Security Directory

R

Riesa Consultative Oy

riesa.io

56

Riesa Consultative Oy is a Finnish consulting company specializing in accessibility and equality services. The company positions itself as Finland's leading accessibility expert, offering services such as the Accessibility Index and urban environment accessibility consulting. Their target audience includes organizations seeking to improve accessibility and inclusivity. The website is professionally designed, well-structured, and provides clear information about services and client references, supporting a strong market position in the accessibility consulting niche. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and demonstrates good accessibility practices. Hosting and DNS are managed with Cloudflare, ensuring reliable performance and security. The site uses HTTPS with a valid SSL certificate, though DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, it lacks visible security policies, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business profile, using privacy protection services reasonably. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture.

O

Open House Praha, z. ú.

openhousepraha.cz

62

Open House Praha, z. ú. is a Czech non-profit organization dedicated to promoting architecture and urban culture through its annual Open House festival and year-round guided tours. The organization opens over 120 normally inaccessible buildings and spaces in Prague to the public, attracting a large audience and fostering community engagement. The website reflects a mature digital presence with comprehensive content, strong branding, and active social media integration. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly impacts trust but the organization's transparency and partner endorsements mitigate concerns. Overall, the site is professional, trustworthy, and well-positioned in its niche.

S

Switch

switch.com

57

Switch is a global technology company specializing in the design, construction, and operation of ultra-advanced data centers that enable powerful technology ecosystems. The company positions itself as a world-renowned leader in the data center industry, targeting technology enterprises and organizations requiring high-performance infrastructure solutions. The website reflects a mature digital presence with professional design and comprehensive content focused on their core business offerings. Technically, the site is built on WordPress using the Divi theme and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, indicating a sophisticated approach to user engagement and data collection. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection, but lacks visible security headers and published security policies, which are areas for improvement. The absence of WHOIS data for the domain www.switch.com is a notable gap, reducing trust from a domain registration perspective despite the professional website content. Overall, the site demonstrates strong business credibility and technical implementation but would benefit from enhanced privacy compliance and security transparency.

D

DEKORHOME, s.r.o.

dekorhome.sk

50

DEKORHOME, s.r.o. operates an e-commerce platform specializing in furniture, home accessories, garden products, and design items primarily targeting the Slovak market. The website presents a professional and consistent brand image with a clear focus on quality and customer service. The technical infrastructure leverages modern marketing and analytics technologies such as Google Tag Manager, Facebook Pixel, and Bing Ads, hosted on a CDN-backed platform (searchready.cz) with good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit privacy and terms policies are missing, which impacts compliance. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized retail operation.

A

Aittakoodi Oy

synergybus.fi

44

SynergyBus, operated by Aittakoodi Oy, is a Finnish web platform specializing in connecting taxi and bus companies with customers seeking chartered transportation services. The platform aggregates over 15,000 annual booking requests, positioning itself as a leading service in the Finnish transportation sector. The website offers features such as daily email notifications of new requests, the ability to advertise available fleet capacity, and tools to foster long-term customer relationships. The business targets transportation operators and customers within Finland, emphasizing efficiency and market reach.

R

Rideer Nordic Oy

tilausajot.net

52

Tilausajot.net, operated by Rideer Nordic Oy, is a well-established Finnish online platform specializing in competitive bidding for charter taxi and bus transportation services. Founded in 2011, it serves a broad audience including private individuals, companies, and associations across Finland. The platform facilitates efficient request and offer management, supported by a growing network of transportation providers. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Cloudflare for security and performance. It integrates comprehensive analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, balanced with a detailed cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and Cloudflare protection, though some security headers could be improved. The domain registration is consistent and transparent, reinforcing business legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly service with good privacy and security practices.

A

Aittakoodi Oy

tilaataksi.fi

55

Tilaataksi.fi is a Finnish online taxi booking platform operated by Aittakoodi Oy, providing customers with a convenient way to pre-book taxis and receive competitive offers from taxi operators across Finland. The service targets both private individuals and organizations, offering a streamlined multi-step form for detailed ride requests. The platform is supported by Rideer Nordic Oy and integrates with various third-party services for analytics, customer support, and hosting. Technically, the website uses modern frameworks like Bootstrap and jQuery, with performance and mobile optimization rated as good. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information presented on the site.

