Security Directory

T

Tyyliluuri

tyyliluuri.fi

50

Tyyliluuri is a Finnish e-commerce retailer specializing in mobile phone protective accessories such as phone cases and screen protectors. The website targets Finnish consumers seeking affordable and fast delivery of these products. The business operates on a PrestaShop platform, integrating modern marketing and analytics tools including Google Analytics and Facebook Pixel, supported by a detailed cookie consent mechanism compliant with GDPR. The site demonstrates good technical infrastructure with HTTPS and structured data enhancing SEO and user experience. Security posture is solid with no critical vulnerabilities detected, though some security headers could be improved. Contact information is primarily via a contact form, with no explicit emails or phone numbers visible. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

A

ALUMERO Group

alumerogroup.eu

68

ALUMERO Group is a European manufacturer and developer of photovoltaic mounting systems and innovative solar products, emphasizing sustainability through the use of recycled aluminium and local European production. The company targets businesses and professionals in the solar energy sector, offering a range of mounting solutions for various roof types and custom manufacturing services. Their market position is strengthened by their focus on supply chain control and environmental responsibility. Technically, the website is built on Webflow with modern integrations such as Google Tag Manager, Cookiebot for consent management, and Cloudflare Turnstile for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the website is professional, well-designed, and compliant with GDPR, but could improve transparency by publishing terms of service and security policies. The domain WHOIS data is privacy protected, which is common and justified for this business type, with no suspicious indicators found.

Antesto s.r.o. operates the INFINEO platform, a Czech Republic-based SaaS web application designed for financial advisors to create tailored financial analyses and manage client data efficiently. The platform emphasizes independence from financial institutions, offering objective financial planning tools accessible via any internet-connected device. INFINEO targets individual advisors and firms, providing customization options and API integrations to meet diverse client needs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site features responsive design optimized for mobile devices, ensuring accessibility and usability across platforms. However, some security headers are missing, and privacy compliance elements such as cookie consent and privacy policies are not evident. From a security perspective, the site uses HTTPS with a strong SSL certificate, ensuring encrypted data transmission. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and company information appear professional and trustworthy. Strategic improvements include adding privacy and cookie policies, security headers, and incident response information to enhance compliance and security posture.

V

VšĮ Mediapressa

nestumokalendorius.lt

37

The website nestumokalendorius.lt represents a Lithuanian non-profit organization, VšĮ Mediapressa, focused on providing educational print and digital materials for pregnant women and new parents. The site offers free and purchasable publications, collaborates with healthcare providers, and supports parental education initiatives. The business is well-established with a domain age consistent with its history and partnerships with notable Lithuanian healthcare entities. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some security headers, but lacks explicit privacy and cookie policies, which are compliance gaps. Overall, the site is trustworthy, professionally maintained, and serves a clear educational mission.

I

iFuture

ifuture.lt

10

iFuture is a Lithuanian-based company focused on smart investing, operating a website primarily in Lithuanian. The website presents itself as an information and service provider in the investment domain, targeting a general audience interested in financial topics. The business appears to be small-sized and was founded around 2018, consistent with domain registration data. The website uses WordPress CMS with popular plugins for SEO, marketing, and cookie consent management, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and integrations with MailerLite for marketing and Google Analytics and Facebook Pixel for analytics and advertising. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and documented security policies. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is partially addressed through Cookiebot consent mechanisms, but no explicit privacy policy or terms of service pages were found in the analyzed content. Overall, the website is professional and trustworthy with room for improvement in privacy documentation and security hardening.

M

Mobirise Ltd

mobirise.eu

59

Mobirise Ltd operates a well-established website offering a free HTML builder software that leverages AI and drag-and-drop technology to enable users to create professional, mobile-friendly websites without coding. The company targets a broad audience including individuals, freelancers, and small businesses, positioning itself as a leading no-code website builder with over 2.5 million users. The website is technically mature, employing modern frameworks such as Bootstrap 5, and integrates popular analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and domain locking, though improvements in security headers and DNSSEC are recommended. Privacy compliance is partially addressed with clear privacy and terms pages but lacks explicit cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

S

Sonnenstrom GmbH & Co. KG

mit-sonne-leben.de

10

Sonnenstrom GmbH & Co. KG is a specialized energy and electrotechnology company based in Raesfeld, Germany, focusing on sustainable and CO2-neutral building solutions. Their offerings include photovoltaic systems, battery storage, heat pumps, smart home automation, and electromobility infrastructure. The company positions itself as a local expert with a comprehensive service portfolio and a strong emphasis on environmental sustainability. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO, integrating multiple trusted third-party services and partners. The site demonstrates good SEO, mobile optimization, and accessibility practices. Security-wise, the site enforces HTTPS and employs cookie consent management, though it could improve by implementing additional security headers and publishing a formal security policy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference.

