Security Directory

Z

Zagorje Priroda

zagorje-priroda.hr

54

Zagorje Priroda is a Croatian public institution dedicated to the protection and management of natural protected areas within the Krapinsko-Zagorska County. The organization focuses on environmental conservation, education, research, and public engagement through events and publications. Their website serves as an informative portal for the public and stakeholders, highlighting their activities, projects, and news. The institution is regionally positioned as a key governmental entity for nature protection with a clear mission and community focus. Technically, the website is built on WordPress CMS with common plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Google Tag Manager for traffic and user behavior analysis. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security headers are missing, and the jQuery version is outdated, which could pose minor security risks. From a security and compliance perspective, the website enforces HTTPS and does not expose sensitive data. It provides a comprehensive privacy policy in Croatian, indicating GDPR awareness, though it lacks an explicit cookie consent mechanism. Contact information is clearly presented, including email, phone, and physical address, enhancing trust. No incident response or security policy pages were found, suggesting room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and serves its purpose well. Strategic improvements in security headers, updating libraries, and implementing cookie consent would enhance its security posture and compliance. The domain registration data aligns well with the organization's claims, supporting legitimacy and credibility.

The website represents the Zavod za prostorno uređenje Krapinsko-zagorske Županije, a Croatian government institute responsible for spatial planning in the Krapinsko-zagorska County. It provides official news, spatial plans, documents, and public information access, targeting local residents, government officials, and urban planners. The site is well-structured with clear navigation and consistent branding, reflecting its role as a regional government authority. Technically, the site uses Bootstrap and jQuery with Google Analytics for visitor tracking. It is served over HTTPS with a cookie consent mechanism compliant with GDPR, although some security headers are missing. No forms or social media links were detected in the analyzed content. WHOIS data confirms the domain's legitimacy and appropriate registration details consistent with a government entity. Overall, the website is professional, trustworthy, and secure with room for improvement in security headers and incident response transparency.

P

Poduzetnički centar Krapinsko-zagorske županije d.o.o.

poduzetnickicentar-kzz.hr

48

Poduzetnički centar Krapinsko-zagorske županije d.o.o. is a regional business support organization based in Croatia, focused on fostering entrepreneurship, innovation, and business growth within the Krapinsko-zagorska County. The center offers a variety of services including project preparation, mentoring, coworking spaces, and specialized programs such as the Health IT Academy and Invest in Zagorje. Their market position is that of a trusted regional facilitator supported by local government and EU initiatives. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO plugins, ensuring good SEO and responsive design. The site uses HTTPS with a valid SSL certificate and integrates Google Analytics for visitor tracking. While the site performs moderately well, there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks published security policies, incident response contacts, and security headers which are recommended for enhanced protection. No vulnerabilities or suspicious content were detected. The WHOIS data confirms the domain's legitimacy and consistency with the business's regional focus. Overall, the website is professional, trustworthy, and serves its business purpose well, but could improve privacy compliance and security posture by publishing relevant policies and implementing additional security headers.

Z

Zagorska razvojna agencija

zara.hr

47

Zagorska razvojna agencija (ZARA) is a regional development agency focused on fostering sustainable growth and economic development in Krapinsko-zagorska County, Croatia. The agency acts as a partner for excellence and creativity, supporting local government bodies, public institutions, and businesses through project management, consulting, and strategic planning. It holds recognized certifications such as ISO 9001, ISO 21502, and ISO 26000, and is a member of the UN Global Compact network, underscoring its commitment to sustainability and governance standards. Technically, the website is built on WordPress using Elementor, with modern web technologies including jQuery and Font Awesome. It integrates marketing tools like Brevo for newsletter management and employs accessibility and GDPR compliance plugins. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not clearly detected, and there is no dedicated security policy or incident response contact information, representing areas for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively communicates its mission and services to its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response visibility to further strengthen its security posture.

M

Morgan Code

morgancode.com

52

Morgan Code is a small software development agency founded in 2020, specializing in custom software solutions, mobile applications, web development, and IT consulting. The company emphasizes a personalized approach to client problems and aims to improve business scalability through technology. Their market position is that of a niche agency with a focus on tailored solutions for businesses. Technically, the website is built on WordPress using Elementor, with modern JavaScript and PHP technologies, and is hosted behind Cloudflare DNS. The site is moderately performant and mobile-optimized with good SEO practices. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA for form protection but lacks DNSSEC and security headers, and does not publish security or incident response policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

T

Telia Eesti AS

winterplace.ee

45

Otepää Winterplace is Estonia's largest winter park located in the city center of Otepää, offering a variety of winter leisure activities including snowtubing, ice skating, igloo cinema, and play areas for children. The business targets families, youth, and groups such as schools and companies, positioning itself as a premier winter entertainment destination in Estonia. The website reflects a well-structured and visually appealing platform with integration of social media and mapping services to enhance user engagement. Technically, the site employs modern JavaScript libraries and Google services, managed via the Greativ CMS, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic consent mechanisms, but lacks explicit privacy policies and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy online presence for the business.

