Security Directory

K

Kirchenbote Online

kirchenbote-online.ch

64

Kirchenbote Online is a regional Swiss media platform focused on church-related news and cultural topics across several cantons including Baselland, Basel-Stadt, Luzern, Schaffhausen, Schwyz, Solothurn, Uri, and Zug. The website offers news articles, event agendas, book recommendations, and digital e-paper services targeting residents and church community members interested in religious and societal issues. The platform maintains partnerships with other cantonal church news providers, enhancing its regional presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA for bot protection. It features a cookie consent mechanism compliant with GDPR standards, ensuring user privacy choices are respected. The site is mobile-optimized with good navigation and professional design, though some accessibility and SEO aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business focus, indicating legitimacy and trustworthiness. Overall, Kirchenbote Online presents a professional, trustworthy, and GDPR-compliant media platform with moderate technical sophistication and a solid security posture. Opportunities exist to enhance security headers, publish terms of service, and improve accessibility and SEO for better user experience and compliance.

G

Grape Festival

grapefestival.sk

53

Grape Festival is a well-established music and cultural event organizer based in Slovakia, hosting annual festivals with a strong focus on entertainment, ticket sales, and partner engagement. The website reflects a professional and consistent brand image targeting music festival attendees and cultural event audiences primarily in Slovakia. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Google Tag Manager and TikTok Pixel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although formal security policies and vulnerability disclosure mechanisms are absent. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience with clear navigation and relevant content.

R

Reichle & De-Massari AG

rdm.com

55

Reichle & De-Massari AG (R&M) is a well-established global provider specializing in cabling and connectivity solutions for high-end communication networks since 1964. Their website reflects a professional B2B business model targeting industries such as Local Area Networks, Data Centers, and Public Networks. The company positions itself as a leader in telecommunications infrastructure solutions with a broad international reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates marketing and analytics tools such as HubSpot and Hotjar, indicating a mature digital presence. The site includes GDPR-compliant cookie consent mechanisms via Cookiebot, demonstrating attention to privacy regulations. Security-wise, while HTTPS is implied and cookie consent is managed, the absence of visible security headers and incomplete WHOIS data suggest areas for improvement in security posture and domain transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security configurations and clearer domain registration information.

T

tegut... gute Lebensmittel GmbH & Co. KG

tegut.com

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of quality food products, including regional, organic, vegan, and vegetarian options, emphasizing sustainability and transparency since its founding in 1947. The website reflects a mature digital presence with comprehensive content, customer engagement features such as a loyalty program (tebonus), recipe collections, and nutritional plans. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates multiple marketing and analytics tools while maintaining GDPR compliance through a consent management platform. Security posture is strong with HTTPS enforcement and privacy controls, although explicit security headers could be improved. Despite the absence of WHOIS registration data, the website's professionalism, certifications, and trust signals indicate a legitimate and credible business. Overall, tegut demonstrates a robust online presence aligned with its brand values and customer expectations.

T

tegut... gute Lebensmittel GmbH & Co. KG

basicbio.de

62

tegut... gute Lebensmittel GmbH & Co. KG is a well-established German supermarket chain operating approximately 350 stores across six federal states. The company specializes in offering a wide range of products including regional foods, organic (Bio) products, vegan and vegetarian options, and items adhering to their Reinheitsversprechen (purity promise). Founded in 1947, tegut... emphasizes sustainability, fairness, and transparency as core business values. Their business model focuses on retailing quality food products with a strong commitment to environmental and social responsibility. The website reflects a mature digital presence with comprehensive customer engagement features such as a loyalty program (tebonus), recipe collections, and an online shop.

