Security Directory

R

RICOM secure s.r.o.

oxepower.si

42

Oxepower.si is an e-commerce website operated by RICOM secure s.r.o., specializing in the sale of electronic products such as hunting cameras, inspection cameras, power stations, GPS locators, and security systems. The company targets the Slovenian market and is part of a broader regional network with sister sites in multiple European countries. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Analytics, hosted by Websupport. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. Privacy compliance is supported by visible cookie and privacy policies, and contact information is clearly provided. WHOIS data confirms the legitimacy of the domain and company, with consistent registration details and no privacy protection masking ownership. Overall, the site presents a trustworthy and professional online retail presence.

R

RICOM secure s.r.o.

oxe.hu

44

OXE.hu is an e-commerce platform specializing in electronic products such as hunting cameras, GPS locators, power stations, and security systems. The company operates primarily in Hungary and is part of the RICOM secure s.r.o. group, which has a regional presence across multiple Central and Eastern European countries. The website targets general consumers and business clients interested in specialized electronic and security products. The business model focuses on retail sales through an online shop with additional physical pickup points in Hungary. The company maintains a consistent brand presence and offers a wide range of products catering to hunting, security, and electronic needs. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Font Awesome, and Google Analytics for tracking. It uses HTTPS with an excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, no CMS or hosting provider details were explicitly detected. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences. There are no visible security headers or explicit security policies published on the site, and no incident response contacts were found. The site does not expose sensitive data and uses reputable third-party scripts. Overall, the security posture is good but could be improved by adding dedicated security documentation and enhancing HTTP security headers. Overall, OXE.hu presents a trustworthy and professional online retail presence with moderate technical maturity and good privacy compliance. Strategic improvements in security transparency and incident response readiness would further enhance its risk profile and customer trust.

D

Dualoo

dualoo.com

53

Dualoo is a Swiss-based company specializing in applicant management software tailored for small and medium-sized enterprises (KMUs). Their platform offers intuitive e-recruiting solutions that simplify the hiring process, focusing on features such as job posting creation, applicant tracking, analytics, and integrations. Positioned as a leading solution for training companies in Switzerland, Dualoo targets businesses seeking efficient and GDPR-compliant recruitment tools. The website is professionally designed, multilingual, and optimized for performance and mobile use, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor and WPML for multilingual support, enhanced by NitroPack for performance optimization. It integrates marketing and analytics tools such as Google Tag Manager, Salesforce CRM, and Intercom chat, indicating a well-rounded digital marketing and customer engagement strategy. The site employs HTTPS with strong SSL configuration, though explicit security headers could be improved. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent management, and no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contact, which could enhance trust and preparedness. The absence of WHOIS data from the .com registry suggests privacy protection or alternative registration, but the professional site and compliance measures support legitimacy. Overall, Dualoo presents a secure, compliant, and user-friendly platform for applicant management, with strong business credibility and technical infrastructure. Strategic improvements in security transparency and explicit header implementation would further strengthen their posture.

J

Jaga Media

receptyprimanapadu.cz

58

Recepty prima nápadů is a Czech online media platform operated by Jaga Media, focusing on content related to home, garden, cooking, and lifestyle. The site offers articles, video tutorials, and advice targeting homeowners and hobbyists in the Czech Republic. It maintains an active presence on social media and provides clear contact information, indicating a professional media operation. Technically, the website is built on WordPress with common SEO and advertising plugins, including Yoast SEO, Google Analytics, and Advanced Ads. The site is mobile-optimized and uses HTTPS, with a GDPR-compliant cookie consent mechanism in place. Security posture is adequate but could be improved by adding security headers and publishing explicit security policies. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and business information appear legitimate and consistent with a medium-sized media company. Overall, the site is well-maintained, user-friendly, and compliant with privacy regulations.

A

ASB

asb-portal.cz

59

ASB-portal.cz is a specialized Czech online portal dedicated to architecture, construction, and real estate business sectors. It provides expert articles, industry news, event calendars, newsletters, and magazine publications targeting professionals and stakeholders in these fields. The website demonstrates a consistent and professional brand presence with good content quality and clear navigation. Technically, it is built on WordPress with modern plugins such as Yoast SEO and uses Google Tag Manager and InMobi for analytics and consent management. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy policy documentation. The absence of WHOIS domain registration data is a concern for domain legitimacy but does not detract significantly from the website's professional appearance and content. Overall, the site is a credible and valuable resource for its target audience.

V

Virtuelle PH

virtuelle-ph.at

67

Virtuelle PH is an Austrian educational service platform dedicated to supporting pedagogical universities with digital and innovative online training solutions. The website offers various services including online continuing education, digital teaching support, and eLearning consulting, targeting educators and educational institutions. The platform leverages WordPress with the Divi theme and integrates plugins for event management and cookie compliance, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security policy transparency and vulnerability disclosure. The absence of WHOIS data limits domain trust assessment, but the professional presentation and compliance with GDPR indicate a legitimate and trustworthy operation. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility features.

