Security Directory

K

Katalozi.net / Svi katalozi na jednom mjestu

katalozi.net

56

Katalozi.net is a Croatian retail catalog aggregation website established in 2012, providing users with access to various promotional catalogs and offers from multiple retailers. The site leverages WordPress CMS with Yoast SEO for content management and optimization, and monetizes through Google Adsense advertising. The technical infrastructure includes Cloudflare DNS and hosting via GoDaddy.com, LLC. The website is well-structured with good navigation and content relevance, targeting general retail consumers in Croatia and neighboring regions. Security posture is moderate with HTTPS enabled and domain registration locks, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and trustworthy for its business purpose but requires improvements in privacy and security disclosures.

H

Hrvatski Telekom d.d.

akz.hr

52

The website www.akz.hr serves as the official online platform for the Zagreb Bus Station, providing extensive bus ticketing services across Croatia and neighboring countries. It offers users the ability to search for bus schedules, purchase tickets online up to 15 minutes before departure, and access real-time status updates for arrivals and departures. The platform supports mobile app integration, enhancing accessibility for travelers. The business is positioned as a key transportation service provider in the region, backed by Hrvatski Telekom d.d., a reputable Croatian telecommunications company. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations of Google Tag Manager and Google Analytics for marketing and analytics purposes. Hosting is managed by Hrvatski Telekom with Cloudflare DNS services, ensuring reliable domain resolution. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content Security Policy and HSTS, which are recommended for enhanced protection. Privacy compliance is limited due to the absence of a visible privacy policy and terms of service, representing a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally maintained, with a strong business credibility score. Strategic improvements in privacy policy publication, security header implementation, and comprehensive compliance documentation would elevate its security posture and user trust.

Motels Near Me is a niche hospitality website operated by Heylab AB, a Swedish company founded in 2017. The site provides a location-based motel search service, helping travelers find motels with available rooms near their current location, emphasizing best price guarantees. The business model centers on facilitating motel discovery and potentially bookings, targeting travelers seeking convenient and affordable lodging options. The website is professionally designed with a clear user interface and good mobile optimization, leveraging modern web technologies including Vue.js, Google Analytics, and Google Maps API. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security at the infrastructure level. Security posture is moderate with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and security headers like CSP and HSTS represent areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms, which could expose the business to regulatory risks. Contact information is minimal, limited to personal links in the about section, with no direct company emails or phone numbers disclosed. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy practices to improve compliance and user trust.

WhatAltitude.com is a small, niche website created by Jonatan Heyman in 2013 that provides users with altitude information based on their GPS location. The site is a single-purpose informational tool supported by advertising revenue and uses multiple ad networks and tracking services. Technically, the site employs standard web technologies including jQuery, Google Fonts, Google Analytics, and social media SDKs, hosted behind Cloudflare DNS. Security posture is adequate with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not active and security headers are not explicitly detected. Privacy compliance is addressed via an embedded consent management platform, ensuring GDPR adherence. The site lacks formal contact emails or phone numbers and does not provide terms of service or explicit security policies. Overall, the website is safe, professional, and trustworthy for general audiences.

R

Roni

ronigame.com

50

Roni is a small technology business focused on delivering a multiplayer and single-player word game available on iOS and Android platforms. The website serves as a promotional portal providing game descriptions, screenshots, and download links to app stores. The business targets casual and word game enthusiasts, offering features such as multiplayer challenges, daily games, and chat functionality. The domain has been registered since 2013, indicating a stable presence in the market. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Google Analytics for user tracking and Cloudflare for DNS services. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced security headers and cookie consent mechanisms, which are important for privacy compliance and security hardening. From a security perspective, the site enforces HTTPS and has domain transfer protections, but does not enable DNSSEC or publish security policies or incident response contacts. No WAF or blocking mechanisms are detected, and no vulnerabilities or suspicious content were found. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the website is professional and trustworthy for its purpose but could improve its security posture and privacy compliance to better protect users and enhance trust. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response information.