F

Finnair

finnair.fi

77

Finnair is a well-established Finnish airline providing passenger flights and travel services to over 80 destinations worldwide. The company holds a strong market position in Northern Europe and operates with a large-scale business model supported by subsidiaries such as Norra and Finnair Cargo. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to a general audience of travelers. The technical infrastructure leverages modern web technologies including Angular, Google Tag Manager, and Akamai CDN, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although public incident response and vulnerability disclosure information are limited. Privacy compliance is well addressed with detailed policies and consent mechanisms aligned with GDPR requirements. Overall, the website and business demonstrate high professionalism and trustworthiness, despite the absence of WHOIS domain registration details which may be due to registry restrictions.

OnniBus operates as a leading Finnish bus ticket sales platform, offering affordable and reliable bus travel across Finland and to international destinations such as the Baltics and Poland. The company positions itself as a well-known and cheerful brand in the Finnish transportation market, providing various ticketing options including season passes and reward programs. The website is professionally designed with good mobile optimization and clear navigation, supporting a positive user experience. Technically, the site employs modern analytics and consent management tools such as Google Analytics, Microsoft Clarity, and Cookiebot, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is a notable anomaly, potentially due to privacy protection or recent domain registration, but the website content and business presence support legitimacy. Overall, the site demonstrates a strong business and technical foundation with moderate risk due to incomplete WHOIS transparency.

M

Trusted Magento 2 Extensions‎ by Magezon

magezon.com

73

Magezon is a specialized provider of Magento 2 extensions and related e-commerce services, targeting Magento store owners and developers. The company offers a wide range of products including page builders, form builders, mega menus, and other Magento 2 enhancements, supported by installation and custom development services. Their market position is that of a trusted Magento extension vendor emphasizing quality, support, and continuous updates. Technically, the website is built on Magento 2 platform with modern JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and secure form handling, though some security headers are not explicitly detected. Privacy compliance is basic with a refund policy present but no explicit cookie consent or privacy policy page found. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and business information appear professional and consistent. Overall, Magezon presents a credible e-commerce software business with room for improvement in privacy and security transparency.

The website antydot.info operates as an independent Ukrainian investigative journalism platform managed by the Асоціація УМДПЛ. It focuses on critical coverage of the law enforcement system, anti-corruption efforts, and justice reforms in Ukraine. The site offers a variety of content types including news, investigations, analytics, videos, and lectures, targeting a Ukrainian-speaking audience interested in governance and human rights issues. The business model aligns with a non-profit media outlet providing public interest journalism. Technically, the site is built on WordPress 4.8.25 with common web technologies such as jQuery and Slick Carousel. It integrates multiple analytics tools including Google Analytics and Yandex Metrika, and uses Disqus for comments. Hosting is provided by Hosting Ukraine LLC, consistent with the domain's Ukrainian focus. The site is mobile-optimized and SEO-friendly with structured data and meta tags, though accessibility features are basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Tracking scripts are used without visible consent mechanisms. The WHOIS data shows a stable domain registration since 2016 with a reputable Ukrainian registrar, supporting legitimacy. Overall, the site is a credible and professionally maintained media platform with good content quality and moderate technical maturity. Security and privacy compliance require improvements to reduce risk and enhance user trust. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing privacy and cookie policies, and adding user consent mechanisms for tracking.

C

CMD Solutions

cmd.solutions

54

CMD Solutions is an IT service provider specializing in hosting, mail, phone, fiber, backup, and milestone services. The company appears to target business clients seeking reliable IT and telecommunications solutions. The website is built on WordPress using the Divi theme, with multilingual support for French, English, and German. The technical infrastructure includes common plugins for SEO, analytics, and GDPR compliance, hosted via EuroDNS S.A. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found. Contact is primarily via a web form, with no direct email or phone contacts visible. Overall, the website is professional and trustworthy but could enhance transparency and security practices.

F

FRS Finland

frs-finland.fi

69

FRS Finland is a regional ferry and charter cruise operator serving the Helsinki Metropolitan Area and surrounding archipelago destinations. The company offers a range of services including scheduled ferry routes, VIP and group cruises, seasonal passes, and gift cards. It holds sustainability certifications and is part of the FRS Group, indicating a solid market position in transportation services. The website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager and Analytics for marketing and performance tracking. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, accessible, and trustworthy, supporting a positive user experience.

OnniBus operates as a leading Finnish bus ticket sales platform, providing affordable and reliable bus transportation services across Finland and to neighboring countries. The website offers a user-friendly online booking system, promotional offers, and partnerships with other transportation providers such as Eckerö Line. The company targets travelers seeking cost-effective and convenient bus travel options. Technically, the website employs modern analytics and tracking technologies including Google Analytics, Microsoft Clarity, and Cookiebot for consent management, ensuring compliance with privacy regulations. Security posture is solid with HTTPS enforced and session management in place, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain is a notable anomaly that slightly diminishes trust but does not detract from the professional presentation and functionality of the site. Overall, OnniBus presents a mature digital presence with good privacy compliance and a strong market position in the Finnish transportation sector.

