Security Directory

S

Spolek pro ochranu osobních údajů

ochranaudaju.cz

65

Spolek pro ochranu osobních údajů is a Czech professional association focused on data protection and privacy, bringing together data protection officers and other professionals from private, municipal, and public sectors. It is a founding member of the European Federation of Data Protection Officers, indicating a strong position within the data protection community. The website offers information about membership, educational events, conferences, and expert consultations, targeting professionals involved in personal data processing and protection. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery and Google Fonts, and is hosted on a reputable CDN (Amazon CloudFront). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks visible security headers and explicit security or incident response policies. No privacy or cookie policies are found, which is a compliance gap. The absence of WHOIS data reduces domain trust verification, though the website content and partner affiliations suggest legitimacy. Overall, the site presents a professional and credible front for a niche professional association but should improve privacy compliance and transparency to enhance trust and security posture.

B

Byro

byro.works

56

Byro is a small, Czech Republic-based community platform focused on creative professionals working in public administration. It aims to foster a more creative, open, and inclusive bureaucracy through networking, education, mentoring, and events. The platform targets public officials who want to improve their work and the functioning of the state. Technically, the website is built on Squarespace, leveraging modern web technologies and delivering a good user experience with mobile optimization and decent SEO. Security posture is solid with HTTPS and HSTS enabled, though some advanced security headers and privacy policies are missing. The absence of WHOIS data limits trust but is likely due to privacy protection. Overall, Byro presents as a legitimate niche community platform with room for improvement in privacy compliance and security transparency.

N

Nadační fond Czechitas Báry Bühnové

nadacnifondczechitas.cz

51

Nadační fond Czechitas Báry Bühnové is a Czech non-profit foundation dedicated to supporting women and disadvantaged groups in accessing IT education and career opportunities. The foundation provides scholarships and funding to help overcome barriers in the IT sector, aiming for systemic change in IT education across all ages. The website is professionally designed, targeting Czech-speaking audiences, and presents a clear mission with calls to action for donors and applicants. The foundation collaborates with reputable partners and uses established donation platforms to facilitate contributions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery. It is hosted on Webflow's infrastructure, ensuring reliable performance and mobile responsiveness. The site includes a cookie consent mechanism compliant with GDPR, although explicit privacy and terms of service pages are limited or linked externally. No blocking or WAF mechanisms were detected, and SSL is properly configured, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks some security headers and formal security policies. The absence of WHOIS data for the domain is a concern for transparency and trust, although the website content and partner references support legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the site presents a moderate to good security posture with room for improvement in policy disclosures and technical headers. The overall risk assessment is moderate with recommendations to improve domain registration transparency, add security headers, and publish formal security and privacy policies. These steps will enhance trustworthiness and compliance, supporting the foundation's mission and stakeholder confidence.

C

Czechitas, z.ú.

czechitas.cz

58

Czechitas is a Czech non-profit organization dedicated to opening the world of IT to women, children, and other beginners. The organization offers a wide range of IT courses, including digital academies, corporate upskilling, and career development support. Their market position is strong within the Czech Republic as a leading educational entity focused on digital literacy and inclusion. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, and various marketing and analytics tools, ensuring good performance and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response contacts could enhance their security maturity. Overall, the domain is privacy protected, which is justified for a non-profit, and the website exhibits high trustworthiness and professionalism.

S

Syntra

syntra.be

55

Syntra is a well-established educational organization based in Belgium, specializing in vocational and professional training courses. The website presents a professional and modern digital presence built on WordPress with Elementor, optimized for performance and mobile responsiveness. The organization targets individuals seeking skill development and vocational education, positioning itself as a key regional player in the education sector. The website includes comprehensive privacy and cookie policies with GDPR compliance and consent mechanisms, reflecting a mature approach to privacy. Security posture is strong with HTTPS and security headers implemented, though explicit security and incident response policies are not publicly detailed. WHOIS data is restricted due to .be domain policies, which is typical and does not detract significantly from trust. Overall, the site demonstrates good business credibility and technical maturity with room for improvement in transparency around security policies.

E

Europ Assistance

europ-assistance.be

62

Europ Assistance Belgium operates as a provider of travel insurance and assistance services including roadside, cancellation, and home assistance insurance. The website targets travelers and vehicle owners in Belgium, positioning itself as a trusted expert in the insurance sector. The digital presence is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and consent management tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is restricted by DNS Belgium, which is common for .be domains but slightly reduces transparency. Overall, the website is credible and trustworthy with room for improvement in security transparency and accessibility compliance.

