Security Directory

F

FediGroups

fedigroups.social

61

FediGroups operates a closed Mastodon server under the domain fedigroups.social, providing decentralized social media services within the fediverse ecosystem. The website serves as an informational about page, highlighting the server's administration and user base. The service targets users interested in federated social networking, leveraging the open-source Mastodon platform. The business model is focused on community-driven social media hosting rather than commercial advertising or broad public registration. Technically, the website is built on Mastodon version 4.4.4, utilizing modern web technologies including React and ES modules. The site is mobile-optimized and presents a clean, professional design with good navigation. However, some technical improvements could enhance accessibility and SEO. The hosting provider and domain registration details are not disclosed, and the WHOIS data is unavailable due to TLD restrictions. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and cookie consent mechanisms, which are recommended for improved security posture and privacy compliance. No incident response or security policy information is published, which could be enhanced to build user trust. The privacy policy is present but basic, and no terms of service or vulnerability disclosure policies are found. Overall, the website is safe, professional, and trustworthy for its intended audience, with moderate technical and security maturity. Strategic recommendations include implementing security headers, publishing terms of service and security policies, adding cookie consent for GDPR compliance, and improving accessibility features to strengthen the platform's credibility and user confidence.

S

Styria digital marketplaces, d.o.o.

bolha.com

70

Bolha.com is the largest Slovenian online classifieds platform operated by Styria digital marketplaces, d.o.o. It offers a wide range of classified ads across multiple categories including real estate, vehicles, tourism, and general marketplace items. The platform attracts over 150,000 daily visitors and hosts thousands of new ads daily, positioning it as a key player in the Slovenian retail and e-commerce sector. The website is professionally designed with consistent branding and good content quality tailored to the Slovenian market.

V

VPRO

vpro.nl

67

VPRO is a well-established Dutch public media organization offering a broad range of original and impactful content including TV programs, documentaries, podcasts, and events. The website serves as a comprehensive media platform targeting a general audience interested in cultural and societal topics. Technically, the site is built on modern frameworks such as Astro, integrates advanced video streaming via Mux, and employs analytics and error tracking tools like Google Tag Manager and Sentry. The site is performant, mobile-optimized, and accessible with a professional design and clear navigation. Security posture is strong with HTTPS and secure script loading, though explicit security headers and formal security policies are absent. Privacy compliance is basic, with no visible privacy or cookie policy pages but a consent mechanism is implied. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

T

Touraine Val de Loire

tourainevaldeloire.com

63

Touraine Val de Loire is a regional tourism organization promoting cultural, natural, and gastronomic experiences in the Touraine region of France. The website is professionally designed with multi-language support and rich content targeting tourists and visitors. The technical infrastructure leverages modern JavaScript modules, WordPress CMS, and integrates analytics and consent frameworks, indicating a mature digital presence. Security posture is good with HTTPS and consent mechanisms, though explicit privacy policies and contact information are missing. The absence of WHOIS registration data is a notable concern but may be due to privacy or data source limitations. Overall, the site is trustworthy and well-positioned for tourism promotion but should improve transparency and compliance documentation.

S

Stiftung Standortförderung Aarau und Region

asf-aarau.ch

63

The Stiftung Standortförderung Aarau und Region operates as a regional non-profit foundation focused on promoting economic development, tourism, and city management in Aarau and its surrounding region. The website clearly communicates its mission to unite business, quality of life, culture, and leisure under one umbrella, targeting local businesses, residents, tourists, and event organizers. The foundation offers services including economic promotion, city management, tourism marketing, and event planning, positioning itself as a key regional player fostering sustainable growth and community engagement. Technically, the website employs modern web technologies such as ES modules, Tailwind CSS, and integrates privacy-focused analytics via Plausible. The site is well-optimized for mobile devices, loads quickly, and features a professional design with clear navigation. Hosting and media assets are served via reliable providers, ensuring good performance and availability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced protection and GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security transparency and readiness. Overall, the website presents a trustworthy and professional digital presence for the foundation, with minor gaps in privacy and security best practices. Strategic enhancements in these areas would strengthen compliance and user trust, supporting the foundation's mission and reputation.

S

S. Siedle & Söhne, Telefon- und Telegrafenwerke OHG

siedle.de

51

Siedle is a well-established German manufacturer specializing in building and door communication systems, including intercoms and access control solutions. With a history spanning 275 years, the company holds a strong market position as a leading European provider of high-quality, made-in-Germany products. Their offerings include traditional and IP-based video intercoms, digital services, and customer configurator tools, targeting builders, architects, and trade professionals. The website reflects a mature digital presence with modern technologies and a clear focus on user experience and product information. Technically, the website employs modern JavaScript frameworks, web components, and integrates consent management via Usercentrics, alongside Google Tag Manager for analytics and advertising. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be more explicitly implemented. HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. From a security perspective, the site demonstrates good practices including encrypted connections and cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, the website is professional, trustworthy, and well-aligned with the company's business stature. Strategic improvements in security transparency and incident readiness would further strengthen its posture.