M

Mulgi Kultuuri Instituut

mulgimaa.ee

45

The website mulgimaa.ee serves as a cultural and tourism portal for the Mulgimaa region in Estonia, promoting local traditions, events, and products. It is operated by regional cultural institutions such as Mulgi Kultuuri Instituut and Mulgimaa Arenduskoda, which are small-sized organizations focused on community development and cultural preservation. The site provides comprehensive information on events, local crafts, tourism guides, and news relevant to the Mulgimaa area. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, Facebook SDK, and YouTube iframe API, built on the Greativ CMS platform. It is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider, with a domain age consistent with the business history. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic, lacking a privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-structured, targeting tourists, cultural enthusiasts, and the local community.

Z

Zone Media OÜ

sunset.ee

45

Club Sunset is a well-established hospitality business operating a popular summer nightclub and event venue located in Pärnu, Estonia. The website reflects a professional and modern digital presence with clear branding and a focus on nightlife, events, and cocktail services. The business targets a mature audience interested in entertainment and social gatherings during the summer season. The domain age and WHOIS data confirm a stable and legitimate operation with consistent registration details matching the business location. Technically, the website uses a proprietary CMS (Greativ), modern JavaScript libraries such as Swiper.js for UI components, and integrates Google Fonts and Google Tag Manager for analytics and tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features appear basic, and performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and does not provide a privacy policy or cookie consent mechanism, which are critical for GDPR compliance. No vulnerability disclosure or incident response information is available, indicating room for improvement in security transparency and user trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is credible and professionally maintained but should prioritize privacy compliance and security best practices to enhance trust and regulatory adherence. Adding privacy and cookie policies, security headers, and vulnerability disclosure would significantly improve the security posture and user confidence.

V

Valga Gümnaasium

valgagym.ee

50

Valga Gümnaasium is a secondary educational institution located in Valga, Estonia, with a domain established in 2012. The website serves students, parents, staff, and alumni by providing information about school activities, news, schedules, and contact details. The institution maintains a solid local presence with partnerships and affiliations to various educational and governmental organizations. Technically, the website uses a modern CMS (Greativ), integrates Google Fonts, Google Analytics, and Facebook SDK for social media and analytics purposes. The site is mobile-optimized and offers clear navigation and relevant content. Security posture is adequate with HTTPS enabled and some consent management for cookies, but lacks explicit privacy and cookie policies and security headers. Overall, the site is professional, trustworthy, and safe for general audiences.

U

Ugandi Resto

ugandiresto.ee

44

Ugandi Resto is a well-established restaurant located in Otepää, Estonia, offering a unique blend of Nordic and Mediterranean cuisine. The business has a strong local presence with over 23 years of history and multiple prestigious awards, positioning it as a reputable hospitality provider in the region. The website reflects a professional and customer-friendly approach with clear service offerings including dining, private event hosting, and gift cards. Technically, the website uses modern web technologies and a proprietary CMS, delivering a good user experience with mobile optimization and rich content. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies and limited security headers. The security posture is adequate but could be enhanced to meet higher standards. Overall, the site is trustworthy and well-maintained but should address compliance and security improvements to reduce risk and enhance user trust.

O

OÜ Sahkar TT

sahkar.ee

43

OÜ Sahkar TT is a small Estonian company specializing in external network construction and large-scale earthworks, offering services such as material sales and transport, machine rental with operator, and trailer transport. The company targets businesses and clients requiring construction and logistics services within the region. The website is professionally designed using the Greativ CMS platform and incorporates modern JavaScript libraries for enhanced user experience. It is hosted by Zone Media OÜ and uses HTTPS to secure communications. However, the site lacks privacy and cookie policies, which are critical for GDPR compliance. Security headers are also missing, representing an area for improvement. Overall, the website is functional, safe, and trustworthy but could benefit from enhanced privacy and security measures.

E

Eesti Lihaveisekasvatajate Ühistu

veis.ee

43

Eesti Lihaveisekasvatajate Ühistu operates as a cooperative primarily focused on the purchase, sale, and brokerage of beef cattle in Estonia. Founded in 2015, it serves a significant network of over 200 cattle breeders and is a founding member of a larger association with 400+ members. The cooperative maintains a modern livestock collection center and targets both domestic and international markets. Their business model centers on providing reliable and professional services to cattle breeders, ensuring quality livestock for various purposes including breeding and meat production. Technically, the website is built on the Greativ CMS platform and employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Hosting is provided by Zone Media OÜ, a known Estonian hosting provider, consistent with the domain registration data. From a security perspective, the site uses HTTPS and client-side form validation but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The business provides clear contact information but does not disclose incident response or vulnerability disclosure policies. Overall, the website presents a trustworthy and professional image suitable for its target audience of livestock breeders. Strategic improvements in privacy compliance and security hardening would enhance its risk profile and user trust.