MGM spol. s r.o. is a well-established Czech manufacturer specializing in thermal cutting machines and welding aggregates, with a strong presence across Eastern and Central Europe. The company offers proprietary CNC control systems and a range of products including plasma and autogenous cutting machines. Their website reflects a mature business with detailed product showcases, video demonstrations, and comprehensive contact information. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, though some libraries are outdated. Security posture is moderate with cookie consent implemented but lacking explicit privacy policies and security headers. WHOIS data is unavailable due to EURid privacy restrictions, which is typical for .eu domains, but the business legitimacy is supported by consistent contact and company information. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

A

AUDIT ADVICE s.r.o.

auditadvice.cz

50

AUDIT ADVICE s.r.o. is a Czech Republic based small-sized company specializing in accounting, payroll, tax advisory, and document archiving services. With over 15 years of experience, it serves firms, entrepreneurs, and various associations primarily in the Tábor region. The company offers comprehensive outsourcing solutions and emphasizes professionalism and trust in its service delivery. The website reflects a professional and consistent brand image with clear service descriptions and client-oriented content. Technically, the site uses modern frameworks like Bootstrap and integrates popular analytics and marketing tools such as Google Analytics and Facebook Pixel. While the site is mobile-optimized and well-structured, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security-wise, HTTPS is implied, but security headers and incident response information are absent, suggesting room for improvement. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear legitimate and professional overall.

W

Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej w Katowicach

orsip.pl

72

ORSIP 2.0 is a regional government geoportal operated by the Wojewódzki Ośrodek Dokumentacji Geodezyjnej i Kartograficznej in Katowice, Poland. It provides comprehensive spatial data services, including interactive map applications, open data access, and web map services for the Silesian Voivodeship. The platform targets public administration, local governments, researchers, and citizens interested in regional spatial information. The website is well-structured, professionally designed, and offers extensive content relevant to its audience. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, with a focus on accessibility and mobile optimization. The hosting and domain registration are stable and consistent with the official nature of the service. Security measures include HTTPS enforcement, DNSSEC, cookie consent mechanisms, and CAPTCHA on contact forms, reflecting a good security posture. While no explicit security policy or incident response contacts are published, the overall security and privacy compliance are strong, with GDPR-aligned cookie and privacy policies. The WHOIS data confirms legitimacy and long-term operation, supporting trustworthiness. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, ORSIP 2.0 represents a mature, reliable government geoportal with solid technical and security foundations, serving an important role in regional spatial data dissemination and public service.

Invest in Silesia is the official regional government platform dedicated to promoting investment opportunities and economic development in the Silesia region of Poland. The website serves as a comprehensive resource for investors, businesses, and entrepreneurs seeking information on regional economy, investment offers, business support institutions, and export facilitation. It is managed by the Urząd Marszałkowski Województwa Śląskiego (Marshal's Office of the Silesian Voivodeship), reflecting a strong governmental backing and regional development focus. Technically, the website employs a modern and well-structured technology stack including Bootstrap, jQuery, and various JavaScript libraries for UI components, data visualization, and calendar functionalities. The site is mobile-optimized, accessible, and uses HTTPS with DNSSEC enabled, indicating a secure and trustworthy infrastructure. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. From a security perspective, the site benefits from HTTPS and DNSSEC, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with clear cookie consent mechanisms and a privacy policy aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for regional investment promotion. Strategic recommendations include enhancing security posture by adding security headers, publishing a formal security policy, and providing incident response contact information to further strengthen trust and compliance.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.

Wohngemeinschaft Falkennest is a Swiss non-profit organization providing protected living spaces and social rehabilitation services for young adults aged 18 to 30 facing social difficulties. It operates under the oversight of the Basel-Landschaft canton government and is part of the Stiftung Jugendsozialwerk Blaues Kreuz BL. The website is professionally designed, content-rich, and targets clients, volunteers, and stakeholders in social services. Technically, the site uses a modern JavaScript stack with frameworks such as webIQ and Bootstrap, ensuring good mobile optimization and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the domain and website present a trustworthy and legitimate entity with strong Swiss social service credentials.

Jugendwohngruppen Im Park is a Swiss non-profit organization focused on providing supported living and social integration services for youth in Basel. It operates under the umbrella of Jugendsozialwerk Blaues Kreuz BL and offers residential groups, assisted living, and placement services for young people, including those with psychological stability. The organization maintains a professional online presence with clear contact information, certifications, and social media engagement. Technically, the website uses modern web technologies and frameworks, including webIQ, Bootstrap, and jQuery, and is mobile optimized with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and could be improved. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