U

UAE INTERNATIONAL MIDWIFERY CONFERENCE

uaeimc.com

62

The UAE INTERNATIONAL MIDWIFERY CONFERENCE website represents a professional healthcare event focused on advancing midwifery care in the UAE and internationally. It is organized under the Emirates Nursing Association (ENA) and targets midwives, healthcare professionals, researchers, and policymakers. The site provides detailed information about the conference dates, venue, sponsors, speakers, and partners, positioning itself as a leading event in the midwifery sector within the region. Technically, the website is built on WordPress with Elementor and WooCommerce plugins, hosted with DNS services via Cloudflare and registered through Squarespace Domains LLC. The site employs modern tracking and marketing tools such as Google Analytics and Facebook Pixel but lacks visible privacy and cookie policies or consent mechanisms, which is a compliance gap. Performance and mobile optimization are good, with a consistent and professional design. From a security perspective, the site uses HTTPS with domain status locks to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and there is no published security policy or incident response information. No vulnerability disclosure or security.txt file is present. These gaps suggest room for improvement in security transparency and DNS security. Overall, the website is trustworthy and professional with a moderate security posture and good business credibility. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, enabling DNSSEC, and providing clear security and incident response information to enhance trust and compliance.

V

Verra

verra.cz

66

Verra is a Czech Republic based e-commerce company specializing in premium dietary supplements aimed at supporting hormonal balance and fertility for both men and women. Founded in 2020, the company positions itself as a premium provider leveraging the latest clinical studies to formulate its products. The website is built on the Shopify platform, utilizing modern web technologies and third-party integrations for marketing, analytics, and customer reviews. The digital infrastructure is robust, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and GDPR compliance mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, Verra presents a trustworthy and professional online presence with a clear focus on health and wellness e-commerce.

G

Gandro Paštas

gandropastas.lt

43

Gandro Paštas is a Lithuanian small business operating an e-commerce platform focused on providing gift boxes for newborns and infants. The business partners with various brands to offer products and discount coupons, enhancing value for new parents. The website is built on WordPress with WooCommerce, leveraging modern SEO and marketing tools such as Yoast SEO Premium and MailPoet. The technical infrastructure is solid with HTTPS enabled and integration of Google Analytics and Facebook Pixel for marketing insights. Security posture is moderate with room for improvement in security headers and cookie consent mechanisms. The business demonstrates compliance awareness with GDPR through privacy policies and consent checkboxes in registration forms. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

S

StepArc

steparc.lt

43

StepArc is a Lithuanian-based advertising and printing agency specializing in traditional advertising, printing services, graphic design, and business gift production. The company targets a general audience seeking comprehensive advertising and printing solutions. The website is built on WordPress using the Divi theme, integrating popular marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website presents a professional and trustworthy image consistent with a small local business.

N

Neišnešiotų naujagimių asociacija „Neišnešiotukas“

neisnesiotukas.lt

62

Neišnešiotų naujagimių asociacija „Neišnešiotukas“ is a Lithuanian non-profit organization dedicated to supporting premature newborns and their families. The association provides educational resources, psychological support, advocacy, and fundraising activities to improve care and awareness. The website reflects a well-structured, content-rich platform targeting parents, healthcare professionals, and supporters. It maintains a strong social media presence and transparent contact information, enhancing community engagement and trust. Technically, the website is built on WordPress and hosted by Hostinger, utilizing modern web technologies including jQuery and popular plugins like Contact Form 7 and CookieYes for cookie consent management. The site integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag, all implemented with user consent mechanisms. The site demonstrates good mobile optimization and SEO practices, though some security headers could be improved. From a security perspective, the website enforces HTTPS and uses cookie consent banners compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in security headers and policy disclosures would further strengthen its security posture and user confidence.

