Security Directory

S

Saito Media

saitomedia.eu

47

Saito Media is a small technology-focused creative solutions company specializing in brand development, content marketing, graphic design, web and app development, UX design, and creative advertising. The company targets businesses seeking to meet digital transformation goals with innovative and tailored digital strategies. The website demonstrates a professional market position with over 5 years of experience and a high client satisfaction rate, supported by a portfolio of recent projects. Technically, the site is built on WordPress using Elementor and the Porto theme, leveraging modern web technologies such as jQuery and Bootstrap. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but could be improved by implementing additional security headers and publishing security policies. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR indicators. Overall, the website is trustworthy, professional, and well-structured, supporting the company’s business credibility effectively.

Z

Základní škola a gymnázium Navis

msratolest.cz

54

Základní škola a gymnázium Navis is a private educational institution in the Czech Republic offering preschool, primary, and gymnasium level education. The school emphasizes values-based education founded by families, aiming to develop children and students intellectually, personally, and spiritually. Their website reflects a professional and modern digital presence with clear navigation and comprehensive information about their educational offerings and community activities. The institution targets students, parents, and prospective families seeking quality education in a nurturing environment. Technically, the website is built on the Dmp.Cms.Core platform, utilizing modern web technologies such as jQuery, Bootstrap, and Owl Carousel. Media assets are hosted on Microsoft Azure Blob Storage, indicating a reliable hosting infrastructure. The site is mobile-optimized and includes SEO best practices, cookie consent management, and analytics integration via Google Analytics and Google Tag Manager. From a security perspective, the site enforces HTTPS and uses anti-forgery tokens in forms, demonstrating good baseline security hygiene. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious content were detected, and the site is free from adult or questionable material. Overall, the website presents a trustworthy and professional front for the educational institution, though the absence of WHOIS data limits full domain legitimacy assessment. Strategic recommendations include adding security headers, publishing security policies, and enhancing incident response transparency to strengthen security posture and stakeholder confidence.

П

ПРОФИ КРЕДИТ България ЕООД

proficredit.bg

48

PROFI CREDIT Bulgaria EOOD operates as a fast credit provider offering installment loans ranging from 100 BGN to 5000 BGN with flexible repayment terms. The company targets Bulgarian individuals aged 18 to 80, providing quick loan approvals with minimal formalities. The website demonstrates a solid market position with over 17 years of experience and multiple physical offices across Bulgaria. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics. Security posture is good with HTTPS enforced and GDPR compliance evident through privacy and cookie policies. No critical vulnerabilities were detected, and the site maintains trust through certifications and customer testimonials. Overall, the website is professional, secure, and compliant, supporting the company's credibility in the Bulgarian financial services market.

P

PROFI CREDIT Polska S.A.

proficredit.pl

62

PROFI CREDIT Polska S.A. is a well-established financial services company operating in Poland since 2004, specializing in non-bank consumer loans up to 25,000 PLN. The website presents a professional and user-friendly platform offering quick loan applications with minimal formalities, supported by customer testimonials and partner affiliations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned policies and a clearly identified Data Protection Officer. Overall, the site reflects a credible and trustworthy financial service provider with good digital maturity.

C

Castr - Live Video Streaming

castr.com

71

Castr is a mature technology company specializing in live video streaming and video hosting solutions, offering enterprise-grade services including multi-streaming and pre-recorded live events. The company positions itself as a leading provider in the live streaming market, targeting content creators and enterprises globally. The website is built on WordPress with modern frameworks like Elementor and Bootstrap, integrating multiple analytics and marketing tools to support business operations and user engagement. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be enhanced by enabling DNSSEC and implementing security headers. Privacy compliance is minimal with no explicit privacy or cookie policies detected, which may pose compliance risks. Overall, the website is professional, well-branded, and trustworthy, but would benefit from improved transparency in privacy and security policies.

SIRO-Poland Sp. z o. o. operates as the exclusive distributor in Poland for decorative furniture accessories, including handles, knobs, LED lighting, and decorative mats. The company targets furniture manufacturers, wholesalers, retailers, and interior designers, positioning itself as a key player in the Polish furniture accessory market. The website reflects a professional business presence with clear product offerings and partner relationships. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks some security headers and formal privacy/cookie policies, which are areas for improvement. Overall, the site is trustworthy and well-maintained, supporting the company's market position.

