Security Directory

O

Ofir d.o.o.

ofir.hr

63

Ofir d.o.o. is a well-established Croatian technology company founded in 2001, specializing in IT support, web development, digital marketing, and training services. The company serves a growing client base with a clear vision of facilitating digital transformation. Their market position is strengthened by over 200 satisfied clients and partnerships with reputable organizations. Technically, the website leverages modern frameworks such as Next.js and React, with WordPress as the backend CMS, indicating a mature and scalable digital infrastructure. The site is well-optimized for mobile and SEO, providing an excellent user experience. Security posture is solid with HTTPS and Cloudflare DNS usage, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR, supported by ISO 9001 certification and transparent contact information.

G

Gradsko društvo Crvenog križa Beli Manastir

gdck-belimanastir.hr

42

Gradsko društvo Crvenog križa Beli Manastir is a local branch of the Croatian Red Cross focused on humanitarian aid, first aid education, blood donation, and volunteer coordination within the Beli Manastir community. The organization operates as a small non-profit entity with a clear mission to support vulnerable populations and promote community health and safety. Their market position is that of a trusted regional humanitarian organization affiliated with the national Croatian Red Cross and supported by European solidarity programs. Technically, the website is built on WordPress with a modern but moderate tech stack including Google Analytics and accessibility tools. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and anonymized analytics, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its community well, but could improve in security and privacy transparency.

V

Viešoji įstaiga Architektūros fondas

archfondas.lt

50

Architektūros fondas is a Lithuanian non-profit organization established in 2004, dedicated to promoting architectural culture, education, and community engagement. The organization operates various cultural and educational projects, including mentorship programs and international collaborations, targeting a broad audience interested in architecture and culture. The website is professionally designed, content-rich, and well-structured, supporting the organization's mission and outreach efforts. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses several JavaScript libraries for enhanced user experience. It employs SEO best practices and is mobile-optimized. Security-wise, the site uses HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security headers and policies are not evident. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

Z

Zdravotnické zařízení městské části Praha 4

zzpraha4.cz

53

Zdravotnické zařízení městské části Praha 4 is a public contributory organization operating childcare groups, home babysitting, and other family services in Prague 4. The website serves as an information portal for parents and clients, providing updates, downloadable documents, and contact information. The organization holds a quality certification for childcare groups, indicating a reputable position in the local government sector. Technically, the website is built on WordPress with modern technologies such as jQuery, Bootstrap, Google Maps API, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the site is safe, professional, and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic improvements in security headers, privacy compliance, and incident response documentation would strengthen the site's security and compliance profile.

Malostranská beseda a.s. operates a multifaceted hospitality venue in Prague, offering club events, restaurant dining, brasserie, café, trick bar, gallery exhibitions, and catering services. The business targets a broad audience including locals and tourists interested in cultural and social events. The website reflects a well-structured digital presence with clear navigation and professional design, supporting the business model of event hosting and hospitality services. Partnerships with local and media entities, as well as municipal funding, reinforce its market position. Technically, the website employs modern web technologies such as Bootstrap, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a cookie consent mechanism, though lacks explicit privacy and terms of service pages. Security headers are not evident, and WHOIS data is unavailable, which limits domain trust verification. The site uses HTTPS, but additional security best practices could be implemented. From a security perspective, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy policy and incident response contacts, as well as missing WHOIS data, are gaps that should be addressed to improve compliance and trust. The cookie consent banner and detailed cookie information indicate some GDPR awareness. Overall, the website is professional and trustworthy for its hospitality business purpose, but improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance risk management and user trust.

D

Dům dětí a mládeže hlavního města Prahy

ddmpraha.cz

44

Dům dětí a mládeže hlavního města Prahy is a well-established public institution founded in 1998, providing educational and leisure activities for children and youth in Prague. The organization operates multiple branches offering clubs, camps, events, rentals, and educational programs, targeting children, youth, parents, and educators. It is funded and overseen by the city of Prague, positioning it as a key local educational service provider with a strong community presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Matomo analytics, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Hosting and domain registration are consistent and reliable, managed by REG-GRANSY since 1998. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not publicly visible, indicating room for improvement in security posture. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain's long history and consistent WHOIS data reinforce its legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility and SEO to further strengthen the site's digital maturity and compliance.

iFotoVideo.cz is a Czech media portal operated by Atemi s.r.o., specializing in photography and videography content including news, competitions, technical articles, tutorials, and a magazine publication. The website targets photography enthusiasts and professionals primarily within the Czech Republic, offering a niche but well-established platform with a consistent brand presence and member affiliation with EISA. The business model revolves around media publishing supported by advertising and magazine subscriptions. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.11 and Prototype.js, Google Fonts, and Google Analytics for tracking. While the site is accessible and content-rich, it shows moderate performance and basic mobile optimization with room for improvement in accessibility and SEO. Security-wise, the site lacks visible security headers and uses an outdated JavaScript library, which could pose risks. Cookie consent is implemented, and a GDPR-related page is present, indicating some privacy compliance. However, the absence of WHOIS data and explicit security or incident response policies reduces trustworthiness. Overall, the site is functional and professional but would benefit from technical and security enhancements to improve its posture and compliance.

