Security Directory

P

Prospects

prospects.ac.uk

64

Prospects is a well-established UK-based online platform providing comprehensive career guidance, job search, and postgraduate study advice primarily targeting students and graduates. It operates under the parent company Jisc, a reputable organization in the education sector. The website offers a rich set of services including job matching, course search, career advice, and employer advertising, positioning itself as a key resource for UK higher education and career development. Technically, the site employs modern web technologies such as AngularJS, integrates multiple analytics and marketing tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.

Gusto Design Ltd is a UK-based industrial design consultancy specializing in product creation, design, and innovation for international markets. The company serves a diverse client base including major brands such as Intel, Boots, and The Body Shop, offering services from initial concept through to production and sustainability evaluation. The website reflects a professional and consistent brand image with detailed descriptions of projects, processes, and activities. Technically, the site uses modern web technologies including Bootstrap and Google Fonts, with Google Analytics integrated for visitor tracking. However, there is no evidence of privacy or cookie policies, and no social media presence is linked. Security posture is moderate but lacks visible HTTPS confirmation and security headers. The WHOIS data for the domain www.gusto.co.uk is missing and indicates the domain is not registered under Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is accessible and informative but requires improvements in security, privacy compliance, and domain registration transparency.

Magpie Property Management operates as a local estate and letting agency based in St Neots, Cambridgeshire, UK. The company provides property sales, lettings, and management services targeting property buyers, renters, landlords, and property owners in the local area. The website presents a professional appearance with clear branding and relevant content focused on real estate services. However, the domain WHOIS data indicates that the domain 'www.magpieproperty.co.uk' is invalid under Nominet UK naming rules, suggesting possible misconfiguration or use of a subdomain rather than a registered domain. This discrepancy warrants caution regarding domain legitimacy. Technically, the website uses modern web technologies including Bootstrap, Font Awesome 6 Pro, and various JavaScript libraries for UI enhancements. The site includes a cookie consent mechanism compliant with GDPR principles, but lacks explicit privacy policy and terms of service pages. No security headers were detected in the provided data, and no analytics or tracking beyond cookie consent were found. The site appears mobile-optimized with good design and navigation. From a security perspective, the site benefits from cookie consent but lacks visible security headers and formal privacy documentation. The absence of WHOIS registration data and domain registration issues reduce trustworthiness. No vulnerabilities or adult content were detected. Overall, the security posture is moderate but could be improved with better documentation and security best practices. The overall risk assessment suggests the business is legitimate and professional in its operations but should address domain registration clarity and enhance security and privacy compliance to improve trust and reduce potential risks.

I

Indiana University Southeast

ius.edu

64

Indiana University Southeast operates as a regional public university within the Indiana University system, providing higher education services including degree programs and career pathways. The website is professionally designed with consistent branding and targets prospective and current students, alumni, and community members. The technical infrastructure leverages modern web technologies such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, hosted on Indiana University's infrastructure, ensuring reliable performance and mobile optimization. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the domain's legitimacy is supported by its subdomain status under iu.edu, despite the lack of public WHOIS data. Strategic recommendations include enhancing privacy compliance, publishing security policies, and implementing security headers to strengthen trust and compliance.

S

SIA Izdevniecība Dienas Bizness

db.lv

53

Dienas Bizness is a well-established Latvian business news media company providing comprehensive coverage of business, finance, real estate, technology, and lifestyle topics. The website serves a professional audience including investors and business professionals in Latvia. It offers digital and print publications, subscription services, and advertising opportunities, positioning itself as a leading business news portal in the Latvian market. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Revive Adserver for advertising, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses cookie consent scripts but lacks explicit security headers and published security policies. Overall, the site is trustworthy, professional, and compliant with privacy regulations, though it could improve by publishing security policies and enhancing security headers.

L

Living Lab Koprivnica

living-lab.hr

46

Living Lab Koprivnica is a collaborative innovation platform focused on testing and developing smart outdoor lighting and smart city solutions in Koprivnica, Croatia. The project connects technology providers, research institutions, public bodies, and citizens to foster sustainable energy development and smart urban infrastructure. The website presents detailed information about partners, technologies, and test fields, reflecting a mature and professional digital presence. Technically, the website uses modern web technologies including Google Maps API for interactive maps, Google Analytics for tracking, and jQuery for scripting. The site is hosted by Hrvatski Telekom d.d., a reputable Croatian provider, and employs HTTPS for secure communication. While the site is well-structured and mobile-optimized, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. From a security perspective, the site demonstrates good practices such as encrypted connections and no visible sensitive data exposure. However, the absence of explicit security policies and incident response contacts indicates room for improvement in security governance. The WHOIS data aligns well with the website's claims, supporting the legitimacy of the domain and business. Overall, Living Lab Koprivnica's website is a trustworthy and informative resource for stakeholders interested in smart city innovations, with recommendations to strengthen privacy compliance and security posture for future resilience.

