Security Directory

H

Hrvatske vode

voda.hr

54

Hrvatske vode is the official Croatian government agency responsible for managing water resources, flood protection, and related environmental projects. The website serves as a comprehensive portal providing information, public notices, project details, and access to e-services primarily targeting Croatian citizens, government bodies, and professionals in water management. The agency is well-established with a domain registered since 2011 and operates transparently with clear contact information and public tenders. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates Google Analytics with privacy-conscious configurations. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

Castelli-Cycling

castelli-cycling.com

71

Castelli-Cycling is a premium cycling apparel brand offering high-performance and custom cycling clothing targeted at cycling enthusiasts and athletes globally. The website is professionally designed with a clear focus on e-commerce retail, providing a broad range of products and custom options. The company maintains a consistent brand presence with multilingual support and strong social media integration. Technically, the site uses modern web technologies including Google Analytics, HubSpot forms, Cookiebot for consent management, and Matomo analytics, hosted on a CMS platform named Kleecks. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced, use of reCAPTCHA Enterprise, and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS domain registration data is a notable concern for domain transparency and trustworthiness. Overall, the site is reliable and professional but would benefit from enhanced domain registration transparency and explicit security policies.

H

Hiansa

hiansa.com

56

Hiansa is a Spanish manufacturing company specializing in the production and distribution of steel sandwich panels and profiled sheets, serving industrial, commercial, and architectural sectors. With over 40 years of experience, it holds a strong market position supported by technical expertise and a broad product catalog. The company is part of GRUPO HIEMESA and a member of the Asociación de Fabricantes Españoles de Paneles Sándwich, reinforcing its industry credibility. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Smartlook. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business presence and content quality indicate a legitimate and professional operation.

T

Telewizja Puls Sp. z o.o.

puls2.pl

62

Puls 2 is a Polish television channel operated by Telewizja Puls Sp. z o.o., offering a broad range of entertainment including series, films, and cultural programming targeted at a general Polish audience. The website reflects a mature digital presence with modern web technologies such as React and Next.js, providing a responsive and user-friendly experience. The site integrates social media channels extensively, enhancing audience engagement and brand visibility. From a security perspective, the site employs HTTPS and DNSSEC, indicating a good baseline security posture, though explicit security policies and incident response contacts are not publicly available. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. Overall, the site is professional, trustworthy, and well-maintained, supporting the brand's market position as a reputable media outlet in Poland.

T

twik

twik.io

51

Twik is a technology SaaS company specializing in AI-driven web journey management and analytics optimization for e-commerce businesses and digital marketers. Their platform offers autonomous AI optimization, private and cookieless analytics, marketing attribution, and personalized product catalogs to increase conversions and ROI. The website is professionally designed with strong branding, client testimonials, and clear calls to action such as free trials and demos. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Quora Pixel. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers and explicit policies are missing. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, likely due to privacy protection, which is common for SaaS companies. Overall, the site is trustworthy, professional, and well-optimized for its target audience.

Z

Zweckverband Personennahverkehr Saarland (ZPS)

zps-online.de

10

Zweckverband Personennahverkehr Saarland (ZPS) operates as a regional public transportation authority in Saarland, Germany, focusing on coordinating and planning local passenger transport services including rail and bus networks. The website serves residents and commuters in the region, providing information on transport tasks, schedules, and news. The organization positions itself as a key regional player in public transport management with a medium-sized operational scale. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, indicating a modern and maintainable infrastructure. It employs Matomo analytics for privacy-conscious user tracking and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, explicit security headers are not clearly detected, and no public security or incident response policies are found. No vulnerabilities or suspicious content are evident, and the site maintains a good security posture overall. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its public sector transportation role effectively. Strategic improvements in security headers and incident response transparency could further enhance its security maturity and stakeholder trust.

N

NBtech

nbtech.fr

46

NBtech is a French industrial engineering and technical consulting company founded in 2014, specializing in automotive, aeronautics, railway, and industrial maintenance sectors. The company provides pragmatic and comprehensive solutions including mechanical and electronic testing, incident analysis, and industrial methods consulting. Their client portfolio includes major industry players such as Bosch, Thales, Airbus, Renault, Stellantis, and SNCF, indicating a strong market position. The website is professionally designed, well-structured, and includes detailed information about services, partners, and company values. Technically, the site is built on WordPress with Elementor, uses modern libraries and frameworks, and is hosted by PLANETHOSTER. It implements GDPR-compliant cookie consent and privacy policies, and integrates Google Analytics and Tag Manager for analytics. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence with good privacy compliance and trustworthy business information.