S

Stad Hasselt

hasselt.be

60

Stad Hasselt is the official municipal government website for the city of Hasselt, Belgium, providing residents and visitors with comprehensive information about city services, governance, events, and local news. The website is well-structured, professionally designed, and targets Dutch-speaking users primarily within the Hasselt region. It offers key services such as document requests, traffic and parking information, waste management, education, leisure, healthcare, and business support. The site uses Drupal 10 CMS with modern front-end technologies and integrates Piwik PRO for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure form handling, though some security headers and incident response information are absent. Privacy and cookie policies are present and appear GDPR compliant. WHOIS data is restricted due to domain policy, but the official branding and domain usage confirm legitimacy. Overall, the website demonstrates a good balance of usability, security, and compliance suitable for a government entity.

A

az Vesalius

werkenbijazvesalius.be

56

az Vesalius is a Belgian healthcare provider focused on delivering high-quality basic care close to home. The website serves primarily as a recruitment portal for various hospital roles including healthcare workers, doctors, volunteers, and interns. The site targets job seekers and volunteers interested in joining the hospital staff. Technically, the website uses modern web technologies such as jQuery, Isotope, Font Awesome, and Google Fonts, with a moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS assumed but no visible security headers or incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

The website www.czesha.cz represents the Union of School Associations of the Czech Republic (CZESHA), a non-profit organization focused on educational advocacy and coordination among school associations. The site provides meeting resolutions, policy documents, and information relevant to educational stakeholders in the Czech Republic. The business model centers on member representation and policy influence rather than commercial activities. Technically, the website uses a traditional tech stack including jQuery 1.10.2, Bootstrap, Google Fonts, and Google Analytics. The site is mobile responsive and moderately performant but uses an outdated jQuery version which could pose security risks. The site lacks modern CMS indicators and does not expose hosting provider details. From a security perspective, the site enforces HTTPS and uses secure form submission for login. However, it lacks important security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. No WHOIS data is available, which reduces domain trustworthiness and transparency. Overall, the site is functional and professionally presented but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trust and security posture.

N

NetDirect

shopcentrik.cz

69

NetDirect is a Czech Republic-based technology company specializing in custom e-commerce solutions, with over 23 years of experience. The company has established itself as a leader in the Czech market, having developed major e-shops such as Alza.cz and Notino.cz. Their business model focuses on B2B services including custom e-shop development, B2B portals, IT outsourcing, and online marketing. The website reflects a mature digital presence with professional design and clear service offerings. Technically, the website leverages modern web technologies including Angular framework, Google Fonts, Google Tag Manager, and Facebook SDK. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is generally good with HTTPS enforced and secure form implementations, but lacks some security headers and explicit security policies. From a security perspective, the absence of WHOIS data and lack of explicit privacy and security policies are notable gaps. The site uses multiple third-party analytics and marketing tools, indicating moderate user tracking. Cookie consent mechanisms are implemented, supporting GDPR compliance to some extent. Overall, the site is trustworthy but would benefit from enhanced transparency and security disclosures. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, publishing incident response contacts, and improving accessibility. These steps will enhance trust, compliance, and security posture, supporting NetDirect's market leadership and digital maturity.

T

Terasa U Zlaté studně

terasauzlatestudne.cz

45

Terasa U Zlaté studně is a well-established fine dining restaurant located in Prague, Czech Republic, founded in 2004. The business offers a premium hospitality experience featuring a rooftop terrace with panoramic views, a variety of menus including à la carte and degustation, private dining options, and event hosting services. The website reflects a professional and consistent brand image targeting local and tourist diners seeking high-quality culinary experiences. The business model includes direct reservations and an e-shop for gift vouchers, indicating diversified revenue streams. The restaurant maintains partnerships with luxury hotels and other restaurants, enhancing its market position. Technically, the website employs a modern tech stack including jQuery, Fancybox, Google Fonts, and integrates Google Analytics and Sentry for monitoring. The site is hosted likely by WEDOS, consistent with the domain registrar data. The website is mobile-optimized with good SEO practices and moderate performance. Cookie consent is implemented with granular user controls, reflecting awareness of privacy compliance requirements, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site enforces HTTPS and uses error monitoring tools but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site uses tracking and retargeting services with user consent mechanisms in place, indicating moderate user tracking levels. Overall, the security posture is good but could be improved with additional headers and formal policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include publishing a privacy policy and terms of service, implementing security headers, and establishing a vulnerability disclosure or incident response policy to enhance trust and compliance. The website quality and business credibility are high, supporting the restaurant's premium market positioning.