S

Suomen Tietotoimisto Oy

lehtikuva.fi

56

Lehtikuva.fi is the digital presence of Suomen Tietotoimisto Oy, Finland's largest photo agency with a history dating back to 1951. The company specializes in news and editorial photography, focusing on Finnish and Nordic themes, and operates a comprehensive image licensing platform. The website reflects a mature digital infrastructure with multilingual support and modern web technologies. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although some security headers could be enhanced. Privacy compliance is well addressed with clear policies and GDPR-aligned consent. Overall, the site projects professionalism and trustworthiness suitable for media professionals and content buyers.

Meggle.cz is a well-established Czech retail website specializing in dairy and vegan dairy-alternative products. The site offers a variety of product categories including vegan creams, cottage cheese, various creams, butter specialties, and lactose-free options, complemented by recipe content to engage consumers. The website targets Czech consumers interested in these food products and is part of the MEGGLE Group, indicating a strong market presence and brand recognition. Technically, the site is built on the MySUITU CMS platform, uses common JavaScript libraries such as jQuery and ResponsiveSlides, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good navigation and SEO practices, although some technical debt is noted with the use of an outdated jQuery version. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and advanced security headers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and updated security practices.

M

Museum of the Rockies

museumoftherockies.org

56

Museum of the Rockies is a well-established cultural and educational institution located in Bozeman, US, focusing on natural history, cultural exhibits, and astronomy. The website presents a professional and informative platform targeting a general audience interested in museum experiences and educational programs. The domain has been registered since 2000, reflecting a stable and legitimate presence. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Sojern, hosted on Montana State University DNS infrastructure, indicating a reliable hosting environment. However, the site lacks visible privacy and cookie policies, which impacts its compliance posture. Security-wise, HTTPS is properly implemented, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is trustworthy and professionally maintained but should enhance privacy compliance and security best practices to reduce risk and improve user trust.

C

CoronaWhy

coronawhy.org

66

CoronaWhy is a volunteer-driven, international non-profit research organization focused on leveraging artificial intelligence and data science to support the global fight against COVID-19. The organization coordinates over a thousand volunteers worldwide to analyze COVID-19 related data and provide actionable insights to the medical community. Their partnerships with reputable organizations such as NASA JPL, Google Cloud, and CGI enhance their technical capabilities and credibility. The website reflects a mature digital presence with professional design, multimedia content, and active social media engagement. Technically, the site uses modern web technologies including Webflow CMS, Google Analytics, and reCAPTCHA, ensuring good performance and security posture. However, the absence of explicit privacy policies, terms of service, and direct contact information slightly reduces privacy compliance and business credibility scores. Overall, CoronaWhy demonstrates a strong commitment to transparency, collaboration, and scientific rigor, positioning itself as a trusted resource in the COVID-19 research community.

S

Saunia

saunia.cz

53

Saunia.cz is a Czech Republic-based wellness and sauna service provider offering sauna experiences and relaxation services. The website is professionally designed using WordPress CMS and integrates modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Cookiebot for GDPR compliance. The site targets general audiences interested in wellness and sauna activities. Technically, the site uses common JavaScript libraries and plugins to enhance user experience and social sharing capabilities. Security posture is good with HTTPS enabled and cookie consent implemented, though additional security headers could improve protection. The absence of WHOIS data reduces domain transparency and trust slightly, but the website content and structure indicate a legitimate business presence. Privacy policy and terms of service pages were not detected in the provided content, which is a compliance gap. Overall, the site is functional, user-friendly, and compliant with basic privacy regulations.

The website nitko.info is a personal portfolio and creative expression platform for Ervin Poljak, featuring poetry, stories, family projects, and other artistic content. It targets a general audience interested in literary and cultural works. The site is small-scale and primarily serves as a personal showcase rather than a commercial business. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics, Google Tag Manager, and Mixpanel for visitor tracking. It is built on the Galaksija CMS and hosted under a domain registered with privacy protection. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present, indicating poor privacy compliance. The WHOIS data shows a domain age consistent with the site's stated founding year and a registrant country matching the website language, supporting legitimacy. Overall, the site is safe for general audiences but requires significant improvements in security and privacy compliance to enhance trust and protection.

