Security Directory

F

Fakat

fakat.eu

41

Fakat is a Croatian event agency specializing in comprehensive ideation, organization, and production services for a wide range of events including campaigns, festivals, concerts, exhibitions, corporate events, conferences, and sports events. The company positions itself as a full-service partner offering turnkey solutions and hardware rental with professional staffing. The website is well-structured, professionally designed, and targets businesses and individuals seeking event management services. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Gumby framework, with Google Analytics integrated for visitor tracking. However, there is no evidence of a CMS or hosting provider details. Security posture is moderate with no visible security headers or HTTPS verification, and privacy compliance is low due to missing privacy and cookie policies. Contact information is clearly presented, including company email and phone, along with active social media profiles. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators are present. Overall, the site is functional and professional but would benefit from improved security and privacy compliance.

H

Hrvatske autoceste d.o.o.

hac.hr

57

Hrvatske autoceste d.o.o. is a Croatian state-owned company responsible for the management, construction, and maintenance of highways in Croatia. The website serves as an information portal for motorway users, offering details on tolls, traffic conditions, and related services. It targets both individual drivers and commercial transport operators, positioning itself as the primary authority for highway infrastructure in Croatia. The company provides electronic toll collection services and real-time traffic updates through dedicated mobile applications. Technically, the website is built using modern web technologies including Vue.js, with a responsive design optimized for mobile devices. Security measures include HTTPS enforcement and CSRF token implementation, alongside a comprehensive cookie consent mechanism. However, some security headers are not evident, and no explicit security or incident response policies are published. Overall, the site demonstrates a good balance of usability, compliance, and professionalism, supporting the company's role as a trusted public infrastructure provider.

N

NPS Catalyst Press

npscp.info

56

NPS Catalyst Press is a small informational website dedicated to providing detailed articles and guides on LLC formation services and business startup processes across various US states. The site targets entrepreneurs and small business owners seeking reliable and comprehensive information to facilitate their business formation journey. The business model is primarily content publishing, focusing on niche legal and compliance topics related to LLCs. Technically, the website is built with standard HTML5, CSS3, and JavaScript, featuring a modern, responsive design optimized for mobile devices. While no CMS or advanced frameworks are detected, the site maintains good usability and navigation clarity. Performance is moderate, with no evident third-party analytics or advertising scripts, indicating a lightweight infrastructure. From a security perspective, the site uses HTTPS (implied by URL scheme though SSL configuration details are unavailable), but lacks visible security headers and cookie consent mechanisms. No exposed sensitive data or vulnerabilities are detected in the content or forms. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie policy or GDPR-specific indicators. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website presents a moderate risk profile with no critical security issues but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, enhancing contact transparency, and formalizing security and incident response policies to strengthen trust and compliance.

V

Varaždinska županija

varazdinska-zupanija.hr

44

Varaždinska županija operates as the official regional government portal for the Varaždin County in Croatia, providing a broad range of public services and information to its citizens. The website offers comprehensive content including administrative details, public tenders, news, multimedia, and support programs. It targets residents and stakeholders within the region, positioning itself as a trusted government information source. The business model is centered on public service and transparency, with a medium-sized organizational footprint typical of regional government entities. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, ensuring a responsive and accessible user experience. The site incorporates accessibility tools and maintains good SEO and mobile optimization standards. Performance is moderate, with no critical technical issues detected. The infrastructure supports secure HTTPS connections and employs modern web standards. From a security perspective, the site demonstrates a strong posture with HTTPS enforcement, security headers, and secure form handling. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of a dedicated security policy page, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in security transparency and incident readiness. Overall, the website is a professional, trustworthy, and secure government portal with high content quality and user experience. Strategic enhancements in security policy publication and incident response communication would further strengthen its security maturity and public trust.