H

HR organizer

hrorganizer.be

69

HR organizer is a Belgian technology company specializing in SaaS-based applicant tracking system (ATS) and employer branding solutions tailored for HR professionals and recruiters in Belgium. Their platform supports the entire recruitment lifecycle from job posting to onboarding, integrating with major job boards and social media channels. The company positions itself as a leading ATS provider trusted by Belgian enterprises, emphasizing productivity and seamless recruitment workflows. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, Google Fonts, and Facebook SDK for social integration. The site is mobile-optimized, SEO-friendly, and includes structured data for enhanced search engine understanding. Cookie consent mechanisms are robust, supporting GDPR compliance with multiple cookie categories and user preferences. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but is mitigated by the professional site and GDPR compliance. Overall, HR organizer presents a mature digital presence with strong business credibility and privacy compliance. The main risk lies in the lack of WHOIS transparency and missing explicit security policy disclosures. Strategic improvements in security headers and incident response documentation would enhance trust and security posture.

D

Dcreate BV

digicreate.be

72

Dcreate BV is a communication agency based in Brugge, Belgium, specializing in branding, website development, graphic design, and print services. The company targets businesses seeking to enhance their brand visibility and communication effectiveness. Their market position is that of a local/regional agency with a professional and consistent brand presence. The website reflects a well-structured service offering with clear navigation and relevant content. Technically, the site is built on Umbraco CMS with AngularJS and Bootstrap frameworks, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and a cookie consent mechanism, though some security headers are missing and no incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professional, with clear contact details and social media presence supporting business credibility.

G

Google LLC

google.by

70

Google LLC operates one of the world's leading internet search engines and provides a broad range of technology services including advertising, cloud computing, and software platforms. The company holds a dominant market position globally and serves a diverse audience ranging from individual users to enterprises. The website reflects Google's strong brand identity and commitment to user experience, with excellent design, navigation, and mobile optimization. Technically, the site leverages modern web technologies and is hosted on Google Cloud infrastructure, ensuring high performance and reliability. Security is robust, with enforced HTTPS, comprehensive security headers, and adherence to best practices. Privacy compliance is well addressed with clear policies and consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates a mature digital presence with high trust and professionalism.

B

Bethere

bethere.be

45

Bethere is a small communication and digital services company based in Waregem, Belgium, founded in 2006. The company specializes in branding, website and webshop design, and marketing services targeted primarily at local businesses and organizations. Their website reflects a professional and consistent brand image with a focus on clear communication and client references. Technically, the site is built on WordPress using modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile optimized and provides a user-friendly experience with clear navigation. Security posture is good with HTTPS enforced and spam protection on forms, though there is room for improvement in security headers and published policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility.

H

Huppa

upfra.be

58

Huppa is a Belgian wholesale fresh food partner offering a comprehensive online webshop with over 13,000 products. The company targets wholesale buyers and partners in the fresh food sector, positioning itself as a go-to supplier for fresh food products. The website is built on a modern WordPress platform using Elementor and Yoast SEO, supporting multilingual content primarily in Dutch with French alternatives. The technical infrastructure is solid with good mobile optimization and SEO practices, though some security headers and explicit policies are missing. The security posture is moderate with HTTPS implied and GDPR cookie consent implemented, but lacks explicit privacy and security policies. Overall, the business appears legitimate and professionally presented, with room for improvement in privacy compliance and security transparency.

G

Global Gardens Chicago

globalgardenschicago.org

57

Global Gardens Chicago is a small non-profit organization dedicated to urban farming and refugee support in Chicago's Albany Park neighborhood. The organization operates a one-acre farm where over 75 refugee families grow organic vegetables for personal use and sale, fostering community, sustainable growth, and supplemental income. The website is built on Squarespace, featuring a clean design with good navigation and mobile optimization. Security best practices such as HTTPS and HSTS are implemented, but the site lacks visible privacy and cookie policies, as well as explicit contact information, which impacts privacy compliance and business credibility scores. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency. Overall, the site presents a trustworthy and professional image with room for improvement in compliance and contact transparency.

T

Tripan

tripan.be

51

Tripan is a Belgian prefab concrete manufacturer specializing in custom solutions primarily for industrial and utility construction sectors. With over 30 years of market presence and a reputation for quality and flexibility, Tripan serves construction companies and architects, leveraging its own production and transport capabilities. The company is part of the Willy Naessens Group, enhancing its market credibility. The website is professionally designed, mobile-optimized, and provides clear contact information and certifications, supporting its business legitimacy. Technically, the site runs on WordPress with modern plugins and uses HTTPS with Google Analytics configured for IP anonymization. Security posture is solid but could be improved with additional headers and explicit security policies. WHOIS data is restricted, limiting transparency but not detracting significantly from trust due to other positive indicators. Overall, Tripan presents a credible and professional digital presence aligned with its business operations.

