Security Directory

The website www.prekmurjevsrcu.si is a small regional cultural site dedicated to the Prekmurje Slovene community, emphasizing cultural unity with the mother nation. The site is modest in content and design, primarily serving informational and community awareness purposes. It does not appear to operate as a commercial business and lacks detailed business information or contact channels. Technically, the site uses common frontend libraries such as jQuery, Bootstrap, Font Awesome, Fancybox, and Owl Carousel, indicating a basic but functional technical infrastructure. The site is mobile responsive and moderately performant but lacks advanced SEO and accessibility features. Security posture is weak due to the absence of HTTPS enforcement information, security headers, and privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance. Overall, the site is safe with no adult or questionable content but requires significant improvements in security, privacy compliance, and business transparency to enhance credibility and user trust.

M

MAMFORCE

incq-all.com

51

INC.Q, operated by MAMFORCE, is a recently established company (founded in 2023) specializing in Diversity, Equity, and Inclusion (DEI) certifications, consulting, and training services. The company positions itself as a leader in DEI initiatives across Europe, offering a range of services including DEI certification, equal pay certification, ESG data reporting, and employer branding. The website reflects a professional and consistent brand image, targeting businesses seeking to improve their DEI practices and employee engagement. The digital infrastructure is built on WordPress with modern marketing and analytics integrations, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some best practices, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is trustworthy and professionally maintained, though the domain is very new, aligning with the company's recent founding.

Valga Sport is a local Estonian sports organization focused on promoting youth and community sports activities, managing sports facilities, and organizing events. The website serves as an information portal for sports opportunities, events, and news relevant to the Valga region. The organization appears to be a small-sized entity with a public or non-profit orientation, supported by local government affiliations. Technically, the website is built on the Greativ CMS platform and uses common web technologies including Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Hosting and domain registration are consistent with a local Estonian provider, Telia Eesti AS. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy for its intended audience but could improve in privacy compliance and security posture to better align with modern standards.

A

ArhivPRO d.o.o.

eindigo.net

56

ArhivPRO d.o.o. is a Croatian technology company specializing in digital archiving and cataloguing solutions, primarily through their INDIGO platform. The platform targets institutions such as libraries, archives, museums, and schools, enabling them to digitize, manage, and publish diverse materials including books, photographs, and multimedia. The company demonstrates a strong market position in the cultural heritage and education sectors, supported by client references and EU project funding. Technically, the website employs modern web technologies and responsive design, providing a professional user experience. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy/cookie policies. The WHOIS data is privacy protected due to GDPR, which is justified given the nature of the business. Overall, the website and business present a trustworthy and professional image with room for improvement in privacy and security transparency.

H

Hrvatske ceste d.o.o.

hrvatske-ceste.hr

63

Hrvatske ceste d.o.o. is a Croatian state-owned company responsible for the management, construction, reconstruction, and maintenance of the national road network. The website reflects its official status with consistent branding and clear presentation of its services and public information. The target audience includes government entities, contractors, drivers, and the general public interested in road infrastructure and related services. The company operates under the ownership of the Republic of Croatia, positioning itself as the authoritative body for state roads.

Z

Zavičajni Muzej Ozalj

zmo.hr

54

Zavičajni Muzej Ozalj is a small cultural heritage museum located in Ozalj, Croatia, dedicated to preserving and showcasing 6000 years of local history through diverse collections including archaeological, ethnographic, and photographic artifacts. The museum also operates an open-air Ethno Park that exhibits traditional architecture and pre-industrial everyday items, targeting general visitors interested in history and culture. The website is professionally designed with good content quality, clear navigation, and accessibility features implemented via the EqualWeb plugin. Technically, it uses a modern but basic tech stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the museum's identity, indicating legitimacy and trustworthiness.

C

Centar za poduzetništvo d.o.o.

czp.hr

43

Centar za poduzetništvo d.o.o. is a regional entrepreneurial support center serving the Dubrovnik-Neretva County in Croatia. The organization focuses on providing a range of services including education, business consulting, credit programs, and assistance with EU funding projects. Their website reflects a government-affiliated entity aimed at fostering entrepreneurship and small business growth in the region. The target audience primarily consists of local entrepreneurs and small business owners seeking support and resources. Technically, the website employs a modern technology stack featuring jQuery, Bootstrap, FontAwesome, and various plugins for enhanced user experience and accessibility. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates Google Analytics and UserWay accessibility tools, indicating a mature digital infrastructure. The website content is well-structured, professionally designed, and includes clear navigation and relevant business information. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security policies and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and a consent mechanism in place. The website demonstrates a good security posture but could improve by adding formal security documentation and security headers. Overall, the website is trustworthy, professional, and serves its business purpose effectively. The domain registration data aligns with the website's claims, reinforcing legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response information, and maintaining regular security audits to sustain trust and compliance.

