Security Directory

D

Domains By Proxy, LLC

esle.io

67

Esle.io is a small educational content website specializing in providing free printable coloring pages for children, featuring categories such as animals, cartoons, and landscapes. The site targets parents and children seeking accessible and free art activities. The business model appears to be ad-supported, leveraging Google Adsense and related advertising networks. The website is professionally designed with good navigation and mobile optimization, using modern web technologies including Bootstrap, Google Fonts, and Font Awesome. The technical infrastructure includes Cloudflare DNS and GoDaddy as the registrar, with Google Analytics and Microsoft Clarity for user tracking. Security posture is moderate with HTTPS enforced and domain status protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is safe for general audiences with no adult content detected.

H

Hosting Ukraine LLC

redvid.io

60

RedVid.io is a small technology company providing a free online utility service that allows users to download videos, audio, GIFs, and images from Reddit. The service is positioned as a fast, easy-to-use tool with no registration required, targeting Reddit users who want to save content offline. The business model relies on advertising revenue, primarily through Google Adsense. The website is professionally designed with good content relevance and clear navigation, optimized for mobile devices and multiple languages. Technically, the site uses modern web technologies including Google Fonts, Google Tag Manager, and Cloudflare DNS, hosted by Hosting Ukraine LLC in Ukraine. Security posture is good with HTTPS enabled and CSRF tokens in forms, though some security headers could be improved and DNSSEC is not enabled. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit security or incident response policies are found. WHOIS data is consistent with the website's business profile and domain age is appropriate for a recently launched service. Overall, RedVid.io presents a trustworthy and functional online tool with room for security and compliance enhancements.

MAXX Creative s.r.o. is a well-established creative agency based in the Czech Republic, specializing in marketing strategy, creative design, and campaign execution. Founded in 1998, the company has built a solid reputation with approximately 150 clients and multiple industry awards, positioning itself as a trusted partner for businesses seeking comprehensive creative services. The website reflects a professional and consistent brand image, targeting business clients in need of marketing and advertising solutions. Technically, the site employs modern frontend technologies including jQuery, Foundation, and Google Tag Manager, hosted on Tele3 infrastructure. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and published privacy or terms of service policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the site is trustworthy and professionally maintained, with a moderate to good security posture and compliance level.

R

REGARTIS

prague-chemicals-management-cruise.com

56

The website prague-chemicals-management-cruise.com serves as a professional landing page for the Prague Chemicals Management Cruise 2026, an event organized by REGARTIS and the Association of Chemical Industry of The Czech Republic. It targets chemical industry professionals and regulatory experts, focusing on global chemical regulations including REACH and sustainability strategies. The site provides detailed event information, pricing, and registration options, positioning itself as a niche conference organizer in the manufacturing sector. Technically, the site is built on the LeadPages platform, integrating modern analytics and marketing tools such as Google Analytics, Hotjar, and Google Ads. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be improved by adding security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

P

PT2020

portugal2020.pt

59

PT2020 is an official Portuguese government platform dedicated to supporting and disseminating information about the Portugal 2020 EU funding programs. The website serves as a central hub for project approvals, monitoring, user support, and communication with stakeholders. It targets public and private sector entities interested in EU investment opportunities, providing transparent access to program details and results. The platform maintains a consistent brand presence and leverages social media channels to enhance outreach and engagement. Technically, the website is built on WordPress using the Divi theme and several advanced plugins such as Advanced Custom Fields Pro. It integrates Google Analytics and Matomo for analytics tracking and employs Google Fonts and jQuery for frontend enhancements. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in security headers and hosting transparency. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Cookie consent mechanisms are implemented, and privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or exposed sensitive data were detected, though updating WordPress and plugins regularly and adding security headers would strengthen the security posture. Overall, PT2020 presents a trustworthy, professional, and well-maintained digital presence aligned with its government mandate. The risk level is low, with recommendations focusing on enhancing security best practices and accessibility compliance to maintain high standards.

P

Play Puls

playpuls.pl

60

Play Puls is a Polish media service delivering enhanced terrestrial digital TV viewing experiences via HbbTV technology. It allows users with internet-connected TVs to pause, rewind, and watch programs from Puls and Puls 2 channels live or on demand for free. The website is professionally designed with modern frontend technologies such as Tailwind CSS and Font Awesome, hosted by OVH SAS, and uses Cloudflare Insights for analytics. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide contact or security incident response information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, supporting a stable business presence.