T

Tirespot OÜ

tirespot.ee

43

Tirespot OÜ is a small Estonian company specializing in the retail and servicing of automotive tires and related products and services. The company operates primarily in Pärnu, Estonia, offering a wide range of tires including summer and winter tires, tire changes, rim sales and restoration, oil changes, and air conditioning services. The website reflects a well-established regional business with a clear focus on automotive maintenance and tire sales. The company holds a Gasellfirma certification, indicating strong business performance and growth. Technically, the website is built on the Greativ CMS platform and leverages modern web technologies including Google Tag Manager, Google Analytics, Facebook SDK, and lazy loading libraries. The site is mobile-optimized with good SEO practices and clear navigation. Hosting is provided by Zone Media OÜ, consistent with the Estonian business location. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security policies, incident response contacts, and advanced security headers are not evident. No security blocking or WAF challenges were detected, and no vulnerabilities were apparent from the content analysis. Overall, the website presents a professional and trustworthy online presence for a small automotive retail and service business in Estonia. Strategic improvements could include publishing a security policy, incident response information, and enhancing security headers to strengthen the security posture further.

K

Kalev Spa Hotell & Veekeskus

kalevspa.ee

44

Kalev Spa Hotell & Veekeskus is a well-established hospitality and wellness business located in Tallinn, Estonia, known for its water park, spa services, hotel accommodations, and sports club. The website reflects a mature digital presence with multi-language support, professional design, and comprehensive service information targeting tourists, families, and business clients. Technically, the site uses modern JavaScript libraries, a CMS platform (Greativ), and integrates with third-party booking and marketing tools, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

E

Ekotek Eesti OÜ

ekotek.com

45

Ekotek Eesti OÜ operates as the authorized distributor of Victorinox products in the Baltic region, primarily serving Estonia with a retail presence in over 50 stores. The company focuses on offering high-quality Victorinox pocket tools, kitchen knives, and corporate gifting solutions, targeting both consumers and business clients. Founded in 1997, Ekotek has established a reputable market position as a trusted regional distributor. Technically, the website is built on the Greativ CMS platform and leverages modern JavaScript libraries such as Swiper.js and Plyr.js for enhanced user experience. It integrates Google Fonts, Facebook SDK, and YouTube APIs, indicating a mature digital infrastructure. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking. However, DNSSEC is not enabled, and explicit security headers are not detected in the HTML content, suggesting room for improvement in hardening security posture. No incident response or vulnerability disclosure policies are publicly available, which could be enhanced to improve trust and compliance. Overall, Ekotek's website is professional, trustworthy, and compliant with privacy regulations, with a solid business foundation and a clear focus on retail distribution. Strategic improvements in security headers and DNS security would further strengthen its security posture.

E

Ekstreemmoto OÜ

ktm.ee

43

Ekstreemmoto OÜ operates the ktm.ee website, serving as a regional retailer specializing in KTM motorcycles and related riding gear in Estonia, with physical stores in Tallinn and Tartu. The website provides comprehensive product categories including onroad and offroad motorcycles, used bikes, powerwear, and rental services. The company targets motorcycle enthusiasts and buyers within Estonia, positioning itself as a trusted local dealer with a decade-long presence since 2010. Technically, the website is built on the Greativ CMS platform and integrates modern web technologies such as Google Analytics, Facebook SDK, and various JavaScript libraries to enhance user experience and marketing capabilities. The site is mobile-optimized and provides clear navigation and professional design.

U

Unicount OÜ

unicount.eu

65

Unicount OÜ operates a professional online platform specializing in company formation, virtual office, and accounting services tailored primarily for Estonian e-residents. The company positions itself as a trusted European agent with a strong market presence, supporting multiple languages and serving founders from various countries. Their business model leverages digital identity and e-residency to streamline company registration and management processes. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and spam protection, though some security headers could be enhanced. Overall, the site demonstrates strong compliance with GDPR and privacy regulations, providing clear policies and consent management. The domain registration details align well with the business claims, reinforcing legitimacy and trustworthiness.

S

Sparta Spordiselts

sparta.ee

46

Spordiklubi Sparta is a well-established sports club based in Tallinn, Estonia, offering a wide range of fitness and sports services including gym access, group trainings, personal training, and youth sports programs. The club targets a broad audience from beginners to professional athletes and maintains a strong local presence with active social media channels and community engagement. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its offerings. Technically, the site uses modern JavaScript frameworks, Google Analytics, Microsoft Clarity, and a proprietary CMS called Greativ, ensuring a good user experience and performance. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with transparent contact information and no detected security or content safety issues.

Z

Zone Media OÜ

t1venue.ee

44

T1 Venue is a modern event venue located in Tallinn, Estonia, operated by Zone Media OÜ. The venue offers versatile spaces suitable for galas, conferences, receptions, and other special events, with a capacity of up to 800 people. The website is professionally designed using the Greativ CMS platform, featuring responsive design and integration with Google Analytics and Tag Manager for marketing and analytics purposes. The technical infrastructure is solid with HTTPS enabled, but lacks DNSSEC and some security headers. Privacy compliance is minimal, with no dedicated privacy or cookie policy pages, though cookie consent is managed via script. Overall, the website presents a trustworthy and professional image suitable for its hospitality industry niche.

