Security Directory

E

Ebo-systems S.A.S

ebo-systems.com

10

Ebo Systems is a specialist manufacturer of composite cable tray systems with over 60 years of experience, serving demanding industrial sectors such as energy, transportation, chemistry, and water. The company is part of the Niedax Group, a global leader in cable management solutions, which strengthens its market position and global reach across 27 countries. The website reflects a professional and well-structured digital presence built on WordPress, leveraging modern technologies and SEO best practices. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though explicit security policies and privacy compliance documentation are lacking. WHOIS data is unavailable, which reduces transparency but does not negate the evident legitimacy of the business. Overall, the website is a credible and professional representation of a medium-sized industrial supplier.

F

Forstbetrieb Region Aarau

forst-aarau.ch

51

Forstbetrieb Region Aarau is a regional forestry management organization serving multiple municipalities in Switzerland, primarily Aarau, Biberstein, and Unterentfelden. The organization manages approximately 916 hectares of forest land, focusing on sustainable wood harvesting and diverse forestry services including garden and park forestry, tree care, root stock milling, consulting, and sales of firewood and forest products. The website is professionally designed using Joomla CMS and Bootstrap framework, providing clear navigation and relevant content in German for its target audience. Contact information is prominently displayed, enhancing business credibility. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some security headers and privacy compliance mechanisms such as cookie consent. No blocking or WAF challenges were detected, allowing full content access.

N

Nau.ch

nau.ch

49

Nau.ch is a Swiss online news portal delivering news content focused on Switzerland, covering sports, politics, and people. The website targets a general Swiss audience and positions itself as a modern news platform with multimedia content including videos. Technically, the site uses the Qwik framework, integrates Google Analytics and Tag Manager, and employs OneSignal for push notifications, indicating a mature digital infrastructure optimized for performance and mobile responsiveness. Security-wise, the site enforces HTTPS and appears to implement standard security headers, but lacks explicit published privacy and cookie policies, which are critical for GDPR compliance. No contact or incident response information is readily available, which could impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security transparency.

A

Aji Groupe

aji-groupe.com

51

Aji Groupe is a specialized communication agency based in Alsace, France, focusing on the gastronomy sector. Founded in 2015, the company offers a range of services including culinary photography, custom website creation, social media management, and proprietary software solutions such as Aji Box and Aji Manager. The agency positions itself as a regional expert with a strong emphasis on digital marketing tailored to culinary businesses. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern libraries and Google reCAPTCHA for security. Hosting is provided by OVH sas, a reputable French provider. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website is professional, well-branded, and compliant with GDPR, with clear trust indicators such as certifications and client testimonials.

E

Expano

expano.si

43

Expano.si is a well-established regional cultural and tourism promotion website focused on the Pomurje region in Slovenia. It offers immersive exhibitions, event information, ticket sales, and a retail shop, targeting tourists, families, and business visitors. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages. Technically, it uses modern web technologies including Google Maps API, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and vulnerability disclosures. Overall, the site is trustworthy and compliant with GDPR, supported by official EU and Slovenian government partnerships and certifications.

B

BOA arhitektid

boa.ee

47

BOA arhitektid is an established Estonian architecture firm specializing in architecture and main design services. Founded in 2011, the company presents a professional online presence showcasing a portfolio of architectural projects and competitions. The website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization. The technical infrastructure includes modern web technologies such as jQuery and Google Fonts, with hosting likely provided by Zone Media OÜ, an Estonian registrar and hosting provider. The site implements HTTPS and a cookie consent mechanism via CookieYes, reflecting a basic level of privacy compliance. However, explicit privacy policies and terms of service are not found, which could be improved for better compliance and user trust. Security posture is moderate with HTTPS enabled but lacks visible security headers and incident response contacts. Overall, the website is professional, well-structured, and suitable for its target audience of clients seeking architectural services.

T

Teamdash

teamdash.com

10

Teamdash is a technology company specializing in AI-enabled recruitment software designed for in-house talent acquisition teams. Their platform offers a comprehensive suite of tools including applicant tracking, recruitment marketing, video interviewing, automation, and analytics to streamline hiring processes and improve recruitment outcomes. The company positions itself as a highly customizable and innovative solution in the recruitment software market, supported by positive user ratings and industry recognition. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and Google Tag Manager integration. The site is well-structured with SEO best practices and mobile optimization, providing a professional user experience. However, the absence of WHOIS data and registrant information introduces some uncertainty about domain registration legitimacy. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service pages. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the security posture is good but could be improved with additional transparency and security controls. The overall risk assessment is moderate with recommendations to publish clear privacy and terms policies, enhance security headers, and clarify domain registration details to improve trust and compliance.