Longitude.me is a small technology service operated by Heylab AB, based in Sweden, offering a simple and privacy-conscious real-time location sharing platform. The website is authored by Jonatan Heyman and is part of a portfolio of related travel and location-based projects. The service targets general internet users who want to share their location easily and temporarily. Technically, the site uses modern JavaScript libraries, integrates social media widgets, and is hosted with Cloudflare DNS services. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is weak due to absence of privacy and cookie policies. No direct contact information or incident response details are provided, limiting transparency. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

HeyWeb was a technology-focused SaaS platform designed to enable small business owners to rapidly create websites by converting their Facebook pages into fully functional websites. The service automated content updates from social media and provided features such as custom domains and newsletter signups. The website is currently closed, indicating the service is no longer active. The domain is well-established, registered since 2007, and uses reputable registrar and DNS providers, supporting its legitimacy. Technically, the website uses a modest tech stack including jQuery, typed.js, and Google Analytics for tracking. It is hosted with Cloudflare DNS and uses Gandi SAS as the registrar. The site is mobile optimized and has a good design and user experience, but lacks advanced accessibility features and comprehensive SEO optimization. No CMS or major frameworks were detected. From a security perspective, the site lacks DNSSEC, security headers, and visible privacy or cookie policies, which are critical for compliance and user trust. The domain is protected against unauthorized transfers but could improve DNS security. No WAF or blocking mechanisms were detected, and no sensitive data exposure was found. Overall, the security posture is moderate but requires improvements to meet modern standards. The overall risk is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies, adding security headers, and providing clear contact and incident response information to enhance trust and compliance.

Q

Qmini

qmini.hr

57

Qmini is a boutique digital agency based in Čakovec, Croatia, specializing in web development, graphic design, and marketing solutions. Established in 2006, the company positions itself as an innovative provider helping brands enhance their online presence. The website is professionally designed using WordPress with the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. It supports Croatian and English languages, targeting businesses seeking digital marketing and design services. The technical infrastructure includes modern web technologies and Cloudflare DNS services, ensuring reliable hosting and performance. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Overall, the website reflects a trustworthy and professional business with good digital maturity.

Age Themes operates as a specialized digital marketplace offering Joomla templates, WordPress themes, and Shopify templates, targeting web developers and site owners seeking professional website styles. The business model centers on selling both free and pro versions of templates, including membership bundles that provide extensive access to their catalog. The company appears to be a small-sized entity founded in 2013, with a consistent brand presence and active social media channels. Technically, the website is built on WordPress with Easy Digital Downloads for e-commerce, integrates Google Analytics for tracking, and uses Cloudflare for DNS management. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic.

A

Ad Fingers

adfingers.com

46

Ad Fingers is a Lithuanian digital marketing agency specializing in user-oriented marketing solutions, UX/UI design, communication campaigns, and platform audits. Established in 2010, the company has built a solid portfolio serving various clients including known brands. Their website reflects a professional and modern digital presence with clear navigation and comprehensive service showcases. Technically, the site uses modern JavaScript frameworks such as Livewire and Alpine.js, hosted with Cloudflare DNS services, and implements HTTPS with good SSL configuration. Privacy compliance is addressed through cookie consent mechanisms and a privacy policy page, indicating GDPR awareness. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Overall, the website is trustworthy, well-designed, and suitable for its target business audience.

S

Stanley/Stella

stanleystella.com

72

Stanley/Stella is a premium European e-commerce retailer specializing in sustainable blank apparel designed for customization. Founded in 2011, the company positions itself as a leader in eco-conscious clothing, targeting businesses and individuals seeking quality sustainable garments. The website supports multiple languages and countries, enhancing its accessibility and market reach. Technically, the site is built on Magento with integrations of modern JavaScript frameworks and analytics tools such as Piwik PRO and New Relic, indicating a mature digital infrastructure. Security practices include HTTPS enforcement, secure cookie handling, and domain transfer protection, although DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a solid security posture and professional business credibility.

P

Windows 3.11 Emulator - retro computer with dial-up internet by Pieter™

pieter.com

49

The website pieter.com offers a niche service: a browser-based Windows 3.11 emulator with a simulated dial-up internet experience. It targets retro computing enthusiasts and users interested in vintage software experiences. The site is technically mature, leveraging modern JavaScript libraries such as jQuery and Tesseract.js, and uses Emscripten to run DOSBox in the browser. Hosting and DNS are managed by Cloudflare, providing a reliable infrastructure. However, the site lacks formal privacy, cookie, and terms of service policies, and does not provide contact or incident response information, which limits its compliance posture. Security practices are basic, with no DNSSEC enabled and no visible security headers, though the domain is long-standing and registered consistently.

T

Turistička zajednica Međimurske županije

tzm.hr

60

Turistička zajednica Međimurske županije is a regional tourism organization focused on promoting the identity and reputation of the Međimurje County in Croatia. Established in 2002, it serves as a central body for planning and executing promotional strategies and activities that benefit all tourism stakeholders in the region. The website reflects a professional and consistent brand image, targeting general audiences interested in regional tourism information and services. Technically, the site is built on Drupal 11, uses modern web technologies including jQuery, and is hosted with Cloudflare DNS services, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the domain registration data aligns well with the business purpose, indicating a legitimate and trustworthy entity.