H

Homeogarden d.o.o.

homeogarden.com

42

Homeogarden d.o.o. operates a regional e-commerce platform specializing in natural gardening solutions, targeting customers primarily in Slovenia, Croatia, Germany, and Austria. The company has established a consistent brand presence with localized websites and a decade-long domain history, indicating stable market positioning within the retail gardening sector. Their business model focuses on direct online sales of gardening products emphasizing natural and sustainable solutions. Technically, the website is built on WordPress with WooCommerce, leveraging popular marketing and analytics tools such as Google Tag Manager and Microsoft Clarity, reflecting a moderate level of digital maturity and marketing sophistication. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and security headers represents areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy measures.

N

Niedax Group

niedax-group.com

56

Niedax Group is a well-established German company specializing in cable management systems with over 100 years of experience. It operates globally with numerous subsidiaries and partners, serving industries such as energy, infrastructure, and manufacturing. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS with modern frontend technologies. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be enhanced. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the company's extensive footprint and professional presentation.

A

Abelium d.o.o.

abelium.com

58

Abelium d.o.o. is a Slovenia-based technology company founded in 2015, specializing in tailored technology solutions including blockchain, AI, digital transformation, and platform business models. The company targets businesses seeking advanced technology and digital transformation services, positioning itself as an innovative and interdisciplinary expert in the technology sector. The website demonstrates a high level of digital maturity with modern JavaScript libraries, responsive design, and good SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security transparency and technical hardening.

W

WNL

wnl.tv

62

WNL is a Dutch media broadcaster specializing in news, political commentary, and societal programming. The website serves as a digital platform for delivering news articles, video content, and podcasts to a Dutch-speaking audience. It also promotes membership support to sustain its operations. The site is well-integrated with the Dutch Public Broadcasting (NPO) infrastructure, indicating a reputable and established presence in the media sector. Technically, the website employs modern frameworks such as Laravel with Livewire, Alpine.js, and Swiper.js for a responsive and interactive user experience. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and CSRF protections in place, although some security headers could be explicitly confirmed and DNSSEC is not enabled. Privacy compliance is partial; while a cookie consent mechanism is present, no explicit privacy policy or terms of service were found in the provided content. Business credibility is high given the consistent WHOIS data, official social media presence, and professional content. Overall, the website is a trustworthy and professional media outlet with room for improvement in privacy and security policy transparency.

P

PowNed

powned.tv

61

PowNed is a Dutch media organization focused on delivering news, investigative journalism, and video content primarily for a general audience in the Netherlands. The website serves as a platform for their latest news, programs, and membership engagement. It is affiliated with public broadcasting entities, enhancing its credibility and market position. Technically, the site uses modern web technologies including Vue.js and Tailwind CSS, with integrations for analytics and video streaming. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness but does not detract from the site's operational legitimacy. Overall, PowNed's website is a well-maintained media platform with moderate technical sophistication and a good security baseline.

S

Slovenski regionalno razvojni sklad

srrs.si

38

Slovenski regionalno razvojni sklad (SRRS) is a Slovenian public financial institution established in 2020, focused on providing favorable financing and subsidies to support regional development, agriculture, entrepreneurship, local infrastructure, and non-profit organizations across Slovenia. The institution operates multiple financial product programs tailored to different sectors and prioritizes sustainability, green transition, and social responsibility. The website reflects a professional and comprehensive digital presence with clear communication channels and extensive program information. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, reCAPTCHA, and accessibility features, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and reCAPTCHA protection on forms, though explicit security headers could be more visible. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie consent mechanisms. Overall, SRRS presents a trustworthy and authoritative online presence aligned with its government-backed mission.

S

swissporTON

swissporton.ro

54

swissporTON is a Romanian-based manufacturer and retailer specializing in high-quality ceramic roof tiles and related roofing products. The company emphasizes Swiss quality standards, offering over 200 product variants with a 50-year warranty, targeting investors, roof installers, architects, and distributors. The website presents a professional and consistent brand image with extensive product information and support resources. Technically, the site uses modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and terms of service pages, which are areas for improvement. Security posture is good with HTTPS enforced, though security headers are not evident in the provided data. Overall, swissporTON demonstrates a solid market position with a trustworthy online presence but should enhance privacy compliance and security transparency.