H

HD Televizija – HDTV eZine – Osnove, vijesti, upute i testovi televizora

hdtelevizija.com

52

HD Televizija is a Croatian niche media website specializing in HDTV technology, television reviews, buying guides, and calibration tutorials. Established in 2007, it serves a dedicated audience of consumers and enthusiasts interested in high-definition television technology and related equipment. The site operates primarily in Croatian with an English section, monetizing through advertising and affiliate marketing. Technically, the website is built on WordPress using the Jannah theme, leveraging common web technologies such as jQuery and Google Fonts. It employs Google Analytics and Adsense for tracking and monetization. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks published privacy and cookie policies, security policies, and vulnerability disclosures, which are compliance and trust gaps. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security transparency.

R

Recenzije Filmova i Serija

recenzijefilmova.com

53

Recenzije Filmova i Serija is a small media website focused on providing film and series reviews, news, trailers, and recommendations primarily targeting movie and series enthusiasts. The site is built on WordPress and uses common web technologies such as PHP, JavaScript, and Google Fonts. The digital maturity is moderate with good SEO practices and mobile optimization, but lacks advanced security headers and privacy compliance features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trust and protect user data.

C

CC Real

cc-real.com

65

CC Real is a small Austrian real estate investment and asset management company with a well-established online presence since 2007. The website presents a professional image with clear business descriptions and contact information, targeting investors and clients interested in real estate assets. The technical infrastructure is based on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, indicating a mature digital setup. Analytics and marketing tools are implemented with GDPR compliance in mind, including cookie consent mechanisms and privacy policies. Security posture is good with HTTPS enabled and domain registration protections, though some security headers could be improved. Overall, the site is trustworthy and professionally maintained, with no critical vulnerabilities or suspicious indicators detected.

C

CoolHotels.in

coolhotels.in

53

CoolHotels.in is a boutique online platform specializing in discovering and booking unique, luxurious, and curated hotels worldwide. Founded in 2021, the company targets travelers seeking distinctive hotel experiences through expert-curated guides and simple online booking links. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies including Google Fonts, Leaflet for maps, and Google Analytics for tracking, with a custom CMS or framework. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and formal security policies are absent. Privacy compliance is well addressed with a clear privacy and cookie policy. Overall, the business appears legitimate and trustworthy with consistent WHOIS data and no suspicious indicators.

W

wimagguc

wimagguc.com

60

The website www.wimagguc.com is a personal newsletter hosted on the Substack platform, focusing on publishing articles and essays under the brand 'wimagguc'. The publication was launched approximately 9 months ago and targets a general audience interested in thoughtful media content. The business model revolves around subscription-based content delivery via Substack, with no direct company contact information or extensive business infrastructure visible on the site. Technically, the site leverages Substack's hosting and CDN services, uses HTTPS with good SSL configuration, and integrates third-party services like Sentry for error tracking and Calendly for scheduling. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Privacy compliance is good, with clear links to Substack's privacy and terms pages and a cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences, but the lack of WHOIS data and direct contact information limits full business credibility assessment.

A

Abicart.se

abicart.se

57

Abicart.se is a Swedish e-commerce platform operated by Textalk AB, offering a comprehensive SaaS solution for businesses to start and manage online shops. The platform provides modern payment integrations, logistics support, multilingual capabilities, and AI-powered features such as automatic product description generation and translations. Positioned as one of Sweden's leading e-commerce platforms, Abicart targets entrepreneurs and businesses seeking affordable and scalable online store solutions. Technically, the website employs modern web technologies including React and Bootstrap, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and a public security policy are absent. WHOIS data for the www subdomain is unavailable, but the main domain and business legitimacy are supported by consistent branding and contact information. Overall, the site demonstrates a professional, trustworthy, and user-friendly e-commerce service with strong market positioning in Sweden and the Nordic region.

K

Katalozi.net / Svi katalozi na jednom mjestu

katalozi.net

56

Katalozi.net is a Croatian retail catalog aggregation website established in 2012, providing users with access to various promotional catalogs and offers from multiple retailers. The site leverages WordPress CMS with Yoast SEO for content management and optimization, and monetizes through Google Adsense advertising. The technical infrastructure includes Cloudflare DNS and hosting via GoDaddy.com, LLC. The website is well-structured with good navigation and content relevance, targeting general retail consumers in Croatia and neighboring regions. Security posture is moderate with HTTPS enabled and domain registration locks, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and trustworthy for its business purpose but requires improvements in privacy and security disclosures.

