Security Directory

B

benevol Kanton Bern

benevol-be.ch

57

benevol Kanton Bern is a well-established non-profit organization focused on facilitating and supporting volunteer engagement within the Kanton Bern region of Switzerland. The organization provides consulting, networking, training, and digital tools to volunteers, organizations, and municipalities. Their market position is strong regionally, supported by a professional website, clear contact information, and active social media presence. The website demonstrates a high level of digital maturity with modern technologies such as Google Analytics, Google Tag Manager, and Cloudflare Turnstile captcha integrated for security and analytics purposes. Privacy compliance is robust, featuring a detailed cookie consent mechanism and a comprehensive privacy policy in German. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

B

benevol Baselland

benevol-baselland.ch

57

benevol Baselland is a regional non-profit organization serving as the competence center for volunteer work in the Basel-Landschaft canton of Switzerland. The organization supports volunteers, associations, and municipalities through consulting, mediation, networking, and digital platforms such as benevol-jobs.ch. Their website reflects a professional and consistent brand image, targeting local community stakeholders and volunteers. The business model focuses on fostering voluntary engagement and providing resources and recognition for volunteer efforts. The organization is well-positioned regionally with partnerships and sponsorships from reputable local entities.

B

benevol Aargau

benevol-aargau.ch

52

benevol Aargau is a specialized non-profit organization dedicated to promoting and supporting volunteer work within the canton of Aargau, Switzerland. The organization provides advisory services, networking opportunities, and training for volunteers, non-profit organizations, and municipalities. Their website reflects a strong regional focus with clear communication and professional presentation, supported by a network of reputable partners and supporters. The site also promotes a dedicated volunteer job platform, enhancing engagement opportunities. Technically, the website employs modern web technologies including Laravel Livewire, Google Tag Manager, and Cloudflare's Turnstile CAPTCHA, ensuring a secure and responsive user experience. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though some security headers could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its non-profit mission.

F

Flexera

flexera.com

67

Flexera is a well-established enterprise specializing in IT management software and solutions, focusing on optimizing hybrid IT spend and risk management including ITAM, SaaS, and FinOps. With over 30 years of experience and a global team, Flexera serves more than 20,000 customers worldwide, positioning itself as a leader in technology spend optimization and IT insights. The company also operates a subsidiary, Revenera, which focuses on software monetization and analytics. The website reflects a mature digital presence built on Drupal 11, integrating advanced analytics and optimization tools such as Google Tag Manager and Visual Website Optimizer. While the site is professionally designed and mobile-optimized, SEO is limited by restrictive meta tags.

F

Flying Bisons Sp. z o. o.

bisons.dev

64

Flying Bisons Sp. z o. o. is a Warsaw-based technology company specializing in web and mobile development services. With over six years of market presence and more than 200 successfully delivered products, the company serves a broad range of clients including major international brands. Their business model focuses on custom software development, emphasizing collaboration with UX designers to ensure high-quality, secure, and user-friendly digital solutions. The company maintains a strong market position supported by positive client rankings and a commitment to agile methodologies. Technically, the website reflects a mature digital infrastructure utilizing modern technologies such as PHP, React, React Native, and various backend tools like Redis and Rabbit MQ. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. The use of Google Tag Manager and Iubenda for cookie consent demonstrates awareness of privacy and analytics best practices. From a security perspective, the website enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Overall, Flying Bisons presents a professional and credible online presence with strong technical and business foundations. Strategic improvements in security policy transparency and enhanced security headers would further strengthen their security posture and compliance standing.

S

swissporTON

swissporton.hr

55

swissporTON is a newly launched premium brand specializing in ceramic roof tiles, combining Swiss quality with durable design. The company targets investors, roofers, architects, and distributors primarily in Croatia and surrounding regions. Their product portfolio includes over 200 variations of ceramic tiles, thermal insulation, and roof drainage systems, supported by expert services and visualization tools. The website reflects a strong market position with a focus on quality and customer support. Technically, the website is modern, fast, and mobile-optimized, leveraging Cloudflare for hosting and CDN, and integrating advanced tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security posture is robust with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, swissporTON presents a professional and trustworthy digital presence aligned with its business goals.

P

PIKA SERVIS d.o.o.

mojsvet.com

46

PIKA SERVIS d.o.o. is a small Slovenian technology company specializing in computer hardware sales, repair services, web hosting, domain registration, and website development. Established in 2002, it serves local businesses, individual consumers, and educational institutions primarily in Murska Sobota. The company emphasizes customer satisfaction and offers integrated web solutions including AI-assisted site building. Technically, the website uses modern web technologies and is mobile optimized, though it lacks some advanced security headers. The site is served over HTTPS with a valid SSL certificate and includes a cookie consent mechanism, indicating basic privacy compliance. However, the domain is a subdomain without public WHOIS registration, which introduces some legitimacy concerns. Overall, the business appears credible with moderate trustworthiness but would benefit from improved security practices and clearer domain registration transparency.