M

MyIntegration

myintegration.fi

48

MyIntegration is a Finnish-based company with an online presence focused on integration services, as indicated by the website title and branding. The website is built on WordPress and employs a modern technology stack including popular plugins such as Yoast SEO, Smart Slider 3, and Cookiebot for cookie consent management. The site supports multiple languages, indicating a target audience that is international or multilingual. The business appears to be small-sized with a consistent brand image and a moderate level of trust signals, including a Facebook social media presence. Technically, the website is well-structured with proper SEO meta tags and uses HTTPS with an excellent SSL configuration. The use of Matomo analytics shows a commitment to privacy-friendly tracking. However, the site lacks visible security headers and does not publish a privacy policy or terms of service, which are important for compliance and user trust. No direct contact information is found on the homepage, which may affect user confidence. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. There are no visible vulnerabilities or exposed sensitive data. The absence of a security policy and incident response contacts suggests room for improvement in security transparency and readiness. Overall, the website is functional, moderately secure, and privacy-conscious but would benefit from enhanced compliance documentation and clearer contact information to improve trust and professionalism.

E

Ealys

ealys.com

41

Ealys is a French web development agency specializing in the creation, redesign, and maintenance of websites and web applications, primarily serving clients in the North-East region of France including Metz, Nancy, and Strasbourg. With over 20 years of experience, the company targets a diverse clientele ranging from SMEs to large groups and institutional clients. Their service offerings include website creation, web application development, hosting, security, and audits, positioning them as a comprehensive digital solutions provider in their regional market. The website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the site employs modern web technologies such as HTML5, CSS3, jQuery, and popular plugins like Revolution Slider and Fancybox, ensuring a responsive and user-friendly experience. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented, indicating basic privacy compliance. Security-wise, the site uses HTTPS and follows some best practices but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, which supports legitimacy. Overall, the website is well-structured, professional, and trustworthy, though there is room for improvement in security and compliance documentation.

A

App Elevate

appelevate.cz

54

App Elevate is a small technology company specializing in rapid development of interactive applications across multiple platforms including web, Android, iOS, and macOS. The company emphasizes close client collaboration and offers prototype trials to attract customers. The website is professionally designed with clear navigation and good mobile optimization, hosted on Cloudflare infrastructure. The technical stack includes Bootstrap, jQuery, Font Awesome, and Google Fonts, reflecting a modern front-end approach. Security posture is moderate with Cloudflare protection but lacks explicit security headers and privacy policies, indicating areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, professional, and aligned with the domain registration data, but would benefit from enhanced privacy compliance and security hardening.

Sherpas TECH, s.r.o. is a Czech-based technology and marketing company specializing in retention marketing and technology integration services. The company offers a range of services including email marketing strategy, technology implementation for retention marketing, data engineering in CRM systems, and advanced customer analytics. Their website reflects a professional and consistent brand image, targeting B2B clients seeking to optimize marketing performance through technology. The company demonstrates a solid market position supported by client references and a clear business focus. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and CookieScript for consent management, indicating a mature digital infrastructure. The site is built likely on the Nette Framework, with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities. Cookie consent is implemented with opt-in mechanisms, and forms include anti-bot measures. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR cookie consent requirements. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility. The domain WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness.

C

Czech Union of the Deaf, z.ú.

cun.cz

54

The Czech Union of the Deaf, z.ú. is a well-established non-profit organization dedicated to supporting the deaf community in the Czech Republic. Their website presents a clear and professional overview of their services, including activation services, sign language interpreting, simultaneous transcription, educational courses, and publications. The organization maintains multiple regional branches and active social media presence, indicating a strong community engagement and outreach. Technically, the website is built on WordPress with WooCommerce integration for e-commerce functionality, leveraging common web technologies such as jQuery and Google Fonts. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data is a notable concern, reducing domain registration transparency and trustworthiness. Overall, the website is functional, trustworthy, and serves its community well, but could improve in privacy compliance and security best practices.