C

Coda Restaurant

codarestaurant.cz

58

Coda Restaurant is a fine dining establishment located in the Aria Hotel in Prague, Czech Republic, with a strong emphasis on local ingredients, artistic ambiance, and a premium culinary experience led by Executive Chef Igor Chramec. The business targets discerning diners seeking luxury and exclusivity, offering services including rooftop terrace dining, private dining, and a curated wine selection. The website reflects a professional and consistent brand image with clear contact details and social media presence. Technically, the site uses modern web technologies such as jQuery, Fancybox, and Google Analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing, representing compliance gaps. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

L

LINK nky

linknky.com

58

LINK nky is a regional news organization serving Northern Kentucky, providing comprehensive coverage of local news, sports, business, arts, and culture. Established in 2021, it positions itself as the largest newspaper in the region, targeting residents and stakeholders interested in community affairs. The website leverages WordPress with the Newspack theme, integrating modern web technologies and advertising platforms to support its business model. Technically, the site is well-structured with good SEO practices and moderate performance, optimized for mobile users. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking a dedicated cookie policy page. Overall, the site demonstrates a professional and trustworthy presence with room for enhanced security and privacy measures.

P

Planet Detroit

planetdetroit.org

58

Planet Detroit is an independent nonprofit newsroom dedicated to producing news about local climate, environment, and public health issues in Detroit and Michigan. The organization targets residents and stakeholders interested in environmental accountability and community empowerment. Their business model focuses on nonprofit journalism with a strong emphasis on community engagement and transparency. The website demonstrates a solid market position as a regional media outlet specializing in environmental reporting. Technically, the website is built on WordPress using the Newspack theme and plugins, integrating modern technologies such as Google Analytics, Google AdSense, OneSignal push notifications, and Broadstreet Ads. The site is hosted by Bluehost and uses AWS DNS services. The technical infrastructure is modern and well-optimized for SEO, mobile responsiveness, and accessibility, though performance is moderate. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC, security headers, and published security or incident response policies. Privacy compliance is partial, with no explicit privacy or cookie policies found, though consent mode scripts are implemented to restrict tracking in EU regions. No vulnerability disclosure or security.txt files are present. Overall, Planet Detroit presents a trustworthy and professional online presence with excellent content quality and business credibility. Security and privacy practices can be improved by adding explicit policies, security headers, and incident response information to enhance user trust and compliance.

C

Colorado Media Project

coloradomediaproject.com

57

Colorado Media Project is a small non-profit organization focused on researching and testing new ideas and digital tools to strengthen the civic fabric of Colorado, particularly the local news ecosystem. The organization targets Coloradans interested in local news and civic engagement, positioning itself as a niche player in the non-profit media sector. The website is built on the Squarespace platform, leveraging modern web technologies including Facebook Pixel for analytics and marketing. The site is professionally designed with good mobile optimization and clear navigation, though it lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but could be improved by enabling DNSSEC and adding security headers. Overall, the website demonstrates moderate digital maturity and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

V

VTDigger Jobs

vtdiggerjobs.org

62

VTDigger Jobs is a specialized online job board serving Vermont and nearby regions, operated by Vermont Journalism Trust, Ltd. The platform offers job seekers and employers a focused marketplace for remote, hybrid, and on-site employment opportunities. It leverages a modern WordPress-based infrastructure with WooCommerce and HivePress plugins to manage listings and transactions. The site is well-branded, professionally designed, and provides relevant content including company profiles and testimonials, positioning itself as a trusted regional employment resource. Technically, the site uses standard web technologies and integrates Google services for analytics and spam protection. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is credible and functional with room for security and privacy improvements.

K

Knock Knock WHOIS Not There, LLC

kjtz.co

59

The website jungespublikum.blog is a German-language cultural blog dedicated to performing arts and young audiences, providing networking, event information, funding, and research dissemination. It is hosted on WordPress.com and registered via Automattic Inc., with domain registration dating from 2023, consistent with the site's recent content. The platform targets professionals and stakeholders in the cultural and performing arts sectors, operating as a small non-profit media entity. Technically, the site uses WordPress with Jetpack and Gutenberg, delivering a modern and moderately performant user experience with good mobile optimization and basic accessibility. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and explicit security headers are not visible. Privacy compliance is weak, lacking visible privacy or cookie policies and consent mechanisms. Contact is primarily via a blog subscription form, with no direct emails or phone numbers published. Social media presence is established across major platforms. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security hardening.