P

Plus Hosting Grupa d.o.o.

opencity.hr

44

openCity Hrvatska is a Croatian public sector project aimed at promoting the opening of public sector data in line with EU standards. The website provides interactive visualizations to make public information easily understandable for citizens. The project targets Croatian government entities and the general public interested in transparent data access. The business model focuses on government data transparency and public engagement through digital tools. The website is relatively small in scale, founded in 2018, and hosted by Plus Hosting Grupa d.o.o. The content is primarily in Croatian and is professionally presented with good navigation and mobile optimization. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, CartoDB, and Leaflet for mapping. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. Hosting is provided by a Croatian registrar consistent with the domain registration data. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks important security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The WHOIS data is consistent and indicates a legitimate registration aligned with the website's purpose. Overall, the website is functional and trustworthy for its niche but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

H

Hrvatska zajednica županija

hrvzz.hr

48

Hrvatska zajednica županija is the official Croatian County Association, providing a centralized platform for news, projects, international cooperation, and information about member counties. The website serves local government officials, citizens, media, and international partners, positioning itself as an authoritative source for county-related information in Croatia. Founded in 2008, it maintains a consistent and professional online presence with clear branding and official contact details. Technically, the website employs modern frontend technologies including Swiper.js for interactive sliders, Font Awesome for icons, and Google Fonts for typography. It is hosted with Cloudflare DNS services and uses HTTPS to secure communications. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and modern libraries but lacks explicit security headers and a vulnerability disclosure policy. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing business credibility. No advertising or tracking services are detected, indicating a privacy-respecting approach. Overall, the website is trustworthy and professionally maintained, with a strong alignment between WHOIS data and website content, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

V

Via Medica

viaclub.pl

52

Via Club is a membership program operated by Via Medica, targeting healthcare professionals in Poland. The website offers information about membership cards that provide discounts on medical journals, books, and conferences. The business operates in a niche healthcare publishing and events market, with a clear focus on providing value-added services to medical professionals. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site uses modern frameworks like Bootstrap and FontAwesome, but some legacy scripts like Google Analytics urchin.js are still in use. Security posture is moderate with HTTPS implied but lacking explicit security headers and modern form protections. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, professional, and trustworthy with room for security and privacy improvements.

H

HROTE - Hrvatski operator tržišta energije d.o.o.

hrote.hr

53

HROTE - Hrvatski operator tržišta energije d.o.o. is the Croatian national energy market operator responsible for organizing and regulating the electricity and gas markets, supporting renewable energy initiatives, and managing guarantees of origin. Established in 2005, it serves as a key entity in Croatia's energy sector, providing services to market participants, government bodies, and renewable energy producers. The website reflects a professional and consistent brand presence with comprehensive content tailored to its target audience. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with accessibility features and mobile optimization. It uses Google Analytics for user tracking and is hosted under a Croatian registrar, CARNET, indicating local hosting and compliance. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, explicit security headers and incident response contacts are not clearly published, and no vulnerability disclosure or security.txt file is present. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a solid security posture and business credibility with minor areas for improvement in security transparency and header implementation. The domain registration data aligns well with the business identity, supporting high legitimacy and trustworthiness.

M

Magnus

magnus-mineralbrunnen.de

57

Magnus operates a website hosted on the Wix platform, targeting a German audience as indicated by the language and domain. The site appears to be a corporate or business presence but lacks detailed descriptive content about the company or its services. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, providing moderate performance and good mobile optimization. Security posture is basic, with HTTPS enforced but lacking explicit security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies and no consent mechanisms. Contact information and business details are not explicitly provided, limiting business credibility. Overall, the site is functional but requires enhancements in content, security, and compliance to improve trust and professionalism.

Digital Wizards Group s.r.o. is a Czech-based software development company specializing in custom e-commerce solutions. Their primary offerings include bespoke online shops built on proprietary platforms Rocketoo and RocketooMAX, targeting both B2C and B2B clients. The company has been established since 2012 and maintains a professional online presence with clear business information and a focused service portfolio. The website reflects a niche market position within the Czech e-commerce technology sector, emphasizing tailored development services. Technically, the website is built with standard modern web technologies including HTML5, CSS3, and Google Fonts, hosted likely by WEDOS based on DNS data. The site is mobile-optimized and SEO-friendly but lacks advanced frameworks or CMS indications. Performance is moderate with good mobile responsiveness and basic accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies such as privacy, cookie, or incident response information. No forms or data collection mechanisms are present on the homepage, reducing immediate attack surface but also limiting user engagement options. WHOIS data is consistent and transparent, supporting domain legitimacy. Overall security posture is moderate but could be improved with standard best practices and policy disclosures. The overall risk is low given the professional nature and limited data collection, but the absence of privacy and cookie policies and security headers represents compliance and security gaps. Strategic improvements in these areas would enhance trust and regulatory adherence.