I

Indonez

indonez.com

55

Indonez is a small technology business specializing in the design and sale of premium HTML templates, primarily distributed via the Themeforest marketplace. With over 15 years of domain age and experience, the company targets web developers and businesses seeking high-quality, customizable templates built with modern front-end frameworks such as UIkit 3 and Bootstrap 5. The website is professionally designed, mobile optimized, and SEO friendly, providing a good user experience and clear navigation. Technically, the site uses modern web technologies and is hosted by HOSTINGER operations, UAB, with HTTPS enabled and a valid SSL certificate. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. Privacy compliance is weak due to the lack of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is trustworthy and credible but would benefit from enhanced security and privacy practices.

K

Kmetijsko gozdarska zbornica Slovenije

kgzs.si

58

Kmetijsko gozdarska zbornica Slovenije (KGZS) is a Slovenian national chamber representing the public interest and stakeholders in agriculture, forestry, and rural development. The organization focuses on promoting sustainable agriculture, forestry, healthy environments, and safe food for the population. The website reflects a medium-sized, government-related entity with a clear mission and target audience within Slovenia's agricultural and forestry sectors. Technically, the website employs modern web technologies including Google Tag Manager, Google Fonts, Font Awesome, and reCAPTCHA for form security. The site is hosted by Webtasy, a Slovenian hosting provider, and uses HTTPS, indicating a secure connection. However, explicit privacy and cookie policies are not found in the provided HTML content, which is a compliance gap. Security posture is generally good with HTTPS and form protections but lacks visible security headers and incident response contacts. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy compliance and security transparency.

J

Javni štipendijski, razvojni, invalidski in preživninski sklad Republike Slovenije

srips-rs.si

54

The website represents a Slovenian government institution dedicated to scholarships, workforce development, rights of workers, employment support for disabled persons, child support compensation, and recovery. It serves a broad audience including students, workers, employers, and educational institutions. The site is well-structured with clear navigation and relevant content, reflecting a mature digital presence. Technically, it uses modern web standards, includes cookie consent, and integrates Google Tag Manager and Analytics for tracking. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is partial due to missing privacy and terms pages. Overall, the domain registration and hosting align with the institutional nature, indicating legitimacy and trustworthiness.

S

Swisscare

swisscare.ch

69

Swisscare is an established insurance provider specializing in international health and travel insurance for students, interns, au pairs, travelers, and expatriates primarily in Europe and Switzerland. The company offers a digital-first experience with instant online insurance certificates and a customer account portal. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site uses modern web standards, Cloudflare DNS, and privacy-respecting analytics, though DNSSEC is not enabled. Security posture is good with HTTPS and CSRF tokens, but lacks explicit security policies and some security headers. Privacy compliance is strong with GDPR and FADP policies and cookie consent mechanisms. Overall, the domain and website content align well, indicating a legitimate and trustworthy business with a solid market position in niche insurance services.

L

Luzerner Kantonalbank

lukb.ch

75

Luzerner Kantonalbank (LUKB) is a leading regional bank based in Luzern, Switzerland, providing a broad range of financial services including retail banking, mortgages, investment products, and personalized financial advisory. The website targets private customers primarily in the Luzern and Central Switzerland region, emphasizing personal service and innovative banking solutions. The bank maintains a strong market position as a trusted cantonal bank with a professional digital presence. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and HTMX for dynamic content. It is well-optimized for mobile devices and accessibility, with good SEO practices and comprehensive metadata. The site uses HTTPS with strong security headers, ensuring secure communications and protecting user data. From a security perspective, the site demonstrates good practices including secure cookie handling, consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. The privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website is professional, trustworthy, and secure, with extensive content relevant to its audience. It integrates multiple analytics and marketing tools responsibly, maintaining transparency and user control over data. Strategic recommendations include publishing detailed security policies, vulnerability disclosure mechanisms, and enhancing transparency around data protection officers to further strengthen trust and compliance.

R

RVK

rvk.ch

52

RVK is an independent and leading service provider in the Swiss healthcare market, offering specialized services including risk and performance management, insurance medicine consulting, and education through its RVK Academy. The company targets insurers, pension funds, and enterprises, providing tailored insurance and educational solutions. The website is professionally designed, consistent in branding, and provides clear contact information and trust signals such as client testimonials and SQS-Audit certification. Technically, the site uses modern web technologies like Swiper.js and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Garanto

garanto.ch

50

Garanto is a Swiss trade union established in 2001 representing customs and border personnel. The organization provides legal protection, member services, and advocacy for its members within the customs administration sector. The website is professionally designed, multilingual (German, French, Italian), and provides clear navigation and relevant content for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper, and Fancybox, with a custom or unknown CMS. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. No critical vulnerabilities or blocking mechanisms were detected. Contact information is clearly presented, including phone and email, and a member login area is available. Overall, the site demonstrates a solid digital presence for a government-related non-profit entity.

