR requirements. The lack of a visible privacy policy or terms of service page is a minor gap. Overall, the website is professional and trustworthy, with no signs of malicious content or security risks. The domain WHOIS data is privacy protected, which is standard for .eu domains, and does not raise concerns. Strategic recommendations include publishing explicit privacy and security policies, enhancing security headers, and providing more direct contact information to improve transparency and trust.

W

Web studio Sto2

sto2.hr

41

Web studio Sto2 is a Croatian-based small technology company specializing in web design, online and mobile application development, graphic and print design, and software solutions. Established in 2012, the company serves primarily regional clients in Croatia and neighboring countries, with a portfolio including automotive, shipbuilding, healthcare, and other sectors. The website showcases a professional portfolio of client projects and emphasizes responsive design and custom CMS solutions. Technically, the site uses modern web technologies including Vue.js and jQuery, and integrates Google Analytics for user tracking. However, there are gaps in privacy compliance, notably the absence of privacy and cookie policies, which is critical for GDPR adherence given the regional focus. Security posture is moderate with no visible security headers or incident response information, but no critical vulnerabilities were detected in the content. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

M

Microsoft

dot.net

73

The website https://dotnet.microsoft.com/en-us/ is an official Microsoft subdomain dedicated to the .NET developer platform. It provides tools, libraries, and resources for building modern applications across various platforms including web, mobile, desktop, games, IoT, and cloud services. The site is professionally designed, well-branded, and targets software developers and IT professionals globally. It leverages Microsoft Azure for hosting and monitoring, indicating a mature technical infrastructure. Security posture is strong with HTTPS enforced and modern security headers present, although explicit security policies and incident response contacts are not directly visible. Privacy compliance is partially addressed with a cookie consent mechanism but lacks visible privacy policy and terms of service links. Overall, the site is trustworthy, technically sound, and aligned with Microsoft’s enterprise standards.

M

Mono Project

mono-project.com

63

The Mono Project website presents a mature, open source software platform focused on cross platform .NET development. Sponsored by Microsoft and part of the .NET Foundation, it serves developers seeking to build applications across multiple operating systems. The site emphasizes the project's history, community involvement, and transition of stewardship to WineHQ, reflecting a legacy technology with ongoing maintenance and migration recommendations. Technically, the website employs modern web technologies including Foundation CSS, jQuery, FontAwesome, and Highlight.js, delivering a responsive and accessible user experience. The presence of a cookie consent banner and privacy links indicates attention to privacy compliance, though explicit security headers and vulnerability disclosure mechanisms are absent. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, though the website content and external links strongly support authenticity. No adult or questionable content is present, and the site is free from blocking or WAF challenges. Overall, the site is professional and trustworthy from a content perspective but would benefit from improved transparency in domain registration, enhanced security headers, and published security policies to strengthen trust and compliance.

S

Semantic MediaWiki

semantic-mediawiki.org

55

Semantic MediaWiki is an established open-source software extension to MediaWiki that enables semantic data storage and querying within wiki pages, transforming wikis into powerful knowledge management systems. The project is supported by an active community and sponsorships, positioning it as a niche leader in semantic wiki technology. The website is professionally designed, well-structured, and provides comprehensive resources for users, developers, and administrators. Technically, it leverages MediaWiki 1.31.16, jQuery, Bootstrap, and Semantic Result Formats, indicating a mature but somewhat dated technology stack. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its community presence and sponsorships. Overall, the site is trustworthy and serves its target audience effectively.

@

@levelsio.com | techno optimist wear

levelsio.com

10

The website levelsio.com operates as a niche e-commerce platform specializing in techno optimism themed merchandise, including apparel and accessories. Founded in 2017, it targets a small but dedicated audience interested in technology-positive lifestyle products. The business leverages the Fourthwall e-commerce platform for its online store, integrating modern payment processing and analytics tools. The site demonstrates a good level of digital maturity with fast performance, mobile optimization, and consistent branding. However, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Technically, the site uses a modern tech stack including HTML5, CSS3, JavaScript, Google Tag Manager, Microsoft Clarity, and Stripe for payments. Hosting and DNS are managed via Cloudflare, providing robust infrastructure and security. The site employs HTTPS with excellent SSL configuration and some security best practices such as reCAPTCHA Enterprise for bot protection. However, DNSSEC is not enabled, and explicit security headers like Content-Security-Policy are not evident. From a security perspective, the site is well-protected against common threats but could improve by publishing formal privacy, cookie, and security policies, as well as a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. The absence of contact information and data protection officer details limits transparency and trust. Overall, levelsio.com is a professionally designed and secure e-commerce site with moderate privacy compliance and business credibility. Strategic improvements in privacy documentation and user consent mechanisms would enhance its trustworthiness and compliance posture.