D

Digital Innovation Hub North

dih-north.eu

41

Digital Innovation Hub North is a regional innovation hub focused on supporting creative industries and businesses in Northern Croatia to grow and internationalize through digital transformation. The website presents a professional image with clear descriptions of services such as ecosystem building, strategy development, prototyping, and networking. Partnerships with regional innovation centers like Enter Koprivnica, TechPark Varaždin, and TICM reinforce its market position. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies, which are important for compliance. Overall, the site is trustworthy and business credible but could improve privacy compliance and security best practices.

M

Mono Project

mono-project.com

63

The Mono Project website presents a mature, open source software platform focused on cross platform .NET development. Sponsored by Microsoft and part of the .NET Foundation, it serves developers seeking to build applications across multiple operating systems. The site emphasizes the project's history, community involvement, and transition of stewardship to WineHQ, reflecting a legacy technology with ongoing maintenance and migration recommendations. Technically, the website employs modern web technologies including Foundation CSS, jQuery, FontAwesome, and Highlight.js, delivering a responsive and accessible user experience. The presence of a cookie consent banner and privacy links indicates attention to privacy compliance, though explicit security headers and vulnerability disclosure mechanisms are absent. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, though the website content and external links strongly support authenticity. No adult or questionable content is present, and the site is free from blocking or WAF challenges. Overall, the site is professional and trustworthy from a content perspective but would benefit from improved transparency in domain registration, enhanced security headers, and published security policies to strengthen trust and compliance.

I

International Sava River Basin Commission

savacommission.org

47

The International Sava River Basin Commission operates as an intergovernmental organization dedicated to the sustainable management and development of the Sava River Basin. It provides a platform for cooperation among basin countries focusing on water management, navigation, flood protection, sediment management, and environmental preservation. The website reflects a professional and authoritative presence with comprehensive content and official documentation supporting its mandate. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Slick Carousel, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile optimized and exhibits good performance and SEO practices. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and secure login forms but lacks important security headers and published security policies such as privacy, cookie, and incident response information. The absence of WHOIS data reduces domain trust verification, though the website content and contact details support legitimacy. Overall, the security posture is moderate with recommendations to enhance compliance and transparency. The overall risk assessment is low to moderate, with strategic recommendations focusing on publishing privacy and cookie policies, implementing security headers, adding vulnerability disclosure mechanisms, and improving WHOIS transparency to strengthen trust and compliance.

A

Association for Progressive Communications (APC)

giswatch.org

57

Global Information Society Watch (GISWatch) is a reputable non-profit initiative supported by the Association for Progressive Communications (APC) and Sida. It focuses on publishing comprehensive reports and fostering civil society advocacy around digital rights, internet governance, and information society issues globally. The website is multilingual and provides extensive resources and author profiles, targeting civil society, researchers, and policy makers. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as Leaflet.js for mapping, and employs Matomo analytics with privacy-conscious settings (no cookies, Do Not Track respected). The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and domain registration locked against unauthorized changes. However, DNSSEC is not enabled, and there is no published security or incident response policy. Privacy compliance is basic, lacking a cookie consent mechanism. Contact information is limited to a contact form, with no explicit emails or phone numbers. Overall, the website presents a trustworthy and professional platform for its non-profit mission, with recommendations to enhance privacy compliance, security transparency, and contact accessibility.

Intel Corporation is a leading global technology company specializing in semiconductor manufacturing and artificial intelligence solutions. Their website showcases a broad portfolio of AI-related products including processors, AI accelerators, software solutions, and network-edge devices, targeting business and technical leadership audiences. The company maintains a strong market position with enterprise-scale operations and consistent branding across its digital presence. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and hosted on Akamai CDN, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and consent management implemented, though explicit security policies and vulnerability disclosures are not prominently published. Overall, the website reflects a mature digital infrastructure with high professionalism and trustworthiness, suitable for a major technology enterprise.

R

RPI Print, Inc.

magcloud.com

66

MagCloud is an online self-publishing platform operated by RPI Print, Inc., offering users the ability to create, sell, and distribute print and digital publications such as magazines, flyers, posters, and pamphlets. The platform integrates with Adobe tools and provides storefront and worldwide shipping capabilities, positioning itself as a niche player in the media and e-commerce sectors. The website is professionally designed with good content quality and clear navigation, targeting individuals and businesses seeking publishing solutions. Technically, the site employs a modern technology stack including jQuery, Underscore.js, Modernizr, Google Tag Manager, Hotjar, and Tealium, supporting analytics and marketing efforts. The site is mobile optimized with moderate performance and basic accessibility features. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. However, no direct contact emails or phone numbers are provided, which may impact user trust. Overall, the website presents a trustworthy and professional front with a solid business model and technical foundation. The main concern is the absence of WHOIS registration data, which is unusual for an established domain and should be further investigated. Strategic improvements in security headers, incident response transparency, and contact information availability are recommended.