T

TNX s.r.l.

tnx.it

50

TNX s.r.l. is an established Italian technology company specializing in custom software development, web design, e-commerce solutions, and digital marketing services. Founded in 1999 and based in Poggibonsi, Siena, TNX serves over 8000 clients across Italy, positioning itself as a reliable and experienced partner for businesses seeking digital transformation and online presence enhancement. Their portfolio includes proprietary products such as Ordinalo, Invoicex, Avatable, and Ekeepup, indicating a diversified product offering tailored to various business needs. The company emphasizes long-term client relationships and a talented team of developers, designers, and marketing experts.

W

Webgrace, s.r.o.

webgrace.cz

39

Webgrace, s.r.o. is a Czech Republic-based small technology company specializing in professional graphic and web design services including web design, logo creation, HTML coding, copywriting, and advertising graphics. The company emphasizes quality, innovation, and fast delivery, targeting a broad audience from large corporations to small businesses. The website reflects a professional and consistent brand image with a good portfolio and client testimonials. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and YouTube API, with moderate performance and good mobile optimization. However, there is a lack of visible security headers and privacy compliance documentation, which are areas for improvement. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

J

JIROUT REKLAMNÍ AGENTURA s.r.o.

jiroutreklamnipredmety.com

45

JIROUT REKLAMNÍ AGENTURA s.r.o. operates a Czech-language website offering a wide range of custom promotional products and textiles tailored for businesses. Their market position is that of a comprehensive supplier with a broad selection of printed promotional items, calendars, and diaries, targeting companies seeking branded merchandise. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices, and presents a consistent brand image. However, the domain's WHOIS data is missing, raising concerns about domain registration legitimacy. Technically, the site uses modern web technologies but lacks advanced security headers and privacy policies, which impacts its security posture and compliance standing. No blocking or WAF mechanisms were detected, allowing full content access.

C

Centropen

highlighter.sk

39

The website www.highlighter.sk is a product-focused site promoting Centropen highlighter style stationery products, targeting Slovak-speaking consumers. It serves primarily as a brand and product showcase with links to external e-commerce platforms for purchase. The site demonstrates moderate digital maturity with the use of modern web technologies such as Lottie animations and Adobe Typekit fonts, providing a visually engaging user experience. However, it lacks critical compliance and security features such as privacy policy, terms of service, and contact information, which are essential for trust and regulatory adherence. Security posture is minimal with no detected security headers or advanced protections, and no analytics or tracking scripts were identified in the provided content. Overall, the site is functional and professional in design but requires improvements in privacy, security, and contact transparency to enhance trustworthiness and compliance.

C

centropen

highlighter.eu

41

The website www.highlighter.eu represents the product line of highlighters under the centropen brand, focusing on style and color variety. It targets general consumers interested in stationery products. The site features modern web technologies including Lottie animations and Adobe Typekit fonts, providing a visually engaging experience. However, the technical infrastructure lacks visible CMS or hosting provider information, and performance is moderate with basic mobile optimization and accessibility features. Security posture is limited with no detected security headers or explicit SSL configuration details, and privacy compliance is minimal with no privacy or terms of service pages found. Social media presence is established with official Facebook and Instagram links. Overall, the website appears legitimate but would benefit from enhanced security and privacy practices.

J

Justitsministeriet

justitsministeriet.dk

11

Justitsministeriet is the official Danish Ministry of Justice responsible for overseeing the justice system and related authorities in Denmark. The website serves as a comprehensive portal providing information about the ministry, the current minister Peter Hummelgaard, press releases, research reports, career opportunities, and links to subordinate justice authorities. It targets Danish citizens, legal professionals, government employees, and researchers. The ministry manages approximately 20,000 employees and plays a critical role in the Danish government infrastructure. Technically, the website is built on WordPress using the GeneratePress theme, enhanced with jQuery and Swiper.js for interactive elements like carousels. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured data. It uses HTTPS with a strong SSL configuration, though some security headers could be improved. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present on the site, which could be enhanced for transparency. Privacy compliance is good, with clear privacy and cookie policies, though a cookie consent mechanism is not evident. Contact information is clearly provided with official email, phone, and physical address. Overall, the website is trustworthy, professional, and well-maintained, reflecting the stature of a government ministry. The lack of WHOIS data is noted but does not detract from the site's legitimacy given its official content and domain. Strategic recommendations include adding security headers, incident response details, and cookie consent mechanisms to further strengthen security and compliance.