The website www.peresobralik.ee represents the Estonian non-profit organization Eesti Lasterikaste Perede Liit, which focuses on promoting family-friendly dining establishments through a certification mark. The site targets families with children in Estonia and provides information about the certification, news updates, and regional member organizations. The business model is non-profit and community-oriented, aiming to enhance societal recognition and support for families with children. Technically, the website is built on WordPress and utilizes common web technologies such as jQuery, Owl Carousel, Font Awesome, and Google Fonts. The site is moderately performant, mobile-optimized, and has a clear navigation structure. However, it lacks advanced SEO and accessibility features. The hosting provider is not explicitly identified from the content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. The site does not use analytics or tracking services, indicating minimal user tracking. Overall, the website is legitimate, safe, and professionally presented but has room for improvement in privacy compliance and security best practices. The WHOIS data aligns well with the website's claims, supporting its trustworthiness.

V

Valga Muusikakool

valgamuusikakool.ee

43

Valga Muusikakool is a well-established music school based in Valga, Estonia, with a history spanning approximately 100 years. The institution provides structured music education programs, organizes academic concerts, and participates in projects aimed at enhancing inclusive education and modernizing public services. The website serves as an information hub for students, parents, and the local community, offering event calendars, news updates, and application submission forms. The business model focuses on education and cultural enrichment within the local region, positioning the school as a key regional player in music education. Technically, the website is built on the Greativ CMS platform and incorporates modern web technologies such as Google Analytics, Facebook SDK, and Owl Carousel for interactive content. The site is mobile-optimized with good navigation and content quality, although some SEO and accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS and includes some best practices like secure form handling and analytics integration. However, it lacks explicit security headers, a cookie consent mechanism, and published security or incident response policies. No vulnerabilities or exposed sensitive data were found, indicating a generally sound security posture but with room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and serves its educational purpose effectively. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and considering a vulnerability disclosure program to strengthen trust and compliance.

Ž

ŽUPANIJSKA UPRAVA ZA CESTE LIČKO-SENJSKE ŽUPANIJE

zuc-ls.hr

45

ŽUPANIJSKA UPRAVA ZA CESTE LIČKO-SENJSKE ŽUPANIJE is a Croatian regional government agency responsible for the management and maintenance of roads within Ličko-Senjska County. The website serves as an official communication channel providing public notices, procurement information, road maps, and contact details to residents, contractors, and stakeholders. The agency positions itself as a trusted authority in transportation infrastructure within the region. Technically, the website is built on WordPress with Elementor and several plugins, offering a modern, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS and security headers, though it lacks published security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves its public function effectively.

Z

Zavod za prostorno uređenje Ličko-senjske županije

zzpulsz.hr

47

Zavod za prostorno uređenje Ličko-senjske županije is a Croatian government agency established in 2008, responsible for coordinating, monitoring, and implementing spatial planning within the Ličko-senjska county. The website serves as an official portal providing information about spatial plans, reports, and institutional activities targeting local residents, government officials, and urban planning professionals. The business model is focused on public sector service delivery with a clear mandate and regional authority. Technically, the website employs a modern but straightforward technology stack including jQuery, Modernizr, and Owl Carousel, hosted on a CMS platform developed by VIT. The site is mobile-optimized, accessible with multiple user-friendly features such as font resizing and contrast modes, and implements cookie consent mechanisms. SEO and metadata are well handled, though no structured JSON-LD data was found. From a security perspective, the site uses HTTPS with a good SSL configuration and basic security best practices like form validation and cookie consent. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and serves its government function well. The main risks relate to missing privacy and security policy documentation and absence of explicit incident response information. Addressing these gaps would improve compliance and user trust.

L

Lika ceste d.o.o.

likaceste.hr

45

Lika ceste d.o.o. is a Croatian company specializing in the maintenance, protection, reconstruction, and construction of roads and related infrastructure, primarily serving the Gospić region. The company positions itself as a regional service provider focused on public roadways, offering key services such as road maintenance and winter services. The website reflects a medium-sized enterprise with a clear focus on transportation infrastructure, targeting local government entities and public road users. Technically, the website is built on WordPress using Bootstrap for responsive design, enhanced with several JavaScript libraries including jQuery, Owl Carousel, and Google Maps API. SEO is supported by the Yoast SEO plugin, and user interaction is facilitated through Contact Form 7 with Google reCAPTCHA v3 for spam protection. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. Overall, the website is professional and trustworthy with moderate tracking and analytics usage. It is safe for general audiences and does not contain adult or questionable content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers, incident response policies, and accessibility would enhance the site's security posture and compliance.