H

Hrvatsko društvo sudskih vještaka i procjenitelja

sudski-vjestaci.hr

53

Hrvatsko društvo sudskih vještaka i procjenitelja (HDSVIP) is a Croatian non-profit professional association dedicated to the advancement of court experts and appraisers. Established in 2004, it serves as a voluntary, non-governmental, and non-partisan organization focused on improving the role and institution of court experts within the judiciary and related institutions. The association is a recognized member of international bodies such as EuroExpert, HUM, and TEGoVA, enhancing its credibility and network. The website provides information about the association's initiatives, news, events, and resources for members and the public. Technically, the website is built using standard HTML5, CSS, and JavaScript with jQuery 1.8.3. It is hosted behind Cloudflare DNS services, suggesting HTTPS usage, although explicit security headers are not visible in the provided data. The site has a moderate performance profile with basic mobile optimization and accessibility features. Navigation is clear and content is professionally presented, targeting professionals in the judiciary and appraisal sectors primarily in Croatia. From a security perspective, the site shows some good practices such as using Cloudflare and secure form submission for member login. However, the use of an outdated jQuery version and absence of visible security headers indicate potential vulnerabilities. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from updates to its security posture and privacy compliance. Strategic improvements in these areas would enhance user trust and regulatory adherence.

@

@levelsio.com | techno optimist wear

makeeuropegreatagain.co

67

The website levelsio.com is an e-commerce platform specializing in branded apparel and merchandise themed around techno optimism and European identity. It offers a niche collection of products such as organic cotton t-shirts, hats, hoodies, mugs, and stickers. The business appears to be small-sized, founded in 2017, and operates primarily online with a focused target audience interested in techno optimism and European culture. The site is powered by the Fourthwall platform and hosted via Cloudflare, indicating a modern and scalable technical infrastructure. Technically, the website employs a robust stack including Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, TikTok Analytics, Klaviyo for marketing, Stripe for payments, and Google reCAPTCHA Enterprise for bot protection. The site is mobile-optimized, fast-loading, and uses HTTPS with a valid SSL configuration. However, DNSSEC is not enabled, and some recommended security headers are missing, which could be improved to enhance security posture. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent mechanisms, and bot protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and appear GDPR compliant, though no explicit security policy or incident response information is published. The domain WHOIS data is consistent and legitimate, with no privacy protection, indicating transparency. Overall, the website is professionally designed, secure, and compliant with privacy regulations, serving a niche retail market effectively. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

O

ORPA Papír a.s.

orpa.cz

59

ORPA Papír a.s. is a well-established Czech manufacturer specializing in paper-based tubular packaging solutions, including Tubusbox and paper tubes, serving food and industrial sectors. With over 140 years of tradition and multiple ISO and industry certifications, the company positions itself as a reliable and quality-focused packaging partner. The website reflects a professional and modern digital presence with rich multimedia content, clear navigation, and multilingual support. Technically, the site uses modern frameworks and tracking technologies with appropriate consent mechanisms, hosted by a reputable Czech provider. Security posture is good with HTTPS and consent management, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the company's history and location, supporting legitimacy.

Z

ZB Invest

zbi.hr

62

ZB Invest is a Croatian financial investment company specializing in investment funds and related services. The website provides fund pricing, yield data, calculators, and contact options primarily targeting Croatian investors. The domain is well-established since 2000 and hosted with professional infrastructure including Akamai CDN services. The website uses standard JavaScript libraries for UI and data visualization but lacks modern CMS or frameworks. Security posture is basic with no visible security headers or privacy policies, and no contact information is explicitly provided in the analyzed content. Overall, the site is functional but could improve in privacy compliance and security best practices.