T

textalk.se

textalk.se

56

The website www.textalk.com appears to represent a business focused on e-commerce and digital publishing solutions, referencing services such as E-paper with Prenly, PDF and EPUB accessibility remediation, and the Abicart e-commerce platform. However, the actual website content is minimal and mostly placeholder, indicating either a blocked site or incomplete deployment. The WHOIS data for the domain www.textalk.com is missing, showing no registration record, which raises concerns about the domain's legitimacy or active status. The technical infrastructure includes modern JavaScript modules and a cookie consent mechanism via Cookiebot, but lacks visible security headers or detailed SSL information. Privacy compliance is minimal with no visible privacy or terms of service pages, though cookie consent is implemented. Overall, the security posture is weak due to missing WHOIS data and minimal content, resulting in a low trust score and recommendations to improve domain registration transparency, security headers, and privacy policies.

T

The Lighting Outlet

thelightingoutlet.com.au

67

The Lighting Outlet is an Australian-owned e-commerce retailer specializing in lighting and fan products, targeting both residential and commercial customers across Australia. The company positions itself as a superstore offering a wide range of global brand products at competitive prices. The website is built on the Shopify platform, leveraging modern JavaScript frameworks and third-party form builders to facilitate trade account registrations and custom product quotations. The technical infrastructure is solid, hosted on Shopify's CDN with good mobile optimization and SEO practices. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though improvements can be made by enabling DNSSEC and implementing additional security headers. Privacy compliance is a notable gap due to the absence of privacy and cookie policies. Overall, the website presents a professional and trustworthy front for its business operations.

2

Loading...

20bet.com

49

The website bet20play.com is an online gambling platform launched recently in 2024, targeting German-speaking adult users interested in sports betting, live betting, casino games, live casino, and horse racing. The platform offers various gambling-related services including promotions, forecasts, and results. The domain is newly registered and hosted using modern cloud infrastructure including Cloudflare DNS and Amazon CloudFront CDN. The site uses React-based frontend technologies and Google Fonts for styling. However, the website lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security posture is basic with no DNSSEC enabled and no visible security headers, though HTTPS is implied but not explicitly confirmed in the data. Advertising is present via TrafficJunky ad network. Overall, the site is functional but has significant gaps in privacy compliance and security best practices.

V

VSE

vse.sk

69

The website www.vse.sk represents a large Slovak energy supplier offering electricity and gas services to households and businesses. It positions itself as the largest supplier in Slovakia, providing 24/7 service and customer connection options. The site uses modern web technologies including JavaScript ES modules, Google Tag Manager, Cookiebot for cookie consent, and Microsoft Omnichannel for live chat support, indicating a mature digital infrastructure. However, explicit privacy policies, terms of service, and direct contact information are not evident in the provided content, which could impact user trust and compliance transparency. Security measures such as HTTPS and cookie consent are in place, but additional security headers and incident response information are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security documentation.

U

Umbraco Community Mastodon

umbracocommunity.social

65

The Umbraco Community Mastodon website is a niche social networking platform dedicated to the Umbraco CMS community, leveraging the Mastodon open-source federated social network software. It serves a small but active user base focused on community engagement and content sharing related to Umbraco CMS. The platform is community-driven and does not appear to be commercial in nature. Technically, the site uses modern web technologies including React, ES modules, WebSockets, and supports progressive web app features. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie or terms of service pages. No contact emails or phone numbers are publicly listed, which is common for community-run platforms. Overall, the domain appears legitimate despite limited WHOIS data due to privacy protection and TLD limitations. The site is safe for general audiences and free from adult or explicit content.

T

Touraine Val de Loire

touraineloirevalley.com

10

Touraine Val de Loire is a regional tourism organization promoting cultural, natural, and gastronomic experiences in the Touraine region of France. The website offers rich content including activities, destinations, events, and accommodations, targeting tourists and travelers interested in exploring the Loire Valley. The technical infrastructure is modern, leveraging a WordPress CMS with advanced JavaScript modules and libraries, ensuring a good user experience and mobile optimization. Security posture is generally good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed privacy policies. The absence of WHOIS data reduces trustworthiness somewhat, though the professional presentation and multi-language support indicate a legitimate and established tourism entity. Strategic improvements in transparency, privacy compliance, and security headers would enhance overall trust and compliance.

A

arsEdition

arsedition.de

69

arsEdition is a well-established German publishing company with over 125 years of history, specializing in creative publishing and retail of books and games for children, teens, and adults. The company operates a professional e-commerce website powered by Shopify, offering a broad range of products categorized by age groups and themes. The website demonstrates a mature digital infrastructure with modern technologies, including Shopify's Dawn theme, Usercentrics consent management, and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, hCaptcha protection on forms, and privacy compliance mechanisms in place. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is professional, trustworthy, and well-positioned in the retail and media sectors.

