Security Directory

V

V-Label

v-label.eu

55

V-Label is a globally recognized certification organization specializing in vegan and vegetarian product labeling, established in Switzerland in 1996. The website serves as a comprehensive platform for producers, retailers, and consumers, offering certification services and product information. The organization holds a strong market position as the leading vegan and vegetarian trademark worldwide, with a broad international presence and partner network. Technically, the website is built on WordPress and employs modern web technologies including jQuery, cookie consent management via Borlabs Cookie, and analytics tools such as Google Analytics and HubSpot. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices, though some security headers are missing. From a security perspective, the site enforces HTTPS and manages user consent effectively, but lacks several common security headers that could enhance protection against clickjacking and MIME sniffing. The absence of WHOIS registration data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website is professional, content-rich, and user-friendly, but the missing domain registration information and some security header gaps suggest areas for improvement to strengthen trust and security posture.

Ö

Öko-völgy Alapítvány

okovolgy.hu

55

Öko-völgy Alapítvány is a Hungarian non-profit organization dedicated to fostering a sustainable, ecological, and organic farm community. The organization emphasizes education, volunteer work, and community engagement to promote environmental stewardship. The website serves as an informational and engagement platform, providing news, project details, and contact avenues for interested parties. The domain is well-established since 2007, supporting the organization's credibility and longevity. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Facebook Pixel for user tracking and marketing insights. The site is mobile-optimized with good SEO practices but lacks some advanced security headers and explicit privacy or cookie policies, which are areas for improvement. From a security perspective, the site uses HTTPS with a valid SSL configuration, but no advanced security headers were detected. There is no visible incident response or vulnerability disclosure information. The presence of multiple external gambling-related links and hidden promotional content may pose reputational risks and affect content safety ratings. Overall, the security posture is moderate but could be enhanced with better policies and headers. The overall risk is moderate with no critical security issues detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a security.txt file, and reviewing third-party content to ensure alignment with the organization's mission and audience expectations.

A

AVF (Association Végétarienne de France)

vegetarisme.fr

59

The Association Végétarienne de France (AVF) is a well-established French non-profit organization dedicated to promoting vegetarianism and supporting the transition to plant-based diets. The website serves as a comprehensive platform offering educational resources, advocacy campaigns, community engagement, and an online shop. AVF maintains a strong digital presence with multiple related domains and active social media channels, reinforcing its position as a key player in the vegetarian advocacy space in France. Technically, the website is built on a modern WordPress CMS with WooCommerce integration for e-commerce capabilities. It employs a variety of contemporary web technologies including Bootstrap, jQuery, Leaflet.js for maps, and Google services for analytics and tag management. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect forms. While some standard security headers are not explicitly visible, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. The absence of WHOIS data limits domain registration trust assessment, but the website's content and business information support its legitimacy. Overall, AVF's website is a professional, content-rich platform with a solid security posture and good privacy practices. It effectively supports the organization's mission and community engagement efforts.

D

Dansk Vegetarisk Forening

vegetarisk.dk

43

Dansk Vegetarisk Forening is a Danish non-profit organization dedicated to supporting vegetarians, vegans, and advocates of a green lifestyle. The organization offers memberships, political advocacy, education, and information services to its community. It holds a leading position in Denmark's vegetarian movement and maintains a strong digital presence with comprehensive content and active social media engagement. The website is built on WordPress using modern themes and plugins, ensuring good SEO and mobile responsiveness. Security measures such as HTTPS, security headers, and cookie consent mechanisms are properly implemented, reflecting a mature security posture. However, the site lacks explicit security policies and vulnerability disclosure information, which could enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-aligned with its mission, with recommendations to improve incident response transparency and accessibility features.

T

Tutmonda Esperantista Vegetarana Asocio

vegetarismo.info

55

The Tutmonda Esperantista Vegetarana Asocio (TEVA) is a small, international non-profit organization dedicated to promoting Esperanto among vegetarians and vegetarianism among Esperanto speakers. Founded in 1908 and currently hosted on WordPress.com, the website serves as an informational and community hub, offering resources such as bulletins, event information, and membership details. The technical infrastructure leverages WordPress.com hosting, Jetpack plugins, and integrates common advertising and analytics tools like Amazon Ads and Google Analytics. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy compliance is basic, with no explicit privacy or cookie policy pages found, but a cookie consent mechanism is present. Contact information is available primarily via email and social media channels. Overall, the website is professional, content-rich, and trustworthy, serving a niche community effectively.