Gorivo.com operates as a regional ride-sharing platform primarily serving Croatia and neighboring countries. It facilitates peer-to-peer transportation by allowing users to offer and request rides, focusing on routes within Croatia and nearby European nations. The platform has been active since 2003, indicating a mature presence in its niche market. The website's business model centers on connecting drivers and passengers, providing a cost-effective and community-driven transportation alternative. Its market position is niche but stable, targeting individuals seeking carpooling options in the region. Technically, the website is built on ASP.NET WebForms with supporting libraries such as jQuery and Bootstrap, reflecting a legacy but functional technology stack. The site includes standard web fonts, UI components, and Google Adsense for monetization. Performance and mobile optimization are basic, with room for modernization. The site employs cookie consent mechanisms and basic privacy compliance features, though lacks advanced SEO and accessibility optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be a gap in compliance and trust. Advertising practices involve multiple ad networks and tracking vendors, indicating moderate user tracking. The overall security posture is average, with recommendations to enhance headers, enable DNSSEC, and publish security policies. Overall, Gorivo.com presents a functional but basic digital presence with moderate trustworthiness and compliance. Strategic improvements in security, privacy transparency, and technical modernization would enhance its risk profile and user confidence.

H

Vozni red vlakova | Udaljenosti.com

hznet.hr

44

Udaljenosti.com is a Croatian travel information website specializing in train schedules and travel planning for Croatian Railways. It targets travelers and commuters in Croatia, providing distance calculations and schedule lookups. The site operates primarily on an advertising revenue model and has been active since at least 2012. Technically, it uses a mix of legacy and modern web technologies including Google Fonts, Leaflet maps, Google Maps API, and Google Analytics. The site implements a cookie consent mechanism and integrates multiple advertising and tracking services. Security posture is moderate but could be improved by updating outdated libraries and adding security headers. WHOIS data is unavailable, which raises some concerns about domain legitimacy despite the active and functional website. Overall, the site is functional and provides relevant content but should address security and legitimacy concerns for improved trust.

WhatAltitude.com is a small, niche website created by Jonatan Heyman in 2013 that provides users with altitude information based on their GPS location. The site is a single-purpose informational tool supported by advertising revenue and uses multiple ad networks and tracking services. Technically, the site employs standard web technologies including jQuery, Google Fonts, Google Analytics, and social media SDKs, hosted behind Cloudflare DNS. Security posture is adequate with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not active and security headers are not explicitly detected. Privacy compliance is addressed via an embedded consent management platform, ensuring GDPR adherence. The site lacks formal contact emails or phone numbers and does not provide terms of service or explicit security policies. Overall, the website is safe, professional, and trustworthy for general audiences.

B

bedandbreakfast.guide

bedandbreakfast.guide

52

Bedandbreakfast.guide is a specialized online travel guide and booking platform focused on bed and breakfast accommodations worldwide. Established in 2014, it offers curated listings of unique and locally owned B&Bs, along with recommendations for nearby attractions such as coffee shops, restaurants, and museums. The website targets travelers seeking authentic and charming lodging experiences. Technically, the site employs modern web technologies including Google Fonts, Leaflet maps, and Google Analytics, ensuring a responsive and user-friendly experience. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. Security-wise, the site uses HTTPS and avoids exposing sensitive data, though it lacks explicit security headers and formal security policies. The WHOIS data is unavailable due to TLD restrictions and privacy protections, but the domain appears legitimate and consistent with the business profile. Overall, the website presents a professional and trustworthy platform for travelers interested in bed and breakfast accommodations.

L

LuxuryHotel.world

luxuryhotel.world

53

LuxuryHotel.world is a specialized online platform dedicated to providing comprehensive and independent guides to luxury hotels worldwide. Established in 2018, the company focuses on curating high-end five-star hotels and nearby amenities such as restaurants and bars, targeting discerning luxury travelers. The website offers detailed hotel listings with booking links, emphasizing trust and independence by not accepting payments for inclusion or preferential placement. Technically, the site employs modern web technologies including Google Fonts, SVG icons, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR, though it lacks some advanced security headers and formal incident response disclosures. Overall, the domain WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns are detected. The website presents a professional and trustworthy front with moderate to good technical and security posture.

Longitude.me is a small technology service operated by Heylab AB, based in Sweden, offering a simple and privacy-conscious real-time location sharing platform. The website is authored by Jonatan Heyman and is part of a portfolio of related travel and location-based projects. The service targets general internet users who want to share their location easily and temporarily. Technically, the site uses modern JavaScript libraries, integrates social media widgets, and is hosted with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No direct contact information or incident response details are provided, limiting transparency. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

H

Heylab AB

locust.io

51

Locust.io is an established open source load testing framework developed and maintained by Heylab AB, a Swedish company founded in 2011. The platform enables developers and performance testers to define user behavior in Python code and simulate millions of simultaneous users for scalable load testing. The website demonstrates a strong community presence with numerous contributors and endorsements from reputable companies such as Riot Games, Mozilla, Microsoft, and Google. Commercial support is offered via the related domain locust.cloud, indicating a hybrid open source and service business model. Technically, the website employs modern web technologies including Python-based backend, JavaScript, Google Fonts, Twitter widgets, and GitHub integration. Hosting and DNS services are managed through Cloudflare, ensuring reliable performance and security. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with fast loading times and clear navigation. However, some security best practices such as DNSSEC and security headers are not enabled, and privacy compliance documentation is absent. From a security perspective, the site uses HTTPS and has domain transfer protections in place. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is transparent and consistent with the business identity, enhancing trustworthiness. Nonetheless, the absence of privacy and cookie policies, security incident contacts, and vulnerability disclosure mechanisms represent compliance and security posture gaps. Overall, Locust.io presents a professional, trustworthy, and technically mature platform with room for improvement in privacy compliance and security policy transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