A

ActiveState Software Inc.

komodoide.com

60

ActiveState Software Inc. operates the Komodo 12 Documentation website, providing comprehensive resources for their cross-platform, multi-language IDE integrated with the ActiveState Platform and State Tool. The company targets developers and software engineers seeking advanced development tools. The website is professionally designed with good navigation and content relevance, supporting a medium-sized technology business model with a strong market presence in developer tools. Technically, the site uses modern web technologies including Hugo static site generator, Google Analytics, and highlight.js for code syntax highlighting. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security policies. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy, safe, and professional, with no signs of malicious content or blocking mechanisms.

F

Fantaisie Software

purebasic.com

48

PureBasic.com is the official website for PureBasic, a modern BASIC programming language developed by Fantaisie Software since 1998. The site provides comprehensive information about the language's features, supported platforms, and related products such as SpiderBasic. The business targets both beginner and expert programmers seeking a fast, portable, and easy-to-use BASIC compiler and IDE. The website is professionally designed with clear navigation and relevant content, supporting multiple languages and offering user login functionality. Technically, the site uses a modern tech stack including HTML5, CSS3, JavaScript libraries like jQuery, Modernizr, and Google Analytics for tracking. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. No CMS or hosting provider details are evident. Performance is moderate with no blocking or WAF detected. Security posture is moderate; the site uses HTTPS but lacks visible security headers and published security policies. Forms use POST methods but no explicit cookie consent or GDPR compliance mechanisms are present. WHOIS data is missing, which reduces trustworthiness but the site content and business information appear legitimate. No vulnerabilities or exposed sensitive data were detected. Overall, PureBasic.com is a trustworthy and professional site for a niche programming language product. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance.

Pragolab s.r.o. is a well-established Czech company specializing in the supply and servicing of laboratory instruments and equipment, primarily serving analytical chemistry and physical measurement sectors. Founded in 1998, it holds a strong market position as one of the leaders in laboratory equipment within the Czech Republic. The company targets scientific institutions and laboratories, offering a range of products and services including sales, maintenance, and application support. The website reflects a professional and consistent brand image with clear business focus and relevant content.

E

Emil Löffelhardt GmbH & Co. KG

loeffelhardt.de

46

Emil Löffelhardt GmbH & Co. KG operates a professional B2B website focused on the electrotechnical wholesale sector, serving electricians, industry, public authorities, and trade customers primarily in Germany. The company is a medium-sized, family-owned business with over 115 years of experience, positioning itself as a reliable and knowledgeable partner offering a broad product range, consulting, and services including training and logistics. The website is built on TYPO3 CMS and employs modern web technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and Matomo analytics configured with cookie consent enforcement, though explicit cookie banners and security headers are missing. The WHOIS data aligns with the business claims, indicating legitimacy and consistency. Overall, the site reflects a trustworthy and professional business presence with room for improvement in privacy compliance and security best practices.

M

MEVA-HU Kft

mevakomi.hu

44

MEVA-HU Kft is a Hungarian company specializing in industrial products including waste storage, oil management, warehousing, workshop equipment, and outdoor equipment. The company operates a B2B e-commerce platform supported by regional partner sites in Slovakia, Poland, Germany, and the Czech Republic. Their market position is that of an established regional supplier with a comprehensive product catalog and ISO 9001:2015 certification, indicating quality management standards. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience for industrial clients. Technically, the site uses a BohemiaSoft e-commerce platform with common JavaScript libraries and Google Analytics for tracking. Security posture is generally good with HTTPS, CSRF protections, and cookie consent mechanisms, though some outdated libraries and missing security headers present moderate risks. Privacy compliance is strong with clear GDPR-aligned policies and consent banners. Overall, the site is trustworthy and credible, with clear contact information and certifications. Recommendations include updating JavaScript libraries, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen security and trust.

A

Abelium d.o.o.

abelium.com

58

Abelium d.o.o. is a Slovenia-based technology company founded in 2015, specializing in tailored technology solutions including blockchain, AI, digital transformation, and platform business models. The company targets businesses seeking advanced technology and digital transformation services, positioning itself as an innovative and interdisciplinary expert in the technology sector. The website demonstrates a high level of digital maturity with modern JavaScript libraries, responsive design, and good SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and technical hardening.

Pomursko društvo za kakovost is a well-established Slovenian non-profit organization founded in 1993, dedicated to promoting quality management principles through education, consulting, and annual conferences. The organization targets professionals and educational institutions interested in quality assurance and management systems. Their website reflects a consistent brand and provides clear contact information and event details, supporting their role as a regional quality association. Technically, the website uses common JavaScript libraries such as jQuery and Modernizr, with a custom or unknown CMS. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional with no signs of malicious content or blocking mechanisms. The domain age and WHOIS data align well with the organization's history, supporting legitimacy. However, improvements in security policies, vulnerability disclosure, and analytics transparency would enhance compliance and trust. The risk level is low, but strategic security enhancements and clearer privacy documentation are recommended to maintain and improve stakeholder confidence.