B

BTL Industries

btlnet.com

59

BTL Industries is a well-established global manufacturer of medical equipment specializing in rehabilitation, cardiology, and aesthetic medicine. The company offers a broad portfolio of clinically proven devices and maintains a strong international presence with direct offices in over 90 countries. Their website reflects a professional and comprehensive digital presence, showcasing detailed product categories, educational resources, and event participation. The technical infrastructure leverages modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security posture is generally strong with HTTPS enforcement and secure forms, though the absence of visible security headers and a published security policy indicates room for improvement. Privacy compliance is robust, featuring a comprehensive GDPR-aligned privacy and cookie policy with user consent mechanisms. However, the lack of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, which should be further investigated. Overall, BTL Industries presents a credible and professional online presence aligned with its business scope and market position.

MS Australia is a reputable non-profit organization dedicated to accelerating research for Multiple Sclerosis in Australia. The website serves as a comprehensive resource for people affected by MS, researchers, and healthcare professionals, offering information on symptoms, treatments, clinical trials, and support services. The organization positions itself as a leading entity in the MS research community with a clear mission and vision. Technically, the website is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO, ensuring good SEO and user experience. The site integrates analytics and tracking tools like Google Analytics and Facebook Pixel to monitor engagement and optimize outreach. Security-wise, the website enforces HTTPS, employs standard security headers, and maintains privacy and cookie policies with consent mechanisms, reflecting a mature security posture. However, it lacks a publicly available security policy or incident response information, which could enhance trust further. Overall, the domain appears legitimate despite privacy-protected WHOIS data, supported by consistent branding, professional content, and clear contact information. Strategic recommendations include publishing a security policy, incident response details, and vulnerability disclosure information to strengthen security transparency and compliance.

T

The Multiple Sclerosis International Federation

worldmsday.org

39

World MS Day is a globally recognized campaign coordinated by The Multiple Sclerosis International Federation, focusing on raising awareness, sharing stories, and advocating for people affected by multiple sclerosis. The website serves as a central hub for information, campaigns, and community engagement, targeting a broad audience including patients, healthcare professionals, and advocates worldwide. The organization holds a strong market position as a leading non-profit in MS awareness and advocacy. Technically, the website is built on WordPress with modern SEO and tracking tools, hosted behind Cloudflare for performance and security. The site demonstrates good digital maturity with mobile optimization, accessibility, and structured data implementation. Security posture is solid with HTTPS and domain locking, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and effective in its mission.

K

Kantonales Gesundheitszentrum Appenzell

gzai.ch

49

The Kantonales Gesundheitszentrum Appenzell is a public healthcare institution providing comprehensive health and elderly care services to the population of Appenzell Innerrhoden, Switzerland. The website clearly communicates its role as a central health center offering ambulatory care, short-term and transitional care, and specialized services such as telemedicine emergency practice (MEAS). The institution targets local residents and patients requiring various levels of healthcare and support. The business model is focused on delivering reliable, community-centered healthcare services with a strong local presence. Technically, the website employs modern web technologies including JavaScript, asynchronous loading of analytics scripts (Matomo, Facebook Pixel, LinkedIn Insight Tag), and Google Maps API integration. The CMS used is Pimcore, indicating a professional content management approach. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a comprehensive privacy policy is available, but no cookie consent mechanism or terms of service page was found. Incident response and vulnerability disclosure information are absent, suggesting areas for improvement. Overall, the website is trustworthy, professional, and well-aligned with the business it represents. The domain registration data supports legitimacy and consistency with the healthcare sector. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to strengthen compliance and trust.

A

Appenzellerland Tourismus AI

appenzell.ch

51

Appenzellerland Tourismus AI operates the official tourism portal for the Appenzell region in Switzerland, providing comprehensive information on accommodations, gastronomy, events, cultural activities, and regional products. The website serves as a key resource for tourists and visitors, offering detailed event listings, booking options, and regional insights. The organization positions itself as the authoritative source for tourism in the Appenzell area, supported by consistent branding and professional content. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Slick Carousel, and Google Maps API. It integrates marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Sendinblue for newsletter management. The site is mobile-optimized with good SEO practices and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and implements Google reCAPTCHA on forms to mitigate spam and abuse. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, there is room for improvement by adding a security.txt file and publishing incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable platform for regional tourism promotion. Strategic recommendations include enhancing security headers, formalizing vulnerability disclosure, and improving accessibility features to further strengthen the site's security posture and user experience.