S

Statistics Iceland

statice.is

65

Statistics Iceland is the official national statistical institute of Iceland, providing comprehensive and authoritative data on population, society, business sectors, economy, and environment. The website serves a broad audience including researchers, policymakers, businesses, and the general public, offering access to statistical databases, tailored statistics, microdata services, and a variety of publications. The organization is well-established, with a domain registered since 1998, and holds recognized certifications such as ISO 9001 and ISO 27001, reinforcing its credibility and commitment to quality and security. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Fonts, and Datawrapper for interactive charts. It is hosted by a local Icelandic hosting provider, 1984 Hosting, and demonstrates good performance, mobile optimization, and accessibility. The site uses HTTPS with a good SSL configuration, although some security headers are missing. No WAF or blocking mechanisms are detected, allowing full content accessibility. From a security perspective, the site follows best practices such as HTTPS enforcement and absence of exposed sensitive data. However, it lacks explicit cookie consent mechanisms and a published vulnerability disclosure policy. The WHOIS data aligns well with the website's official status, showing consistent registration details and domain age appropriate for a government entity. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in privacy compliance and security header implementation. It effectively supports its mission as Iceland's official statistical authority.

G

www.greindubetur.is

greindubetur.is

59

The website www.greindubetur.is appears to be an informational site related to a competition or educational event, likely based in Iceland given the domain and timezone references. The site is built on the Squarespace platform, leveraging its standard templates and integrations such as Matomo for analytics and Google Fonts for typography. The business focus is on providing information about the competition, including rules, schedules, and educational materials, targeting participants and interested audiences in Iceland. The site links to a partner domain statscompetition.eu for registration, indicating a partnership or service relationship. From a technical perspective, the site is hosted on Squarespace, ensuring reliable infrastructure and HTTPS security. The site is moderately optimized for mobile and has a good design quality with clear navigation. However, there is a lack of advanced SEO and accessibility features. The site does not implement common security headers, which could be improved to enhance security posture. Security-wise, the site uses HTTPS and does not expose sensitive data or vulnerable libraries in the provided content. However, the absence of privacy and cookie policies, terms of service, and contact information reduces compliance with GDPR and general privacy best practices. No incident response or vulnerability disclosure information is present, which is a gap for security readiness. Overall, the site is functional and professionally presented but lacks several compliance and security best practices. The domain WHOIS data is not publicly available, which is common for Icelandic domains but slightly reduces trust. There are no indications of malicious activity or adult content, making the site safe for general audiences. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture.

The website represents the Gütegemeinschaft Anwerbung und Vermittlung von Pflegekräften aus dem Ausland e.V., a small German healthcare-focused organization providing a certification (RAL Gütezeichen) for fair recruitment of nursing professionals from abroad. The site positions itself as a trusted guide and certifier ensuring ethical, transparent, and fair recruitment practices. Technically, the site is built on the 1&1 IONOS Website Editor platform, using standard web technologies such as jQuery, Flexslider, and service workers for PWA capabilities. It employs Snowplow Analytics for user tracking and has a cookie consent mechanism in place, indicating GDPR awareness. Security posture is good with HTTPS enforced, but explicit security headers are not detected, and no dedicated security or incident response pages are found. Overall, the site is professional, trustworthy, and well-structured for its purpose.

K

Kuratorium Deutsche Altershilfe

einzelhelfer.de

46

The website einzelhelfer.de is a German-language informational platform dedicated to neighborhood help (Nachbarschaftshilfe) for care-dependent individuals, primarily funded and supported by the German Federal Ministry of Health and implemented by the Kuratorium Deutsche Altershilfe. It serves as a resource hub for recognized neighborhood help programs in several German federal states, aiming to support elderly and care-dependent people to live independently at home. The project was active from 2017 to 2020, and the website remains online as an archive and informational resource. Technically, the site is built on WordPress, utilizing common plugins such as SiteOrigin Panels, Toolset Blocks, and accessibility enhancements. It is hosted on Strato servers in Germany, uses HTTPS with a good SSL configuration, and includes accessibility features. The site performs moderately well with good mobile optimization and SEO practices. However, it lacks some modern security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses an accessibility plugin and Jetpack Stats for minimal user tracking. No critical vulnerabilities or security incidents are evident. Privacy compliance is partial, with a privacy policy page present but no cookie consent banner. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is a trustworthy, government-backed informational resource with good content quality and technical implementation. Strategic improvements include adding cookie consent, security headers, and more explicit contact and incident response information to enhance compliance and trust.