Praktikum FLSL operates a regional internship platform focused on connecting students, school pupils, and volunteers with companies in the Flensburg and Schleswig-Flensburg area. The website offers a broad range of internship opportunities including voluntary social, ecological, cultural years, and federal volunteer service. It serves both internship seekers and companies looking to post offers, positioning itself as a key regional educational resource. The platform is supported by local economic development organizations and cooperates with related internship initiatives, enhancing its market presence. Technically, the website is built on the Contao Open Source CMS, leveraging modern web technologies such as jQuery, Foundation framework, and FontAwesome for UI elements. It employs Matomo Analytics with privacy-conscious settings like Do Not Track enabled. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features could be improved. Hosting appears stable with multiple nameservers, indicating reliable infrastructure. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively serves its educational mission with good content quality and user experience. Strategic improvements in security headers, incident response transparency, and contact information visibility would enhance its security posture and business credibility.

T

Tower Center Rijeka

tower-center-rijeka.hr

10

Tower Center Rijeka is a well-established retail shopping center located in Rijeka, Croatia, founded in 2007. The website presents a comprehensive overview of the center's offerings, including over 135 stores, megastores, a multiplex cinema, restaurants, and extensive parking facilities. The business targets general consumers, families, and shoppers seeking retail and leisure experiences. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and providing up-to-date news and promotional content. Technically, the site employs modern web technologies such as Google reCAPTCHA v3, Google Tag Manager, Facebook Pixel, and is hosted on DigitalOcean, ensuring reliable performance and security. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the site reflects a credible and trustworthy business with a good digital presence.

V

VOKO Studio

vokostudio.com

43

VOKO Studio is a small freelance digital agency based in Dublin, Ireland, specializing in affordable web design, mobile app development, and graphic design services. Founded in 2017, the company positions itself as a reliable and cost-effective alternative to larger agencies, offering fixed-price packages starting at €379. Their portfolio and presence on Google Play with multiple apps and thousands of downloads demonstrate active business operations and client engagement. Technically, the website is built with modern web standards including HTML5, CSS3, PHP7, and jQuery, hosted on HostGator servers. The site is mobile optimized and includes integration with Google Maps and Google Fonts, providing a good user experience and SEO foundation. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. The contact form uses a third-party service (Formspree) for email submissions, and no incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but could improve its security posture and privacy compliance to better align with industry best practices.

R

RICOM secure s.r.o.

oxe.cz

45

OXE.cz is an established Czech Republic-based retailer and wholesaler specializing in security and surveillance equipment, including trail cameras, hunting optics, inspection cameras, and related electronic products. The company operates a professional e-commerce platform with a clear focus on both retail customers and wholesale partners, supported by technical consulting and customer service. The website demonstrates a consistent brand presence with multiple country-specific partner domains, indicating a regional market footprint in Central and Eastern Europe. Technically, the website uses modern web technologies such as jQuery, Bootstrap, and Hogan.js templating, combined with Google Tag Manager and CookieScript for analytics and privacy compliance. The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. However, some security best practices like HTTP security headers are missing, and WHOIS data is unavailable, which slightly reduces transparency. From a security perspective, the site enforces HTTPS and uses cookie consent banners with granular categories, showing a good privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Advertising and tracking scripts are present but managed with user consent. The absence of a dedicated security policy or incident response contact is noted. Overall, OXE.cz presents a professional and trustworthy online presence with moderate technical maturity and good privacy compliance. The lack of WHOIS data and some missing security headers are areas for improvement. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and considering a vulnerability disclosure mechanism to strengthen trust and security posture.

N

NEPZ-Nejbohatší ekosystémy planety Země

nepz.cz

51

NEPZ-Nejbohatší ekosystémy planety Země is a Czech Republic based educational non-profit project focused on raising awareness and educating about the richest ecosystems on Earth, biodiversity, and environmental protection. The organization collaborates with Justice for Nature and offers lectures, events, and educational content primarily targeting schools and the general public interested in environmental conservation. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The site is well designed, mobile optimized, and provides clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy and cookie policies. No incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance trust and compliance. Overall, the domain registration data is consistent and supports the legitimacy of the project, which has been active since 2012.

K

Kvásková kuchařka Jana Berková

kvaskovakucharka.cz

41

Kvásková kuchařka Jana Berková operates a niche e-commerce and educational platform focused on sourdough baking. The website offers cookbooks, baking courses, and related products primarily targeting home bakers and culinary enthusiasts in the Czech Republic. The business is small-sized, founded in 2014, and maintains a consistent brand presence with customer testimonials and clear contact information. Technically, the site is built on WordPress with WooCommerce and Elementor, hosted by WEDOS, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a GDPR policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy practices are recommended.