Hurricane Electric operates a well-established free IPv6 tunnel broker service that enables users to access the IPv6 Internet by tunneling over IPv4 connections. The service is targeted primarily at developers, network engineers, and experimenters who require stable IPv6 connectivity. Hurricane Electric is a large, reputable ISP with a global backbone and multiple tunnel server locations worldwide, positioning it strongly in the IPv6 and networking market. The website content is professional and technically focused, providing clear information about the service and related offerings such as colocation and dedicated servers. The presence of a terms of service page and clear contact information supports business credibility. From a technical perspective, the website uses standard web technologies including HTML, CSS, and JavaScript with jQuery libraries. The hosting appears to be managed by Hurricane Electric itself, reflecting good control over infrastructure. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture shows some gaps: no DNSSEC enabled, no visible security headers, and no explicit HTTPS enforcement in the provided HTML snapshot. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance risk. Overall, the security posture is moderate with no critical vulnerabilities detected in the visible content, but improvements are recommended to enhance DNS security, implement security headers, and provide clear privacy and cookie policies. The domain WHOIS data is consistent and supports the legitimacy of the business, with a long domain age and matching registrant information. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include enabling DNSSEC, improving HTTPS and security headers, publishing privacy and cookie policies, and adding vulnerability disclosure information to strengthen trust and compliance. These steps will improve the security posture and regulatory compliance, enhancing user trust and business resilience.

F

Forum Schlossplatz

forumschlossplatz.ch

48

Forum Schlossplatz is a cultural institution based in Aarau, Switzerland, established in 1994. It serves as a vibrant venue for cultural and societal reflection through exhibitions, events, educational projects, and a podcast. The website reflects a well-structured and professionally presented digital presence targeting a general audience interested in arts and culture. The business model focuses on community engagement and cultural education rather than commercial sales. Technically, the website uses modern web technologies including lazy loading, JavaScript libraries for UI effects, and structured data for SEO. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

C

cyber-Wear Heidelberg GmbH

bahnshop.de

53

bahnshop.de is the official merchandise e-commerce platform for Deutsche Bahn, operated by cyber-Wear Heidelberg GmbH. The website offers a wide range of branded products including collectibles, travel accessories, family and kids items, and other merchandise targeted at Bahn fans, travelers, and families. It holds a strong market position as the official shop for Deutsche Bahn merchandise, leveraging the brand's reputation and customer base. The business model focuses on online retail with customer account management and a comprehensive product catalog. The site is well-branded, consistent, and professionally maintained with a medium-sized operational scale and a founding date around 2014. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies such as JavaScript, CSS3, and HTML5. It integrates Google Tag Manager and Google Analytics for marketing and analytics purposes, and PayPal Unified for payment processing. Hosting is managed via EuroDNS nameservers, indicating a stable and professional hosting environment. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance. From a security perspective, the site enforces HTTPS, uses CSRF tokens on forms, and implements cookie consent mechanisms compliant with GDPR. Security headers are present but could be enhanced with additional policies like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the site lacks a published security.txt or explicit incident response contact information, which could improve transparency and security posture. Overall, bahnshop.de presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing a security.txt file, enhancing security headers, and providing incident response contacts to further strengthen trust and security readiness.

V

VDE VERLAG GmbH

energie.de

58

energie.de is a professional German energy sector portal operated by VDE VERLAG GmbH, consolidating six energy magazines and providing news, e-magazines, job listings, market partner directories, and event information. The site targets energy industry professionals and stakeholders, offering specialized content and training resources. Technically, the website is built on TYPO3 CMS, employs modern SEO practices, and includes GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and respects privacy with cookie blocking for external media by default, but lacks explicit security policies or incident response contacts. Overall, the site is legitimate, well-maintained, and trustworthy for its target audience.

V

VDE VERLAG GmbH

smart-production.de

53

smart-production.de is a professional German-language media portal operated by VDE VERLAG GmbH, aggregating three specialized technical magazines focused on automation, production IT, Industry 4.0, IoT, and energy management. The site targets industry professionals and businesses seeking current news, expert articles, events, and job listings in these sectors. The business model centers on media publishing, advertising, and providing industry-specific information and services. Technically, the website is built on TYPO3 CMS with Yoast SEO optimization, hosted on agenturserver infrastructure, and implements modern web standards with good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance protection. No critical vulnerabilities or suspicious elements were detected. Overall, the site demonstrates a mature digital presence with good content quality and business credibility.