CIRCUS DESIGN s.r.o. is a Czech Republic-based UX agency specializing in user experience design, user research, consulting, prototyping, and design services. The company has a clear market position supported by a portfolio of reputable clients and active community engagement through events like UX Circus. Their website reflects a professional and consistent brand image targeting businesses seeking UX expertise. Technically, the site uses modern frameworks such as Bootstrap and jQuery, with integration of analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies suggests gaps in compliance. Security posture is moderate with HTTPS usage but lacks visible security headers and vulnerability disclosures. WHOIS data is unavailable, limiting domain legitimacy verification, but the business information on the site appears credible and transparent. Overall, the website is well-designed and functional but would benefit from enhanced security and privacy practices.

M

Mealdoo

mealdoo.com

50

The website mealdoo.com presents minimal accessible content, primarily a basic Angular-based landing page with no visible business description, contact information, or policies. The domain is relatively new, registered in late 2022, consistent with a startup or new business. The technical infrastructure includes modern frontend technology (Angular 18.2.13) and hosting likely on AWS, but lacks visible security headers or HTTPS confirmation in the provided data. No privacy or cookie policies are present, indicating low privacy compliance. The absence of contact details and business information reduces trustworthiness and business credibility. Overall, the site appears to be in an early development or placeholder state with limited user engagement features.

AnimaList is a Croatian non-profit newsletter platform operated by the animal rights association Prijatelji životinja. The website focuses on promoting veganism, animal welfare, and environmental sustainability through educational content, activism updates, and event announcements. The organization targets animal rights advocates and environmentally conscious individuals primarily in Croatia. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks advanced security headers and privacy compliance features such as a privacy policy or cookie consent. The WHOIS data is privacy protected, which is typical for non-profits, but limits transparency. Overall, the website is functional, content-rich, and trustworthy but could improve in privacy compliance and security best practices.

I

International Anti-Fur Coalition

antifurcoalition.org

56

The International Anti-Fur Coalition (IAFC) operates as a global non-profit animal rights advocacy group focused on ending the fur trade through activism, education, and legislative efforts. Founded in 2006, it unites over 50 organizations worldwide to organize campaigns and promote anti-fur legislation. The website serves as an informational and campaign platform, targeting animal rights supporters and the general public concerned with ethical fashion. Technically, the website is built on the Shopify platform, leveraging standard web technologies such as jQuery, Facebook SDK, and embedded YouTube content. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Analytics and tracking are implemented via Shopify Analytics and Facebook Pixel, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and uses hCaptcha for form protection, but lacks explicit security headers and detailed privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. No critical vulnerabilities or malicious content were detected. Overall, the website presents a moderate risk profile with good content quality and business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

V

Vastuu Group

tilaajavastuu.fi

65

Vastuu Group is a Finnish technology service provider specializing in digital solutions that facilitate employee data management, compliance with labor laws, and reporting obligations primarily for the construction sector and related industries. The company offers a broad portfolio of services including Valtti+, Valttikortti, and electronic signature solutions, positioning itself as a key enabler of digital transformation and regulatory compliance in its market. Recent acquisitions such as Linnunmaa Lex indicate strategic growth and expansion of service offerings. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and integrating analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Vastuu Group maintains a strong posture with HTTPS enforcement, ISO 27001 certification, and comprehensive privacy and cookie policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public incident response policy and security.txt file suggests areas for improvement in transparency and vulnerability management. Overall, Vastuu Group presents a professional, trustworthy, and compliant digital presence aligned with its business objectives. The company is well-positioned in its sector with a clear focus on compliance, digital services, and customer support.

P

Paimio

paimio.fi

60

Paimio.fi is the official website of the city of Paimio, a modern municipality in southwestern Finland. The site serves residents, local businesses, and visitors by providing comprehensive municipal services and information. The website is well-positioned as a local government authority, focusing on public service delivery and community engagement. The content is professionally presented, with clear descriptions of the city's offerings and a consistent branding approach. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, DustPress, and Cookiebot for cookie consent management. It integrates Google Tag Manager and Google Analytics for visitor tracking and performance monitoring. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and includes several security headers, reflecting a good security posture. The cookie consent mechanism complies with GDPR requirements, although explicit privacy and terms of service policies are not found in the provided content. No vulnerabilities or suspicious activities were detected, indicating a secure and trustworthy platform. Overall, Paimio.fi presents a reliable and professional municipal website with moderate technical sophistication and a solid security foundation. Strategic improvements include publishing comprehensive privacy and terms of service policies and enhancing accessibility and contact information transparency.

A

aria-studio.cz

aria-studio.cz

43

Aria-Studio.cz is a small Czech web design and development studio operated by Pavel Kovanda and Aleš Rubáš, offering services including web presentation creation, graphics, and web programming. The business has been active since 2004 and targets small businesses and individuals seeking professional web presence solutions. The website is built on WordPress using the Fluida theme and Elementor page builder, reflecting a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy/cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business information appear consistent and professional. Overall, the site presents a trustworthy small business with a solid digital presence but should address privacy and security best practices to enhance compliance and trust.