H

Hintbox

hintbox.de

72

Hintbox is a professional provider of secure whistleblower systems, offering ISO 27001 certified software solutions tailored to meet EU and German regulatory requirements. The company targets medium to large enterprises and public sector organizations, providing a cloud-based platform with multilingual support, case management, and customizable forms. The website demonstrates a strong market position with over 1000 customers, including notable enterprises such as REWE Group and Huf Group. Technically, Hintbox employs modern web technologies, integrates comprehensive consent management via Usercentrics, and uses reputable analytics and marketing tools. Hosting is provided by Hetzner, a certified German data center, ensuring data sovereignty and security. Security posture is robust, with end-to-end encryption, two-factor authentication, and isolated data storage, although some HTTP security headers could be improved. Overall, the website is well-designed, user-friendly, and compliant with GDPR and other privacy regulations.

C

Coop Rechtsschutz AG

cooprecht.ch

64

Coop Rechtsschutz AG is a Swiss legal protection insurance provider offering comprehensive insurance products for private individuals, businesses, and special sectors such as health insurers and unions. The company maintains a professional online presence with clear navigation, multi-language support, and a blog providing relevant legal content. Their market position is supported by numerous partnerships with reputable Swiss organizations, enhancing trust and reach. Technically, the website uses a proprietary CMS (SharedGWA), integrates Matomo analytics for privacy-conscious tracking, and employs modern frontend technologies like Swiper.js for UI elements. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and policies are not published. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the website reflects a mature digital infrastructure aligned with business goals and regulatory requirements.

N

Nau.ch

nau.ch

49

Nau.ch is a Swiss online news portal delivering news content focused on Switzerland, covering sports, politics, and people. The website targets a general Swiss audience and positions itself as a modern news platform with multimedia content including videos. Technically, the site uses the Qwik framework, integrates Google Analytics and Tag Manager, and employs OneSignal for push notifications, indicating a mature digital infrastructure optimized for performance and mobile responsiveness. Security-wise, the site enforces HTTPS and appears to implement standard security headers, but lacks explicit published privacy and cookie policies, which are critical for GDPR compliance. No contact or incident response information is readily available, which could impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security transparency.

B

Busbetrieb Aarau AG (BBA)

busaarau.ch

52

Busbetrieb Aarau AG (BBA) is a regional public transportation company operating bus services in Aarau, Switzerland. The company provides comprehensive transit services including bus lines, schedules, ticketing options, and customer support. Their website is designed to serve local commuters and visitors with real-time information and service updates. The business operates in the transportation sector with a medium-sized organizational footprint and a clear focus on regional mobility solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a secure CMS platform but lacks some advanced security headers and does not publish a formal security or incident response policy. Privacy compliance is partially addressed with a privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

A

Aji Groupe

aji-groupe.com

51

Aji Groupe is a specialized communication agency based in Alsace, France, focusing on the gastronomy sector. Founded in 2015, the company offers a range of services including culinary photography, custom website creation, social media management, and proprietary software solutions such as Aji Box and Aji Manager. The agency positions itself as a regional expert with a strong emphasis on digital marketing tailored to culinary businesses. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern libraries and Google reCAPTCHA for security. Hosting is provided by OVH sas, a reputable French provider. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website is professional, well-branded, and compliant with GDPR, with clear trust indicators such as certifications and client testimonials.

P

PRACHT

pracht.com

49

PRACHT is a German-based manufacturer specializing in industrial and commercial lighting solutions, serving a diverse range of sectors including heavy industry, transportation, and municipal infrastructure. The company operates a B2B e-commerce platform built on PrestaShop, offering a comprehensive catalog of luminaires tailored to specific industry needs. The website demonstrates a professional design with consistent branding and clear navigation, targeting industrial clients seeking specialized lighting products. Technically, the website leverages modern web technologies such as PrestaShop CMS, Elementor, and Google Tag Manager for analytics and marketing. The site is secured with HTTPS and implements a cookie consent mechanism that respects user privacy preferences. However, there is room for improvement in security headers and privacy documentation to enhance compliance and trust. From a security perspective, the site shows good baseline practices with no exposed sensitive data or visible vulnerabilities. The absence of security headers and formal security policies indicates potential areas for strengthening the security posture. The domain registration data is consistent and supports the legitimacy of the business, with a long-standing domain age since 2002. Overall, PRACHT's website is a solid representation of an established industrial manufacturer with a moderate digital maturity level. Strategic enhancements in privacy compliance, security policies, and technical security controls would further improve the site's trustworthiness and regulatory adherence.

