Security Directory

A

AFS Intercultural Programs

afs-egypt.org

66

AFS Egypt is a regional branch of AFS Intercultural Programs, a well-established international non-profit organization focused on intercultural learning and global citizenship through study abroad, hosting international students, volunteering, and scholarships. The website demonstrates a mature digital presence with a WordPress CMS, modern web technologies, and integration of multimedia content and social media channels. The site is well-structured, mobile-optimized, and SEO-friendly, providing comprehensive information and resources for students, volunteers, and host families. From a security perspective, the website employs HTTPS, Google reCAPTCHA, and security best practices, although explicit security policies and incident response contacts are not visible. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. The WHOIS data is privacy protected, which is typical for organizations of this nature, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional image consistent with its educational and non-profit mission. The technical infrastructure is solid, though there is room for improvement in accessibility and explicit security disclosures. The risk profile is low, with no critical vulnerabilities or red flags identified.

I

ISNO IT s.r.o.

mojeodpadky.cz

63

The website www.mojeodpadky.cz represents ISNO IT s.r.o., a Czech company providing a motivational and evidential system for waste management called MESOH. The company targets municipalities and citizens to promote efficient waste sorting and reduce waste production, offering services that help reduce annual waste fees. The platform is well-established with over 250,000 users and more than 100 municipalities involved, positioning it as a recognized player in the Czech waste management sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Leaflet.js for mapping, and integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, Hotjar, and Smartlook. It uses hCaptcha for form security and appears mobile-optimized with good SEO practices. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and implements spam protection on forms. While no explicit security headers were detected, no vulnerabilities or exposed sensitive data were found in the HTML content. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. The absence of WHOIS data reduces domain transparency and trust from a registration standpoint, but the website content and business information are professional and credible. Overall, the website is safe, well-designed, and serves a clear business purpose in environmental sustainability. Recommendations include adding security headers, publishing vulnerability disclosure and incident response policies, and improving WHOIS transparency to enhance trustworthiness.

B

BitWave Consulting s.r.o.

pohorelicko.cz

49

Pohořelicko.cz is a regional online portal operated by BitWave Consulting s.r.o., serving the Pohořelicko region in the Czech Republic. The portal offers a comprehensive range of services including regional news, event calendars, job listings, classifieds, real estate offers, and a business directory. It targets local residents and businesses, aiming to support community engagement and regional development. The website is part of a larger network of regional portals, enhancing its reach and relevance. Technically, the website employs a modern technology stack featuring Bootstrap 4.5.3, jQuery, Google Tag Manager, and Google reCAPTCHA, ensuring a responsive and interactive user experience. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, suggesting an area for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the portal demonstrates a solid digital presence with good content quality and privacy compliance. The absence of WHOIS data limits domain trust assessment, but the professional presentation and operational features indicate a legitimate and functional regional service.

J

Justitsministeriet

justitsministeriet.dk

11

Justitsministeriet is the official Danish Ministry of Justice responsible for overseeing the justice system and related authorities in Denmark. The website serves as a comprehensive portal providing information about the ministry, the current minister Peter Hummelgaard, press releases, research reports, career opportunities, and links to subordinate justice authorities. It targets Danish citizens, legal professionals, government employees, and researchers. The ministry manages approximately 20,000 employees and plays a critical role in the Danish government infrastructure. Technically, the website is built on WordPress using the GeneratePress theme, enhanced with jQuery and Swiper.js for interactive elements like carousels. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured data. It uses HTTPS with a strong SSL configuration, though some security headers could be improved. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present on the site, which could be enhanced for transparency. Privacy compliance is good, with clear privacy and cookie policies, though a cookie consent mechanism is not evident. Contact information is clearly provided with official email, phone, and physical address. Overall, the website is trustworthy, professional, and well-maintained, reflecting the stature of a government ministry. The lack of WHOIS data is noted but does not detract from the site's legitimacy given its official content and domain. Strategic recommendations include adding security headers, incident response details, and cookie consent mechanisms to further strengthen security and compliance.