Savonlinja Oy is a well-established Finnish transportation company operating since 1924, providing scheduled bus routes, charter services, and travel packages primarily within Finland. The company targets general travelers and regional commuters, maintaining a strong market position with multiple subsidiaries and a recognized brand. The website reflects this with clear service offerings, travel booking forms, and active social media presence. Technically, the website uses a mix of legacy and modern technologies including AngularJS, jQuery, Bootstrap, and Google Fonts, with some outdated elements such as the legacy Google Analytics script. Security posture is moderate; HTTPS is used but no advanced security headers are detected, and privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

P

PoriExpress

poriexpress.fi

48

PoriExpress is a Finnish regional transportation company specializing in affordable bus travel primarily between Pori and Helsinki, as well as seasonal travel packages to Lapland (Ylläs). The company targets general consumers seeking economical and convenient bus travel options and related accommodation services through partnerships. The website is professionally designed using WordPress with modern SEO and content management plugins, providing a good user experience and clear navigation. Technical infrastructure is solid with HTTPS and standard WordPress technologies, though some security headers are missing. Contact information is clearly provided, but privacy compliance could be improved with cookie consent mechanisms and more detailed security policies. Overall, the site is trustworthy and well-positioned in its niche.

K

Kappa Data

kappadata.pl

68

Kappa Data is a value-added distributor (VAD) specializing in networking, security, and IoT solutions primarily serving the Polish market. The company offers technical and sales support, ongoing training, and consulting services, partnering with reputable manufacturers to deliver innovative IT solutions to businesses and institutions. The website reflects a professional and consistent brand presence with multilingual support and a focus on IT infrastructure and cybersecurity expertise. Technically, the site is built on WordPress with modern performance optimizations such as lazy loading and asynchronous script loading. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and formal privacy or cookie policies. WHOIS data is unavailable from the Polish registry, which slightly impacts trust but the website content and structure support legitimacy. Overall, the site is well-positioned in its market segment with room for improvement in privacy compliance and security transparency.

L

Luxembourg House of Cybersecurity g.i.e.

cswl.lu

58

The website represents the CYBERSECURITY Week Luxembourg 2025, a national campaign coordinated by the Luxembourg House of Cybersecurity. It aims to promote cybersecurity awareness and foster collaboration within the Luxembourg cybersecurity ecosystem through key events such as the Luxembourg GRC Conference and hack.lu. The campaign targets cybersecurity professionals and the wider community interested in cybersecurity topics. The website content is well-structured, professionally designed, and consistent with the organization's branding. Technically, the site uses modern web technologies including React, Bootstrap, and FontAwesome, with good mobile optimization and moderate performance. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, some security best practices like security headers and cookie consent mechanisms are missing or not visible in the provided content. From a security posture perspective, the site demonstrates a good baseline with HTTPS and no evident vulnerabilities. The presence of legal and data protection notices in PDF format indicates attention to compliance, though explicit security policies and incident response information are absent. The WHOIS data aligns well with the website's claims, showing consistent registration and no privacy protection, enhancing trustworthiness. Overall, the website is a credible, professional platform for cybersecurity awareness events in Luxembourg, with room for improvement in privacy compliance and security policy transparency.

C

Comgate s.r.o.

comgate.sk

63

Comgate s.r.o. is a well-established Slovak payment services provider offering payment gateway and payment terminal solutions primarily targeting e-shops, retail stores, restaurants, hotels, and government entities. With over 20 years of market presence, the company processes over 1.6 billion EUR annually and serves thousands of clients, positioning itself as a trusted player in the finance and e-commerce sectors. The website reflects a professional and comprehensive presentation of their services, emphasizing cost savings, ease of integration, and broad payment method support. Technically, the site uses modern web technologies and a proprietary CMS, delivering a responsive and user-friendly experience. Security posture is strong, supported by PCI DSS Level 1 certification and European payment institution licensing, although some security headers could be explicitly documented. Privacy compliance is evident with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site demonstrates high business credibility and trustworthiness, with no signs of blocking or suspicious activity.

I

Istarska županija

istra-istria.hr

67

The website www.istra-istria.hr serves as the official online presence of the Region of Istria, a Croatian regional government entity. It provides comprehensive information about the region's governance, geography, culture, economy, and contact details. The site targets residents, tourists, and stakeholders interested in regional affairs. The business model is focused on public administration and information dissemination, positioning itself as a trusted government resource with certifications such as ISO 9001 and membership in the Assembly of European Regions. Technically, the site is built on Django CMS and leverages modern web technologies including jQuery, Google Analytics, and Slider Revolution. It demonstrates good mobile optimization, accessibility, and SEO practices. Hosting and domain registration are consistent with a Croatian government entity, registered with CARNET since 2001. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks published security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no dedicated privacy policy page but a functional cookie banner and settings modal. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include publishing a privacy policy, security policy, and incident response details, enhancing security headers, and adding a security.txt file to improve transparency and security posture.