I

Infenso d.o.o.

infenso.hr

44

Infenso d.o.o. is a Croatian technology company specializing in system integration, network equipment design and implementation, IoT solutions, application development, and advanced 3D visualization. Established in 2013, the company targets businesses and organizations seeking digital transformation and integration services. Their market position is that of a niche technology integrator within Croatia, leveraging modern digital tools and platforms to deliver tailored solutions. The website reflects a professional and consistent brand image with good content quality and relevant business information. Technically, the site is built on WordPress with Elementor, utilizing a modern tech stack including jQuery, Google Analytics, and various JavaScript libraries for enhanced user experience. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security policies and vulnerability disclosures. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

Gradsko društvo Crvenog križa Donji Miholjac is a local branch of the Croatian Red Cross, established in 2012, providing humanitarian aid, blood donation campaigns, social services such as home assistance, and community support activities. The organization targets local community members, volunteers, and donors, operating as a non-profit entity with a strong local presence and partnerships with municipal and regional government bodies. The website reflects this mission with relevant content, news updates, and event information.

G

Gradsko društvo Crvenog križa Beli Manastir

gdck-belimanastir.hr

42

Gradsko društvo Crvenog križa Beli Manastir is a local branch of the Croatian Red Cross focused on humanitarian aid, first aid education, blood donation, and volunteer coordination within the Beli Manastir community. The organization operates as a small non-profit entity with a clear mission to support vulnerable populations and promote community health and safety. Their market position is that of a trusted regional humanitarian organization affiliated with the national Croatian Red Cross and supported by European solidarity programs. Technically, the website is built on WordPress with a modern but moderate tech stack including Google Analytics and accessibility tools. The site is mobile optimized and SEO friendly, providing a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and anonymized analytics, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its community well, but could improve in security and privacy transparency.

Kryt Folimanka is a public underground shelter located in Prague 2, serving as the largest shelter in the district with capacity for 1300 people. The website provides information about the shelter, public tours, and related tourist services. The site is maintained by a government or municipal entity, indicated by the nature of the content and sector classification. Technically, the website uses a traditional web stack including Bootstrap, jQuery, and Google Analytics, hosted by Wedos. The site is accessible, uses HTTPS, and has moderate performance and mobile optimization. However, it lacks critical privacy and cookie policies, and no contact information is provided, which impacts compliance and user trust. Security posture is adequate with HTTPS but missing security headers and formal policies. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.

N

Nadační fond Dvojka srdcem

dvojkasrdcem.cz

44

Nadační fond Dvojka srdcem is a Czech non-profit foundation focused on providing social and financial assistance to residents of Prague 2, particularly families and individuals in need. The foundation offers support such as financial contributions for school supplies, extracurricular activities, and aid for individuals with health challenges. The website presents beneficiary stories and donation progress, reinforcing transparency and community engagement. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by a Czech hosting provider, aligning with the foundation's local focus. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal privacy and cookie policies, which are important for GDPR compliance. Overall, the site is professional, trustworthy, and well-structured, though improvements in privacy compliance and security headers are recommended.

K

Knihovna na Vinohradech

knv.cz

44

Knihovna na Vinohradech is a public library serving the Vinohrady district in Prague, Czech Republic. The website provides information about library services, events, exhibitions, and access to an online catalog. The institution operates as a non-profit entity affiliated with the local municipality (Městská část Praha 2). The site targets the general public and local community members interested in cultural and educational resources. Technically, the website is built on WordPress, utilizing common plugins such as MonsterInsights for analytics and SlideDeck for content presentation. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain registration data. The website design is basic but functional, with moderate performance and limited mobile optimization.

H

HMP - Mestska policie hl. m. Prahy

mppraha.info

42

The website mppraha.info is the official online presence of the Municipal Police of Prague, Czech Republic. It serves as an information portal for residents and visitors, providing details about police units, contact information, news updates, recruitment, and public safety services. The site is well-branded with official logos and consistent municipal police identity, targeting a general audience interested in public safety and municipal services in Prague. The business model is government public service with a large organizational size and established presence since 2014. Technically, the site is built on Joomla CMS with modern web technologies including jQuery, Leaflet for interactive maps, and Revolution Slider for visual content. It integrates social media platforms such as Facebook, Twitter, YouTube, and Instagram, and uses Google Analytics for visitor tracking. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Cookie consent is implemented, indicating some level of privacy compliance, but no explicit privacy policy or terms of service were found on the homepage. No incident response or vulnerability disclosure information is provided. Suspicious hidden links to adult content domains were detected in hidden HTML elements, likely spam injections, but these are not visible to users. Overall, the website is trustworthy and professional, with a strong business credibility score. Recommendations include enabling DNSSEC, adding security headers, publishing a privacy policy, and monitoring third-party scripts for vulnerabilities to improve security posture and compliance.

