Security Directory

Kryt Folimanka is a public underground shelter located in Prague 2, serving as the largest shelter in the district with capacity for 1300 people. The website provides information about the shelter, public tours, and related tourist services. The site is maintained by a government or municipal entity, indicated by the nature of the content and sector classification. Technically, the website uses a traditional web stack including Bootstrap, jQuery, and Google Analytics, hosted by Wedos. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, it lacks critical privacy and cookie policies, and no contact information is provided, which impacts compliance and user trust. Security posture is adequate with HTTPS but missing security headers and formal policies. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

K

Komwag, podnik čistoty a údržby města, a.s.

2protigraffiti.cz

50

The website 2protigraffiti.cz represents a public service initiative managed by Komwag, a municipal cleaning and maintenance company, focused on graffiti removal in Prague 2. The project has been active since 2010 and serves both private and public property owners, providing anti-graffiti treatments and ongoing maintenance. The site is well-structured, professionally designed, and provides clear contact information and partnership links, reflecting a strong local government collaboration. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the cPilot CMS platform, with UIkit framework for UI components. It uses Google Tag Manager for analytics and has implemented service workers for progressive web app capabilities. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's public service nature. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic enhancements in security policy transparency and incident response readiness would further strengthen its posture.

C

Centrum sociálních služeb Praha 2

cssp2.cz

48

Centrum sociálních služeb Praha 2 is a Czech Republic-based public social services organization founded in 2002 by the Prague 2 municipal district. It provides a broad range of social and healthcare services targeted at seniors, disabled individuals, chronically ill patients, caregivers, and families with children. The organization operates locally with a medium-sized footprint and offers services including home care, health care, day centers, and residential facilities. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its audience. Technically, the site uses a proprietary CMS (VismoWeb5), modern web standards, and is hosted under a Czech registrar and hosting provider, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic with cookie and accessibility statements but no explicit consent mechanism. WHOIS data confirms the domain's legitimacy and long-term operation, matching the organization's history. Overall, the website is trustworthy, safe, and well-suited for its public service mission.

S

Správa nemovitostí Praha 2, a. s.

snp2.cz

57

Správa nemovitostí Praha 2, a. s. is a municipal property management company serving the Prague 2 district. The website provides official information about the company, its services, projects, public notices, and contact details targeting residents, property owners, and tenants within the district. The business operates in the real estate and government sectors, focusing on property management and tenant services. The domain age and registration details align well with the company's founding date, supporting legitimacy. Technically, the website uses a standard HTML5 structure with CSS and JavaScript, powered by the Vismo CMS platform common in Czech municipal websites. It includes modern fonts and a Google Translate widget for accessibility. The site is hosted by a Czech registrar and hosting provider, Active24, with proper HTTPS configuration. Mobile optimization and accessibility are good, though SEO is basic. Security posture is moderate with HTTPS enforced and no exposed sensitive data. However, the site lacks advanced security headers and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is clear and professional, enhancing business credibility. Overall, the website is trustworthy and professional, suitable for its municipal audience. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security and compliance posture.

AB Klaipėdos vanduo is a Lithuanian regional water utility company providing water supply and wastewater management services primarily in the Klaipėda region. The company serves both residential and business customers, offering services such as water supply, wastewater treatment, water quality testing, and remote metering. The website is professionally designed with clear navigation and relevant content targeting local customers. Technically, the site uses modern web technologies including HTTPS, JavaScript libraries like ApexCharts, and integrates Facebook Pixel and Google reCAPTCHA for marketing and security purposes. Security posture is good with HTTPS enforced and anti-CSRF tokens on forms, though some security headers could be improved and explicit security policies are not published. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms. WHOIS data is unavailable, limiting domain trust verification, but the website content and company information appear legitimate and consistent. Overall, the site demonstrates a mature digital presence suitable for a regional utility provider.

The website www.rietumu.com is currently inaccessible due to a Cloudflare Turnstile security challenge that blocks direct access to its content. The WHOIS query for the domain returned no match, indicating the domain may not be registered or WHOIS data is unavailable. Consequently, no business, contact, or policy information could be extracted or verified. The technical infrastructure is limited to Cloudflare's security mechanisms with no visible CMS or additional technologies. Security posture cannot be assessed due to lack of accessible content and absence of security headers or SSL details. Overall, the site presents a high risk due to inaccessibility and lack of transparency, preventing meaningful analysis or trust evaluation.