L

Landesmedienzentrum Baden-Württemberg

smz-stuttgart.de

58

The Stadtmedienzentrum Stuttgart is a regional educational media center affiliated with the Landesmedienzentrum Baden-Württemberg. It provides a comprehensive range of services including media lending, training, consulting, and support for digital learning in schools. The website reflects a professional and well-structured digital presence targeting educators and students in the Stuttgart region. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and focused on educational content without any suspicious or adult material.

M

Metrel GmbH

metrel.de

58

Metrel GmbH is a medium-sized German company specializing in the manufacture and distribution of electrical safety testing instruments and related software solutions. Their product portfolio covers electrical safety in installations, high-voltage insulation testing, PAT testing, power quality analysis, and software including cloud services. The company targets electrical engineers, safety inspectors, laboratories, and industrial customers primarily in the energy and electrical sectors. The website reflects a professional B2B business model with a clear market position in Europe. Technically, the website uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and is hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and SEO-friendly. Security posture is good with HTTPS, security headers, and secure forms, though no explicit security policy or incident response page is published. Privacy and cookie policies are comprehensive and GDPR compliant. Contact information is clearly provided with company domain emails and phone numbers. Overall, the website is trustworthy, professional, and well-maintained.

Z

Zagrebačka banka

zaba.hr

68

Zagrebačka banka is a leading Croatian financial institution offering a broad range of retail and corporate banking services. The website reflects a mature digital presence with comprehensive information on loans, savings, insurance, and digital banking platforms such as mobile and internet banking. The bank targets a wide audience including individuals, small and large businesses, and private banking clients. The site is professionally designed with consistent branding and clear navigation, supporting a strong market position within Croatia and under the UniCredit Group umbrella. Technically, the website employs modern JavaScript libraries and analytics tools such as Adobe Analytics and Tealium, hosted on Akamai infrastructure for performance and reliability. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response disclosures are absent. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. No critical vulnerabilities or suspicious activities were detected. The domain's WHOIS data confirms legitimacy with a long registration history and consistent registrant information. Strategic recommendations include publishing a dedicated security policy, incident response plan, and vulnerability disclosure guidelines to enhance transparency and trust. Regular security audits and header enhancements would further strengthen the security posture.

R

RedRhino Inc.

red-rhino.com

54

RedRhino Inc. is a well-established marketing and advertising agency based in London, Ontario, with nearly three decades of experience. The company specializes in integrated marketing, branding, and digital services including mobile-first website development. Their client portfolio spans multiple sectors such as consumer goods, healthcare, manufacturing, and professional services, positioning them as a reputable mid-sized agency in their market. The website reflects a professional and consistent brand image with strong content quality and user experience. Technically, the site is built on WordPress using modern frameworks and includes multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and domain protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency.

H

Heroina | Samo još jedna WordPress web-stranica

heroina.hr

39

Heroina.hr is a small-scale WordPress website primarily using the Brooklyn theme by United Themes. The site appears to be a minimal or placeholder site with very limited business content, no privacy or cookie policies, and no contact information. The technical infrastructure is based on WordPress with multiple JavaScript libraries and plugins, indicating a moderate level of digital maturity but lacking in SEO and accessibility optimizations. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance measures. Overall, the site presents a low-risk profile but lacks professionalism and trust indicators, limiting its business credibility.

L

Lesoochranárske zoskupenie VLK

abies.sk

45

Abies.sk is an e-commerce website operated by Lesoochranárske zoskupenie VLK, a Slovak environmental organization focused on publishing and distributing ecological literature and related merchandise. The website offers a catalog of books, DVDs, CDs, and promotional goods centered on deep ecology and forest conservation. The business operates a niche publishing model targeting environmentally conscious readers and activists. Technically, the site uses the CubeCart CMS platform with Foundation CSS and jQuery libraries, hosted likely by Websupport, and benefits from DNSSEC and HTTPS security. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with encrypted connections and DNSSEC but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are visible, relying on contact forms for communication. Overall, the website is trustworthy and professionally maintained but could improve privacy compliance and security transparency.

D

DECHEMA, Gesellschaft für Chemische Technik und Biotechnologie e.V.

eurocorr.org

60

EUROCORR is the flagship annual corrosion congress organized under the European Federation of Corrosion (EFC) and managed by DECHEMA, a reputable German chemical engineering society. The website serves as an information hub for the event, providing details about upcoming and past congresses, news, and registration links. The business model centers on event organization and scientific community engagement, targeting corrosion experts and researchers across Europe. The domain is well-established since 2000, reflecting a mature and stable presence in the corrosion science community. Technically, the website uses a custom or proprietary CMS with JavaScript libraries such as Modernizr and Google Analytics for tracking. Hosting is provided by Vautron Rechenzentrum AG, a known hosting provider. The site is mobile-optimized with good SEO practices and basic accessibility features. Cookie consent mechanisms are implemented with GDPR compliance, enhancing privacy transparency. From a security perspective, HTTPS is enforced, and cookie consent is opt-out with clear user controls. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy with consistent registration details and no privacy protection masking. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Recommendations include enabling DNSSEC, adding security headers, and enhancing accessibility. The site poses low risk and demonstrates good compliance with privacy regulations.