G

GENNET, s.r.o.

praguespringsymposium.com

63

The Prague Spring Symposium website represents a specialized event platform organized by GENNET, s.r.o., a Czech healthcare company focused on genetics and reproductive medicine. The site promotes the upcoming 2026 symposium, targeting medical professionals and researchers. The business is positioned as a recognized international symposium organizer with a clear focus on scientific exchange and innovation in reproductive health. Technically, the website employs modern web technologies including jQuery and CookieScript for consent management, hosted likely on Czech infrastructure. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, DNSSEC is not enabled and security headers are missing, indicating room for improvement. Privacy compliance is strong with clear links to privacy and terms policies. No contact emails or phone numbers are provided, which could affect user trust and communication. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.

P

PyLadies

pyladies.com

57

PyLadies is a well-established international mentorship community dedicated to empowering women in the Python programming ecosystem. Founded in 2011, it operates as a non-profit organization providing mentorship, educational events, and community outreach globally. The website reflects a professional and consistent brand image with active social media integration and dynamic content sourced from Meetup and Twitter APIs. Technically, the site uses standard web technologies including jQuery, Google Analytics, and Twitter widgets, hosted likely on Netlify, with enforced HTTPS and domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers are detected, indicating room for security improvements. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site is trustworthy, accessible, and well-positioned within its niche.

S

Solid Solutions

solidsolutionsai.com

52

Solid Solutions is a small technology company based in the Netherlands specializing in custom AI and large language model (LLM) application development. Their services focus on delivering tailor-made conversational AI solutions that integrate with business processes to enhance efficiency and growth. The website presents a professional image with clear descriptions of their offerings, targeting businesses seeking AI automation and personalized AI solutions. Technically, the site is built on Webflow with modern web fonts and scripts, delivering moderate performance and good mobile optimization. However, the security posture is limited due to lack of visible security headers and absence of privacy or cookie policies. The WHOIS data is missing, raising concerns about domain registration legitimacy. Contact information is limited to an email address on a different domain, which may affect trust. Overall, the site is functional and business-focused but would benefit from improved security and compliance transparency.

S

SANOPHARM CZ s.r.o.

cytogenomika2025.cz

42

The website cytogenomika2025.cz serves as the official platform for the 58th Annual Cytogenomic Conference held in Prague, Czech Republic. It provides detailed information about the event, including dates, location, program, partners, and exhibitors. The site targets healthcare professionals, geneticists, and researchers interested in cytogenomic and genomic research and diagnostics. The business behind the site is SANOPHARM CZ s.r.o., a small healthcare-related entity organizing this scientific event. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience.

A

amazee.io

amazee.io

57

amazee.io is an enterprise-focused hosting platform designed to meet the needs of large organizations, emphasizing flexibility, data sovereignty, and security. The website presents a professional and modern digital presence built on React and Gatsby frameworks, indicating a mature technical infrastructure. The content is well-structured and targeted at large enterprises seeking secure and sovereign hosting solutions. However, the absence of visible privacy, cookie, and terms of service policies, as well as lack of explicit contact information, limits the transparency and compliance posture of the site. Security-wise, while HTTPS is implied, no explicit security headers or incident response contacts are found, suggesting room for improvement in security best practices and communication. Overall, the domain appears legitimate but privacy-protected in WHOIS, which is common for this business type. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving contact transparency to strengthen trust and compliance.

M

MoorFutures - MoorFutures

moorfutures-mv.de

45

The website 'MoorFutures - MoorFutures' is a German-language platform focused on environmental sustainability, specifically offering carbon certificates related to moorland rewetting projects in Mecklenburg-Vorpommern, Germany. The business appears to be a small, niche entity founded around 2022, targeting environmentally conscious individuals and organizations interested in climate protection. The website uses WordPress CMS with the Avada theme and Yoast SEO plugin, indicating a moderate level of technical infrastructure and digital maturity. The design and content quality are good, with clear focus and consistent branding, but lack comprehensive privacy and security policies. Security posture is weak due to missing security headers and unclear SSL configuration. No contact information or privacy compliance mechanisms are visible, which impacts trust and compliance scores. Overall, the site is safe and professional but would benefit from enhanced security and privacy practices.

achatpublic.info is a French media and information platform specializing in public procurement news, updates, and documentation. It serves public sector professionals, buyers, and suppliers by providing continuous coverage of market developments, regulatory changes, and practical tools. The website demonstrates a solid market position within the niche of government procurement information. Technically, the site is built on Drupal CMS, uses modern web technologies including Bootstrap and Google Tag Manager, and implements a GDPR-compliant cookie consent mechanism via Didomi. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. WHOIS data is unavailable due to privacy or query failure, which slightly reduces transparency but is common for such websites. Overall, the site is professional, trustworthy, and well-optimized for its audience.

