Security Directory

Veganopolis is a Croatian non-profit online platform operated by the association Prijatelji životinja, dedicated to promoting veganism and plant-based lifestyles. The website offers a variety of community and educational services including a vegan product guide, a 30-day vegan challenge, vegan buddy support, nutritionist advice, cooking workshops, and vegan restaurant listings. The target audience is primarily Croatian-speaking individuals interested in veganism and animal rights. The platform positions itself as a niche non-profit resource with a focus on community engagement and education. Technically, the website uses a traditional tech stack including jQuery 1.10.2, Bootstrap, and Google Fonts. It is mobile optimized with good navigation and content quality, though some technologies are outdated. No CMS or hosting provider details are evident. The site lacks advanced security headers and explicit privacy or terms of service pages, though it includes a cookie consent banner. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (assumed), employs POST methods for forms, and does not expose sensitive data. However, the absence of security headers and use of an outdated jQuery version present moderate risks. The WHOIS data is missing or indicates the domain is unregistered, which is inconsistent with the active website and raises concerns about domain legitimacy. Overall, the security posture is moderate but could be improved with better policies and technical controls. The overall risk is moderate with recommendations to verify domain registration status, implement security headers, update libraries, and publish privacy and security policies. The site is safe for general audiences and serves a clear non-profit mission with good business credibility.

Youth.lu is an official youth service platform operated under Luxembourg's national youth service. It provides informational resources including directories of youth organizations, chalet information, and funding opportunities for youth projects. The website targets youth and youth organizations within Luxembourg, positioning itself as a government-affiliated non-profit service platform. Technically, the site is built on Drupal 8 with common web technologies such as jQuery and Bootstrap, and uses Piwik for analytics. The site is moderately optimized for mobile and basic in accessibility and SEO. Security posture is average with no detected security headers and no visible vulnerabilities, but lacks privacy and cookie policies, which impacts GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe for general audiences and does not contain adult or explicit content.

S

Service national de la jeunesse

animateur.lu

57

Animateur.lu is an official government portal operated by the Service national de la jeunesse in Luxembourg, targeting current and prospective youth animators. The site provides comprehensive resources including training, certifications, event listings, and material lending to support youth animation activities. It holds a strong market position as a trusted government resource with consistent branding and clear navigation. Technically, the website is built on WordPress with a modern stack including WooCommerce for e-commerce capabilities, Contact Form 7 for forms, and Complianz for GDPR compliance. The site uses Matomo analytics hosted on its own server, enhancing privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be improved. Overall, the website is professional, accessible, and trustworthy, serving its audience effectively.

S

S-Team

s-team.lu

55

S-Team is a government-backed non-profit initiative based in Luxembourg focused on preventing violence among youth in schools and educational institutions. The project engages young people to lead prevention activities and peer mediation, supported by national youth services and partner organizations. The website is well-structured, professionally designed, and provides clear information about the project, partners, and contact details. Technically, it is built on WordPress with modern libraries and frameworks, including Bootstrap and jQuery, and integrates Google reCAPTCHA and Matomo analytics with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is unavailable, limiting domain legitimacy assessment, but the presence of government logos and partner sites supports trustworthiness. Overall, the site is a credible, safe, and well-maintained platform for its intended audience.

S

Service National de la Jeunesse (SNJ)

chalets.lu

54

Chalets.lu is an official Luxembourg government-affiliated website providing comprehensive information and booking options for youth accommodations including chalets, camping grounds, and youth hostels across Luxembourg. The platform targets youth groups, families, and tourists seeking affordable lodging options, positioning itself as a trusted government resource. The website leverages WordPress CMS with modern technologies such as Bootstrap, jQuery, and Google Maps API to deliver a responsive and accessible user experience. Privacy compliance is robust, featuring a detailed cookie policy with opt-in consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its government service role.

A

Aittakoodi Oy

synergybus.fi

44

SynergyBus, operated by Aittakoodi Oy, is a Finnish web platform specializing in connecting taxi and bus companies with customers seeking chartered transportation services. The platform aggregates over 15,000 annual booking requests, positioning itself as a leading service in the Finnish transportation sector. The website offers features such as daily email notifications of new requests, the ability to advertise available fleet capacity, and tools to foster long-term customer relationships. The business targets transportation operators and customers within Finland, emphasizing efficiency and market reach.