K

key | communication

keycommunication.lt

38

key | communication is a Lithuanian digital marketing agency specializing in planning and executing digital advertising campaigns for both B2C and B2B clients domestically and internationally. The company also has expertise in traditional media planning dating back to 2005, providing a broad market perspective. Their services include campaign management, interactive reporting, and daily campaign monitoring, with occasional 24/7 support for specific cases. The website is built on WordPress using WPBakery Page Builder and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear business messaging in Lithuanian. However, it lacks explicit privacy, cookie, and terms of service policies, as well as visible contact emails or phone numbers.

Q

QUORiON Data Systems GmbH

quorion.de

51

QUORiON Data Systems GmbH is a German-based manufacturer specializing in Android-based cash register systems and POS software, serving over 650,000 businesses worldwide across retail and hospitality sectors. The company positions itself as a leading provider with a strong focus on customization, scalability, and compliance with fiscal regulations. Their website reflects a mature digital presence with comprehensive product information, dealer support, and customer testimonials. Technically, the site is built on WordPress with modern optimization tools like WP Rocket and integrates Google Analytics 4 for tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates professionalism, good privacy compliance, and a trustworthy business image.

K

Knauf Insulation

b2b-knaufinsulation.lt

53

Knauf Insulation Lithuania operates a B2B web portal focused on insulation products, providing business customers with login access to product catalogs and order management. The website is built using modern Angular technology and is hosted behind Cloudflare DNS, ensuring good performance and security. The site is mobile optimized and presents a professional design consistent with the Knauf brand. However, the site lacks publicly accessible privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security posture is generally good with HTTPS enforced and secure form inputs, but security headers and incident response information are missing. Overall, the domain registration is legitimate and consistent with a new business initiative, supporting the website's credibility.

T

The Colorado News Conservancy

coloradonewsconservancy.com

42

The Colorado News Conservancy is a nonprofit collaboration launched in 2021 by the National Trust for Local News and The Colorado Sun to maintain community ownership of 24 local newspapers in Colorado. The organization positions itself as an innovative alternative to national media consolidation, focusing on local journalism and community engagement. The website reflects this mission with clear content, partnership references, and a call to support the initiative. Technically, the site uses modern React technology, is hosted on Glitch, and integrates Google Tag Manager and Mailchimp for analytics and marketing. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Business credibility is strong given the reputable partners and consistent WHOIS data. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

R

Recreatieschap Drenthe

recreatieschapdrenthe.nl

43

Recreatieschap Drenthe is a governmental organization focused on supporting municipalities in the Drenthe region of the Netherlands with the development and growth of the leisure and tourism sector. The organization provides project support, knowledge sharing, and infrastructure development to enhance recreational opportunities. The website is professionally designed using WordPress and Elementor, with good SEO and accessibility features. It serves a regional audience including local governments and tourism stakeholders. Technically, the site is well-optimized with modern technologies and performance enhancements, including caching and lazy loading. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and explicit policies are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and credible, reflecting a legitimate public sector entity.

2

26 Digital Agency

26-agency.com

69

26 Digital Agency is a UK-based digital marketing firm specializing in digital experience and performance marketing services. Positioned as a leading agency for ambitious brands, it offers services that connect brands with customers through market-leading technology. The company operates under the parent company MSQ and maintains multiple subsidiary domains for its specialized services. The website is modern, built on Next.js, and optimized for performance and mobile devices. It employs reputable third-party tools such as Google Analytics, Hubspot, and Cookiebot for analytics and compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding security headers. The domain registration is transparent and consistent with the company's age and business claims. Overall, the website presents a professional and trustworthy digital presence.

أ

أراجيك

arageek.com

61

أراجيك is a prominent Arabic youth magazine targeting millennials interested in technology, arts, science, and reading. The website positions itself as a leading media outlet in the Arabic-speaking youth segment, offering diverse content including articles, videos, and encyclopedic knowledge. Technically, the site is built on modern frameworks such as Next.js and Chakra UI, with integrations for analytics and marketing tools like Google Analytics and ConvertBox. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security-wise, HTTPS is enforced, but the absence of security headers and lack of visible privacy or cookie policies indicate room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance and active content. Overall, the site is functional and credible but should enhance privacy compliance and security posture to strengthen trust and regulatory adherence.

V

Voices.com

voices.com

71

Voices.com operates as a leading global online marketplace specializing in connecting clients with professional voice actors. The platform facilitates quick and easy hiring processes, allowing users to post jobs, receive auditions, and obtain quotes efficiently. The website demonstrates a strong market position within the media sector, targeting businesses and individuals seeking voice over talent. Technically, the site is built on WordPress with performance optimizations such as NitroPack and employs modern web technologies including Google Tag Manager and Font Awesome. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly impacting domain trust assessment.