W

Webtasy, d.o.o.

webtasy.si

61

Webtasy, d.o.o. is a Slovenian technology company that consolidates brands such as Domovanje.com, Domenca.com, and Si-shell.net, primarily offering web hosting and domain registration services. The website is built using the BaseKit CMS platform and hosts resources on domenca.com domains, indicating a regional hosting provider relationship. The site is accessible without any WAF or security challenge blocking, but lacks comprehensive business and security disclosures such as privacy policies, terms of service, and contact information. The WHOIS data is unavailable, raising concerns about domain registration legitimacy. Technically, the site uses modern fonts and cookie consent mechanisms but lacks advanced security headers and analytics integrations. Overall, the website presents a basic but functional digital presence for a small technology business.

M

Markthalle Aarau

markthalle-aarau.ch

63

Markthalle Aarau is a community-focused venue and event space located in Aarau, Switzerland, operating since 2002. It offers a variety of services including event hosting, sustainable exchange programs like 'Madame Frigo' and an open clothes cupboard, as well as community gardening initiatives. The website is professionally designed and targets local residents and visitors interested in cultural and sustainable activities. Technically, the site is built on Webflow, uses modern web fonts, and integrates Google Tag Manager for analytics. It is hosted on Webflow's CDN and performs moderately well with good mobile optimization. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy linked via a partner site but no cookie consent mechanism visible. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity.

E

Ekonomska šola Murska Sobota

vss-ms.si

46

Ekonomska šola Murska Sobota is an educational institution based in Slovenia, focused on providing secondary and higher vocational education in economics and informatics. The website serves as an informational platform for students, teachers, and staff, reflecting a regional educational provider with a medium-sized operation founded in 2009. The technical infrastructure is based on WordPress with the Divi theme and several accessibility and cookie consent plugins, indicating a moderate level of digital maturity. The site integrates social media via Facebook SDK but lacks advanced analytics or marketing tools. Security posture is moderate, with HTTPS implied but missing explicit security headers and no visible privacy or security policies. The absence of contact information and formal policies suggests areas for improvement in transparency and compliance. Overall, the website is professional and safe for general audiences but would benefit from enhanced privacy compliance and security practices.

K

Kmetijsko gozdarska zbornica Slovenije

kgzs.si

58

Kmetijsko gozdarska zbornica Slovenije (KGZS) is a Slovenian national chamber representing the public interest and stakeholders in agriculture, forestry, and rural development. The organization focuses on promoting sustainable agriculture, forestry, healthy environments, and safe food for the population. The website reflects a medium-sized, government-related entity with a clear mission and target audience within Slovenia's agricultural and forestry sectors. Technically, the website employs modern web technologies including Google Tag Manager, Google Fonts, Font Awesome, and reCAPTCHA for form security. The site is hosted by Webtasy, a Slovenian hosting provider, and uses HTTPS, indicating a secure connection. However, explicit privacy and cookie policies are not found in the provided HTML content, which is a compliance gap. Security posture is generally good with HTTPS and form protections but lacks visible security headers and incident response contacts. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

M

migrolino

migrolino.ch

70

Migrolino operates as a well-established retail convenience store chain in Switzerland, providing quick and convenient shopping options for daily needs. The website serves primarily as a shop finder and promotional platform, targeting the general Swiss public with localized language options in German, French, and Italian. The business model focuses on retail convenience with a strong physical presence across Switzerland, supported by an interactive map of store locations. Technically, the website leverages modern web technologies including Google Maps API, Google Fonts, and Google Analytics, ensuring a functional and user-friendly experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic privacy controls such as cookie consent, though explicit privacy policies and security headers could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business entity. Strategic recommendations include enhancing privacy compliance, publishing clear policies, and strengthening security headers to improve trust and compliance.

M

MDS Display

mdsdisplays.com

47

MDSdisplays.com is a professional website representing MDS Display, a Swiss-based company specializing in LED display solutions for various applications. The company offers a wide range of products including LED wall displays, hologram displays, LED posters, shelf displays, and innovative transparent LED films. With over 16 years of experience, MDS Display positions itself as a reliable supplier focused on quality, energy efficiency, and environmental protection. The website targets businesses and organizations seeking customized LED display solutions, providing multimedia content and downloadable catalogs to support customer engagement. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by Hostpoint AG, as inferred from the DNS nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, and no explicit security or incident response policies are published. The site does not expose sensitive data and uses a honeypot plugin to protect forms. Overall, the security posture is moderate but could be improved with additional headers and compliance measures. The domain registration is transparent and consistent with the business location and claims, though the domain age (registered in 2020) is younger than the company's stated experience, suggesting a possible rebranding or domain migration. No WAF or blocking mechanisms are detected, and the content is fully accessible. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

W

WNL

wnl.tv

62

WNL is a Dutch media broadcaster specializing in news, political commentary, and societal programming. The website serves as a digital platform for delivering news articles, video content, and podcasts to a Dutch-speaking audience. It also promotes membership support to sustain its operations. The site is well-integrated with the Dutch Public Broadcasting (NPO) infrastructure, indicating a reputable and established presence in the media sector. Technically, the website employs modern frameworks such as Laravel with Livewire, Alpine.js, and Swiper.js for a responsive and interactive user experience. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and CSRF protections in place, although some security headers could be explicitly confirmed and DNSSEC is not enabled. Privacy compliance is partial; while a cookie consent mechanism is present, no explicit privacy policy or terms of service were found in the provided content. Business credibility is high given the consistent WHOIS data, official social media presence, and professional content. Overall, the website is a trustworthy and professional media outlet with room for improvement in privacy and security policy transparency.