O

Oraclum Intelligence Systems

oraclum.co.uk

51

Oraclum Intelligence Systems is a UK-based data science company specializing in predictive analytics and market research. Their proprietary Bayesian Adjusted Social Network (BASON) Survey technology enables them to deliver highly accurate predictions, including notable successes such as Brexit and US election outcomes. The company targets businesses and organizations seeking advanced data-driven insights to optimize market strategies and understand customer behavior. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on their predictive services. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized and performs moderately well, with good SEO practices and structured data implemented. However, some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for enhancement. The WHOIS data for the domain www.oraclum.co.uk is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. Despite this, the website is fully accessible and professionally maintained, suggesting the domain may be an alias or subdomain. This discrepancy slightly reduces trust but does not indicate malicious intent. Privacy policy is present and GDPR compliant, but cookie consent is missing. Contact information is limited to a contact form, with no explicit emails or phone numbers provided. Overall, Oraclum presents a credible and innovative business with a strong technical foundation and good security practices. Strategic improvements in compliance and security headers would enhance trust and user confidence.

H

Heroina | Samo još jedna WordPress web-stranica

heroina.hr

39

Heroina.hr is a small-scale WordPress website primarily using the Brooklyn theme by United Themes. The site appears to be a minimal or placeholder site with very limited business content, no privacy or cookie policies, and no contact information. The technical infrastructure is based on WordPress with multiple JavaScript libraries and plugins, indicating a moderate level of digital maturity but lacking in SEO and accessibility optimizations. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance measures. Overall, the site presents a low-risk profile but lacks professionalism and trust indicators, limiting its business credibility.

W

Whites Powersports

whitespowersports.com

69

Whites Powersports operates as a medium-sized retail and distribution company specializing in powersports products and accessories, primarily serving the New Zealand market. The company leverages a Shopify-based e-commerce platform to showcase and sell multiple brands, targeting powersports enthusiasts and retail partners. The website demonstrates a professional design with consistent branding and clear navigation, supporting a positive user experience. Technical infrastructure is modern, utilizing Shopify's hosting and content delivery network, with integration of analytics and marketing tools such as Google Analytics and Shopify Pixels. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data and lack of visible contact or security policies slightly diminish the overall trustworthiness. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers could be improved. Overall, the site presents a secure and compliant e-commerce presence with room for enhanced transparency and security documentation.

R

Rentlio d.o.o.

rentl.io

66

Rentlio d.o.o. operates a leading cloud-based property management system, channel manager, and booking engine tailored for the hospitality industry, including hotels, apartments, and property management companies. Founded in 2014 and headquartered in Zadar, Croatia, Rentlio positions itself as a comprehensive solution to streamline property management and drive business growth. The company targets hoteliers, vacation rental owners, and multi-property managers, offering a SaaS model accessible via web, iOS, and Android platforms. The website reflects a professional and modern digital presence with strong branding and positive user ratings.

Smaily is a technology company providing a SaaS platform focused on email marketing and newsletter creation. The website offers a simple, user-friendly interface with social login options and an award-winning drag and drop editor, targeting businesses and marketers seeking efficient email marketing solutions. The platform emphasizes ease of use and integration capabilities with over 1000 services. Technically, the website uses modern web technologies including HTTPS, Google Fonts, and Google Tag Manager for analytics. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS enforced and social authentication, but lacks visible security headers and published security policies. The absence of WHOIS data for the domain is a significant concern, suggesting possible domain registration issues that impact trustworthiness. Privacy compliance is partial with a Terms of Service link but no visible cookie consent or privacy policy on the login page. Overall, the site is functional and professional but requires improvements in transparency, security policies, and domain legitimacy verification.

Focus Nerez is a specialized professional magazine dedicated to stainless and corrosion-resistant steels, targeting industry professionals and businesses in the manufacturing sector. The website provides news, technical articles, e-paper subscriptions, and advertising opportunities, positioning itself as a niche media outlet within the Czech Republic and neighboring regions. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. However, some technical improvements are needed, particularly in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure appear professional and trustworthy. Overall, the site demonstrates a moderate level of digital maturity with room for security and compliance enhancements.