G

Gativa

gatemait.cz

48

Gativa is a Czech-based company specializing in the implementation and integration of Helios ERP systems and related business automation solutions. Established in 1992, the company positions itself as a trusted partner for small to large enterprises in manufacturing, trade, and services sectors, offering tailored ERP solutions, consulting, and training. Their product portfolio includes Helios Inuvio and Nephrite ERP systems, as well as complementary solutions like MES and WMS. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on business process efficiency and automation. Technically, the website is built on WordPress using modern plugins such as Oxygen Builder, Yoast SEO, and Complianz GDPR for compliance. It employs Google Tag Manager for analytics and tracking, and the site is well-optimized for mobile and SEO. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. The WHOIS data is unavailable, which slightly reduces domain trustworthiness; however, the website content and business information are consistent and professional. No signs of malicious activity or content blocking were detected. Overall, Gativa demonstrates a solid business and technical foundation with room for improvement in transparency around security policies and incident response. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a security.txt file to improve vulnerability disclosure transparency.

G

Gatema PCB a.s.

gatemapcb.cz

53

Gatema PCB a.s. is a Czech Republic-based manufacturer specializing in the production of printed circuit boards (PCBs), including prototypes and small series. Established in 1994, the company holds a strong market position in Europe as one of the leading producers of prototype PCBs, supported by certifications such as AS9100 for aerospace, defense, and space industries. Their product portfolio includes multi-layer PCBs, hybrid PCBs, flex and rigid-flex PCBs, HDI PCBs, special boards, LED and aluminum PCBs, and serial PCB production. The company targets development offices and assembly firms, emphasizing speed, quality, and customer support.

K

Kulturreferat Garching

buergerhaus-garching.de

10

The website www.kultur-garching.de serves as the official cultural portal for the town of Garching, Germany, focusing on promoting cultural events, ticket sales, and community engagement through the Bürgerhaus Garching. It targets local residents and visitors interested in cultural activities, offering a comprehensive event calendar and ticket purchasing options via a reputable third-party platform. The site is well-positioned as a local government-affiliated cultural service provider with a clear and consistent brand presence. Technically, the website employs modern frontend technologies including Angular, jQuery, and Slick Carousel, supported by a CMS platform (EGOTEC). It is hosted on SchlundTech infrastructure, ensuring reliable performance and good mobile responsiveness. SEO and accessibility are basic but functional, with room for improvement in accessibility features and SEO optimization. From a security perspective, the site uses HTTPS and includes some security best practices such as email obfuscation and standard security headers. However, it lacks a security.txt file and explicit Content-Security-Policy headers, which are recommended for enhanced security posture. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected, which is a gap for GDPR compliance. Overall, the website is trustworthy and professional, with a high business credibility score. Strategic improvements in privacy compliance and security headers would further strengthen its security posture and user trust.

M

MSM Werbeagentur & Verlag GmbH

friesenanzeiger.de

9

Friesenanzeiger is a regional monthly magazine operated by MSM Werbeagentur & Verlag GmbH, focusing on news, events, culinary, and lifestyle content for the German coastal region. The website serves as an online portal to complement the print publication, targeting residents and visitors interested in regional culture and happenings. The business model revolves around publishing and advertising services with a clear regional focus. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, hosted by Schlund Technologies, and uses Google Analytics for visitor tracking. The site is mobile optimized with a professional design and consistent branding. Security-wise, the website uses HTTPS but lacks security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. WHOIS data is transparent and consistent with the business claims, supporting domain legitimacy. Overall, the website is functional and professional but could enhance privacy compliance and security best practices.

B

B & B Messe und Event Catering GmbH & Co. KG

messehusum-catering.de

47

B & B Messe und Event Catering GmbH & Co. KG operates a professional catering service specializing in trade fairs and corporate events in Husum, Germany. Their website offers full-service catering solutions including food, beverages, and equipment rental with an easy online booking system. The company positions itself as a regional specialist with strong partnerships in the hospitality and beverage sectors. The website is well-branded, consistent, and targets business clients organizing events. Technically, the site is built on WordPress with WooCommerce and several plugins supporting multilingual content, SEO, and user interaction. The hosting provider is inferred as webgo.de based on nameservers. Security posture is good with HTTPS and captcha protection on forms, though security headers and explicit policies are absent. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policy. Overall, the site is professional, trustworthy, and functional with moderate performance and good mobile optimization.

M

Messe Husum & Congress

domizil-husum.de

10

DOMIZIL Husum is a well-established trade fair platform targeting hosts, holiday home operators, and tourism service providers in northern Germany. Organized by Messe Husum & Congress, it serves as a central event for industry networking and showcasing trends. The website is built on TYPO3 CMS and integrates modern consent management tools like Cookiebot to ensure GDPR compliance. Social media channels on Instagram, Facebook, and LinkedIn support community engagement. The next event is planned for 2026, reflecting a strategic realignment to better serve industry needs. Technically, the site uses standard web technologies with moderate performance and good mobile optimization. Security posture is solid with HTTPS and consent management, though security headers and explicit policies could be improved. Overall, the site presents a professional and trustworthy digital presence for its niche audience.