Č

Časopisy pro volný čas s.r.o.

chatar-chalupar.cz

54

Chatař Chalupář is a well-established Czech media publication specializing in content for cottage and chalet owners, focusing on leisure, gardening, construction, and lifestyle topics. The website serves a niche audience interested in home improvement and rural living, offering a mix of articles, tips, and product information. The business operates primarily through magazine publishing and online content, monetized via advertising and subscriptions. Technically, the site runs on WordPress with a moderate to good performance profile, leveraging common advertising and analytics technologies such as Google Tag Manager and Seznam Sklik. Security posture is adequate with enforced HTTPS and sandboxed ad iframes, though it lacks some security headers and uses an outdated WordPress version, which could pose risks. Privacy compliance is strong, with a clear GDPR-compliant privacy policy and cookie consent mechanisms. The absence of WHOIS data is a concern but does not detract significantly from the site's legitimacy given the professional presentation and business information. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

J

Jaga Media, s.r.o.

floranazahrade.cz

58

Homebydleni.cz is a Czech online lifestyle magazine specializing in home, garden, and living topics. Owned by Jaga Media, s.r.o., it offers a variety of articles, tips, and inspirations targeting homeowners and garden enthusiasts. The website is well-established, with a domain age dating back to 2009, and maintains a consistent brand presence with professional content and advertising partnerships. Technically, the site is built on WordPress, leveraging popular plugins for SEO and ad management, and integrates consent management for GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. Overall, the site provides a good user experience with mobile optimization and clear navigation.

F

Feedaty

feedaty.com

61

Feedaty operates as a specialized platform offering review and user-generated content (UGC) management services tailored for businesses and e-commerce companies, primarily targeting the Italian market. The website presents a professional and consistent brand image, emphasizing business growth acceleration through consumer empowerment and professional review management. Technically, the site is built on WordPress with a modern tech stack including Bootstrap Icons, jQuery, and various marketing and analytics tools such as Google Tag Manager and OptiMonk. The site demonstrates good SEO practices and mobile optimization, although accessibility features are basic. Security-wise, the website enforces HTTPS, employs security headers, and integrates CAPTCHA and cookie consent mechanisms, reflecting a solid security posture. However, the absence of a published security policy and incident response information indicates room for improvement in transparency and preparedness. The lack of WHOIS data is a notable anomaly that slightly diminishes domain trust but does not detract significantly from the overall legitimacy given the professional site content and infrastructure. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts to mitigate vulnerabilities.

Civilnodruštvo.hr is a Croatian non-profit portal operated by the Nacionalna zaklada za razvoj civilnog društva, focused on civil society, activism, and social initiatives. Established in 2004, it serves as an information hub connecting various actors in civil activism and promoting civil initiatives. The website offers news, event announcements, educational materials, and multimedia content relevant to its audience. Technically, the site is built on WordPress with a mature plugin ecosystem including Yoast SEO, Contact Form 7, and social sharing tools, ensuring good SEO and user engagement. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and no explicit security policies are published. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy, professional, and well-positioned in its niche.

G

Garancija za mlade | MROSP

gzm.hr

46

The website 'Garancija za mlade' is an official Croatian government initiative aimed at supporting youth employment and education. It provides information and resources to young people, particularly those in NEET status, to facilitate their integration into the labor market or educational pathways. The site is well-positioned as a government-backed platform with consistent branding and clear navigation tailored to its target audience in Croatia. Technically, the site is built on WordPress using Elementor and Yoast SEO, with good mobile optimization and accessibility features. It employs GDPR cookie compliance and uses Facebook Pixel for marketing analytics. Security posture is adequate with HTTPS and some best practices, but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the domain registration and hosting align with Croatian government standards, reinforcing legitimacy. Recommendations include publishing privacy and security policies and enhancing security headers to improve trust and compliance.

MagMe is a Croatian media and lifestyle website established in 2021, targeting Croatian-speaking audiences with lifestyle content and e-commerce capabilities via WooCommerce. The website demonstrates a moderate level of digital maturity, leveraging WordPress CMS, modern JavaScript libraries like Swiper.js, and third-party services such as Cookiebot for cookie consent and Gemius for analytics. The site is hosted with Cloudflare DNS and uses HTTPS, ensuring secure transport. However, explicit privacy and terms of service policies are not found in the provided content, which is a compliance gap. Security posture is adequate with HTTPS and consent mechanisms but lacks visible security headers and formal incident response contacts. Overall, the site is professionally designed with good user experience and moderate trustworthiness.

W

WordPress Care

wordpresscare.com

57

WordPress Care is a specialized service provider focused on WordPress website building and maintenance tailored for small and medium-sized businesses. The company offers a range of services including daily backups, WordPress core, theme and plugin updates, heat maps, and the use of professional plugins to enhance website functionality. The website presents a professional image with client testimonials and certifications that reinforce trust and expertise in the WordPress domain. Technically, the website is built on WordPress 6.8.3 using the Avada theme and several modern plugins such as Yoast SEO and SuperPWA, indicating a mature digital infrastructure. Analytics and tracking tools like Google Analytics, LinkedIn Insight Tag, and Hotjar are employed to monitor user behavior and marketing effectiveness. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business presentation are consistent with a legitimate small business. Privacy and cookie policies are present, but the lack of a cookie consent mechanism and incident response information suggests room for improvement in compliance and transparency.