PROHELP SERVICES, s.r.o. is a Czech-based company specializing in communication solutions across various sectors including office environments, retail, industrial settings, security forces, and marine applications. The company offers a range of products such as telephones, radios, headsets, voice communicators, intercoms, and safety equipment, complemented by services like web design, marketing, and support. Their market position is that of a niche specialist providing tailored communication solutions to business clients. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the website is built on WordPress, leveraging modern plugins for SEO, GDPR compliance, and customer support. It uses common web technologies such as jQuery and Google Maps API, and implements HTTPS with good SSL configuration. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, explicit security policies, incident response plans, and vulnerability disclosure information are not present. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate. Overall, the website presents a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and WHOIS data verification are recommended to enhance trust and compliance.

M

MyWebdesign.cz s.r.o.

mywebdesign.cz

52

MyWebdesign.cz s.r.o. is a Czech-based technology company specializing in custom development of extensive e-commerce platforms and mobile applications. With over 20 years of experience, the company serves businesses aiming to scale their online sales, offering tailored solutions including B2B and B2C functionalities, integration with accounting and inventory systems, and 24/7 support. The website reflects a professional and trustworthy brand with strong client testimonials from notable companies such as ZOOT and Plzeňský Prazdroj. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with Google Fonts and Google reCAPTCHA v3 integrated for spam protection. Hosting is managed by REG-ZONER, consistent with WHOIS data. The site is mobile-optimized, fast-loading, and SEO-friendly, though it lacks some advanced security headers and publicly available privacy and cookie policies. From a security perspective, the site uses HTTPS and reCAPTCHA, but the absence of explicit security headers and privacy documentation indicates room for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website presents a high-quality, professional digital presence with minor compliance gaps. Strategic enhancements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

F

Financial Planning Standards Board Ltd.

fpsb.org

63

Financial Planning Standards Board Ltd. (FPSB) is a globally recognized standards-setting organization dedicated to advancing the financial planning profession. The website highlights FPSB's role in promoting CFP certification as the global mark of excellence, supporting a worldwide network of affiliate organizations, and providing research, advocacy, and professional development resources. The site is well-structured, professionally designed, and targets financial planning professionals and consumers seeking trusted financial advice. Technically, the site is built on WordPress, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity, with Cloudflare providing DNS and CDN services. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent managed via OneTrust. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. Overall, the website demonstrates a mature digital presence with good privacy compliance and trust indicators.

Budoucipestouni.cz is a professionally maintained website operated by Sdružení pěstounských rodin z.s., a Czech non-profit organization dedicated to supporting foster families and promoting foster care and adoption. The site offers a variety of services including online and email counseling, educational quizzes, webinars, and informational infographics, targeting prospective foster parents and stakeholders in child welfare. The organization has a credible market position with a history dating back to 1995 and receives support from the Czech Ministry of Labour and Social Affairs. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR for cookie consent management. It uses HTTPS with good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices like security headers and a published privacy policy are missing. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR principles, but lacks explicit privacy and terms of service documents and security headers that could enhance protection against common web threats. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but reduces transparency. Overall, Budoucipestouni.cz presents a trustworthy and professional online presence for a non-profit organization focused on foster care support. Strategic improvements in privacy documentation and security headers would further strengthen its security posture and compliance.

P

Poradenské a krizové centrum, p. o.

pkcentrum.cz

43

Poradenské a krizové centrum, p. o. is a Czech non-profit organization founded in 2022, providing accessible help and support to individuals and families facing difficult life situations, including children at risk and victims of domestic violence. The organization operates primarily in the Zlín region and offers a range of social and psychological services such as crisis intervention, counseling, mediation, and substitute family care. The website reflects a professional and consistent brand image with strong regional partnerships and sponsors. Technically, the site is built on WordPress with modern web technologies, includes accessibility features, and enforces HTTPS with cookie consent mechanisms, indicating a good level of digital maturity. Security posture is adequate but could be improved by adding explicit security headers and incident response information. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

T

TTP GROUP s.r.o.

materasso-eshop.cz

68

Materasso-eshop.cz is an established Czech e-commerce retailer specializing in high-quality mattresses, beds, bed frames, and bedding accessories. The company, operating under TTP GROUP s.r.o., emphasizes detailed craftsmanship and advanced technology in mattress production, targeting consumers seeking comfort and personalized sleep solutions. The website offers a broad product catalog with clear pricing, variants, and availability, supported by customer service and a physical store pickup option. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and uses the Jednicky e-shop system CMS. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and secure form handling, though the absence of explicit security policies and incident response contacts suggests areas for enhancement. The lack of WHOIS data limits domain trust verification, but the professional presentation and business transparency mitigate concerns. Overall, the website presents a trustworthy and user-friendly platform for mattress retail, with recommendations to improve security headers, publish security policies, and verify domain registration details to strengthen trust and compliance.