M

Mateřská škola Gatemáček z.s.

gatemacek.cz

55

Mateřská škola Gatemáček z.s. is a small preschool educational institution located in Boskovice, Czech Republic, offering a family-oriented environment for up to 17 children. The school emphasizes holistic child development including social, emotional, creative, physical, and cognitive skills, supported by various activities such as trips, theater, and music lessons. The website is built on the Webnode platform and hosted via AWS Cloudfront CDN, featuring a modern responsive design with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness. Contact information is clearly provided, but no privacy or cookie policies are present, indicating room for compliance improvements.

H

HUSUM WIND

husumwind.com

10

HUSUM WIND operates as a leading renewable energy trade fair and digital content platform primarily serving the German-speaking market. It connects over 600 exhibitors and industry professionals focusing on wind energy, green hydrogen, and related renewable technologies. The platform offers a comprehensive industry directory, news, events, and personalized content to support networking and industry growth. Technically, the website employs modern web technologies including Bootstrap and lazy loading, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The absence of public WHOIS data introduces moderate uncertainty about domain registration transparency, but the professional presentation and content quality support legitimacy. Overall, the website is a credible and valuable resource for renewable energy stakeholders.

Z

Zagreb Tourist Board

meetinzagreb.hr

10

The website meetinzagreb.hr serves as the official digital platform for the Zagreb Tourist Board, focusing on promoting Zagreb as a premier congress and incentive destination. It provides comprehensive information about congress capacities, event planning services, and current news related to business tourism in Zagreb. The site targets event planners, business travelers, and tourists interested in the city, positioning itself as an authoritative source backed by the city’s tourism board. The content is professionally presented in Croatian and English, with clear navigation and social media integration.

H

HolidayCheck

holiday-check.de

61

HolidayCheck is a prominent German travel portal specializing in hotel reviews, travel deals, and booking services. It holds a strong market position in German-speaking countries, offering over 11 million hotel reviews and price comparisons from numerous travel providers. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and rich content. Technically, it leverages modern web technologies including React, Optimizely for experimentation, and privacy management tools to ensure GDPR compliance. Security posture is robust with HTTPS, security headers, and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data aligns with the business claims, indicating a legitimate and consistent domain registration. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its large user base.

A

Ameropa-Reisen

ameropa.de

72

Ameropa-Reisen is a German travel company specializing in train travel and city vacation packages, targeting travelers interested in rail-based tourism. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including Google Tag Manager and Cookiebot for consent management, hosted on Colt infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit contact information slightly reduces the security maturity. The site extensively uses third-party analytics and marketing tools, reflecting a mature digital marketing strategy but requiring ongoing privacy compliance vigilance. Overall, the website is trustworthy and well-positioned in its niche, with room for improvement in security policies and transparency.

H

HolidayCheck

holidaycheck.com

61

HolidayCheck is a prominent German travel portal specializing in hotel reviews, travel bookings, and price comparisons. It serves a large audience in German-speaking countries with over 11 million hotel reviews and offers a comprehensive platform for package holidays, car rentals, and travel inspiration. The website demonstrates a mature digital presence with a modern React-based tech stack, optimized performance, and strong mobile responsiveness. Privacy and cookie consent mechanisms are implemented in compliance with GDPR. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not publicly disclosed. Overall, HolidayCheck presents a trustworthy and professional online travel service with a strong market position.

M

mBank S.A.

mbank.sk

65

mBank S.A. operates a comprehensive online banking platform targeting individual customers in Slovakia. The website offers a wide range of financial services including bank accounts, loans, mortgages, investments, insurance, and contactless payment options. The bank positions itself as a modern, customer-centric online bank with over 300,000 clients for its main account product, emphasizing ease of use, security, and accessibility. The site is professionally designed with clear navigation and mobile optimization, supporting a seamless user experience.

V

VELUX FONDEN

veluxfonden.dk

11

VELUX FONDEN is a well-established Danish non-profit foundation founded in 1999, dedicated to supporting democratic and sustainable societal development through grants in research, social initiatives, culture, and environmental projects. The website is professionally designed using Drupal 10, featuring comprehensive content, clear navigation, and mobile optimization. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and security headers. Privacy compliance is strong with a detailed privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the foundation demonstrates high business credibility and trustworthiness with transparent contact information and governance disclosures.