Semaco Real Estate is a specialized real estate advisory and sales company operating primarily in Kraków, Poland. With over two decades of experience and a portfolio of more than 30 investments and approximately 1500 sold apartments, the company positions itself as a trusted local expert in both primary and secondary real estate markets. Their services encompass guiding clients through the entire property transaction process, including financing assistance and new development projects. The website reflects a professional and customer-focused approach, emphasizing quality housing and client satisfaction. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA, hosted likely by home.pl S.A. The site is mobile optimized and uses EstiCRM as its content management system. Performance is moderate with good SEO and accessibility basics. Tracking and marketing tools such as Google Analytics and Facebook SDK are integrated, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in hardening the website. No critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security configurations and transparency around security policies would enhance the company’s risk posture and customer trust.

O

Ombudsstelle für Investmentfonds

ombudsstelle-investmentfonds.de

54

The Ombudsstelle für Investmentfonds website serves as an official platform for a recognized private consumer dispute resolution body in the German investment fund sector. It provides consumers with an accessible, free, and out-of-court mechanism to resolve conflicts with fund companies, including binding arbitration up to 10,000 euros. The site is well-positioned within the finance industry, supported by the BVI association and recognized by the Bundesamt für Justiz, enhancing its credibility and trustworthiness. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, hosted on Colt infrastructure. It demonstrates good mobile responsiveness and SEO practices, though some improvements in accessibility and security headers could be made. The cookie consent mechanism is implemented, supporting GDPR compliance. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. The WHOIS data aligns with the business history and domain age, supporting legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving its niche audience effectively. Strategic improvements in security transparency and contact information would further strengthen its posture.

The website www.b2bpoptavka.cz operates as a B2B marketplace platform specializing in connecting businesses with tenders and public contracts primarily in the Czech Republic. Managed by ALSENTA s.r.o., the platform has a strong market presence with over 540,000 inquiries and a broad category coverage. The business model focuses on facilitating procurement and supplier matching, targeting companies seeking new customers and contract opportunities. The site is professionally designed with clear navigation and a responsive layout, supporting a positive user experience for its target audience. Technically, the website leverages modern frontend technologies including Bootstrap, jQuery, and Google services such as Analytics and Adsense. The infrastructure supports moderate performance and good mobile optimization. However, no CMS or hosting provider details were identified. The site implements cookie consent mechanisms aligned with GDPR requirements, enhancing privacy compliance. From a security perspective, the site enforces HTTPS and uses consent banners for cookies, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection limits domain trust verification, though the website content and business information appear legitimate and professional. Overall, the website presents a solid business platform with good technical and privacy compliance maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

P

PERSKIMEDIA Szymon Perski

chb14.pl

56

CHB14 is a modern office building located in Kraków, Poland, offering high-standard office spaces with flexible layouts across five floors. The business targets companies seeking premium office rental spaces with amenities such as 24/7 security, underground parking, and energy-efficient solutions. The website reflects a professional real estate leasing business with a clear market position in the Kraków commercial property sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is good with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong with comprehensive cookie and privacy policies and a consent mechanism. Overall, the website is trustworthy, well-designed, and suitable for its business purpose.

A

ACATOM Sp. z o.o.

acatom.pl

52

ACATOM Sp. z o.o. is a Polish real estate developer with over 15 years of experience, specializing in residential property development across multiple cities including Warsaw, Rzeszów, Katowice, and Kraków. The company emphasizes environmentally conscious construction using proven materials and offers modern, functional apartments at accessible prices. Their market position is that of an established regional developer with a solid portfolio and ongoing projects. Technically, the website is built on WordPress with modern frameworks and plugins, featuring good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, consent management, and reCAPTCHA integration, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. No critical vulnerabilities or suspicious indicators were found, supporting a high legitimacy score.

L

LANCOM Systems GmbH

lancom-systems.de

69

LANCOM Systems GmbH is a German-based technology company specializing in business network and security solutions including WAN, LAN, WLAN, firewalls, and remote/mobile access. The company targets business and public sector customers, offering a comprehensive portfolio of hardware and software products engineered in Germany. Their market position is that of an established mid-sized enterprise with a strong focus on secure and reliable network infrastructure. The website is professionally designed, multilingual, and provides detailed product and service information, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap framework, employs modern tracking and marketing tools with consent mechanisms, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit incident response and vulnerability disclosure pages are absent. Overall, the site is trustworthy, compliant with GDPR, and reflects a credible business entity with strong partner ecosystems.

Inforpol Net is a Polish technology company specializing in web design, domain registration, dedicated servers, IT services, programming, and online advertising. Established in 1996, the company has evolved from print directories to a comprehensive digital service provider with a strong local presence. Their market position is supported by a portfolio of over 1500 projects and more than 4500 satisfied clients, targeting primarily Polish businesses seeking professional IT and marketing solutions. The company holds a Google Partner certification, enhancing its credibility in digital advertising services. Technically, the website is built on WordPress using Bootstrap and jQuery, with integrations for Piwik PRO analytics and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices. Hosting appears to be managed via NDC-related domains, consistent with the company's service offerings. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response information are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, Inforpol Net presents a trustworthy and professional online presence with good compliance and security posture. Strategic improvements in security headers and public security policies could further enhance their risk management and customer trust.