Ό

Όμιλος Σφακιανάκη

sfakianakis-epiloges.gr

54

Sfakianakis-epiloges.gr is a Greek website specializing in the sale and promotion of used cars under the reputable Όμιλος Σφακιανάκη brand. The platform offers a comprehensive search service for used vehicles, including special offers, financing options, and trade-in services. The website targets Greek consumers seeking reliable used cars with warranty assurances. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, Font Awesome, and integrates Google services for analytics and maps. It is mobile responsive and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements a robust cookie consent mechanism via Cookiebot, categorizing cookies by purpose and provider. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility, suitable for its market niche.

U

UAB Tai aktualu

dituvosskelbimai.lt

36

DituvosSkelbimai.lt is a Lithuanian regional online classifieds platform operated by UAB Tai aktualu, offering a variety of free and paid classified ads across multiple categories such as vehicles, real estate, jobs, and services. The platform targets local residents and businesses in the Dituva region, providing a marketplace for buying, selling, and advertising goods and services. The business model includes free listings with optional paid VIP and promoted ad services to increase visibility. Technically, the website employs a traditional web stack with jQuery 1.7.3, Google Tag Manager for analytics, Google Fonts, and Google Sign-In for authentication. The site is mobile optimized with responsive design elements and includes basic SEO and accessibility features. However, the use of an outdated jQuery version and lack of modern security headers indicate technical debt and potential security risks. From a security perspective, the site uses HTTPS but lacks advanced security headers such as Content-Security-Policy and HSTS. The login and registration forms use POST methods, but the outdated JavaScript library and missing security headers expose the site to potential vulnerabilities. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, limiting the security maturity of the platform. Overall, the website is functional and serves its business purpose but has moderate security and privacy compliance gaps. The absence of WHOIS data reduces domain trustworthiness. Strategic improvements in security practices, technology updates, and transparency would enhance the platform's credibility and resilience.

U

UAB TAI AKTUALU

plungesskelbimai.lt

39

PlungesSkelbimai.lt operates as a local online classifieds platform targeting residents of Plungė city and its surrounding district in Lithuania. The website offers a system for posting and searching classified ads, including paid VIP listing options and advertising space sales. The business appears to be a small-sized entity named UAB TAI AKTUALU, focusing on serving the local community with a user-friendly classifieds portal. The site integrates Google technologies such as Google Analytics, Google Tag Manager, and Google Sign-In, indicating a moderate level of digital maturity. The presence of a cookie consent banner with granular options demonstrates attention to privacy compliance, particularly GDPR. However, the absence of WHOIS data and registrant information raises concerns about domain registration legitimacy and transparency. The website uses HTTPS, but the use of an outdated jQuery version introduces potential security risks. Overall, the platform is functional and professionally presented but would benefit from technical and security improvements.

U

UAB Tai aktualu

tauragesskelbimai.lt

36

The website www.tauragesskelbimai.lt operates as a local classifieds platform primarily serving the Tauragė region in Lithuania. It offers free ad posting services with optional paid VIP ad placements to increase visibility. The business appears to be a small local entity named UAB Tai aktualu, targeting local residents and businesses. The site content is in Lithuanian and includes categories ranging from transport to real estate and services. Technically, the site uses older JavaScript libraries such as jQuery 1.7.3, Google Tag Manager for analytics, and Google Sign-In for user authentication, indicating moderate digital maturity but some technical debt. Security posture is basic with HTTPS enabled but lacking modern security headers and using outdated libraries that may expose vulnerabilities. Privacy compliance is addressed with a privacy policy and cookie consent banner, but no advanced data protection or incident response policies are evident. WHOIS data is unavailable due to an invalid domain WHOIS response, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and professionally presented but would benefit from technical and security improvements to enhance trust and compliance.