Malostranská beseda a.s. operates a multifaceted hospitality venue in Prague, offering club events, restaurant dining, brasserie, café, trick bar, gallery exhibitions, and catering services. The business targets a broad audience including locals and tourists interested in cultural and social events. The website reflects a well-structured digital presence with clear navigation and professional design, supporting the business model of event hosting and hospitality services. Partnerships with local and media entities, as well as municipal funding, reinforce its market position. Technically, the website employs modern web technologies such as Bootstrap, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a cookie consent mechanism, though lacks explicit privacy and terms of service pages. Security headers are not evident, and WHOIS data is unavailable, which limits domain trust verification. The site uses HTTPS, but additional security best practices could be implemented. From a security perspective, the site shows moderate maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy policy and incident response contacts, as well as missing WHOIS data, are gaps that should be addressed to improve compliance and trust. The cookie consent banner and detailed cookie information indicate some GDPR awareness. Overall, the website is professional and trustworthy for its hospitality business purpose, but improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance risk management and user trust.

I

Icareus Oy

icareus.com

59

Icareus Oy is a Finnish company specializing in premium online video and TV cloud solutions, serving broadcasters, media companies, sports organizations, enterprises, and public organizations globally. Established in 2001, it has a strong market presence with customers in over 60 countries. The company offers a comprehensive suite of products including OTT platforms, broadcast service management, HbbTV solutions, and addressable TV advertising. The website reflects a mature digital infrastructure built on WordPress with modern plugins and integrations for analytics and marketing. Security posture is good with HTTPS and cookie consent mechanisms, though improvements such as CSP headers and a security.txt file are recommended. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

B

Bageterie Boulevard

bbbox.cz

60

BBBOX is an online food delivery and catering service affiliated with the Bageterie Boulevard brand, targeting corporate clients and individuals in the Czech Republic. The website offers snack boxes and catering solutions for meetings and events, positioning itself as a convenient and quality-focused service. The business is operated by Lithio spol. s r.o., a company credited in the website metadata and footer. The site is well-branded and professionally designed, with clear navigation and multilingual support.

iFotoVideo.cz is a Czech media portal operated by Atemi s.r.o., specializing in photography and videography content including news, competitions, technical articles, tutorials, and a magazine publication. The website targets photography enthusiasts and professionals primarily within the Czech Republic, offering a niche but well-established platform with a consistent brand presence and member affiliation with EISA. The business model revolves around media publishing supported by advertising and magazine subscriptions. Technically, the site uses a combination of older JavaScript libraries such as jQuery 1.11 and Prototype.js, Google Fonts, and Google Analytics for tracking. While the site is accessible and content-rich, it shows moderate performance and basic mobile optimization with room for improvement in accessibility and SEO. Security-wise, the site lacks visible security headers and uses an outdated JavaScript library, which could pose risks. Cookie consent is implemented, and a GDPR-related page is present, indicating some privacy compliance. However, the absence of WHOIS data and explicit security or incident response policies reduces trustworthiness. Overall, the site is functional and professional but would benefit from technical and security enhancements to improve its posture and compliance.

H

HESTIA - Centrum pro dobrovolnictví, z.ú.

dobromani.cz

52

Dobromani.cz is a Czech non-profit platform dedicated to facilitating online volunteering by connecting non-profit organizations with volunteers who can provide expertise and support remotely. The platform is operated by HESTIA - Centrum pro dobrovolnictví, a recognized non-profit organization in the Czech Republic. The website offers project planning tools, volunteer matching, and ongoing project support, targeting non-profits adapting to new operational realities, especially post-pandemic. Technically, the site uses a modern JavaScript stack including jQuery, Bootstrap, and analytics tools such as Google Analytics and Microsoft Application Insights, hosted on infrastructure linked to Active24 and websupport.cz. The site is mobile-optimized with good design and navigation but lacks some advanced SEO and accessibility features. Security posture is moderate; HTTPS is used, but no security headers were detected in the provided data, and there is no visible privacy or cookie policy, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

E

Eräs Teatteri

erasteatteri.fi

57

Eräs Teatteri is a small, community-focused amateur theater group based in Hämeenlinna, Finland. The organization offers theatrical performances, club activities for adults interested in theater, and venue rental services. The website reflects a local cultural entity with a clear focus on engaging the community through arts and performances. The business model is non-profit and community-oriented, targeting general audiences interested in theater and cultural events. The website is professionally presented with consistent branding and clear contact information, supporting trust and engagement.