S

Slovenski podjetniški sklad

podjetniskisklad.si

54

Slovenski podjetniški sklad is a Slovenian government-related institution dedicated to supporting entrepreneurship, startups, and innovation through financial incentives, development partnerships, and promotional activities. The website serves as an information hub for entrepreneurs seeking funding and support programs. The organization holds a strong market position as a key national player in fostering business growth and innovation in Slovenia. Technically, the website is built on WordPress with a modern theme and multiple plugins enhancing user experience and functionality. It employs HTTPS and standard security headers, with a cookie consent mechanism ensuring GDPR compliance. However, it lacks explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, targeting Slovenian entrepreneurs and startups.

E

Ebo-systems S.A.S

ebo-systems.com

10

Ebo Systems is a specialist manufacturer of composite cable tray systems with over 60 years of experience, serving demanding industrial sectors such as energy, transportation, chemistry, and water. The company is part of the Niedax Group, a global leader in cable management solutions, which strengthens its market position and global reach across 27 countries. The website reflects a professional and well-structured digital presence built on WordPress, leveraging modern technologies and SEO best practices. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and privacy compliance documentation are lacking. WHOIS data is unavailable, which reduces transparency but does not negate the evident legitimacy of the business. Overall, the website is a credible and professional representation of a medium-sized industrial supplier.

F

Forstbetrieb Region Aarau

forst-aarau.ch

51

Forstbetrieb Region Aarau is a regional forestry management organization serving multiple municipalities in Switzerland, primarily Aarau, Biberstein, and Unterentfelden. The organization manages approximately 916 hectares of forest land, focusing on sustainable wood harvesting and diverse forestry services including garden and park forestry, tree care, root stock milling, consulting, and sales of firewood and forest products. The website is professionally designed using Joomla CMS and Bootstrap framework, providing clear navigation and relevant content in German for its target audience. Contact information is prominently displayed, enhancing business credibility. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some security headers and privacy compliance mechanisms such as cookie consent. No blocking or WAF challenges were detected, allowing full content access.

N

Nau.ch

nau.ch

49

Nau.ch is a Swiss online news portal delivering news content focused on Switzerland, covering sports, politics, and people. The website targets a general Swiss audience and positions itself as a modern news platform with multimedia content including videos. Technically, the site uses the Qwik framework, integrates Google Analytics and Tag Manager, and employs OneSignal for push notifications, indicating a mature digital infrastructure optimized for performance and mobile responsiveness. Security-wise, the site enforces HTTPS and appears to implement standard security headers, but lacks explicit published privacy and cookie policies, which are critical for GDPR compliance. No contact or incident response information is readily available, which could impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security transparency.

A

Aji Groupe

aji-groupe.com

51

Aji Groupe is a specialized communication agency based in Alsace, France, focusing on the gastronomy sector. Founded in 2015, the company offers a range of services including culinary photography, custom website creation, social media management, and proprietary software solutions such as Aji Box and Aji Manager. The agency positions itself as a regional expert with a strong emphasis on digital marketing tailored to culinary businesses. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern libraries and Google reCAPTCHA for security. Hosting is provided by OVH sas, a reputable French provider. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website is professional, well-branded, and compliant with GDPR, with clear trust indicators such as certifications and client testimonials.

E

Expano

expano.si

43

Expano.si is a well-established regional cultural and tourism promotion website focused on the Pomurje region in Slovenia. It offers immersive exhibitions, event information, ticket sales, and a retail shop, targeting tourists, families, and business visitors. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages. Technically, it uses modern web technologies including Google Maps API, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and vulnerability disclosures. Overall, the site is trustworthy and compliant with GDPR, supported by official EU and Slovenian government partnerships and certifications.

B

BOA arhitektid

boa.ee

47

BOA arhitektid is an established Estonian architecture firm specializing in architecture and main design services. Founded in 2011, the company presents a professional online presence showcasing a portfolio of architectural projects and competitions. The website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization. The technical infrastructure includes modern web technologies such as jQuery and Google Fonts, with hosting likely provided by Zone Media OÜ, an Estonian registrar and hosting provider. The site implements HTTPS and a cookie consent mechanism via CookieYes, reflecting a basic level of privacy compliance. However, explicit privacy policies and terms of service are not found, which could be improved for better compliance and user trust. Security posture is moderate with HTTPS enabled but lacks visible security headers and incident response contacts. Overall, the website is professional, well-structured, and suitable for its target audience of clients seeking architectural services.