M

Medycyna Praktyczna

mp.pl

62

Medycyna Praktyczna is a leading Polish medical portal providing comprehensive, evidence-based medical knowledge and educational resources for healthcare professionals and patients. The website offers a wide range of services including medical articles, educational programs, webinars, podcasts, and access to medical publications. It targets primarily doctors and medical specialists, positioning itself as a trusted source of medical information in Poland. The portal demonstrates a mature digital infrastructure with modern technologies such as Bootstrap, Google Tag Manager, and multiple analytics and advertising platforms integrated with GDPR-compliant consent management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of public WHOIS data is typical for .pl domains and does not detract from the site's legitimacy given its professional content and market presence. Overall, the website is well-designed, content-rich, and trustworthy, serving a critical role in the Polish healthcare information ecosystem.

C

CRANE

crane.hr

9

CRANE.hr is the official website of the Croatian Investors and Business Angels Association, the oldest such organization in Croatia, focused on connecting private investors with innovative early-stage companies. The website serves as a platform for sharing news, events, and resources related to investment and entrepreneurship in Croatia. It targets private investors and startups seeking early-stage funding, positioning itself as a key national player in the investment ecosystem. The business model revolves around networking, knowledge sharing, and facilitating investments. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO, WPML for multilingual support, Contact Form 7 for contact forms, and WPBakery Page Builder for layout management. The site is hosted by a Croatian hosting provider, cyber_Folks d.o.o., and uses HTTPS with a valid SSL certificate. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and some security plugins (e.g., Wordfence), but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is professional and trustworthy with good business credibility and content quality. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

D

Dematis

e-assemblees.com

10

E-assemblees.com is a French SaaS platform operated by Dematis, specializing in secure electronic voting and meeting management for various deliberative assemblies including elected officials, shareholders, co-owners, and social-economic committees. The platform offers comprehensive services such as secure convocation sending, agenda and resolution management, electronic voting, and distribution of meeting minutes, accessible across devices with a focus on compliance and security. The company positions itself as a trusted third party with hosting in France and multi-factor authentication to ensure data protection and service availability. Technically, the website employs modern web technologies including jQuery, Bootstrap, Firebase Messaging, and PWA features, hosted by OVH sas. The site is mobile-optimized and uses lazy loading and parallax effects for enhanced user experience. SEO and accessibility are adequately addressed, though accessibility could be improved. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced, multi-factor authentication, and hosting on geo-distributed French sites. However, DNSSEC is not enabled, and security headers are missing, which are recommended improvements. No explicit security policy or incident response contacts are published. Privacy compliance is good with GDPR-aligned policies present, though cookie consent mechanisms could be enhanced. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain age and WHOIS data support legitimacy. Strategic recommendations include enabling DNSSEC, publishing security policies, adding security headers, and improving cookie consent transparency to further strengthen security and compliance.

D

Dematis

dematis.com

56

Dematis is a French technology company specializing in digital dematerialization solutions primarily serving public sector entities and businesses involved in public procurement and electronic document management. Established in 2003, Dematis holds a strong market position as a leader in France with multiple specialized platforms offering services such as electronic public procurement, electronic convocations, secure storage, and electronic signatures. The company emphasizes secure and legally compliant digital workflows, supported by certifications like RGS** and eIDAS. Technically, the website employs modern frameworks such as Bootstrap and jQuery, hosted by OVH sas, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection statuses, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with policies present but lacks active cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

K

KaffeeShop 24 GmbH

teekontor.de

54

KaffeeShop 24 GmbH operates the Sylter Teekontor online shop specializing in premium teas inspired by the island of Sylt. The company offers a wide range of teas including black, green, fruit, herbal, and specialty blends, emphasizing quality, natural ingredients, and sustainability with bio-certification. The website targets tea enthusiasts and connoisseurs seeking exclusive and high-quality tea products. Technically, the site is built on the Shopware 6 platform, uses modern JavaScript libraries, integrates PayPal for payments, and employs Google reCAPTCHA v3 for bot protection. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and legal pages.

L

LANCOM Systems GmbH

lancom.de

69

LANCOM Systems GmbH is a German-based technology company specializing in business network and security solutions including WAN, LAN, WLAN, firewalls, and remote access. The company targets business and public sector customers, offering a comprehensive product portfolio and services designed to ensure secure and reliable network infrastructure. The website is professionally designed, multilingual, and powered by TYPO3 CMS, reflecting a mature digital presence with good technical infrastructure and modern web technologies. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although some security best practices like explicit security headers and vulnerability disclosure mechanisms could be improved. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its B2B audience.