B

Bureau des Congrès de Nantes & St-Nazaire

bureaudescongres-nantes.fr

56

The Bureau des Congrès de Nantes & St-Nazaire website serves as a professional platform to assist in organizing various types of corporate events such as seminars, congresses, salons, team-building activities, and hybrid or virtual events in the Nantes and Saint-Nazaire regions. The site positions itself as a creative and eco-responsible destination, targeting event organizers and companies seeking unique and sustainable event solutions. The business model revolves around providing expert guidance and connecting clients with local service providers including venues, caterers, and agencies. Technically, the website is built on Drupal 9 CMS, utilizing modern frontend libraries like Swiper.js for interactive elements. The site demonstrates good mobile optimization and SEO practices, with clear navigation and professional design. However, some accessibility features appear basic, and performance is moderate. No explicit hosting provider or advanced platform details are evident. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers are directly found in the provided content, though a contact form is available. There is no evidence of vulnerability disclosures or incident response information. The absence of WHOIS data suggests privacy protection on domain registration, which is typical for business entities. Overall, the website is professional and trustworthy with a solid business presence, but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

M

Marati maja

maratimaja.ee

10

Marati maja is a commercial real estate project centered on a historic textile factory building located at Tartu maantee 63 in Tallinn, Estonia. The website presents the building's history, sustainability credentials including BREEAM certification, and modern office rental offerings. The project is owned by LHV Pensionifondid and managed in partnership with Colliers, with architectural and construction partners named. The site targets businesses seeking office space in a landmark building with modern amenities and flexible leasing options. Technically, the website is built on WordPress with modern JavaScript libraries, responsive design, and integrated contact forms. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is professional and trustworthy but could improve compliance and security practices.

M

memo-media Verlags-GmbH

eventbranchenverzeichnis.de

55

The website www.eventbranchenverzeichnis.de operates as a comprehensive German-language event industry directory, offering access to over 20,000 contacts for event professionals including artists, service providers, and locations. It is managed by memo-media Verlags-GmbH, a recognized entity in the event media sector. The platform provides a user-friendly search interface, a free inquiry service, and additional event-related publications and newsletters, positioning itself as a key resource for event planning in Germany. Technically, the site employs modern frontend technologies such as Bootstrap 4.6, jQuery, Font Awesome, Swiper.js, and Typed.js, ensuring a responsive and visually appealing user experience. The use of HTTPS and cookie consent mechanisms reflects a commitment to privacy and security compliance. However, the absence of explicit security headers and incident response policies suggests areas for improvement in security maturity. From a security perspective, the site demonstrates good practices including encrypted connections and minimal exposure of sensitive data. The integration of Fathom Analytics indicates privacy-conscious user tracking. No critical vulnerabilities or malicious content were detected. The WHOIS data aligns with the business profile, showing consistent registration without privacy protection, enhancing trust. Overall, the website presents a professional, trustworthy, and GDPR-compliant platform with solid business credibility and technical implementation. Strategic enhancements in security headers and published security policies would further strengthen its posture and user confidence.

K

KING CROSS

king-cross.hr

58

KING CROSS is a retail shopping center website based in Croatia, offering a variety of products related to sports, home, family, and leisure. The website targets a general audience looking for convenient and affordable shopping options. The site is built on WordPress CMS with SEO optimizations via Yoast and uses modern UI components such as Swiper.js. The technical infrastructure appears moderate in performance and mobile optimization, with HTTPS enabled ensuring basic transport security. However, the absence of visible security headers and explicit privacy and cookie policies indicates room for improvement in security and compliance. No contact information or incident response details are publicly available, which may affect user trust and compliance with GDPR transparency requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

A

Arena Center Zagreb d.o.o.

arenacentar.hr

63

Arena Centar is a well-established large retail shopping center located in Croatia, operated by Arena Center Zagreb d.o.o. and owned by the parent company NEPI Rockcastle. The website provides comprehensive information about the shopping center's services, including retail stores, dining, entertainment, parking, and customer engagement via a mobile app and gift cards. The site targets a broad audience including local residents, families, and visitors seeking shopping and leisure experiences. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for analytics and marketing tools like Google Tag Manager, Facebook Pixel, and TikTok Pixel. Hosting and DNS are managed by reputable providers, ensuring stable performance and security. Security posture is good with HTTPS enforced and consent mechanisms for cookies, though explicit security policies and incident response details are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a positive user experience and strong business credibility.