V

Valvoline

valvoline.ee

51

Valvoline.ee is the Estonian localized website for Valvoline, a globally recognized lubricant and automotive chemical brand with a history dating back to 1866. The website presents product offerings primarily focused on lubricants, coolants, and maintenance chemicals targeting automotive, industrial, and motorsports sectors. The site demonstrates a moderate level of digital maturity with use of common JavaScript libraries and Google Analytics for tracking. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The website is accessible without WAF or blocking mechanisms, indicating no access restrictions. Overall, the site is professionally designed with good content relevance but could improve in privacy compliance and security posture.

M

Međimurska energetska agencija d.o.o. MENEA

menea.hr

46

Međimurska energetska agencija d.o.o. MENEA is a Croatian regional energy agency established in 2008, focusing on energy consulting, project management, energy planning, and systematic energy management. The agency serves municipalities, businesses, and stakeholders in the energy sector, leveraging EU funding and regional initiatives to promote sustainable energy solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and accessibility. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and aligned with the business's mission and market position.

T

Tehnološko-inovacijski centar Međimurje d.o.o.

ticm.hr

10

Tehnološko-inovacijski centar Međimurje (TICM) is a well-established regional technology and innovation center based in Croatia, founded in 2012. It supports technology-based entrepreneurship through incubation, coworking, educational courses, and business advisory services. The website reflects a professional and consistent brand with a clear focus on regional development and innovation. The technical infrastructure is modern, leveraging WordPress CMS with Bootstrap and various JavaScript libraries, and integrates Google Analytics and reCAPTCHA for analytics and security. Security posture is good with HTTPS enforced and some best practices observed, though there is room for improvement in security headers and formal security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and serves its target audience effectively.

Česká společnost pro aterosklerózu is a well-established professional society in the Czech Republic focused on atherosclerosis and lipidology. Founded in 2000, it serves healthcare professionals and researchers by providing expert recommendations, organizing congresses and webinars, publishing a specialized journal (AtheroReview), and supporting research projects. The organization maintains strong partnerships with both domestic and international medical societies and pharmaceutical companies, reinforcing its market position as a trusted authority in cardiovascular prevention and lipid disorders. Technically, the website is built on WordPress with a standard set of libraries including jQuery, Bootstrap, and Owl Carousel. It is hosted by Active24, a reputable Czech hosting provider. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Google Analytics and Tag Manager are used for visitor tracking, indicating moderate digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited as no privacy or cookie policies were found, representing a compliance gap under GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

M

McCoy Mart

mccoymart.com

60

McCoy Mart operates as India's largest online marketplace for building and construction materials, targeting construction professionals such as builders, contractors, architects, and interior designers. The platform offers a wide range of products sourced from over 300 brands, project lead services, and credit financing options, positioning itself as a comprehensive solution for the construction industry in India. The website is professionally designed with good content relevance and clear navigation, optimized for mobile users. Technically, it leverages modern web technologies including Laravel backend, jQuery, Bootstrap, and integrates marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Visual Website Optimizer. Security posture is moderate with HTTPS enabled and CSRF protection, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the site is functional and credible but would benefit from improved privacy compliance and enhanced security measures.

I

IN LEASE

inlease.cz

41

IN LEASE is a Czech Republic based company specializing in operativní leasing, vehicle leasing, and fleet management services. The website presents a professional and well-structured digital presence targeting businesses and individual customers seeking leasing solutions. The company has been operating since 2015, with domain registration data consistent with its business claims. The technical infrastructure is built on WordPress CMS with modern tracking and analytics tools such as Google Tag Manager, Piwik PRO, and Microsoft Clarity, indicating a mature digital marketing approach. Security measures include HTTPS enforcement and use of Google reCAPTCHA, but lack explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is functional, secure, and credible but could improve transparency and compliance documentation.