A

Aittakoodi Oy

tilaataksi.fi

55

Tilaataksi.fi is a Finnish online taxi booking platform operated by Aittakoodi Oy, providing customers with a convenient way to pre-book taxis and receive competitive offers from taxi operators across Finland. The service targets both private individuals and organizations, offering a streamlined multi-step form for detailed ride requests. The platform is supported by Rideer Nordic Oy and integrates with various third-party services for analytics, customer support, and hosting. Technically, the website uses modern frameworks like Bootstrap and jQuery, with performance and mobile optimization rated as good. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information presented on the site.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

D

DEEP

deep.eu

70

DEEP is a professional IT services company specializing in cloud computing, data management, artificial intelligence, and cybersecurity, primarily serving clients in Luxembourg and France. The company positions itself as a trusted partner for digital transformation challenges, targeting a broad range of business sectors including SMEs, large enterprises, public institutions, and banking. The website is well-structured, multilingual, and provides comprehensive information about their services and business focus. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, React, and Clay UI components. The presence of cookie consent mechanisms and GDPR compliance indicators reflects a mature approach to privacy and regulatory adherence. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of explicit security policies and incident response contacts suggests room for improvement. WHOIS data is privacy protected, which is common for European domains and does not detract from the site's legitimacy. Overall, the website demonstrates a solid digital presence with good technical and security practices, supporting DEEP's credibility as an IT services provider.

L

Lobby X

lobbyx.army

55

Lobby X is a Ukrainian employment and recruiting platform focused on supporting progress and victory in Ukraine. The platform targets Ukrainian job seekers and employers, likely with a focus on government or military-related employment. Technically, the website is built on WordPress using Bootstrap and jQuery, hosted with Cloudflare DNS and registered via GoDaddy with privacy protection. The site uses modern tracking tools like Google Analytics and Facebook Pixel. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and professionally designed but would benefit from enhanced privacy and security measures.

L

Luxembourg House of Cybersecurity g.i.e.

cswl.lu

58

The website represents the CYBERSECURITY Week Luxembourg 2025, a national campaign coordinated by the Luxembourg House of Cybersecurity. It aims to promote cybersecurity awareness and foster collaboration within the Luxembourg cybersecurity ecosystem through key events such as the Luxembourg GRC Conference and hack.lu. The campaign targets cybersecurity professionals and the wider community interested in cybersecurity topics. The website content is well-structured, professionally designed, and consistent with the organization's branding. Technically, the site uses modern web technologies including React, Bootstrap, and FontAwesome, with good mobile optimization and moderate performance. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, some security best practices like security headers and cookie consent mechanisms are missing or not visible in the provided content. From a security posture perspective, the site demonstrates a good baseline with HTTPS and no evident vulnerabilities. The presence of legal and data protection notices in PDF format indicates attention to compliance, though explicit security policies and incident response information are absent. The WHOIS data aligns well with the website's claims, showing consistent registration and no privacy protection, enhancing trustworthiness. Overall, the website is a credible, professional platform for cybersecurity awareness events in Luxembourg, with room for improvement in privacy compliance and security policy transparency.

O

OCA Luxembourg

oca.lu

41

OCA Luxembourg is a professional insurance brokerage firm operating in the Grand Duchy of Luxembourg, providing tailored insurance solutions for both professionals and individuals. The company offers a range of services including professional insurance, personal insurance, and specialty insurance products such as Lifestyle & Fine Art, construction guarantees, and coverage for European officials and sports professionals. The website reflects a well-structured and professional digital presence with clear navigation and relevant content targeting Luxembourg-based clients. Technically, the website employs modern web technologies including Bootstrap, jQuery, and specialized plugins like Revolution Slider and tarteaucitron for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could enhance its technical maturity. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations such as GDPR. However, the absence of visible security headers and incident response information suggests room for improvement in security posture. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the professional content and business registration number lend credibility. Overall, the website presents a trustworthy and professional image suitable for its business domain, with moderate technical and security maturity. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability would strengthen trust and compliance.

C

College Park Tutors

collegeparktutors.com

56

College Park Tutors is a specialized tutoring service focused on providing one-on-one academic support to students at the University of Maryland (UMD). Established in 2013, the company offers expert tutoring in STEM subjects such as calculus, physics, engineering, and statistics. Their business model centers on connecting vetted tutors with students for personalized sessions, both online and in-person, emphasizing flexibility and course-specific expertise. The website reflects a strong local market position with clear branding and trust signals including testimonials and detailed course offerings. Technically, the website is built on the UserFrosting CMS framework and leverages modern web technologies including jQuery, Bootstrap, Google Analytics, Facebook Pixel, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is inferred to be via NameCheap, consistent with the domain registrar information. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates reCAPTCHA to protect forms. However, it lacks DNSSEC and security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. Privacy compliance is basic; while a privacy policy and terms of service are present, there is no cookie consent mechanism, which may be a GDPR compliance gap. Overall, the website is professional, trustworthy, and well-suited for its educational audience. The domain registration data aligns well with the business history, supporting legitimacy. Strategic recommendations include implementing DNSSEC, adding security headers, and introducing a cookie consent banner to improve privacy compliance and security posture.