F

Freshify

freshify.click

60

Freshify is a small, independent company founded in 2023 that develops modern Shopify applications focused on enhancing image management and global commerce capabilities for e-commerce merchants. The company offers a suite of apps including EZ Product Image Translate, EZ Product Image Market, EZ Product Collection Image, and a Terms & Conditions Checkbox app. With over 400 merchants worldwide, Freshify positions itself as a trusted provider of no-code, easy-to-use Shopify solutions. Technically, the website is built on Laravel, uses Cloudflare for DNS and CDN, and incorporates modern frontend technologies such as Tailwind CSS and JavaScript ES modules. The site is fast, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, Freshify demonstrates a professional and trustworthy online presence with room for improvement in privacy and security transparency.

S

S-Bahn Berlin GmbH

sbahn-ebe.de

68

S-Bahn Berlin GmbH operates a dedicated online portal for managing the increased fare enforcement payments (Erhöhtes Beförderungsentgelt - EBE). The portal facilitates secure and quick payment of fines, submission of personalized tickets for review, and customer support for related inquiries. The website is professionally designed, mobile-optimized, and provides comprehensive FAQs and contact options, reflecting a mature digital presence for a public transportation entity. Technically, the site uses Drupal CMS, integrates UserCentrics for consent management, and employs Matomo for analytics, indicating a focus on privacy and compliance. Security measures include HTTPS, Content Security Policy with nonce, and CAPTCHA protections, contributing to a strong security posture. The domain WHOIS data is privacy protected but consistent with legitimate business use. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and other regulations.

L

Leopold Kostal GmbH & Co. KG

kostal-career.com

57

Leopold Kostal GmbH & Co. KG operates a global career website showcasing its position as a leading manufacturer of electronic and mechatronic products. The company emphasizes flexible working models, technological innovation, and a respectful work environment. The website targets job seekers worldwide, offering localized career pages and detailed job listings. Technically, the site is built on TYPO3 CMS with modern JavaScript modules, integrates consent management via Usercentrics, and uses Google Tag Manager for analytics. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit incident response contacts are absent. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency. Overall, the site is professional, well-branded, and trustworthy, but the WHOIS inconsistency warrants further investigation.

C

Carmigo Shop

carmigo.de

63

Carmigo Shop is a German e-commerce retailer specializing in high-quality automotive lubricants and accessories manufactured in Germany. The company positions itself as a reliable partner for both automotive and industrial lubricant needs, targeting vehicle owners and industrial clients primarily within Germany. The website reflects a niche market focus with a strong emphasis on product quality and customer service, supported by customer reviews and partnerships such as with the RGS Racing Team. Technically, the site is built on the Shopify platform using the Impulse theme, leveraging modern JavaScript modules and Shopify's payment infrastructure, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced, cookie consent implemented, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy policies, terms of service, and contact information limits full compliance and trust. Overall, the site is professional and functional but could improve transparency and compliance documentation.

P

Problem Gambling Foundation of New Zealand

pgf.nz

69

The Problem Gambling Foundation of New Zealand operates a professional, well-structured website providing free, confidential counselling and support services for individuals and families affected by gambling harm. The organization holds a strong market position as a national non-profit entity with subsidiaries focused on cultural support. The website demonstrates a mature digital infrastructure utilizing modern web technologies, including JavaScript modules, HTMX, and integrated chat support via Zoho SalesIQ. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are employed with evident privacy compliance. Security posture is robust with HTTPS enforcement and CAPTCHA protections, though some security headers could be improved. Overall, the site is trustworthy, accessible, and user-friendly, targeting a broad audience in New Zealand seeking gambling harm support.

S

Sparkasse Bank Macedonia

sparkasse.mk

69

Sparkasse Bank Macedonia is a well-established financial institution serving private clients in North Macedonia. The bank offers a comprehensive portfolio of retail banking products including accounts, cards, loans, savings, investments, insurance, and digital banking services. The website reflects a mature digital presence with consistent branding aligned with its parent company, Erste Group. The technical infrastructure leverages modern web technologies and a proprietary CMS framework, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit privacy and terms of service pages are not detected in the provided content. The absence of public WHOIS data suggests privacy protection, which is typical for financial institutions. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Medworld AG

scs-congress.ch

61

The Swiss College of Surgeons Annual Meeting 2026 website is a professionally designed platform promoting a major surgical congress in Luzern, Switzerland. It targets medical professionals and surgeons, providing comprehensive event information, registration, and program details. The site is multilingual and well-structured, reflecting a mature digital presence for a specialized healthcare event. The business behind the site, Medworld AG, is a recognized professional congress organizer, enhancing the site's credibility. Technically, the website employs modern web technologies including Bootstrap 5, Font Awesome 6, and October CMS, ensuring responsive design and good user experience across devices. SEO is supported by structured data and proper meta tags. Analytics are implemented via Google Tag Manager with IP anonymization, indicating moderate user tracking. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected, which is a gap for GDPR compliance. Contact information is clearly provided, supporting business credibility. Overall, the site is trustworthy, professional, and suitable for its audience, with recommendations to enhance privacy compliance and security headers to further strengthen its posture.