G

Games Croatia

gamescroatia.com

61

Games Croatia is an official project website dedicated to promoting the gaming industry and innovation within Croatia. The site serves as a hub for information about the project, its partners, public funding opportunities, and activities related to the Croatian games sector. The website targets game developers, industry stakeholders, and governmental bodies interested in fostering growth and collaboration in the gaming ecosystem. The business model appears to be informational and collaborative, supported by public or governmental funding, positioning itself as a niche regional initiative with a focus on technology and innovation. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google reCAPTCHA for form security, and Google Fonts for typography. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS and HSTS, uses reCAPTCHA to protect forms, and does not expose sensitive data or vulnerable libraries. However, privacy compliance could be improved by implementing a cookie consent mechanism and publishing explicit security and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and partner affiliations suggest legitimacy. Overall, the site presents a professional and trustworthy front for the Games Croatia project but would benefit from enhanced privacy compliance and clearer domain registration information to strengthen trust and regulatory adherence.

F

Fortressa

fortressa.com

55

Fortressa is a technology company providing an app store platform for open-source applications, enabling organizations to replace costly per-seat SaaS products with self-hosted, privacy-focused alternatives. The website presents a clear business model centered on cost savings, data ownership, and customization for businesses seeking control over their software stack. The company appears to be established, with a domain registered since 2004 and a consistent brand presence. Technically, the website uses modern front-end technologies such as Tailwind CSS, Alpine.js, and HTMX, delivering a responsive and user-friendly experience. The site is hosted securely with HTTPS, though some security best practices like DNSSEC and security headers are not fully implemented. Analytics are handled via Shynet, a privacy-conscious alternative, indicating a commitment to user privacy. Security posture is moderate; while HTTPS is enforced and forms include basic anti-bot challenges, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Contact options include email forms and social media, but no phone or physical address is provided. Overall, Fortressa presents a trustworthy and professional online presence with a niche focus on open-source SaaS alternatives. Strategic improvements in security headers, DNSSEC, and privacy compliance would enhance their security posture and regulatory alignment.

BIS Bremerhaven is a regional economic development organization focused on supporting businesses and sustainable growth in the Bremerhaven area of Germany. The website presents a professional and well-structured digital presence, offering information on business services, networking, sustainability initiatives, and sector-specific support. The company targets local businesses, entrepreneurs, and investors, positioning itself as a key regional economic facilitator. Technically, the website uses modern web technologies including JavaScript and Cookiebot for GDPR-compliant cookie management, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published security policies and advanced security headers. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found in the provided content. Overall, the website is trustworthy and professional, with room for improvement in security transparency and privacy documentation.

Eyrie Solutions is a small technology company specializing in software licensing and professional services related to the Tcl/Tk IronTcl binary distribution and the Eagle project. Their offerings include licensing, commercial licenses for open-source and proprietary plugins, as well as consulting and support services tailored to native Tcl/Tk and Eagle integration. The website presents a focused business model targeting developers and organizations requiring these niche software solutions. Technically, the website is built with standard HTML and CSS, utilizing Google Fonts for typography. The site is basic in design and mobile optimization but provides clear navigation and relevant content. Security posture is limited based on the provided data, with no visible HTTPS confirmation or security headers, and no privacy or cookie policies, indicating compliance gaps. No WHOIS data is available due to TLD limitations, which reduces transparency but does not necessarily indicate illegitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures and compliance documentation.

E

Eclipse Foundation AISBL

eclipse.foundation

73

The Eclipse Foundation AISBL is a well-established international non-profit organization based in Brussels, Belgium, dedicated to fostering open source software collaboration and innovation. It supports a large global community with over 410 open source projects and more than 360 members worldwide. The foundation provides a vendor-neutral environment that promotes industry-ready open source innovation across multiple technology sectors including cloud, automotive, IoT, and AI. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built using modern technologies such as the Hugo static site generator, Google Tag Manager for analytics, and FontAwesome for icons. It demonstrates good performance, mobile optimization, and accessibility. SEO best practices are followed with proper meta tags and structured navigation. The site uses HTTPS exclusively, ensuring secure communications. From a security perspective, the site implements cookie consent mechanisms and maintains privacy and legal policies that indicate GDPR compliance. However, explicit security headers are not detected in the HTML content, and no security.txt file is published for vulnerability disclosure. No exposed sensitive data or vulnerabilities are apparent. The WHOIS data is privacy protected, which is appropriate for a non-profit of this scale, though it limits direct verification of domain registration details. Overall, the Eclipse Foundation website presents a trustworthy, professional, and secure platform for its community and stakeholders. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to further strengthen security posture and transparency.