M

Morekontor

morekontor.se

10

Morekontor is a Swedish e-commerce retailer specializing in office furniture and related services such as delivery, assembly, and office interior design. The company has been operating online since 2004 and targets business customers primarily in Sweden. The website presents a professional and comprehensive catalog of products with clear navigation and customer service information. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and InMobi advertising. Security posture is strong with HTTPS, security headers, and reCAPTCHA usage, although no explicit security or incident response policies are published. The absence of WHOIS data for the domain www.morekontor.se raises questions about domain registration legitimacy, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates good digital maturity and business credibility with room for improvement in transparency and domain registration verification.

V

Vectron Systems AG

vectron-systems.com

42

Vectron Systems AG operates as a provider of cash register hardware, software, and digital solutions primarily targeting sectors such as bakery, gastronomy, and hospitality. The company positions itself as a reliable partner offering comprehensive POS solutions with a focus on compliance and customer engagement. The website reflects a professional business presence with clear branding and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, alongside a robust cookie consent mechanism via Cookiebot. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and reduces overall trust. No direct contact information or privacy policy was found in the provided content, which impacts privacy compliance and business credibility scores. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

L

Logista d.o.o.

logista.hr

10

Logista d.o.o. is a medium-sized Croatian company specializing in distribution and telecommunications services, including tobacco product distribution, mobile technology, and B2B telecommunications support. The company has a strong market position in Croatia, recognized among the top 400 companies and listed by the London Stock Exchange as an inspiring European business. Their key services include JTI tobacco distribution, A1 telecommunications support, and e-distribution services. The website is professionally designed, mobile-optimized, and uses modern tracking and analytics tools. Hosting is provided via Oracle Cloud, and the site employs HTTPS with reCAPTCHA for security. However, there is no publicly available security policy or incident response information, which could be improved. Overall, the website is trustworthy and well-maintained, with clear contact information and GDPR-compliant cookie consent.

T

Tower Center Rijeka

tower-center-rijeka.hr

10

Tower Center Rijeka is a well-established retail shopping center located in Rijeka, Croatia, founded in 2007. The website presents a comprehensive overview of the center's offerings, including over 135 stores, megastores, a multiplex cinema, restaurants, and extensive parking facilities. The business targets general consumers, families, and shoppers seeking retail and leisure experiences. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and providing up-to-date news and promotional content. Technically, the site employs modern web technologies such as Google reCAPTCHA v3, Google Tag Manager, Facebook Pixel, and is hosted on DigitalOcean, ensuring reliable performance and security. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the site reflects a credible and trustworthy business with a good digital presence.

A

American College of Physicians

acponline.org

70

The American College of Physicians (ACP) is a large, well-established professional medical organization focused on internal medicine. It serves a global membership of over 162,000 physicians, subspecialists, and medical students, providing advocacy, education, clinical guidance, and certification resources. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to healthcare professionals. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. Privacy compliance is evident with a detailed privacy policy and cookie consent mechanisms. WHOIS data is unavailable due to privacy protection, which is typical for such organizations. Overall, the site is trustworthy, professional, and well-positioned in its market.

F

Feel IQM d.o.o.

iqmpass.com

55

IQM Pass is a Croatian tourism-focused digital pass service operated by Feel IQM d.o.o., founded in 2020. The service offers tourists special discounts and benefits across multiple Croatian destinations by partnering with local businesses. The website is well-structured, professionally designed, and targets travelers seeking enhanced destination experiences. Technically, the site uses modern web technologies including React, Google Analytics, and Facebook Pixel, hosted on DigitalOcean. Security posture is adequate with HTTPS and cookie consent implemented, though some security headers and policies could be improved. The domain registration is consistent with the business timeline and shows no suspicious indicators. Overall, the website presents a trustworthy and professional digital tourism service.

T

TESCOMA

tescoma.cz

64

TESCOMA.cz is a professional e-commerce website specializing in kitchenware products, offering a wide range of items for cooking, baking, and dining. The site targets consumers interested in quality kitchen supplies and operates both online and through physical stores, positioning itself as a reputable brand in the Czech Republic retail market. The website employs modern web technologies including React (Next.js), personalization tools like Persoo, and tracking services such as Microsoft Clarity and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and privacy policy documentation suggests room for improvement. The lack of WHOIS data limits domain registration trust analysis, but the overall professional presentation and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and providing vulnerability disclosure information to strengthen trust and compliance.