Restopolis is a Luxembourg-based service provider specializing in school and university catering. The website offers multilingual content targeting students, adults, and visitors, providing menu consultation, booking, and account management services. The platform integrates with IAM for secure user access and supports sustainable food procurement initiatives. Technically, the site is built on ASP.NET WebForms using the DNN CMS, leveraging modern JavaScript libraries and Google services for analytics and security. Security posture is good with HTTPS and reCAPTCHA, though explicit security headers are missing. Privacy compliance is basic with a cookie consent banner and privacy policy available. WHOIS data is unavailable, limiting domain trust verification, but the website's professional appearance and government affiliations support legitimacy.

P

Pinoys.cz

pinoys.cz

52

Pinoys.cz is a specialized e-commerce retailer focused on Asian food products, primarily serving customers in Prague and the Czech Republic. The website offers a variety of Asian groceries including instant noodles, spices, and fresh products, targeting consumers interested in exotic and authentic Asian cuisine. The business operates a niche online store with a clear product categorization and customer loyalty programs, positioning itself as a trusted local supplier in its market segment. Technically, the website is built on the Upgates e-commerce platform, leveraging modern web technologies such as Google Tag Manager, Facebook Pixel, and live chat services to enhance customer engagement and marketing effectiveness. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS data reduces domain registration transparency, which slightly impacts trustworthiness. Overall, the site is professional and functional with moderate risk, suitable for its business purpose.

D

DAFIT s. r. o.

extrifit.cz

59

EXTRIFIT.cz is a Czech Republic-based e-commerce platform specializing in sports and supplementary nutrition products such as proteins, gainers, creatine, carnitine, amino acids, fat burners, and anabolic supplements. The website is professionally designed with good SEO and mobile optimization, targeting sports enthusiasts and supplement consumers primarily in the Czech market. The technical infrastructure leverages a proprietary e-commerce framework (BSSHOP), Google Tag Manager for analytics, and modern web fonts, indicating a mature digital presence. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and cookie policies are not clearly found in the provided content. Overall, the site demonstrates a good level of professionalism and trustworthiness, though improvements in privacy compliance and contact transparency are recommended.

A

Aittakoodi Oy

pikavuorot.fi

47

Pikavuorot.fi is a Finnish transportation price comparison website operated by Aittakoodi Oy, founded in 2015. The platform aggregates and compares prices and schedules for bus and train travel across multiple Finnish transportation providers, including major companies such as VR, Matkahuolto, Onnibus, and airlines like Finnair and Norwegian. It serves a general audience seeking convenient travel planning and ticket purchasing options within Finland. The website enjoys a moderate market position as a leading price comparison tool in its niche. Technically, the site employs a modern but somewhat dated technology stack including Bootstrap 3, jQuery, DataTables, and Socket.io for real-time data updates. It integrates multiple third-party services for fonts, advertising, and analytics, including Google Adsense and Facebook SDK. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, HTTPS is used, but explicit security headers are not detected in the provided data. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is basic, with a cookie consent banner and a privacy policy page present, but no detailed security or incident response policies are published. Contact information is limited to an email address, with no phone or physical address provided. Overall, Pikavuorot.fi presents a trustworthy and functional service with room for improvement in security hardening, privacy transparency, and expanded contact options. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive policies, and improving user trust signals.

W

Waltti Solutions

waltti.fi

66

Waltti Solutions Oy is a Finnish company specializing in digital ticketing and payment solutions for public transportation. Their offerings include a mobile ticketing app, travel card management, and contactless payment integration, serving multiple Finnish cities. The company holds a strong market position as a leading provider in this niche, with a business model targeting both end-users and municipal transport authorities. The website reflects a mature digital presence with good content quality and user experience, supporting their business objectives effectively. Technically, the site is built on WordPress with modern libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent compliance, though some security headers could be improved. Overall, the domain registration data aligns well with the business, indicating high legitimacy and trust. The site is free from blocking or WAF challenges, allowing full content access and analysis.

S

Saaristolautat.fi

saaristolautat.fi

43

Saaristolautat.fi is a specialized informational website providing ferry routes and schedules for the Finnish archipelago, including the Turku archipelago and Åland Islands. The site targets travelers and residents needing up-to-date ferry information for over 40,000 islands serviced by approximately 50 ferries and 200 docks. The business model is primarily informational, serving as a public utility platform rather than a commercial enterprise. The website is relatively small in scale, founded in 2017, and operates with a niche focus on regional transportation. Technically, the website employs a modern web stack including HTML5, CSS3, JavaScript with jQuery, Bootstrap for responsive design, FontAwesome for icons, and integrates Google Maps API for route visualization. Hosting appears to be provided by Domainhotelli, a Finnish hosting provider. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance given its European audience. No contact information or incident response details are provided, limiting transparency and trust. The WHOIS data shows the domain is registered to a private person rather than an organization, which is somewhat inconsistent with the public service nature of the site but not necessarily suspicious. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Overall, the website is functional and provides valuable regional transportation information but would benefit from improved security practices, privacy compliance, and clearer business contact details to enhance trust and regulatory adherence.