A

Alamo El Salvador

alamo.sv

44

Alamo El Salvador operates a localized car rental service website targeting travelers and residents within El Salvador. The website offers vehicle rental reservations, fleet information, and customer support primarily in Spanish with an English option. The business is positioned as a local branch of the global Alamo brand, focusing on multiple rental locations including airports and city centers. The website integrates modern web technologies such as Bootstrap, jQuery, and third-party booking widgets to provide a functional and responsive user experience. Analytics and marketing tools including Google Analytics and Facebook Pixel are actively used for user tracking and marketing purposes. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and published security policies. Privacy compliance is basic with privacy and cookie policies present but no explicit consent mechanisms. Contact information is available mainly via phone and contact forms, with social media presence on Facebook, Instagram, and WhatsApp. WHOIS data aligns well with the business claims, supporting domain legitimacy. Overall, the website is professional and functional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

A

Autos de Alquiler S.A.

alamo.gt

61

Alamo Guatemala, operated by Autos de Alquiler S.A., is a medium-sized car rental service provider targeting local and international customers in Guatemala. The website offers comprehensive vehicle rental services, including online reservations, international bookings, and customer support. The business positions itself as a trusted local branch of the global Alamo brand, emphasizing customer satisfaction and safety through features like rapid check-in and enhanced vehicle cleaning protocols. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses secure external scripts but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with privacy and cookie policies present but no clear GDPR compliance statements or consent mechanisms. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policies and privacy compliance.

The website www.alamo.co.kr represents a Korean general sales agency for Alamo Rent A Car, specializing in overseas car rentals primarily targeting Korean customers. The business offers real-time booking, reservation management, and customer support services for destinations including the US, Canada, Hawaii, Guam, Saipan, and Europe. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized transportation sector business. Technical infrastructure includes modern JavaScript libraries, Google Analytics, and Google Maps API integration, indicating a moderate level of digital maturity and user engagement tracking. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, warranting further verification. Overall, the website is functional and professional but could enhance trust and compliance through improved security and privacy practices.

E

EU4Digital

eufordigital.eu

70

EU4Digital is a government/non-profit initiative aimed at supporting the digital economy and society in the Eastern Partnership region. The website serves as an information hub providing policy context, thematic areas, news, and resources to stakeholders involved in digital transformation. The initiative is positioned as a regional digital economy support program with a medium organizational size and a founding date consistent with the domain registration in 2019. The site is multilingual and professionally branded, reflecting its official nature and EU funding support. Technically, the website is built on WordPress with modern frameworks like Bootstrap 4 and uses privacy-conscious analytics (Matomo). It is hosted by GoDaddy and employs HTTPS with proper security headers, indicating a good security posture. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Cookie consent is implemented, but explicit privacy and terms of service pages are missing. Security-wise, the site follows best practices with HTTPS and security headers, but lacks publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing no suspicious patterns. Overall, EU4Digital's website is a credible and professional platform supporting a regional digital initiative. Strategic recommendations include publishing comprehensive privacy and security policies, implementing vulnerability disclosure mechanisms, and enhancing accessibility to improve compliance and trust.

H

Holland Casino

hollandcasino.nl

60

Holland Casino is a leading casino operator primarily serving the Netherlands and Belgium markets, offering online casino games and sportsbook services through a regulated platform. The website is built on a modern technology stack centered around Playtech's proprietary framework, integrating advanced telemetry and analytics tools such as Azure Application Insights and AWS RUM for performance and error monitoring. The site is mobile optimized and provides a professional user experience with consistent branding and secure HTTPS connections. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible contact information, represents a gap in transparency and compliance. Security posture is strong with encrypted communications and monitoring but could be improved by adding security headers and formal security policies.

V

Nemokami skelbimai - Vilniaus skelbimai

vilniausskelbimai.lt

37

VilniausSkelbimai.lt is a Lithuanian local classifieds website focused on serving the residents and businesses of Vilnius city and its surrounding district. The platform offers free classified ads posting and browsing services across multiple categories including transport, real estate, jobs, and services. It positions itself as a convenient and efficient portal for local classifieds, targeting a regional audience with a business model based on free listings and advertising revenue. Technically, the website employs standard web technologies including Google Analytics and Google Tag Manager for user tracking, Google Fonts for typography, and custom CSS and JavaScript for UI. The site is accessible, mobile-optimized, and SEO-friendly with structured data for search engines. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism is present. The absence of WHOIS data limits domain trust verification, though the website content and business model appear legitimate. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy practices.

K

Knock Knock WHOIS Not There, LLC

jungespublikum.blog

59

The website 'darstellende künste & junges publikum' is a German language cultural blog focused on performing arts and young audiences, providing networking, event information, funding, and research content. It operates as a niche platform serving professionals and stakeholders in the cultural sector, with a small organizational footprint and hosted on WordPress.com. The technical infrastructure is modern, leveraging WordPress CMS, Jetpack plugins, and Google Fonts, with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security headers could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies, and no GDPR compliance indicators are present. Contact information is limited to a subscription form without direct emails or phone numbers. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security policies.