W

Web Revolution s.r.o.

wikyhracky.cz

53

Wikyhracky.cz is a Czech Republic-based retail and wholesale e-commerce platform specializing in toys, games, school, and office supplies. The company boasts over 30 years of tradition and operates more than 70 physical stores nationwide, positioning itself as a significant player in the Czech toy retail market. The website offers a broad product catalog with recommended and new products, supported by social media channels and a B2B e-shop. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.11.1, Select2, PrettyPhoto, and integrates marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Bing Ads. While the site is accessible and well-structured with good content quality and user experience, it lacks explicit privacy and cookie policies, and uses an outdated jQuery version that may pose security risks. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the business presence and content suggest a legitimate operation. Security headers and SSL configuration details are not available, limiting a full security posture assessment.

InGenius Webdesign is a Czech Republic-based small web development company specializing in custom internet presentations, web applications, e-commerce, and related digital services. With over 200 completed projects, they serve businesses seeking tailored online solutions. Their website demonstrates a professional design with clear navigation and good mobile optimization, leveraging technologies such as jQuery, LESS.js, Kooboo CMS, and integrating marketing tools like Google Analytics and Facebook Pixel. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data and security headers indicates areas for improvement in trust and security posture. Overall, the company presents a credible and professional digital presence with moderate technical maturity and a good security baseline.

I

inlab medical s.r.o.

inlab.cz

46

inlab medical s.r.o. is a Czech-based company specializing in the supply of medical and veterinary diagnostic equipment and consumables. With over 20 years of experience, the company serves both veterinary and human medical sectors, offering products such as hematology analyzers, biochemistry devices, and infectious disease detection tools. Their business model includes an e-commerce platform targeting medical professionals and practices. The website demonstrates a solid market position within its niche, supported by active content updates and customer engagement features.

T

Thaya-dev

vinarstvithaya.cz

61

Vinařství THAYA is a Czech winery business established in 2020, offering a unique combination of winery products, hotel accommodation, and restaurant services near Znojmo, close to the Austrian border. The website presents a professional and polished digital presence with multilingual support, integrated e-commerce, and reservation systems. The business targets wine consumers and tourists seeking quality hospitality experiences. Technically, the site is built on WordPress with modern performance optimizations and uses trusted third-party services for analytics and booking. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent. Overall, the website reflects a trustworthy and mature business with a strong regional market position.

Delmart is a Czech retail supermarket and bistro chain primarily operating in Prague, offering a wide range of food products including fresh produce, bakery items, dairy, meats, deli, and beverages. The company also supports online shopping and delivery through partners such as Wolt and Kosik.cz, positioning itself as a convenient local food retailer. The website is professionally designed with good content quality and consistent branding, targeting general consumers in the region. Technically, the website employs a moderate technology stack including jQuery, Google Tag Manager, Google Analytics 4, and Facebook Pixel for analytics and marketing. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and accessibility features. Cookie consent is implemented with detailed user options, though a dedicated privacy policy page is missing. From a security perspective, the site demonstrates basic good practices such as HTTPS enforcement and cookie consent mechanisms. However, the absence of explicit security headers and contact information for incident response or data protection officers indicates room for improvement. The missing WHOIS data reduces trust slightly but does not negate the legitimacy suggested by the website content and external references. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected. Strategic improvements in privacy policy transparency, security headers, and contact information would enhance compliance and trustworthiness.

S

Sucht Schweiz

dipendenzesvizzera.ch

62

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing and mitigating problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a clear mission focused on research, prevention, information dissemination, and advocacy. The website reflects a mature digital presence with multilingual support, professional design, and integrated donation capabilities. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Usercentrics for consent management. Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and policies are not evident. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service pages in the provided content. Business credibility is high, supported by consistent WHOIS data and professional content.