The Science and Society Synergy Institute (S3I) is a Croatian-based multidisciplinary research institute established in 2010. It focuses on fostering innovative research ideas and supporting young scientists across various disciplines. The institute acts as a collaborative hub for researchers, entrepreneurs, policy makers, and education professionals to promote societal development. The website reflects a small but professional organization with a clear academic and societal mission. Technically, the site is built on WordPress using the Twenty Eleven theme, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for compliance improvement. The WHOIS data is consistent and trustworthy, registered under CARNET, a Croatian academic network, aligning well with the institute's profile.

The website at imrmbb.site currently contains no accessible content beyond a minimal placeholder message 'Not found'. There is no metadata, structured data, forms, or business information available to analyze. The domain is newly registered in November 2024 with a two-year expiry and uses Cloudflare DNS servers without DNSSEC enabled. No privacy, cookie, or terms of service policies are present, and no contact or security incident response information is provided. The lack of content and transparency significantly limits the ability to assess the business or security posture meaningfully. From a technical perspective, the site appears to be hosted behind Cloudflare but lacks modern security headers and DNS security features. The absence of HTTPS status information and security headers suggests a basic or incomplete security configuration. No analytics, advertising, or tracking technologies are detected, indicating minimal digital maturity or possibly an inactive site. Security posture is weak due to the lack of visible security best practices and policies. No vulnerabilities can be assessed due to the absence of content. The domain registration is transparent and consistent but the lack of business information and website content reduces trustworthiness. Overall, the site presents a high risk for users due to the lack of information and transparency. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, implementing HTTPS with strong TLS, adding security headers, and providing clear contact and incident response information to improve trust and compliance.

2

Loading...

20bet.com

49

The website bet20play.com is an online gambling platform launched recently in 2024, targeting German-speaking adult users interested in sports betting, live betting, casino games, live casino, and horse racing. The platform offers various gambling-related services including promotions, forecasts, and results. The domain is newly registered and hosted using modern cloud infrastructure including Cloudflare DNS and Amazon CloudFront CDN. The site uses React-based frontend technologies and Google Fonts for styling. However, the website lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security posture is basic with no DNSSEC enabled and no visible security headers, though HTTPS is implied but not explicitly confirmed in the data. Advertising is present via TrafficJunky ad network. Overall, the site is functional but has significant gaps in privacy compliance and security best practices.

Sportaza is an online gambling platform primarily targeting German-speaking users, offering a variety of services including sports betting, live betting, casino games, live casino, jackpots, and virtual sports. The platform appears to be relatively new, with the domain registered in early 2023. The website is built using modern web technologies, notably Angular 14, and leverages Cloudflare DNS services for hosting and security. It integrates Google Tag Manager and reCAPTCHA v3 for analytics and bot protection respectively. However, the site lacks visible privacy policies, terms of service, and contact information, which are critical for user trust and regulatory compliance in the gambling industry. Security measures are partially implemented with HTTPS and reCAPTCHA, but the absence of DNSSEC and security headers indicates room for improvement. Overall, the site is functional and professionally designed but requires enhancements in compliance and security transparency.

Powbet is an online sports betting and casino gaming platform launched in 2023, targeting adult users interested in gambling entertainment. The website offers a variety of sports betting options and casino games, positioning itself competitively in the online gambling market. The business model revolves around providing digital betting and gaming services with promotional bonuses to attract users. Technically, the site is built as a modern Angular single-page application, leveraging popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Optimize. The infrastructure includes Cloudflare DNS and GoDaddy as the domain registrar, indicating a standard hosting and domain setup for such platforms. Security-wise, the site uses HTTPS and has domain status protections, but lacks DNSSEC and visible security headers. There is no explicit privacy policy or terms of service found in the analyzed content, which is a compliance gap. No contact or incident response information is publicly available, limiting transparency. Overall, the site is functional and professionally designed but would benefit from enhanced security practices and compliance disclosures.

E

European Atherosclerosis Society

eas-society.org

63

The European Atherosclerosis Society (EAS) operates a professional community website focused on sharing knowledge about the causes, treatment, and prevention of atherosclerosis and related diseases. The site targets healthcare professionals, researchers, and interested community members, positioning itself as a specialized non-profit knowledge-sharing platform in the healthcare sector. Founded in 2002, the society maintains a consistent and professional online presence with a clear mission and relevant content. Technically, the website is built on WordPress with the BuddyBoss platform, leveraging Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The site uses minimal tracking via Fathom Analytics, reflecting a privacy-conscious approach. Overall, the website is trustworthy and safe for general audiences, but could improve in privacy transparency and security best practices.