C

CovenantIQ

archwaysoftware.com

64

CovenantIQ is a specialized SaaS provider focused on scaling middle-market lending through intelligent covenant analysis. Their platform leverages AI to automate and normalize borrower financial data, enabling banks and private credit funds to monitor loan covenants efficiently and mitigate risk. The company targets financial institutions such as banks, private credit funds, and private equity sponsors, positioning itself as a niche innovator in lending analytics. Technically, the website is built on Webflow CMS with integrations including HubSpot for marketing and analytics, Google Tag Manager, and modern web fonts. The site is performant, mobile-optimized, and professionally designed, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some recommended security headers and explicit security or incident response policies. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type, though it slightly reduces transparency. Overall, the website is trustworthy and professional with moderate risk, suitable for its finance technology market niche.

D

demch.co

zbir.win

65

The analyzed website is a Google Forms page hosted on docs.google.com, designed to facilitate the creation of fundraising pages for non-profit organizations and volunteers, primarily targeting Ukrainian users. The service is provided by demch.co, a small company specializing in web solutions for non-profits since 2013. The form collects essential data such as nickname, page title, payment details, social media contacts, and email for notifications. The platform leverages Google's secure and scalable infrastructure, ensuring reliable hosting and HTTPS encryption. The website demonstrates good technical maturity with fast performance, mobile optimization, and accessibility features. Security posture is strong due to Google's platform protections, though explicit cookie consent and incident response information are not present on the form page. Overall, the site is trustworthy, professional, and serves a clear niche in the non-profit fundraising sector.

C

Contact Privacy Inc. Customer 0167022659

eth.limo

58

eth.limo is a technology service focused on making decentralized websites accessible, specifically those built with the Ethereum Name Service (ENS). The website positions itself as a niche service provider facilitating effortless access to blockchain-based web content. The company appears to be a small-sized entity founded in 2021, with domain registration protected by privacy services. The site uses modern front-end technology (Framer) and is hosted on AWS infrastructure, indicating a reasonable level of digital maturity. However, the absence of privacy and cookie policies suggests gaps in compliance and transparency. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but DNSSEC is not enabled and no explicit security policies are published. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.

K

Kappa Data

kappadata.be

74

Kappa Data is a value-added IT distributor specializing in networking infrastructure, security, and IoT solutions primarily serving business customers in Belgium and surrounding markets. The company offers a broad portfolio of products and services including technical expertise, training, and events. The website is professionally designed, multi-lingual, and optimized for performance and mobile devices, reflecting a mature digital presence. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of published privacy and cookie policies indicates room for compliance improvement. WHOIS data is restricted, which is common for business privacy but limits transparency. Overall, the site presents a trustworthy and credible business with a good technical foundation.

CEES HARTMAN is a small Dutch business specializing in website creation, online marketing, photography, and video production services. The company uses WordPress as its platform and collaborates closely with clients to design websites that reflect their branding and needs. The website showcases a portfolio of client projects, indicating a focus on small to medium-sized clients. Technically, the website is built on a modern WordPress stack with Elementor and the Customizr theme, providing a responsive and user-friendly experience. However, the site lacks privacy and cookie policies, and no explicit contact emails or phone numbers are provided, which may affect user trust and compliance. Security posture is moderate with HTTPS enabled but missing important security headers. Overall, the site is professional and safe but could improve in privacy compliance and security best practices.

I

Istra Inspirit

istrainspirit.hr

64

Istra Inspirit is a cultural tourism project based in Croatia that offers interactive storytelling tours and experiences focused on the rich history and legends of the Istrian peninsula. The website presents a professional and engaging digital presence with a clear focus on cultural heritage tourism. The company appears to be a small-sized business with a niche market position targeting tourists interested in immersive historical experiences. Technically, the website is built on WordPress using Elementor, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Privacy compliance is basic with no explicit privacy policy or terms of service detected, but cookie consent is present. Overall, the website is trustworthy and professionally maintained, with active social media channels supporting its business model.