V

VDE VERLAG GmbH

building-and-automation.de

59

building-and-automation.de is a professional German-language web portal operated by VDE VERLAG GmbH, serving as a comprehensive media platform for electrical professionals focused on building automation, electrical installation, and energy management. The site integrates a magazine, online kiosk, newsletters, and educational content, targeting industry professionals and companies in the energy and building technology sectors. The business model centers on crossmedia publishing and professional education, positioning itself as a trusted source within its niche market. Technically, the website is built on the TYPO3 CMS platform, employing modern web technologies including JavaScript and CSS, with SEO optimizations and mobile responsiveness. Hosting is managed via agenturserver nameservers, and the site uses HTTPS with good SSL configuration. Analytics are conducted through etracker with GDPR-compliant cookie consent mechanisms. Advertising is managed via AdSpirit with integrated consent management. From a security perspective, the site enforces HTTPS and respects privacy preferences, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance with clear cookie and privacy policies. However, improvements could be made by implementing security headers and publishing a security.txt file. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. It maintains good privacy and security hygiene for its audience, though some enhancements in security transparency and incident response readiness are recommended.

G

Gewiss

gewiss.de

72

Gewiss is a well-established company operating in the energy sector, specializing in electrical components and energy management solutions. The website targets industrial and commercial customers, providing detailed product information and corporate content. The company maintains a professional online presence with consistent branding and comprehensive privacy and cookie policies, indicating a mature approach to regulatory compliance. Technically, the website leverages modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management, and appears to be built on Adobe Experience Manager CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced and bot protection is implemented, though explicit security headers were not detected in the provided data, suggesting room for improvement. The WHOIS data is not publicly available, which is common for commercial entities but reduces transparency. Overall, the website demonstrates a solid security posture and compliance maturity with no critical vulnerabilities detected.

K

KEBA

keba.com

77

KEBA is a well-established company specializing in innovative automation solutions, with a history spanning 50 years. The website presents a professional and consistent corporate image focused on industrial and manufacturing automation services. The content is relevant and targeted towards industrial clients, reflecting a large enterprise with a strong market position in the manufacturing sector. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, and integrates Google Tag Manager for analytics and tracking purposes. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is weak due to lack of visible security headers and absence of explicit security policies or incident response information. The WHOIS data is missing, which raises concerns about domain registration legitimacy and transparency. No privacy or cookie policies were detected, indicating potential compliance gaps. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

B

Bureau des Congrès de Nantes & St-Nazaire

bureaudescongres-nantes.fr

56

The Bureau des Congrès de Nantes & St-Nazaire website serves as a professional platform to assist in organizing various types of corporate events such as seminars, congresses, salons, team-building activities, and hybrid or virtual events in the Nantes and Saint-Nazaire regions. The site positions itself as a creative and eco-responsible destination, targeting event organizers and companies seeking unique and sustainable event solutions. The business model revolves around providing expert guidance and connecting clients with local service providers including venues, caterers, and agencies. Technically, the website is built on Drupal 9 CMS, utilizing modern frontend libraries like Swiper.js for interactive elements. The site demonstrates good mobile optimization and SEO practices, with clear navigation and professional design. However, some accessibility features appear basic, and performance is moderate. No explicit hosting provider or advanced platform details are evident. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers are directly found in the provided content, though a contact form is available. There is no evidence of vulnerability disclosures or incident response information. The absence of WHOIS data suggests privacy protection on domain registration, which is typical for business entities. Overall, the website is professional and trustworthy with a solid business presence, but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

R

Razvojni center Murska Sobota

rcms.si

39

Razvojni center Murska Sobota is a regional development institution focused on fostering economic, social, and cultural growth in the Pomurje region of Slovenia. The organization provides project management, entrepreneurship support, and regional development services primarily targeting local businesses, entrepreneurs, and government stakeholders. The website reflects a professional and consistent brand presence with clear contact information and active engagement in regional projects and tenders. Technically, the site employs modern web technologies including jQuery, Slick Carousel, and accessibility tools, hosted by a reputable Slovenian provider. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-structured for its audience.

T

TESVOLT Energy

tesvolt-energy.com

59

TESVOLT ENERGY is a medium-sized energy sector company specializing in aggregating small and medium battery storage systems into virtual power plants for participation in energy trading. Their innovative business model leverages multiple leading energy traders competing to maximize revenue for customers. The company offers integrated solutions including battery storage systems, installation, maintenance, and a transparent trading dashboard. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and partnerships. Technically, the site uses the CIDEMOS CMS platform with modern web technologies and enforces HTTPS with a good security posture. Privacy and cookie policies are present and GDPR compliant, though incident response and vulnerability disclosure information are not publicly available. Overall, TESVOLT ENERGY presents a trustworthy and professional digital presence aligned with their business objectives.

B

Banca Națională a României

bnro.ro

70

The website www.bnr.ro represents the official online presence of the National Bank of Romania (BNR), the country's central bank. It provides comprehensive information about the bank's functions, currency issuance, statistics, publications, and contact points, targeting a broad audience including the general public, financial institutions, and government entities. The site is professionally designed with consistent branding and clear navigation, reflecting its authoritative role in Romania's financial sector. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO metadata completeness. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not evident in the provided data, and no public security or incident response policies are published. The WHOIS data is not publicly available due to ROTLD privacy policies, which is typical for .ro domains and justified for a government entity. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with moderate technical and security maturity. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security policies to further strengthen trust and compliance.