I

International Atherosclerosis Society

athero.org

10

The International Atherosclerosis Society (IAS) operates a professional, global network website focused on atherosclerotic cardiovascular disease education, research, and clinical practice. Established in 1979, the IAS provides educational resources, fellowships, webinars, and organizes international meetings to support clinicians worldwide. The website reflects a mature, well-branded organization with consistent messaging and a clear target audience of healthcare professionals specializing in cardiovascular disease. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Rank Math SEO, hosted behind Cloudflare DNS. It employs Google Analytics for traffic monitoring and uses Cloudflare Turnstile CAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks DNSSEC and explicit security headers. No direct contact emails or phone numbers are publicly listed, but a subscription form is available. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. No vulnerability disclosure or incident response policies are published. Social media presence is active on major platforms. Overall, the IAS website is a professional, trustworthy resource for clinicians with a solid technical foundation and good security practices. Improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

R

Retargetly

retargetly.com

61

Retargetly is a Latin American technology platform specializing in data-driven advertising solutions, now operating as part of the global marketing company Epsilon. The website serves primarily as a transitional landing page informing visitors of this corporate change, with limited direct content or interactive features. The business is positioned as a leader in data and advertising convergence in Latin America, serving over 250 clients. Technically, the site is built on Webflow with standard web technologies such as jQuery and Google Fonts, hosted with Cloudflare DNS services. Security posture is moderate with HTTPS enabled and domain transfer lock in place, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partial, with privacy policies available but no cookie or terms of service policies evident. No direct contact or incident response information is published, limiting transparency. Overall, the site is safe, professional, and consistent with the business narrative but could improve in privacy and security disclosures.

F

Fundacja Academic Partners

pythonsummit.org

66

Python Summit is a specialized conference targeting Python developers, data engineers, architects, and DevOps professionals, primarily in Poland but with international reach. It is organized by the Fundacja Academic Partners foundation and associated Python communities such as PyData and PyWaw. The event offers both online and onsite participation, with a comprehensive agenda featuring expert speakers and practical case studies. The conference also includes a job fair and offers multipass tickets granting access to related conferences, enhancing its value proposition. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, Facebook Pixel, and Swiper.js for UI components. It is hosted with DNS managed by Cloudflare and uses HTTPS, ensuring secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics and marketing tools are extensively used, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and advanced security headers like CSP are not explicitly observed. There is no published security policy or incident response contact, which could be improved. Privacy and cookie policies are present and GDPR compliance is indicated through consent banners. Overall, the website presents a professional and trustworthy image with a solid technical foundation and good privacy practices. The domain is newly registered, consistent with the event timeline, and no suspicious indicators are found. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance the security posture further.

F

Fundacja Academic Partners

yavaconf.com

63

Ya!vaConf is a specialized technology conference focusing on the Java stack, organized by Fundacja Academic Partners. It targets developers, architects, DevOps professionals, and testers interested in Java and related technologies. The conference offers both online and onsite participation, with a rich agenda, networking opportunities, and an expo. The event is well-positioned in the Polish tech conference market, emphasizing quality content and community engagement. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, and various analytics and tracking tools. It uses Cloudflare DNS and is served over HTTPS, ensuring secure access. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. The presence of structured data enhances search engine understanding. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status in WHOIS to protect domain transfers. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the conference. The main risks relate to minor security enhancements and improving accessibility. Strategic recommendations include enabling DNSSEC, publishing a security policy, and enhancing accessibility features to further strengthen trust and compliance.

F

Fundacja Academic Partners

thehacksummit.com

63

The Hack Summit is a prominent cybersecurity conference in Poland, organized by Fundacja Academic Partners. It serves as a major gathering for cybersecurity professionals, government officials, and industry experts, offering a mix of online and onsite events with extensive educational content and networking opportunities. The conference is well-established since 2020 and attracts over 2,000 participants annually, positioning itself as a key event in the Polish cybersecurity landscape. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, and multiple tracking pixels, hosted with reputable providers and secured with HTTPS. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy organization with a clear business model focused on event hosting and community engagement.

K

KingHost

kinghost.com.br

10

KingHost is a Brazilian web hosting company established in 2017, offering secure and reliable hosting services including domain registration, email hosting, and cloud solutions. The company targets small to medium businesses and individuals in Brazil, positioning itself as a trusted local provider with a focus on security and performance. The website demonstrates a modern technical infrastructure using Next.js, React, and integrates multiple analytics and marketing tools. Security posture is strong with HTTPS enforcement, security headers, and clientTransferProhibited domain status, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, KingHost presents a professional and trustworthy online presence with good business credibility and technical maturity.