S

Swiss Visceral Surgeons

viszeralchirurgie.ch

50

Swiss Visceral Surgeons (SGVC) is a professional medical society dedicated to promoting and securing the field of visceral surgery within Switzerland. The organization provides education, certification, and advocacy services to medical professionals specializing in visceral surgery. Their website reflects a strong national presence with clear membership and educational offerings, including congresses, courses, and fellowships. The target audience is primarily healthcare professionals in Switzerland. Technically, the website employs modern web technologies such as Vue.js, Three.js for visual effects, and Flickity for carousels, hosted likely on a CMS platform (Statamic). The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not present, representing areas for improvement. Overall, the domain registration data is consistent with the website's claims, indicating legitimacy and trustworthiness.

S

Schweizer Gesellschaft für Chirurgie

sgc-ssc.ch

51

The Schweizer Gesellschaft für Chirurgie (SGC) is a professional medical society representing surgeons in Switzerland. The website serves as a comprehensive portal offering information on education, specialist examinations, events, and official publications such as the SwissKnife. It targets medical professionals and surgeons, providing them with resources and membership services. The organization holds a strong market position as a national professional association with a clear focus on continuing education and quality assurance in surgery. Technically, the website employs modern web technologies including JavaScript ES modules, Vue.js components, and Three.js for interactive WebGL effects. It uses Statamic CMS inferred from consent management keys and integrates privacy-focused analytics via Plausible. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with multi-language support enhancing its reach. From a security perspective, the site enforces HTTPS and implements a consent management system for cookies, reflecting good privacy practices. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It demonstrates a mature digital presence suitable for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and incident response readiness.

S

Schweizerische Gesellschaft für Gefässchirurgie

swissvasc.ch

50

The Schweizerische Gesellschaft für Gefässchirurgie is a leading Swiss professional society dedicated to vascular surgery. It focuses on promoting excellent patient care, innovative research, and continuous education for vascular surgeons and medical professionals. The website serves as a comprehensive resource for members and interested parties, offering information on events, training, and the Swissvasc registry. Technically, the site employs modern web technologies including Vue.js and WebGL for interactive content, and uses privacy-respecting analytics (Plausible). The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

H

HyperView Spółka z o.o.

hyperview.pl

60

HyperView Spółka z o.o. is a Polish IT company specializing in software systems for spatial data management and local government administration. Their product portfolio includes solutions such as ISDP, Geoportal Toolkit, and administrative workflow systems, targeting public sector clients and organizations managing spatial information. The company demonstrates a solid market position with multiple successful projects and a clear focus on delivering tailored IT solutions for spatial management. Technically, the website is built on a modern Angular framework with integration of mapping libraries like OpenLayers, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the website reflects a professional and trustworthy business presence with clear contact information and client testimonials, supporting a medium-sized enterprise profile in the technology sector.

A

Atlaseek

atlaseek.com

9

Atlaseek hub is a specialized online marketplace platform designed to connect travel destinations with travel creators and influencers to facilitate marketing collaborations. The platform targets travel brands and tourism marketing teams seeking to leverage influencer marketing to reach Gen Z and millennial travelers. It offers verified metrics, campaign management, and a travel calendar to streamline collaboration scheduling. Technically, the website uses modern JavaScript modules, Vue.js framework, Google Fonts, Stripe for pricing, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with good user experience. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data is available for the subdomain hub.atlaseek.com, which is typical for subdomains, but limits domain registration trust signals. Overall, the site is safe, professional, and credible within its niche but would benefit from improved privacy compliance and security best practices.

S

Swiss College of Surgeons

swisscollegeofsurgeons.ch

52

The Swiss College of Surgeons (SCS) is a prominent professional organization in Switzerland dedicated to advancing surgical competencies and education. The website serves as a comprehensive platform offering information on surgical training, certification, projects, events, and membership benefits. It targets surgeons and medical professionals within Switzerland, positioning itself as a leading authority in the surgical field. The content is well-structured, multilingual, and professionally presented, reflecting a mature digital presence.