A

aliam S.A.

aliam.ch

48

aliam S.A. is a Swiss export company specializing in the distribution of laboratory equipment, representing world-leading manufacturers. The website presents a professional and consistent brand image, targeting businesses in the laboratory equipment sector. The company operates primarily as an exporter and distributor within the manufacturing industry in Switzerland. The digital infrastructure is based on WordPress with the Divi theme, leveraging WooCommerce assets, indicating a modern and flexible platform. The site demonstrates good SEO practices and moderate performance with mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.

nLab sp. z o.o. is a specialized distributor and authorized service provider of scientific measurement instruments operating primarily in Poland and the Baltic states since 1998. The company represents several international brands in electrochemistry, surface plasmon resonance, and tensiometry, offering both sales and technical support including warranty services. Their market position is that of a trusted regional leader in niche scientific instrumentation with a focus on research and industrial R&D customers. Technically, the website is built on a CMS Made Simple platform using classic web technologies such as jQuery and CSS, providing a functional but somewhat dated user experience with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

M

Mirek Beneš

mirekbenes.cz

43

Mirek Beneš operates as a freelance frontend developer based in the Czech Republic, offering specialized services in HTML template coding, JavaScript programming, WordPress development, graphic design, and email newsletter coding. The website serves as a professional portfolio showcasing client references and detailed service offerings, targeting businesses and clients across the Czech Republic seeking quality frontend development and web design solutions. The business model is focused on external collaboration and contract work, with a clear emphasis on usability and modern web standards. Technically, the website is well-constructed using modern web technologies including HTML5, CSS3, SVG graphics, and JavaScript libraries such as Swiper.js for carousels. The site is mobile-optimized, fast-loading, and SEO-friendly, with minimal but privacy-conscious analytics implemented via Plausible Analytics. However, there is no detected CMS or hosting provider information, and no advanced frameworks are identified. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture and transparency. Overall, the website presents a professional and trustworthy image for a small freelance business but would benefit from improved privacy compliance and security best practices. The absence of WHOIS data reduces domain trustworthiness slightly, but the content quality and business transparency mitigate this concern. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response contacts to strengthen compliance and security.

B

Baltnetos komunikacijos, UAB

tellq.io

61

Tellq.io is a Lithuanian-based technology company operating under Baltnetos komunikacijos, UAB, founded in 2016. The company offers Tellq Multi, a SaaS platform designed to streamline multi-channel customer support and sales through email, chat, phone, and SMS. Positioned as an emerging enterprise solution, Tellq emphasizes features such as a unified inbox, communication history, notifications, analytics, and team collaboration to enhance customer service efficiency. The website reflects a professional and consistent brand image with clear calls to action for early access, targeting businesses seeking advanced customer support tools. Technically, the site employs modern web technologies including SVG graphics, JavaScript, and Cloudflare DNS services, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial, with a privacy policy and terms of service present but lacking cookie consent mechanisms and GDPR explicit indicators. Overall, the domain registration aligns well with the business identity, supporting a high legitimacy score.

B

The 20 best boutique hotels in Madrid

boutiquehotels-madrid.com

52

The website boutiquehotels-madrid.com is a specialized online platform focused on showcasing and facilitating bookings for boutique hotels in Madrid. It offers curated hotel listings with detailed descriptions, ratings, and booking links, targeting travelers seeking unique and stylish accommodations. The site also provides guidance on local dining and nightlife, enhancing the visitor experience. Technically, the site employs modern web technologies and is hosted with Cloudflare DNS services, ensuring reasonable performance and availability. However, it lacks some advanced security measures such as DNSSEC and security headers, and does not publish privacy or cookie policies, which are important for compliance and user trust. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.