The website slaskie.pl serves as the official online portal for the Marshal's Office of the Silesian Voivodeship in Katowice, Poland. It provides comprehensive information about regional government activities, public services, cultural events, and regional development initiatives. The site targets residents and stakeholders within the Silesian region, offering access to news, administrative resources, and social media engagement. The business model is that of a government public service entity, positioning itself as the authoritative source for regional information and services. From a technical perspective, the website employs a modern technology stack including Bootstrap, jQuery, FontAwesome, and various JavaScript libraries for enhanced user experience such as DataTables and FullCalendar. The site is hosted by OVH SAS, a reputable provider, and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. Security-wise, the site benefits from HTTPS encryption and a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and security headers like Content-Security-Policy and Strict-Transport-Security, which are recommended to enhance protection. No incident response or vulnerability disclosure information is provided, indicating an area for improvement in security transparency. Overall, the website is trustworthy and professional, with a high legitimacy score based on WHOIS data and content consistency. It effectively serves its government function with good content quality and user experience. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing security policies to strengthen its security posture and compliance.

M

Moravskoslezské energetické centrum, příspěvková organizace

mskec.cz

54

Moravskoslezské energetické centrum, p. o., is a Czech regional public organization founded in 2014, specializing in energy consulting, management, and clean mobility development for the Moravskoslezský kraj region. The organization provides expert advisory services to regional public institutions and municipalities, focusing on energy savings, renewable sources, and strategic regional development. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response details. Overall, the site is trustworthy, compliant with GDPR, and well-positioned as a regional energy consultancy.

I

IPEXO

ipexo.cz

57

IPEXO is a Czech-based IT service provider specializing in cybersecurity, cloud services, website and e-shop development, and digital marketing. The company targets businesses seeking comprehensive internet solutions to enhance security, online presence, and customer acquisition. The website demonstrates a professional design with clear navigation and multiple interactive contact forms protected by Google reCAPTCHA, indicating a moderate level of digital maturity and security awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. The site lacks explicit security policies and incident response information, which are critical for trust in cybersecurity services. Overall, the website is functional and professional but would benefit from enhanced transparency and security disclosures.

S

studio KUTULULU, s. r. o.

kutululu.cz

60

Studio KUTULULU, s. r. o. is a small Czech graphic design studio specializing in branding, web design, and related creative services. The website is professionally designed, multilingual, and targets a general audience primarily in the Czech Republic. The business presents itself clearly with contact details and a portfolio of projects, indicating a niche local market position. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses popular plugins for SEO, multilingual support, and GDPR compliance. The site is mobile optimized and performs moderately well. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. It uses Facebook Pixel and Google Analytics for marketing and analytics, reflecting moderate user tracking. However, no explicit security policies or incident response information are published, and no WHOIS data is available due to privacy protection or domain registration issues. Despite this, the site shows no signs of malicious activity or vulnerabilities in the visible content. Overall, the website demonstrates a good security posture with room for improvement in publishing security policies and adding security headers. The business credibility is supported by clear contact information and professional presentation. The lack of WHOIS data slightly reduces trust but is common for small businesses. Strategic recommendations include enhancing security headers, publishing incident response info, and maintaining regular audits of third-party scripts.

B

Blaues Kreuz Schweiz

blaukreuzverlag.ch

53

Blaues Kreuz Schweiz is a well-established Swiss non-profit organization dedicated to addiction prevention, support, and education. The organization offers a range of services including counseling, prevention programs, and publishes educational materials related to addiction. The website analyzed focuses on their book offerings, which have recently transitioned to a partner publisher, Mosaicstones. The organization maintains a strong market position in Switzerland with a history spanning over 140 years, supported by trusted certifications such as ZEWO and active social media engagement. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools including Google Analytics, Matomo, and Google Tag Manager. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but the absence of a cookie consent mechanism and published security policies indicates room for compliance enhancement. Overall, the website presents a professional and trustworthy image with clear contact information and transparent business details. The content is mature-themed focusing on addiction and health education, suitable for a broad audience including affected individuals and professionals. No blocking or WAF challenges were detected, allowing full content accessibility and analysis.

The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.