H

Hämeenlinnan Teatteri

hmlteatteri.fi

61

Hämeenlinnan Teatteri is a culturally significant theatre institution in Finland with a history spanning over 120 years. The website serves as a platform to showcase theatrical performances, provide event calendars, and facilitate ticket sales primarily through partner platforms. The site targets a general audience interested in cultural and theatrical events in the Hämeenlinna region. Technically, the website employs modern web technologies including Bootstrap for responsive design, Cookiebot for cookie consent management, and Google Analytics for visitor tracking. The CMS appears to be OpiPortal, and hosting is likely provided by ws7.opiferum.net. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit privacy policy and terms of service pages is a notable gap. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, but could improve transparency and security headers.

S

Suomen kansallismuseo

kansallismuseo.fi

56

Suomen kansallismuseo operates as Finland's national museum authority, managing multiple museum sites and castles across the country. The website provides comprehensive information about exhibitions, events, visitor services, and contact details, targeting a broad audience including families, tourists, and culture enthusiasts. The institution holds a strong market position as a government cultural entity offering educational and heritage services.

S

Suomen Tykistö-, Pioneeri- ja Viestimuseoyhdistys ry

museomilitaria.fi

57

Museo Militaria is a Finnish non-profit organization operating one of the largest war and military history museums in Finland, located in Hämeenlinna. The museum offers diverse exhibitions, educational programs, guided tours, and a retail e-commerce platform targeting families, history enthusiasts, and school groups. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap, integrates multiple analytics and marketing tools, and employs secure payment processing via Paytrail. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a dedicated security policy page. Overall, the website is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

K

Kulttuurikeskus ARX

kulttuurikeskusarx.fi

65

Kulttuurikeskus ARX is a municipal cultural center based in Hämeenlinna, Finland, focused on providing cultural services and events primarily for children, youth, and families. The website serves as a hub for information about their activities, exhibitions, festivals, and youth programs, positioning itself as a key local cultural institution. The business is affiliated with the city of Hämeenlinna, reinforcing its legitimacy and public service orientation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot, indicating a mature digital infrastructure. Analytics are handled via Matomo and Google Analytics, with clear cookie consent mechanisms in place, reflecting good privacy practices. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. Overall, the site is professional, accessible, and trustworthy, with no signs of blocking or WAF interference.

E

Ealys

ealys.com

41

Ealys is a French web development agency specializing in the creation, redesign, and maintenance of websites and web applications, primarily serving clients in the North-East region of France including Metz, Nancy, and Strasbourg. With over 20 years of experience, the company targets a diverse clientele ranging from SMEs to large groups and institutional clients. Their service offerings include website creation, web application development, hosting, security, and audits, positioning them as a comprehensive digital solutions provider in their regional market. The website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the site employs modern web technologies such as HTML5, CSS3, jQuery, and popular plugins like Revolution Slider and Fancybox, ensuring a responsive and user-friendly experience. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented, indicating basic privacy compliance. Security-wise, the site uses HTTPS and follows some best practices but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. The domain registration data is consistent with the business claims, showing a long-established presence without privacy protection, which supports legitimacy. Overall, the website is well-structured, professional, and trustworthy, though there is room for improvement in security and compliance documentation.

B

Bild.ua

bild.ua

61

Bild.ua is a Ukrainian real estate portal specializing in listings of new residential complexes across Ukraine. The platform offers a unique reliability index for new buildings, helping buyers make informed decisions. It targets property buyers and investors seeking trustworthy information about developers and new construction projects. The website is well-positioned in the Ukrainian real estate market with a medium-sized operation founded in 2013. Technically, the site uses modern web technologies including React and Redux, and integrates analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and security headers implemented, though it lacks explicit security policies and incident response contacts. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is legitimate, professional, and trustworthy, with room for improvement in privacy and security transparency.

P

Parasta Lapsille ry

parastalapsille.fi

60

Parasta Lapsille ry is a well-established Finnish non-profit organization focused on child welfare and family well-being. The organization offers camps, weekend activities, and volunteer opportunities to support children and families, emphasizing multicultural inclusion. The website reflects a mature digital presence with clear branding, comprehensive content, and active social media engagement. Technically, the site is built on WordPress with modern plugins and is hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is robust, featuring GDPR-aligned cookie consent and a detailed privacy policy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain WHOIS data aligns well with the organization's identity, supporting high legitimacy and trust.