O

Ombudsman Luxembourg

ombudsman.lu

53

The Ombudsman Luxembourg website serves as the official government mediation office for citizens and residents seeking resolution of complaints related to state and municipal administrations. The site provides clear contact information and a concise description of its public service role, targeting a general audience in Luxembourg. The business model is focused on government mediation and administrative dispute resolution, positioning it as an essential public service entity within the government sector. Technically, the website employs basic technologies including Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. The absence of a CMS or modern frameworks suggests a simple, possibly custom-built site. No forms or interactive elements were detected, limiting data collection vectors. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are present. Tracking scripts indicate moderate user tracking without clear privacy compliance disclosures. Overall, the security posture is basic with room for significant improvement. The overall risk assessment is moderate with no critical vulnerabilities detected but notable gaps in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, enhancing mobile and accessibility features, and establishing incident response contacts to improve trust and compliance.

C

College Park Tutors

collegeparktutors.com

56

College Park Tutors is a specialized tutoring service focused on providing one-on-one academic support to students at the University of Maryland (UMD). Established in 2013, the company offers expert tutoring in STEM subjects such as calculus, physics, engineering, and statistics. Their business model centers on connecting vetted tutors with students for personalized sessions, both online and in-person, emphasizing flexibility and course-specific expertise. The website reflects a strong local market position with clear branding and trust signals including testimonials and detailed course offerings. Technically, the website is built on the UserFrosting CMS framework and leverages modern web technologies including jQuery, Bootstrap, Google Analytics, Facebook Pixel, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is inferred to be via NameCheap, consistent with the domain registrar information. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates reCAPTCHA to protect forms. However, it lacks DNSSEC and security headers such as Content-Security-Policy and X-Frame-Options, which are recommended for enhanced protection. Privacy compliance is basic; while a privacy policy and terms of service are present, there is no cookie consent mechanism, which may be a GDPR compliance gap. Overall, the website is professional, trustworthy, and well-suited for its educational audience. The domain registration data aligns well with the business history, supporting legitimacy. Strategic recommendations include implementing DNSSEC, adding security headers, and introducing a cookie consent banner to improve privacy compliance and security posture.

B

Bloomington Tutors

bloomingtontutors.com

59

Bloomington Tutors is a specialized tutoring service focused on providing one-on-one academic support for Indiana University Bloomington students, particularly in courses such as finite math, calculus, business, and statistics. The company emphasizes personalized tutoring sessions, both online and in-person, with flexible scheduling to meet student needs. Their market position is that of a trusted local educational service with a strong reputation supported by student testimonials and a professional online presence. Technically, the website is built on the UserFrosting PHP framework and leverages modern web technologies including jQuery, Bootstrap, and Google Analytics. The site is well-optimized for mobile devices and offers a fast, accessible user experience. Security-wise, the site uses HTTPS and Google reCAPTCHA for bot protection, but lacks DNSSEC and some advanced security headers, which are recommended for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

T

Trilby Media LLC

trilbymedia.com

64

Trilby Media LLC is a specialized technology service provider focused on Grav CMS professional services, custom development, hosting, and support. The company is staffed by the original Grav CMS development team, positioning it as a niche expert in the CMS market. Their website reflects a professional and consistent brand image, targeting businesses and developers seeking Grav CMS solutions. The company is US-based, founded in 2016, and showcases reputable clients, enhancing its market credibility. Technically, the website is built on the Grav CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics and Microsoft Clarity. Hosting and DNS services are provided by Cloudflare, with additional security measures like Cloudflare Turnstile CAPTCHA implemented on the contact form. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. From a security perspective, the site uses HTTPS and Cloudflare services, but lacks DNSSEC and explicit security headers such as Content-Security-Policy and HSTS. There are no published privacy or cookie policies, which represents a compliance gap. No incident response or vulnerability disclosure information is provided. The WHOIS data is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional, secure to a reasonable extent, and credible, but would benefit from enhanced privacy compliance and security header implementation. Strategic improvements in these areas would strengthen trust and regulatory adherence.