InGenius Webdesign is a Czech Republic-based small web development company specializing in custom internet presentations, web applications, e-commerce, and related digital services. With over 200 completed projects, they serve businesses seeking tailored online solutions. Their website demonstrates a professional design with clear navigation and good mobile optimization, leveraging technologies such as jQuery, LESS.js, Kooboo CMS, and integrating marketing tools like Google Analytics and Facebook Pixel. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS data and security headers indicates areas for improvement in trust and security posture. Overall, the company presents a credible and professional digital presence with moderate technical maturity and a good security baseline.

Sportovec roku is a well-established Czech sports award platform operated by BPA sport marketing a.s., with a domain age dating back to 2004. The website serves as a media and event promotion platform targeting sports journalists and fans within the Czech Republic. It offers news, event information, and partner links related to Czech sports awards. Technically, the site is built on WordPress with Bootstrap and jQuery, featuring a responsive design and basic SEO and accessibility features. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, though lacking advanced security headers and explicit security policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

S

SATOYA s.r.o.

satoya.cz

43

SATOYA s.r.o. is a Czech Republic-based IT service provider specializing in computer sales and servicing, IT outsourcing, web design, hosting services including webhosting, email, cloud, virtual and dedicated servers, and server housing. The company also develops custom software and hardware solutions, targeting businesses and individuals requiring reliable IT infrastructure and support. The website demonstrates a professional digital presence with detailed service descriptions, client references, and a regularly updated blog, indicating active engagement with its audience. Technically, the site is built on WordPress with modern plugins such as Smart Slider 3 and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. The absence of WHOIS data due to privacy protection slightly reduces trust but does not detract from the overall legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing security and incident response information, and enhancing security headers and accessibility features.

The website www.gsbz-buchholz.de represents the Gesundheitsfachschule und Bildungszentrum Buchholz, affiliated with the Krankenhäuser Buchholz und Winsen gemeinnützige GmbH. It serves as a portal for healthcare education, training, and employment opportunities in the Buchholz and Winsen region of Germany. The site targets prospective students and job seekers interested in healthcare professions, providing detailed information about training programs, career paths, and affiliated hospitals. The business operates as a non-profit healthcare and educational institution, positioning itself as the largest employer in the region with a strong community focus. Technically, the website is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery and Owl Carousel. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and the site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, there is no cookie consent mechanism or explicit security and incident response policies published, which are areas for improvement. From a security perspective, the site maintains a good posture with HTTPS and no detected vulnerabilities. The absence of security headers and incident response information slightly reduces the security maturity. Privacy compliance is adequate with a clear privacy policy and terms of service, but the lack of cookie consent and data protection officer contact details indicates partial GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic recommendations include implementing cookie consent, publishing security policies, enhancing accessibility, and adding security headers to improve compliance and security posture further.

X

XPEDE s.r.o.

xpede.cz

42

XPEDE s.r.o. is a newly established Czech construction company specializing in earthworks, site preparation, landscaping, demolition, and infrastructure excavation services. The company targets private and commercial investors as well as municipalities, aiming to provide solid foundational work for various construction projects. The website presents a professional image with clear service descriptions and a contact form, supported by a phone contact and Instagram presence. Technically, the site is built on WordPress using Elementor and OceanWP theme, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and privacy policies. Analytics tools are present but not fully configured, indicating room for improvement in data collection and privacy compliance. Overall, the site is functional and trustworthy for a small local business but would benefit from enhanced security and compliance documentation.

S

SILBA-Elstav s.r.o.

silba.cz

49

SILBA-Elstav s.r.o. is a well-established Czech construction company with over 25 years of experience, specializing in residential, commercial, industrial, and historical building projects primarily in the Plzeňský kraj and surrounding regions. The company offers comprehensive construction and reconstruction services, supported by ISO 9001, ISO 14001, and ISO 45001 certifications, reflecting a strong commitment to quality, environmental management, and occupational health and safety. Their website demonstrates a professional digital presence built on WordPress with modern frameworks and includes clear contact channels and compliance with GDPR and cookie regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. Overall, the company presents a trustworthy and credible profile with a moderate to high technical maturity level.