E

ESpanix

espanix.net

69

ESpanix operates as a leading internet exchange point and connectivity hub in Southern Europe, primarily serving Spain and the Iberian Peninsula. The company offers a range of services including IP transit, datacenter hosting, bespoke connectivity solutions, and a high-precision time synchronization service. With over 25 years of experience, ESpanix positions itself as a critical infrastructure provider facilitating secure, low-latency interconnections for telecommunications and network operators. Technically, the website demonstrates a modern and professional design with good mobile optimization and basic accessibility features. The technology stack is standard web technologies with no detected CMS or advanced frameworks. Performance is moderate, and SEO is basic but adequate for the business domain. The site uses HTTPS with integrity checks on resources, but lacks some security headers and cookie consent mechanisms. From a security perspective, ESpanix shows strong compliance with recognized frameworks such as ISO 9001 and the Spanish National Security Scheme (ENS), aligned with the European NIS2 directive. Certifications like WELL, LEED, and WiredScore Platinum further reinforce their commitment to quality and security. However, the absence of WHOIS data for the domain raises questions about domain registration transparency. No incident response contacts or vulnerability disclosure policies are publicly available, which could be improved. Overall, the website and business present a trustworthy and professional image with solid security and compliance posture. The main risks relate to domain registration opacity and minor gaps in privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and implementing cookie consent to improve regulatory compliance and user trust.

E

Ealys

ealys.com

41

Ealys is a French web development agency specializing in the creation, redesign, and maintenance of websites and web applications, primarily serving clients in the North-East region of France including Metz, Nancy, and Strasbourg. With over 20 years of experience, the company targets a diverse clientele ranging from SMEs to large groups and institutional clients. Their service offerings include website creation, web application development, hosting, security, and audits, positioning them as a comprehensive digital solutions provider in their regional market. The website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the site employs modern web technologies such as HTML5, CSS3, jQuery, and popular plugins like Revolution Slider and Fancybox, ensuring a responsive and user-friendly experience. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented, indicating basic privacy compliance. Security-wise, the site uses HTTPS and follows some best practices but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, which supports legitimacy. Overall, the website is well-structured, professional, and trustworthy, though there is room for improvement in security and compliance documentation.

C

cropmark.

cropmark.com

55

Cropmark is a well-established full-service creative studio operating primarily in Luxembourg and Brussels, offering a broad range of branding, corporate design, editorial design, web design, development, SEO, and strategic communication services. The company targets businesses and organizations seeking professional creative solutions, leveraging over 20 years of industry experience. The website reflects a professional and consistent brand image with rich content and clear navigation, supporting its market position as a trusted creative agency in its region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Matomo. It uses HTTPS for secure communications and content delivery networks for optimized image serving. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. However, there is no detected CMS or hosting provider information. From a security perspective, the site benefits from HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS registration data for the domain is a notable concern, although the website content and contact information support legitimacy. Overall, Cropmark's website is professional and trustworthy, but improvements in privacy compliance and domain registration transparency are recommended to enhance security posture and regulatory adherence.

C

Cloudpermit Oy

lupapiste.fi

65

Lupapiste, operated by Cloudpermit Oy, is a Finnish government-related online platform providing comprehensive services for construction permits and related permit acquisition processes. The platform targets Finnish residents and businesses involved in construction, offering a streamlined digital service including permit applications and an e-commerce store for permit documents. The website integrates official Finnish identity verification via Suomi.fi, enhancing trust and security for users. Technically, the website employs standard modern web technologies including HTML5, CSS3, and JavaScript, with a third-party LeadDesk chat widget for customer support. The site is mobile-optimized and presents a professional design with clear navigation. However, some technical improvements are needed, such as fixing the anti-CSRF token implementation and adding security headers to strengthen the security posture. Security-wise, the site enforces HTTPS and uses strong authentication mechanisms but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance. No critical vulnerabilities were detected, but the placeholder anti-CSRF token suggests a potential security misconfiguration. Overall, the security posture is moderate but can be improved with targeted measures. The overall risk assessment is low, with the website appearing legitimate, trustworthy, and professionally maintained. Strategic recommendations include fixing security token implementation, enhancing privacy compliance with cookie consent, and publishing explicit security and incident response policies to improve transparency and user trust.

S

Synology Inc.

sy.to

76

Synology Inc. is a well-established technology company specializing in data management, storage, backup, and cloud solutions. The company offers a broad portfolio of products including NAS and SAN storage systems, backup and recovery solutions, surveillance systems, networking devices, and productivity software. Positioned as a global leader in the data storage industry, Synology targets both business and individual users seeking scalable and secure data management platforms. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its market position. Technically, the website employs modern web technologies such as Vue.js and jQuery, integrates Google Tag Manager and LiveChat for analytics and customer engagement, and demonstrates good performance and mobile optimization. The site is well-structured with proper SEO and accessibility considerations, indicating a high level of digital maturity. From a security perspective, Synology demonstrates strong commitment through HTTPS enforcement, detailed security policies, a secure development lifecycle, supply chain risk management, and a public bounty program. Cookie consent mechanisms and privacy policies align with GDPR compliance, enhancing user trust. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website presents a low-risk profile with strong business credibility, technical robustness, and privacy compliance. Strategic recommendations include publishing a security.txt file to facilitate vulnerability reporting and explicitly listing a Data Protection Officer contact to further enhance compliance transparency.