I

Istarska županija

istra-istria.hr

67

The website www.istra-istria.hr serves as the official online presence of the Region of Istria, a Croatian regional government entity. It provides comprehensive information about the region's governance, geography, culture, economy, and contact details. The site targets residents, tourists, and stakeholders interested in regional affairs. The business model is focused on public administration and information dissemination, positioning itself as a trusted government resource with certifications such as ISO 9001 and membership in the Assembly of European Regions. Technically, the site is built on Django CMS and leverages modern web technologies including jQuery, Google Analytics, and Slider Revolution. It demonstrates good mobile optimization, accessibility, and SEO practices. Hosting and domain registration are consistent with a Croatian government entity, registered with CARNET since 2001. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks published security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no dedicated privacy policy page but a functional cookie banner and settings modal. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include publishing a privacy policy, security policy, and incident response details, enhancing security headers, and adding a security.txt file to improve transparency and security posture.

S

Service de médiation scolaire

mediationscolaire.lu

63

The website mediationscolaire.lu represents the official Service de médiation scolaire, a government entity in Luxembourg dedicated to supporting parents, students, and school personnel in resolving conflicts within the educational system. The service operates independently within the Ministry of National Education and targets the Luxembourg community with mediation services related to primary and secondary education. The site is professionally designed with clear navigation, multilingual support, and accessibility features, reflecting a strong commitment to user experience and inclusivity. Technically, the website is built on WordPress 6.7.1, utilizing Bootstrap for responsive design, jQuery, and Matomo for analytics. It employs GDPR-compliant cookie consent mechanisms and demonstrates good mobile optimization and SEO practices. The hosting provider is not explicitly identified, but the site uses HTTPS with excellent SSL configuration, ensuring secure data transmission. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's government affiliation and Luxembourg location, supporting the site's legitimacy. Overall, mediationscolaire.lu is a trustworthy, well-maintained government service website with strong privacy compliance and good technical implementation. Strategic improvements include adding security headers, publishing a security policy, and providing incident response contact information to enhance security posture and user trust.

Restopolis is a Luxembourg-based service provider specializing in school and university catering. The website offers multilingual content targeting students, adults, and visitors, providing menu consultation, booking, and account management services. The platform integrates with IAM for secure user access and supports sustainable food procurement initiatives. Technically, the site is built on ASP.NET WebForms using the DNN CMS, leveraging modern JavaScript libraries and Google services for analytics and security. Security posture is good with HTTPS and reCAPTCHA, though explicit security headers are missing. Privacy compliance is basic with a cookie consent banner and privacy policy available. WHOIS data is unavailable, limiting domain trust verification, but the website's professional appearance and government affiliations support legitimacy.

C

Croatian Climate Change Panel

solarniklaster.org

45

The Croatian Climate Change Panel operates the solarniklaster.org website as a specialized platform focused on renewable energy, sustainable technologies, and climate change awareness primarily targeting Croatian and regional audiences. The site offers news, expert articles, multimedia content, and educational resources to support green energy transition efforts. Technically, the website uses a standard modern tech stack including Bootstrap, jQuery, and analytics tools, hosted on a domain registered since 2015 with privacy protection. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with policies present but no explicit cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is a credible, niche informational resource with room for security and privacy improvements.

Otok Krk energija d.o.o. is a Croatian limited liability company focused on producing and supplying renewable energy, primarily solar, to achieve energy independence for the island of Krk. The company is relatively new, founded in 2019, and is owned by the local municipality of Baška with plans to include other local government units as co-owners. Their business model centers on local investment and sustainable energy production, positioning themselves as a key player in the regional green energy market. The website reflects this mission with content in Croatian and some English, targeting local residents, investors, and governmental bodies interested in renewable energy projects. Technically, the website uses common web technologies such as Bootstrap, jQuery, and popular carousel libraries, with integration of Google Analytics and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is moderate; HTTPS is used but no explicit security headers or incident response policies are published. Privacy and cookie policies exist but lack active consent mechanisms. Overall, the website is professional and trustworthy but could improve in security and privacy compliance. Recommendations include implementing security headers, adding cookie consent, publishing incident response information, and enhancing contact transparency.

S

Saaristolautat.fi

saaristolautat.fi

43

Saaristolautat.fi is a specialized informational website providing ferry routes and schedules for the Finnish archipelago, including the Turku archipelago and Åland Islands. The site targets travelers and residents needing up-to-date ferry information for over 40,000 islands serviced by approximately 50 ferries and 200 docks. The business model is primarily informational, serving as a public utility platform rather than a commercial enterprise. The website is relatively small in scale, founded in 2017, and operates with a niche focus on regional transportation. Technically, the website employs a modern web stack including HTML5, CSS3, JavaScript with jQuery, Bootstrap for responsive design, FontAwesome for icons, and integrates Google Maps API for route visualization. Hosting appears to be provided by Domainhotelli, a Finnish hosting provider. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance given its European audience. No contact information or incident response details are provided, limiting transparency and trust. The WHOIS data shows the domain is registered to a private person rather than an organization, which is somewhat inconsistent with the public service nature of the site but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is functional and provides valuable regional transportation information but would benefit from improved security practices, privacy compliance, and clearer business contact details to enhance trust and regulatory adherence.