M

Magic.Res GmbH

magicres.de

52

Magic.Res GmbH operates a specialized web-based Computer Reservation System (CRS) with integrated price comparison functionalities tailored for the European tourism market. Their platform serves travel agencies, tour operators, and related service providers by aggregating and enabling booking of diverse tourist products. The company positions itself as a niche technology provider with a focus on efficiency and comprehensive content delivery for travel professionals. Technically, the website employs established web technologies including jQuery and Bootstrap, delivering a moderately performant and mobile-optimized user experience. The site structure is clear and professional, though it lacks advanced SEO and accessibility features. No CMS is detected, indicating a custom or lightweight solution. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and modern web security best practices. No incident response or security policy information is publicly available, and no vulnerability disclosure or security.txt files are found. WHOIS data is minimal but consistent with the business location and domain usage. Overall, the website presents a professional and trustworthy business front with moderate technical maturity and some gaps in security and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and contact transparency would enhance trust and compliance.

G

Generali

generali.sk

56

Generali is a well-established insurance company operating in Slovakia, offering a broad range of life and non-life insurance products including travel, vehicle, and property insurance. The website positions Generali as a strong partner in the Slovak insurance market, targeting local residents seeking insurance solutions. The business model focuses on direct online insurance services with an emphasis on ease of use and accessibility from home. The company enjoys a positive reputation as indicated by a high aggregate rating from customers. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Tag Manager, Microsoft Clarity, and various tracking pixels for marketing and retargeting. The site is mobile optimized and uses HTTPS with strong security headers, reflecting a mature digital infrastructure. However, some accessibility features could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, security headers, and cookie consent management. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a published security policy, incident response information, or vulnerability disclosure program suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR, with a strong business credibility score. The risk profile is low, but strategic enhancements in security communication and accessibility would further strengthen the company's digital trustworthiness.

Y

YOUPLUS

youplus.cz

59

YOUPLUS is a Czech Republic based life insurance provider offering straightforward, paperless life insurance products targeted at general consumers seeking transparent insurance solutions. The company operates a professional website built on WordPress with Divi theme, supporting Czech and Slovak languages, and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent. The technical infrastructure is hosted on Microsoft Online nameservers, indicating a reliable hosting environment. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. No blocking or WAF mechanisms interfere with content accessibility, and WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, though improvements in explicit contact information and security documentation are recommended.

S

Saito Media

saitomedia.eu

47

Saito Media is a small technology-focused creative solutions company specializing in brand development, content marketing, graphic design, web and app development, UX design, and creative advertising. The company targets businesses seeking to meet digital transformation goals with innovative and tailored digital strategies. The website demonstrates a professional market position with over 5 years of experience and a high client satisfaction rate, supported by a portfolio of recent projects. Technically, the site is built on WordPress using Elementor and the Porto theme, leveraging modern web technologies such as jQuery and Bootstrap. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but could be improved by implementing additional security headers and publishing security policies. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR indicators. Overall, the website is trustworthy, professional, and well-structured, supporting the company’s business credibility effectively.

Z

Základní škola a gymnázium Navis

msratolest.cz

54

Základní škola a gymnázium Navis is a private educational institution in the Czech Republic offering preschool, primary, and gymnasium level education. The school emphasizes values-based education founded by families, aiming to develop children and students intellectually, personally, and spiritually. Their website reflects a professional and modern digital presence with clear navigation and comprehensive information about their educational offerings and community activities. The institution targets students, parents, and prospective families seeking quality education in a nurturing environment. Technically, the website is built on the Dmp.Cms.Core platform, utilizing modern web technologies such as jQuery, Bootstrap, and Owl Carousel. Media assets are hosted on Microsoft Azure Blob Storage, indicating a reliable hosting infrastructure. The site is mobile-optimized and includes SEO best practices, cookie consent management, and analytics integration via Google Analytics and Google Tag Manager. From a security perspective, the site enforces HTTPS and uses anti-forgery tokens in forms, demonstrating good baseline security hygiene. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious content were detected, and the site is free from adult or questionable material. Overall, the website presents a trustworthy and professional front for the educational institution, though the absence of WHOIS data limits full domain legitimacy assessment. Strategic recommendations include adding security headers, publishing security policies, and enhancing incident response transparency to strengthen security posture and stakeholder confidence.