OSK Praha s.r.o. is a Czech construction company specializing in earthworks, demolition, waste disposal, material transport, and land reclamation. The company has been operating since 2007 and collaborates with large construction and development firms, positioning itself as a reliable local service provider. The website reflects this business focus with clear service descriptions and references to industry-related external resources. Technically, the website is built on Joomla CMS using Bootstrap and SP Page Builder, providing a responsive and professional design. However, the site lacks advanced SEO and accessibility features and does not include privacy or cookie policies, which are critical for compliance. Security posture is basic with HTTPS and CSRF protection but lacks important HTTP security headers and incident response contact information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Základní škola, Praha 10, Křimická 314 is a Czech primary school focused on extended language education, offering English from first grade and German from sixth grade. The school provides various facilities including computer labs, a library, sports facilities, and a modern training kitchen. It actively participates in language and sports competitions and maintains partnerships with institutions abroad. The website serves as a communication platform for students, parents, and staff, featuring blogs, event calendars, and document archives. Technically, the site uses a modern tech stack with popular JavaScript libraries and CSS frameworks, built on the Vitalex CMS platform. Security posture is moderate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trust but the website content and contact details indicate a legitimate educational institution. Overall, the site is well-designed, mobile-optimized, and provides relevant content for its audience.

S

Sprachliche Bildung im Kontext von Migration und Mehrsprachigkeit (BIMM)

bimm.at

58

BIMM (Sprachliche Bildung im Kontext von Migration und Mehrsprachigkeit) is a specialized educational network in Austria focused on promoting quality development and professionalization of educators teaching German as a second language and language education in migration contexts. It operates as a collaborative network of Austrian pedagogical universities, offering seminars, webinars, publications, and advisory services. The website reflects a well-maintained digital presence with a focus on educational content and community engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Bootstrap for responsive design. It uses external libraries like jQuery and CanvasJS for interactive elements. The site is mobile-optimized and includes accessibility considerations, though some improvements could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data aligns well with the website's Austrian educational identity, supporting legitimacy. Overall, BIMM's website is a trustworthy, professional platform serving educators and institutions in Austria. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining regular updates to plugins and themes to ensure ongoing security and compliance.

D

Dicall

dicall.com

57

Dicall is an established Austrian call center and telecommunication service provider founded in 2002. The company specializes in outbound and inbound call center operations, telemarketing, market research, and customer acquisition services. Positioned as a reliable and professional player in the Austrian market, Dicall targets businesses seeking communication and call center solutions. The website reflects a professional business model with consistent branding and a clear focus on quality and customer orientation. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for GDPR compliance. It uses Bootstrap for responsive design and integrates Google reCAPTCHA for form security. Analytics and marketing tools include Google Analytics, Piwik Pro, LeadFeeder, and LinkedIn tracking, all managed with user consent via Cookiebot. Security posture is good with HTTPS enforced and reCAPTCHA usage, but lacks some advanced security headers and explicit security policies. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy, GDPR compliant, and professionally maintained, though it could improve by adding terms of service and explicit security policies.

OZ BRÁZDA s.r.o. is a Czech Republic-based company specializing in the supply and distribution of fresh fruits and vegetables. Established in 2010, the company offers a wide range of over 1600 product types and operates distribution services 362 days a year, positioning itself as a reliable supplier in the retail sector. The website reflects a medium-sized business with a clear focus on fresh produce and serves a general audience interested in healthy food options. Technically, the website is built on WordPress using the Avia Framework and integrates Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices in place. Security-wise, the site uses HTTPS but lacks visible security headers and formal security policies, indicating room for improvement in security posture and compliance. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is implemented. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the company.

Linhartova nadace is a well-established Czech non-profit foundation dedicated to supporting arts and culture. The website provides information about its projects, archives, foundation details, fundraising efforts, and contact options primarily through a contact form and newsletter subscription. The foundation has a significant history dating back to 1987, supported by a domain registered since 2001, indicating a stable and credible presence in the cultural sector. Technically, the website is built on WordPress 5.6.16, utilizing common web technologies such as jQuery, Bootstrap 4, FontAwesome, and Google Fonts. It integrates marketing and analytics tools like MailerLite and Google Analytics. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation structure. From a security perspective, the site uses HTTPS and employs some anti-bot measures on forms. However, it lacks visible security headers such as Content-Security-Policy or HSTS, and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a privacy policy document available, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. The foundation's digital presence is credible and professional, serving its target audience effectively.

A

audaris GmbH

audaris.de

60

audaris GmbH is a German-based technology company specializing in digital marketing and cloud solutions tailored for the automotive dealership sector. As part of the betzemeier group, audaris offers a comprehensive suite of services including vehicle management software, digital marketing, image and video solutions, dealership websites with integrated online trade, and B2B sales platforms. The company positions itself as a digital full-service provider for automotive dealers, leveraging cloud technologies and innovative marketing tools to enhance lead generation and operational efficiency. Technically, the website employs modern web technologies such as jQuery, Foundation CSS framework, Google Tag Manager, and Google reCAPTCHA Enterprise, indicating a mature digital infrastructure. The site is hosted on Schlundtech servers, uses HTTPS with strong SSL configuration, and implements a detailed cookie consent mechanism compliant with GDPR. The website is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement, use of reCAPTCHA to prevent abuse, and granular cookie consent. However, it lacks explicit security policies, incident response contacts, and security.txt files, which are recommended for enhanced transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, audaris GmbH presents a credible, professional online presence with strong business and technical foundations. The company’s integration within the betzemeier group and visible trust indicators such as awards and Google Partner status further reinforce its market position. Strategic improvements in security transparency and incident response readiness would enhance its security posture and stakeholder trust.