K

Kreditz

kreditz.com

76

Kreditz is a Sweden-based fintech company specializing in open banking and PSD2 data analytics to facilitate intelligent credit and risk decisions. Their offerings include consumer and business account certificates, leveraging consent-based data and AI technology to improve credit decisioning processes. The company targets financial institutions and businesses requiring advanced credit risk insights, positioning itself as a leader in the open banking data space. Technically, the website is built on modern frameworks such as React.js, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools including HubSpot, Google Analytics, Hotjar, and LinkedIn Insight. Security posture is strong with HTTPS enforcement, domain registration protections, and cookie consent management via Cookiebot, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Kreditz demonstrates a mature digital presence with good privacy compliance and professional branding, though improvements in transparency around security policies and terms of service would enhance trust further.

D

DALTEN media s.r.o.

irest.cz

54

iRest.cz is a Czech Republic based SaaS provider offering comprehensive real estate management software tailored for real estate agencies and brokers. The company, DALTEN media s.r.o., founded in 2006, positions itself as an established player with over 250 agencies using its platform. The website presents tiered subscription models with clear pricing and features, emphasizing efficiency and cost savings for clients. The business model focuses on software subscriptions integrated with real estate listing portals and web presentation services. Technically, the website employs modern JavaScript frameworks, asynchronous script loading, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR through linked policies. Recommendations include enhancing security headers, publishing terms of service, and formalizing incident response contacts to improve trust and compliance.

The analyzed website is a login portal for a service branded as iCC, likely related to Interact Cloud Control or a similar business platform. The page is minimalistic, focused solely on user authentication, with no additional business or policy information presented. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, and ASP.NET Core (.NET 6.0), indicating a contemporary development stack. The site is accessible without any web application firewall or security challenge blocking, allowing full content analysis. Security measures include the use of anti-forgery tokens and password input best practices, but lack visible security headers and privacy policies, which are areas for improvement. The absence of WHOIS data for the subdomain is typical and does not indicate risk, but limits domain trust assessment. Overall, the site is functional but basic in content and security posture.

V

Verband Deutscher Brieftaubenzüchter e.V.

dbtv1884.de

44

The Verband Deutscher Brieftaubenzüchter e.V. operates a well-structured and content-rich website serving the German pigeon breeding community. The site provides comprehensive information about the association, its services, and related activities such as the Taubenklinik and publications. The technical infrastructure is based on Joomla CMS with modern plugins and a responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though some security headers and explicit policies could be improved. Overall, the website reflects a legitimate, established non-profit association with a strong market position in its niche. Strategic recommendations include enhancing security headers, publishing incident response policies, and expanding transparency around data protection.

D

Dematis

e-signaturesecurisee.com

47

The website e-signaturesecurisee.com is a French-language platform offering free electronic signature and signature verification tools primarily targeted at users equipped with valid digital certificates. It is part of the Dematis group ecosystem, which provides various related digital legal and administrative services. The site is professionally designed with clear navigation and good mobile responsiveness, leveraging technologies such as Bootstrap, jQuery, and Java applets for its core functionality. However, the use of Java applets may pose compatibility and security challenges in modern environments. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and links to Dematis and partner domains support its authenticity. Privacy compliance is partially addressed with a privacy policy, but lacks cookie consent mechanisms and terms of service pages. Security posture is moderate with HTTPS implied but missing explicit security headers and policies.

L

Løgmansskrivstovan

logir.fo

57

The website logir.fo is the official Faroese legal database managed by Lógartænastan within the Ministry of Justice (Løgmálaráðið). It serves as an authoritative source for Faroese laws, regulations, and legal documents, updated regularly following official publications. The target audience includes legal professionals, government officials, and the general public seeking access to Faroese legislation. The business model is government-operated, providing free access to legal information with a focus on transparency and public service. Technically, the website employs a modern but straightforward tech stack including Bootstrap, jQuery, Font Awesome, and other JavaScript libraries to provide a responsive and user-friendly interface. The site is mobile-optimized and offers structured search capabilities for legal documents. Performance is moderate, with room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. Google Analytics is used for user tracking without visible consent mechanisms. Overall, the website is trustworthy and professionally maintained, reflecting its government affiliation. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing incident response contact details to improve compliance and security maturity.