B

BLITZ - CINESTAR d.o.o.

blitz-cinestar.hr

58

CineStar Cinemas, operated by BLITZ - CINESTAR d.o.o., is the largest multiplex cinema chain in Croatia, established in 2003. The company operates 16 locations across 11 cities, offering a wide range of cinema experiences including premium formats such as IMAX, 4DX, ScreenX, and Gold Class. The website provides comprehensive information about movie screenings, ticket sales, loyalty programs, and concessions, targeting a general audience including families and cinema enthusiasts. The business model focuses on retail cinema operations with an integrated online ticketing platform and ancillary services such as snacks and event hosting. Technically, the website is built using modern web technologies including Bootstrap, FontAwesome, Swiper.js, and Google Tag Manager for analytics. It is hosted behind Cloudflare CDN and DNS services, ensuring good performance and security. The site is mobile-optimized and includes accessibility features, although some improvements could be made. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present. No vulnerability disclosures or incident response contacts are published, which could be areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, CineStar Cinemas presents a professional, trustworthy, and user-friendly online presence with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party scripts to maintain a robust security posture.

A

AS LHV Pank

lhv.ee

60

AS LHV Pank is a leading Estonian financial institution offering a broad range of services including banking, loans, investments, insurance, and pension management. The company targets both individual and business customers within Estonia, positioning itself as a trusted and comprehensive financial services provider. The website reflects this with professional design, clear navigation, and extensive service information. Technically, the site employs modern frameworks such as Bootstrap and uses analytics tools like Google Analytics and PostHog, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure login mechanisms, although there is room for improvement in publishing dedicated security policies and incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

Z

Zone Media OÜ

taust.ee

47

Taust.ee is a well-established Estonian credit information platform operated by Zone Media OÜ, founded in 2014. It provides comprehensive credit and background data services including payment defaults, tax debts, court rulings, and financial reports to banks, credit providers, and businesses. The website demonstrates a strong market position with partnerships from major Estonian banks and telecom companies. Technically, the site is built on WordPress with modern front-end technologies and integrates multiple analytics and tracking tools. Security posture is good with HTTPS and no exposed sensitive data, though security headers could be enhanced. Privacy compliance is robust with clear cookie consent and privacy policies. Overall, the site is professional, trustworthy, and serves a critical role in the Estonian financial ecosystem.

D

Dubrovačke knjižnice

dkd.hr

65

Dubrovačke knjižnice is a well-established public library institution based in Dubrovnik, Croatia, providing a range of library services including scientific and national libraries, digital collections, and cultural events. The website reflects a mature digital presence with a clear focus on serving the local community and researchers. The technical infrastructure is based on ASP.NET WebForms and the DotNetNuke CMS platform, integrating modern JavaScript libraries for enhanced user experience and mobile responsiveness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy standards.

W

wilderoben s.r.o.

wilderoben.com

60

Wilderoben s.r.o. operates an e-commerce website specializing in sustainable and responsible outdoor apparel and accessories. The company partners with well-known outdoor brands and targets environmentally conscious consumers. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site is built on PrestaShop with modern JavaScript libraries and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is basic, lacking explicit privacy and terms of service pages, which should be addressed to enhance trust and regulatory adherence. Overall, the website is legitimate, well-branded, and trustworthy, with moderate user tracking and good performance.

I

InstaGYM

instagym.cz

63

InstaGYM is a Czech-based fitness company specializing in organizing fitness camps primarily in Slovakia and abroad, as well as providing online personal training and nutrition consulting services. The company positions itself as a market leader in its niche, targeting fitness enthusiasts seeking professional training and wellness solutions. The website is professionally designed using modern web technologies such as Nuxt.js and integrates popular analytics and marketing tools including Google Tag Manager, Facebook Pixel, and Exponea. The technical infrastructure supports a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service, although a cookie consent mechanism is implemented. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is not uncommon for small businesses. Overall, InstaGYM presents a credible and professional online presence with room for improvement in privacy and security transparency.