T

Trilby Media LLC

trilby.media

65

Trilby Media LLC is a specialized technology company focused on providing professional services and custom development for the Grav CMS platform. The company is staffed by the original Grav CMS development team, leveraging over 20 years of web development experience. Their market position is strong within the Grav CMS ecosystem, offering consulting, development, migration, managed hosting, and service level agreements to businesses and developers seeking high-quality Grav solutions. The website reflects a professional and consistent brand image targeting a technical audience familiar with Grav CMS. Technically, the website is built on the Grav CMS platform and hosted behind Cloudflare, utilizing modern web technologies including Fork Awesome icons, Google Analytics, Microsoft Clarity, and Cloudflare's Turnstile captcha for spam prevention. The site is well-optimized for performance, mobile responsiveness, and SEO, with a clean and accessible design. However, some security best practices such as DNSSEC and security headers are not fully implemented. From a security perspective, the site uses HTTPS and includes anti-spam measures on its contact form. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy, cookie, security, and incident response policies represents a compliance gap, especially regarding GDPR and data protection transparency. The WHOIS data is consistent with the business identity, showing a legitimate registration with no privacy protection, enhancing trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity but would benefit from enhanced privacy and security policy disclosures to improve compliance and user trust.

C

Citizenconnect.us

citizenconnect.us

60

Citizen Connect is a small non-profit platform focused on nonpartisan civic engagement and political healing in the United States. It aggregates resources, events, and educational content from over 600 organizations to help Americans find ways to strengthen democracy. The website is built on a modern WordPress infrastructure with integrations such as Google Analytics and Tag Manager, hosted with GoDaddy and using Cloudflare DNS services. The platform demonstrates good technical maturity with responsive design and clear navigation, though it lacks published privacy and cookie policies, which impacts compliance. Security posture is solid with HTTPS and domain protections, but DNSSEC is not enabled and no explicit incident response or vulnerability disclosure information is provided. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

Wefunder is a well-established equity crowdfunding platform founded in 2011, enabling individuals to invest in startups and small businesses with low minimums. The platform positions itself as a community-driven investment hub backed by notable venture capitalists and angel investors. The website demonstrates a high level of digital maturity, employing modern JavaScript frameworks, analytics tools, and secure payment integrations with Stripe and Plaid. Security posture is strong with HTTPS enforced, CSRF protections, and reputable third-party services, although explicit security policies and vulnerability disclosures are not publicly visible. Privacy compliance is partial due to the absence of visible privacy and cookie policies in the provided content. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

C

Cactus

cactus.lu

58

Cactus is a well-established retail supermarket chain based in Luxembourg, offering a broad range of products including fresh food, household goods, and additional services such as restaurants, home delivery, and customer loyalty programs. The website is professionally designed using Drupal 10 and incorporates modern frontend technologies and analytics tools, indicating a mature digital presence. Security posture is moderate with HTTPS usage and anonymized IP tracking in analytics, but lacks explicit security headers and published privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness from a registration perspective, though the website content and branding strongly suggest a legitimate business. Overall, the site provides a good user experience with clear navigation and mobile optimization.

P

Planet Zemlja

planet-zemlja.hr

39

Planet Zemlja is a Croatian non-profit organization dedicated to environmental awareness, personal ecology, and ecological news dissemination. The website serves as a community platform offering news articles, event announcements, photo and video galleries, and educational content related to ecology. The target audience is the general public interested in environmental issues within Croatia. The business model is informational and community-driven without evident commercial transactions. Technically, the site uses a custom PHP-based CMS with jQuery and various plugins for RSS feeds, weather, and media galleries. External integrations include Google Analytics and Facebook SDK for tracking and social media engagement. However, the site lacks HTTPS on its main URLs, which is a significant security concern. Security headers are absent, and no advanced security or privacy compliance mechanisms are evident. Contact information is limited to forms without explicit emails or phone numbers. Overall, the site is functional but requires modernization and security improvements.

H

Hrvatski Crveni križ

hck.hr

59

Hrvatski Crveni križ is a well-established Croatian humanitarian organization with a strong national presence and a comprehensive portfolio of social, health, and crisis response services. The website reflects a mature digital presence with clear navigation, regional contact points, and integrated donation mechanisms. Technically, the site uses modern web technologies including Bootstrap, Google Analytics, and Google Maps API, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, some security headers are missing and no explicit vulnerability disclosure or incident response contacts are published. Overall, the domain registration data aligns well with the organization's identity, supporting high legitimacy and trustworthiness.

I

Indiana University

iu.edu

72

Indiana University is a large, established public educational institution in the United States offering over 930 academic programs across nine campuses. The university emphasizes world-class research, global impact, and a comprehensive student experience. The website reflects a mature digital presence with a professional design, clear navigation, and rich content targeting prospective and current students, researchers, and alumni. Technically, the site uses modern web technologies including Rivet UI framework, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are lacking. Overall, the domain registration and website content are consistent and legitimate, supporting a high trust level.