H

Hemmy.se

hemmy.se

58

Hemmy.se is a Swedish e-commerce retailer specializing in household appliances, garden machinery, grills, and outdoor furniture, offering fast home delivery at competitive prices. Established in 2017, the company targets Swedish consumers seeking affordable and convenient shopping for home and garden products. The website presents a professional design with clear navigation and regularly updated promotional content. Technically, the site employs modern web technologies including jQuery, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and Voyado Analytics. Hosting and DNS services are provided via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism in place, although some security headers and explicit security policies are not publicly visible. Privacy compliance is supported by a detailed privacy policy linked through Cookiebot, indicating GDPR adherence. No contact information or terms of service were found on the homepage, which could be improved to enhance business credibility. Overall, the site is functional, secure, and compliant with privacy regulations, serving a medium-sized retail business in Sweden.

G

GDPR CENTRUM

gdprcentrum.cz

58

GDPR CENTRUM is a Czech-based small business collective of IT and legal professionals specializing in GDPR certification, implementation, consultancy, and software development. The company targets small businesses, sole proprietors, and online merchants, offering affordable and free GDPR compliance tools including a documentation generator. The website is professionally designed with clear navigation and comprehensive content in Czech, reflecting a strong focus on GDPR education and practical compliance support. Technically, the site uses a modern but somewhat dated tech stack including Bootstrap and jQuery 1.12.4, with good mobile optimization but lacking some modern security headers and explicit privacy/cookie policies. Security posture is moderate with HTTPS usage but missing advanced security configurations and incident response details. WHOIS data is unavailable, which reduces domain trustworthiness, but the detailed content and contact information support legitimacy. Overall, the site provides valuable GDPR compliance resources with room for improvement in privacy transparency and security best practices.

R

RJFM

rjfm.net

56

RJFM is a well-established local radio station based in Montluçon, France, providing regional news, music hits, and podcasts primarily targeting local residents. The website reflects a professional media outlet with a consistent brand presence and a focus on delivering local content digitally. The business operates a multi-channel digital presence including streaming, podcasts, and mobile applications, positioning itself as a key local media player in the Allier region. Technically, the website uses modern web technologies and CDNs to deliver content efficiently, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS, domain locking, and reCAPTCHA integration, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic but includes cookie consent and a privacy policy in French. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

S

SmartAddons.Com

smartaddons.com

45

SmartAddons.Com is a well-established provider of Joomla templates, extensions, and themes for multiple CMS platforms including Joomla, OpenCart, Shopify, and WordPress. The company targets web developers and site owners seeking premium and free templates with a business model based on membership clubs and direct sales. Their market position is supported by over 10 years of experience and a large member base. Technically, the website is built on Joomla CMS with integration of popular libraries such as MooTools, jQuery, Bootstrap, and Font Awesome, and uses modern tools like Google Tag Manager and reCAPTCHA Enterprise. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data is a notable concern, impacting domain legitimacy verification. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

F

Foire de Nice

foiredenice.com

58

Foire de Nice is a well-established event organizer hosting the International Fair of Nice, featuring over 350 brands and 300 exhibitors in a large venue in Nice, France. The website is professionally designed using WordPress with a focus on user experience and clear navigation. It provides detailed information about the event's universes and services, targeting a broad audience interested in lifestyle, home, and automotive products. The technical infrastructure leverages common WordPress plugins and libraries, including cookie consent management and advertising tools. Security posture is adequate with HTTPS and consent mechanisms, but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness. Overall, the website is functional, compliant with privacy regulations, and trustworthy from a content perspective, but domain legitimacy should be further verified.

L

Light Touch Studio

light-touch.fr

53

Light Touch Studio is a small creative agency based in Guadeloupe, France, specializing in graphic design, web development, and content strategy. With 15 years of experience, the company emphasizes collaborative and tailored communication solutions for brands seeking to enhance their visibility and identity. The website is professionally designed using WordPress and Elementor, showcasing a portfolio of client projects and clear contact options including a GDPR-compliant contact form. The technical infrastructure is modern and hosted by OVH, a reputable provider. Security posture is good with HTTPS and cookie consent implemented, though some security headers and policies could be improved. Overall, the website reflects a trustworthy and credible business with a focus on quality creative services.

C

clubsAREculture

clubsareculture.de

40

clubsAREculture is a German-based cultural advocacy platform dedicated to supporting music clubs as vital cultural spaces. The website provides news, studies, newsletters, and event information related to club culture and live music, targeting cultural activists, policymakers, and the general public interested in the preservation and promotion of club culture. The platform operates as a small non-profit entity within the media sector, focusing on advocacy and information dissemination. Technically, the website is built on WordPress 6.8.3, utilizing a modern tech stack including jQuery, Modern Events Calendar Lite, and the Ashe theme. The hosting appears to be managed by Your-Server.de, with a moderate performance profile and good mobile optimization. SEO and accessibility are basic to good, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and updated software versions but lacks explicit security headers and a vulnerability disclosure policy. No cookie consent mechanism was detected, which is a compliance gap given GDPR relevance. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Social media presence is active across major platforms. Overall, the website is functional, professional, and trustworthy within its niche but would benefit from enhanced security practices, privacy compliance improvements, and more transparent contact information to strengthen user trust and regulatory adherence.