G

Grade Solutions Oy

kuntarekry.fi

62

Kuntarekry.fi is a Finnish job portal specializing in open municipal sector job listings across Finland. Operated by Grade Solutions Oy, the platform offers thousands of job opportunities and facilitates job application submissions for Finnish job seekers. The website is professionally designed with good SEO and mobile optimization, targeting a national audience interested in municipal employment. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with integrations to Google APIs for performance and resource loading. Security posture is adequate with HTTPS enabled and Google site verification present; however, the absence of security headers and privacy policies indicates room for improvement in compliance and security best practices. Overall, the domain registration is consistent and trustworthy, matching the business entity and country. The site is safe for general audiences with no adult or explicit content detected.

A

AI • DESIGN

aidesign.cz

57

AI • DESIGN is a small architectural design firm based in the Czech Republic, specializing in residential, interior, staircase, public, and private building projects. The website is professionally designed using the Squarespace platform, featuring clear navigation and good mobile optimization. The firm highlights significant projects such as the new Žižkov Center and a cultural and congress center in Zlín, indicating active engagement in notable architectural developments. Technically, the site employs modern web technologies and enforces HTTPS with HSTS, reflecting a good security baseline. However, the absence of visible privacy policies, cookie consent mechanisms, and contact information limits compliance and transparency. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses but reduces domain trust verification. Overall, the website presents a professional image with moderate trustworthiness but would benefit from enhanced privacy and compliance disclosures.

E

ekolo.cz s.r.o.

ekolo.cz

47

Ekolo.cz s.r.o. operates a leading Czech e-commerce and physical retail platform specializing in electric bicycles and related accessories. Established in 2007, the company has built a strong market position with over 18 years of experience, offering a wide range of products including over 700 e-bike variants from 16 manufacturers. Their services include sales, rental, and servicing of e-bikes, targeting cycling enthusiasts and urban commuters primarily in the Czech Republic. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site leverages modern JavaScript libraries such as Swiper.js, Google Tag Manager, and integrates security features like Google reCAPTCHA to protect user interactions. Hosting is inferred to be on DigitalOcean with CDN support for performance. Security posture is strong with HTTPS enforced and secure form handling, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. Contact information is transparent and includes multiple channels. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

Helsingin seurakuntayhtymä operates as a major religious and community service organization in Helsinki, Finland, providing a range of social and religious services to local residents and church members. The organization is well-established, with a domain registered since 2003, reflecting a stable presence in the community. The website serves as an informational and service portal, primarily in Finnish, targeting local audiences with clear contact and policy information. Technically, the website employs a modern but somewhat dated technology stack including Bootstrap 3 and standard web technologies like HTML5, CSS3, and JavaScript. Hosting and domain services are provided by Elisa Oyj, a reputable Finnish telecom provider. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the website enforces HTTPS and includes standard security headers, though DNSSEC is not implemented. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. However, explicit security policies and incident response contacts are not published. Overall, the website demonstrates a solid security posture and business credibility appropriate for a public non-profit organization. Strategic recommendations include implementing DNSSEC, publishing a vulnerability disclosure or security.txt file, enhancing accessibility, and maintaining regular security audits to ensure ongoing compliance and protection.

V

Vastuu Group

tilaajavastuu.fi

65

Vastuu Group is a Finnish technology service provider specializing in digital solutions that facilitate employee data management, compliance with labor laws, and reporting obligations primarily for the construction sector and related industries. The company offers a broad portfolio of services including Valtti+, Valttikortti, and electronic signature solutions, positioning itself as a key enabler of digital transformation and regulatory compliance in its market. Recent acquisitions such as Linnunmaa Lex indicate strategic growth and expansion of service offerings. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and integrating analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Vastuu Group maintains a strong posture with HTTPS enforcement, ISO 27001 certification, and comprehensive privacy and cookie policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public incident response policy and security.txt file suggests areas for improvement in transparency and vulnerability management. Overall, Vastuu Group presents a professional, trustworthy, and compliant digital presence aligned with its business objectives. The company is well-positioned in its sector with a clear focus on compliance, digital services, and customer support.

C

CREVV

crevv.com

56

CREVV is a small, full-service creative design studio based in Kyiv, Ukraine, specializing in visual and verbal communication, branding, environment design, text, and photography. The company has a well-established online presence with a portfolio showcasing various projects, positioning itself as a professional agency in the media sector. The website is built on the Readymag platform, utilizing modern web technologies including Google Fonts, YouTube API, and Google Analytics for tracking. The site is SSL secured and hosted by Hosting Ukraine LLC, reflecting a consistent and legitimate domain registration since 2014. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its compliance posture.

N

Naantali

naantali.fi

75

Naantali.fi is the official website of the city of Naantali, Finland, serving as a portal for municipal services, tourism information, and community engagement. The site targets residents including families, youth, elderly, immigrants, and tourists, providing localized content in Finnish with options for English and Swedish. The business model is that of a government entity focused on public service delivery and regional promotion. The website is well-branded and consistent with municipal identity, featuring a professional design and clear navigation.