B

Blaues Kreuz Aargau-Luzern

blaueskreuz-aglu.ch

56

Blaues Kreuz Aargau-Luzern is a well-established Swiss non-profit organization specializing in addiction counseling, treatment, and prevention, particularly focused on alcohol and other substance abuse. With over 140 years of experience, it serves affected individuals, their families, and employers in the Aargau-Luzern region. The organization offers free, confidential, and professional support services, alongside active prevention programs such as youth engagement and test purchases. The website reflects a mature, professional presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on TYPO3 CMS, integrates privacy-respecting analytics (Matomo), and uses modern web technologies, though it lacks some advanced security headers and cookie consent mechanisms. The domain registration aligns well with the organization's identity, supporting its legitimacy and trustworthiness.

S

St.Galler Stadtwerke

sgsw.ch

66

St.Galler Stadtwerke is a regional utility provider based in St.Gallen, Switzerland, offering a comprehensive range of services including electricity, water, gas, district heating, fiber optic connectivity, and e-mobility solutions. The company positions itself as a reliable partner for the city's energy and infrastructure needs, targeting both residential and business customers. Their website reflects a professional and customer-focused approach with clear service offerings and accessible contact information. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome Pro, and the ArcGIS JavaScript API for interactive mapping. It integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and includes CSRF protection scripts, but lacks visible security headers and explicit security or incident response policies. Tracking scripts are present without a clear cookie consent mechanism, which may pose privacy compliance risks. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, well-maintained, and professionally presented, with minor recommendations to enhance privacy compliance and security transparency.

A

Animals life

animalslife.net

65

Animals Life NET is a small non-profit organization based in Latvia that operates a global platform for live streaming animal shelters to support animal welfare. The website facilitates donations and purchases of supplies for shelters worldwide, targeting animal lovers and donors. The platform is technically built on WordPress with integrations for live chat, push notifications, and analytics. While the site is professionally designed and content-rich, some security best practices such as advanced headers and cookie consent are missing. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the site presents a trustworthy and functional platform for its niche audience.

T

TEAS spol. s r.o.

teas.cz

43

TEAS spol. s r.o. is a well-established software supplier specializing in the automotive market in the Czech Republic and Slovakia, with a domain registered since 1997. The company positions itself as the largest software provider for this sector in the region, offering tailored software solutions to automotive businesses. Their website reflects a professional and consistent brand image, targeting automotive industry clients with clear navigation and relevant content. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager for analytics, and uses a reputable consent management platform to comply with privacy regulations. Hosting is provided by Forpsi, a known Czech hosting provider. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

C

CIRA Advisory s.r.o.

ciraa.eu

45

CIRA Advisory s.r.o. is a Czech-based consulting, advisory, and educational company specializing in sustainability, ESG, and circular economy services. Founded in 2019 as a sister company to the Institute of Circular Economy, it leverages nearly a decade of expertise to serve Czech companies and institutions. The company offers a broad range of services including circular audits, ESG consulting, communication strategies, and tailored education programs. Their market position is supported by strong partnerships and client testimonials, indicating a trusted niche player in the sustainability consulting sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, and integrates Google reCAPTCHA v3 for form security. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices, although accessibility could be further enhanced. Performance is moderate, with a professional design and clear navigation. Security posture is strong with HTTPS enforced, multiple security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy or incident response information, which could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by clear contact information, professional content, and trust signals such as testimonials and partner logos. Overall, the website presents a professional, secure, and trustworthy digital presence aligned with the company's business focus. The domain WHOIS data is privacy protected, which is common and justified for this business type, though it limits transparency. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

Midis is a Latvian-based software development company specializing in custom software solutions, ERP/CRM development, and IT consulting services. They position themselves as a leading Odoo Implementation Partner in Latvia and offer additional services such as AWS workload migration and staff augmentation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions targeting SMBs and enterprises in the technology and transportation sectors. Technically, the site is built on the Odoo CMS platform and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, with a cookie consent mechanism in place. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit policies are missing. WHOIS data is unavailable due to EURid privacy policies, but the website's professional content and contact information support its legitimacy. Overall, the site demonstrates good digital maturity and business credibility.

A

Agile CRM

agilecrm.com

62

Agile CRM is a technology company providing a comprehensive SaaS Customer Relationship Management platform targeting small businesses. The website presents a professional, well-structured digital presence with a focus on sales, marketing automation, and customer service features. The company has a significant customer base (15,000+ customers) and promotes integrations and partnerships with other technology providers. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enforced and secure form handling, though some security headers and explicit policies are missing. The absence of WHOIS data reduces domain trust slightly but the overall business credibility remains high based on content and branding. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. Overall, the website is safe, professional, and trustworthy with room for improvement in security transparency and privacy compliance.