E

ExitShop s.r.o.

exitshop.cz

58

ExitShop s.r.o. operates the website exitshop.cz, providing a comprehensive e-commerce platform tailored for businesses seeking unlimited product listings and integrated administration. The platform supports multi-country and multi-currency sales, marketplace integrations, invoicing, and payment gateways, positioning itself as a robust solution in the Czech e-commerce market. Technically, the website employs modern web technologies including Vue.js and Bootstrap, with integrations for analytics and advertising tools such as Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and offers a professional user experience. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and uses an outdated jQuery version, which could pose risks. The absence of WHOIS data limits domain legitimacy verification, and the site does not publicly provide privacy or cookie policies, impacting compliance. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance transparency.

G

Global Office s.r.o.

globaloffice.sk

48

Global Office s.r.o. is a Slovakian company specializing in providing virtual office and registered address services primarily in Bratislava. The company offers a range of services including mail handling, online mail management applications, company formation, and registry changes. With over 9 years of experience and more than 370 clients, it holds a solid position in the local market for virtual office solutions. The website is professionally designed, mobile-optimized, and provides clear contact information and service details, supporting a positive user experience and trustworthiness. Technically, the site uses a custom CMS platform developed by its parent company, integrates Google Analytics and reCAPTCHA for security and analytics, and enforces HTTPS for secure communications. Security posture is strong with no visible vulnerabilities, though some improvements in security headers and explicit cookie consent mechanisms are recommended. Overall, the website and business demonstrate a mature digital presence with good compliance to GDPR privacy requirements, though explicit terms of service and security policies could enhance trust further.

ROYAL MEDIA s.r.o. operates the website webroyal.sk, providing comprehensive e-commerce solutions including e-shop creation, hosting, SEO optimization, and integration with payment gateways and courier services. The company targets Slovak businesses and entrepreneurs seeking affordable, customizable online store platforms with marketing and technical support. Established in 2012, the company has a solid market presence supported by a decade-old domain and consistent branding. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for UI and analytics, hosted on VPS servers with SSD storage, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic but includes cookie consent mechanisms and a privacy policy in Slovak. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

K

Krka Sverige AB

krka.se

63

Krka Sverige AB operates as a subsidiary of the Krka pharmaceutical group, specializing in generic medicines with a 70-year history. The company focuses on development, production, marketing, and sales of prescription and non-prescription medicines for humans and animals, targeting healthcare professionals and consumers primarily in Nordic countries. The website reflects a professional and consistent brand image with clear business information and international presence links. Technically, the website is built using modern JavaScript frameworks such as Nuxt.js and includes performance and accessibility optimizations. It employs Google Tag Manager for analytics and marketing purposes and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, some security headers are not evident, and WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear policies and consent mechanisms. Business credibility is supported by detailed contact information and social media presence. The main risk lies in the lack of WHOIS data and absence of an incident response contact, which should be addressed to improve trust. Overall, the website is professional and functional but would benefit from enhanced transparency on domain registration and security policies to strengthen trust and compliance.

K

Krka, tovarna zdravil, d.d., Novo mesto

krka.lt

63

Krka is a globally recognized pharmaceutical company with a 70-year history, offering prescription, non-prescription, and veterinary products. The website reflects a professional and consistent brand presence targeting healthcare professionals and patients, with a focus on quality and sustainability. Technically, the site uses modern frameworks such as Nuxt.js and includes essential features like cookie consent and privacy policies, indicating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust analysis but does not detract from the overall legitimacy of the business presence online.

K

KRKA Farmaceutica, Unipessoal Lda.

krka.pt

62

KRKA Farmaceutica, Unipessoal Lda. is a well-established pharmaceutical company specializing in generic medicines with over 70 years of experience. The company operates in Portugal as part of the larger Krka group, a recognized global player in the healthcare sector. Their website clearly communicates their business focus on prescription, non-prescription, and veterinary medicines, targeting both healthcare professionals and general consumers. The site is professionally designed, mobile-optimized, and provides comprehensive corporate and product information.