Antero & Ca SA is a well-established Portuguese steel products company with over 90 years of history, operating as a steel service center and distributor. It is part of the Hiemesa Group, a recognized entity in the Iberian steel market. The company offers a wide range of steel products and industrial supplies, targeting industrial clients, construction companies, locksmiths, and equipment industries. The website reflects a professional and comprehensive digital presence with detailed product information, multiple contact points, and integration with the parent group's ecosystem. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Maps API, providing a responsive and user-friendly experience. Security-wise, the site uses HTTPS and basic form protections but lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with clear privacy and cookie policies, though no explicit cookie consent mechanism is present. The absence of WHOIS domain registration data is a notable concern, slightly reducing trustworthiness from a domain legitimacy perspective.

S

swisspor Gruppe

swissporgroup.com

61

swisspor Gruppe is a Swiss family-owned company specializing in sustainable building products, systems, and services aimed at creating energy-efficient and economically viable buildings. The company emphasizes sustainability, architectural quality, safety, and technical feasibility, targeting builders and partners in the construction industry. The website is professionally designed, multilingual, and provides comprehensive information about the company's offerings and values. Technically, the site uses modern web technologies including Google Tag Manager and CookieHub for consent management, ensuring GDPR compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. The WHOIS data is missing, which raises concerns about domain legitimacy, but the professional presentation and valid contact details mitigate some risk. Overall, swisspor presents a credible business presence with room for improvement in security transparency and domain registration clarity.

S

swisspor AG

swisspor.com

61

swisspor AG is a Swiss-based manufacturer specializing in energy-efficient building envelope products, including thermal insulation and sealing membranes. The company positions itself as a leader in Switzerland with a comprehensive product portfolio and a strong emphasis on quality and sustainability. Their website reflects a mature digital presence with multimedia content, configurator tools, and detailed product information. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but does not detract from the overall legitimacy and professionalism of the business. Contact information and social media presence further reinforce trustworthiness.

Z

Zambelli Holding GmbH

zambelli.com

56

Zambelli Holding GmbH is a medium-sized manufacturing company based in Germany specializing in metal system solutions across multiple sectors including roof drainage, building envelopes, shelving systems, caravaning, heating technology, and industrial metalworking. The company maintains a professional and well-structured website that targets business customers and industry professionals, showcasing its diverse product and service offerings. The website demonstrates consistent branding and good content quality, supporting the company's established market position. Technically, the website is built on modern web standards with responsive design, leveraging technologies such as HTML5, CSS3, JavaScript, and Adobe Typekit fonts. The CMS identified is Contao, which supports structured content management. Performance and mobile optimization are good, though accessibility features could be enhanced. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and there is no visible cookie consent mechanism, which could impact GDPR compliance. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and business information appear legitimate. Overall, the website presents a professional and trustworthy digital presence for Zambelli Holding GmbH, with recommendations to improve privacy compliance and security headers to enhance user trust and regulatory adherence.

N

NPO

npoplayer.nl

66

NPO.nl is the official public broadcasting portal of the Netherlands, operated by the NPO organization. It aggregates programs, documentaries, podcasts, and articles from various Dutch public broadcasters, serving as a centralized media platform for Dutch audiences. The website is well-established, with a domain age dating back to 1998, reflecting its long-standing presence in the Dutch media landscape. The portal targets a broad audience interested in public media content and offers a comprehensive range of services including streaming and content aggregation from multiple broadcasters. Technically, the website employs modern web technologies such as JavaScript, CSS, SVG, and lazy loading for images to optimize performance and user experience. It uses a custom content management framework (CCM) and integrates third-party scripts for cookies and advertising opt-out. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Security-wise, the site enforces HTTPS with DNSSEC enabled, uses crossorigin anonymous scripts, and avoids exposing sensitive data, indicating a strong security posture. However, the site lacks explicit privacy and cookie policies in the provided HTML content, and no visible consent mechanism for cookies was detected. Contact information such as emails or phone numbers is not explicitly present in the analyzed content, which may impact user trust and compliance. There is also no visible security policy or incident response contact information. Overall, the site is professional, trustworthy, and secure but could improve transparency and compliance by publishing clear privacy, cookie, and security policies. The overall risk assessment is low, with recommendations focusing on enhancing privacy compliance, publishing security and incident response policies, and implementing explicit cookie consent mechanisms to align with GDPR and best practices.