L

LuxID

luxid.lu

66

LuxID is a Luxembourg-based digital identity platform providing a secure, unified login solution for multiple local companies and applications. Supported by major partners such as POST, Cactus, CFL, and RTL, LuxID aims to simplify user authentication while enhancing privacy and security in compliance with GDPR. The website is professionally designed, multilingual, and offers clear information about the service, benefits, and partners. Technically, the site uses modern web technologies including Liferay CMS, Bootstrap, React, and various JavaScript libraries, hosted likely within Luxembourg's POST infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, limiting domain trust verification, but the business credibility is supported by visible partnerships and professional content.

L

Luxembourg House of Cybersecurity

lhc.lu

71

Luxembourg House of Cybersecurity (LHC) serves as the central hub for cybersecurity resilience in Luxembourg, hosting key national centers such as CIRCL and NC3. The organization focuses on fostering innovation, collaboration, and capacity building in cybersecurity through various services including acceleration programs, community meet-ups, and standards development. The website reflects a professional and government-aligned entity with a clear mission to enhance Luxembourg's cybersecurity posture. Technically, the website employs modern web technologies including React, Bootstrap, and Leaflet, with privacy-conscious analytics via Matomo. The site is hosted on Luxembourg-based infrastructure (Restena) and demonstrates good mobile optimization and user experience. However, some technical improvements are recommended, such as implementing security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and a published security policy. Incident response is facilitated through links to CIRCL's reporting portal. Privacy compliance is partial, with a privacy policy available but no cookie consent banner. Overall, the site presents a strong security posture appropriate for a government-related cybersecurity entity. The overall risk is low, with recommendations focusing on enhancing privacy compliance, security headers, and accessibility to further strengthen trust and regulatory adherence.

L

Lobby X

thelobbyx.com

60

Lobby X is a Ukrainian employment platform and recruiting agency focused on supporting job seekers and employers, with a special emphasis on veterans and military personnel. The company operates a professional website with a clear business model centered on job listings, recruitment services, and career consultations. Their market position is niche but important within Ukraine, supporting progress and victory through employment. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap, jQuery, and Lottie animations, and integrates Google services such as reCAPTCHA and Tag Manager. The site is mobile optimized and SEO friendly, though accessibility is basic. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, enabling DNSSEC, and improving privacy compliance to strengthen trust and security.

Z

ZONER, s.r.o.

zonercloud.com

73

ZonerCloud, operated by ZONER, s.r.o., is a Slovakia-based cloud services provider specializing in high-performance virtual private servers (VPS), managed hosting, email hosting, cloud storage, and AI/GPU server rentals. The company positions itself as a market leader in VPS performance within its region, leveraging partnerships with VMware and Microsoft to deliver reliable and scalable cloud infrastructure solutions. Their offerings target businesses and developers seeking affordable, powerful, and flexible cloud computing resources with rapid deployment times and strong uptime guarantees. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as Bootstrap, jQuery, and various UI/UX libraries. It integrates analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, alongside a live chat support system. The site is well-optimized for mobile devices, features comprehensive cookie consent mechanisms, and employs HTTPS with a DigiCert SSL certificate, indicating a strong commitment to security and privacy. From a security perspective, while the site enforces HTTPS and uses secure forms with CSRF tokens, it lacks publicly available formal security policies or incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registrant data slightly reduces trust but is mitigated by the professional presentation and trust signals such as certifications and partner logos. Overall, ZonerCloud presents a trustworthy and professional cloud service platform with strong business credibility and technical maturity. Strategic improvements in transparency around security policies and incident response, as well as WHOIS data availability, would further enhance trust and compliance posture.

Energetska zadruga "Otok Krk" is a small Croatian energy cooperative focused on promoting renewable energy and energy independence on the island of Krk. The cooperative provides consulting, project support, collective purchasing, and education services to local residents and businesses. Their website reflects a community-oriented business model with clear contact information and active social media presence. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response policies. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. Overall, the website is professional and trustworthy, with a legitimacy score supported by consistent WHOIS data and domain age.

G

Galaksija

galaksija.hr

42

Galaksija.hr is a Croatian online magazine focused on popularizing science across various disciplines including natural sciences, technology, social sciences, ecology, and medicine. The website offers news articles, blogs, multimedia galleries, and videos targeting a general audience interested in science and education. The business model appears to be content publishing supported by advertising and partnerships with related portals. Technically, the site uses a custom CMS with common web technologies such as jQuery, Bootstrap, and Flexslider, and integrates analytics tools like Google Analytics, Histats, and Mixpanel. The site is accessible via HTTPS and includes a login form for registered users, but lacks advanced security headers and explicit GDPR cookie consent mechanisms. No incident response or security contact information is provided, which could be improved to enhance trust and compliance. Overall, the website is professionally designed with good content quality and moderate technical implementation, suitable for its niche media role.