J

jiri zavadil

zavadil.pro

63

The website zavadil.pro represents a personal professional portfolio for Jiri Zavadil, specializing in ecommerce, branding, and UI/UX services. The site positions itself as a service provider targeting businesses and professionals seeking digital design and ecommerce solutions. The business model is service-oriented with a focus on delivering creative and technical solutions in the technology sector. The website features a clean, modern design with a portfolio of projects linking to partner or client sites, indicating active business engagements. Technically, the site uses modern web technologies including Vue.js framework, Google Fonts, and modular JavaScript. The site is mobile optimized and presents a good user experience with clear navigation and professional branding consistency. Google Tag Manager is implemented for analytics, indicating some level of digital maturity. However, there is room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS as indicated by metadata URLs, but lacks visible security headers and published security policies. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. Contact information is limited to a single email address with no phone or physical address provided. WHOIS data is privacy protected, which is common for personal sites but reduces transparency. No WAF or blocking mechanisms were detected, and no vulnerabilities were identified from the content. Overall, the website is a professional personal portfolio with moderate digital maturity and security posture. Strategic improvements in privacy compliance, security headers, and expanded contact information would enhance trust and compliance. The domain registration appears legitimate but privacy protected, which is justified given the personal nature of the site.

R

RESPECT, a.s.

jsmerespect.cz

66

RESPECT, a.s. is a Czech Republic-based insurance brokerage company with a family-oriented business culture. The website focuses on career opportunities within the company, targeting job seekers interested in working in a supportive, regional environment. The company operates multiple regional offices and emphasizes personal growth and work-life balance. The website is professionally designed with clear navigation and strong branding consistency, reflecting a medium-sized enterprise with a solid market position in the insurance sector. Technically, the site uses modern JavaScript frameworks, font services, and Google Analytics with user consent, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation and contact transparency support its legitimacy. Overall, the site is safe, GDPR compliant, and trustworthy for its intended audience.

S

Seðlabanki Íslands

sedlabanki.is

72

Seðlabanki Íslands is the Central Bank of Iceland, serving as the national authority for monetary policy, financial stability, and secure financial operations. The website reflects a well-established government institution with a clear mission to maintain stable prices and a robust financial system. It targets a broad audience including the general public, financial institutions, and government bodies, providing comprehensive information and services related to monetary policy, financial regulation, and market operations. The site is professionally designed with consistent branding and high-quality content, reinforcing its authoritative position in the Icelandic financial sector. Technically, the website employs modern web technologies including Blazor Server and Veva CMS modules, ensuring a fast, accessible, and mobile-optimized user experience. The use of cookie consent tools and accessibility features demonstrates digital maturity and compliance with contemporary web standards. Analytics are implemented via Siteimprove, supporting moderate user tracking aligned with privacy best practices. From a security perspective, the site enforces HTTPS and holds ISO-27001 certification, indicating a strong security posture. While some security headers are not explicitly visible, no vulnerabilities or exposed sensitive data were detected. The absence of DNSSEC is a minor gap, and the site would benefit from publishing a security.txt file and incident response contacts to enhance transparency and readiness. Overall, the website is highly trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the Central Bank's mission and provides valuable resources to its stakeholders. Strategic recommendations include enabling DNSSEC, enhancing security header implementation, and establishing formal vulnerability disclosure channels to further strengthen security and trust.

Solan GmbH is a Swiss-based small enterprise specializing in high-performance photovoltaic solar systems and energy autonomy solutions, including innovative hydrogen power-to-gas technologies. The company offers comprehensive services from planning to realization and operation, targeting private and industrial customers primarily in Switzerland. Their market position is that of a specialist provider with a focus on notstromfähige netzgekoppelte Inselanlagen and energy sales within private energy communities. Technically, the website is built on the Worldsoft CMS platform, utilizing modern JavaScript modules and integrated with Google Tag Manager and Usercentrics for cookie consent management. The site is mobile-optimized and SEO-friendly with good content quality and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and formal security policies are absent. Privacy compliance is good with a clear privacy and cookie policy and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with the business's energy sector focus.

I

iPRAHA13.cz

ipraha13.cz

61

iPRAHA13.cz is a local news and information portal serving the Prague 13 district and its surrounding community. The website offers a variety of content including news articles, event calendars, advertising opportunities, premium content, and business directories. It targets residents and local businesses, positioning itself as a key media outlet for community engagement and information dissemination. The business model relies on advertising and premium subscriptions, supported by partnerships with local organizations and sponsors. Technically, the website is built on a modern stack including Laravel Livewire and Bootstrap, ensuring a responsive and user-friendly experience across devices. The site employs HTTPS with a valid SSL certificate and includes privacy and cookie policies compliant with GDPR. However, some security best practices such as security headers are not evident, and no explicit incident response or vulnerability disclosure information is provided. From a security perspective, the site shows a good posture with encrypted connections and CSRF protection tokens. The absence of WHOIS data for the domain is a notable concern, as it limits transparency and trust in domain ownership. No signs of malicious content or adult material were found, and the site appears safe for general audiences. Overall, iPRAHA13.cz is a credible and professionally maintained local media platform with good content quality and privacy compliance. Strategic improvements in domain transparency, security headers, and contact information disclosure would enhance trust and security posture.