Z

ZONER, a.s.

zonerai.com

45

Zoner AI Image Creator is a recently launched online platform by ZONER, a.s., offering free and easy-to-use AI-powered image generation with 4K resolution. The service targets general users interested in creative AI-generated images and is accessible globally via web browsers. The website is built using modern web technologies including Material UI and JavaScript ES modules, hosted likely on infrastructure associated with ZonerCloud. The domain is newly registered in 2023, consistent with the launch of this new service. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating room for compliance improvements.

N

NEPRO stavební a.s.

neprostavebni.cz

50

NEPRO stavební a.s. is a Czech construction company specializing in residential and commercial building projects, including modernization of apartment houses and infrastructure such as bus terminals. The company targets clients in the Czech Republic seeking professional construction services. The website is built on WordPress using the Divi theme and includes modern web technologies such as jQuery and Slider Revolution. It features a professional design with good mobile optimization and clear navigation. Security measures include HTTPS and reCAPTCHA integration, along with a cookie consent mechanism indicating GDPR awareness. However, the absence of explicit privacy policies, terms of service, and WHOIS transparency limits the overall trust assessment. No security headers were detected, suggesting room for improvement in security hardening.

M

Membrana Media

membrana.media

69

Membrana Media is a specialized technology company offering an AI-powered tech suite designed to maximize profit for digital publishers through video and banner monetization solutions. Their product portfolio includes Headline Video, Daily Highlights, Video Platform, AdWall, and White Label solutions, targeting media companies seeking to enhance audience engagement and monetization. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Webflow CMS, Google Tag Manager, and Microsoft Clarity for analytics and user behavior tracking. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enabled and no exposed sensitive data, though explicit security policies and incident response information are absent. WHOIS data is privacy protected, which is common for tech companies, and no suspicious patterns were detected. Overall, the site presents a credible and professional business presence with room for improvement in security transparency and direct contact information.

The website www.palautevayla.fi serves as a customer service and feedback platform for transportation services in Finland. It targets Finnish-speaking users seeking to provide feedback or obtain information related to public transportation. The site is positioned as an essential public sector service portal, offering key services such as customer feedback submission and information search. The business model is focused on public service facilitation rather than commercial activities. Technically, the website employs AngularJS and Bootstrap frameworks, indicating a moderately modern frontend infrastructure. The site is hosted securely with HTTPS and demonstrates good SSL configuration. Performance and mobile optimization are adequate, though accessibility features could be improved. SEO is basic but functional. From a security perspective, the site enforces HTTPS and includes some security headers, but lacks advanced headers like CSP and HSTS. No vulnerabilities or exposed sensitive data were detected. However, the absence of a security.txt file and explicit privacy or cookie policies indicates room for compliance improvement. Overall, the website is trustworthy and professionally maintained, but would benefit from enhanced privacy compliance and clearer contact information to improve user trust and regulatory adherence.

Oy Suomen Tietotoimisto operates the STT Info platform, a Finnish press release distribution service targeting media professionals and companies. The website facilitates the dissemination of over 17,000 press releases annually, positioning itself as a key player in the Finnish media communication sector. The business model centers on subscription and one-time purchase of press releases, serving a professional audience seeking timely and relevant news content. The company maintains a consistent brand presence and provides comprehensive contact and privacy information, reinforcing trust and professionalism. Technically, the website employs modern web technologies including React, Google Fonts, and Cloudflare for content delivery and security. It integrates Google Analytics and social media tracking tools while implementing a robust cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS, employs standard security headers, and manages session cookies securely. However, explicit security policies and incident response information are not published, representing an area for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

A

APERITIF

le-aperitif.com

62

APERITIF is a small creative studio based in Spain specializing in design, creativity, strategy, advertising, and illustration services. The website showcases a professional portfolio targeting brands, businesses, and individuals worldwide who value high-quality creative work. The company maintains an active social media presence across major platforms, reinforcing its market position as a niche creative agency. Technically, the website is built on the Portfoliobox CMS platform, leveraging AngularJS and jQuery, hosted on Amazon Cloudfront CDN, and includes Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data is a notable concern, reducing domain trustworthiness despite the professional site content. Overall, the site is functional and professional but would benefit from enhanced privacy, security policies, and transparent contact information.

E

Energylink s.r.o.

energylink.cz

48

Energylink s.r.o. is a Czech Republic-based company specializing in innovative energy technologies for buildings, including heating, cooling, hot water preparation, and electricity production. The company targets public administration, private firms, and residential building owners, positioning itself as a reliable provider of energy-efficient solutions. Their website reflects a professional and modern digital presence, utilizing Bootstrap and jQuery frameworks, with good mobile responsiveness and clear navigation. However, the absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and contact details appear genuine and consistent with the business claims. Security posture is solid with HTTPS and no visible vulnerabilities, but the lack of security headers and privacy policies indicates room for improvement. Overall, the site is trustworthy and well-maintained but would benefit from enhanced compliance and transparency measures.