World Nuclear News is a well-established information service operated by the World Nuclear Association, providing authoritative news, features, and analysis on the global nuclear energy sector. The website targets industry professionals, policymakers, and stakeholders, offering a comprehensive range of content including news articles, podcasts, and newsletters. The business model is centered on information dissemination supported by an industry association, positioning itself as a trusted source within the energy sector. Technically, the website employs modern web technologies such as Bootstrap and jQuery, integrates analytics tools including Google Analytics and Microsoft Clarity, and is hosted with Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. The infrastructure supports a professional and responsive user experience with moderate performance. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and maintains domain registration safeguards. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, indicating a solid security posture but with room for improvement in transparency and DNS security. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. It provides clear contact information and maintains consistent branding. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further enhance security and trust.

E

EPICUR Alliance

epicur.education

56

EPICUR Alliance is a consortium of nine European higher education institutions collaborating to provide innovative educational programs, research initiatives, and regional ecosystem engagement. The website serves as a multilingual portal offering information on educational offers, research projects, events, and partner universities. The technical infrastructure is based on WordPress with modern web technologies including Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is well addressed with GDPR-aligned policies and consent banners. Overall, the website reflects a professional and trustworthy educational alliance with a strong digital presence.

S

Solar Action Alliance

solaractionalliance.org

42

Solar Action Alliance is a small environmental advocacy group focused on promoting solar energy as a clean, reliable, and abundant renewable energy source. The website provides comprehensive information on solar panel costs, financing options, and state-specific installation guides, targeting homeowners and environmentally conscious individuals in the US. The business model centers on education and advocacy, supported by donations and informational content. Technically, the site is built on WordPress with Bootstrap for responsive design, leveraging common plugins and tracking tools such as Google Analytics and Facebook Pixel. Hosting is provided by SiteGround, and the domain is registered since 2015, indicating a stable presence. Security posture is moderate with HTTPS enforced and some security best practices observed, but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from improved compliance and security transparency.

The website www.palautevayla.fi serves as a customer service and feedback platform for transportation services in Finland. It targets Finnish-speaking users seeking to provide feedback or obtain information related to public transportation. The site is positioned as an essential public sector service portal, offering key services such as customer feedback submission and information search. The business model is focused on public service facilitation rather than commercial activities. Technically, the website employs AngularJS and Bootstrap frameworks, indicating a moderately modern frontend infrastructure. The site is hosted securely with HTTPS and demonstrates good SSL configuration. Performance and mobile optimization are adequate, though accessibility features could be improved. SEO is basic but functional. From a security perspective, the site enforces HTTPS and includes some security headers, but lacks advanced headers like CSP and HSTS. No vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit privacy or cookie policies indicates room for compliance improvement. Overall, the website is trustworthy and professionally maintained, but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

L

Liikenne- ja viestintävirasto Traficom

finap.fi

65

The website finap.fi serves as the National Access Point (NAP) for mobility service data in Finland, operated by Fintraffic Oy under the mandate of the Finnish Transport and Communications Agency (Traficom). It provides a centralized platform for mobility service providers to submit essential digital data and for developers to access this data to build integrated mobility solutions. The site is well-positioned as an official government service with a clear focus on transportation data and digital service facilitation. Technically, the website employs modern web technologies including React, Bootstrap, and Leaflet for mapping, alongside analytics tools like Piwik Pro (Matomo) and a comprehensive cookie consent management system by Cookie Information. Hosting appears to be on Amazon AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected in the provided data, suggesting room for improvement in hardening the security posture. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the domain's legitimacy, registered to a Finnish government agency with consistent information and a long registration period. Overall, finap.fi is a trustworthy, government-backed platform with solid technical implementation and privacy compliance. Strategic recommendations include enhancing security headers, improving accessibility features, and maintaining regular audits of third-party scripts to sustain a strong security posture.

C

CYBERSECURITY Luxembourg

cybersecurity.lu

68

CYBERSECURITY Luxembourg operates as the national cybersecurity portal for Luxembourg, providing a centralized platform for cybersecurity news, ecosystem engagement, events, educational resources, and community support. The portal targets a broad audience including cybersecurity professionals, public institutions, private companies, startups, and the general public interested in cybersecurity within Luxembourg. It is positioned as a government-affiliated authoritative source, promoting collaboration and awareness in the national cybersecurity ecosystem. Technically, the website is built using modern web technologies such as React, Bootstrap, and Leaflet.js, with Font Awesome icons and Matomo analytics integrated for tracking. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. Performance is moderate, and accessibility features are basic but present. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, nor incident response or vulnerability disclosure information. Matomo analytics is used without a visible cookie consent mechanism, indicating partial privacy compliance. The WHOIS data shows consistent domain registration aligned with the website's government and cybersecurity focus, supporting legitimacy. Overall, the website is a credible and professional government portal with good content and technical implementation but requires improvements in privacy compliance, security headers, and transparency regarding incident response and vulnerability disclosure to enhance trust and security posture.