I

Istarska županija

istra-istria.hr

67

The website www.istra-istria.hr serves as the official online presence of the Region of Istria, a Croatian regional government entity. It provides comprehensive information about the region's governance, geography, culture, economy, and contact details. The site targets residents, tourists, and stakeholders interested in regional affairs. The business model is focused on public administration and information dissemination, positioning itself as a trusted government resource with certifications such as ISO 9001 and membership in the Assembly of European Regions. Technically, the site is built on Django CMS and leverages modern web technologies including jQuery, Google Analytics, and Slider Revolution. It demonstrates good mobile optimization, accessibility, and SEO practices. Hosting and domain registration are consistent with a Croatian government entity, registered with CARNET since 2001. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks published security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no dedicated privacy policy page but a functional cookie banner and settings modal. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include publishing a privacy policy, security policy, and incident response details, enhancing security headers, and adding a security.txt file to improve transparency and security posture.

IRTA d.o.o. is a medium-sized regional tourism development agency based in Istria, Croatia, established in 2004. The company manages official tourism portals, contact and sales centers, and develops cultural and outdoor tourism products to promote the Istrian region. Their market position is strong within the regional tourism sector, serving tourists and local businesses with comprehensive information and services. Technically, the website uses a custom CMS with modern JavaScript libraries and Google services, but lacks HTTPS which is a significant security gap. The privacy policy is comprehensive and GDPR compliant, with a named data protection officer, reflecting good privacy awareness. However, the absence of HTTPS and security headers lowers the security posture. Overall, the site is professional and trustworthy but requires security improvements to align with best practices.

A

American Mathematical Society

ams.org

71

The American Mathematical Society (AMS) is a well-established non-profit organization dedicated to advancing mathematical research, education, and professional development. The website serves as a comprehensive portal for AMS's diverse offerings including publications, memberships, conferences, grants, and advocacy efforts. The AMS holds a strong market position as a leading mathematical society with a global reach and a history dating back to 1888. The site targets mathematicians, educators, students, and professionals, providing valuable resources and community engagement opportunities. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, MathJax, and integrates multiple analytics and tracking tools including Google Analytics, Hotjar, and Microsoft Clarity. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the AMS website reflects a mature digital infrastructure supporting a reputable organization. The lack of WHOIS data is mitigated by consistent branding, comprehensive contact information, and domain name alignment. The security and privacy practices align well with expectations for a large non-profit educational entity. Strategic recommendations include enhancing security headers, publishing a dedicated security policy and incident response contacts, and ongoing monitoring of third-party scripts to maintain security integrity.

Restopolis is a Luxembourg-based service provider specializing in school and university catering. The website offers multilingual content targeting students, adults, and visitors, providing menu consultation, booking, and account management services. The platform integrates with IAM for secure user access and supports sustainable food procurement initiatives. Technically, the site is built on ASP.NET WebForms using the DNN CMS, leveraging modern JavaScript libraries and Google services for analytics and security. Security posture is good with HTTPS and reCAPTCHA, though explicit security headers are missing. Privacy compliance is basic with a cookie consent banner and privacy policy available. WHOIS data is unavailable, limiting domain trust verification, but the website's professional appearance and government affiliations support legitimacy.

X

Xplore Fitness Na Příkopě

xplorefitness.cz

47

Xplore Fitness Na Příkopě is a prominent fitness center located in the heart of Prague, offering a wide range of fitness and wellness services including gym facilities, group classes, martial arts, and additional amenities such as solariums and massages. The business positions itself as the largest and most modern fitness center in Prague's city center, targeting fitness enthusiasts and the general public. The website is professionally designed, content-rich, and provides clear navigation and multilingual support (Czech and English). The company maintains active social media channels and regularly updates its content with news and events. Technically, the site is built on WordPress with several plugins for enhanced user experience and analytics integration. However, the WordPress version is outdated, posing potential security risks. The site employs HTTPS and cookie consent mechanisms, demonstrating good privacy compliance. Security policies and incident response information are not explicitly published, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

P

Pro Háčkování s.r.o.

prohackovani.cz

56

ProHackovani.cz is a Czech Republic-based e-commerce retailer specializing in crafting supplies, particularly for knitting, crocheting, sewing, and creative hobbies. The website offers over 21,000 products and has an established market presence with an 8-year tradition. It provides both online sales and a physical store in Kostelec nad Labem, supported by customer service via phone, email, and chat. The business model focuses on retail sales to hobbyists and creative individuals, maintaining a strong customer service orientation and product availability.