Z

Zone Media OÜ

unibetarena.ee

44

Unibet Arena is a modern event and entertainment venue based in Estonia, operated by Zone Media OÜ since 2022. The website provides comprehensive information about upcoming events, venue spaces, and visitor services, targeting event attendees and organizers. The business model focuses on venue rental and event hosting, supported by catering and technical services. The site is professionally designed with consistent branding and good user experience, optimized for mobile devices. Technically, it uses modern JavaScript libraries, Google APIs, and is hosted on Microsoft Online infrastructure. Security posture is solid with HTTPS, security headers, and privacy-conscious cookie consent, though some improvements are recommended such as fixing lazy loading errors and adding explicit security policies. Overall, the website is trustworthy and compliant with GDPR, with a clear business presence and no suspicious indicators.

I

International Federation of Biomedical Laboratory Science

ijbls.org

45

The International Journal of Biomedical Laboratory Science (IJBLS) is a specialized online peer-reviewed academic journal published bi-annually by the International Federation of Biomedical Laboratory Science (IFBLS). It serves the international biomedical laboratory community by disseminating original research and reviews across multiple disciplines such as clinical chemistry, molecular diagnostics, immunology, hematology, and more. The website provides access to current and archived issues, editorial board information, and contact details, positioning itself as a niche but credible source within healthcare education and research publishing. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, delivering a responsive and moderately performant user experience. The site is mobile-optimized and structured with clear navigation and content organization. However, it lacks advanced SEO and accessibility features and does not implement modern security headers or privacy/cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS but does not show evidence of security headers or explicit privacy compliance measures. Emails are obfuscated to reduce spam risk. The WHOIS data is unavailable due to a malformed query response, limiting domain trust analysis. Despite this, the website content and affiliation with IFBLS suggest legitimacy. No WAF or blocking mechanisms were detected, and no tracking or advertising scripts are present, indicating minimal user tracking. Overall, the site is a credible academic resource with good content quality and business credibility but requires improvements in privacy compliance, security best practices, and WHOIS transparency to enhance trust and regulatory adherence.

K

Koalicija "Galiu gyventi"

galiugyventi.lt

53

Koalicija "Galiu gyventi" is a Lithuanian non-profit coalition dedicated to advocacy, education, and research related to addiction and associated social issues. The organization provides legislative monitoring, legal advocacy, networking, training, and publishes informational materials targeting policymakers, vulnerable groups, and professionals. The website is built on WordPress with modern technologies such as Bootstrap and Zion Builder, hosted by Hostinger. It features a professional design, clear navigation, and mobile optimization. Security posture is good with HTTPS enabled and no exposed sensitive data, though security headers and privacy compliance mechanisms are lacking. Contact information is clearly provided, and social media integration is present via Facebook SDK. Overall, the site is trustworthy and serves its non-profit mission effectively.

The website "Geri norai" represents a Lithuanian entity currently undergoing maintenance, with minimal content available. The site provides a contact email but lacks detailed business descriptions, privacy policies, or interactive features. The domain is registered since 2013 with a Lithuanian registrar, indicating a stable presence but the website itself is in a basic state. Technically, the site uses WordPress CMS with a maintenance plugin and includes Google Fonts. There is no evidence of advanced frameworks or analytics tools. Mobile optimization and accessibility are basic, and no security headers or HTTPS status could be confirmed from the data provided. From a security perspective, the site lacks published privacy and cookie policies, security headers, and incident response information. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement. The WHOIS data is consistent and trustworthy, supporting legitimacy. Overall, the website scores low to moderate on content quality, technical implementation, and privacy compliance, with recommendations to improve security posture, publish compliance policies, and enhance user experience for better trust and professionalism.

Europos namai is a Lithuanian non-profit organization dedicated to civic engagement, political monitoring, and educational projects. Their website, Eurohouse.lt, serves as a platform to share news, project updates, and partner information primarily targeting Lithuanian citizens interested in political and civic matters. The organization appears to have a stable market position within the non-profit sector in Lithuania, with ongoing projects and partnerships. Technically, the website is built on WordPress with a moderate technology stack including Bootstrap and various plugins for galleries and social icons. The site is hosted by a Lithuanian hosting provider, Hostex.lt, and uses HTTPS for secure communication. Security posture is moderate with anti-spam measures in place but lacks advanced security headers and explicit privacy or cookie policies. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. WHOIS data confirms domain legitimacy and consistency with the organization's geographic focus. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

Š

Šiuolaikinių didaktikų centras VšĮ

sdcentras.lt

40

Šiuolaikinių didaktikų centras VšĮ is a Lithuanian non-profit educational organization operating since 1999, focusing on adult education, professional development, and pedagogical seminars. The organization actively participates in national and international projects and initiatives, targeting adult learners and educators. Their market position is that of an accredited non-formal education institution with a clear focus on competence development and educational research. Technically, the website is built on WordPress with modern plugins and SEO practices, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website is professional, trustworthy, and well-maintained, serving its educational mission effectively.