M

MIKS GmbH

miks.co

58

MIKS GmbH is a Hamburg-based company specializing in contemporary brand experience through spatial design, including commercial interiors, exhibition stands, retail environments, and roadshows. The company positions itself as an expert in creating immersive brand experiences that evoke emotions and tell stories through spatial communication. Their market focus is on businesses seeking innovative and impactful spatial branding solutions. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, and integrates Google Analytics for user tracking. The site is moderately optimized for performance and mobile devices, with a professional design and clear navigation. Security-wise, the site uses HTTPS and implements a cookie consent mechanism but lacks visible security headers and a published privacy policy, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and transparency.

J

Jonatan Heyman

heynote.com

53

Heynote is a specialized software tool designed as a scratchpad for developers, enabling efficient note-taking with features such as block-based text buffers, syntax highlighting, and calculator functionality. The product is open source, with releases hosted on GitHub, targeting developers and power users seeking productivity enhancements. The website presents a professional and consistent brand image, with clear navigation and relevant content focused on its niche audience. Technically, the site uses modern web technologies including JavaScript and CSS, and is hosted with Cloudflare DNS and GitHub for releases, ensuring good performance and availability. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms, despite usage of Google Analytics. Business credibility is supported by open source transparency and domain longevity. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

T

textalk.se

textalk.se

56

The website www.textalk.com appears to represent a business focused on e-commerce and digital publishing solutions, referencing services such as E-paper with Prenly, PDF and EPUB accessibility remediation, and the Abicart e-commerce platform. However, the actual website content is minimal and mostly placeholder, indicating either a blocked site or incomplete deployment. The WHOIS data for the domain www.textalk.com is missing, showing no registration record, which raises concerns about the domain's legitimacy or active status. The technical infrastructure includes modern JavaScript modules and a cookie consent mechanism via Cookiebot, but lacks visible security headers or detailed SSL information. Privacy compliance is minimal with no visible privacy or terms of service pages, though cookie consent is implemented. Overall, the security posture is weak due to missing WHOIS data and minimal content, resulting in a low trust score and recommendations to improve domain registration transparency, security headers, and privacy policies.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) indicating that no actual website content is accessible or loaded. This page primarily contains scripts and styles related to the Chrome offline dinosaur game and does not represent a real external website. Consequently, there is no business information, contact details, privacy or cookie policies, or security policies available for analysis. The technical infrastructure is limited to browser internal resources with no hosting or CMS details. Security posture cannot be properly assessed due to lack of real content and headers. Overall, this is not a legitimate website but a browser error page, and no meaningful business or security insights can be derived.

The website rosesdesigneroutlet.hr is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of business, contact, or policy information. The domain is registered in Croatia since 2015 with a reputable registrar, indicating a legitimate registration. However, the lack of accessible content limits the ability to assess the company's market position, services, or compliance posture. Technically, the site uses Cloudflare's security services, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to blocked content, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site scores low on AI evaluation due to inaccessibility, with recommendations to allow content access for full analysis.

The website ww16.westgate-shopping.com is a parked domain page primarily serving as a placeholder to advertise the domain westgate-shopping.com for sale via the Sedo domain parking service. The site contains minimal content focused on domain resale, with no active business operations, contact information, or company details presented. The technical infrastructure relies on basic HTML, CSS, and JavaScript with embedded Google Ads and Sedo parking scripts. There is no evidence of HTTPS or advanced security configurations, and the privacy policy is a generic Sedo parking policy in German. The domain WHOIS data is unavailable, indicating the domain may be unregistered or privacy protected, which reduces trustworthiness. Overall, the site functions solely as a domain marketplace listing with limited digital maturity and minimal security posture.

The website nabava.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before access. This prevents any direct analysis of the website's content, business information, or security posture beyond the presence of the WAF. The domain is registered since 2001 with COREhub, S.R.L., indicating a long-standing registration, but no further registrant details or business information are available. The website uses Cloudflare for security and hosting, with HTTPS enabled and no DNSSEC configured. No privacy, cookie, or terms of service policies are visible, nor any contact information or forms. Overall, the site appears to be protected by Cloudflare but lacks publicly accessible content for detailed analysis.

H

Hrvatski Telekom d.d.

akz.hr

52

The website www.akz.hr serves as the official online platform for the Zagreb Bus Station, providing extensive bus ticketing services across Croatia and neighboring countries. It offers users the ability to search for bus schedules, purchase tickets online up to 15 minutes before departure, and access real-time status updates for arrivals and departures. The platform supports mobile app integration, enhancing accessibility for travelers. The business is positioned as a key transportation service provider in the region, backed by Hrvatski Telekom d.d., a reputable Croatian telecommunications company. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for marketing and analytics purposes. Hosting is managed by Hrvatski Telekom with Cloudflare DNS services, ensuring reliable domain resolution. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content Security Policy and HSTS, which are recommended for enhanced protection. Privacy compliance is limited due to the absence of a visible privacy policy and terms of service, representing a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic improvements in privacy policy publication, security header implementation, and comprehensive compliance documentation would elevate its security posture and user trust.