P

Pejskovice

pejskovice.cz

54

Pejskovice.cz is an e-commerce website specializing in pet supplies targeted primarily at Czech pet owners. The site offers a variety of products for dogs, cats, and rabbits, positioning itself as a local online retailer with a focus on pet care. The website is built on the Shoptet platform, leveraging common web technologies such as JavaScript, jQuery, and integrates analytics tools including Google Analytics and Smartlook for user behavior tracking. While the site is accessible and uses HTTPS, it lacks visible privacy and terms of service pages, which are important for compliance and user trust. The absence of WHOIS data and registrant information reduces the domain's trustworthiness, although the website content and structure appear professional and consistent with a legitimate retail business. Security posture is moderate, with HTTPS enabled but missing important security headers. Overall, the site is functional and serves its business purpose but would benefit from enhanced transparency and security practices.

Montana State University is a large, top-tier research university located in Bozeman, Montana, serving a broad audience including students, faculty, staff, alumni, and researchers. The institution offers over 250 academic programs and emphasizes research, community outreach, and student life. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site uses a modern technology stack including jQuery, Google Analytics, Microsoft Clarity, and Google Tag Manager, hosted likely on a platform using OmniUpdate CMS. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is partial, with a clear privacy policy but lacking visible cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for mobile and accessibility.

W

Wellcome Collection

wellcomecollection.org

70

Wellcome Collection is a well-established non-profit cultural institution based in London, offering a free museum and library focused on health, science, medicine, and human experience. The website provides rich content including exhibitions, events, stories, and publications, targeting a broad audience interested in these themes. The organization maintains a strong market position as a reputable educational and cultural resource. Technically, the website is built on modern frameworks such as Next.js and Prismic CMS, hosted on AWS infrastructure, and incorporates advanced analytics and cookie consent mechanisms, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and privacy-conscious analytics, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the site is professional, accessible, and trustworthy, with clear contact information and compliance with privacy regulations. Strategic recommendations include enhancing DNS security, publishing security policies, and maintaining vigilance on third-party scripts. The domain registration is privacy protected but consistent with legitimate use for a non-profit entity, with a domain age appropriate for the organization's history.

T

The Audiencers

theaudiencers.com

70

The Audiencers is a specialized B2B media community platform founded in 2022, focused on supporting publishing professionals with expertise in audience engagement, conversion, and retention. The platform offers case studies, newsletters, events, and subscription services, positioning itself as a niche player in the media industry. The business is linked to Poool, a known player in paywall and engagement technology, enhancing its credibility and market positioning. Technically, the website is built on WordPress with modern tools like Elementor and Kadence Blocks, integrating analytics and marketing tools such as Google Analytics, HubSpot, and Stripe for payments. The site is mobile-optimized and uses structured data for SEO, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partially implemented with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.

C

Croatian Climate Change Panel

solarniklaster.org

45

The Croatian Climate Change Panel operates the solarniklaster.org website as a specialized platform focused on renewable energy, sustainable technologies, and climate change awareness primarily targeting Croatian and regional audiences. The site offers news, expert articles, multimedia content, and educational resources to support green energy transition efforts. Technically, the website uses a standard modern tech stack including Bootstrap, jQuery, and analytics tools, hosted on a domain registered since 2015 with privacy protection. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with policies present but no explicit cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is a credible, niche informational resource with room for security and privacy improvements.

Otok Krk energija d.o.o. is a Croatian limited liability company focused on producing and supplying renewable energy, primarily solar, to achieve energy independence for the island of Krk. The company is relatively new, founded in 2019, and is owned by the local municipality of Baška with plans to include other local government units as co-owners. Their business model centers on local investment and sustainable energy production, positioning themselves as a key player in the regional green energy market. The website reflects this mission with content in Croatian and some English, targeting local residents, investors, and governmental bodies interested in renewable energy projects. Technically, the website uses common web technologies such as Bootstrap, jQuery, and popular carousel libraries, with integration of Google Analytics and Facebook SDK for tracking and marketing purposes. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is moderate; HTTPS is used but no explicit security headers or incident response policies are published. Privacy and cookie policies exist but lack active consent mechanisms. Overall, the website is professional and trustworthy but could improve in security and privacy compliance. Recommendations include implementing security headers, adding cookie consent, publishing incident response information, and enhancing contact transparency.