F

fireTMS.com Sp. z o.o.

firetms.com

76

fireTMS.com Sp. z o.o. operates a mature and well-established transport management system platform targeting carriers and forwarders globally, with a strong presence in Poland and Europe. The company offers a comprehensive SaaS solution integrating transport planning, order management, invoicing, GPS tracking, and mobile applications, supported by a freight exchange service (fireXgo). The business is part of the Eurowag Group, enhancing its market credibility and reach. Technically, the website is built on modern frameworks like Next.js and React, optimized for performance and mobile responsiveness, and integrates multiple marketing and analytics tools. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR, making fireTMS a credible and competitive player in the transport software industry.

C

Cloudflare, Inc

wonderchat.io

66

Wonderchat.io is a technology startup focused on providing no-code AI chatbot solutions for websites, leveraging ChatGPT-based automation to enhance customer support and sales analytics. The company targets businesses seeking to automate up to 70% of support queries with custom AI agents, positioning itself as an emerging player in the AI SaaS market. The website is built using modern frameworks like Framer and is hosted via Cloudflare, indicating a contemporary technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security features such as DNSSEC and does not publish security or privacy policies. The site integrates multiple analytics and marketing tools, reflecting a data-driven approach to user engagement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact and security information.

E

Experis France

experisfrance.fr

55

Experis France is a well-established IT talent and solutions provider operating primarily in France, with a business foundation dating back to 2011. The company offers a broad range of IT services including professional resourcing, managed services, consulting, project services, and academy services, targeting IT professionals and businesses seeking specialized IT expertise. As a subsidiary of ManpowerGroup, Experis France benefits from a strong market position and brand recognition in the technology sector. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern frontend frameworks and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Piano Analytics, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and maintains GDPR compliance with cookie consent mechanisms. However, it lacks a dedicated security policy or incident response contact information, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Strategic recommendations include publishing explicit security policies, establishing incident response contacts, and enhancing accessibility features to further improve compliance and trust.

R

Ravensburger

ravensburger.de

65

Ravensburger is a well-established German retail company specializing in puzzles, games, and educational products. The website serves as an online shop and product catalog, targeting a general audience including families and children. The brand is consistent and professional, with a clear market position in the retail sector for leisure and educational products. Technically, the site uses modern frameworks such as Bootstrap and is powered by the Bloomreach CMS, hosted with Cloudflare DNS services, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, with comprehensive privacy and cookie policies indicating GDPR compliance. Security posture is solid with HTTPS and service worker usage, though explicit security headers and incident response information are not evident. Overall, the site is trustworthy, safe, and professionally maintained.

V

vlexx GmbH

vlexx.de

53

vlexx GmbH is a regional rail transport company operating in the German states of Rheinland-Pfalz, Hessen, and Saarland. The company provides passenger rail services with a focus on comfort, modern amenities, and sustainability. Their website offers comprehensive information on schedules, tickets, service, career opportunities, and leisure travel, targeting regional commuters and travelers. The company is positioned as a reliable regional transport provider with a medium-sized workforce and a solid market presence since its founding in 2014. The parent company is Netinera Deutschland GmbH, indicating a strong backing in the rail transport sector. Technically, the website is built on Craft CMS, uses modern JavaScript libraries, and is hosted behind Cloudflare, ensuring good performance and security. Privacy and cookie policies are present and GDPR compliant, though explicit terms of service and incident response policies are not found. Security posture is good with HTTPS and CSRF protections, but could be improved with additional security headers and vulnerability disclosure mechanisms. Overall, the website is professional, trustworthy, and well-structured for its audience.

O

Osthannoversche Eisenbahnen Aktiengesellschaft

ohe-ag.de

53

Osthannoversche Eisenbahnen Aktiengesellschaft (OHE) is a well-established transportation company based in Germany, specializing in regional rail and bus services primarily in Niedersachsen. Founded in 1944, OHE operates workshops and infrastructure services, positioning itself as a key regional player with a strong focus on reliability and customer satisfaction. The website reflects a professional digital presence with clear business information and a user-friendly interface. Technically, the site uses modern web technologies including Craft CMS, jQuery, and FontAwesome, hosted behind Cloudflare DNS services, and integrates Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-optimized for users.