F

Fischer Sanitär und Heizungstechnik GmbH & Co

myfischer.de

60

myFischer is a specialized regional master craftsman company operating in the Nürnberg-Fürth-Erlangen metropolitan area, focusing on heating technology, bathroom renovations, and energy solutions such as photovoltaic systems. The company offers comprehensive services from planning to implementation, targeting homeowners and commercial clients seeking modern, efficient, and customized solutions. Their market position is strengthened by awards, certifications, and a strong portfolio of customer testimonials, reflecting high customer satisfaction and trust. Technically, the website is built on the Chimpify CMS platform, utilizing modern web technologies including Bootstrap and jQuery. The site is mobile-optimized and features good SEO practices, though there is room for improvement in accessibility and security headers. The presence of tracking scripts and a cookie consent mechanism indicates compliance with privacy regulations, though data retention policies are not explicitly stated. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing consistent domain registration and hosting information. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for a small regional business. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and compliance standing.

S

Sundqvist AS

sundqvistnorge.no

63

Sundqvist AS is a Norwegian representative of Sundqvist AB, specializing in premium kitchen tools and accessories distributed across the Nordic and Baltic regions. Established in 1963, the company serves retailers and restaurant wholesalers with a portfolio of high-quality kitchen knives, glassware, and related products. The website reflects a professional retail business with clear branding and a focus on premium kitchenware. Technically, the site uses modern web technologies including Bootstrap and JavaScript libraries for enhanced user experience and responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy and well-positioned in its market segment, though the lack of publicly available WHOIS data slightly limits domain trust verification.

C

CRESS Auvergne-Rhône-Alpes

ambition-ess.org

52

The website 'Ambition ESS Auvergne Rhône Alpes' serves as a comprehensive regional portal dedicated to the Social and Solidarity Economy (ESS) in the Auvergne Rhône-Alpes region of France. It provides a wide range of services including news, job and volunteer offers, event listings, thematic resources, and territorial filtering to support ESS actors. The platform is funded and supported by recognized regional authorities and organizations, notably the CRESS Auvergne-Rhône-Alpes. Technically, the site is built on Drupal 8 with modern front-end technologies and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security-wise, HTTPS is enforced and cookie consent mechanisms are in place, though some security headers could be improved and explicit security policies are absent. The WHOIS data is incomplete or unavailable, which slightly reduces domain trustworthiness, but the overall content and partner endorsements strongly indicate legitimacy. No adult or questionable content is present, making the site safe for general audiences.

E

E-marchespublics : Appel d'offre public et dématérialisation des marchés publics

e-marchespublics.com

50

The website www.e-marchespublics.com is a French-language platform specializing in public tenders and the digital dematerialization of public procurement processes. It targets enterprises and public sector buyers in France, offering services such as access to over 600,000 public tenders annually, secure electronic submission of offers, alerts, and automatic form filling. The platform is positioned as a key player in the French public procurement market, providing comprehensive access to tender documents and related services. Technically, the site employs modern web technologies including Google Tag Manager, Didomi Consent Management Platform, Bootstrap, and jQuery UI, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and integrates consent management for GDPR compliance, although explicit privacy and security policy pages are not detected. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and service offerings appear professional and legitimate. Overall, the site demonstrates a moderate to good security posture with room for improvement in publishing security policies and enhancing security headers.

Vinařství Winberg Mikulov is a small, regionally focused winery based in South Moravia, Czech Republic, specializing in quality white and red wines. The website supports their business model by offering an e-shop for wine sales, accommodation services, and event hosting such as tastings and teambuilding. The site is professionally designed using Bootstrap and includes mobile optimization and clear navigation. However, the technical infrastructure uses some outdated components such as the legacy Google Analytics ga.js script. Security posture is moderate with HTTPS implied but lacking explicit security headers and modern analytics. Privacy compliance is limited with no dedicated privacy or cookie policy pages, though terms and conditions are present. The site enforces age verification for alcohol sales, indicating regulatory awareness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Some suspicious external links embedded in the footer code suggest possible SEO spam or injection, which should be addressed.

M

Mikulovská rozvojová, s. r. o.

zpravodajmikulov.cz

44

The website zpravodajmikulov.cz serves as the official local news portal for the city of Mikulov, Czech Republic. It is published by Mikulovská rozvojová, s. r. o., a small-sized company focused on disseminating municipal news, cultural events, school updates, and other community information. The site targets residents and visitors interested in local affairs and cultural happenings. The business model revolves around providing timely and relevant local news content, supported by municipal backing and community engagement. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and UIkit for responsive design and user interface components. It integrates social media widgets from Facebook and Google, enhancing community interaction. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Hosting and domain registration are consistent with Czech providers, reinforcing local presence. From a security perspective, the site uses HTTPS (assumed from base href and external scripts), but lacks explicit security headers in the HTML content. A cookie consent banner is implemented, indicating awareness of privacy compliance, though no dedicated privacy or terms of service pages were found. No vulnerabilities or exposed sensitive data were detected in the content. The security posture is moderate but could be improved with enhanced headers and clearer policies. Overall, the website is trustworthy, professionally maintained, and serves its community purpose effectively. Strategic recommendations include adding comprehensive privacy and terms policies, implementing security headers, and enhancing SEO and accessibility features to improve compliance and user experience.