Q

Qualentum

edix.com

50

Qualentum is a Spanish company specializing in accelerating digital talent through apprenticeship-style programs that combine practical learning with paid work. It operates as part of the Proeduca group and targets both junior technology candidates and companies seeking to develop tech talent. The website is professionally designed using WordPress and Elementor, with good SEO and structured data implementation. However, the absence of WHOIS data raises questions about domain registration legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is safe, professional, and focused on education and technology talent development.

F

Fitek Lietuva

fitek.lt

44

Fitek Lietuva is a technology company specializing in digital accounting and invoice management automation solutions targeted primarily at businesses in Lithuania and neighboring regions. The company offers a comprehensive platform that includes smart data extraction, invoice approval workflows, accounting automation, e-invoicing, expense management, and mobile applications. Their multilingual web presence and client testimonials indicate a solid regional market position and a focus on B2B SaaS services. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and hosted on professional infrastructure with AWS DNS. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy requirements, though it would benefit from enhanced transparency in privacy and security policies.

П

ПРОФИ КРЕДИТ България ЕООД

proficredit.bg

48

PROFI CREDIT Bulgaria EOOD operates as a fast credit provider offering installment loans ranging from 100 BGN to 5000 BGN with flexible repayment terms. The company targets Bulgarian individuals aged 18 to 80, providing quick loan approvals with minimal formalities. The website demonstrates a solid market position with over 17 years of experience and multiple physical offices across Bulgaria. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics. Security posture is good with HTTPS enforced and GDPR compliance evident through privacy and cookie policies. No critical vulnerabilities were detected, and the site maintains trust through certifications and customer testimonials. Overall, the website is professional, secure, and compliant, supporting the company's credibility in the Bulgarian financial services market.

P

PROFI CREDIT Polska S.A.

proficredit.pl

62

PROFI CREDIT Polska S.A. is a well-established financial services company operating in Poland since 2004, specializing in non-bank consumer loans up to 25,000 PLN. The website presents a professional and user-friendly platform offering quick loan applications with minimal formalities, supported by customer testimonials and partner affiliations. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with comprehensive GDPR-aligned policies and a clearly identified Data Protection Officer. Overall, the site reflects a credible and trustworthy financial service provider with good digital maturity.

S

STABILITA, d.d.s., a.s.

stabilita.sk

49

STABILITA, d.d.s., a.s. is a Slovak financial services company specializing in supplementary pension savings under the third pillar system. With over 20 years of market presence, it offers a range of pension funds and investment advisory services, targeting Slovak residents preparing for retirement. The website reflects a mature digital presence with dedicated portals for participants, employers, and beneficiaries, and provides comprehensive information about its funds and services. The company maintains a strong market position as a trusted pension fund provider in Slovakia. Technically, the website employs a modern JavaScript stack including jQuery, Chart.js, and various UI libraries, alongside analytics and marketing tools such as Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized and features a detailed cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate bot attacks. Cookie consent is granular and user-friendly. However, explicit security headers and a published security policy or incident response contacts are not evident, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting the company’s credibility. Strategic enhancements in security transparency and accessibility could further strengthen trust and user experience.

P

Pillow.Sk s.r.o.

pillow.sk

60

Pillow.Sk s.r.o. operates an e-commerce website specializing in personalized decorative pillows and premium posters, targeting customers seeking unique and high-quality photo gifts. The company emphasizes quality materials and craftsmanship, offering products with custom photo prints and original designs. The website is well-branded and consistent with the company's retail focus in Slovakia, founded in 2013. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and themes to deliver a responsive and user-friendly experience. Security posture is solid with HTTPS, DNSSEC, and domain transfer protections, though additional HTTP security headers could enhance protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional online retail presence.

Y

YOUPLUS

youplus.sk

59

YOUPLUS is a Slovak-based life insurance provider specializing in paperless, transparent life insurance products targeted at Slovak-speaking customers. The company operates a professional website built on WordPress with the Divi theme, offering a user-friendly and mobile-optimized experience. The website integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. The domain is registered since 2018 with consistent WHOIS data, supporting the legitimacy of the business. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility, making it a trustworthy platform for its target audience.