H

HolidayCheck

holidaycheck.de

61

HolidayCheck is a prominent German travel portal specializing in hotel reviews, price comparisons, and travel bookings. It holds a strong market position in German-speaking countries, offering over 11 million hotel reviews and a variety of travel services including package holidays, car rentals, and last-minute deals. The platform targets travelers seeking reliable hotel information and competitive pricing. Technically, the website employs modern web technologies such as React, integrates performance and analytics tools like New Relic and Google Tag Manager, and demonstrates excellent mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses standard security headers, and manages user consent in compliance with GDPR. However, it lacks publicly available dedicated security policies and incident response information. Overall, HolidayCheck presents a professional, trustworthy, and user-friendly online presence with a strong compliance posture.

N

Net media Sistemi d.o.o.

sistemi.hr

67

Net media Sistemi d.o.o. is a well-established Croatian technology company specializing in web shop creation, web and mobile application development, intranet and internet solutions, system integration, and hosting services. With over 25 years of experience and a strong client base, they provide comprehensive digital business solutions primarily targeting B2B customers in Croatia and the surrounding region. Their website reflects a mature digital presence with modern technologies and good user experience. The company holds multiple ISO certifications, enhancing their credibility and trustworthiness. Technically, the site uses a modern tech stack including .NET Core, Angular, and 2sxc CMS, and is hosted under a Croatian academic registrar, indicating local infrastructure.

Y

Ypsilon.Net AG

specials.de

56

Specials.de is a German-based tourism partner program operated by Ypsilon.Net AG, offering affiliate marketing services, booking tools, and advertising materials for travel products including flights, hotels, car rentals, and package tours. The company positions itself as a reliable full-service provider with in-house technology and a dedicated call center staffed by trained travel agents. The website is professionally designed, well-structured, and targets a broad audience including adults, youth, students, and travel agencies. Technically, the site uses standard web technologies such as jQuery and custom scripts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and comprehensive legal documentation.

I

IAI

idobooking.com

73

IdoBooking is a technology company offering an online and mobile booking system, including channel management and reservation management services. The business targets companies needing efficient booking solutions, positioning itself as a provider of convenient and time-saving booking technology. The company is based in Poland, with clear contact information and structured data supporting its legitimacy. Technically, the website uses modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for cookie consent management. The site is HTTPS secured and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks some security headers and published security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear professional and trustworthy. Privacy compliance is moderate due to missing explicit privacy and terms of service pages. Overall, the website is functional, professional, and secure but would benefit from improved transparency and domain registration clarity.

P

Peka Sp. z o.o.

peka.pl

54

Peka Sp. z o.o. is a Polish company specializing in ergonomic and modern furniture systems primarily for kitchen cabinetry, including corner cabinet systems and various kitchen and furniture accessories. Established in 2003, the company appears to have a solid market presence in Poland's furniture manufacturing and retail sectors. The website reflects a professional business with clear branding and relevant content targeted at furniture manufacturers, retailers, and end consumers interested in kitchen solutions. Technically, the website uses a modern CMS (Hummerce), integrates Google Analytics and Tag Manager, and employs Cookiebot for GDPR-compliant cookie consent management. The site is served over HTTPS with no detected blocking or WAF interference, indicating good accessibility and security practices. However, some security headers are not explicitly detected, and DNSSEC is not enabled, which could be improved. Privacy compliance is good with a cookie consent mechanism but lacks an explicit privacy policy and terms of service in the provided content. Overall, the website and domain registration data indicate a legitimate and trustworthy business with room for improvement in security and compliance documentation.

N

Nomet

nomet.pl

60

Nomet is a well-established Polish manufacturing company specializing in modern furniture accessories such as handles, baskets, bathroom and kitchen equipment, wardrobe fittings, and decorative articles. The company emphasizes its 40 years of experience, 100% Polish capital ownership, and modern production facilities, positioning itself as a trusted B2B supplier in the furniture manufacturing sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeted at furniture manufacturers and interior designers. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery, Swiper.js, Tippy.js, and Slick Carousel, along with Google reCAPTCHA for form security and Facebook Pixel for marketing analytics. The site is served over HTTPS with good SSL configuration, although security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. From a security perspective, the site demonstrates a moderate security posture with HTTPS, secure forms, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. WHOIS data is unavailable due to .pl registry policies, but the website content and business information indicate legitimacy and trustworthiness. Overall, the website presents a professional and credible business front with good technical implementation and privacy compliance. Strategic improvements in security headers, incident response transparency, and contact information visibility would further strengthen the security posture and trustworthiness of the site.