S

Studio Marta

studiomarta.cz

10

Studio Marta is a theatrical studio affiliated with the Janáček Academy of Music and Performing Arts (JAMU) in Brno, Czech Republic. It focuses on theatrical education, student performances, and cultural events, serving students, academics, and theatre enthusiasts. The website provides program schedules, student profiles, and ticketing links, positioning itself as a niche educational and cultural institution with a strong local presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins for enhanced user experience and content delivery. The site is mobile-optimized and has good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and a formal security policy. Privacy compliance is adequate with cookie consent mechanisms and a privacy policy in place. Overall, the site is professional, trustworthy, and well-maintained, reflecting the institution's credibility and cultural mission.

A

Antir, s.r.o.

antir.cz

46

Antir, s.r.o. is a Czech Republic-based small manufacturing company specializing in custom stainless steel production, including railings, staircases, and winery equipment such as tanks and vinification vessels. Founded in 2007, the company offers end-to-end services from measurement and design to installation and delivery, targeting clients in construction, interior design, and the wine industry. The website reflects a professional presence with clear business information and a gallery of references, positioning the company as a specialist in its niche market. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. However, the site lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. The contact form collects personal data but does not show explicit anti-spam or privacy compliance mechanisms. From a security perspective, the site uses HTTPS as implied by URLs but does not demonstrate implementation of security best practices such as Content Security Policy or HSTS headers. No incident response or vulnerability disclosure information is provided, which could be a gap in readiness. No suspicious or malicious content was detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and incident response transparency to improve trust and reduce risk. Strategic improvements in these areas will strengthen the company’s digital maturity and customer confidence.

S

Srdce v domě, p. o.

srdcevdome.cz

58

Srdce v domě, p. o. is a non-profit social service organization established by the Jihomoravský kraj (South Moravian Region) in the Czech Republic. The organization provides protected housing and support services primarily for persons with disabilities, operating facilities in Klentnice, Mikulov, and Lednice. Their website reflects a regional government-affiliated entity focused on social welfare, with clear contact information and service descriptions. The business model is non-profit, supported by regional government funding, targeting individuals seeking social housing and care services. Technically, the website is built on an ASP.NET WebForms framework with modern front-end libraries such as jQuery, Bootstrap, and Slick Carousel. It employs Google Tag Manager for analytics and tracking, and includes cookie consent mechanisms and a privacy policy, indicating a reasonable level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces transparency and trust slightly, but the website's content and affiliations strongly support its legitimacy. Overall, the website presents a trustworthy and professional front for a regional non-profit social service provider. Strategic improvements in security headers and public disclosure of incident response policies would enhance its security posture and compliance standing.

S

Stadtwerke Rostock AG

swrag.de

56

Stadtwerke Rostock AG operates as a regional energy provider serving the Rostock area and coastal regions in Germany. The company offers a broad portfolio of energy services including electricity, natural gas, district heating, heat pumps, internet services, and eco-mobility solutions such as electric vehicle charging and bio-CNG. Their business model focuses on providing personalized service both in physical locations and online, targeting private and business customers. The website reflects a strong regional market position with community engagement and customer-centric offerings.

P

PPush

ppush.eu

54

PPush is a German-based technology service offering a free push notification app designed for organizations such as clubs, municipalities, and local businesses to send regional news and updates without requiring a dedicated app. The service emphasizes GDPR compliance and privacy by enabling anonymous message reception without collecting personal data like email or phone numbers. The website is professionally designed, multilingual, and provides comprehensive information about the service, including FAQs, testimonials, and API integration options. Technically, the site is built on WordPress with modern plugins for security, multilingual support, and cookie consent management. Security posture is strong with HTTPS, Wordfence protection, and Google reCAPTCHA integration. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. Overall, the site presents a trustworthy and professional digital presence for a niche technology service focused on privacy and regional communication.

The website www.wir-bewegen-alle.de serves as a comprehensive career portal for the Karlsruher Verkehrsverbund (KVV) and its associated companies VBK and AVG, which are key players in regional public transportation in Karlsruhe, Germany. It offers detailed job listings, career information, and multimedia content to attract a diverse range of candidates including professionals, students, and career changers. The site is well-structured, mobile-optimized, and incorporates accessibility features to enhance user experience. Technically, it is built on Silverstripe CMS with modern JavaScript libraries such as Swiper.js and HTMX, hosted on rzone.de infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and explicit security policies are absent. Overall, the site reflects a mature digital presence aligned with the business's public transportation focus.