C

Centous Solutions

techdignity.com

57

Centous Solutions is a small, India-based company specializing in developing Shopify apps aimed at enhancing e-commerce store performance, customer experience, and operational efficiency. Their portfolio includes apps for shipping protection, customer reviews, background music, product options, bulk image import, tagging, and inventory automation. The company also offers related services such as store setup, sales marketing, app installation, and troubleshooting. The website is built on WordPress and integrates modern technologies including Bootstrap, jQuery, and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the Shopify app niche.

L

Lease a Bike

lease-a-bike.de

62

Lease a Bike is a large German bike leasing service provider targeting companies, public employers, and employees. It offers a digital platform for bike leasing, enabling companies to provide bikes as employee benefits with minimal administrative effort. The company is affiliated with Volkswagen Financial Services AG and Pon.Bike, indicating strong market positioning and trust. The website is modern, well-designed, and optimized for mobile, featuring extensive customer testimonials and a comprehensive service offering. Technically, the site uses modern frameworks like Tailwind CSS, HubSpot forms, and Google Tag Manager, hosted behind Cloudflare DNS. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies are not fully documented. Privacy compliance is basic, with no explicit privacy or terms of service pages found in the provided content. Overall, the site is professional, trustworthy, and business-focused with a strong digital presence.

G

Gimii

gimii.fr

43

Gimii is a French technology company specializing in innovative consent management solutions for websites and mobile applications. Their core offering, the Consent Raiser, is designed to increase user consent rates for cookies by incentivizing users with donations to associations, thereby combining privacy compliance with social impact. The company targets website publishers, advertisers, and non-profit associations, positioning itself as a niche player in the consent management market with a socially responsible business model. Founded in 2022, Gimii operates primarily in France and maintains a professional online presence with a well-structured website and active LinkedIn profile. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and integrates marketing and analytics tools like HubSpot and Google Analytics. The site is hosted with Cloudflare DNS and enforces HTTPS, reflecting a good baseline security posture. However, explicit privacy and cookie policies are not found in the provided content, and there is no visible security or incident response policy, which are areas for improvement. Overall, Gimii demonstrates a solid digital maturity for a small company, with good content quality and business credibility but room to enhance privacy compliance and security transparency.

B

BrandEx

brand-ex.org

60

BrandEx is a specialized event and award platform focused on recognizing excellence in live communication and brand experience within the German-speaking market. Established in 2017, it organizes annual award ceremonies celebrating creativity and innovation in categories such as architecture, events, and special awards. The website serves as a hub for ticket sales, jury information, news updates, and industry networking, targeting marketing professionals, event organizers, and creative agencies. Technically, the site is built on WordPress with modern plugins for SEO, cookie management, and analytics, hosted behind Cloudflare DNS. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and DNSSEC are not implemented. Privacy compliance is strong, reflecting GDPR requirements with detailed cookie categories and user consent options. No critical vulnerabilities or suspicious indicators were found. Overall, BrandEx presents a professional, trustworthy, and well-maintained digital presence aligned with its business goals.

F

Fond za zaštitu okoliša i energetsku učinkovitost

fzoeu.hr

56

Fond za zaštitu okoliša i energetsku učinkovitost is a Croatian governmental fund dedicated to environmental protection and energy efficiency. Established in 2004, it serves as a national authority providing funding, regulatory oversight, and public information related to waste management, renewable energy, and environmental sustainability. The website offers comprehensive resources including public tenders, announcements, and educational content targeting Croatian citizens, businesses, and public institutions. The organization maintains a consistent and professional online presence aligned with its governmental role. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with Google Analytics integrated for user tracking under a compliant cookie consent mechanism. Hosting and DNS services are supported by Cloudflare, ensuring reliable performance and security. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. From a security perspective, the website enforces HTTPS and implements cookie consent, but lacks visible security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the organization's Croatian governmental identity, enhancing trustworthiness. Overall, the website presents a secure, professional, and informative platform supporting the fund's mission. Strategic improvements include publishing explicit security policies, incident response information, and enhancing security headers to further strengthen the security posture.

Zakon.hr is a well-established Croatian legal information portal operated by cyber_Folks d.o.o., providing comprehensive access to laws, regulations, and legal documents. The website targets legal professionals, businesses, and the general public seeking reliable legal information. It maintains a strong market position as a leading legal resource in Croatia, supported by updated content and a related AI legal assistant service, Zakon.ai. The business model appears to be a combination of subscription and advertising revenue streams.