N

Nahverkehrsservice Sachsen-Anhalt GmbH

mein-takt.de

56

Mein Takt Sachsen-Anhalt is the official regional mobility brand for the German state of Sachsen-Anhalt, operated by Nahverkehrsservice Sachsen-Anhalt GmbH. The website provides comprehensive information and services related to regional trains, S-Bahn, PlusBus lines, train stations, and travel information via the INSA Fahrplanauskunft system. The site targets public transport users within the region and serves as a key information portal for mobility services. Technically, the website is built on TYPO3 CMS, integrates modern JavaScript libraries, and uses Cookiebot for GDPR-compliant cookie consent. The presence of accessibility features and mobile optimization indicates a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency around security and incident response.

L

Landesmedienzentrum Baden-Württemberg

lmz-bw.de

67

The Landesmedienzentrum Baden-Württemberg is a well-established public educational institution focused on media education, technical support, and digital learning resources for schools, educators, parents, and related stakeholders in the Baden-Württemberg region of Germany. The website reflects a mature digital presence with comprehensive content, event promotion, and active social media engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, delivering good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed or enhanced. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trustworthiness.

J

Jasněna Vláhová s.r.o.

vlahova.cz

53

Jasněna Vláhová s.r.o. operates the website vlahova.cz, a well-established Czech family business specializing in the design and distribution of watches, clocks, and jewelry products across Europe. The company has a strong retail presence with nearly two thousand stores supplied and offers a variety of collections targeting women, men, and children. The website reflects a professional e-commerce platform with clear navigation, product showcases, and marketing integrations. Technically, the site uses a combination of jQuery, Alpine.js, and other modern JavaScript libraries, supported by Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response information are not publicly detailed. Overall, the site demonstrates a mature digital presence aligned with its business operations.

S

S-Bahn Berlin GmbH

sbahn-ebe.de

68

S-Bahn Berlin GmbH operates a dedicated online portal for managing the increased fare enforcement payments (Erhöhtes Beförderungsentgelt - EBE). The portal facilitates secure and quick payment of fines, submission of personalized tickets for review, and customer support for related inquiries. The website is professionally designed, mobile-optimized, and provides comprehensive FAQs and contact options, reflecting a mature digital presence for a public transportation entity. Technically, the site uses Drupal CMS, integrates UserCentrics for consent management, and employs Matomo for analytics, indicating a focus on privacy and compliance. Security measures include HTTPS, Content Security Policy with nonce, and CAPTCHA protections, contributing to a strong security posture. The domain WHOIS data is privacy protected but consistent with legitimate business use. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and other regulations.

Z

Zavod za javno zdravstvo Krapinsko-zagorske županije

zzjzkzz.hr

47

Zavod za javno zdravstvo Krapinsko-zagorske županije is a regional public health institute serving the Krapina-Zagorje County in Croatia. The organization provides a broad range of public health services including epidemiology, microbiology, health promotion, school medicine, environmental health, and mental health and addiction prevention. The website targets local residents and public health stakeholders, offering news, contact information, and resources relevant to the community. The business model is government-funded, positioning the institute as a key regional health authority. Technically, the website uses a custom ASP-based CMS with legacy JavaScript libraries such as jQuery 1.8.2 and Modernizr, alongside modern UI components like the Revolution Slider and UserWay accessibility widget. The site is moderately optimized for performance and mobile devices, with basic SEO and good accessibility features. However, some technical debt is evident due to outdated libraries and lack of advanced security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the use of outdated JavaScript libraries and absence of security headers like CSP and HSTS present potential vulnerabilities. No explicit security or incident response policies are published. Contact information is clearly provided, enhancing trust and transparency. Overall, the website is professional, trustworthy, and serves its public health mission effectively. Strategic improvements in updating technical components and enhancing security headers would strengthen its security posture and compliance. The site is safe for general audiences with no adult or questionable content detected.

Nikola Tesla Network is a small, non-profit cultural and educational project focused on promoting the legacy of Nikola Tesla through an international cultural and touristic route. The website serves as a hub for information about the network, its partners, events, and educational initiatives such as the Teslina STEM Academy. The project is supported by reputable partners including the Croatian National Tourist Board and is co-financed by the European Union, indicating a solid market position within cultural tourism and education sectors. Technically, the website employs a moderate technology stack including jQuery, Modernizr, and various UI plugins, hosted on infrastructure linked to the NETIM registrar and VIT Web Hosting. The site is mobile optimized with good SEO practices and clear navigation, though accessibility features are basic. Security posture is adequate with HTTPS enforced and CSRF protections in forms, but lacks advanced security headers and a formal security policy. Privacy compliance is partial; a cookie policy and consent mechanism are present, but no explicit privacy policy page was found, representing a compliance gap. Contact information is clearly provided, enhancing business credibility. No signs of malicious content or WAF blocking were detected, and the site content is safe for general audiences. Overall, the website is professionally maintained with good content quality and business credibility but would benefit from enhanced privacy and security policies to improve compliance and trustworthiness.