M

mBank S.A.

mbank.sk

65

mBank S.A. operates a comprehensive online banking platform targeting individual customers in Slovakia. The website offers a wide range of financial services including bank accounts, loans, mortgages, investments, insurance, and contactless payment options. The bank positions itself as a modern, customer-centric online bank with over 300,000 clients for its main account product, emphasizing ease of use, security, and accessibility. The site is professionally designed with clear navigation and mobile optimization, supporting a seamless user experience.

C

Conseq Investment Management

conseq.sk

61

Conseq Investment Management operates as a reputable financial services company specializing in investment management products and services primarily targeting retail and qualified investors in Slovakia. The company offers a variety of investment programs including 3D Invest, Active Invest, and real estate funds, supported by a 17-year track record indicating market experience and stability. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on ASP.NET WebForms with Kentico CMS, integrating modern JavaScript libraries such as jQuery and Highcharts for interactive content. It employs Google Tag Manager for analytics and cookie-script.com for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. From a security perspective, the website enforces HTTPS, includes standard security headers, and implements CSRF tokens and captchas on forms to mitigate common web threats. However, explicit security policies and incident response contacts are not present, suggesting room for improvement in transparency and readiness. No critical vulnerabilities or suspicious content were detected. Overall, Conseq Investment Management's website demonstrates a solid security posture, good privacy compliance, and credible business representation. The site is safe for general audiences and aligns well with industry standards for financial services online presence.

Krytoland is an e-commerce retailer specializing in mobile phone accessories including cases, tempered glass, power banks, and smart watches, primarily targeting consumers in Slovakia and the Czech Republic. The website presents a well-structured product catalog with clear navigation and a consistent brand identity. Technically, the site uses modern web technologies such as jQuery, Font Awesome, and a custom e-commerce platform (Fonio), with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some security best practices observed, but lacks explicit security headers and visible privacy or cookie policies, which are critical for compliance and user trust. No blocking or WAF mechanisms interfere with content accessibility. WHOIS data is privacy protected but consistent with a legitimate commercial entity. Overall, the site is safe for general audiences and professionally presented, though improvements in privacy compliance and security headers are recommended.

S

Schlaraffen Freunde – jetzt Schlaraffentreffpunkte finden

schlaraffen-freunde.com

56

The website www.schlaraffen-freunde.com represents a German-language community platform focused on friendship, art, and humor under the Schlaraffia® brand. It provides a service to find Schlaraffentreffpunkte (meeting points) for its members. The site uses a modern technical stack including Contao CMS, Bootstrap 4, jQuery, and Cookiebot for privacy compliance. It integrates multiple third-party services such as Google Analytics, Vimeo, and Facebook for analytics, marketing, and video content. The website is well designed with good mobile optimization and clear navigation, targeting a general audience interested in cultural community activities. From a security perspective, the site enforces HTTPS and uses CSRF tokens for form security. Cookie consent is managed comprehensively via Cookiebot, indicating good GDPR compliance. However, the absence of explicit security policies, terms of service, and contact information for incident response reduces the overall security posture. The WHOIS data is missing, which raises concerns about domain legitimacy and reduces trustworthiness despite the professional appearance. Overall, the website is functional and compliant with privacy regulations but would benefit from enhanced transparency regarding business and security policies. The lack of WHOIS data and contact details suggests a need for improved business credibility and trust signals.

L

Lion's Eye Apartments

lionseyeapartments.com

9

Lion's Eye Apartments is a luxury hospitality business offering upscale apartment rentals in the prestigious Camps Bay area of Cape Town, South Africa. The business targets tourists and travelers seeking premium accommodation with scenic views and personalized services such as on-site management and chef-arranged meals. The website is built on WordPress with Elementor, providing a modern and responsive user experience. While the site is professionally designed and contains clear contact information and social proof through testimonials, it lacks key privacy and security policies, which impacts its compliance posture. The domain is newly registered in 2024, consistent with the business's apparent founding date, supporting legitimacy. Security practices could be improved by enabling DNSSEC, adding security headers, and publishing vulnerability disclosure information.