R

Rideer Nordic Oy

synergybus.se

42

SynergyBus, operated by Rideer Nordic Oy, is an online platform specializing in connecting taxi and bus companies with customers seeking transportation services in the Nordic region. The website positions itself as a leading marketplace for order traffic, offering a large volume of daily offer requests and facilitating business growth for transport providers. The platform's business model revolves around generating and managing transportation service quotes, targeting primarily taxi and bus operators. The company is relatively young, founded in 2022, and maintains a consistent brand presence with trust certifications and EU co-funding indicators. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, FontAwesome icons, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The site is mobile-optimized with good SEO practices but lacks some accessibility features and advanced security headers. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks DNSSEC, security headers, and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security governance. The WHOIS data is consistent with the business claims, showing a legitimate domain registration without privacy protection, appropriate domain age, and active status. Overall, SynergyBus presents a professional and functional online presence with solid business credibility but requires enhancements in privacy compliance and security best practices to strengthen its risk posture and regulatory adherence.

R

Ridee Nordic Oy

bokabuss.nu

52

Bokabuss.nu is a Swedish transportation service platform that enables users to request and compare quotes for bus and minibus transportation across Sweden. The company, operated by Ridee Nordic Oy, has been active since 2011 and maintains a medium-sized presence in the Nordic transportation market. The website is professionally designed with a clear user journey for submitting transport requests and accessing operator offers. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and marketing tools, and employs Cloudflare for hosting and security. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. Security posture is good with HTTPS enforced, though some security headers could be improved and DNSSEC is not enabled. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

W

Worldsoft AG

worldsoft-partner.website

60

Worldsoft-Partner.website is a German-language franchise platform operated by Worldsoft AG, a Swiss company established in 2000. The website offers a turnkey business concept for individuals and entrepreneurs to start their own internet agency, leveraging Worldsoft's 20+ years of experience and a large customer base. The business model focuses on creating mobile-optimized websites quickly using proprietary tools, supported by online training, marketing materials, and personal coaching. Technically, the site uses a modern JavaScript stack with multiple analytics and marketing integrations, including Google Analytics, Facebook Pixel, LinkedIn Insight, Hotjar, and Elfsight widgets. The website is mobile-optimized and well-structured, providing a professional user experience. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is partially met with a privacy policy linked externally but lacks a cookie consent mechanism. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

Sherpas TECH, s.r.o. is a Czech-based technology and marketing company specializing in retention marketing and technology integration services. The company offers a range of services including email marketing strategy, technology implementation for retention marketing, data engineering in CRM systems, and advanced customer analytics. Their website reflects a professional and consistent brand image, targeting B2B clients seeking to optimize marketing performance through technology. The company demonstrates a solid market position supported by client references and a clear business focus. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and CookieScript for consent management, indicating a mature digital infrastructure. The site is built likely on the Nette Framework, with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities. Cookie consent is implemented with opt-in mechanisms, and forms include anti-bot measures. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR cookie consent requirements. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and improving accessibility. The domain WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness.

C

cropmark.

cropmark.com

55

Cropmark is a well-established full-service creative studio operating primarily in Luxembourg and Brussels, offering a broad range of branding, corporate design, editorial design, web design, development, SEO, and strategic communication services. The company targets businesses and organizations seeking professional creative solutions, leveraging over 20 years of industry experience. The website reflects a professional and consistent brand image with rich content and clear navigation, supporting its market position as a trusted creative agency in its region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Matomo. It uses HTTPS for secure communications and content delivery networks for optimized image serving. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. However, there is no detected CMS or hosting provider information. From a security perspective, the site benefits from HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS registration data for the domain is a notable concern, although the website content and contact information support legitimacy. Overall, Cropmark's website is professional and trustworthy, but improvements in privacy compliance and domain registration transparency are recommended to enhance security posture and regulatory adherence.

T

Trimble

asiointi.fi

62

The website upa.trimble.com/fi-fi/ratkaisut/asiointi serves as a Finnish regional portal for Trimble's Utilities & Public Administration division. Trimble is a global technology company specializing in advanced solutions for sectors such as energy, public administration, and utilities. The site targets Finnish utilities and public sector organizations, offering digital transformation and operational efficiency solutions. The business model is B2B, focusing on providing software and technology services to utility companies and government entities. The website branding and content align well with Trimble's global identity, indicating a strong market position in the regional sector. Technically, the website employs modern web technologies including React, Webpack, and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, Marketo Munchkin, and Leadfeeder. The site is moderately optimized for performance and mobile use, with basic accessibility features. However, explicit security headers and privacy policies are not evident in the provided HTML snapshot, suggesting areas for improvement in compliance and security transparency. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the content. However, the absence of visible security headers and privacy/cookie policies reduces the overall security posture score. Incident response and vulnerability disclosure information are also missing, which could be enhanced to improve trust and compliance. Overall, the website is professional, trustworthy, and aligned with Trimble's business objectives. The main risks relate to privacy compliance and security transparency, which can be addressed by adding clear policies and security headers. The domain WHOIS data for the subdomain is not available, which is typical, but the main domain trimble.com is well-established and legitimate, supporting the site's credibility.