S

Sveučilišni računski centar (Srce)

srce.hr

54

Sveučilišni računski centar (Srce) is a central academic infrastructure institution affiliated with the University of Zagreb, providing comprehensive computing, networking, identity management, data repository, and digital education services to the Croatian academic and research community. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content tailored to its target audience of students, researchers, and academic institutions. Technically, the site is built on Drupal 9 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, cookie consent, and anti-bot measures, though explicit security headers could be enhanced. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, despite the WHOIS data being privacy protected, which is justified for this type of institution.

JSB realitní is a small Czech Republic-based real estate company specializing in brokerage services for residential and commercial properties, including sales, rentals, and problematic property solutions such as debt and foreclosure management. The company also operates a related construction business for property renovations. The website is professionally designed with clear navigation and relevant content targeting local clients in Prague and surrounding areas. However, the absence of WHOIS data and security policies reduces trustworthiness. Technically, the site uses common web technologies like jQuery and Bootstrap but lacks visible HTTPS and security headers, which are critical for secure operations. No privacy or cookie policies are present, indicating compliance gaps. Overall, the business appears legitimate but would benefit from improved security and compliance measures.

L

Ličko-senjska županija

licko-senjska.hr

52

Ličko-senjska županija is the official regional government entity for the Ličko-senjska County in Croatia. The website serves as the primary digital platform for disseminating public administration information, news, official documents, tenders, and transparency reports. It targets residents, businesses, and stakeholders within the county, providing comprehensive access to government services and updates. The site reflects a medium-sized government organization with a focus on regional development, public services, and community engagement. Technically, the website employs a modern tech stack including jQuery, Modernizr, Owl Carousel, and Google Fonts, built on a CMS platform by VIT. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security is robust with HTTPS enforced and a Content-Security-Policy header, although some additional security headers could enhance protection. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. The security posture is strong, with no detected vulnerabilities or exposed sensitive data. The site lacks a security.txt file and explicit incident response contacts, which are recommended for improved security transparency. The domain registration is consistent with the official government entity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively.

A

ALSENTA s.r.o.

seeky.cz

36

Seeky.cz is a Czech-based B2B service operated by ALSENTA s.r.o. that specializes in identifying and converting website visitors into potential customers. The company targets businesses seeking to enhance their lead generation and sales conversion through visitor monitoring, targeted offers, and direct customer engagement. The website demonstrates a professional presence with a clear value proposition, client testimonials, and a multi-country reach across 40 countries with over 2000 users. Technically, the site employs modern web technologies including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics and Matomo, alongside live chat support for customer engagement. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall professional presentation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and regulatory adherence.

H

Hrvatski košarkaški savez

hks-cbf.hr

45

The Hrvatski košarkaški savez (Croatian Basketball Federation) operates as the national governing body for basketball in Croatia, providing official news, league information, team rosters, and historical data related to Croatian basketball. The website serves basketball fans, players, clubs, and the broader sports community in Croatia. It maintains a strong digital presence with official social media channels and regularly updated content. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, and various UI libraries such as Owl Carousel and Font Awesome. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google Analytics for tracking. However, it lacks several important security headers like Content-Security-Policy and X-Frame-Options, which could be improved to enhance security posture. No WAF or blocking mechanisms were detected, and no exposed sensitive data was found. Overall, the website is legitimate and professional, though WHOIS data is unavailable due to GDPR privacy protections. The absence of a cookie consent mechanism may represent a compliance gap. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, and maintaining regular updates to WordPress and plugins to mitigate vulnerabilities.

ALSENTA s.r.o. is a Czech Republic based technology company founded in 2008, specializing in providing digital tools and services to enhance business efficiency. Their offerings include B2B identification tools (Seeky.cz), supplier engagement and reverse auction platforms (Alsenta.com), comprehensive business data services (LightData.cz), and outsourcing of procurement activities. The company also manages several related projects such as B2Bpoptavka.CZ and iFirmy.cz, positioning itself as a multifaceted service provider in the B2B and business intelligence space. The website is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence.