Lesoochranárske zoskupenie VLK operates the website 'Všetko pre NIČ' as a non-profit environmental advocacy platform focused on protecting natural forests in Slovakia. The organization promotes non-intervention in forest areas, organizes petitions, legal actions, and educational events to safeguard wildlife and natural reserves. The website serves as a communication and fundraising tool targeting environmentally conscious Slovak citizens and supporters. Technically, the site employs modern JavaScript libraries, Google Analytics, Facebook Pixel, and Google Tag Manager for tracking and user engagement. It integrates YouTube videos and Google Maps for enhanced content delivery. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a published privacy policy or terms of service, which are areas for improvement. Overall, the website is well-designed, user-friendly, and trustworthy, with moderate tracking practices and a clear call to action for donations.

K

KIWIS & BROWNIES

prombu.com

50

Prombu.com is a German-based SaaS provider specializing in online promotional tools such as Advent calendars and football World Cup prediction games. The company, branded as KIWIS & BROWNIES, targets small to medium businesses, clubs, and private users seeking to engage customers and fans through interactive web applications. The website is professionally designed with clear navigation, responsive layouts, and detailed product descriptions, supporting a positive user experience. Technically, the site uses modern frontend frameworks like Bootstrap and Swiper.js, hosted behind Cloudflare DNS, but lacks advanced CMS or analytics integrations. Security posture is adequate with HTTPS enforced but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a support email, with no phone or physical address disclosed. Overall, the site is trustworthy and functional but would benefit from enhanced security and privacy features.

The website myjackpot.pl is currently a parked domain page indicating that the domain is for sale. It does not provide any business services or content beyond advertising and a call to purchase the domain. The technical infrastructure is minimal, relying on basic JavaScript and Amazon Cloudfront CDN for content delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak with no HTTPS enforcement or security headers detected, and no privacy or cookie policies are present. The site lacks contact information and business legitimacy indicators, which significantly reduces trustworthiness. Overall, the site functions solely as a domain resale landing page with minimal technical or business maturity.

PUNKS.MY is a Malaysia-based NFT project that offers a unique collection of 1000 iconic Malaysian figures as digital collectibles on the Ethereum blockchain. The project emphasizes on-chain SVG storage for permanence and has historical significance with public billboard exposure during the NFT craze. The website integrates with Metamask for wallet connection and links to reputable platforms such as OpenSea and Etherscan for marketplace and contract transparency. The business targets NFT collectors and crypto enthusiasts within Malaysia and operates as a small niche player in the NFT space. Technically, the website uses a modern JavaScript stack including ethers.js, jQuery, Bootstrap, and various UI plugins. Hosting is supported by Cloudflare DNS and nameservers, ensuring good SSL configuration and moderate performance. However, mobile optimization and accessibility are basic, and SEO practices are minimal. The site lacks a CMS and appears custom-built. From a security perspective, HTTPS is enforced, and the site uses nonce-based Metamask signature challenges for authentication. However, no explicit security headers (CSP, HSTS, etc.) are detected, and there are no published privacy or cookie policies, which are compliance gaps. Google Analytics is used without visible cookie consent mechanisms, indicating moderate user tracking but poor privacy compliance. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professional with moderate trustworthiness but has room for improvement in privacy compliance, security hardening, and user transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and providing clear contact and incident response channels.

B

BRAINZ STUDIOS

brainz.cz

44

BRAINZ STUDIOS is a medium-sized independent group of creative studios based in Prague, Czech Republic, founded in 2018. They offer a broad range of new media services including digital innovation, strategic communication, VR and AR immersive experiences, and brand building. The company operates multiple specialized studios and incubates startups and platforms, positioning itself as a versatile player in the creative media industry with a strong presence in various sectors such as automotive, financial services, pharma, entertainment, and more. Their market position is reinforced by multiple awards and media features, indicating a reputable and professional organization. Technically, the website is built on modern web technologies including Webflow CMS, Vue.js, GSAP animations, and integrates Google Analytics and Tag Manager for tracking. The site is well optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Cookie consent is managed via Usercentrics and Finsweet, demonstrating awareness of privacy compliance requirements. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and does not publish privacy policies or terms of service, which are important for compliance and trust. No incident response or vulnerability disclosure mechanisms are evident. Overall, the security posture is good but could be improved with additional policies and headers. The overall risk assessment is low, with the main recommendations focusing on enhancing privacy compliance, publishing security policies, and adding security headers. The website is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected.

M

Merantix AG

merantix.com

69

Merantix AG is a leading European AI group focused on investing, building, and connecting AI-driven businesses and communities. Their market position is strong within the European AI ecosystem, offering investment services, AI solutions, and community engagement through multiple subsidiaries and partner platforms. The website reflects a professional and consistent brand image targeting businesses and AI professionals in Europe. Technically, the site is built on Webflow with modern tracking and analytics tools integrated, showing a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and headers could be improved. The absence of WHOIS data is a notable gap in transparency but does not detract significantly from the overall legitimacy given the professional web presence. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features.