P

Pinseria Sicily Café

pinseriasicily.cz

42

Pinseria Sicily Café is a small local Czech café and restaurant specializing in Italian pinsa and related food and beverage offerings. The website provides an online ordering platform primarily targeting local customers interested in Italian cuisine. The business appears to be recently established in 2021 and operates with a straightforward online presence. Technically, the website uses modern JavaScript modules and custom web components, hosted likely by Wedos, a Czech hosting provider. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers or HTTPS confirmation in the provided data, and privacy compliance is minimal with only a basic privacy policy and terms of service linked but no cookie consent mechanism. Overall, the website is functional and professional but would benefit from enhanced security and privacy features to improve trust and compliance.

J

Jadranski naftovod, dioničko društvo

janaf.hr

10

Jadranski naftovod d.d. (JANAF) is a well-established Croatian company operating since 1998, specializing in the international transport of crude oil via pipeline infrastructure from the Terminal Omišalj to domestic and foreign refineries in Southeast and Central Europe. The company holds a leading market position in the energy transport sector, providing critical infrastructure services including pipeline operation, storage terminals, and environmental protection initiatives. The website reflects a professional corporate presence targeting investors, business partners, and job seekers, with detailed business and sustainability information. Technically, the website employs modern web technologies such as JavaScript ES modules and custom fonts, with a moderate performance profile and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility and security headers. The hosting provider is not explicitly identified but the domain registrar is CARNET, a reputable Croatian academic network. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is supported by a comprehensive privacy policy and cookie policy, though no active cookie consent mechanism is detected. Social media presence is limited to official YouTube and LinkedIn channels, with no visible tracking or advertising scripts. Overall, the website is trustworthy, professionally maintained, and aligned with the company's business profile. Strategic recommendations include enhancing security headers, adding incident response and vulnerability disclosure pages, implementing cookie consent mechanisms, and improving accessibility features to strengthen compliance and security posture.

R

Region Skåne

skane.se

54

Region Skåne operates as the regional government authority responsible for healthcare, regional development, culture, and political governance in the Skåne region of Sweden. The website serves as a comprehensive portal providing information and services related to health care, job opportunities, education, politics, and regional initiatives. It targets residents, healthcare professionals, and stakeholders within the region. The business model is that of a public sector entity delivering essential services to the community.

D

Diakonisches Werk evangelischer Kirchen in Niedersachsen e.V.

diakonie-nds.de

52

Diakonie in Niedersachsen is a well-established non-profit welfare association operating as the regional branch of the Diakonie in Lower Saxony, Germany. The organization focuses on providing social support services, advocacy, and assistance to individuals in need, including specialized services such as support for victims of sexualized violence and coordination of various social welfare federations. The website reflects a professional and consistent brand presence, targeting both members and the general public seeking social services or career opportunities within the organization. The content is comprehensive and relevant, with clear navigation and mobile optimization.

S

Spiegelburg Shop

spiegelburg-shop.de

67

Spiegelburg Shop is a German e-commerce retailer specializing in gifts, toys, books, and accessories for children and adults. The website positions itself as a trusted and family-friendly online shop with a focus on quality and customer satisfaction, supported by the Trusted Shops certification. The business targets a broad audience including families and gift buyers within Germany, offering free shipping over a certain threshold and promotional discounts via newsletter subscriptions. Technically, the site is built on the Shopware platform, leveraging modern JavaScript modules, CAPTCHA for bot protection, and integrates multiple tracking and marketing tools such as Facebook Pixel and Pinterest tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses CAPTCHA, but lacks some explicit security headers and published security policies. Privacy compliance is basic, with no explicit privacy or cookie policies found in the provided content, though a cookie consent mechanism is present. Overall, the site is legitimate and trustworthy with moderate tracking and good business credibility.

A

AS Vinmonopolet

vinmonopolet.no

55

AS Vinmonopolet operates as the Norwegian government monopoly for retailing wine, spirits, and strong ale, holding exclusive rights to sell these products to consumers in Norway. Established in 1922, it maintains a strong market position as the sole authorized retailer in this sector, emphasizing responsible trade, quality, and societal responsibility. The website reflects a mature and professional digital presence, offering extensive product information, educational content, and customer services including live chat support integrated via Salesforce. The target audience is adult consumers in Norway seeking alcoholic beverages and related knowledge.