S

Sucht Schweiz

addictionsuisse.ch

62

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing and mitigating problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a strong focus on research, prevention, information dissemination, and advocacy. Their website reflects a mature digital presence with multilingual support, professional design, and clear calls to action such as donations and educational offerings. The foundation targets a broad audience including professionals, affected individuals, and the general public interested in addiction-related topics. Technically, the website is built on WordPress using modern frameworks and libraries such as Flynt, Swiper.js, and Usercentrics for consent management. It integrates analytics tools like Google Analytics and Facebook Pixel with user consent mechanisms, indicating compliance with privacy regulations. The site is mobile optimized and accessible, with good SEO practices implemented via Yoast SEO. From a security perspective, the site enforces HTTPS and uses consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, Sucht Schweiz presents a trustworthy and professional online presence suitable for its non-profit mission. However, improvements can be made in publishing explicit privacy and security policies and enhancing security headers to strengthen compliance and trust.

C

Catering Team Majetić

cateringteammajetic.hr

46

Catering Team Majetić is a well-established catering company based in Zagreb, Croatia, with a strong family tradition dating back to 1998. The company specializes in high-quality catering services for weddings, corporate events, and private celebrations, operating both locally and across Europe. Their business model includes owning exclusive venues and collaborating with prestigious locations, positioning them as a premium service provider in the hospitality sector. The website reflects a professional and consistent brand image, supported by customer testimonials and media coverage. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern tracking tools like Google Tag Manager and Facebook Pixel integrated. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks some recommended security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

T

TNX s.r.l.

avatable.com

48

AVATABLE is a specialized SaaS provider offering a comprehensive restaurant booking management system integrated with a website solution. The company, TNX s.r.l., targets restaurants, pizzerias, fast food outlets, and event organizers primarily in Italy. Their platform includes a booking engine, table and room management, digital menus, CRM capabilities, marketing automation, and delivery integration. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the site uses modern web technologies including jQuery, Bootstrap, and various JavaScript libraries, with good SEO and performance characteristics. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. WHOIS data is missing, which reduces trust slightly but the overall business presence and content quality support legitimacy.

INVOICEX is a well-established Italian software company specializing in invoicing, warehouse management, and internal accounting solutions tailored for small and medium enterprises, freelancers, and artisans. The company, TNX s.r.l., has over 20 years of experience and a strong client base exceeding 10,000 active users annually. Their product offers multi-platform compatibility and a free version with upgrade options, supported by professional technical assistance and continuous updates. The website reflects a mature digital presence with comprehensive content and clear business positioning. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates multiple analytics and tracking tools including Google Analytics, Matomo, and Facebook Pixel, and uses HTTPS with good SSL configuration. The site is mobile-optimized and features a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. From a security perspective, the site demonstrates good practices such as secure login forms and data backup options but lacks explicit security policy documentation and incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with moderate security posture. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving accessibility features to further strengthen the site's security and compliance posture.

O

Ordinalo

ordinalo.net

52

Ordinalo is an Italian-based software service provider specializing in take away and food delivery management solutions for restaurants and food businesses. The company offers a comprehensive SaaS platform including a website, mobile apps for Android and iOS, order management, delivery rider coordination, digital menus with QR codes, and marketing tools such as push notifications. Ordinalo positions itself as a niche player enabling restaurants to disintermediate from large food delivery platforms and build direct customer relationships. The website is professionally designed, content-rich, and targets small to medium-sized food service businesses in Italy. Technically, the site uses modern web technologies and integrates analytics and tracking tools, but lacks some advanced security headers and a published security policy. The WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility is supported by clear contact information, client logos, and active social media presence. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR awareness. Overall, Ordinalo presents a solid digital presence with room for security and compliance improvements.

U

University of York

york.ac.uk

68

The University of York is a prestigious UK academic institution, part of the Russell Group, offering outstanding teaching and research services. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, researchers, and academic staff. The site is well-branded and professionally maintained, emphasizing its academic reputation and community engagement. Technically, the site employs modern web technologies and multiple analytics and marketing tools to optimize user experience and engagement. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain and website present a trustworthy and credible academic entity.

W

Westgate

westgate.hr

46

Westgate.hr is the official website of Westgate, the largest shopping center in Croatia. The site provides comprehensive information about retail stores, restaurants, entertainment options, and services available at the mall. It targets a broad audience including families and shoppers seeking a variety of brands and leisure activities. The website is built on modern web technologies such as Vue.js and Nuxt.js, integrating analytics and marketing tools like Google Analytics and Facebook Pixel to monitor user engagement and optimize marketing efforts. The design is professional, mobile-optimized, and offers clear navigation, enhancing user experience. Security measures include HTTPS enforcement and standard security headers, though explicit privacy and terms of service policies are not published, which is a compliance gap. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy transparency and direct contact information for security or incident response.