B

BalticLiveCam.com

balticlivecam.com

67

BalticLiveCam.com is a well-established online platform specializing in live webcam streaming primarily focused on the Baltic region but also covering global cities. The website offers free access to over 600 cameras across 90 countries, targeting a general audience interested in real-time city views, events, and TV streaming. The business model is primarily advertising-supported, leveraging multiple ad networks and tracking services to monetize traffic. The company has maintained domain registration since 2012, indicating stability and market presence. Technically, the site is built on WordPress with Bootstrap and jQuery, integrating modern analytics tools such as Google Analytics and Yandex Metrika. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks advanced HTTP security headers like Content-Security-Policy and X-Frame-Options. No incident response or vulnerability disclosure information is provided, which could be improved. No critical vulnerabilities or suspicious content were detected, and the site maintains a moderate security posture. Overall, BalticLiveCam.com presents a trustworthy and professional online media service with solid business credibility and technical implementation. Strategic improvements in security headers and incident response transparency would enhance its security posture and user trust.

V

Valsts vides dienests

skiroviegli.lv

51

The website skiroviegli.lv is an official Latvian government environmental service platform managed by Valsts vides dienests. It provides comprehensive information about public waste sorting and collection points across Latvia, promoting sustainable waste management practices to residents and municipalities. The platform integrates interactive maps and multilingual support to enhance user accessibility and engagement. The website is well-branded with government and EU project logos, reinforcing its official status. Technically, the site employs modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet for interactive mapping, alongside Google Translate and Google Tag Manager for multilingual support and analytics. The site is mobile-optimized and structured for good user experience, although accessibility compliance is only partial. No CMS or hosting provider details are evident from the content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and there is a lack of privacy and cookie policies, which are important for GDPR compliance. No forms collecting personal data were found, reducing immediate privacy risks. The WHOIS data confirms the domain is registered to the Latvian State Environmental Service, supporting legitimacy, though some WHOIS details like registrar and creation date are missing. Overall, the website is a credible, government-backed platform with good content quality and technical implementation. To enhance security and compliance, it should implement security headers, publish privacy and cookie policies, and improve accessibility. These steps will strengthen user trust and regulatory adherence.

S

SIA Rēzeknes Namsaimnieks

reznam.lv

49

SIA Rēzeknes Namsaimnieks is a Latvian property management company focused on servicing residential and municipal properties in Rēzekne. The website provides information about their services including property maintenance, energy efficiency, procurement, and community projects such as animal shelter support. The company targets local residents and property owners, positioning itself as a regional leader in property management. The website is built on WordPress, leveraging common web technologies and hosted behind Cloudflare DNS services. The site includes client login portals and regularly updated news content, indicating active engagement with its audience. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial with a basic privacy policy present but no explicit GDPR consent tools. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

S

SIA Rēzeknes siltumtīkli

rezeknessiltumtikli.lv

52

SIA Rēzeknes siltumtīkli is a Latvian energy company specializing in centralized heating services for the city of Rēzekne. The company provides essential utility services including heating supply, billing, and technical support. Their website serves as an information portal for customers, offering tariff details, project updates, and contact information. The business targets local residents and businesses requiring heating solutions, positioning itself as a key regional energy provider. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder and Slider Revolution, with Bootstrap for responsive design. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. Google Analytics is used for visitor tracking, accompanied by a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website content, indicating a legitimate and consistent domain registration. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by adding explicit security policies and enhancing security headers. The risk level is low, with recommendations focusing on strengthening security posture and transparency.

B

BitInfoCharts

bitinfocharts.com

66

BitInfoCharts is a well-established cryptocurrency statistics platform providing detailed data on multiple cryptocurrencies including Bitcoin, Ethereum, Dogecoin, and Litecoin. The website offers a variety of services such as price tracking, mining calculators, blockchain explorers, and rich lists, targeting cryptocurrency investors, traders, and enthusiasts. The platform is recognized for its comprehensive and up-to-date cryptocurrency analytics, positioning itself as a trusted resource in the crypto community. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, delivering a responsive and user-friendly experience with good SEO and mobile optimization. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit security policies and cookie consent mechanisms, which are recommended for compliance and user trust. Overall, BitInfoCharts demonstrates a solid security posture with room for improvement in privacy compliance and transparency. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing accessibility features to further strengthen trust and compliance.