I

InstaGYM

instagym.cz

63

InstaGYM is a Czech-based fitness company specializing in organizing fitness camps primarily in Slovakia and abroad, as well as providing online personal training and nutrition consulting services. The company positions itself as a market leader in its niche, targeting fitness enthusiasts seeking professional training and wellness solutions. The website is professionally designed using modern web technologies such as Nuxt.js and integrates popular analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Exponea. The technical infrastructure supports a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, although a cookie consent mechanism is implemented. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is not uncommon for small businesses. Overall, InstaGYM presents a credible and professional online presence with room for improvement in privacy and security transparency.

G

GEO Materiály

geomaterialy.sk

48

Geomaterialy.sk is a Slovak-based small business specializing in the supply of geosynthetic and construction materials such as hydroisolation foils, geotextiles, geomeshes, and related products. The company targets construction professionals and industrial clients within Slovakia, operating primarily through an e-commerce platform. The website is professionally designed with clear navigation and product categorization, reflecting a focused business model in the manufacturing sector. The domain is relatively new, registered in 2023, consistent with the company's recent establishment. Technically, the website employs modern web technologies including jQuery, Bootstrap 4, and Google Analytics, hosted on Websupport infrastructure with DNSSEC and HTTPS enabled, ensuring a secure connection. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks visible security headers and a cookie consent mechanism. No explicit privacy policy or GDPR compliance statements are present, and no incident response or vulnerability disclosure information is provided. Tracking is done via Google Analytics and Tag Manager, indicating moderate user tracking without advanced privacy controls. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The business credibility is strong given clear contact information and consistent domain registration data. Strategic recommendations include implementing security headers, cookie consent, and detailed privacy policies to enhance trust and compliance.

F

Fotoklub Čakovec

fotoklub-cakovec.hr

40

Fotoklub Čakovec is a small, local photography club based in Croatia, established in 2008. The organization focuses on photography education, community workshops, exhibitions, and publishing photography-related books. Their website is built on WordPress and uses a variety of plugins to support photo galleries, user interaction, and SEO. The club targets photography enthusiasts including children and adults, providing educational and cultural services. The website content is rich and professionally presented, with consistent branding and good navigation. Technically, the site uses modern web technologies including WordPress 6.4.7, Yoast SEO, and Google Fonts. It is hosted under a Croatian registrar (CARNET) with DNS managed by infoitdns.com. The site is served over HTTPS with good SSL configuration and includes CAPTCHA protection on forms to prevent abuse. However, some security best practices such as security headers are not explicitly detected, and there is no cookie consent mechanism despite GDPR privacy policy presence. From a security perspective, the site shows a moderate security posture with HTTPS, CAPTCHA, and no visible sensitive data exposure. The absence of explicit security headers and lack of published incident response or vulnerability disclosure policies are areas for improvement. The domain registration data is consistent with the website content and business type, indicating legitimacy and trustworthiness. Overall, the website is a well-maintained, content-rich platform for a non-profit photography club with good technical and security foundations but could enhance privacy compliance and security transparency to improve trust and compliance.

H

Heineken

heineken.sk

67

Heineken's Slovakian website serves primarily as an age verification gateway, ensuring compliance with legal drinking age regulations before granting access to alcohol-related content. The site reflects the brand's global presence and commitment to responsible marketing. Technically, the site uses modern web standards with responsive design and Google Fonts integration, but lacks visible advanced frameworks or CMS indicators. Security posture is moderate; while HTTPS is implied, no explicit security headers or privacy policies are present on this page, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain legitimacy verification, but the strong brand presence and professional design mitigate concerns. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact transparency.

C

CM Slovakia s.r.o.

nabager.sk

52

CM Slovakia s.r.o. operates a professional website focused on the sale and servicing of spare parts and machinery for construction equipment, including brands like Hyundai, Bobcat, and Honda. The company targets Slovak and broader European markets, offering B2B and B2C services such as parts sales, machinery rental, and maintenance programs. The website reflects a regional distributor position with a clear business model centered on construction machinery support. Technically, the website employs modern front-end technologies including jQuery, Slick Slider, FontAwesome, and Bootstrap 4, ensuring a responsive and user-friendly experience. SEO and accessibility are adequately addressed, though some improvements in accessibility and security headers could enhance the technical maturity. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or exposed sensitive data were detected, but security headers and formal policies should be added to strengthen the security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, presenting a low-risk profile. Strategic improvements in security policy transparency and technical security controls are recommended to further enhance trust and resilience.