Mustasaaren Toimintakeskus is a community activity center operated by Helsingin seurakuntayhtymä, a Finnish organization based in Helsinki. The website serves local community members by providing information about community activities and services. The domain has been registered since 2007, indicating a stable presence. The website's technical infrastructure is based on standard web technologies including HTML5, CSS3, Bootstrap 3.3.5, and uses fonts like Roboto and FontAwesome icons. Hosting is associated with Elisa Oyj, a Finnish telecom provider. Security posture is basic with no advanced security headers detected and no visible HTTPS enforcement details in the provided data. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is minimal, limited to registrant address from WHOIS data. Overall, the site is functional but lacks modern security and privacy best practices.

P

POST Luxembourg

eboo.lu

61

The website www.eboo.lu is a digital banking platform operated by POST Luxembourg, offering eBanking services accessible via smartphones, tablets, and computers. It targets customers of POST Luxembourg's financial services, providing a seamless and intuitive banking experience without the need to visit physical branches. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages including English and French. The business is well-established in Luxembourg's finance and telecommunications sectors, leveraging POST Luxembourg's strong market position.

O

OCA Luxembourg

oca.lu

41

OCA Luxembourg is a professional insurance brokerage firm operating in the Grand Duchy of Luxembourg, providing tailored insurance solutions for both professionals and individuals. The company offers a range of services including professional insurance, personal insurance, and specialty insurance products such as Lifestyle & Fine Art, construction guarantees, and coverage for European officials and sports professionals. The website reflects a well-structured and professional digital presence with clear navigation and relevant content targeting Luxembourg-based clients. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized plugins like Revolution Slider and tarteaucitron for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could enhance its technical maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations such as GDPR. However, the absence of visible security headers and incident response information suggests room for improvement in security posture. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the professional content and business registration number lend credibility. Overall, the website presents a trustworthy and professional image suitable for its business domain, with moderate technical and security maturity. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability would strengthen trust and compliance.

The website nitko.info is a personal portfolio and creative expression platform for Ervin Poljak, featuring poetry, stories, family projects, and other artistic content. It targets a general audience interested in literary and cultural works. The site is small-scale and primarily serves as a personal showcase rather than a commercial business. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics, Google Tag Manager, and Mixpanel for visitor tracking. It is built on the Galaksija CMS and hosted under a domain registered with privacy protection. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present, indicating poor privacy compliance. The WHOIS data shows a domain age consistent with the site's stated founding year and a registrant country matching the website language, supporting legitimacy. Overall, the site is safe for general audiences but requires significant improvements in security and privacy compliance to enhance trust and protection.

T

Trilby Media LLC

trilbymedia.com

64

Trilby Media LLC is a specialized technology service provider focused on Grav CMS professional services, custom development, hosting, and support. The company is staffed by the original Grav CMS development team, positioning it as a niche expert in the CMS market. Their website reflects a professional and consistent brand image, targeting businesses and developers seeking Grav CMS solutions. The company is US-based, founded in 2016, and showcases reputable clients, enhancing its market credibility. Technically, the website is built on the Grav CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Microsoft Clarity. Hosting and DNS services are provided by Cloudflare, with additional security measures like Cloudflare Turnstile CAPTCHA implemented on the contact form. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. From a security perspective, the site uses HTTPS and Cloudflare services, but lacks DNSSEC and explicit security headers such as Content-Security-Policy and HSTS. There are no published privacy or cookie policies, which represents a compliance gap. No incident response or vulnerability disclosure information is provided. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional, secure to a reasonable extent, and credible, but would benefit from enhanced privacy compliance and security header implementation. Strategic improvements in these areas would strengthen trust and regulatory adherence.

I

Indiana University

iu.edu

72

Indiana University is a large, established public educational institution in the United States offering over 930 academic programs across nine campuses. The university emphasizes world-class research, global impact, and a comprehensive student experience. The website reflects a mature digital presence with a professional design, clear navigation, and rich content targeting prospective and current students, researchers, and alumni. Technically, the site uses modern web technologies including Rivet UI framework, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are lacking. Overall, the domain registration and website content are consistent and legitimate, supporting a high trust level.

J

Jarrett & Lam

jandl.digital

69

J&L Digital is a UK-based IT services and software development company founded in 2023, offering a broad range of digital solutions including website development, software systems, IT services, app development, and VoIP telephone systems. The company targets businesses seeking tailored IT and digital solutions and operates with a professional and consistent brand presence. Their market position is that of a small but globally oriented technology service provider with regional offices in Europe, Asia, and Australia. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, integrating Matomo and Google Tag Manager for analytics. Hosting and DNS services leverage Cloudflare and IONOS SE, ensuring good performance and security. The site is mobile optimized and SEO friendly, with a cookie consent mechanism that supports GDPR compliance. From a security perspective, the website uses HTTPS with a strong SSL configuration and displays a Cyber Essentials certification badge, indicating adherence to recognized UK security standards. However, DNSSEC is not enabled, and no explicit security policy or incident response contact information is published. The domain registration is privacy protected but consistent with the business's UK location and recent founding date, supporting legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, with minor recommendations to enhance DNS security and publish security policies. The risk level is low, and the company demonstrates a solid foundation for trust and digital maturity.