Z

Zavod za prostorno uređenje Ličko-senjske županije

zzpulsz.hr

47

Zavod za prostorno uređenje Ličko-senjske županije is a Croatian government agency established in 2008, responsible for coordinating, monitoring, and implementing spatial planning within the Ličko-senjska county. The website serves as an official portal providing information about spatial plans, reports, and institutional activities targeting local residents, government officials, and urban planning professionals. The business model is focused on public sector service delivery with a clear mandate and regional authority. Technically, the website employs a modern but straightforward technology stack including jQuery, Modernizr, and Owl Carousel, hosted on a CMS platform developed by VIT. The site is mobile-optimized, accessible with multiple user-friendly features such as font resizing and contrast modes, and implements cookie consent mechanisms. SEO and metadata are well handled, though no structured JSON-LD data was found. From a security perspective, the site uses HTTPS with a good SSL configuration and basic security best practices like form validation and cookie consent. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and serves its government function well. The main risks relate to missing privacy and security policy documentation and absence of explicit incident response information. Addressing these gaps would improve compliance and user trust.

Česká společnost pro aterosklerózu is a well-established professional society in the Czech Republic focused on atherosclerosis and lipidology. Founded in 2000, it serves healthcare professionals and researchers by providing expert recommendations, organizing congresses and webinars, publishing a specialized journal (AtheroReview), and supporting research projects. The organization maintains strong partnerships with both domestic and international medical societies and pharmaceutical companies, reinforcing its market position as a trusted authority in cardiovascular prevention and lipid disorders. Technically, the website is built on WordPress with a standard set of libraries including jQuery, Bootstrap, and Owl Carousel. It is hosted by Active24, a reputable Czech hosting provider. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Google Analytics and Tag Manager are used for visitor tracking, indicating moderate digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no privacy or cookie policies were found, representing a compliance gap under GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

L

Landsprent ehf.

landsprent.is

58

Landsprent ehf. is a specialized newspaper printing company based in Iceland, offering printing and distribution services for various Icelandic newspapers and promotional materials. It operates as a subsidiary of Árvakur hf., the publisher of Morgunblaðið, positioning itself as a key player in the Icelandic media printing sector. The website provides detailed information about its services, client newspapers, and technical printing specifications, targeting media companies and advertisers in Iceland. Technically, the website employs a Foundation CSS framework, jQuery 1.11.1, and Facebook SDK, indicating a moderately modern but somewhat legacy technology stack. The site is mobile-optimized with good navigation and content quality but lacks advanced accessibility features. Security posture is moderate with HTTPS usage but missing security headers and outdated JavaScript libraries. No privacy or cookie policies are present, indicating compliance gaps. Overall, the domain WHOIS data is unavailable, which reduces trustworthiness but the website content and business information appear legitimate and consistent with the claimed business. Strategic improvements in security headers, privacy compliance, and technology updates are recommended to enhance trust and security.

G

Galén, spol. s r.o.

cesradiol.cz

50

Česká radiologie is a professional Czech medical journal specializing in radiology, affiliated with the Czech Medical Society J.E. Purkyně and other radiological societies. It publishes original research, reviews, and case studies targeted at practical and clinical physicians as well as postgraduate medical education participants. The journal is well-established with a domain age since 2006 and is indexed in major medical databases such as EMBASE and SCOPUS. The website is powered by the Actavia peer review and editorial system and maintains partnerships with reputable Czech medical organizations.

E

Exponantes

foiredenantes.fr

48

Foire de Nantes is a well-established regional event organizer based in Nantes, France, specializing in hosting a large annual fair that combines shopping, leisure, and cultural discovery. The event targets families and general visitors interested in home improvement, well-being, and gastronomy. The website reflects a professional and consistent brand presence with clear event information and partner endorsements. Technically, the website uses a custom CMS likely built on Ruby on Rails, incorporating modern JavaScript libraries such as jQuery, Modernizr, and Matomo for analytics. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. However, some security best practices like HTTP security headers are not visibly implemented. From a security perspective, the site shows good practices such as CSRF protection and cookie consent but lacks explicit security policy documentation and incident response contacts. The absence of WHOIS data for the domain is a concern that slightly reduces trustworthiness, though the professional site and event legitimacy mitigate this risk. Overall, the website is a credible and professional platform for the Foire de Nantes event, with moderate technical and security maturity. Strategic improvements in security headers, WHOIS transparency, and incident response readiness are recommended to enhance trust and compliance.