V

VUMZ NZ

vumznz.sk

58

VUMZ NZ is a Slovakian company specializing in the manufacturing and assembly of steel constructions including steel halls, galvanized halls, fire ladders, stairs, and entertainment technology. The company offers comprehensive services from project documentation through construction and building approval. The website reflects a small-sized manufacturing business with a clear focus on steel architecture and construction solutions. The target audience includes businesses and individuals seeking durable steel building solutions. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies such as jQuery, Skrollr.js, and Snowplow Analytics for tracking. The site is hosted on a CDN with HTTPS enforced and includes PWA features via service workers, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

L

LIPEX PLUS spol. s r.o.

hondacl.cz

43

Honda Česká Lípa, operated by LIPEX PLUS spol. s r.o., is a small-sized authorized dealer and service provider specializing in Honda vehicles and garden machinery in the Czech Republic. The company offers a comprehensive range of automotive services including sales of new and used cars, authorized repairs, tire services, emission testing, and garden equipment sales. The website reflects a professional and consistent brand image with clear contact information and customer testimonials, positioning the company as a trusted local business with over 20 years of experience. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. However, the absence of detected security headers and privacy policies indicates room for improvement in security and compliance. The site is accessible without any WAF or blocking mechanisms, but the lack of WHOIS data reduces domain trustworthiness and raises questions about domain registration transparency. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but the missing privacy and cookie policies and lack of incident response information highlight compliance gaps, particularly with GDPR. The use of Google Analytics suggests moderate user tracking, but without clear privacy disclosures. Overall, the security posture is moderate but could be enhanced with standard best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and verify domain registration details to improve trust and compliance. Enhancing incident response readiness and communicating data protection officer contacts would further strengthen their security culture and customer confidence.

S

SLOTPARTNERS

slotpartners.com

60

Slotpartners is an established online casino affiliate network founded in 2008, offering a portfolio of casino brands and attractive revenue share deals to affiliates. The website is professionally designed using WordPress and associated plugins, with a focus on promoting their affiliate program and brands. The technical infrastructure includes Cloudflare DNS and standard web technologies, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible within its niche but would benefit from enhanced privacy and security disclosures.

LunuBet is an online gambling platform targeting German-speaking users, offering betting and casino services. The website is relatively new, with domain registration in early 2024, and lacks transparency in business and compliance information. Technically, the site uses Cloudflare DNS and Google Fonts, with moderate performance and basic mobile optimization. Security posture is weak, with no DNSSEC, no security headers detected, and no visible privacy or cookie policies. No contact or incident response information is provided, which raises concerns about user support and compliance. Overall, the site presents a moderate risk profile typical of new gambling platforms with limited trust signals.

Z

ZotaBet

zotabet.com

56

ZotaBet operates as an online casino and sportsbook platform offering a wide range of gambling services including over 10,000 games, sportsbook betting, promotions, and VIP programs. The website targets adult users interested in online gambling and sports betting. The platform supports multiple languages and provides secure payment options along with 24/7 customer support. Technically, the site is built using modern JavaScript frameworks such as React, with integrations for customer tracking and payment processing. The site is mobile optimized and SEO friendly, providing a good user experience. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies or vulnerability disclosure programs. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

S

Solid Solutions

solidsolutions.so

54

Solid Solutions is a small technology company specializing in AI-driven SaaS products and solutions. Their website showcases an ecosystem of AI tools including custom AI agents, AI email writers, and sales agents for WhatsApp. The company targets developers, engineers, and growth professionals interested in AI innovation. The technical infrastructure is based on Webflow CMS with standard web technologies and moderate performance. The website is well designed, mobile optimized, and provides clear contact options but lacks formal privacy and security policies. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. Overall, the company appears legitimate but should improve transparency and security documentation.

K

Karki s.r.o.

indickadiyalo.cz

44

Diyalo Restaurant is a small hospitality business specializing in authentic Indian and Nepalese cuisine located in Česká Lípa, Czech Republic. The company, legally registered as Karki s.r.o., was founded in 2023 and has quickly established a strong local presence, supported by excellent customer reviews and recognition from Restaurant Guru. The website provides comprehensive information about the restaurant's offerings, including dine-in, online ordering through multiple partners, and event hosting services. The digital infrastructure is built on standard web technologies with a focus on responsive design and user experience, though it lacks advanced security headers and privacy compliance documentation. Security posture is moderate with HTTPS usage but could be improved with additional headers and policies. Overall, the website is professional and trustworthy but should address privacy and security policy gaps to enhance compliance and user trust.

Č

Česká internistická společnost

cisweb.cz

10

Česká internistická společnost (ČIS) is a professional association representing over 2,000 medical professionals specializing in internal medicine and its subspecialties in the Czech Republic. The organization focuses on education, training, event organization, and dissemination of medical guidelines and news to its members. The website serves as a portal for members to access educational videos, event calendars, and professional resources. The site is well-branded, professionally designed, and targets medical professionals with relevant and up-to-date content. Technically, the website uses a modern CMS (Solidpixels), integrates Google Fonts, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although a formal privacy policy is not clearly found on the main page. Security posture is good with HTTPS enforced and secure form handling, but lacks some advanced security headers. WHOIS data is unavailable, which reduces domain trustworthiness from a registration perspective, but the professional content and partner affiliations support legitimacy. Overall, the website is a credible and valuable resource for internal medicine professionals in the Czech Republic.