R

Runa Capital

runacap.com

68

Runa Capital is a well-established global venture capital firm specializing in early-stage investments in software and deep tech startups. With over $600 million in assets under management and a presence in multiple countries, the firm targets deeptech, enterprise software, and fintech infrastructure sectors. The website reflects a professional and consistent brand image, supported by a modern WordPress infrastructure and comprehensive SEO optimization. The firm maintains multiple global offices, reinforcing its international market position. Technically, the website employs a modern tech stack including Google Analytics, HubSpot, and Cloudflare DNS services, ensuring good performance and mobile optimization. The site is secured with HTTPS and domain registration protections, although DNSSEC is not enabled. Privacy compliance is partially addressed with a clear privacy policy, but lacks a cookie consent mechanism and explicit security policies. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but could be improved by adding security headers, vulnerability disclosure policies, and incident response contacts. Overall, the website is trustworthy and professional, with moderate user tracking and good advertising transparency. Strategically, Runa Capital should focus on enhancing privacy compliance and security transparency to align with evolving regulatory requirements and improve user trust further.

T

Tech Funding News

techfundingnews.com

68

Tech Funding News is a specialized online media platform delivering global technology startup funding news, covering sectors such as AI, fintech, crypto, and venture capital. The website targets technology startup founders, investors, and industry professionals seeking timely funding updates and insights. The platform operates on WordPress with a modern tech stack including Yoast SEO, Mailchimp integration, and Google Analytics for tracking and marketing. Hosting and DNS services involve GoDaddy and Cloudflare respectively, ensuring reliable domain management and performance. Security posture is solid with HTTPS enforced and domain locks in place, though DNSSEC is not enabled and no explicit privacy or security policies are published. The site includes cookie consent mechanisms but lacks a formal privacy policy and terms of service, which are critical for GDPR compliance. Contact is primarily through newsletter subscription forms without direct emails or phone numbers. Overall, the website presents professional content with good design and navigation, but could improve privacy transparency and security disclosures.

Ž

Žinau, ką renku

zinaukarenku.lt

52

Žinau, ką renku is a Lithuanian non-profit political monitoring platform focused on engaging young citizens across Lithuania in election processes and political awareness. The website provides election information, candidate monitoring, volunteer opportunities, and a blog to inform and empower voters. The platform positions itself as a neutral and civic-minded entity, leveraging modern web technologies to deliver content effectively. Technically, the site uses Laravel Livewire, Alpine.js, and Cloudflare DNS services, ensuring a modern and responsive user experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF protections in place, although some security headers could be improved. Privacy compliance is evident through a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the site is trustworthy, professional, and well-maintained, with no detected blocking or WAF interference.

M

MTÜ Eesti Lasterikaste Perede Liit

perekaart.ee

63

Perekaart is a well-established non-profit organization in Estonia providing a discount card service targeted at large families with three or more children. The website serves as a platform to promote the discount network, which includes over 600 partners offering more than 800 unique discounts across various sectors such as leisure, culture, and food services. The organization is positioned as a key player in supporting family welfare in Estonia, with a strong partnership ecosystem and a clear mission to add value to families' everyday lives. Technically, the website is built using modern web technologies including React and Material-UI, hosted behind Cloudflare DNS services, and integrates Google Tag Manager for analytics and SendSmaily for newsletter management. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. Privacy compliance is addressed through a cookie consent mechanism and a privacy policy page, reflecting awareness of GDPR requirements. From a security perspective, the website uses HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks explicit security headers and detailed security or incident response policies on the site. No vulnerabilities or suspicious patterns were detected in the analysis. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk assessment is low, with the website showing high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, expanding privacy and incident response disclosures, and improving SEO and accessibility features to further strengthen the site's digital maturity and compliance posture.

A

Acki Nacki

ackinacki.com

56

Acki Nacki is a newly established blockchain platform launched in 2023, positioning itself as the fastest and most scalable blockchain solution with unique features such as gas-free transactions and full decentralization from block zero. The platform targets developers, blockchain users, and technology companies, offering services including token mining, wallet applications, security simulations, and reward calculators. The website reflects a professional and consistent brand image with strong community engagement across multiple social media channels. Technically, the site is built on Webflow, uses modern web technologies, and is hosted with Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, but lacks published privacy, cookie, and terms policies, as well as explicit contact information for security incidents. Overall, the domain registration and website content are consistent and legitimate, though privacy compliance and security best practices could be improved.

H

Hrvatski autoklub

hak.hr

66

Hrvatski autoklub (HAK) is a well-established national automobile club in Croatia, founded in 1997, providing a broad range of services including roadside assistance, travel and traffic information, driver education, and vehicle technical inspections. The website reflects a mature digital presence with comprehensive content tailored to drivers and vehicle owners in Croatia. The technical infrastructure leverages modern web technologies such as jQuery and Google Fonts, hosted with Cloudflare DNS, and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and serves its audience effectively.