K

KIKE

konferencjakike.pl

45

KIKE is a Polish organization specializing in telecommunications industry conferences, focusing on infrastructure security, regulatory challenges, and digital transformation. The website promotes their upcoming conference in October 2025, targeting local telecom operators and industry stakeholders. The site is built on WordPress using a modern theme and plugins, with a moderate level of technical sophistication and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though some improvements in security headers and vulnerability disclosure are recommended. Privacy compliance is partial, lacking explicit cookie consent and GDPR policy statements. Overall, the website is professional and trustworthy, supporting KIKE's position as a reputable conference organizer in Poland.

K

KIKE SAFE Sp. z o.o.

kikesafe.pl

52

KIKE SAFE Sp. z o.o. is a Polish company specializing in providing security and information protection services primarily to small and medium-sized telecommunication operators. As a subsidiary of Krajowa Izba Komunikacji Eternetowej, it offers certified secret office services, information security management, and advisory services related to industrial security certificates. The company positions itself as a niche provider with a focus on quality and affordability for SMEs in Poland. The website is built on Drupal CMS with a moderate technical stack including jQuery and Font Awesome, but some outdated libraries pose potential security risks. The site is accessible, professionally designed, and provides essential business information, though it lacks some modern privacy and security features such as cookie consent and security headers. Overall, the security posture is moderate with room for improvement in technical and compliance areas.

Duha is a Czech non-profit organization dedicated to providing leisure, nature, and recreational activities for children and youth. The organization operates through local branches across the country, offering camps, outdoor sports, cultural activities, and volunteer opportunities. Their focus on experiential pedagogy and community engagement positions them as a well-established entity in the youth non-profit sector. The website content is rich with event reports, news, and information about their programs, targeting children, youth, and volunteers. Technically, the website uses standard web technologies such as Bootstrap and jQuery, with a moderate level of mobile optimization and accessibility. However, there is no evidence of advanced CMS or hosting details. The site lacks privacy and cookie policies, and no security headers or HTTPS status information was detected from the provided data, indicating room for improvement in security and compliance. From a security perspective, the absence of WHOIS data reduces transparency, though this is likely due to privacy protection common among non-profits. No forms or sensitive data collection mechanisms were found, reducing immediate risk. The site does not display any signs of WAF or blocking mechanisms, and content is fully accessible. Social media presence and partner logos add to the trustworthiness of the organization. Overall, the website is functional and informative but requires enhancements in security posture, privacy compliance, and transparency to improve trust and protect user data. Strategic improvements in these areas will strengthen the organization's digital maturity and stakeholder confidence.

R

RGS Racing

rgs-racing.com

68

RGS Racing operates as a motorsport racing team and academy with an integrated e-commerce platform hosted on Shopify. The website provides comprehensive information about the team, sponsors, bikes, calendar, and offers merchandise through an online store. The target audience includes motorsport enthusiasts and customers interested in racing-related products and services. The business model combines sports promotion with direct-to-consumer sales, positioning itself as a niche player in the motorsport and racing e-commerce sector. Technically, the website leverages Shopify's robust platform, utilizing modern web technologies including JavaScript, CSS, and Shopify Liquid templates. The site is well-optimized for mobile devices, exhibits good performance, and incorporates SEO best practices. The use of Shopify Payments and integrated analytics indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and includes cookie consent mechanisms aligned with GDPR requirements. However, there is no explicit security policy or incident response contact information available, and the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for RGS Racing, but the lack of WHOIS data and explicit security policies suggests areas for improvement in transparency and security posture. Strategic recommendations include establishing a clear security policy, publishing incident response contacts, and verifying domain registration details to enhance trust and compliance.

The website verandaflooring.com is currently inaccessible to the public, returning a 403 Forbidden error page. This indicates that access is blocked or restricted, preventing any meaningful content or business information from being displayed. The domain is registered since 2018 with Tucows Domains Inc. and uses SiteGround hosting, but no DNSSEC is enabled and no security headers are detected. There are no privacy, cookie, or terms of service policies found, nor any contact information or forms. The website lacks any visible scripts, analytics, or social media links, suggesting minimal digital maturity and technical implementation. Security posture is weak due to missing headers and lack of DNSSEC, and the site does not demonstrate GDPR or privacy compliance. Overall, the site appears to be a small business domain with poor content quality and low trustworthiness due to the access restriction.

The website azalealaneflooring.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any business-related content. The domain is registered since 2015 with Network Solutions, LLC, and uses SiteGround for hosting. Due to the access restriction, no metadata, contact information, or business descriptions are available for analysis. The lack of accessible content severely limits the ability to assess the company's market position, services, or technical infrastructure. Security posture is weak as no HTTPS or security headers are detectable, and no privacy or cookie policies are present. Overall, the site appears either misconfigured or intentionally restricted, resulting in a very low trust and credibility score.