H

https://visitzagorje.hr/

visitzagorje.hr

52

VisitZagorje.hr is a professionally maintained tourism portal dedicated to promoting the Zagorje region in Croatia. It offers comprehensive information on attractions, culture, events, accommodation, and lifestyle, targeting tourists and visitors interested in this region. The website is multilingual and integrates modern digital marketing and analytics tools, reflecting a mature digital presence. The business model focuses on regional tourism promotion, likely supported by local tourism authorities or partnerships. Technically, the site is built on WordPress with a robust tech stack including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, ensuring effective user tracking and marketing capabilities. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the site is trustworthy, well-branded, and professionally managed, serving as a reliable resource for visitors to Zagorje.

Z

Zadar region tourist board

zadar.hr

61

The website www.zadar.hr serves as the official tourism portal for the Zadar region in Croatia, managed by the regional tourist board. It provides comprehensive information about destinations, experiences, events, and travel planning to attract and assist tourists. The site is well-positioned as an authoritative source for regional tourism, supported by a long-established domain and official Croatian registrars. Technically, the site uses modern web technologies including Vue.js and integrates popular analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized and offers a rich user experience with clear navigation and multilingual support. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are absent. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Overall, the site is professional, trustworthy, and well-maintained, supporting the regional tourism business effectively.

C

CENTROPEN, a.s.

fukacie-fixky.sk

40

CENTROPEN, a.s. operates the AIRPENS website, offering specialized air-blowing markers designed for children’s creative activities. The company is an established Czech manufacturer with a history dating back to 1940, emphasizing local production and compliance with European safety standards. The website targets parents and educators seeking safe, creative art supplies for children. Technically, the site employs modern web technologies including Google reCAPTCHA, Facebook Pixel, and Google Tag Manager, hosted likely by WEDOS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and spam protection but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service pages. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

C

CENTROPEN, a.s.

air-pens.com

43

CENTROPEN, a.s. operates the AIRPENS website, offering specialized airbrush markers designed for children aged 4 and up. The company emphasizes safety, creativity, and local manufacturing in the Czech Republic, maintaining compliance with European toy safety standards. The website serves as a product showcase and resource hub, including downloadable stencils and instructional videos, targeting parents and educators seeking safe creative tools for children. The business holds a solid market position as a reputable manufacturer with a long history dating back to 1940, leveraging local production to ensure quality and safety. Technically, the website employs modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, and reCAPTCHA for form protection. Hosting appears to be with Wedos, a known Czech hosting provider. The site is mobile-optimized with good navigation and content quality. Security posture is moderate, with HTTPS enabled and form protection via reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

S

Nové online casino s výherními automaty | Starcasino.cz

starcasino.cz

63

Star-casino.cz is a Czech online casino platform offering a variety of gambling games including slot machines and jackpots. The website targets adult users interested in online gambling and positions itself as a popular and established casino with a 25-year history claim. The technical infrastructure is modern, built on Angular framework with integration of common marketing and analytics tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with no detected WAF or blocking but missing security headers and contact information reduce trust. Overall, the site is functional and professional but requires improvements in compliance and security transparency to enhance trustworthiness.

ม

มูลนิธิการศึกษาและวัฒนธรรมสัมพันธ์ไทย – นานาชาติ (เอเอฟเอส ประเทศไทย)

afsthailand.org

60

AFS Thailand is a well-established non-profit organization specializing in international student exchange programs, primarily targeting Thai high school students and their families. With a history dating back to 1962 and a domain registered since 1998, it holds a trusted position in the education sector in Thailand. The organization offers a variety of programs including year-long exchanges, short-term programs, camps, hosting opportunities, and scholarships, supported by a strong network of alumni and volunteers. The website content is rich, professionally presented, and culturally relevant, supporting its mission to foster intercultural understanding.