D

Daily Spoon

dailyspoon.lt

60

Daily Spoon is a Lithuanian-based e-commerce business specializing in superfood and wellness products designed to promote internal well-being and skin health. The company operates a modern, well-structured website with a clear focus on product categories such as supplements, adaptogens, matcha, and ritual accessories. Their market position is niche, targeting health-conscious consumers in Lithuania and possibly neighboring regions. The business model includes direct retail and subscription services, supported by a dedicated subscription domain. Technically, the website is built on WordPress with WooCommerce, leveraging Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools including Facebook Pixel, TikTok Pixel, Hotjar, and Google Tag Manager. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service in the analyzed content. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

P

Paideia Associação Cultural

paideiabrasil.com.br

44

Paideia Associação Cultural is a small Brazilian non-profit cultural association specializing in theater arts and international youth cultural exchanges. The organization operates primarily through theatrical productions, educational courses, and international collaborations with partners in Germany, Japan, and South Africa. Their website reflects a focused mission on youth engagement and cultural dialogue through the arts. Technically, the website is built on WordPress with common plugins and hosted on HostGator Brazil, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies. Contact is available via a contact form, but no direct emails or phone numbers are published on the homepage. Overall, the site is professional and content-rich but could improve privacy compliance and security best practices.

L

La Baracca Testoni ragazzi

testoniragazzi.it

52

La Baracca Testoni ragazzi is a well-established Italian non-profit cultural organization specializing in children's theater and educational programming. With over 45 years of experience, it serves families and schools primarily in Italy, offering theater productions, workshops, and publishing activities. The organization maintains a strong digital presence with a professionally designed WordPress website, multilingual support, and active social media channels. The site demonstrates good SEO and mobile optimization, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the website is trustworthy and aligns well with the organization's mission and history.

T

Talex

talex-sj.pl

39

Talex is a well-established Polish company specializing in the production of agricultural machinery, serving primarily agricultural businesses and farmers. Founded in 2005, the company maintains a medium-sized operation with a consistent brand presence and a professional website built on WordPress. The site is well-optimized for SEO and mobile devices, featuring clear navigation and relevant content that supports its business model of manufacturing and sales. Social media integration and active profiles on Facebook, Instagram, LinkedIn, and YouTube enhance its market reach and customer engagement. Technically, the website leverages modern web technologies including Bootstrap, FontAwesome, and Google Fonts, with Yoast SEO plugin for search optimization. Hosting is provided by cyber_Folks S.A., a reputable Polish hosting provider. The site employs HTTPS with good SSL configuration and includes a comprehensive cookie consent mechanism compliant with GDPR, demonstrating a mature approach to privacy and user data protection. From a security perspective, while HTTPS and cookie consent are properly implemented, the absence of DNSSEC and advanced security headers like Content-Security-Policy indicates room for improvement. No vulnerability disclosure or incident response policies are publicly available, which could be enhanced to improve trust and security posture. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Overall, Talex's digital presence reflects a solid business with good technical and privacy practices, though it would benefit from enhanced security measures and clearer policies on incident response and vulnerability disclosure to further strengthen its risk management and compliance posture.

T

Tepalai Pagal Automobilį

tepalaipagalautomobili.lt

51

TepalaiPagalAutomobili.lt is a Lithuanian website dedicated to providing precise and convenient recommendations for engine oils based on car make, model, and production year. The platform targets Lithuanian car owners seeking reliable automotive maintenance information, offering a rich collection of articles and a user-friendly search interface. The business operates as an informational service with a focus on automotive transportation sector needs. Technically, the site is built on WordPress with modern SEO plugins and Google services integration, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a professional and trustworthy front for its niche audience, with consistent branding and relevant content.

K

Kas skambino

kasskambino.lt

42

Kas skambino is a Lithuanian online platform specializing in identifying unknown phone numbers and protecting users from unwanted calls. The website offers a quick and reliable mobile phone number search service across Lithuania, supported by a community-driven feedback system. The business targets Lithuanian mobile users seeking to verify callers and avoid scams, positioning itself as a trusted local resource. Technically, the site is built on WordPress with modern plugins and themes, leveraging Cloudflare for DNS and security. SEO and mobile responsiveness are well implemented, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enforced, but lacks comprehensive security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and functional with moderate risk exposure.

P

PRsevice.lt

prservice.lt

38

PRsevice.lt is a Lithuanian public relations and communication agency established in 2002, providing services to help businesses and organizations build and maintain relationships with relevant audiences. The company operates primarily in Lithuania and targets clients seeking professional communication solutions. The website is built on WordPress with SEO optimization via Yoast plugin and uses Google Fonts for styling. The technical infrastructure is modern and moderately performant with good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a professional image but would benefit from enhanced security and compliance measures.