I

ilogs smartwear GmbH

mynextring.com

47

MYnextRING is a health-focused wearable technology company offering a smart ring that monitors various biometric data such as heart rate, sleep, stress, and activity. The company positions itself as a premium European brand with a focus on privacy and user-friendly design. The website is well-developed using WordPress and WooCommerce, integrating modern marketing and analytics tools. Security posture is good with HTTPS and domain transfer protection, though DNSSEC is not enabled and cookie consent mechanisms are missing. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional and trustworthy digital presence suitable for its target market.

A

Altera

altera.hr

48

Altera is a Croatian company specializing in the rental and sale of tents and pagodas for weddings, corporate events, sports events, and fairs. With over 20 years of experience, the company positions itself as a reliable partner for outdoor event solutions, offering additional equipment and services to support event organization. The website is professionally designed using WordPress with the Avada theme and includes modern plugins such as Slider Revolution and Yoast SEO, indicating a mature digital infrastructure. Security measures include HTTPS enforcement, reCAPTCHA integration, and standard security headers, reflecting a good security posture. However, the absence of explicit privacy and terms of service policies suggests room for improvement in compliance and transparency. Overall, the website is trustworthy, content-rich, and well-optimized for SEO and mobile devices, supporting Altera's market presence in the hospitality and event services sector.

C

Catering Team Majetić

cateringteammajetic.hr

46

Catering Team Majetić is a well-established catering company based in Zagreb, Croatia, with a strong family tradition dating back to 1998. The company specializes in high-quality catering services for weddings, corporate events, and private celebrations, operating both locally and across Europe. Their business model includes owning exclusive venues and collaborating with prestigious locations, positioning them as a premium service provider in the hospitality sector. The website reflects a professional and consistent brand image, supported by customer testimonials and media coverage. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern tracking tools like Google Tag Manager and Facebook Pixel integrated. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks some recommended security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.

O

Obiteljsko Poljoprivredno Gospodarstvo Damjanić Ivan

damjanic.eu

45

Damjanić Wines is a small family-owned winery based in Fuškulin near Poreč, Croatia, with a long tradition dating back to the early 18th century. The company produces a variety of wines and olive oil, offers wine tastings by appointment, and operates a webshop for direct sales. Their market position is that of a leading regional winery in Istria, targeting wine consumers, tourists, and distributors. The website is multilingual and professionally designed to support their business model and customer engagement. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various frontend libraries. Hosting is provided by a Croatian hosting company, and the site uses HTTPS with a cookie consent mechanism to comply with GDPR. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business information, indicating a legitimate and trustworthy domain. Overall, the website presents a professional and trustworthy online presence for a small winery business, with good privacy compliance and moderate security posture. There are opportunities to enhance security headers and incident response information to further improve trust and compliance.

V

Visit Karlovac

visitkarlovac.hr

48

Visit Karlovac is the official tourism website for the city of Karlovac, Croatia, providing comprehensive information about cultural, natural, gastronomic, and event experiences to visitors. The site targets tourists and visitors interested in exploring the city and offers resources such as event calendars, travel planning guides, and detailed descriptions of local attractions. The website is well-positioned as an authoritative source for tourism in Karlovac, supported by active social media channels and structured data that enhances search engine visibility. Technically, the website is built on WordPress using Elementor, enhanced with performance and SEO plugins such as WP Rocket and Rank Math. It leverages Cloudflare for DNS and likely CDN services, ensuring fast loading times and good mobile optimization. The site implements HTTPS with a strong SSL configuration and includes a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and uses reputable plugins, but explicit security headers are not fully verified in the HTML content. There is no visible incident response or vulnerability disclosure policy, which could be improved to enhance trust and security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, Visit Karlovac presents a professional, secure, and privacy-compliant tourism platform with excellent content quality and user experience. Strategic improvements in security header implementation and incident response transparency would further strengthen its security maturity.

Q

Qualentum

qualentum.com

51

Qualentum is a Spanish company specializing in accelerating digital talent through apprenticeship and internship programs, primarily targeting junior tech and digital profiles. It operates as part of the Proeduca group and collaborates with educational institutions such as UNIR and corporate partners like VASS. The website is well-structured, professionally designed, and optimized for SEO, providing clear information about its services and target audiences. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, although the business presence and content suggest a legitimate operation. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, with Google Tag Manager integrated for analytics. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website presents a professional and trustworthy front for a medium-sized education and technology business, but improvements in transparency, privacy compliance, and domain registration clarity are recommended to enhance trust and security.