The website palmettoroadflooring.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. This prevents extraction of business, contact, or policy information. The domain is registered since 2011 with Network Solutions, LLC, indicating a legitimate registration history, but the lack of accessible content severely limits digital presence and trustworthiness. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available. The technical infrastructure cannot be fully assessed due to the blocked content, but no modern technologies or analytics scripts are detected. Security posture is weak as no HTTPS or security headers are observed. Overall, the site appears inactive or restricted, resulting in a low AI score and high risk for users seeking information or services.

M

Meister Concept

getyourcertificate.ch

42

Get Your Certificate is a Swiss-based service platform focused on providing certification and examination facilitation for various Swiss medical societies, primarily in surgical and specialized medical fields. The website is professionally branded and targets medical professionals seeking certification in Switzerland. The business operates as a small entity under Meister Concept, with partnerships evident through linked domains. Technically, the website uses standard web technologies (HTML, CSS, JavaScript) but lacks advanced frameworks or CMS indications. Mobile optimization is currently poor, and no advanced SEO or accessibility features are evident. Security posture is moderate with HTTPS implied but no visible security headers or policies. Privacy compliance is minimal with no privacy or cookie policies found. Contact information is absent from the landing page, limiting direct communication channels. Overall, the site is functional and professional but requires improvements in privacy, security, and mobile responsiveness to enhance trust and compliance.

B

BTG Pactual

btgpactual.com

60

BTG Pactual is the largest investment bank in Latin America, offering a comprehensive range of financial services including investment banking, asset management, wealth management, and corporate banking. The website reflects a strong market position with professional branding and clear targeting of both individual and corporate clients. The company operates primarily in Brazil and serves a large client base with sophisticated financial products. Technically, the website is built on modern frameworks such as Angular and leverages advanced analytics and monitoring tools including Google Tag Manager, Datadog RUM, and Facebook Pixel. Hosting appears to be via Akamai CDN, ensuring fast and reliable content delivery. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not publicly available, and no vulnerability disclosure program is evident. The absence of WHOIS data is notable but does not detract significantly from the overall trustworthiness given the professional presentation and domain usage. Overall, BTG Pactual's website demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic improvements in transparency around security policies and domain registration details would further enhance trust and compliance.

Stone Pagamentos is a leading Brazilian fintech company providing comprehensive payment solutions including card machines, digital business accounts (Conta PJ), credit, insurance, and payment links. The company targets small and medium businesses, microentrepreneurs, and autonomous professionals, positioning itself as a key player in Brazil's financial services market. The website reflects a mature digital presence with professional design, clear navigation, and extensive service offerings. Technically, the site employs modern frameworks such as Next.js and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and anti-bot measures like reCAPTCHA Enterprise, though explicit security policies and incident response information are not published. Overall, the site demonstrates high business credibility and trustworthiness, with clear contact channels and consistent branding.

C

Conta Azul

contaazul.com

64

Conta Azul is a well-established Brazilian company providing a comprehensive ERP system focused on financial and business management for small and medium enterprises. The company offers a SaaS model with key services including sales management, invoicing, automatic billing, inventory control, bank reconciliation, and reporting. The website reflects a strong market position with professional design and clear navigation, targeting SMB owners and managers in Brazil. Technically, the site is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates advanced analytics tools like Google Tag Manager, Segment, and Amplitude, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no evident vulnerabilities, although DNSSEC is not enabled and no explicit vulnerability disclosure or incident response contacts are published. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

The Yes Men website represents a small, long-established activist collective focused on partnering with other activist groups to employ creative tactics for social campaigns. The organization has a niche market position within the non-profit activism sector, offering services such as workshops, trainings, collaborations, and media productions including movies. The website is built on Drupal 9 CMS and integrates Google Analytics and Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. The domain registration is consistent and long-standing, supporting the legitimacy of the organization. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

Christopher Isene

christopherisene.se

52

Christopher Isene's website is a personal and professional portfolio site that highlights his background as a system integration consultant and technology enthusiast. The site serves as a central hub for his professional identity, showcasing his skills, projects, and contact information primarily through social media links. The business model is personal branding with a focus on technology consulting services, targeting a general audience including professional contacts and the tech community. The website is hosted on WordPress, leveraging modern web technologies and hosted by Loopia, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally presented but could improve in compliance and security best practices.

T

Ted Valentin

tedvalentin.com

58

The website www.tedvalentin.com is a personal blog and portfolio site of Ted Valentin, a Swedish web entrepreneur and developer. The site focuses on sharing business ideas, travel-related niche websites, and personal insights into entrepreneurship and technology. The site is hosted on the Blogger platform, leveraging Google services such as Adsense, YouTube, and Twitter integrations. The technical infrastructure is modern for a blog, with fast loading times and basic mobile optimization. However, the site lacks explicit privacy and cookie policies, and no contact information is provided, which impacts privacy compliance and trustworthiness. Security headers and WHOIS domain registration data are missing or unavailable, limiting the ability to fully assess domain legitimacy and security posture. Overall, the site presents a good content quality and business credibility for a personal brand but requires improvements in privacy, security, and transparency to enhance trust and compliance.