World Nuclear Association is a well-established UK-based industry association focused on the nuclear energy sector. It provides authoritative information, advocacy, events, and membership services to a global audience of industry professionals and policymakers. The website reflects a mature digital presence with comprehensive content and professional design. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and domain registration protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

A

Antleaf Ltd.

antleaf.com

57

Antleaf Ltd. is a specialized digital consultancy operating primarily in the higher-education and research sectors. The company focuses on scholarly communications, repositories, data and metadata management, and web system design and development. Their market position is that of a niche expert consultancy serving academic and research institutions with tailored technical and project management services. The website reflects a small but professional business with clear branding and a consistent message aligned with their domain expertise. Technically, the website is built using the Hugo static site generator, leveraging Bootstrap for responsive design and Google Fonts for typography. The site is hosted with DNS managed by Cloudflare and uses Plausible Analytics for privacy-conscious visitor tracking. The technical implementation is modern and performant, with good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. No privacy or cookie policies are published, representing a compliance gap especially relevant under GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent and trustworthy, with domain registration dating back to 2012, matching the company's founding timeline. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security headers. The risk level is moderate with no critical vulnerabilities detected, but compliance improvements are advised.

E

Energylink s.r.o.

energylink.cz

48

Energylink s.r.o. is a Czech Republic-based company specializing in innovative energy technologies for buildings, including heating, cooling, hot water preparation, and electricity production. The company targets public administration, private firms, and residential building owners, positioning itself as a reliable provider of energy-efficient solutions. Their website reflects a professional and modern digital presence, utilizing Bootstrap and jQuery frameworks, with good mobile responsiveness and clear navigation. However, the absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and contact details appear genuine and consistent with the business claims. Security posture is solid with HTTPS and no visible vulnerabilities, but the lack of security headers and privacy policies indicates room for improvement. Overall, the site is trustworthy and well-maintained but would benefit from enhanced compliance and transparency measures.

C

Casa dell'Aviatore

casaviatore.it

43

Casa dell'Aviatore is the official officers' club of the Italian Air Force, providing hospitality, event hosting, and accommodation services primarily targeting military officers and their guests. The website presents a professional image with detailed service offerings including restaurant, bar, congress hall, and hotel facilities. It also features event information and member services, positioning itself as a niche hospitality provider within the military community in Italy. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various plugins for galleries, booking, and multilingual support. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is moderate with HTTPS enforced but lacking explicit security headers and running an outdated WordPress version, which could pose risks. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy measures.

A

Associazione Nazionale Famiglie Caduti e Mutilati dell'Aeronautica

anfcma.it

44

The Associazione Nazionale Famiglie Caduti e Mutilati dell'Aeronautica (A.N.F.C.M.A.) is a longstanding Italian non-profit association dedicated to supporting families of fallen and mutilated members of the Italian Air Force. The website serves as an informational and engagement platform, offering details about the association's history, mission, activities, staff, and contact information. It targets families of military personnel, researchers, and members of the association. The organization operates with a moral and supportive mission rather than commercial intent, providing scholarships, awards, psychological support, and legal assistance to its members. Technically, the website employs modern front-end technologies including Blazor, Bootstrap, and various JavaScript libraries for UI enhancements. The site is mobile-optimized with good navigation and content structure, though performance is moderate. The domain is relatively new (created in 2023) and recently expired, which poses a risk to availability and trust. No CMS or hosting provider details were identified. Privacy and cookie policies are present and GDPR compliance appears addressed, but no explicit security policies or incident response contacts are found. From a security perspective, the site uses HTTPS and DNSSEC is enabled, but lacks visible security headers and explicit security documentation. The expired domain status is a critical risk factor. No analytics or advertising scripts were detected, indicating a privacy-conscious approach. Overall, the website is professional and trustworthy but requires urgent domain renewal and enhanced security practices. Strategically, the association should prioritize domain renewal, implement security headers, document security policies, and establish incident response contacts to improve trust and resilience. Enhancing technical performance and accessibility would further benefit user experience.

Z

ZAMG (Zentralanstalt für Meteorologie und Geodynamik)

naturkalender.at

41

Naturkalender.at is a citizen science platform operated under the auspices of the Austrian Central Institute for Meteorology and Geodynamics (ZAMG). It enables users to observe and record natural phenomena such as plants and animals throughout the year, contributing valuable data to climate research and phenology studies. The platform offers a dedicated mobile app for Android and iOS, fostering community engagement and scientific collaboration. The website is well-branded, consistent, and targets nature enthusiasts and researchers primarily in Austria. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses modern UI components like Smart Slider 3. While the site is mobile optimized and provides a good user experience, some technical improvements are recommended, particularly in security headers and cookie consent mechanisms. The absence of WHOIS data limits full trust verification, but the affiliation with ZAMG and partner organizations supports legitimacy. Overall, the site presents a professional and trustworthy front for its niche scientific community.