The website www.oegro.at is currently inaccessible due to a Cloudflare security challenge page that requires human verification via Turnstile captcha. This prevents access to any substantive content, metadata, or business information. Consequently, no privacy policies, cookie policies, terms of service, contact information, or security policies are visible. The technical infrastructure indicates use of Cloudflare for security and content delivery, but no CMS or additional frameworks are detectable. The lack of accessible content and metadata severely limits the ability to assess the company's business model, market position, or security posture. The security challenge indicates a protective stance against automated access but also restricts external analysis. Overall, the site’s digital maturity and compliance posture cannot be evaluated with the current access restrictions.

B

Bundesministerium für Wirtschaft und Energie

deutschland-machts-effizient.de

68

The website energiewechsel.de is an official German federal government campaign site managed by the Bundesministerium für Wirtschaft und Energie (Federal Ministry for Economic Affairs and Energy). It focuses on promoting energy efficiency, renewable energy, and climate protection through public awareness, funding information, and educational content. The site targets German citizens, businesses, and municipalities, providing comprehensive resources and support for the energy transition. Technically, the site uses modern web technologies including jwplayer for video content, and is hosted on managed IP infrastructure with secure HTTPS connections. Privacy and cookie policies are present and GDPR compliant, with explicit user consent mechanisms for video data processing. Security posture is strong with no critical vulnerabilities detected, though some security headers could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO. No WAF or blocking mechanisms interfere with content access.

S

Stiftung Warentest

test.de

60

Stiftung Warentest operates as a well-established independent consumer testing and advisory organization in Germany, providing product reviews and guidance across various sectors including electronics, household, health, finance, insurance, and taxes. The website reflects a professional and trusted brand with high-quality content tailored to general consumers seeking reliable product information. Technically, the site employs modern web standards and a custom CMS, hosted by a professional provider (iwelt AG), ensuring a stable and responsive user experience. However, the absence of explicit privacy, cookie, and security policies, as well as lack of visible contact information, indicates gaps in compliance and transparency. Security posture is limited due to missing security headers and incident response details, which could be improved to enhance trust and resilience. Overall, the site is safe and trustworthy but would benefit from enhanced privacy and security disclosures.

N

Netsimple Conspiracy s.r.o.

netsimple.cz

46

Netsimple Conspiracy s.r.o. is a Czech Republic-based small web development and online marketing company specializing in custom websites and e-commerce solutions. The company emphasizes bespoke design and coding without templates, serving clients across the Czech Republic with over 11 years of experience. Their website reflects a professional digital presence with clear contact information, client references, and integrated analytics and spam protection tools. Technically, the site uses a proprietary CMS, jQuery, Google Analytics, and Google reCAPTCHA, with moderate performance and good mobile optimization. Security posture is decent with HTTPS and CAPTCHA but lacks explicit security headers and privacy policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small businesses. Overall, the site is safe, professional, and business-focused with room for improvement in privacy and security transparency.

KRAXNET s.r.o. is a small technology company based in the Czech Republic with a domain registered since 2000, indicating a well-established presence. The website serves primarily as a contact portal with minimal content and no visible e-commerce or service offerings detailed. The business model and market position are not explicitly stated, but the company appears to maintain a professional, static web presence using Jekyll technology. Technical infrastructure is basic, with no advanced CMS or dynamic content detected. The site lacks modern security headers and privacy policies, which are areas for improvement. No analytics or tracking scripts are present, suggesting minimal user data collection. Security posture is modest, with a vulnerability disclosure policy indicating some security awareness but no incident response or certifications listed. Overall, the site is legitimate and consistent with the WHOIS data but would benefit from enhanced security and compliance measures.

SkyDemon, operated by Divelements Limited, is a specialized software provider focused on VFR flight planning and GPS navigation for pilots. The company offers a multi-platform solution supporting iPad, Android, iPhone, and PC users, positioning itself as a leading provider in the general aviation software market. The website content is professional and well-structured, targeting pilots seeking efficient and safe flight planning tools. Technically, the website uses standard web technologies such as HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. Hosting is provided by EnCirca, Inc., and the domain is well-established since 2009. However, there is room for improvement in accessibility and SEO optimization. No advanced frameworks or CMS were detected. From a security perspective, the website benefits from domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance security posture. No explicit privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. The absence of vulnerability disclosure or incident response information suggests limited transparency in security practices. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user trust and regulatory adherence.