R

Rēzeknes valstspilsēta pašvaldība

rezekne.lv

51

Rēzeknes valstspilsēta pašvaldība operates the official municipal portal for the city of Rēzekne in Latvia, providing comprehensive information and services to residents and visitors. The website serves as a central hub for city administration, public services, news, cultural events, and investment opportunities, positioning itself as a key government resource in the region. The site targets local citizens, businesses, and tourists, offering multilingual support in Latvian, English, and Russian. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO tools like Rank Math, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements, making it a reliable digital presence for the municipal government.

S

Stiftung zur Palme

palme.ch

51

Stiftung zur Palme is a well-established Swiss non-profit foundation providing residential, work, and training opportunities for people with cognitive impairments. With over 50 years of experience, it offers a broad range of services including sheltered workplaces and diverse product lines such as bakery, gardening, and creative workshops. The organization targets individuals with disabilities, their families, customers of their products, and potential donors. Technically, the website uses modern frameworks like Bootstrap and integrates analytics tools with privacy considerations, though it lacks a cookie consent mechanism. Security posture is solid with HTTPS and secure forms, but could be improved by adding security headers and incident response policies. Overall, the website is professional, trustworthy, and accessible, reflecting the organization's credibility and commitment to inclusion.

B

Blaues Kreuz Schweiz

blaueskreuz.ch

55

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to supporting individuals affected by alcohol addiction, their families, and promoting addiction prevention and youth protection. It serves as the umbrella organization for addiction support services in Switzerland, offering counseling, online support, group activities, and prevention campaigns. The organization maintains a strong regional presence and is recognized by certifications such as ZEWO, enhancing its trustworthiness. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with a professional design and clear navigation, although accessibility could be improved. Security best practices are observed with HTTPS enforcement and security headers, but explicit cookie consent and security policies are lacking. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a vulnerability disclosure policy and incident response contacts indicates room for improvement in transparency and readiness. Privacy compliance is moderate, with a privacy policy present but no cookie consent mechanism. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional online presence aligned with its mission. Strategic enhancements in privacy compliance, security transparency, and accessibility would further strengthen its digital maturity and stakeholder trust.

M

Maestrani Schweizer Schokoladen AG

maestrani.ch

63

Maestrani Schweizer Schokoladen AG is a well-established Swiss family-owned chocolate manufacturer with a history dating back to 1852. The company produces and markets Swiss chocolate under its own brands Minor and Munz, operates a B2B webshop for promotional chocolates, and offers a visitor experience called Chocolarium. The website is professionally designed, multilingual, and provides comprehensive information about the company, its products, and career opportunities. Technically, the site is built on Drupal 10 with modern web technologies, is mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and consent management, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital presence aligned with the company's market position and business model.

P

Printful

printful.me

69

Printful is a leading print-on-demand and dropshipping platform that enables entrepreneurs and brands to design, create, and sell custom products online without managing inventory. The company offers extensive integrations with popular e-commerce platforms and provides tools for product customization and fulfillment. The website reflects a mature, professional business with strong branding and trust indicators, including high customer ratings and partnerships with well-known brands. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, and Webpack, alongside analytics and error tracking tools like Google Analytics, Google Tag Manager, and Sentry. The site is optimized for performance and mobile responsiveness, with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses security headers, and implements CSRF protections. However, it lacks a publicly visible dedicated security policy or incident response contact information, which could enhance transparency and trust. The WHOIS data is unavailable, which raises minor concerns but does not detract significantly from the site's legitimacy given its established market presence. Overall, Printful's website demonstrates a strong digital maturity and business credibility, with recommendations to improve security transparency and WHOIS data availability to further strengthen trust and compliance.