T

Timmi Software Oy

timmi.fi

62

Timmi Software Oy is a Finnish software company specializing in time management and smart infrastructure solutions for public sector and healthcare organizations. With over 30 years of experience, they serve more than 100 Finnish companies and public institutions, offering products like Smart City and Smart Hospital software. Their market position is strong within Finland, supported by trusted client references and a focus on integration and ease of use. Technically, the website is built on Webflow with modern analytics and consent tools, demonstrating digital maturity and good performance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though explicit security policies and headers could be improved. Overall, the company presents a professional, trustworthy online presence with clear contact channels and compliance with GDPR.

H

HESTIA

hest.cz

45

HESTIA is a Czech non-profit organization established in 2001, specializing in volunteer services, coordination, and educational programs. The website presents a well-structured platform offering multiple volunteer programs, corporate volunteering initiatives, and training courses. It targets volunteers, non-profit organizations, companies interested in corporate social responsibility, donors, and media. The organization maintains partnerships with government bodies and foundations, enhancing its credibility and market position within the Czech Republic's volunteer sector. Technically, the website uses a custom CMS (Toolkit) hosted by ECN Studio, with integration of Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized with good navigation and content quality. However, some technical improvements are recommended, including the implementation of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS (implied by external Google Analytics scripts loaded over HTTPS), has a cookie consent mechanism compliant with GDPR, and does not expose sensitive data. There is no visible security or incident response policy, and no contact emails or phone numbers are provided on the homepage, which could be improved for transparency and user trust. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and providing clearer contact information to improve user confidence and compliance posture.

C

Czech Repubrick

czechrepubrick.cz

55

Czech Repubrick is a small retail and educational business focused on Lego products, exhibitions, and educational programs for schools and companies. The website is built on the Wix platform, featuring a professional design and moderate technical maturity. It uses standard web technologies including JavaScript, jQuery, Google Analytics, and Poptin for marketing and analytics. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy policies. The absence of WHOIS registrant data reduces transparency and trustworthiness. Overall, the website is accessible and content is family-friendly, targeting Lego enthusiasts and educational institutions.

B

Bageterie Boulevard

bb.cz

58

Bageterie Boulevard is a well-established fast casual gourmet sandwich and food service chain primarily operating in the Czech Republic with some presence in Slovakia. The company offers a variety of freshly prepared sandwiches and related products, emphasizing quality and speed. Their business model includes physical retail locations, online ordering platforms, catering services, and franchise opportunities. The website reflects a mature digital presence with multiple branches listed, a mobile app promotion, and loyalty programs. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Google Maps API, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a large retail hospitality business.

A

ANEXIA® Internetdienstleistungs GmbH

backboneeurope.com

57

Anexia Internetdienstleistungs GmbH operates Backbone Europe, a major network infrastructure project enhancing connectivity and DDoS protection across key European cities. The company provides IT services including software development, hosting, and network solutions primarily targeting enterprise customers. The website reflects a mature digital presence with modern technologies and interactive content, supporting a professional brand image. Security posture is moderate with HTTPS usage and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism visible. Overall, the site is trustworthy and business-focused, with room for improvement in security and privacy transparency.

H

Hrvatski Crveni križ - Gradsko društvo Crvenog križa Čakovec

crveni-kriz-cakovec.hr

45

The website www.crveni-kriz-cakovec.hr represents the Gradsko društvo Crvenog križa Čakovec, a local branch of the Croatian Red Cross. It provides humanitarian services including blood donation campaigns, volunteer coordination, social and health programs, and emergency response. The organization is well-established with a domain registered since 2009 and operates primarily in Croatia. The website targets the general public, volunteers, and vulnerable groups within the region. Technically, the site is built on WordPress with a modern plugin ecosystem, including accessibility and cookie consent tools, ensuring compliance with GDPR and accessibility standards. Security posture is good with HTTPS enforced and cookie consent mechanisms, though additional security headers could enhance protection. The site uses Google Analytics for user tracking with moderate privacy compliance. Overall, the website is professional, trustworthy, and serves as a reliable information and engagement platform for the Croatian Red Cross local branch.