S

STT Viestintäpalvelut

viestintapalvelut.fi

56

STT Viestintäpalvelut is a Finnish media communication service provider specializing in enhancing brand visibility through comprehensive media communication tools, press release distribution, communication planning, and visual communication services. The website is professionally designed using HubSpot CMS and integrates modern marketing and analytics technologies such as Google Analytics, Hotjar, and HubSpot's own lead and messaging tools. While the technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, the site lacks explicit privacy and terms of service pages, as well as visible contact information, which slightly impacts its privacy compliance and business credibility scores. Security posture is generally good but could be improved by adding security headers and incident response information.

S

Suomen Tietotoimisto Oy

stt.fi

51

Suomen Tietotoimisto Oy (STT) is a historically significant Finnish news agency, established in 1887, providing comprehensive news, image, and communication services. The company holds a strong market position as one of Finland's leading and most trusted media organizations, serving a broad audience including media houses, organizations, and the general public. Their digital presence is professional, with a well-structured website offering multilingual support and extensive content. Technically, the site leverages modern technologies such as WordPress, Google Tag Manager, and Matomo Analytics, ensuring good performance and SEO optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though there is room for improvement in DNSSEC and explicit security policies. Overall, STT demonstrates a mature digital infrastructure and a strong commitment to privacy compliance, making it a credible and trustworthy media entity.

P

Perille Mobility Services Oy

matkakeisari.fi

57

Matkakeisari.fi is a Finnish travel ticket price comparison and booking platform operated by Perille Mobility Services Oy, founded in 2015. The service aggregates bus and train schedules and prices from major Finnish transport providers, enabling travelers to find the cheapest and fastest routes and purchase tickets conveniently. The website is well-designed, mobile-optimized, and uses modern web technologies including React and Next.js. It integrates Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS and security headers implemented, though no explicit security or incident response policies are published. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanism. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website provides a trustworthy and user-friendly service for Finnish public transport travelers.

N

NextGi

nextgi.com

68

NextGi is a small technology company founded in 2008, specializing in managed IT and security services with a strong emphasis on cybersecurity and customer support. Their website presents a professional and consistent brand image, targeting small to medium businesses seeking comprehensive IT solutions including managed security, VoIP, cloud hosting, and network optimization. The company leverages partnerships with major technology providers such as AWS, Microsoft, and Bitdefender, enhancing their market credibility. Technically, the website uses modern JavaScript libraries and analytics tools, is hosted behind Cloudflare, and employs HTTPS for secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there are gaps in privacy compliance and security best practices, notably the absence of privacy and cookie policies, security headers, and incident response information. From a security perspective, the domain registration is consistent and trustworthy, with no signs of suspicious activity. The company demonstrates a security-first approach in its service offerings but should improve its website security posture by implementing recommended headers and compliance documentation. Overall, the website is functional and professional but could benefit from enhanced privacy and security transparency. The risk assessment indicates moderate security maturity with no critical vulnerabilities detected but highlights compliance gaps that could expose the company to regulatory risks. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response contacts to strengthen trust and compliance.

Marcus Hutchins' website serves as a personal brand platform highlighting his expertise as a cybersecurity specialist, speaker, and ex-hacker known for stopping the global WannaCry ransomware attack. The site targets cybersecurity professionals and enthusiasts, offering services such as public speaking, research, and educational content. The business model revolves around personal branding and content dissemination. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Ionicons, hosted behind Cloudflare DNS and CDN services. Analytics are implemented via Google Analytics and Cloudflare Insights, though privacy compliance is limited due to the absence of privacy and cookie policies. Security posture is solid with HTTPS and domain registration protections, but could be enhanced by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and well-structured, though it lacks some compliance documentation.

The website umdpl.info represents a Ukrainian human rights non-profit association named Асоціація УМДПЛ, also branded as “ФРІРАЙТС”. It focuses on digital rights, penitentiary oversight, legal education, criminal justice, and activist protection. The organization targets activists, government bodies, and the general Ukrainian public, providing educational resources, reports, and special projects. The domain is well-established since 2008, supporting the organization's credibility and longevity. Technically, the site runs on an outdated WordPress 4.4.2 CMS with older jQuery libraries, which introduces security risks. The site uses Google Analytics and Facebook SDK for tracking and social media integration. Mobile optimization and accessibility are basic, with moderate performance. No advanced SEO or modern frameworks are detected. Security posture is moderate but with notable gaps: HTTPS is enabled, but no DNSSEC, no security headers, and no cookie consent mechanisms are present. The outdated CMS and libraries increase vulnerability exposure. No explicit privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Overall, the site is functional and credible for its non-profit mission but requires technical and security modernization. Strategic improvements in security headers, CMS updates, privacy compliance, and user experience would enhance trust and reduce risk.