A

American Podiatric Medical Association

apma.org

70

The American Podiatric Medical Association (APMA) operates a comprehensive and professionally designed website serving as a central resource for podiatrists, students, residents, young physicians, and patients. The organization, founded in 1912, provides education, advocacy, practice management resources, and membership benefits, positioning itself as a leading professional association in podiatric medicine in the United States. The website content is rich, well-structured, and targets multiple audiences effectively. Technically, the site is built on Mura CMS 7.0 with Bootstrap 3 and uses modern web technologies including jQuery, Font Awesome, Google reCAPTCHA, and Slick Carousel. The site is mobile optimized with good SEO and accessibility basics. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is strong with HTTPS enforced and use of reCAPTCHA on forms, but lacks explicit security headers and a visible cookie consent mechanism. WHOIS data is unavailable due to a malformed response, which limits domain registration trust analysis, but the site’s professionalism and consistency with a legitimate association mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves its professional audience well. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance further.

P

Private by Design, LLC

titcheck.org

61

Titcheck.org is a small US-based nonprofit organization focused on educating young adults about breast self-awareness and breast cancer risk reduction. The website promotes the #TitCheck concept, encouraging regular breast checks while getting dressed to empower early detection and advocacy. The site is professionally designed with modern frontend technologies including Bootstrap, jQuery, and animation libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain locking, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. The domain registration is consistent with the nonprofit mission and transparent. Overall, the website serves its educational purpose well but should improve privacy compliance and security disclosures to enhance trust and regulatory adherence.

M

MyBookings.com

mybookings.com

51

MyBookings.com is a well-established Dutch company specializing in integrated hotel marketing services, including branding, advertising, distribution management, integration services, and analytics. With over 18 years of experience and a domain age of more than 22 years, the company holds a strong market position serving hotels aiming to optimize their customer journey and increase direct bookings. The website reflects a professional and consistent brand image targeting hotel management professionals in the hospitality sector. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and Helix Ultimate, leveraging Google Fonts, Font Awesome, and Google Analytics for enhanced user experience and tracking. Hosting and DNS are managed via Cloudflare, providing reliable performance and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements Google reCAPTCHA for form protection. However, it lacks DNSSEC, Content Security Policy headers, and other security headers like X-Content-Type-Options, which are recommended to enhance security posture. No vulnerability disclosure or incident response policies are publicly available, indicating room for improvement in transparency and security maturity. Overall, the website is trustworthy, professional, and safe for general audiences. It collects user data via contact forms with standard protections but lacks a cookie consent mechanism, which could be improved to enhance privacy compliance. The domain registration data aligns well with the business claims, supporting legitimacy and credibility.

B

Best Western Amsterdam

bestwesternamsterdam.nl

51

Best Western Amsterdam operates a professional hospitality website offering hotel accommodations in Amsterdam with direct booking capabilities. The site targets travelers seeking comfortable rooms and modern facilities with a best price guarantee. The business is positioned as a medium-sized hotel entity within the hospitality sector in the Netherlands. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries such as Bootstrap and jQuery, and is optimized for mobile devices with moderate performance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies, and no GDPR indicators are present. Overall, the site is trustworthy but could improve transparency and security practices.

G

Geniuso, s. r. o.

geniuso.sk

52

Geniuso, s. r. o. operates an e-commerce platform specializing in interactive talking books and educational accessories for children and teenagers. Their product line includes sound books paired with electronic pens that enhance learning and engagement. The company positions itself as a niche provider in the educational retail sector within Slovakia, emphasizing the importance of paper books in a digital era. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools with user consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent, though some security headers could be improved. WHOIS data confirms the legitimacy and consistency of the business identity. Overall, the website presents a trustworthy and user-friendly platform for its target audience.

A

Agro PAJER s.r.o.

aroniazpajera.sk

50

Agro PAJER s.r.o. operates a niche e-commerce business specializing in aronia-based natural products including juices, wines, liqueurs, distillates, chocolates, and gift packages. The company emphasizes traditional, manual harvesting methods in a clean Slovak environment, targeting health-conscious consumers interested in antioxidant-rich superfoods. The website reflects a small but professional operation with a clear local market focus and direct-to-consumer sales via an online shop. Technically, the site leverages modern e-commerce platform Upgates, integrates Google Analytics 4, Facebook Pixel, and employs cookie consent mechanisms, indicating a mature digital marketing approach. Security posture is solid with HTTPS and form validation, though some security headers could be improved. The site includes comprehensive privacy and cookie policies, GDPR compliance, and multiple contact channels, enhancing trust and compliance. The presence of an age verification modal aligns with the sale of alcoholic products, marking the content as adults-only. Overall, the website is well-structured, user-friendly, and trustworthy, with minor areas for security enhancement.