O

Ordinalo

ordinalo.net

52

Ordinalo is an Italian-based software service provider specializing in take away and food delivery management solutions for restaurants and food businesses. The company offers a comprehensive SaaS platform including a website, mobile apps for Android and iOS, order management, delivery rider coordination, digital menus with QR codes, and marketing tools such as push notifications. Ordinalo positions itself as a niche player enabling restaurants to disintermediate from large food delivery platforms and build direct customer relationships. The website is professionally designed, content-rich, and targets small to medium-sized food service businesses in Italy. Technically, the site uses modern web technologies and integrates analytics and tracking tools, but lacks some advanced security headers and a published security policy. The WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility is supported by clear contact information, client logos, and active social media presence. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR awareness. Overall, Ordinalo presents a solid digital presence with room for security and compliance improvements.

U

University of York

york.ac.uk

68

The University of York is a prestigious UK academic institution, part of the Russell Group, offering outstanding teaching and research services. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, researchers, and academic staff. The site is well-branded and professionally maintained, emphasizing its academic reputation and community engagement. Technically, the site employs modern web technologies and multiple analytics and marketing tools to optimize user experience and engagement. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain and website present a trustworthy and credible academic entity.

P

Public Library of Science (PLOS)

plosmedicine.org

72

PLOS Medicine is a leading open-access medical journal operated by the Public Library of Science, a reputable non-profit academic publisher based in the United States. The website serves as a platform for disseminating peer-reviewed medical research and commentary, targeting researchers, clinicians, and healthcare professionals globally. The business model focuses on open-access publishing, supported by article processing charges and institutional funding, positioning PLOS Medicine as a key player in the academic publishing industry. Technically, the website employs a modern technology stack including jQuery, Foundation framework, and integrates analytics and marketing tools such as Google Analytics, New Relic, and HubSpot. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS, implements multiple security headers, and maintains secure cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure policy and incident response contact information suggests areas for improvement in transparency and security readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. The domain WHOIS data is privacy protected but consistent with the organization's branding and reputation. The risk profile is low, with recommendations focusing on enhancing security policies and disclosure practices to further strengthen trust and compliance.

A

American College of Physicians

annals.org

65

Annals of Internal Medicine is a reputable medical journal published by the American College of Physicians, targeting healthcare professionals and researchers in internal medicine. The website offers a wide range of peer-reviewed articles, clinical guidelines, and educational content, positioning itself as a leading source in the medical publishing industry. The business model is primarily subscription-based with additional revenue from advertising and continuing medical education offerings. The site demonstrates consistent branding and a professional presentation aligned with its parent organization.

C

Carletta Ltd.

pin-up-casinos.mx

55

Pin-Up Casino México operates as a licensed online gambling platform targeting Mexican players with a broad offering of casino games, sports betting, and promotional bonuses. The business is registered offshore under Carletta Ltd. in Cyprus, with a Curazao gambling license ensuring regulatory compliance. The website is professionally designed, mobile-optimized, and provides a secure user experience with SSL encryption and certified RNG for fair play. Customer support is available 24/7, and the platform offers multiple payment methods including cryptocurrencies. Technically, the site is built on WordPress with Bootstrap framework, leveraging Cloudflare for DNS and CDN services. It employs modern analytics tools such as Google Analytics and Microsoft Clarity for user behavior tracking. Security best practices are mostly followed, though explicit security headers and incident response policies are absent. Privacy compliance is basic, with cookie consent implemented but limited GDPR indicators. Overall, the security posture is solid with no critical vulnerabilities detected. The domain is newly registered compared to the business founding date, which may indicate a recent rebranding or regional expansion. The platform maintains high trustworthiness through licensing, transparent business information, and positive user testimonials. Strategic improvements in privacy compliance and security policy transparency would enhance the platform's credibility further.

Z

Zavičajni muzej Ogulin

zavicajni-muzej-ogulin.hr

47

Zavičajni muzej Ogulin is a Croatian cultural heritage museum focused on preserving and presenting the history and culture of the Ogulin region. The museum offers diverse collections including archaeological, ethnographic, and artistic exhibits, alongside educational programs and virtual tours. It serves a broad audience including local residents, tourists, and students, positioning itself as a key regional cultural institution. The website reflects a small-sized non-profit organization with a clear mission and consistent branding. Technically, the website is built on WordPress using the Enfold theme, hosted by Hostinger. It employs modern web technologies such as jQuery and integrates Facebook SDK for social media features. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. The presence of cookie consent and privacy policy pages indicates good digital maturity and compliance with GDPR. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers which could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The absence of a security policy or incident response contact suggests room for improvement in security governance. The WHOIS data aligns well with the website's Croatian identity and business type, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its cultural and educational purpose. Strategic improvements in security headers and incident response readiness would further strengthen its security posture.