K

Krka Farmaceutici Milano S.r.l.

krka.it

10

Krka Farmaceutici Milano S.r.l. is a well-established pharmaceutical company with over 70 years of experience, specializing in the development, production, and commercialization of prescription drugs, over-the-counter products, and veterinary medicines. The company holds a strong market position as a leading global producer of generic pharmaceuticals, supported by a consistent and professional online presence targeting both healthcare professionals and the general public. The website reflects a mature business model with clear branding and comprehensive product information. Technically, the site is built on modern frameworks such as Nuxt.js, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and a robust cookie consent mechanism, although some security headers could be improved and incident response contact details are not explicitly provided. Overall, the website demonstrates high professionalism and trustworthiness, with transparent contact information and active social media engagement.

K

KRKA ΕΛΛΑΣ ΜΟΝΟΠΡΟΣΩΠΗ Ε.Π.Ε.

krka.gr

10

Krka Hellas Monoprosopi E.P.E. operates as a subsidiary of Krka, a leading global generic pharmaceutical company with over 70 years of experience. The company focuses on manufacturing and distributing generic prescription drugs, over-the-counter products, and animal health products. The website is professionally designed, primarily in Greek, targeting healthcare professionals and consumers in Greece. The digital infrastructure is modern, leveraging Nuxt.js and other contemporary JavaScript libraries, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies are not explicitly published. Overall, the website reflects a credible and trustworthy healthcare business with clear contact information and compliance with GDPR requirements.

K

KRKA

krka.fr

10

KRKA is a well-established pharmaceutical company specializing in generic medicines with nearly 70 years of experience. The French website presents a professional and comprehensive digital presence targeting healthcare professionals and the general public. It offers a product catalog, detailed company information, and multilingual support through links to various country-specific KRKA sites. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, although some security headers and explicit security policies are absent. WHOIS data is unavailable, which limits domain registration trust analysis, but the overall site content and contact information support legitimacy. The site is GDPR compliant and provides clear data protection officer contact details.

K

Krka

krka.bg

10

Krka Bulgaria is a subsidiary of the well-established Krka pharmaceutical group, specializing in the development, production, and marketing of generic medicinal products. The website reflects a professional and consistent brand image, targeting healthcare professionals and consumers interested in pharmaceutical and health products. The company holds a strong market position as a leading generic pharmaceutical manufacturer with a 70-year history. Technically, the website is built on modern frameworks such as Nuxt.js, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high business credibility and compliance with GDPR requirements.

K

KRKA, tovarna zdravil, d.d., Novo mesto

krka.by

39

KRKA, tovarna zdravil, d.d., Novo mesto is a well-established pharmaceutical company specializing in the development, manufacturing, and sales of generic, over-the-counter, veterinary, and dietary supplement products. With nearly 70 years of experience, the company holds a strong market position as a leading global generic pharmaceutical manufacturer. The website targets healthcare professionals, consumers, and veterinary sectors primarily in Belarus and globally through multiple localized domains. The business model focuses on high-quality pharmaceutical products supported by a robust corporate presence and strategic international footprint. Technically, the website is built on modern frameworks such as Nuxt.js, employs industry-standard analytics tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response disclosures could be improved. Overall, the site reflects a professional and trustworthy corporate image with comprehensive privacy and cookie policies, clear contact information, and consistent branding.

R

Reuzenpanda

reuzenpanda.nl

57

Reuzenpanda is a small retail business operating a website built on WordPress using the Elementor page builder. The site presents a professional and consistent design with good mobile optimization and user experience. The business appears to target a general audience in the Netherlands, offering products or services typical of a retail ecommerce model. Technically, the site uses modern frontend libraries such as Swiper.js and Font Awesome, but lacks advanced analytics or marketing tools. Security posture is basic with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.

S

Sąd Arbitrażowy przy Krajowej Izbie Gospodarczej w Warszawie

sakig.pl

54

The website represents the Court of Arbitration at the Polish Chamber of Commerce in Warsaw, a well-established institution providing arbitration and mediation services primarily to businesses and legal professionals in Poland and the surrounding region. The institution has a strong market position as the largest and best-known arbitration body in its area, with a history dating back to 1950. The website effectively communicates its services, events, and legal resources, targeting a professional audience seeking dispute resolution mechanisms. Technically, the site is built on WordPress with modern web technologies including Bootstrap, jQuery, and Google Analytics, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site is professional, trustworthy, and aligned with its institutional role.