T

Teamdash

teamdash.com

10

Teamdash is a technology company specializing in AI-enabled recruitment software designed for in-house talent acquisition teams. Their platform offers a comprehensive suite of tools including applicant tracking, recruitment marketing, video interviewing, automation, and analytics to streamline hiring processes and improve recruitment outcomes. The company positions itself as a highly customizable and innovative solution in the recruitment software market, supported by positive user ratings and industry recognition. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and Google Tag Manager integration. The site is well-structured with SEO best practices and mobile optimization, providing a professional user experience. However, the absence of WHOIS data and registrant information introduces some uncertainty about domain registration legitimacy. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service pages. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the security posture is good but could be improved with additional transparency and security controls. The overall risk assessment is moderate with recommendations to publish clear privacy and terms policies, enhance security headers, and clarify domain registration details to improve trust and compliance.

H

HD Televizija – HDTV eZine – Osnove, vijesti, upute i testovi televizora

hdtelevizija.com

52

HD Televizija is a Croatian niche media website specializing in HDTV technology, television reviews, buying guides, and calibration tutorials. Established in 2007, it serves a dedicated audience of consumers and enthusiasts interested in high-definition television technology and related equipment. The site operates primarily in Croatian with an English section, monetizing through advertising and affiliate marketing. Technically, the website is built on WordPress using the Jannah theme, leveraging common web technologies such as jQuery and Google Fonts. It employs Google Analytics and Adsense for tracking and monetization. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks published privacy and cookie policies, security policies, and vulnerability disclosures, which are compliance and trust gaps. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security transparency.

R

Recenzije Filmova i Serija

recenzijefilmova.com

53

Recenzije Filmova i Serija is a small media website focused on providing film and series reviews, news, trailers, and recommendations primarily targeting movie and series enthusiasts. The site is built on WordPress and uses common web technologies such as PHP, JavaScript, and Google Fonts. The digital maturity is moderate with good SEO practices and mobile optimization, but lacks advanced security headers and privacy compliance features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trust and protect user data.

C

CC Real

cc-real.com

65

CC Real is a small Austrian real estate investment and asset management company with a well-established online presence since 2007. The website presents a professional image with clear business descriptions and contact information, targeting investors and clients interested in real estate assets. The technical infrastructure is based on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, indicating a mature digital setup. Analytics and marketing tools are implemented with GDPR compliance in mind, including cookie consent mechanisms and privacy policies. Security posture is good with HTTPS enabled and domain registration protections, though some security headers could be improved. Overall, the site is trustworthy and professionally maintained, with no critical vulnerabilities or suspicious indicators detected.

C

CoolHotels.in

coolhotels.in

53

CoolHotels.in is a boutique online platform specializing in discovering and booking unique, luxurious, and curated hotels worldwide. Founded in 2021, the company targets travelers seeking distinctive hotel experiences through expert-curated guides and simple online booking links. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies including Google Fonts, Leaflet for maps, and Google Analytics for tracking, with a custom CMS or framework. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and formal security policies are absent. Privacy compliance is well addressed with a clear privacy and cookie policy. Overall, the business appears legitimate and trustworthy with consistent WHOIS data and no suspicious indicators.

W

wimagguc

wimagguc.com

60

The website www.wimagguc.com is a personal newsletter hosted on the Substack platform, focusing on publishing articles and essays under the brand 'wimagguc'. The publication was launched approximately 9 months ago and targets a general audience interested in thoughtful media content. The business model revolves around subscription-based content delivery via Substack, with no direct company contact information or extensive business infrastructure visible on the site. Technically, the site leverages Substack's hosting and CDN services, uses HTTPS with good SSL configuration, and integrates third-party services like Sentry for error tracking and Calendly for scheduling. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Privacy compliance is good, with clear links to Substack's privacy and terms pages and a cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences, but the lack of WHOIS data and direct contact information limits full business credibility assessment.

A

Abicart.se

abicart.se

57

Abicart.se is a Swedish e-commerce platform operated by Textalk AB, offering a comprehensive SaaS solution for businesses to start and manage online shops. The platform provides modern payment integrations, logistics support, multilingual capabilities, and AI-powered features such as automatic product description generation and translations. Positioned as one of Sweden's leading e-commerce platforms, Abicart targets entrepreneurs and businesses seeking affordable and scalable online store solutions. Technically, the website employs modern web technologies including React and Bootstrap, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and a public security policy are absent. WHOIS data for the www subdomain is unavailable, but the main domain and business legitimacy are supported by consistent branding and contact information. Overall, the site demonstrates a professional, trustworthy, and user-friendly e-commerce service with strong market positioning in Sweden and the Nordic region.