Owasco RV Centre is a Canadian-based retailer specializing in RV parts and accessories, targeting RV enthusiasts primarily in Canada. The business operates an e-commerce platform hosted on Shopify, offering online shopping with in-store pickup options. The website is professionally designed using modern Shopify themes and technologies, providing a good user experience with clear navigation and mobile optimization. Social media integration and active product listings support its retail operations. Technically, the site leverages Shopify's infrastructure, including analytics and payment integrations such as Apple Pay and Facebook Pixel for marketing and tracking purposes. Security posture is solid with HTTPS and domain transfer protections, though explicit security headers and policies are not fully implemented. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

B

Bundesagentur für Arbeit

berufe.tv

64

The website 'BERUFE.TV' is an official career and education video portal operated by the Bundesagentur für Arbeit, the German Federal Employment Agency. It serves as a government platform providing multimedia content to assist individuals interested in professions, training, and studies. The site offers categorized video content, links to related career services, and personal counseling options, positioning itself as a trusted resource in the German employment and education sector. The target audience includes students, job seekers, and those exploring career options in Germany. Technically, the website is built using modern web technologies including Angular framework, custom web components, and Piwik analytics for user tracking. The site is mobile-optimized, accessible, and employs HTTPS for secure communications. While performance is moderate, the site demonstrates good SEO and accessibility practices. However, explicit privacy and terms of service policies are not directly linked on the main page, which could be improved. From a security perspective, the site uses HTTPS and OAuth components for authentication, and includes a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly visible in the provided data, and no vulnerability disclosure or security policy pages were found. The WHOIS data aligns with the official government entity, indicating high legitimacy and trustworthiness. Overall, the website is a professionally maintained government resource with good content quality and technical implementation. Strategic improvements include publishing clear privacy and security policies, enhancing security headers, and providing vulnerability disclosure information to strengthen compliance and user trust.

E

EDF power solutions Deutschland GmbH

edf-powersolutions.de

59

EDF power solutions Deutschland GmbH is a medium-sized company specializing in the development, construction, and operation of renewable energy projects in Germany, including onshore and offshore wind, photovoltaic systems, and battery storage solutions. The company targets industrial and commercial customers, offering tailored energy storage and management solutions to support the energy transition. The website reflects a professional and modern digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site uses modern JavaScript modules, lazy loading, and Craft CMS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, GDPR compliant, and well-aligned with the company's business objectives.

C

Crystallize

theproductuniverse.com

59

The Product Universe website serves as a professional event landing page for the 2026 conference organized by Crystallize, a headless commerce platform. The site targets eCommerce professionals and developers interested in AI-driven and API-based commerce ecosystems. The business model centers on event organization and platform promotion, with a clear focus on technology and innovation in commerce. The website demonstrates a modern technical infrastructure using Tailwind CSS, JavaScript modules, and integrates Plausible Analytics for minimal user tracking. Security posture is adequate with HTTPS and domain locks, but lacks DNSSEC and security headers, and no privacy or cookie policies are published. Overall, the site is well-designed, mobile-optimized, and trustworthy, though privacy compliance could be improved.

G

graz.social

graz.social

71

graz.social operates as a regional Mastodon social networking server primarily serving the Graz area and its surroundings. It is managed by a non-profit association focused on promoting ethical digital culture. The platform leverages the open-source Mastodon software (version 4.4.7) and provides a community-driven social media experience within the fediverse. The website content includes user-generated posts on diverse topics, reflecting an active and engaged user base. The business model is community-centric, emphasizing privacy and ethical digital interaction rather than commercial gain. Technically, the site employs modern web technologies including React and Ruby on Rails frameworks, with modular JavaScript and SVG-based UI elements. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with no significant technical debt or errors detected. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks some security headers and does not provide a cookie consent mechanism or terms of service, which are areas for improvement. No vulnerabilities or malicious content were detected. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance indicators or data protection officer contact information. Overall, graz.social presents a trustworthy and well-maintained community platform with a strong ethical focus. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing terms of service, adding security headers, and providing clearer contact and incident response information to strengthen trust and security posture.

P

Pinseria Palmovka

pinseriapalmovka.cz

42

Pinseria Palmovka is a small Czech restaurant specializing in pinsa and other food items, offering an online ordering platform for customers. The website is primarily in Czech and targets local customers seeking convenient online food ordering. The business appears to be recently established in 2021, with a focused hospitality industry presence. Technically, the website uses modern JavaScript modules and CSS custom properties but lacks advanced frameworks or CMS. Hosting is likely provided by Wedos, a Czech hosting provider. Security posture is basic with no detected security headers or incident response information, and privacy compliance is limited with no cookie consent mechanism despite a privacy policy link. The website content is safe and appropriate for general audiences, with no adult or questionable content detected. Overall, the site is functional and professional but would benefit from enhanced security and privacy features.