F

Flying Revue

flying-revue.com

9

Flying Revue is a specialized aviation media platform targeting pilots and aviation enthusiasts, primarily serving the Czech and international aviation community. The website offers aviation news, event coverage, and aviation-related apps, positioning itself as a niche media outlet with a focus on quality content and community engagement. The business model relies on content publishing, app offerings, and advertising revenue. Technically, the site uses a mix of legacy and modern web technologies including jQuery 1.8.3, Google Analytics, Facebook Pixel, and Google AdSense, hosted on a CMS platform identified as Fonio. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS enforced and consent mechanisms for cookies, but the use of outdated JavaScript libraries and lack of security headers are areas for improvement. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, although the website content and social media presence support its authenticity. Overall, the site scores moderately high in content quality and security but should address domain registration transparency and update technical components to enhance trust and security.

C

Coppenrath Verlag

coppenrath.de

66

Coppenrath Verlag is a medium-sized German publishing company specializing in books and gifts for children and adults. The company operates multiple imprints and offers products through its own website and partner online shops. The website is professionally designed using the Shopware CMS platform, featuring modern JavaScript technologies and responsive design. Marketing and analytics tools such as Facebook Pixel, Pinterest Tag, and Google Tag Manager are integrated to support business intelligence and advertising efforts. Security posture is solid with HTTPS and captcha protections, though some security headers and explicit policies are missing. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website presents a trustworthy and professional image consistent with its business sector.

S

Semaco Invest Group

semaco-ig.pl

10

Semaco Invest Group is a well-established real estate developer based in Kraków, Poland, with over 30 years of experience and a diversified business model that includes real estate development, brokerage, manufacturing, and tourism. The company holds a strong market position locally and operates several subsidiaries that complement its core business. The website reflects a professional digital presence with good content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies and integrates marketing and consent management tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and secure forms, though improvements in security headers and DNSSEC are recommended. Privacy compliance is supported by a GDPR privacy policy and cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

A

ap7 Sp. z o.o.

ap7.pl

10

ap7 Sp. z o.o. is a Krakow-based real estate agency with over a decade of experience, offering a broad range of services including property brokerage, financial consulting, insurance solutions, legal and notarial services, and construction and interior design projects. The company targets both individual and business clients, positioning itself as a comprehensive real estate service provider in the Polish market. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses modern web technologies such as Angular 7, Google Tag Manager, and Facebook Pixel, hosted by OVH SAS, ensuring a stable and performant platform. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy and well-maintained, with room for enhancements in security policy transparency and accessibility.

S

Solarwatt

solarwatt.com

65

Solarwatt is a premium provider of solar energy solutions, specializing in photovoltaic systems integrated with battery storage, electric vehicle charging, and heat pump technologies. The company targets homeowners and businesses seeking clean and smart energy solutions. Their market position is that of a high-quality, innovative energy solutions provider with a focus on sustainability and smart integration. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with a modern tech stack including JavaScript and CSS. The site is mobile optimized and includes SEO best practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, but lacks visible security headers and explicit security policies. The absence of WHOIS registration data is a concern for domain legitimacy, though the website content and branding appear professional and trustworthy. Overall, the site demonstrates a good balance of business professionalism and technical implementation but would benefit from enhanced privacy documentation and security transparency.

S

Poštovní schránky :: poštovní schránky a listovní schránky

slansky.cz

51

The website www.slansky.cz operates as a specialized retail e-commerce platform focused on the manufacture, sale, installation, and servicing of postal mailboxes primarily targeting customers in the Czech Republic and Slovakia. The business offers a comprehensive product catalog with detailed pricing and product images, supported by services such as free installation and sample loans. The site demonstrates a professional and consistent brand presence with clear navigation and relevant content tailored to residential and commercial clients. Technically, the website leverages a modern e-commerce platform (Eshop-rychle.cz) and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Matomo, and Seznam Retargeting. The site is served over HTTPS with cookie consent mechanisms aligned with GDPR requirements, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility features could be improved. From a security perspective, the site employs HTTPS and secure login forms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection limits domain trust assessment but is justified for this business type. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust.

E

Erste banka

erstebank.hr

64

Erste banka is a well-established Croatian financial institution operating since 2004, offering a broad range of banking services including accounts, loans, credit cards, investments, and insurance. The website reflects a mature digital presence with a modern tech stack, responsive design, and good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not prominently disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Erste banka demonstrates a high level of business credibility and digital maturity appropriate for a leading bank in Croatia.