K

KANAL M.P.S. s.r.o.

kanal-mps.sk

43

KANAL M.P.S. s.r.o. is a Slovak company specializing in sewer and drainage system services including electromechanical cleaning, high-pressure cleaning, and TV monitoring of sewer pipes. Established in 2003, it holds a stable market position with a medium-sized operation focused on servicing Slovak businesses and institutions. The website reflects a professional business model with clear service offerings and a consistent brand presence. Technically, the site uses modern JavaScript libraries such as jQuery, Lodash, Swiper.js, and Fancybox, hosted likely on Websupport infrastructure with DNSSEC enabled, ensuring domain security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and DNSSEC but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partial, with a cookie consent mechanism but no dedicated privacy policy or terms of service pages. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

F

Fundacja Academic Partners

pythonsummit.org

66

Python Summit is a specialized conference targeting Python developers, data engineers, architects, and DevOps professionals, primarily in Poland but with international reach. It is organized by the Fundacja Academic Partners foundation and associated Python communities such as PyData and PyWaw. The event offers both online and onsite participation, with a comprehensive agenda featuring expert speakers and practical case studies. The conference also includes a job fair and offers multipass tickets granting access to related conferences, enhancing its value proposition. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, Facebook Pixel, and Swiper.js for UI components. It is hosted with DNS managed by Cloudflare and uses HTTPS, ensuring secure communications. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Analytics and marketing tools are extensively used, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and advanced security headers like CSP are not explicitly observed. There is no published security policy or incident response contact, which could be improved. Privacy and cookie policies are present and GDPR compliance is indicated through consent banners. Overall, the website presents a professional and trustworthy image with a solid technical foundation and good privacy practices. The domain is newly registered, consistent with the event timeline, and no suspicious indicators are found. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance the security posture further.

F

Fundacja Academic Partners

thehacksummit.com

63

The Hack Summit is a prominent cybersecurity conference in Poland, organized by Fundacja Academic Partners. It serves as a major gathering for cybersecurity professionals, government officials, and industry experts, offering a mix of online and onsite events with extensive educational content and networking opportunities. The conference is well-established since 2020 and attracts over 2,000 participants annually, positioning itself as a key event in the Polish cybersecurity landscape. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, and multiple tracking pixels, hosted with reputable providers and secured with HTTPS. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy organization with a clear business model focused on event hosting and community engagement.

FRAMER s.r.o. is a Slovak technology company specializing in custom web application development, SEO, and digital marketing services. Established around 2010, the company positions itself as a trusted partner for businesses seeking tailored internet solutions rather than off-the-shelf products. Their key services include web app design and development on the Microsoft .NET Framework, SEO optimization, social media marketing, email marketing, and pay-per-click campaigns. The website reflects a professional and consistent brand image with clear service descriptions and client testimonials, targeting business clients primarily in Slovakia. Technically, the website employs modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics and Tag Manager for tracking, and is built on a custom or unknown CMS platform. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS but lacks explicit security headers and visible anti-CSRF protections. There is no published security policy or incident response contact, and no cookie consent mechanism is present, indicating gaps in GDPR compliance. No vulnerabilities or suspicious content were found in the HTML content. WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, FRAMER s.r.o. presents a credible and professional digital presence with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

S

Slovenská elektrizačná prenosová sústava, a.s.

sepsas.sk

48

Slovenská elektrizačná prenosová sústava, a.s. (SEPS) is the Slovak national electricity transmission system operator responsible for managing, operating, and developing the country's transmission grid. The company provides critical services including auctions, scheduling, support services, and technical data for partners, while also engaging in public consultations and international cooperation projects. SEPS holds a significant market position as an essential energy infrastructure entity in Slovakia, serving energy market participants, partners, and the general public. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on WordPress with modern technologies such as jQuery, Swiper.js, and Google Tag Manager. It employs Google reCAPTCHA for form security and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, SEPS demonstrates a mature posture, evidenced by ISO 27001 certification and HTTPS enforcement. Security best practices include secure forms and cookie consent, though some security headers are not explicitly confirmed. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, explicit incident response and vulnerability disclosure policies are not publicly found, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, improving accessibility, and maintaining regular security audits to sustain and improve the security posture.