T

Tschudi Energy

tschudienergy.com

9

Tschudi Energy is a specialized consultancy and agency service provider focused on the procurement of essential energy commodities such as LNG, oil, and coal, as well as shipping coordination. The company operates as part of the larger Tschudi Group, leveraging its network and expertise to deliver tailored solutions to clients primarily in the energy and shipping sectors. The website presents a professional image with clear contact information and a consistent brand identity. Technically, the website is built on the Webflow platform using modern web technologies including jQuery and CSS3. It is well-optimized for mobile devices and performs well in terms of loading speed and accessibility. However, there is a lack of advanced SEO optimization and no visible analytics or tracking tools, indicating a minimal data collection approach. From a security perspective, the website uses HTTPS (implied by external CDN links), but no security headers were detected in the provided data. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and the lack of incident response information represent compliance gaps. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration legitimacy and trustworthiness. Overall, while the business and website appear professional and credible, the missing WHOIS registration data and lack of privacy compliance documentation reduce the overall trust score. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance the security posture and compliance standing.

The website sdpm.cz represents the official platform for the 'Slezské dny preventivní medicíny' conference, an established international event focused on public health and preventive medicine organized by the regional hygiene station and health institute in Ostrava, Czech Republic. The site provides detailed conference programs, speaker information, and multimedia content such as YouTube recordings and photo albums, targeting healthcare professionals and scientific communities. The domain has been active since 2003, indicating a stable presence in the healthcare event sector. Technically, the website uses standard HTML, CSS, and JavaScript with a responsive design suitable for mobile devices. It lacks advanced frameworks or CMS indications and does not employ tracking or advertising technologies, reflecting a straightforward informational site. Performance is moderate with basic SEO and accessibility features. From a security perspective, the site enforces HTTPS and includes basic cache control headers but lacks comprehensive security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No forms or user data collection mechanisms are present, reducing exposure to common web vulnerabilities. WHOIS data aligns well with the website content, supporting legitimacy. Overall, the site is low risk but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

R

Roni

ronigame.com

50

Roni is a small technology business focused on delivering a multiplayer and single-player word game available on iOS and Android platforms. The website serves as a promotional portal providing game descriptions, screenshots, and download links to app stores. The business targets casual and word game enthusiasts, offering features such as multiplayer challenges, daily games, and chat functionality. The domain has been registered since 2013, indicating a stable presence in the market. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Google Analytics for user tracking and Cloudflare for DNS services. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced security headers and cookie consent mechanisms, which are important for privacy compliance and security hardening. From a security perspective, the site enforces HTTPS and has domain transfer protections, but does not enable DNSSEC or publish security policies or incident response contacts. No WAF or blocking mechanisms are detected, and no vulnerabilities or suspicious content were found. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the website is professional and trustworthy for its purpose but could improve its security posture and privacy compliance to better protect users and enhance trust. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response information.

S

Statistics Iceland

statice.is

65

Statistics Iceland is the official national statistical institute of Iceland, providing comprehensive and authoritative data on population, society, business sectors, economy, and environment. The website serves a broad audience including researchers, policymakers, businesses, and the general public, offering access to statistical databases, tailored statistics, microdata services, and a variety of publications. The organization is well-established, with a domain registered since 1998, and holds recognized certifications such as ISO 9001 and ISO 27001, reinforcing its credibility and commitment to quality and security. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Fonts, and Datawrapper for interactive charts. It is hosted by a local Icelandic hosting provider, 1984 Hosting, and demonstrates good performance, mobile optimization, and accessibility. The site uses HTTPS with a good SSL configuration, although some security headers are missing. No WAF or blocking mechanisms are detected, allowing full content accessibility. From a security perspective, the site follows best practices such as HTTPS enforcement and absence of exposed sensitive data. However, it lacks explicit cookie consent mechanisms and a published vulnerability disclosure policy. The WHOIS data aligns well with the website's official status, showing consistent registration details and domain age appropriate for a government entity. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in privacy compliance and security header implementation. It effectively supports its mission as Iceland's official statistical authority.