G

Gradska knjižnica i čitaonica Vinkovci

gkvk.hr

47

Gradska knjižnica i čitaonica Vinkovci is a public library serving the Vinkovci community in Croatia, providing access to a catalog, membership services, and cultural events. The website is professionally designed using WordPress with Elementor and the Litho theme, offering a responsive and accessible user experience. The site includes a cookie consent mechanism and a privacy policy compliant with GDPR, reflecting a commitment to user privacy. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate institution.

M

Monoplay

monoplay.eu

41

Monoplay is a well-established international contemporary dance festival based in Zadar, Croatia, specializing in solo dance performances and educational workshops. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimization. The festival targets dance professionals, students, and the general public interested in contemporary dance. While the site is professionally designed and content-rich, it lacks critical privacy and cookie policies, which affects compliance. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms, with no explicit emails or phone numbers published. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security hardening.

T

Teatar EXIT

teatarexit.hr

41

Teatar EXIT is a well-established Croatian theatre company founded in 2003, specializing in provocative and innovative theatrical performances. The website serves as a digital platform to showcase their program, ticket sales, and festival events, targeting a general audience interested in cultural arts. The company maintains a consistent brand presence with active social media channels and a mobile app offering, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS, GDPR-compliant consent mechanisms, and Google reCAPTCHA on forms, although there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating and no detected malicious content.

I

Institute for New Media and E-democracy

edemokracija.hr

49

The website www.edemokracija.hr represents the Institute for New Media and E-democracy (InMed), a Croatian academic and research institution focused on new media, e-democracy, and journalism. The site serves as a platform for disseminating information about conferences, calls for papers, and research activities. It targets academics, researchers, and media professionals interested in these fields. The business model is non-profit and research-oriented, with a niche market position in Croatia and international academic circles. Technically, the website is built on WordPress and utilizes a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. The site is hosted by CARNET, a Croatian academic network, which aligns with the institute's educational nature. The website is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's academic and Croatian identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and serves its academic audience well. To improve security posture and compliance, the institute should consider adding security headers, a vulnerability disclosure policy, and clearer contact information for security incidents. These steps would enhance user trust and align with best practices for academic institutions operating online.

MetroTwit is a software application developed by Pixel Tucker Pty Ltd, designed as a Twitter client for Windows platforms including Windows 7, Vista, and Windows 8 tablets. The product embraced Microsoft's Metro design language and offered features such as multiple account support, undo tweet functionality, and real-time Twitter streaming. The website clearly communicates that the product has been discontinued and the download is no longer available. The target audience was Windows users seeking a modern Twitter client experience. The company is a small Australian technology firm founded around 2010. Technically, the website is built on WordPress with standard web technologies and integrates social media widgets and Google Analytics for tracking. The site is hosted behind Cloudflare, ensuring good availability and performance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Business credibility is supported by clear company information, testimonials, and a privacy policy. Overall, the website is functional, safe, and professional but could improve in security and privacy compliance.

G

Girona Softwareentwicklung GmbH

konsentas.de

49

Konsentas.de is a professional website operated by Girona Softwareentwicklung GmbH offering a modular online appointment scheduling system tailored for German government authorities. The platform supports various public sector applications including resident registration, health offices, vehicle registration, and COVID-19 related tools. The website demonstrates a solid market position with multiple municipal clients and a clear focus on e-government digital transformation. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and integrates Google Analytics and LinkedIn tracking for marketing insights. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is moderate with cookie consent implemented but lacking explicit security headers and published security policies. WHOIS data aligns with the business identity, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.

8

8devs

aiddevs.com

69

8devs is a small German company specializing in app development for the healthcare sector, rescue services, and occupational safety. Their business focuses on delivering native mobile applications designed to improve health and well-being, with notable products such as NeoDiary, HeroShift, and Verbandbuch. The company presents itself professionally with a well-structured website and clear contact information, targeting healthcare professionals and related audiences. Technically, the website is built on WordPress using Elementor and Bootstrap, hosted by HTTP.NET INTERNET GMBH, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and comprehensive HTTP security headers. Privacy compliance is weak due to missing privacy and cookie policies, and no incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.