E

Emma Marie Andersson

opassande.se

48

Emma Marie Andersson's website serves as a personal portfolio and blog focused on her artwork, particularly drawings and alcohol ink techniques, as well as her professional work as a graphic designer. The site targets art enthusiasts and potential clients interested in original artwork or graphic design services. The business model is primarily a personal showcase with potential for direct sales through contact. The website is built on WordPress using the Twenty Seventeen theme, with integration of social media platforms such as Instagram, YouTube, and Bluesky to extend reach and engagement. Hosting and domain registration are managed by Loopia AB, a Swedish provider, consistent with the website's Swedish language and content.

F

Foundation for a Free Information Infrastructure e.V.

ffii.org

50

The Foundation for a Free Information Infrastructure (FFII) is a well-established European non-profit organization advocating against software patents and promoting open standards and free software since 1999. It operates primarily in the technology policy sector, targeting software developers, civil society, and policymakers. The organization is recognized for its influential role in preventing the EU software patent directive and continues active engagement through events, working groups, and public education. Technically, the website is built on WordPress with a modern theme and plugins such as Contact Form 7 and Jetpack, supported by Google reCAPTCHA for form security. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is managed by Gandi SAS, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing, representing areas for improvement. No incident response or vulnerability disclosure policies are published, which could enhance trust and security posture. Overall, the website is professional, trustworthy, and content-rich, with a strong focus on advocacy and community engagement. Strategic recommendations include enhancing DNS security, publishing security policies, and improving HTTP security headers to strengthen the security posture and compliance.

T

The Local Europe AB

thelocal.se

65

The Local Sweden is a well-established online news media company providing English-language news and practical guides focused on Sweden. Founded in 2004, it targets expatriates and English-speaking residents, offering a broad range of content including politics, travel, jobs, and property. The business model combines advertising revenue with a membership program, supported by a professional and user-friendly website. The company maintains a consistent brand presence and strong trust indicators such as clear contact information and privacy compliance. Technically, the website leverages modern web technologies including Vue.js, Bootstrap, and integrates multiple third-party services for analytics, advertising, and membership management. The site is mobile-optimized and SEO-friendly, delivering a good user experience. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and CSRF protections, though some HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the .se domain is noted but does not detract significantly from the overall legitimacy given the strong business presence and content quality. Overall, The Local Sweden presents a trustworthy and professional digital presence with room for minor security enhancements.

T

Home - Welcome to Technorati

technorati.com

55

Technorati.com is a media content website providing breaking news, entertainment, sports, games, trending videos, and weather information. The site targets a general audience interested in diverse topical content. The business model appears to be advertising-supported, leveraging multiple ad networks and tracking technologies to monetize traffic. The domain is well-established, created in 2002, indicating a long-standing presence in the digital media space. Technically, the website employs modern JavaScript frameworks, likely React, with asynchronous chunk loading and integration of various third-party services including Google Tag Manager, Google Analytics, Microsoft Clarity, Criteo, and Taboola. The site uses HTTPS and is hosted with CDN support, but lacks DNSSEC and explicit security headers, which are areas for improvement. Performance and mobile optimization are moderate but could be enhanced. From a security perspective, the site uses HTTPS and domain status locks to protect domain integrity. However, the absence of DNSSEC, security headers, and publicly available security or privacy policies indicates a moderate security posture. The extensive use of tracking and advertising scripts without clear cookie or privacy policies raises privacy compliance concerns, especially regarding GDPR. Overall, the website is functional and moderately professional but lacks transparency in privacy and security policies. Strategic improvements in privacy compliance, security headers, and DNSSEC implementation are recommended to enhance trust and security posture.

M

MultiVu

multivu.com

65

MultiVu is a specialized media and communications company offering multimedia production and strategic distribution services, including satellite and radio media tours, multichannel news releases, creative video production, media placements, and webcast/live event services. The company targets communications, PR, and marketing professionals and operates as a B2B service provider with a strong market position supported by major brand clients and a parent company affiliation with PR Newswire. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the website uses a modern but slightly dated technology stack including Bootstrap 3, jQuery, Font Awesome 6, and Google Tag Manager for analytics. It is mobile optimized with a moderate performance profile. Privacy and cookie policies are implemented with consent mechanisms, indicating a good level of privacy compliance. However, no explicit security policies or incident response information are published. Security posture is generally strong with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of security headers is a minor gap, and no vulnerability disclosure or security.txt files were found. The WHOIS data is missing or unavailable, which is unusual and reduces trust slightly, but the professional content and parent company association mitigate concerns. Overall, the website is trustworthy, professional, and well-maintained, with recommendations to improve security headers, publish security policies, and clarify WHOIS registration details to enhance transparency and trust.