R

RIKA Innovative Ofentechnik GmbH

rika.se

59

RIKA Innovative Ofentechnik GmbH is an Austrian manufacturer specializing in high-quality wood, pellet, and combination stoves for residential heating. The company maintains a strong market presence in Europe with multiple regional websites and a dealer network, emphasizing innovation and quality craftsmanship. Their business model includes direct sales through dealers and an online configurator tool to customize stoves. The website is professionally designed, targeting Swedish-speaking customers with multilingual support for other regions. Technically, the website employs modern JavaScript libraries such as Alpine.js and Flickity, hosted on DigitalOcean's CDN infrastructure, ensuring moderate performance and good mobile optimization. Security measures include HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, although explicit security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the exact domain suggests the use of subdomains or proxying, which is not uncommon but reduces transparency. Overall, the site demonstrates a mature digital presence with good business credibility and moderate technical sophistication. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and improving accessibility compliance to further strengthen trust and compliance.

R

RIKA Innovative Ofentechnik GmbH

rika.fr

57

RIKA Innovative Ofentechnik GmbH is an Austrian-based manufacturer specializing in high-quality wood, pellet, and hybrid stoves, with a strong market presence in France and Europe. The company emphasizes innovation, sustainability, and customer-centric services such as an online stove configurator and a broad dealer network. Their website reflects a professional and modern digital presence, leveraging advanced JavaScript libraries and CDN hosting to ensure fast and responsive user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms implemented. Security posture is strong, with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, WHOIS data is unavailable, likely due to privacy protection, which is justified given the business nature. Overall, the website is trustworthy, well-branded, and provides clear contact and support channels.

Indiana University Indianapolis operates as a premier educational institution serving the Indianapolis region and the broader Midwest. The website provides comprehensive academic program information, student support services, research initiatives, and campus life details, targeting prospective and current students, faculty, and alumni. The site is well-structured with consistent branding aligned with Indiana University standards. Technically, the site leverages modern web technologies including Rivet Site Builder and integrates multiple analytics and marketing pixels, indicating a mature digital presence. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and published security policies. Privacy compliance is limited due to absence of clear privacy and cookie policies. Overall, the domain is a legitimate subdomain of the official Indiana University domain, though WHOIS data is unavailable as expected for subdomains. Strategic improvements in privacy transparency and security hardening would enhance trust and compliance.

C

Croatian Climate Change Panel

solarniklaster.org

45

The Croatian Climate Change Panel operates the solarniklaster.org website as a specialized platform focused on renewable energy, sustainable technologies, and climate change awareness primarily targeting Croatian and regional audiences. The site offers news, expert articles, multimedia content, and educational resources to support green energy transition efforts. Technically, the website uses a standard modern tech stack including Bootstrap, jQuery, and analytics tools, hosted on a domain registered since 2015 with privacy protection. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with policies present but no explicit cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is a credible, niche informational resource with room for security and privacy improvements.

S

Saaristolautat.fi

saaristolautat.fi

43

Saaristolautat.fi is a specialized informational website providing ferry routes and schedules for the Finnish archipelago, including the Turku archipelago and Åland Islands. The site targets travelers and residents needing up-to-date ferry information for over 40,000 islands serviced by approximately 50 ferries and 200 docks. The business model is primarily informational, serving as a public utility platform rather than a commercial enterprise. The website is relatively small in scale, founded in 2017, and operates with a niche focus on regional transportation. Technically, the website employs a modern web stack including HTML5, CSS3, JavaScript with jQuery, Bootstrap for responsive design, FontAwesome for icons, and integrates Google Maps API for route visualization. Hosting appears to be provided by Domainhotelli, a Finnish hosting provider. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance given its European audience. No contact information or incident response details are provided, limiting transparency and trust. The WHOIS data shows the domain is registered to a private person rather than an organization, which is somewhat inconsistent with the public service nature of the site but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is functional and provides valuable regional transportation information but would benefit from improved security practices, privacy compliance, and clearer business contact details to enhance trust and regulatory adherence.

Marcus Hutchins' website serves as a personal brand platform highlighting his expertise as a cybersecurity specialist, speaker, and ex-hacker known for stopping the global WannaCry ransomware attack. The site targets cybersecurity professionals and enthusiasts, offering services such as public speaking, research, and educational content. The business model revolves around personal branding and content dissemination. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Ionicons, hosted behind Cloudflare DNS and CDN services. Analytics are implemented via Google Analytics and Cloudflare Insights, though privacy compliance is limited due to the absence of privacy and cookie policies. Security posture is solid with HTTPS and domain registration protections, but could be enhanced by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and well-structured, though it lacks some compliance documentation.