K

Katalozi.net / Svi katalozi na jednom mjestu

katalozi.net

56

Katalozi.net is a Croatian retail catalog aggregation website established in 2012, providing users with access to various promotional catalogs and offers from multiple retailers. The site leverages WordPress CMS with Yoast SEO for content management and optimization, and monetizes through Google Adsense advertising. The technical infrastructure includes Cloudflare DNS and hosting via GoDaddy.com, LLC. The website is well-structured with good navigation and content relevance, targeting general retail consumers in Croatia and neighboring regions. Security posture is moderate with HTTPS enabled and domain registration locks, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and trustworthy for its business purpose but requires improvements in privacy and security disclosures.

Gorivo.com operates as a regional ride-sharing platform primarily serving Croatia and neighboring countries. It facilitates peer-to-peer transportation by allowing users to offer and request rides, focusing on routes within Croatia and nearby European nations. The platform has been active since 2003, indicating a mature presence in its niche market. The website's business model centers on connecting drivers and passengers, providing a cost-effective and community-driven transportation alternative. Its market position is niche but stable, targeting individuals seeking carpooling options in the region. Technically, the website is built on ASP.NET WebForms with supporting libraries such as jQuery and Bootstrap, reflecting a legacy but functional technology stack. The site includes standard web fonts, UI components, and Google Adsense for monetization. Performance and mobile optimization are basic, with room for modernization. The site employs cookie consent mechanisms and basic privacy compliance features, though lacks advanced SEO and accessibility optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be a gap in compliance and trust. Advertising practices involve multiple ad networks and tracking vendors, indicating moderate user tracking. The overall security posture is average, with recommendations to enhance headers, enable DNSSEC, and publish security policies. Overall, Gorivo.com presents a functional but basic digital presence with moderate trustworthiness and compliance. Strategic improvements in security, privacy transparency, and technical modernization would enhance its risk profile and user confidence.

H

Vozni red vlakova | Udaljenosti.com

hznet.hr

44

Udaljenosti.com is a Croatian travel information website specializing in train schedules and travel planning for Croatian Railways. It targets travelers and commuters in Croatia, providing distance calculations and schedule lookups. The site operates primarily on an advertising revenue model and has been active since at least 2012. Technically, it uses a mix of legacy and modern web technologies including Google Fonts, Leaflet maps, Google Maps API, and Google Analytics. The site implements a cookie consent mechanism and integrates multiple advertising and tracking services. Security posture is moderate but could be improved by updating outdated libraries and adding security headers. WHOIS data is unavailable, which raises some concerns about domain legitimacy despite the active and functional website. Overall, the site is functional and provides relevant content but should address security and legitimacy concerns for improved trust.

WhatAltitude.com is a small, niche website created by Jonatan Heyman in 2013 that provides users with altitude information based on their GPS location. The site is a single-purpose informational tool supported by advertising revenue and uses multiple ad networks and tracking services. Technically, the site employs standard web technologies including jQuery, Google Fonts, Google Analytics, and social media SDKs, hosted behind Cloudflare DNS. Security posture is adequate with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not active and security headers are not explicitly detected. Privacy compliance is addressed via an embedded consent management platform, ensuring GDPR adherence. The site lacks formal contact emails or phone numbers and does not provide terms of service or explicit security policies. Overall, the website is safe, professional, and trustworthy for general audiences.

B

bedandbreakfast.guide

bedandbreakfast.guide

52

Bedandbreakfast.guide is a specialized online travel guide and booking platform focused on bed and breakfast accommodations worldwide. Established in 2014, it offers curated listings of unique and locally owned B&Bs, along with recommendations for nearby attractions such as coffee shops, restaurants, and museums. The website targets travelers seeking authentic and charming lodging experiences. Technically, the site employs modern web technologies including Google Fonts, Leaflet maps, and Google Analytics, ensuring a responsive and user-friendly experience. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. Security-wise, the site uses HTTPS and avoids exposing sensitive data, though it lacks explicit security headers and formal security policies. The WHOIS data is unavailable due to TLD restrictions and privacy protections, but the domain appears legitimate and consistent with the business profile. Overall, the website presents a professional and trustworthy platform for travelers interested in bed and breakfast accommodations.