A

artcom venture GmbH

artcom-venture.de

59

artcom venture GmbH is a technology consulting and development company specializing in assisting businesses with digital transformation and data strategy. The company offers a range of services including consulting, development, marketing, and additional support services. It targets businesses looking to adapt to digital disruption and improve operational efficiency through technology. The company maintains multiple offices across Germany, Austria, Ukraine, and Turkey, indicating a medium-sized international presence. Technically, the website is built on WordPress CMS with modern technologies such as .Net Core, Angular, ElasticSearch, and various databases. The site is SEO optimized using Yoast SEO and includes a cookie consent mechanism compliant with GDPR. Performance and mobile optimization are good, though accessibility is basic. The technical infrastructure supports a professional digital presence aligned with the company's business model. From a security perspective, the website enforces HTTPS and uses CAPTCHA on its contact form to mitigate spam. However, it lacks explicit security headers and does not publish a vulnerability disclosure or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive GDPR policy and cookie consent. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. Security posture is solid but could be improved with additional headers and published policies. The business credibility is supported by clear company information and multiple office locations. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and compliance.

K

Krajská hygienická stanice Moravskoslezského kraje se sídlem v Ostravě

khsova.cz

50

Krajská hygienická stanice Moravskoslezského kraje se sídlem v Ostravě is a regional governmental public health authority responsible for health supervision, epidemiological monitoring, and public health support in the Moravian-Silesian region of the Czech Republic. The website serves as an official portal providing information, updates, and contact details to the public and stakeholders. It maintains a consistent and professional presence with regular updates and official publications. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and the Nette framework, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS assumed but lacks explicit security headers and published security policies. Privacy compliance is partial with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting its governmental nature.

J

JSON

json.org

56

The website www.json.org serves as an authoritative informational resource dedicated to the JSON (JavaScript Object Notation) data interchange format. It provides comprehensive technical documentation, grammar rules, and extensive links to JSON libraries across a wide range of programming languages. The site targets developers and programmers seeking to understand or implement JSON in their applications. The business model is primarily educational and standardization-focused, positioning itself as a key reference in the technology sector. Technically, the site is a static HTML resource with custom fonts and simple CSS styling, optimized for fast loading and basic mobile responsiveness. However, it lacks modern web frameworks or CMS integration. Security posture is moderate; while HTTPS is assumed (not explicitly confirmed in the data), no advanced security headers or policies are present, and no contact or incident response information is provided. The absence of privacy and cookie policies indicates limited compliance with modern privacy regulations. WHOIS data is unavailable due to a malformed request, which limits domain legitimacy verification and reduces trust scores. Overall, the site is a valuable technical resource but would benefit from enhanced security, privacy compliance, and transparency improvements.

J

JSLint: The JavaScript Code Quality and Coverage Tool

jslint.com

57

JSLint.com is the official website for JSLint, a JavaScript code quality and coverage tool authored by Douglas Crockford. The website provides an in-browser linting tool that analyzes JavaScript code without sending it over the network, emphasizing privacy and local execution. The site links to its GitHub repository and related resources, positioning itself as a trusted open source developer utility in the JavaScript ecosystem. The business model is primarily open source and community-driven, targeting JavaScript developers seeking code quality assurance.

M

Contents

mistysystem.com

58

The MistySystem.com website serves as a dedicated documentation and resource portal for the Misty programming language, authored by Douglas Crockford. It provides comprehensive technical documentation, demonstrations, and references, targeting developers and programmers interested in this niche language. The site is small-scale and focused on educational and open-source content without commercial or transactional features. Technically, the website is built with basic HTML and CSS, hosted under a domain registered since 2004 with IONOS SE. The site lacks modern web frameworks or CMS platforms and shows basic mobile and accessibility features. No advanced analytics, advertising, or tracking technologies are present, indicating a minimalistic and privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by the domain but not explicitly stated in the data), but lacks DNSSEC and security headers, which are recommended to enhance domain and web security. There are no privacy or cookie policies, nor contact or incident response information, which limits compliance with GDPR and best security practices. The domain registration is consistent and legitimate, with no suspicious patterns detected. Overall, the website is safe, professional in its niche, but could improve significantly in privacy compliance, security posture, and user engagement features to enhance trust and regulatory adherence.

SteelConstruction.info is a well-established, authoritative online encyclopedia dedicated to UK steel construction information. It is supported by key industry bodies such as the British Constructional Steelwork Association (BCSA), Steel for Life, and the Steel Construction Institute (SCI). The website offers extensive technical content, industry news, CPD training resources, and project case studies, targeting construction professionals, engineers, architects, and students. Its business model is informational and educational, positioning it as a leading resource in the UK steel construction sector. Technically, the website is built on the MediaWiki platform, leveraging modern JavaScript libraries and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are not clearly present. The domain WHOIS data is privacy protected, which is common for informational websites, and no suspicious patterns were detected. The website maintains a strong trust profile through its affiliations and consistent, high-quality content. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, SteelConstruction.info is a credible, professional, and valuable resource for the steel construction industry, with recommendations to enhance privacy compliance and security header implementation to further strengthen its security posture.