B

British Medical Ultrasound Society

bmus.org

59

The British Medical Ultrasound Society (BMUS) is a UK-based non-profit professional organization dedicated to promoting ultrasound technology and education among healthcare professionals. The society serves a multidisciplinary audience including medical practitioners, sonographers, physicists, and students. BMUS offers membership benefits, organizes scientific meetings and study days, publishes professional journals, and provides clinical guidance and educational resources. The website reflects a well-established entity with a clear focus on healthcare ultrasound advancement and professional development. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Typekit fonts, delivering a responsive and user-friendly experience. The site is moderately optimized for performance and accessibility, with clear navigation and professional design. However, some improvements could be made in accessibility and explicit CMS identification. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no explicit security headers were detected, and there is no published security or incident response policy. Privacy compliance is partially addressed with a privacy policy present, but cookie consent mechanisms are absent. No WHOIS registrant data is available, likely due to privacy protection, but the site’s legitimacy is supported by charity registration and professional content. Overall, BMUS presents a credible and professional online presence with moderate technical maturity and a solid business foundation. Security and privacy practices could be enhanced to align with best practices and regulatory requirements.

U

Urząd Miasta Zielona Góra

zielonagora.pl

60

The website www.zielona-gora.pl is the official online portal for the City Office of Zielona Góra, Poland. It serves as a government information hub providing residents, visitors, and businesses with access to city authorities, departments, local districts, public services, cultural events, and tourism information. The site is positioned as a trusted municipal government resource with clear branding and official social media presence. The business model is public service oriented, focusing on transparency and accessibility for the local community. Technically, the website is built on WordPress using the Avada theme, incorporating common plugins such as Contact Form 7, Cookie Notice, and WP Accessibility Helper. The site demonstrates moderate performance and good mobile optimization, with accessibility features implemented to support diverse users. SEO is basic but functional, and the site uses HTTPS with a valid SSL certificate ensuring secure communications. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks advanced security headers and a dedicated security policy page. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic with a privacy policy present and GDPR considerations addressed. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is a safe, legitimate government portal with a solid foundation but could benefit from enhanced security policies and technical hardening. The risk level is low, with recommendations focusing on improving security headers, incident response transparency, and privacy documentation to strengthen compliance and user trust.

S

Domov | Sparklond

sparklond.sk

42

Sparklond.sk is a Slovak-based educational website specializing in professional welding training and certification. The business offers a variety of welding courses, including beginner to expert levels, with a focus on practical skills and coaching. The website features testimonials and video references to build trust and demonstrate effectiveness. The domain is relatively new, created in 2022, and uses DNSSEC with a valid registrar and hosting provider, indicating legitimacy. Technically, the site uses modern front-end libraries such as Bootstrap, Owl Carousel, and integrates third-party services like Google Tag Manager and Smartsupp Live Chat. Security measures include HTTPS and a Content-Security-Policy header, though the CSP is permissive and could be hardened. Privacy compliance is weak, with no visible privacy or cookie policies, which is a notable gap. Overall, the website is professionally designed, mobile-optimized, and provides clear contact information, but should improve privacy disclosures and tighten security headers.

T

TESTIMA, spol. s r.o.

testima.cz

44

Testima, spol. s r.o. is a Czech company specializing in nondestructive testing equipment and services, including sales, training, calibration, and servicing. With over 30 years of experience and ISO 9001 certification, it holds a stable market position serving industrial clients. The website is professionally designed, mobile-optimized, and provides clear contact and GDPR compliance information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA to secure user interactions. Security posture is good with HTTPS and CSRF protections, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant, and well-maintained.

G

Growio

growio.sk

52

Growio is a professional services company specializing in leadership development, business coaching, and organizational growth programs. Founded in 2021 and headquartered in Slovakia with an Asia-Pacific office in India, Growio targets leaders and organizations seeking to navigate disruption and build resilient, high-performing teams. The company emphasizes future-ready workforce development and offers tailored executive coaching and development programs. Their market position is supported by partnerships with recognized companies and membership in the International Coaching Federation (ICF). Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Websupport infrastructure with DNSSEC enabled. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, though terms of service and explicit security policies are absent. Security posture is solid with HTTPS enforced and DNSSEC enabled, but could be improved by adding security headers and publishing incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business goals. Strategically, Growio should enhance its security transparency and compliance documentation to strengthen trust and meet evolving regulatory requirements. Continued monitoring of third-party libraries and performance optimization will support sustained digital maturity.