I

INSIDE COMMUNICATION

inside-communication.lu

38

INSIDE COMMUNICATION is a communication agency based in Luxembourg focusing on strategies, innovation, and impact. The current website is a placeholder announcing a forthcoming new site and offers a newsletter subscription to keep interested parties informed. The company targets businesses or professionals seeking communication and innovation services. The website's technical infrastructure uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Fonts and CreateSend for email marketing. However, the site lacks advanced frameworks or CMS indications and shows basic mobile optimization and accessibility features. Security posture is limited with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are present. The WHOIS data is unavailable due to query rate limits, limiting domain legitimacy verification. Overall, the site is functional but minimal, with room for significant improvements in security, privacy compliance, and content richness.

The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven cybersecurity entity serving as the national CERT/CSIRT for Luxembourg's private sector, communes, and non-governmental organizations. CIRCL provides a broad range of cybersecurity services including threat intelligence sharing via the MISP platform, dynamic malware analysis, passive DNS historical data, and document sanitization from untrusted USB devices. The organization maintains a strong market position as a trusted government-affiliated cybersecurity resource with a history dating back to 2008 and operates under the Luxembourg House of Cybersecurity (LHC). The website reflects a professional and authoritative presence with comprehensive security advisories and publications.

P

Prva sušačka hrvatska gimnazija u Rijeci

pshg.net

44

Prva sušačka hrvatska gimnazija u Rijeci is a Croatian secondary school providing general and specialized education including classical ballet and contemporary dance programs. The institution is well-established with a domain age since 2007 and holds Erasmus accreditation, indicating active participation in European educational programs. The website serves students, parents, and educators with relevant news, schedules, and contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, jQuery, and Font Awesome, hosted under a reputable registrar. The site is moderately optimized for performance and mobile use, with clear navigation and consistent branding. Security posture is moderate; while HTTPS is assumed, no advanced security headers or DNSSEC are implemented, and no cookie consent mechanism is present, which may affect compliance with privacy regulations. Overall, the site is trustworthy and professional but could improve in security and privacy compliance.

M

Ministère de l'Éducation nationale, de l'Enfance et de la Jeunesse

men.lu

58

The website men.public.lu is the official online presence of the Ministry of National Education, Childhood and Youth of Luxembourg. It serves as a comprehensive information portal providing detailed content on the Luxembourg education system, policies, news, events, and resources for students, parents, educators, and the general public. The site is well-positioned as an authoritative government source with a clear focus on education and youth services in Luxembourg. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern web technologies including RequireJS and Adobe Dynamic Tag Management for analytics and tag management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with content delivered via a government CDN. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the site follows best practices with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the site maintains a strong security posture suitable for a government entity. The overall risk assessment is low, with no signs of malicious activity or compliance issues. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and improving incident response contact visibility to further strengthen trust and security culture.

D

demch.co

demch.co

51

demch.co is a Ukrainian-based web development company specializing in creating websites and digital services for non-profit organizations and social change initiatives. With over 12 years of experience and more than 300 projects completed, the company positions itself as a trusted partner for NGOs, government agencies, and international organizations. Their key services include full-cycle website development, consulting, technical support, branding, design, and animation. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing user trust and engagement. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, and popular libraries like jQuery, TweenMax, and AOS for animations. Google Analytics and Google Tag Manager are used for tracking, indicating a moderate level of user data collection. Hosting appears to be managed via NameCheap with custom DNS servers. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended to enhance security posture. No privacy, cookie, or terms of service policies are present, representing compliance gaps especially under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and trustworthy with a strong focus on serving the non-profit sector. Strategic improvements in privacy compliance and security hardening would further strengthen its position and reduce risk.

P

Paikkatietoikkuna

paikkatietoikkuna.fi

55

Paikkatietoikkuna is a Finnish national spatial data portal providing access to spatial datasets and services, aimed at facilitating the use of geographic information. The portal serves a general audience including government entities, researchers, and the public interested in geographic data. It holds a strong market position as the official national geoportal for Finland, offering key services such as spatial data presentation and related services. The website is multilingual, supporting Finnish, Swedish, and English, enhancing accessibility for diverse users. Technically, the website employs modern web technologies including the Ant Design UI framework and the Oskari mapping platform, indicating a mature digital infrastructure. The site is served over HTTPS, ensuring secure communication, and demonstrates moderate performance and good mobile optimization. However, some accessibility and SEO features could be improved to enhance user experience further. From a security perspective, the site uses HTTPS and shows no immediate vulnerabilities or exposed sensitive data. However, explicit security headers and policies such as privacy, cookie, and incident response are absent, which are important for compliance and user trust. The WHOIS data confirms the domain's legitimacy and consistency with the Finnish government affiliation. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security policy disclosures to improve user confidence and regulatory adherence.