A

Aurora Colapis

aurora-experience.com

56

Aurora Colapis operates the Aurora River Experience, offering unique cultural and historic river boat tours on the traditional Žitna lađa Zora in Croatia. The business targets tourists and local groups seeking authentic river experiences, team building events, and private parties. The website is professionally designed using WordPress with WooCommerce and Elementor, integrating booking and e-commerce functionalities. The technical infrastructure is modern and includes Google Analytics and Ads for marketing and tracking. Security posture is adequate with HTTPS and reCAPTCHA, but lacks DNSSEC and some security headers. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the business presents a trustworthy and niche tourism offering with solid digital presence.

E

Exevio Ltd.

exevio.hr

55

Exevio Ltd. is a Croatian-based small technology company specializing in corporate IT solutions including web development, loyalty platforms, app and game development, and quality assurance services. Founded in 2013, the company positions itself as a quality-focused partner for businesses seeking tailored IT solutions. Their website reflects a professional and consistent brand image, supported by ISO 9001 and ISO 27001 certifications and EU funding partnerships, enhancing their credibility in the market. Technically, the website employs modern web technologies such as jQuery and integrates Google Analytics and Tag Manager for data insights. The site is mobile optimized with good SEO practices, though some improvements in accessibility and security headers could be made. Hosting details are limited but the domain is registered with NameCheap and secured with HTTPS. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. No incident response or vulnerability disclosure policies are published, which could be improved to enhance trust. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Overall, the website and business present a low-risk profile with strong business credibility and moderate technical maturity. Strategic improvements in security policies and technical hardening are recommended to further strengthen their posture.

F

Fakat

fakat.eu

41

Fakat is a Croatian event agency specializing in comprehensive ideation, organization, and production services for a wide range of events including campaigns, festivals, concerts, exhibitions, corporate events, conferences, and sports events. The company positions itself as a full-service partner offering turnkey solutions and hardware rental with professional staffing. The website is well-structured, professionally designed, and targets businesses and individuals seeking event management services. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Gumby framework, with Google Analytics integrated for visitor tracking. However, there is no evidence of a CMS or hosting provider details. Security posture is moderate with no visible security headers or HTTPS verification, and privacy compliance is low due to missing privacy and cookie policies. Contact information is clearly presented, including company email and phone, along with active social media profiles. WHOIS data is unavailable due to EURid privacy policies, but no suspicious indicators are present. Overall, the site is functional and professional but would benefit from improved security and privacy compliance.

S

Suzuki

suzuki.hr

49

Suzuki.hr is the official Croatian website representing Suzuki automobiles and motorcycles. The site provides information about Suzuki vehicles with a focus on affordability and quality, targeting general consumers interested in transportation solutions. The website is built on WordPress with modern SEO practices, including structured data and social media integration, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, demonstrating awareness of privacy compliance requirements. However, the absence of a privacy policy and contact information limits full compliance and user trust. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response contacts. Overall, the site is legitimate and professionally maintained but would benefit from enhanced privacy and security disclosures.

T

Turistička Zajednica Varaždinske Županije

turizam-vzz.hr

52

The website turizam-vzz.hr serves as the official tourism portal for Varaždin County in Croatia, managed by the regional tourism board Turistička Zajednica Varaždinske Županije. It provides comprehensive information about local destinations, cultural heritage, accommodation options, events, and tourism offers, targeting tourists and visitors interested in exploring the region. The site is positioned as a regional governmental/non-profit entity focused on tourism promotion. Technically, the website is built on Joomla CMS using Bootstrap, jQuery, and other common web technologies. It features responsive design and moderate performance, with good SEO and basic accessibility features. The site employs HTTPS and includes a cookie consent mechanism, demonstrating awareness of GDPR requirements, though it lacks a clearly published privacy policy and terms of service. From a security perspective, the site uses HTTPS but lacks important security headers and does not publish security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness. Overall, the site is professional and trustworthy but could improve its security posture and privacy compliance documentation.

V

Varaždinska županija

varazdinska-zupanija.hr

44

Varaždinska županija operates as the official regional government portal for the Varaždin County in Croatia, providing a broad range of public services and information to its citizens. The website offers comprehensive content including administrative details, public tenders, news, multimedia, and support programs. It targets residents and stakeholders within the region, positioning itself as a trusted government information source. The business model is centered on public service and transparency, with a medium-sized organizational footprint typical of regional government entities. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, ensuring a responsive and accessible user experience. The site incorporates accessibility tools and maintains good SEO and mobile optimization standards. Performance is moderate, with no critical technical issues detected. The infrastructure supports secure HTTPS connections and employs modern web standards. From a security perspective, the site demonstrates a strong posture with HTTPS enforcement, security headers, and secure form handling. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of a dedicated security policy page, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in security transparency and incident readiness. Overall, the website is a professional, trustworthy, and secure government portal with high content quality and user experience. Strategic enhancements in security policy publication and incident response communication would further strengthen its security maturity and public trust.