J

Justified Image Grid - Premium WordPress Gallery

justifiedgrid.com

58

JustifiedGrid.com is a specialized WordPress plugin provider offering a premium image gallery solution that enables users to present photos in a justified grid layout without cropping. The website targets WordPress users, photographers, and website owners seeking advanced gallery features integrated with popular sources like Facebook and Flickr. The business appears to be a small, niche player in the WordPress plugin market, founded around 2012, with a consistent and professional online presence. Technically, the site is built on WordPress with WooCommerce for sales, leveraging common plugins such as UberMenu and Slider Revolution, and uses Cloudflare DNS for domain management. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured data.

P

Project Jupyter

jupyter.org

57

Project Jupyter is a leading open-source initiative providing interactive computing tools widely used in data science, education, and research. The platform offers multiple key services including JupyterLab, Jupyter Notebook, JupyterHub, and Voilà, supporting over 40 programming languages. The website reflects a mature, well-established project with a large user base and strong community backing. Technically, the site is built on modern web technologies with responsive design and privacy-conscious analytics. Security posture is strong with HTTPS and domain protections, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Centar dr. R. Steinera

centar-rudolf-steiner.com

36

Centar dr. R. Steinera is a small educational/spiritual center based in Donji Kraljevec, Croatia, focused on Rudolf Steiner's teachings. The website is multilingual and built on WordPress using the Divi theme, indicating a moderate level of digital maturity. The technical infrastructure includes modern elements such as HTTPS, Google reCAPTCHA, and Cloudflare DNS, but lacks advanced security headers and DNSSEC. The security posture is adequate but could be improved by implementing additional security headers and publishing formal security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is present. Overall, the website is functional and moderately professional but would benefit from enhanced compliance and security documentation.

T

Turistička zajednica Međimurske županije

visitmedimurje.com

63

Visit Međimurje is the official regional tourism website for the Međimurje County in Croatia, managed by the Turistička zajednica Međimurske županije. The site promotes the region's natural beauty, cultural heritage, gastronomy, and tourism services, targeting tourists and visitors interested in nature, culture, and culinary experiences. The website is well-structured, professionally designed, and provides comprehensive information and planning tools for visitors. Technically, it is built on Drupal 11, uses modern web technologies, and is hosted with Cloudflare DNS services, ensuring good performance and security. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and GDPR-compliant cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy online presence. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

K

KIWIS & BROWNIES

prombu.com

50

Prombu.com is a German-based SaaS provider specializing in online promotional tools such as Advent calendars and football World Cup prediction games. The company, branded as KIWIS & BROWNIES, targets small to medium businesses, clubs, and private users seeking to engage customers and fans through interactive web applications. The website is professionally designed with clear navigation, responsive layouts, and detailed product descriptions, supporting a positive user experience. Technically, the site uses modern frontend frameworks like Bootstrap and Swiper.js, hosted behind Cloudflare DNS, but lacks advanced CMS or analytics integrations. Security posture is adequate with HTTPS enforced but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is limited to a support email, with no phone or physical address disclosed. Overall, the site is trustworthy and functional but would benefit from enhanced security and privacy features.

F

Fotbolti Ehf.

fotbolti.net

53

Fótbolti.net is a well-established Icelandic football news and media website, operating since 2002. It serves as a primary source of football news, live scores, articles, and multimedia content for football fans in Iceland. The website is professionally designed with consistent branding and offers a variety of football-related services including news, video content, podcasts, and advertising opportunities. The target audience is primarily Icelandic football enthusiasts. Technically, the site uses a mix of modern JavaScript libraries such as jQuery, Facebook SDK, Google Analytics, and Plyr for video playback. The domain is registered with GoDaddy and uses Cloudflare DNS services, indicating a stable and secure hosting environment. Security posture is good with HTTPS enabled and domain status locks, but lacks DNSSEC and security headers. Privacy compliance is limited, with no explicit cookie consent or comprehensive privacy policy found. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

V

Viðskiptablaðið

vb.is

58

Viðskiptablaðið is a well-established Icelandic business news website founded in 1997, providing news and analysis primarily in the Icelandic language. The site targets Icelandic-speaking audiences interested in business, finance, and general news. It operates on a business model combining advertising and subscription services, with a professional and consistent brand presence. Technically, the website uses modern web technologies including Google Analytics, Facebook Pixel, Cloudflare DNS, and Airserve for advertising. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and Cloudflare DNS, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the domain's WHOIS data confirms legitimacy and long-term operation, supporting a high trust level.