S

Stanley/Stella

stanleystella.com

72

Stanley/Stella is a premium European e-commerce retailer specializing in sustainable blank apparel designed for customization. Founded in 2011, the company positions itself as a leader in eco-conscious clothing, targeting businesses and individuals seeking quality sustainable garments. The website supports multiple languages and countries, enhancing its accessibility and market reach. Technically, the site is built on Magento with integrations of modern JavaScript frameworks and analytics tools such as Piwik PRO and New Relic, indicating a mature digital infrastructure. Security practices include HTTPS enforcement, secure cookie handling, and domain transfer protection, although DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a solid security posture and professional business credibility.

M

MyWebdesign.cz s.r.o.

mywebdesign.cz

52

MyWebdesign.cz s.r.o. is a Czech-based technology company specializing in custom development of extensive e-commerce platforms and mobile applications. With over 20 years of experience, the company serves businesses aiming to scale their online sales, offering tailored solutions including B2B and B2C functionalities, integration with accounting and inventory systems, and 24/7 support. The website reflects a professional and trustworthy brand with strong client testimonials from notable companies such as ZOOT and Plzeňský Prazdroj. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google reCAPTCHA v3 integrated for spam protection. Hosting is managed by REG-ZONER, consistent with WHOIS data. The site is mobile-optimized, fast-loading, and SEO-friendly, though it lacks some advanced security headers and publicly available privacy and cookie policies. From a security perspective, the site uses HTTPS and reCAPTCHA, but the absence of explicit security headers and privacy documentation indicates room for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website presents a high-quality, professional digital presence with minor compliance gaps. Strategic enhancements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

A

APASON

apason.eu

51

APASON is a medium-sized group of companies based in the Czech Republic specializing in construction, real estate management, property development, office space rental, and design & marketing services. The company emphasizes quality construction with over 30 years of experience and manages a closed real estate fund alongside property investment activities. Their diversified business model targets investors, businesses, and clients seeking professional real estate and design services in the region. Technically, the website uses modern JavaScript libraries such as Splide.js for UI components and Umami for privacy-focused analytics, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers suggest room for improvement in compliance and security posture. The WHOIS data is unavailable due to EURid privacy restrictions, which slightly reduces transparency but is common for European domains. Overall, the website is professional, safe, and business-focused with moderate trustworthiness.

S

Sdružení pěstounských rodin

pestouni.eu

51

The website pestouni.eu serves as an information system for the Sdružení pěstounských rodin (Association of Foster Families) in the Czech Republic. It provides detailed listings of seminars, webinars, support groups, and family events aimed at foster families and professionals involved in foster care. The site targets a niche non-profit audience and offers educational and community-building services. The market position is specialized within the foster care support sector in the Czech Republic. Technically, the website is built with basic HTML and CSS, hosted by WEDOS Internet, a reputable Czech hosting provider. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. Performance is moderate, with clear navigation and structured content but limited advanced technical features. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information for security incidents or data protection officers is present. The site uses HTTPS (assumed from domain and hosting) but does not demonstrate advanced security best practices. There are no signs of vulnerabilities or exposed sensitive data in the provided content. Overall, the website is safe and appropriate for its audience, with no adult or questionable content. However, it requires improvements in privacy compliance, security posture, and contact transparency to enhance trust and regulatory adherence.

J

JSON Viewer and Formatter - JSON.pub

json.pub

51

JSON.pub is a specialized online tool designed to convert and visualize JSON strings and other data formats into a readable, user-friendly format. It targets developers, data analysts, and users who need to parse and analyze JSON, XML, CSV, YAML, and other data types. The service emphasizes privacy by processing all data locally in the user's browser, ensuring no data is sent to the server. The website offers features such as syntax highlighting, tree views, and shareable URLs with compressed data, positioning itself as a niche utility in the developer tools market. Technically, the website is built with modern web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery, LZ-String for compression, and DOMPurify for sanitization. It employs a service worker for offline support and uses Simple Analytics for privacy-first user tracking. The site is mobile-optimized with responsive design and good accessibility features, providing a fast and smooth user experience. From a security perspective, JSON.pub follows best practices by ensuring all processing is local, minimizing data exposure risks. The use of DOMPurify to sanitize SVG inputs and the absence of data transmission to servers are strong security measures. However, the site lacks explicit security headers and does not provide privacy or cookie policies, nor contact information for security incidents, which are areas for improvement. Overall, JSON.pub presents a trustworthy and professional service with a strong privacy focus. The absence of WHOIS registrant data is typical for small utility sites and does not detract from its legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact channels for incident response to enhance trust and compliance.

E

eu/acc

euacc.com

55

eu/acc is a European advocacy movement and platform focused on deregulation and accelerationism to foster innovation and competitiveness in Europe. The website serves as a hub for crowdsourcing ideas, sharing policy recommendations, and engaging with the community via social media. It has gained recognition through contributions to European Commission reports and ongoing dialogue with policymakers. Technically, the website is simple but effective, using standard web technologies and Cloudflare hosting, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and published policies. The absence of privacy and cookie policies, as well as contact information, represents compliance and trust gaps. Overall, the site is professional and trustworthy within its niche but could improve transparency and security practices.