T

Travego Tour

travegotour.sk

43

Travego Tour is a Slovak-based travel company specializing in guided sightseeing tours primarily to Asia, Eastern Europe, and the Middle East. The company emphasizes a slow travel philosophy, offering authentic cultural experiences and group tours. The website reflects a niche market positioning with a focus on experiential travel, supported by clear contact information and comprehensive legal documentation. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and tracking pixels, hosted likely by WebHouse with DNSSEC enabled, indicating good infrastructure maturity. Security posture is solid with HTTPS and DNSSEC, though some advanced HTTP security headers and a security.txt file are missing. Privacy compliance is well addressed with GDPR and cookie policies including consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, with no signs of malicious activity or content safety concerns.

I

Izzy Trading, s.r.o.

sprava-servisov.sk

41

FOXii is a Slovak-based software company specializing in cloud-based service management solutions tailored for field service companies. Their platform enables digitalization of service processes including scheduling, protocol creation, and technician monitoring, targeting small to medium-sized service firms. The website reflects a professional and consistent brand presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS and DNSSEC enabled, use of Google reCAPTCHA, and a cookie consent mechanism, though it lacks explicit security headers and a published security policy. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

The website www.barlifeevents.cz operates as an online magazine primarily targeting Slovak-speaking audiences with content focused on household topics, energy, gardening, investment, and related services. The site uses WordPress CMS with a standard set of plugins and themes, providing a moderate level of technical sophistication and a generally good user experience. SEO metadata and structured data are implemented, enhancing search engine visibility. However, the absence of contact information, privacy policies, and cookie consent mechanisms indicates gaps in compliance and user trust facilitation. The WHOIS data for the domain is unavailable, which raises concerns about the domain's registration legitimacy and reduces overall trustworthiness. Security posture is basic, with no advanced security headers detected, though HTTPS is implied by canonical URLs. Overall, the site is functional and content-rich but requires improvements in privacy compliance, security best practices, and transparency to enhance credibility and user trust.

E

EDTNA/ERCA

edtnaerca.org

51

EDTNA/ERCA is a well-established European non-profit association focused on renal care professionals, primarily nurses. The organization provides education, accreditation, conferences, publications, and fosters collaboration across the renal care community. Their website reflects a mature digital presence with comprehensive content targeting healthcare professionals in nephrology. Technically, the site employs modern web technologies including Material Design Lite, Google reCAPTCHA, and tracking via Google Tag Manager and Facebook Pixel, indicating a balanced approach to user experience and analytics. Security posture is strong with HTTPS, CSRF protection, and bot mitigation, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves its audience effectively.

S

STYRAX Consulting, a.s.

styraxconsulting.cz

47

STYRAX Consulting, a.s. is a Czech-based consulting and IT company specializing in healthcare sector solutions, including AI implementations, virtual assistants, data analysis, and healthcare management tools. The company has a strong market position in the Czech healthcare IT niche, offering a range of products and services tailored to healthcare providers and insurers. Their website reflects a professional and consistent brand image with clear descriptions of their offerings and active participation in industry conferences. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and secure form handling, but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain WHOIS data supports the legitimacy and maturity of the business. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

M

MFP paper s.r.o.

mfp.cz

57

MFP paper s.r.o. is a Czech Republic-based wholesale distributor and publisher specializing in paper goods, school, and office supplies. Established since 1997, the company operates a warehouse in Přerov and offers a wide range of products with a focus on quality and competitive pricing. Their website targets business customers, particularly those with Czech business identification numbers (IČO), offering B2B wholesale services. The site features product catalogs, customer testimonials, and a blog to engage its audience. Technically, the website employs a mix of legacy and modern JavaScript libraries including jQuery, Dojo, and i18next for localization. It integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and retargeting services. The site is mobile-optimized with responsive design elements and uses HTTPS for secure communication. However, some libraries are outdated, and security headers are not explicitly set, indicating room for improvement. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the detailed contact information and business presence. Overall, MFP paper s.r.o. presents a professional and trustworthy online presence suitable for its wholesale business model. Strategic improvements in security headers, updating libraries, and publishing explicit security policies would enhance its security posture and compliance standing.

A

Aktyvių piliečių fondas

apf.lt

39

Aktyvių piliečių fondas (APF) is a Lithuanian non-profit organization focused on strengthening civil society by providing funding and support to civil society organizations and projects. Supported by the EEA and Norway Grants, APF operates as a grant fund with a clear mission to empower vulnerable groups and promote active citizenship in Lithuania. The website is professionally designed using WordPress, featuring multilingual support and comprehensive content about funding opportunities, project results, and training events. The technical infrastructure includes modern web technologies and analytics tools, ensuring good performance and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, APF presents a trustworthy and credible online presence aligned with its non-profit mission.