K

Konecta

konecta-group.com

60

Konecta is an established enterprise-level company specializing in AI-powered customer and employee experience solutions. Founded in 1997, it operates globally with a strong focus on integrating human and AI agents to enhance interactions. The company offers a broad portfolio including AI & GenAI services, customer experience, digital marketing, employee experience, and advisory consulting. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on HubSpot CMS, leveraging modern JavaScript modules, Google Fonts, and analytics tools like Google Analytics and HubSpot Analytics. Security posture is good with HTTPS enforced and domain protections in place, though improvements are possible in DNSSEC and security headers. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms of service pages. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

P

Předškolní sport s.r.o.

hravelyzovani.cz

49

Předškolní sport s.r.o. operates the website hravesporty.cz, offering playful skiing and winter sports courses primarily for children aged 4 to 12. The company targets parents and schools near Prague, providing group lessons, individual instruction, and school ski trips in local ski resorts. The website is professionally designed with clear navigation, rich content, and strong trust signals such as Google reviews and partner logos. Technically, the site uses modern JavaScript libraries and frameworks, is mobile-optimized, and employs cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and compliant with GDPR, with comprehensive privacy and terms documentation.

E

EBERLE Controls GmbH

eberle.de

45

EBERLE Controls GmbH is a German-based manufacturer specializing in heating, climate, and building technology products. Their offerings include a wide range of thermostats, relays, and smart home compatible devices designed for energy-efficient temperature regulation. The company targets both private and commercial customers, emphasizing quality, reliability, and modern design. Their market position is that of an established medium-sized enterprise with a strong focus on innovation and customer service. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Usercentrics for cookie consent management. The site is well-structured, mobile-optimized, and provides comprehensive product information and support resources. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses consent management for cookies, and does not expose sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal documentation. Overall, the security posture is solid but could be enhanced with additional transparency and controls. The overall risk assessment is low with no critical vulnerabilities detected. Strategic recommendations include publishing a formal security policy, providing incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

The Verein Familienchronik Liechtensteiner Gemeinden operates a specialized genealogical platform aggregating family history data from multiple Liechtenstein municipalities. The platform serves both the public and research communities, offering access to approximately 100,000 records. The organization is a non-profit association representing eight municipalities, positioning itself as the central genealogical resource in Liechtenstein. Technically, the website employs modern front-end technologies including Vue.js and Bootstrap, with privacy-conscious analytics via Matomo. The site is mobile-optimized and well-structured, providing a professional user experience. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the platform benefits from HTTPS and does not expose sensitive data or vulnerable libraries. The absence of a visible security policy or incident response contact reduces transparency. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration consistent with the organization's local presence. Overall, the website is a well-executed, trustworthy platform with minor gaps in security and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and user trust.

A

Atari®

atari.com

74

Atari.com is the official e-commerce website for Atari®, a well-known brand in the gaming industry. The site offers classic and modern gaming consoles, cartridges, merchandise, and collectibles, targeting gamers and collectors worldwide. The website leverages the Shopify platform, integrating multiple third-party services for reviews, marketing, and product customization, reflecting a mature digital infrastructure. The site is professionally designed with good content relevance and user experience, supporting its position as a large, established brand in the gaming and entertainment sector. Security posture is solid with HTTPS enforced and form protection via hCaptcha, though there is room for improvement in explicit security headers and published security policies. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and business credible, with a strong domain history and consistent WHOIS data.

P

PAQ Research, z. ú.

paqresearch.cz

44

PAQ Research is a Czech non-profit research organization focused on providing data-driven insights into social issues, education, and policy reforms in the Czech Republic. The organization offers a variety of services including research studies, policy briefs, data visualization tools, and newsletters aimed at improving public services and social mobility. Their market position is that of a specialized, trusted entity within the Czech social research sector. Technically, the website is built on the Ghost CMS platform and employs modern JavaScript modules and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and does not expose sensitive data. The use of Matomo analytics indicates a focus on privacy. The absence of WHOIS data for the domain reduces the overall trust score, but the website content and business information appear legitimate and professional. No critical vulnerabilities or compliance gaps were detected, though improvements in security policy transparency and incident response information are recommended. Overall, PAQ Research presents a trustworthy and professional online presence with a strong focus on social research and education in the Czech Republic. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and clarifying data protection officer contact details.

RD-Verlag operates as a specialized e-commerce platform focused on emergency medical education and related merchandise, closely affiliated with the Rettungsdienst-Akademie Bonn GmbH, a recognized emergency medical training institution in Germany. The website offers a curated selection of Fachbücher, Fachmagazine, and branded merchandise targeting emergency medical professionals and students. The business model leverages Shopify's robust e-commerce infrastructure to deliver a professional and user-friendly shopping experience. Technically, the site employs modern web standards, Shopify's Dawn theme, and integrates security measures such as HTTPS and hCaptcha for form protection. Privacy compliance is addressed with visible cookie consent mechanisms and accessible privacy and terms policies, though explicit security and incident response policies are absent. Overall, the site demonstrates a solid security posture with no critical vulnerabilities detected and maintains a trustworthy presence in its niche market.