F

Frutiko

frutiko.cz

48

Frutiko.cz is a Czech Republic-based e-commerce retailer specializing in edible flower bouquets, classic flowers, cakes, and gift baskets. The company targets general consumers seeking unique and fresh gift options with delivery services across Prague, Brno, and the wider Czech Republic. The website is professionally designed, multilingual, and offers a seamless shopping experience with clear navigation and mobile optimization. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response contact suggests room for improvement. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and comprehensive privacy and cookie policies. Overall, Frutiko.cz presents a trustworthy and well-managed online retail platform with good compliance and security practices.

P

Polskie Towarzystwo Rehabilitacji

ptreh.com

50

Polskie Towarzystwo Rehabilitacji (PTReh) is a well-established Polish professional society dedicated to rehabilitation medicine. The website serves as an information hub for members and professionals, offering news, event announcements, training course details, and organizational information. The society targets medical professionals, rehabilitation specialists, and patients interested in rehabilitation services. The business model is non-profit, focusing on education, advocacy, and professional development within the healthcare sector in Poland. The domain age and content consistency support the legitimacy and established presence of the organization. Technically, the website is built on Joomla CMS, utilizing common JavaScript libraries such as jQuery and MooTools, and styled with Bootstrap. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate, and accessibility features are basic. SEO optimization is also basic, with no advanced metadata or structured data beyond minimal JSON script options. From a security perspective, the site uses HTTPS with a valid SSL certificate, and the domain has a clientTransferProhibited status to prevent unauthorized transfers. However, DNSSEC is not enabled, and no advanced security headers (e.g., CSP, HSTS) are detected. There is no visible privacy or cookie policy, which is a compliance gap, especially under GDPR. No incident response or vulnerability disclosure information is provided. Forms exist for user login but lack visible advanced security measures beyond Joomla's default CSRF token. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance, enhanced security headers, and better transparency regarding data protection policies. The risk level is moderate with no critical vulnerabilities detected, but compliance improvements are recommended.

F

Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej

ippez.pl

55

The Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej is a Polish non-profit organization dedicated to enhancing patient rights awareness, promoting health education, and supporting patient organizations across Poland. The website reflects a mature presence with comprehensive content about their campaigns, projects, and educational initiatives. Their market position is that of a reputable healthcare advocacy entity with strong ties to patient communities and healthcare stakeholders. Technically, the website is built on WordPress using modern frameworks like Bootstrap and Divi Builder, with SEO and accessibility considerations in place. Security posture is good with HTTPS enforced and consent management implemented, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Tourism Office Pula

pulainfo.hr

43

Tourism Office Pula operates as the official tourism promotion entity for the city of Pula, Croatia, providing comprehensive information on local attractions, events, accommodation, and visitor services. The website is well-structured, multilingual, and designed to serve tourists and visitors seeking travel-related information. The business model is government-oriented, focusing on tourism promotion and visitor engagement. The site demonstrates a good level of digital maturity with modern WordPress infrastructure, SEO optimization, and accessibility features. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

G

Großmarkt Rostock GmbH

rostocker-wochenmaerkte.de

44

The website www.rostocker-wochenmaerkte.de represents the Rostocker Wochenmärkte, a regional market operator in Rostock, Germany, offering weekly markets with a focus on fresh, regional products. The business also operates an online shop for merchandise and vouchers, targeting local residents and visitors interested in authentic local market experiences. The site is well-branded and consistent with the parent company Großmarkt Rostock GmbH, indicating a solid local market presence. Technically, the website uses a modern but standard tech stack including jQuery, Bootstrap, and Klaro for cookie consent, hosted by Alfahosting. It is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS and cookie consent implemented, but lacks visible advanced security headers and explicit security policies. Privacy compliance is good with a privacy policy and cookie banner, including Google Analytics with IP anonymization and opt-out. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Chefstidningen

chefstidningen.se

46

Chefstidningen is a Swedish media company specializing in leadership and HR content targeted at academics and professionals. The website offers a mix of free and premium subscription content, including articles, newsletters, and a printed magazine. It is owned by Individ & Samhälle Sverige AB, affiliated with Akademikerförbundet SSR, indicating a strong institutional backing. The site is well-branded and consistent with its niche market positioning. Technically, the website is built on WordPress with WooCommerce for subscription management, leveraging modern web technologies such as Bootstrap and jQuery. It integrates multiple third-party analytics and advertising services, including Google Analytics, Google Tag Manager, and LinkedIn Insight. The site is mobile-optimized and SEO-friendly, though performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. There is no visible security policy or incident response information, and no cookie consent mechanism was detected, which may pose GDPR compliance risks. The domain is long-standing and registered with a reputable registrar, supporting the site's legitimacy. Overall, Chefstidningen presents a professional and credible online presence with room for improvement in privacy compliance and security hardening to better protect user data and enhance trust.