M

Moje Kino

mojekino.cz

41

Moje Kino is a Czech Republic based cinema club and network promoting three local cinemas: Kino Aero, Bio Oko, and Kino Světozor. The business model focuses on building a community of cinema enthusiasts through membership benefits such as premiere invitations and prepaid ticket cards. The website content is basic but relevant to the hospitality sector, targeting local moviegoers and cinema fans. The domain has been registered since 2008, consistent with the business history, indicating a stable presence in the market. Technically, the website uses legacy jQuery 1.10.1, Google Analytics, and Modernizr scripts. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and modern frameworks. Performance is moderate with asynchronous loading of analytics scripts. However, the site lacks HTTPS and security headers, which weakens its security posture. No privacy or cookie policies are published, and no contact information is provided, which impacts compliance and trust. From a security perspective, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low security maturity level. The use of Google Analytics suggests moderate user tracking without clear privacy compliance. No forms or sensitive data collection points were found, reducing immediate risk but also limiting user engagement features. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and user trust. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact information, and enhancing security headers to improve the site's credibility and compliance posture.

The Macedonian Stock Exchange (Македонска Берза АД Скопје) operates as the primary regulated securities market in North Macedonia, providing official listings, trading platforms, market data, indices, and regulatory information. The website targets investors, listed companies, brokers, and financial professionals, offering comprehensive market insights and educational resources. The business model centers on facilitating capital market operations and compliance within the Macedonian financial sector. Technically, the website employs a modern web stack including jQuery, Bootstrap, and C3.js for interactive charts, hosted on a local provider (uhost.mk). The site is mobile-optimized with good SEO and accessibility basics, though some enhancements could improve accessibility compliance. The infrastructure supports dynamic market data updates and user interaction via search and contact forms. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is good with a clear privacy policy and cookie banner aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a financial institution, with moderate technical maturity and compliance. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen the platform.

JSB realitní is a small Czech Republic-based real estate company specializing in brokerage services for residential and commercial properties, including sales, rentals, and problematic property solutions such as debt and foreclosure management. The company also operates a related construction business for property renovations. The website is professionally designed with clear navigation and relevant content targeting local clients in Prague and surrounding areas. However, the absence of WHOIS data and security policies reduces trustworthiness. Technically, the site uses common web technologies like jQuery and Bootstrap but lacks visible HTTPS and security headers, which are critical for secure operations. No privacy or cookie policies are present, indicating compliance gaps. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

I.M. Matters from ACP is a professional medical news and information website targeting internal medicine physicians. It is affiliated with the American College of Physicians (ACP), providing news, clinical newsletters, and updates on medical policies and practices. The website serves as a trusted source for healthcare professionals with a focus on internal medicine. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Google Analytics, and various marketing automation and tracking tools. Hosting is via Amazon AWS DNS infrastructure, and the site is mobile optimized with good navigation and content structure. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Business credibility is supported by ACP affiliation and award recognition. Overall, the site is professional, trustworthy, and well maintained.

L

Ličko-senjska županija

licko-senjska.hr

52

Ličko-senjska županija is the official regional government entity for the Ličko-senjska County in Croatia. The website serves as the primary digital platform for disseminating public administration information, news, official documents, tenders, and transparency reports. It targets residents, businesses, and stakeholders within the county, providing comprehensive access to government services and updates. The site reflects a medium-sized government organization with a focus on regional development, public services, and community engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Owl Carousel, and Google Fonts, built on a CMS platform by VIT. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security is robust with HTTPS enforced and a Content-Security-Policy header, although some additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The security posture is strong, with no detected vulnerabilities or exposed sensitive data. The site lacks a security.txt file and explicit incident response contacts, which are recommended for improved security transparency. The domain registration is consistent with the official government entity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively.

ALSENTA s.r.o. is a Czech Republic based technology company founded in 2008, specializing in providing digital tools and services to enhance business efficiency. Their offerings include B2B identification tools (Seeky.cz), supplier engagement and reverse auction platforms (Alsenta.com), comprehensive business data services (LightData.cz), and outsourcing of procurement activities. The company also manages several related projects such as B2Bpoptavka.CZ and iFirmy.cz, positioning itself as a multifaceted service provider in the B2B and business intelligence space. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence.

S

SAHM

sahm-glass.cz

53

SAHM is a Czech-based company specializing in the decoration of beverage glassware, providing customized branding solutions primarily for the beverage industry including beer, wine, spirits, and non-alcoholic drinks. The company operates an e-commerce platform offering a variety of decorated glass products and related services such as laser engraving and screen printing. Their market position is that of an established medium-sized manufacturer serving B2B clients in the Czech Republic and potentially neighboring markets. Technically, the website employs a range of modern JavaScript libraries including jQuery, Bootstrap, and Google Analytics for tracking and user engagement. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. The CMS appears to be a proprietary or specialized platform, possibly MagnetPro, tailored for e-commerce and product customization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating compliance with GDPR. However, the absence of visible security headers and missing WHOIS domain registration data are concerns that reduce overall trustworthiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy front for SAHM's business, but the lack of WHOIS transparency and some security header omissions suggest areas for improvement. Strategic recommendations include enhancing domain registration transparency, implementing comprehensive security headers, and publishing explicit security and incident response policies.