C

Cebia, spol. s r.o.

carolina.cz

60

Carolina.cz is a Czech Republic-based mobile application focused on vehicle management, offering services such as vehicle history verification, cost tracking, valuation, insurance, and financing. The app is co-owned by Cebia, spol. s r.o., a company specializing in automotive data services, and ESSOX s.r.o., a financial services provider. The website presents a professional and user-friendly interface with clear navigation and comprehensive content tailored to motorists in the Czech market. Technical infrastructure includes modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Cookiebot for consent management. The site is mobile-optimized and integrates app download links for multiple platforms including Android, iOS, and Huawei AppGallery. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and published security policies. WHOIS data is missing, which impacts domain trustworthiness, though business legitimacy is supported by visible partnerships and contact information. Overall, the site demonstrates a solid digital presence with room for security and compliance enhancements.

CebiaNET is a professional service portal associated with the Cebia brand, providing login access for professional users likely related to automotive or related sectors. The website presents a clean, professional interface with a focus on secure user authentication. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, FontAwesome, and ASP.NET MVC framework, indicating a mature and maintainable platform. Security practices such as HTTPS usage and CSRF tokens are implemented, though some security headers are missing and cookie consent mechanisms are absent, which could be improved to enhance compliance and security posture. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the perceived legitimacy given the professional branding and contact information. Overall, the site is functional, secure, and targeted at a professional audience with moderate risk and room for improvement in privacy compliance and security hardening.

C

Car Aukce, spol. s.r.o.

caraukce.cz

50

Car Aukce, spol. s.r.o. operates an established online vehicle auction platform primarily serving the Czech market. The company offers services including vehicle purchase and sales auctions, operative leasing, and vehicle verification, targeting both individual and business customers. With over 20 years of experience and more than 51,000 vehicles sold, the company holds a strong market position supported by partnerships with reputable organizations such as Cardetect. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive auction information. Technically, the site employs modern JavaScript libraries and frameworks like jQuery, Bootstrap, and integrates analytics and verification services such as Google Analytics and Foxentry. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and published security policies suggests room for improvement. Overall, the website demonstrates high business credibility and good privacy compliance, making it a trustworthy platform for vehicle auctions.

O

Ohlmann Group

ohlmanngroup.com

67

Ohlmann Group is a well-established marketing and advertising agency based in Dayton, Ohio, with a history spanning over 75 years. The company offers a comprehensive range of marketing services including strategy, digital marketing, branding, media buying, and public relations. Their market position is strong regionally, supported by multiple industry awards and client testimonials. The website reflects a professional and consistent brand image targeting business clients seeking integrated marketing solutions. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates various marketing and analytics tools such as Google Tag Manager and Koi Marketing Automation. Hosting is provided by MediaTemple, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site uses HTTPS and domain status locks but lacks DNSSEC and security headers. There is no visible security or incident response policy, and no cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

C

Cirrus Owners & Pilots Association

cirruspilots.org

64

The Cirrus Owners & Pilots Association (COPA) is a well-established non-profit organization founded in 2001, serving a global community of Cirrus aircraft owners, pilots, and aviation enthusiasts. The organization provides a comprehensive suite of services including safety training, proficiency programs, social events, forums, and member discounts, positioning itself as a niche leader in the aviation community. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and EasyDNNnews modules. It is hosted with Cloudflare DNS and uses NameCheap as the registrar. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers, and publicly available security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. The WHOIS data shows privacy protection typical for non-profits and a domain age consistent with the organization's history, supporting legitimacy. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in DNS security, security headers, and privacy mechanisms would strengthen the site's trustworthiness and regulatory adherence.

SuperCub.Org is an established online community and forum dedicated to Piper Super Cubs and similar aircraft enthusiasts, focusing on backcountry flying and related adventures. The website offers forums, classifieds, videos, membership services, and an online store, targeting a niche audience of aviation hobbyists and pilots. The business is operated by SLP, INC., a US-based entity with a domain registration dating back to 2000, indicating a mature and stable presence in its niche market. Technically, the website employs a Bootstrap framework with jQuery and Google Fonts, hosted on infrastructure using Google Cloud DNS. It integrates Google Analytics for visitor tracking and MailChimp for email marketing. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced CMS features and some modern security enhancements such as DNSSEC and security headers. From a security perspective, the site uses HTTPS and has domain statuses that prevent unauthorized transfers or deletions, which are positive indicators. However, it lacks DNSSEC and important HTTP security headers like Content-Security-Policy and HSTS, which could improve its security posture. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional, professionally designed, and serves its community well but would benefit from enhanced security measures and improved privacy compliance to reduce risk and increase user trust.