L

LuxuryHotel.world

luxuryhotel.world

53

LuxuryHotel.world is a specialized online platform dedicated to providing comprehensive and independent guides to luxury hotels worldwide. Established in 2018, the company focuses on curating high-end five-star hotels and nearby amenities such as restaurants and bars, targeting discerning luxury travelers. The website offers detailed hotel listings with booking links, emphasizing trust and independence by not accepting payments for inclusion or preferential placement. Technically, the site employs modern web technologies including Google Fonts, SVG icons, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR, though it lacks some advanced security headers and formal incident response disclosures. Overall, the domain WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns are detected. The website presents a professional and trustworthy front with moderate to good technical and security posture.

Longitude.me is a small technology service operated by Heylab AB, based in Sweden, offering a simple and privacy-conscious real-time location sharing platform. The website is authored by Jonatan Heyman and is part of a portfolio of related travel and location-based projects. The service targets general internet users who want to share their location easily and temporarily. Technically, the site uses modern JavaScript libraries, integrates social media widgets, and is hosted with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No direct contact information or incident response details are provided, limiting transparency. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

H

Heylab AB

locust.io

51

Locust.io is an established open source load testing framework developed and maintained by Heylab AB, a Swedish company founded in 2011. The platform enables developers and performance testers to define user behavior in Python code and simulate millions of simultaneous users for scalable load testing. The website demonstrates a strong community presence with numerous contributors and endorsements from reputable companies such as Riot Games, Mozilla, Microsoft, and Google. Commercial support is offered via the related domain locust.cloud, indicating a hybrid open source and service business model. Technically, the website employs modern web technologies including Python-based backend, JavaScript, Google Fonts, Twitter widgets, and GitHub integration. Hosting and DNS services are managed through Cloudflare, ensuring reliable performance and security. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with fast loading times and clear navigation. However, some security best practices such as DNSSEC and security headers are not enabled, and privacy compliance documentation is absent. From a security perspective, the site uses HTTPS and has domain transfer protections in place. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is transparent and consistent with the business identity, enhancing trustworthiness. Nonetheless, the absence of privacy and cookie policies, security incident contacts, and vulnerability disclosure mechanisms represent compliance and security posture gaps. Overall, Locust.io presents a professional, trustworthy, and technically mature platform with room for improvement in privacy compliance and security policy transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

S

Statistics Iceland

statice.is

65

Statistics Iceland is the official national statistical institute of Iceland, providing comprehensive and authoritative data on population, society, business sectors, economy, and environment. The website serves a broad audience including researchers, policymakers, businesses, and the general public, offering access to statistical databases, tailored statistics, microdata services, and a variety of publications. The organization is well-established, with a domain registered since 1998, and holds recognized certifications such as ISO 9001 and ISO 27001, reinforcing its credibility and commitment to quality and security. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Fonts, and Datawrapper for interactive charts. It is hosted by a local Icelandic hosting provider, 1984 Hosting, and demonstrates good performance, mobile optimization, and accessibility. The site uses HTTPS with a good SSL configuration, although some security headers are missing. No WAF or blocking mechanisms are detected, allowing full content accessibility. From a security perspective, the site follows best practices such as HTTPS enforcement and absence of exposed sensitive data. However, it lacks explicit cookie consent mechanisms and a published vulnerability disclosure policy. The WHOIS data aligns well with the website's official status, showing consistent registration details and domain age appropriate for a government entity. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in privacy compliance and security header implementation. It effectively supports its mission as Iceland's official statistical authority.

G

www.greindubetur.is

greindubetur.is

59

The website www.greindubetur.is appears to be an informational site related to a competition or educational event, likely based in Iceland given the domain and timezone references. The site is built on the Squarespace platform, leveraging its standard templates and integrations such as Matomo for analytics and Google Fonts for typography. The business focus is on providing information about the competition, including rules, schedules, and educational materials, targeting participants and interested audiences in Iceland. The site links to a partner domain statscompetition.eu for registration, indicating a partnership or service relationship. From a technical perspective, the site is hosted on Squarespace, ensuring reliable infrastructure and HTTPS security. The site is moderately optimized for mobile and has a good design quality with clear navigation. However, there is a lack of advanced SEO and accessibility features. The site does not implement common security headers, which could be improved to enhance security posture. Security-wise, the site uses HTTPS and does not expose sensitive data or vulnerable libraries in the provided content. However, the absence of privacy and cookie policies, terms of service, and contact information reduces compliance with GDPR and general privacy best practices. No incident response or vulnerability disclosure information is present, which is a gap for security readiness. Overall, the site is functional and professionally presented but lacks several compliance and security best practices. The domain WHOIS data is not publicly available, which is common for Icelandic domains but slightly reduces trust. There are no indications of malicious activity or adult content, making the site safe for general audiences. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture.