S

Speakeasy

speakeasygo.com

62

Speakeasy is a small hospitality-focused platform founded in 2022 that provides users access to top music venues, lounges, bars, and clubs, primarily targeting nightlife enthusiasts and entertainment venues. The website serves as a discovery and partnership platform, offering listings of nightlife events and venues. Technically, the site is built using modern frameworks such as Next.js and React, with integration of Google Fonts and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with consistent branding. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and explicit security policies. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. Overall, the site is trustworthy and functional with room for improvement in security and privacy transparency.

O

Opera Nazionale per i Figli degli Aviatori

onfa.org

44

ONFA (Opera Nazionale per i Figli degli Aviatori) is an Italian non-profit organization dedicated to providing social assistance and support to the children of aviators. The website serves as an informational and community platform targeting families connected to the aviation sector in Italy. The organization operates with a focused mission in the government and non-profit sectors, maintaining a small organizational size and a niche market position. The website is built on WordPress using the Divi theme, with integration of Iubenda for cookie consent management, reflecting a moderate level of digital maturity and compliance with privacy regulations such as GDPR. Technically, the website is hosted on a provider using Host Anycast DNS servers, secured with HTTPS, and employs modern web fonts and cookie consent scripts. Performance and mobile optimization are rated as moderate to good, with basic accessibility features. SEO practices appear adequate with proper meta tags and structured data. Security posture is decent with HTTPS enforced and domain transfer protections enabled, but could be improved by enabling DNSSEC and adding more comprehensive security headers and vulnerability disclosure mechanisms. Overall, the security posture is solid for a small non-profit, with no critical vulnerabilities detected. Privacy compliance is strong, supported by a comprehensive privacy and cookie policy with explicit consent mechanisms. However, the absence of terms of service, security policy, and incident response contact details indicates areas for improvement. The website content is safe and appropriate for a general audience, with no adult or questionable content. Strategically, ONFA should focus on enhancing security headers, publishing a security.txt file, and providing clearer contact information to improve trust and compliance. These steps will strengthen their security culture and better protect their community members.

M

MotoZem

motozem.cz

49

MotoZem.cz is a professional e-commerce retailer specializing in motorcycle apparel, accessories, and parts, targeting motorcycle enthusiasts primarily in the Czech Republic and neighboring countries. The website offers a broad catalog of products including clothing, helmets, gloves, and motorcycle parts, supported by physical stores in multiple cities. The company positions itself as a trusted regional player with a focus on secure and safe shopping experiences. Technically, the website employs modern web technologies including Google Tag Manager, Microsoft Clarity, and Luigisbox search tools, with responsive design and good SEO practices. Security posture is solid with HTTPS enforcement and secure form handling, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency. Overall, the website is accessible, professional, and trustworthy with moderate risk due to missing domain registration details.

Sencor is a consumer electronics and household appliances brand offering a wide range of products including televisions, audio-video equipment, kitchen appliances, and health and beauty devices. The company targets consumers seeking quality and design in home and entertainment electronics, positioning itself as a medium-sized retail and manufacturing entity primarily serving the Czech Republic and surrounding European markets. The website demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager, Bootstrap, and RequireJS, and provides a rich product catalog and news updates. However, the absence of visible privacy and terms of service pages, as well as missing WHOIS data, indicates areas for improvement in transparency and compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but the lack of security headers and incident response information suggests room for enhancement. Overall, the website is professional and trustworthy, but the domain registration anomaly warrants monitoring.

Sencor is a consumer electronics and home appliance brand with a dedicated Russian language website offering a broad product catalog including televisions, audio-video equipment, kitchen appliances, health and beauty products, and office supplies. The site targets Russian-speaking consumers and provides dealer location and customer support information. Technically, the website is built on a modern stack with Google Tag Manager, slick slider, and likely Joomla CMS, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The WHOIS data is missing, raising concerns about domain registration legitimacy, but the professional site and contact info mitigate some risk. Overall, the site is functional, trustworthy, and safe for general audiences.

R

Rieker Holding AG

remonte.us

62

Remonte Shoes operates as an e-commerce retailer specializing in footwear products, leveraging the Shopify platform for its online presence. The website is professionally designed with a focus on user experience and mobile optimization, targeting general consumers interested in shoes. The technical infrastructure is modern, utilizing Shopify's modular theme, Cloudflare DNS, and various third-party marketing and analytics tools. Security posture is adequate with HTTPS enabled and domain transfer protections in place; however, there is room for improvement in DNS security and HTTP security headers. Privacy and compliance documentation are notably absent or not easily discoverable, which may pose risks in regulatory adherence. Overall, the domain registration data aligns well with the business identity, supporting legitimacy. Strategic enhancements in privacy transparency and security hardening are recommended to bolster trust and compliance.