J

JÁGRTEAM s.r.o.

jagrteam.cz

53

JÁGRTEAM s.r.o. operates as a well-established retailer and exclusive distributor of TRUE HOCKEY products in the Czech Republic, specializing in hockey equipment and accessories. The company targets hockey players, goalkeepers, coaches, referees, and sports enthusiasts, offering both an online e-commerce platform and a physical store. Their market position is strong within the Czech hockey retail sector, supported by a loyalty program and a 30-day return guarantee on skates. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the website is built on the Upgates e-commerce platform, utilizing modern web technologies such as jQuery, Bootstrap, and Google Web Fonts. It features responsive design and basic accessibility features, with moderate performance. Security is enforced through HTTPS and secure form validations, although additional security headers could enhance protection. Privacy compliance is addressed with visible cookie consent and privacy policies, indicating good adherence to GDPR requirements. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Despite this, the website content and business information appear legitimate and trustworthy. Overall, the site provides a safe and professional user experience with room for security improvements. Recommendations include implementing advanced security headers, conducting regular security audits of third-party scripts, enhancing accessibility, and verifying domain registration details to improve trustworthiness and compliance.

L

Letiště Praha, a. s.

darkyzletiste.cz

62

The website www.darkyzletiste.cz is an official e-commerce platform operated by Letiště Praha, a. s., offering a curated selection of aviation-themed gifts, souvenirs, and experience vouchers related to Prague Airport. The site targets aviation enthusiasts, travelers, and gift buyers, positioning itself as a niche retail outlet with a strong brand association to the airport. The business model focuses on online retail and voucher sales, leveraging the airport's brand to attract customers. Technically, the website employs a modern technology stack including Upgates e-commerce platform, Bootstrap framework, and integrates Google Analytics 4 and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with asynchronous loading of scripts and fonts. From a security perspective, the site enforces HTTPS with a valid SSL certificate and implements cookie consent mechanisms aligned with GDPR requirements. Forms for login, password change, and forgotten password include client-side validation. However, the site lacks some advanced security headers and does not publicly disclose security policies or incident response procedures, which could be improved. Overall, the website presents a professional and trustworthy front with strong branding and compliance with privacy regulations. The absence of WHOIS data limits transparency and slightly reduces trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security posture and user trust.

A

Auto klub Markéta

speedway-prague.cz

39

Speedway-prague.cz is the official website for Auto klub Markéta, a Czech organization dedicated to speedway motorcycle racing events, including the prestigious FIM Speedway Grand Prix held in Prague. The site serves as an information hub for fans, providing event schedules, ticketing information, rider details, historical results, and media resources. It targets motorsport enthusiasts primarily in the Czech Republic and surrounding regions. The business model revolves around event promotion, fan engagement, and collaboration with ticketing and local partners. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, and multiple plugins for SEO, performance, and user engagement. It integrates Google Analytics and Google Tag Manager for tracking, and uses Google reCAPTCHA to secure its contact forms. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and a published privacy or cookie policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable or privacy protected, which is common for such organizations and does not raise immediate concerns given the site's professionalism and transparency. Overall, Speedway-prague.cz presents a trustworthy and professional online presence for a niche sports organization. Strategic recommendations include enhancing privacy compliance with clear policies, improving security headers, and publishing a vulnerability disclosure policy to strengthen trust and security posture.

T

Technical Design Jakub Zima

technical-design.cz

46

Technical Design, operated by Jakub Zima, is a small Czech web development business specializing in creating websites and web systems with nearly 20 years of experience. The website serves as a portfolio and contact point for potential clients, showcasing various completed projects. The technical infrastructure includes modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Slick Carousel, with Google reCAPTCHA implemented for form security. The site is served over HTTPS, ensuring encrypted communication. Security posture is solid but could be improved by adding security headers and formal policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, suitable for its target audience of businesses and individuals seeking custom web development services.

EKO Gymnázium Poděbrady is a private secondary educational institution in the Czech Republic specializing in gymnasium studies with an ecological and multimedia focus. The website presents a well-structured, content-rich platform targeting students, parents, and educational stakeholders in the Poděbrady region. The institution emphasizes sustainable development and extended foreign language education, supported by ISO 9001 certification indicating quality management standards. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and a proprietary CMS (WebActive). It is mobile-optimized with good navigation and content relevance. However, some security best practices such as HTTP security headers are not detected, and no explicit privacy or terms of service pages are present. Cookie consent is implemented effectively, reflecting basic GDPR compliance. Security posture is moderate with no critical vulnerabilities detected in the content, but the absence of WHOIS data limits domain legitimacy verification. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and suitable for its educational purpose. Recommendations include improving security headers, publishing comprehensive privacy and terms policies, and verifying domain registration details to enhance trust and compliance.

L

LOUDA Alform, výrobní družstvo

alform.cz

63

LOUDA Alform, výrobní družstvo is a Czech manufacturing cooperative specializing in precision machining, tooling, and assembly services for various industrial sectors including automotive, glass, ceramic, and rubber industries. The website presents a professional and well-structured digital presence with clear navigation and relevant content targeting industrial clients and educational institutions. The company leverages modern web technologies such as ASP.NET WebForms, jQuery, and Bootstrap, complemented by Google services for analytics and bot protection. Cookie consent is implemented comprehensively, reflecting GDPR compliance. However, the absence of WHOIS data and security headers slightly detracts from the overall trustworthiness and security posture. The site is accessible without WAF or security challenges, indicating stable hosting and infrastructure.