L

Living Room Conversations

livingroomconversations.org

54

Living Room Conversations is a US-based non-profit organization established in 2011, dedicated to fostering community dialogue and understanding through structured conversations. Their website serves as a platform to provide resources and frameworks to individuals and organizations interested in facilitating meaningful conversations. The organization operates in the non-profit sector with a focus on community engagement and education. Technically, the website is built on WordPress using popular plugins such as Elementor and GiveWP, hosted on SiteGround, and employs Google Analytics for visitor tracking. The site is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and has domain protections in place but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

I

Indiana University Bloomington

indiana.edu

68

Indiana University Bloomington is the flagship campus of the Indiana University system, offering a comprehensive higher education experience with a strong emphasis on research, innovation, and academic freedom. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting prospective and current students. The university leverages modern web technologies including Google Tag Manager and Siteimprove Analytics to monitor and optimize user experience. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, explicit security headers and privacy policies are not evident in the provided content, indicating areas for improvement. The domain is a subdomain of iu.edu, which is consistent with institutional practices, though WHOIS data for the subdomain is unavailable. Overall, the site is trustworthy, professional, and safe for general audiences.

S

Saunia

saunia.de

52

Saunia operates as a regional wellness and sauna service provider primarily targeting customers in the Czech Republic and neighboring countries. The website presents a professional and well-structured digital presence, leveraging WordPress CMS and integrating multiple marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Cookiebot for consent management. The business focuses on delivering sauna experiences and wellness services, positioning itself as a trusted brand in the hospitality sector. However, the absence of publicly available WHOIS data and explicit privacy or terms of service pages slightly detracts from the overall trustworthiness. Technically, the site is well-optimized for mobile devices and SEO, though there is room for improvement in accessibility and security header implementation. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but could benefit from enhanced transparency through published security policies and vulnerability disclosure mechanisms.

C

cyber_Folks d.o.o.

cyberfolks.hr

57

CyberFolks d.o.o. is a Croatian technology company specializing in domain registration, web hosting, SSL certificates, and e-marketing services. Founded in 2019, it targets businesses, students, developers, and e-commerce operators with a comprehensive portfolio of hosting solutions including shared hosting, VPS, and specialized WordPress hosting. The company positions itself as a reliable and professional local provider with strong customer support and a focus on performance and security. Their website reflects a mature digital presence with modern technologies and clear branding. Technically, the site is built on WordPress with advanced performance optimizations such as LiteSpeed Cache, CloudLinux, and HTTP/2, ensuring fast and reliable service delivery. Security posture is strong with HTTPS, DDoS protection, daily backups retained for 90 days, and free SSL certificates. Privacy compliance is well addressed with GDPR-compliant cookie consent and a comprehensive privacy policy. No critical vulnerabilities or security issues were detected. Overall, CyberFolks demonstrates a solid business and technical foundation with a trustworthy online presence.

C

cyber_Folks d.o.o.

avalon.hr

57

CyberFolks d.o.o. is a Croatian technology company specializing in web hosting, domain registration, SSL certificates, and e-marketing services. Founded in 2019, it targets businesses, developers, and individuals in Croatia with a strong emphasis on performance, reliability, and customer support. The company positions itself as a trusted local provider with a comprehensive portfolio of hosting solutions including shared hosting, VPS, and specialized WordPress hosting. The website reflects a professional and modern digital presence with clear service offerings and customer testimonials that reinforce trust and credibility. Technically, the site is built on WordPress with modern technologies such as LiteSpeed, CloudLinux, and HTTP/2, ensuring fast performance and mobile optimization. Security practices include HTTPS enforcement, DDoS protection, and backup retention, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, CyberFolks demonstrates a mature digital infrastructure and a solid market position in the Croatian hosting sector.

1

10dencehispahard S.L.

tecnologa.cat

56

La Tecnòloga is a small digital media company operating a Catalan-language technology magazine founded in 2019. The website provides technology news, in-depth analysis, interviews, and book reviews targeting Catalan-speaking technology enthusiasts and the general public interested in technology and society. The company is registered as 10dencehispahard S.L. in Spain, consistent with the website's regional focus. The site is built on WordPress with standard plugins and integrates Google Analytics and social media feeds for audience engagement. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to an email address and social media links, with no phone or physical address provided. Overall, the website is professional and trustworthy within its niche but could improve security and privacy practices.