P

Partnerství, o.p.s.

stezky.cz

55

Cyklisté vítáni is a Czech nationwide certification system focused on promoting cyclist-friendly accommodations, dining, campsites, and tourist destinations. Managed by Partnerství, o.p.s., the organization supports sustainable cycling tourism by certifying and promoting quality services tailored to cyclists. The website serves as an information hub with maps, tips, events, and partner listings, targeting cycling tourists and service providers. Technically, the site is built using modern frameworks like Astro, integrates Google Analytics, Facebook Pixel, and uses Google reCAPTCHA for form security. It is well-optimized for mobile and SEO, providing a fast and accessible user experience. Security posture is solid with HTTPS and privacy compliance, though it lacks explicit security policy and incident response details. Overall, the site is trustworthy, professional, and aligned with its business goals.

I

ISNO IT s.r.o.

mojeodpadky.cz

63

The website www.mojeodpadky.cz represents ISNO IT s.r.o., a Czech company providing a motivational and evidential system for waste management called MESOH. The company targets municipalities and citizens to promote efficient waste sorting and reduce waste production, offering services that help reduce annual waste fees. The platform is well-established with over 250,000 users and more than 100 municipalities involved, positioning it as a recognized player in the Czech waste management sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Leaflet.js for mapping, and integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook. It uses hCaptcha for form security and appears mobile-optimized with good SEO practices. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and implements spam protection on forms. While no explicit security headers were detected, no vulnerabilities or exposed sensitive data were found in the HTML content. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data reduces domain transparency and trust from a registration standpoint, but the website content and business information are professional and credible. Overall, the website is safe, well-designed, and serves a clear business purpose in environmental sustainability. Recommendations include adding security headers, publishing vulnerability disclosure and incident response policies, and improving WHOIS transparency to enhance trustworthiness.

M

Messe Husum & Congress

domizil-husum.de

10

DOMIZIL Husum is a well-established trade fair platform targeting hosts, holiday home operators, and tourism service providers in northern Germany. Organized by Messe Husum & Congress, it serves as a central event for industry networking and showcasing trends. The website is built on TYPO3 CMS and integrates modern consent management tools like Cookiebot to ensure GDPR compliance. Social media channels on Instagram, Facebook, and LinkedIn support community engagement. The next event is planned for 2026, reflecting a strategic realignment to better serve industry needs. Technically, the site uses standard web technologies with moderate performance and good mobile optimization. Security posture is solid with HTTPS and consent management, though security headers and explicit policies could be improved. Overall, the site presents a professional and trustworthy digital presence for its niche audience.

G

Generali

generali.sk

56

Generali is a well-established insurance company operating in Slovakia, offering a broad range of life and non-life insurance products including travel, vehicle, and property insurance. The website positions Generali as a strong partner in the Slovak insurance market, targeting local residents seeking insurance solutions. The business model focuses on direct online insurance services with an emphasis on ease of use and accessibility from home. The company enjoys a positive reputation as indicated by a high aggregate rating from customers. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Tag Manager, Microsoft Clarity, and various tracking pixels for marketing and retargeting. The site is mobile optimized and uses HTTPS with strong security headers, reflecting a mature digital infrastructure. However, some accessibility features could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, security headers, and cookie consent management. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response information, or vulnerability disclosure program suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong business credibility score. The risk profile is low, but strategic enhancements in security communication and accessibility would further strengthen the company's digital trustworthiness.

Y

YOUPLUS

youplus.cz

59

YOUPLUS is a Czech Republic based life insurance provider offering straightforward, paperless life insurance products targeted at general consumers seeking transparent insurance solutions. The company operates a professional website built on WordPress with Divi theme, supporting Czech and Slovak languages, and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent. The technical infrastructure is hosted on Microsoft Online nameservers, indicating a reliable hosting environment. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. No blocking or WAF mechanisms interfere with content accessibility, and WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, though improvements in explicit contact information and security documentation are recommended.

G

Genertel

genertel.sk

51

Genertel is an established online insurance provider operating in Slovakia, offering a range of insurance products including mandatory vehicle insurance, additional vehicle insurance, travel insurance, and theft insurance. The website is professionally designed with consistent branding and targets Slovak residents seeking insurance services. The company leverages modern web technologies including WordPress CMS, Google Analytics, Hotjar, Facebook Pixel, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and some security plugins detected, but lacks visible security headers and explicit security or privacy policy documentation. Overall, the website is trustworthy and functional but could improve transparency and compliance by publishing privacy and terms of service documents and providing clear contact information. The domain registration is privacy protected, which is common and justified for this business type, and no suspicious patterns were detected.