I

Istria Tourist Board

istra.hr

54

The website www.istra.hr serves as the official tourist website for the Istria Tourist Board, promoting the Istria region in Croatia. It provides comprehensive tourism information including accommodation, events, heritage, and nature activities targeting tourists and visitors interested in the Mediterranean region. The business operates as a regional tourism board with a medium-sized presence and has been established since 2012, consistent with the domain registration data. The website demonstrates a good level of digital maturity with modern web technologies, accessibility features, and SEO optimization. It uses a Laravel-based CMS inferred from session cookies and integrates multiple third-party services such as Facebook SDK, Google Tag Manager, Cookiebot for cookie consent, and MailerLite for marketing automation. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, although explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through Cookiebot's consent management and links to a comprehensive privacy policy. However, no explicit terms of service or security policy pages were found. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

OA.Works is a US-based non-profit organization dedicated to developing free and open source tools that facilitate open access to academic research. Their portfolio includes products such as ShareYourPaper, InstantILL, OAbutton, and OA.Report, which serve researchers, libraries, and funders by simplifying open access deposit, interlibrary loans, paywall bypassing, and policy compliance reporting. The organization maintains strong partnerships with reputable institutions including the Gates Foundation and IFLA, enhancing its credibility and market position within the open access community. Technically, the website employs modern web technologies, is mobile-optimized, and hosted via Cloudflare, ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and domain registration protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with comprehensive policies and GDPR considerations. Overall, OA.Works presents a professional, trustworthy, and mission-driven digital presence with a strong focus on community and open access advocacy.

L

Lokálny trh

lokalnytrh.sk

56

Lokálny trh is an established Slovak online platform founded in 2014 that maps and catalogs local food and beverage producers, providing consumers with an interactive map and search tools to discover regional producers. The platform also supports producers, retailers, and event organizers by offering free online profiles and promotional tools. The website demonstrates a good level of digital maturity with modern technologies such as Algolia search, Google Analytics, Facebook SDK, and responsive design. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the platform serves a niche retail market in Slovakia with a focus on local and regional products, maintaining a trustworthy and professional online presence.

R

Rieker

rieker-karriere.com

59

The website rieker-karriere.com/en/jobs/iframe serves as a job listing portal for Rieker, a company specializing in footwear manufacturing and retail. The site lists various job opportunities including apprenticeships and professional roles in marketing, IT, design, and management. The business appears to target job seekers interested in the footwear industry, supporting career development within a medium-sized retail and manufacturing company. The website content is well-structured and relevant, though limited to job postings without additional corporate or policy information. Technically, the site uses basic HTML5 and CSS3 with no detected advanced frameworks or CMS. The performance and mobile optimization are moderate to good, but accessibility and SEO features are basic. There is no evidence of analytics or tracking technologies, and no forms or data collection mechanisms are present on the analyzed page. From a security perspective, the site lacks visible security headers and SSL configuration details, and no privacy or cookie policies are found, indicating potential compliance gaps. The WHOIS data is missing or the domain is not registered, which raises concerns about domain legitimacy despite the professional content. Overall, the security posture is weak, and privacy compliance is poor. The overall risk assessment suggests the website is functional and business-relevant but requires improvements in domain registration transparency, security best practices, and privacy compliance to enhance trust and reduce risk.

M

Météo-France

meteofrance.yt

61

Météo-France Mayotte is the official regional meteorological service providing comprehensive weather forecasts, cyclone tracking, marine weather, and climatology information for Mayotte. The website serves residents, visitors, and government agencies with up-to-date meteorological data and alerts. Technically, the site is built on Drupal CMS with modern JavaScript libraries such as Leaflet for mapping and integrates consent management via Didomi, ensuring GDPR compliance in cookie handling. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the domain registration is consistent with the official nature of the site, and no blocking or WAF challenges were detected.

The website www.zamg.ac.at represents the former Zentralanstalt für Meteorologie und Geodynamik (ZAMG), a governmental meteorological and geodynamic authority in Austria. The site itself is a simple placeholder informing visitors that the original ZAMG website has been discontinued and that services have migrated to the successor organization GeoSphere Austria. The content is minimal, with no interactive elements, policies, or contact information provided. The website targets the general public and stakeholders interested in meteorological and geodynamic data and services. The business model is governmental service provision, with a medium-sized organizational footprint typical for national meteorological agencies. Technically, the site is very basic, built with simple HTML and CSS, lacking modern frameworks, CMS, or advanced hosting indicators. There is no evidence of analytics, tracking, or advertising technologies. The site is accessible without WAF or security challenges but lacks security headers and HTTPS status is unknown. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows limited maturity. No privacy or cookie policies are present, no incident response or security contact information is provided, and no security best practices such as headers or secure forms are observed. The WHOIS data is unavailable due to NIC.AT restrictions, limiting transparency but not necessarily indicating malicious intent. The domain appears legitimate given its governmental nature and the redirection to a successor official site. Overall, the site scores low to moderate on AI evaluation due to minimal content, lack of security and privacy features, and absence of business contact details. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, publishing security and incident response information, and improving technical and security configurations to enhance trust and compliance.