L

Langley Advance Times

langleyadvancetimes.com

68

Langley Advance Times is a regional news media outlet serving the Langley area in British Columbia, Canada. It provides local news, community events, sports, entertainment, and obituaries, targeting local residents and readers interested in regional news. The site operates under the parent company Black Press Media, a known media group. The business model is primarily advertising and subscription-based, with a focus on community engagement and local journalism. Technically, the website uses a modern tech stack including Google Tag Manager, Google Analytics, Rubicon Project for advertising, and Marfeel SDK for mobile optimization. The CMS appears proprietary to Black Press Media. The site is mobile optimized, has good SEO practices, and loads with moderate performance. Accessibility features are basic but present. From a security perspective, the site enforces HTTPS and uses several security best practices, though some security headers are not explicitly visible. There is no visible security.txt or vulnerability disclosure policy, and cookie consent mechanisms are minimal or absent. WHOIS data for the domain is unavailable, which reduces trust slightly but the site’s professional appearance and affiliation with Black Press Media support its legitimacy. Overall, the site is a trustworthy local news source with good content quality and technical implementation. Strategic improvements in privacy compliance, security disclosures, and WHOIS transparency would enhance trust and security posture.

B

Boston Herald

bostonherald.com

64

Boston Herald is a prominent local news media organization serving the Boston, Massachusetts area, providing comprehensive coverage of news, sports, politics, entertainment, weather, and obituaries. The website demonstrates a mature digital presence with a subscription-based business model supported by a parent company, MediaNews Group. The site is well-branded and targets a general audience seeking timely and relevant local information. Technically, the site is built on WordPress and integrates multiple modern technologies including Google Tag Manager, Auth0 for authentication, and sophisticated ad and analytics platforms such as Google Ad Manager and Parsely. The site is mobile optimized and employs consent management via Osano, reflecting a commitment to privacy compliance. From a security perspective, the site enforces HTTPS, uses standard security headers, and manages cookie consent effectively. However, the absence of a public WHOIS record and lack of explicit security policies or incident response contacts slightly reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, Boston Herald's website is professional, secure, and compliant with privacy regulations, though improvements could be made in transparency around security policies and contact information. The domain WHOIS data absence warrants monitoring but does not currently undermine the site's legitimacy.

A

Artur Kiulian

arturkiulian.com

45

Artur Kiulian's website presents a professional and well-structured digital presence focused on entrepreneurship, artificial intelligence, and machine learning. The business operates as a venture studio partner and non-profit supporter for startups, with additional activities including authoring books and speaking engagements. The site leverages modern web technologies such as Webflow CMS and integrates Google Analytics for tracking. The content is rich, relevant, and targeted primarily at entrepreneurs and business leaders interested in AI applications. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content itself is consistent and trustworthy. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

A

Artha Platform | Rianta Capital Zurich

arthaimpact.com

47

Artha Impact operates as an impact investing network and platform focused primarily on social ventures in India, with a history dating back to 2007 as part of Rianta Capital advising the Singh Family Trust. The platform facilitates collaboration and capital deployment among investors, entrepreneurs, and support organizations through an invite-only online network and associated SaaS offerings. The website presents a professional and consistent brand image with clear navigation and comprehensive content about its mission, sectors of interest, and partner ecosystem. Technically, the site is built on WordPress using modern libraries such as Bootstrap and jQuery, with integration of Google Analytics, Tag Manager, and Microsoft Clarity for analytics and tracking. Security posture is generally good with HTTPS enforced, but lacks DNSSEC and explicit security headers. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. No contact emails or phone numbers are explicitly listed, which may impact direct communication. Overall, the domain registration data is consistent and legitimate, supporting the credibility of the business.

EZProvider Networks Inc. operates the website www.ezp.net, providing web hosting services primarily focused on the Vancouver and Canadian market. Their offerings include shared hosting, VPS hosting, and dedicated server hosting, targeting businesses and individuals seeking reliable and fast Canadian-based hosting solutions. The company positions itself as a local, customer-focused provider emphasizing performance and support. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and performs well with clear navigation and professional design. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA; however, the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance measures.

C

CREVV

crevv.com

56

CREVV is a small, full-service creative design studio based in Kyiv, Ukraine, specializing in visual and verbal communication, branding, environment design, text, and photography. The company has a well-established online presence with a portfolio showcasing various projects, positioning itself as a professional agency in the media sector. The website is built on the Readymag platform, utilizing modern web technologies including Google Fonts, YouTube API, and Google Analytics for tracking. The site is SSL secured and hosted by Hosting Ukraine LLC, reflecting a consistent and legitimate domain registration since 2014. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its compliance posture.