I

InkSoft

inksoft.com

64

InkSoft operates as a specialized e-commerce platform focused on businesses selling custom branded merchandise, including decorated apparel and promotional products. The company positions itself as a comprehensive solution provider, offering tools from order management to delivery, targeting apparel decorators, promotional product distributors, and print businesses. The website reflects a mature digital presence with extensive resources, customer testimonials, and integration partnerships, indicating a solid market position within its niche. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for UI and analytics. The site is mobile-optimized, SEO-friendly, and integrates marketing and tracking tools such as HubSpot and Google Tag Manager. Performance is moderate with good accessibility and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain raises some concerns about domain transparency and trust, although the website content and business information appear professional and consistent. Overall, InkSoft presents a trustworthy and professional online presence with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trustworthiness.

I

iChrono

ichrono.cz

45

iChrono.cz is a Czech Republic-based e-commerce retailer specializing in Swiss watches and related accessories. The company positions itself as an authorized exclusive distributor for multiple prestigious Swiss watch brands, offering a wide selection of mechanical and quartz watches with added value services such as a 5-year warranty on glass and battery replacements. Their professional service center further strengthens their market position by providing authorized servicing and repairs. The website is well-structured, professionally designed, and targets consumers interested in luxury and quality Swiss timepieces. Technically, the site uses a CMS platform (Topinfo CMS) with modern libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, though lacks explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business presentation and contact information support legitimacy. The site is free from adult or questionable content and complies with GDPR requirements through clear privacy and cookie policies.

S

SportsBet.com

sportsbet.com

57

SportsBet.com is an established online platform providing information, tips, and live odds related to sports betting, horseracing, and online casino games. The site operates primarily as an affiliate marketing business, directing users to betting platforms such as bet365. The website is well-structured, with good content quality and clear navigation, targeting adult sports bettors and gambling enthusiasts. Technical infrastructure includes modern libraries and frameworks like jQuery, Bootstrap, and Google Tag Manager, supporting a responsive and moderately performant user experience. Security posture is adequate but could be improved with enhanced security headers and explicit policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the site's content and affiliate relationships lend credibility. Privacy compliance is basic, with cookie consent implemented but limited GDPR indicators. Overall, the site is professional and trustworthy within its niche but would benefit from improved transparency and security documentation.

Hartzell Propeller operates a professionally designed website focused on aviation propeller manufacturing and related services. The site targets pilots and aviation enthusiasts, providing rich content including articles, videos, and product information. The business is well positioned in the transportation sector with a strong brand presence and digital marketing efforts. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Overall, the website is trustworthy and professional, with clear contact information and social media presence, but should enhance privacy compliance and security transparency.

Hartzell Propeller Service Center is a specialized FAA-certified repair station focused exclusively on the Hartzell product line, offering propeller repair, overhaul, sales, and support services. The company positions itself as a trusted source for guaranteed lead times, industry-best warranty, and a dedicated exchange program, targeting general aviation operators and maintenance organizations. The website reflects a medium-sized business with a professional and consistent brand presence, supported by customer testimonials and FAA certification as trust indicators. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Maps and Google Analytics for enhanced user experience and tracking. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and functional, but could enhance compliance and security practices to strengthen its digital maturity and risk posture.

D

DPS Skis

dpsskis.com

67

DPS Skis is a premium e-commerce business specializing in advanced skis made with aerospace carbon fiber technology. The company targets skiing enthusiasts seeking high-performance powder skis. Their market position is that of an innovative leader in ski manufacturing and retail. The website is built on Shopify, leveraging modern web technologies and marketing tools such as Klaviyo and Facebook Pixel. The site demonstrates good technical maturity with fast performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS, frame busting, and cookie consent, though it lacks explicit security policies and incident response information. The absence of WHOIS data is a concern but the professional site and Shopify hosting mitigate risk. Overall, the site is trustworthy and well-constructed, supporting a medium-sized business in the outdoor sports retail sector.