3

37th International Conference on Alpine Meteorology (ICAM)

icam2025.hr

51

The website for the 37th International Conference on Alpine Meteorology (ICAM) presents a well-structured and content-rich platform for the upcoming scientific conference scheduled in Poreč, Croatia in late 2025. It targets researchers and professionals in mountain meteorology and climate science, offering detailed event information, registration, and abstract submission functionalities via partner platforms. The site demonstrates a moderate level of digital maturity with modern web technologies and responsive design, although it lacks key privacy and security policy disclosures. The security posture is adequate with HTTPS and Cloudflare DNS, but could be improved by adding security headers and incident response information. Overall, the domain registration aligns with the event's geographic focus but shows an unusual future creation date, likely due to event timing. Strategic improvements in privacy compliance and contact transparency would enhance trust and compliance.

Sencor is a consumer electronics and home appliances brand offering a wide range of products including televisions, audio-video equipment, kitchen appliances, and health and beauty devices. The website serves as a retail and informational platform targeting general consumers primarily in the French language market, with multiple regional versions available. The company provides customer support, product downloads, and dealer location services, positioning itself as an established player in the retail electronics sector with a medium-sized market presence based in the Czech Republic. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, Bootstrap 4, and Kentico CMS. It employs structured data (JSON-LD) for enhanced SEO and contact information presentation. The site is mobile-optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate with use of Google Fonts and asynchronous JavaScript loading. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is no visible cookie consent mechanism, which may impact GDPR compliance. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is functional, professional, and trustworthy in content and design but would benefit from improved security headers, cookie consent implementation, and verification of domain registration details to enhance trust and compliance.

L

Le Gouvernement du Grand-Duché de Luxembourg

luxembourg.lu

57

The website luxembourg.public.lu is the official government portal of the Grand Duchy of Luxembourg, providing comprehensive information about the country’s culture, living conditions, tourism, education, work, and investment opportunities. It serves a broad audience including residents, tourists, investors, and the general public. The site is well-branded with consistent government logos and multilingual support, reflecting Luxembourg’s multicultural and multilingual identity. Technically, the site is built on Adobe Experience Manager, uses modern web technologies, and includes accessibility and SEO best practices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. The absence of WHOIS data is likely due to registry restrictions rather than malicious intent, but it slightly impacts trust metrics. Overall, the site is professional, trustworthy, and well-maintained.

C

CSG Foundation

csgfoundation.com

67

CSG Foundation is a non-profit organization dedicated to supporting communities, first responders, promising talents, and CSG Group employees. The foundation focuses on three key pillars: firefighter support, science and education, and employee assistance. The website is professionally designed using modern technologies such as Next.js and Sanity CMS, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and secure forms, though some security policies and incident response information are missing. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of WHOIS data is a concern but the website's linkage to the reputable Czechoslovak Group supports its legitimacy.

WaveFoods Catering & Private Events is a small local catering business based in Halifax, Nova Scotia, specializing in event catering services including weddings, corporate events, and private parties. Their offerings include custom menu planning, handcrafted cocktails, and desserts, targeting event organizers and private clients in the hospitality sector. The website presents a professional and clean design with clear navigation but lacks advanced technical features and compliance documentation. Technically, the website is built with basic HTML and CSS without detectable CMS or advanced frameworks. It lacks HTTPS information and security headers, which weakens its security posture. The site does not include privacy or cookie policies, nor does it show evidence of analytics or tracking tools, indicating minimal user tracking but also a lack of compliance with common privacy standards. From a security perspective, the absence of HTTPS and security headers, combined with no visible incident response or security policies, suggests a low security maturity level. The WHOIS data is missing, raising concerns about domain registration legitimacy and increasing risk. The contact method is limited to a form without alternative contact details, which may impact trust and user confidence. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and domain legitimacy verification to enhance trustworthiness and reduce risk.

N

Nadace města Karlovy Vary

nadace-karlovyvary.cz

41

Nadace města Karlovy Vary is a non-profit foundation established by the statutory city of Karlovy Vary, Czech Republic. The foundation focuses on supporting cultural, sports, health, social, educational, architectural, and tourism-related initiatives within the city and its surroundings. The website serves as an informational portal providing details about the foundation's mission, supported areas, partners, and grant opportunities. The target audience includes local residents, cultural organizations, and potential grant applicants. Technically, the website is built using HTML5, CSS3, and JavaScript with jQuery 1.8.3 and RequireJS, likely generated by Adobe Muse. Mobile optimization is basic with separate mobile and tablet pages. Security posture is moderate but weakened by the use of outdated JavaScript libraries and lack of visible security headers or privacy policies. No forms or direct contact information are present on the main page, limiting user engagement and transparency. Overall, the site is functional and professional but requires updates to improve security and compliance.

S

Studio Fresh Net, s.r.o.

mediaas.cz

52

Mediaas.cz is a Czech advertising and publishing agency operating since 2013, offering comprehensive marketing services across the Czech Republic. The website presents a professional image with clear branding and a focus on various marketing disciplines including promotion, print, events, and social marketing. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and integration of marketing analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and uses a cookie consent mechanism to comply with privacy regulations. Security posture is moderate with HTTPS implied but lacks explicit security headers and detailed privacy policies. No contact emails or phone numbers were found in the provided content, which limits direct communication channels. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.