The website represents the Gütegemeinschaft Anwerbung und Vermittlung von Pflegekräften aus dem Ausland e.V., a small German healthcare-focused organization providing a certification (RAL Gütezeichen) for fair recruitment of nursing professionals from abroad. The site positions itself as a trusted guide and certifier ensuring ethical, transparent, and fair recruitment practices. Technically, the site is built on the 1&1 IONOS Website Editor platform, using standard web technologies such as jQuery, Flexslider, and service workers for PWA capabilities. It employs Snowplow Analytics for user tracking and has a cookie consent mechanism in place, indicating GDPR awareness. Security posture is good with HTTPS enforced, but explicit security headers are not detected, and no dedicated security or incident response pages are found. Overall, the site is professional, trustworthy, and well-structured for its purpose.

K

Kuratorium Deutsche Altershilfe

einzelhelfer.de

46

The website einzelhelfer.de is a German-language informational platform dedicated to neighborhood help (Nachbarschaftshilfe) for care-dependent individuals, primarily funded and supported by the German Federal Ministry of Health and implemented by the Kuratorium Deutsche Altershilfe. It serves as a resource hub for recognized neighborhood help programs in several German federal states, aiming to support elderly and care-dependent people to live independently at home. The project was active from 2017 to 2020, and the website remains online as an archive and informational resource. Technically, the site is built on WordPress, utilizing common plugins such as SiteOrigin Panels, Toolset Blocks, and accessibility enhancements. It is hosted on Strato servers in Germany, uses HTTPS with a good SSL configuration, and includes accessibility features. The site performs moderately well with good mobile optimization and SEO practices. However, it lacks some modern security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses an accessibility plugin and Jetpack Stats for minimal user tracking. No critical vulnerabilities or security incidents are evident. Privacy compliance is partial, with a privacy policy page present but no cookie consent banner. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is a trustworthy, government-backed informational resource with good content quality and technical implementation. Strategic improvements include adding cookie consent, security headers, and more explicit contact and incident response information to enhance compliance and trust.

O

Oraclum Intelligence Systems

oraclum.co.uk

51

Oraclum Intelligence Systems is a UK-based data science company specializing in predictive analytics and market research. Their proprietary Bayesian Adjusted Social Network (BASON) Survey technology enables them to deliver highly accurate predictions, including notable successes such as Brexit and US election outcomes. The company targets businesses and organizations seeking advanced data-driven insights to optimize market strategies and understand customer behavior. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on their predictive services. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized and performs moderately well, with good SEO practices and structured data implemented. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for enhancement. The WHOIS data for the domain www.oraclum.co.uk is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. Despite this, the website is fully accessible and professionally maintained, suggesting the domain may be an alias or subdomain. This discrepancy slightly reduces trust but does not indicate malicious intent. Privacy policy is present and GDPR compliant, but cookie consent is missing. Contact information is limited to a contact form, with no explicit emails or phone numbers provided. Overall, Oraclum presents a credible and innovative business with a strong technical foundation and good security practices. Strategic improvements in compliance and security headers would enhance trust and user confidence.

H

Heroina | Samo još jedna WordPress web-stranica

heroina.hr

39

Heroina.hr is a small-scale WordPress website primarily using the Brooklyn theme by United Themes. The site appears to be a minimal or placeholder site with very limited business content, no privacy or cookie policies, and no contact information. The technical infrastructure is based on WordPress with multiple JavaScript libraries and plugins, indicating a moderate level of digital maturity but lacking in SEO and accessibility optimizations. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance measures. Overall, the site presents a low-risk profile but lacks professionalism and trust indicators, limiting its business credibility.

W

Whites Powersports

whitespowersports.com

69

Whites Powersports operates as a medium-sized retail and distribution company specializing in powersports products and accessories, primarily serving the New Zealand market. The company leverages a Shopify-based e-commerce platform to showcase and sell multiple brands, targeting powersports enthusiasts and retail partners. The website demonstrates a professional design with consistent branding and clear navigation, supporting a positive user experience. Technical infrastructure is modern, utilizing Shopify's hosting and content delivery network, with integration of analytics and marketing tools such as Google Analytics and Shopify Pixels. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data and lack of visible contact or security policies slightly diminish the overall trustworthiness. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers could be improved. Overall, the site presents a secure and compliant e-commerce presence with room for enhanced transparency and security documentation.

R

Rentlio d.o.o.

rentl.io

66

Rentlio d.o.o. operates a leading cloud-based property management system, channel manager, and booking engine tailored for the hospitality industry, including hotels, apartments, and property management companies. Founded in 2014 and headquartered in Zadar, Croatia, Rentlio positions itself as a comprehensive solution to streamline property management and drive business growth. The company targets hoteliers, vacation rental owners, and multi-property managers, offering a SaaS model accessible via web, iOS, and Android platforms. The website reflects a professional and modern digital presence with strong branding and positive user ratings.