X

xpecto AG

xpecto.de

71

xpecto AG is a German software company specializing in digital solutions for managing real assets and financial products such as bonds, subordinated loans, ELTIFs, AIFs, tokenized securities, and derivatives. Established since 1982, the company positions itself as a leading provider in the niche market of real asset management software, serving over 150 client companies with 40 years of market experience. Their offerings include modules for investor and sales management, controlling, reporting, risk management, asset and portfolio management, and digital portals for investors and sales partners. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence.

EFNNMA is a European non-profit forum dedicated to nursing and midwifery associations, collaborating closely with WHO Europe to support healthcare workers and promote sector progress. The website serves as an information hub featuring news, webinars, and policy messages targeted at healthcare professionals and stakeholders. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, hosted via Register SpA. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and no explicit privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

B

BTL zdravotnická technika, a.s.

btl-shop.cz

49

BTL zdravotnická technika, a.s. operates an e-commerce platform (BTL-shop.cz) specializing in rehabilitation, physiotherapy, and medical consumables and equipment. The website targets healthcare professionals and wellness providers primarily in the Czech Republic. It offers branded products, a loyalty program, and expert advice, positioning itself as a specialized supplier in the healthcare sector. The site is built on Magento CMS and uses modern web technologies including jQuery and RequireJS, with social login integrations for user convenience. The website is well-structured, mobile-optimized, and provides clear navigation and professional content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, no explicit security policies or incident response contacts are published, and WHOIS data is unavailable, which limits transparency. Overall, the site presents a professional and trustworthy online presence for its niche market.

B

BiObernai by Alsace Bio

biobernai.com

60

BiObernai by Alsace Bio operates a professional and content-rich website dedicated to promoting organic agriculture events and community engagement in the Alsace region of France. The site serves as an information portal for the annual BiObernai organic agriculture fair, the BiObernai Bier organic beer, and the Association SABA volunteer organization. The business targets consumers and stakeholders interested in sustainable and organic farming practices, positioning itself as a regional leader in this niche. The website demonstrates good branding consistency and content quality, with clear navigation and multimedia integration such as videos and social media links. Technically, the website employs a modern but somewhat dated technology stack including jQuery 1.12, Bootstrap, Owl Carousel, and cookie consent management via tarteaucitron.js. It integrates Google Analytics and Facebook SDK for analytics and social media functionality. The site is mobile optimized with good SEO practices but lacks explicit CMS identification and detailed hosting information. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and has implemented cookie consent and reCAPTCHA on forms, indicating awareness of privacy and security best practices. However, no explicit security headers were detected, and no published security or incident response policies are available. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and structure appear professional and trustworthy. Overall, the website presents a low-risk profile with good privacy compliance and user experience but would benefit from enhanced security measures and clearer domain registration transparency. Strategic recommendations include improving security headers, verifying domain registration status, and publishing security policies to strengthen trust and compliance.

F

Foires de France

foiresdefrance.com

51

Foires de France operates as a collective brand under Unimev, promoting and organizing a network of fairs and exhibitions across France. The website provides detailed information about upcoming fairs, socio-economic impact reports, and links to partner event sites. The business targets the general public interested in regional and national fairs, positioning itself as an important player in the French exhibition sector. Technically, the site is built on WordPress with common plugins and libraries, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to improve trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

I

Interreg Caraïbes

interreg-caraibes.com

61

Interreg Caraïbes is a European Territorial Cooperation program focused on fostering regional cooperation projects among Caribbean territories including Guadeloupe, Guyane, Martinique, and Saint-Martin. The website serves as an information portal for approved projects, calls for tenders, news, and practical information related to the program. It targets operators and organizations involved in regional development and cooperation in the Caribbean region. The program is government-backed and funded by the European Union, positioning it as a key regional cooperation initiative.

G

Guadeloupe Énergie

guadeloupe-energie.gp

57

Guadeloupe Énergie operates as the official regional energy policy platform for Guadeloupe, focusing on the energy transition towards renewable sources and energy independence. The website serves as a comprehensive resource for legislation, renewable energy data, and public initiatives aligned with the regional Multi-Year Energy Program (PPE). The target audience includes residents, policymakers, and energy stakeholders in the Caribbean region. Technically, the site is built on WordPress with modern plugins and analytics integrations, offering good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and incident response information. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.