S

shz.de

shz.de

65

shz.de is a well-established regional news portal serving Schleswig-Holstein, Germany, providing current news in politics, economy, technology, and sports. The site targets residents and readers interested in regional news, operating primarily on a subscription and advertising business model. It holds a strong market position as a leading regional media outlet with comprehensive content and consistent branding. Technically, the website employs modern web technologies including JavaScript frameworks, consent management platforms, and paywall solutions, hosted on Basecom infrastructure. The site demonstrates good mobile optimization and SEO practices, ensuring accessibility and user engagement. Security-wise, the site enforces HTTPS, implements security headers, and uses a consent management platform, reflecting a mature security posture. However, it lacks a dedicated security policy and incident response contact information, which are areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, with moderate user tracking balanced by consent mechanisms.

R

Reimo

reimo.com

61

Reimo operates an established e-commerce platform specializing in camping accessories, motorhome parts, and camper van materials primarily targeting camping enthusiasts and vehicle owners in Germany. The website is built on the Shopware platform and demonstrates a good level of digital maturity with responsive design, multi-language support, and integration of customer review widgets. Security posture is adequate with HTTPS enforcement and CSRF protections, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a concern but does not currently undermine the professional presentation and trust signals on the site. Overall, the business appears credible with room for improvement in privacy and security transparency.

F

Future Frontend

futurefrontend.com

44

Future Frontend is a specialized conference series focused on frontend development, targeting senior developers and designers interested in emerging trends. The business operates primarily through annual events held in Finland, with workshops and networking opportunities. The website reflects a niche, quality-oriented event organizer with a clear focus on community and knowledge sharing. Technically, the site is built with modern web standards, leveraging Cloudflare for hosting and CDN, and uses JavaScript libraries such as Leaflet for maps. The site is performant, mobile-optimized, and SEO-friendly, though accessibility is basic. Security posture is solid with HTTPS and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with no signs of malicious activity or content safety concerns.

O

OPEL Automobile GmbH

opel.de

10

Opel Automobile GmbH operates a professional and comprehensive automotive website targeting both private and business customers in Germany. The site offers vehicle configuration, test drive booking, and sales of new and used vehicles, including electric and hybrid models. The company is positioned as a major player in the transportation sector, supported by its parent company Stellantis. Technically, the website leverages Adobe Experience Manager, Google Tag Manager, and Dynamic Yield for content management, analytics, and personalization, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR consent mechanisms in place, although explicit security headers and detailed security policies are not evident. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in privacy policy visibility and security disclosures.

A

Acord Comú del empleats públics de l'Administració Local de Catalunya

acordcomu2015.com

57

The website 'Acord Comú del empleats públics de l'Administració Local de Catalunya' serves as an informational portal for public employees of local government entities in Catalonia with populations under 20,000. It provides content related to employment agreements and local administration labor conditions. The site is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. While the site is accessible and presents relevant content, it lacks critical privacy and contact information, which impacts user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and policies. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, which should be addressed to improve trustworthiness and credibility.

E-Stockagesecurise.com is a French technology company specializing in secure electronic archiving and long-term data backup solutions. The company offers a digital safe that provides electronic sealing, signature, and proof of document integrity, targeting businesses and organizations requiring trustworthy document storage. The website is professionally designed, leveraging modern web technologies such as Vue.js and Laravel's Ziggy routing helper, indicating a mature technical infrastructure. The site is mobile-optimized and provides clear navigation and contact options, enhancing user experience. Security posture is solid with HTTPS enforced and secure form endpoints, though explicit security headers and incident response policies are absent. Privacy and legal policies are comprehensive and hosted on the parent company domain, Dematis, which also appears as the legal entity behind the service. The absence of WHOIS data for the domain reduces trust slightly, but the overall business credibility remains high due to consistent branding and partner ecosystem. Strategic improvements include adding security headers, incident response information, and cookie consent mechanisms to enhance compliance and security maturity.

V

Vonekl s.r.o.

vonekl.cz

45

Vonekl s.r.o. operates as a wholesale distributor specializing in flowers and floral accessories, targeting business customers such as florists and companies with valid business identification numbers. The company maintains a strong market position in the Czech Republic with a comprehensive product range including cut and potted flowers, decorations, and an online ordering system. Their business model focuses on B2B wholesale and value-added services such as seminars and floral competitions. Technically, the website employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and improving accessibility features to strengthen compliance and user trust.