N

NightsBridge

nightsbridge.com

10

NightsBridge is a medium-sized South African company providing a comprehensive SaaS property management solution tailored for accommodation providers across Africa. Their platform integrates front desk booking, channel management, direct booking engines, payment solutions, and PMS integration, supported by free training and customer support. The company positions itself as a trusted partner for thousands of hospitality businesses, emphasizing ease of use, increased direct bookings, and broad connectivity to online channels. Technically, the website is built on WordPress with a modern tech stack including popular plugins and integrations such as Yoast SEO, Google Analytics, Intercom, and Slider Revolution. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is solid with HTTPS enabled and no exposed sensitive data, but could be improved by adding explicit security headers and cookie consent mechanisms. The security posture is generally good, with no visible vulnerabilities or exposed sensitive information. However, the absence of a cookie consent banner and explicit privacy compliance features indicates room for improvement in regulatory adherence. Incident response and vulnerability disclosure information are not publicly available, which could be enhanced to build trust. Overall, the website and business present a professional and trustworthy image with strong business credibility and technical implementation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to further strengthen the security posture and regulatory compliance.

C

Castr - Live Video Streaming

castr.com

71

Castr is a mature technology company specializing in live video streaming and video hosting solutions, offering enterprise-grade services including multi-streaming and pre-recorded live events. The company positions itself as a leading provider in the live streaming market, targeting content creators and enterprises globally. The website is built on WordPress with modern frameworks like Elementor and Bootstrap, integrating multiple analytics and marketing tools to support business operations and user engagement. Security posture is adequate with HTTPS enabled and domain transfer protections, but could be enhanced by enabling DNSSEC and implementing security headers. Privacy compliance is minimal with no explicit privacy or cookie policies detected, which may pose compliance risks. Overall, the website is professional, well-branded, and trustworthy, but would benefit from improved transparency in privacy and security policies.

C

Campaign Monitor

campaignmonitor.com

57

Campaign Monitor is a well-established email marketing platform founded in 2004 and currently owned by Marigold. The company provides a comprehensive SaaS solution for businesses to create, send, and optimize email marketing campaigns, including features such as segmentation, personalization, marketing automation, transactional emails, and analytics. The website reflects a mature digital presence with strong branding, customer trust signals, and a broad set of integrations and marketing tools. Technically, the site is built on WordPress with modern frameworks like Tailwind CSS and integrates multiple analytics and tracking services, demonstrating a high level of digital maturity. Security-wise, the site enforces HTTPS, uses security headers, and implements reCAPTCHA, but lacks publicly disclosed security policies or incident response contacts, which could be improved. Overall, the website is professional, secure, and compliant with privacy regulations, though the absence of WHOIS data is a minor concern that does not detract significantly from its legitimacy.

The website represents a professional medical conference organized by Swiss medical societies specializing in pneumology, thoracic surgery, and sleep medicine. It serves as an information and registration portal for the SSP/SSTS - SSSSC Joint Annual Meeting 2025 in Geneva, Switzerland. The business model focuses on event organization and professional collaboration within the healthcare sector, targeting medical specialists primarily in Switzerland and Europe. The site is managed by Congrex Switzerland Ltd., a recognized event management company. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, jQuery, and Swiper.js. It demonstrates good mobile optimization, clear navigation, and SEO best practices. GDPR compliance is evident through integrated consent management tools and a clear privacy policy. The site uses HTTPS with strong SSL configuration, though security headers could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The presence of consent management and privacy policies aligns with GDPR requirements. However, explicit security policies and incident response contacts are not publicly disclosed, which could be enhanced. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

T

Tag4u

tag4u.fr

42

Tag4u is a French small business specializing in the e-commerce retail of personalized thermocollant and autocollant labels for clothing and objects. Their target audience includes parents, schools, retirement homes, and professional institutions, positioning them in a niche market focused on customized labeling solutions. The website presents a professional and consistent brand image with clear product offerings and pricing. Technically, the site is built on WordPress with WooCommerce and uses modern technologies such as Google Analytics and Yootheme framework. Mobile optimization and SEO are well implemented, though accessibility is basic. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is missing, which slightly reduces trust but the website content and structure support legitimacy. Overall, the site is functional, professional, and trustworthy with room for improvement in security and privacy compliance.

A

ARTIO s.r.o.

artio.cz

59

ARTIO s.r.o. is a Czech technology company specializing in custom software development, open-source project implementation, e-commerce solutions, and web design services. Their website highlights a strong focus on Magento e-commerce platforms, Joomla web development, SEO optimization, and technical support services. The company targets businesses seeking tailored digital solutions and maintains a medium-sized market presence in the Czech Republic. The website content is professional and well-structured, supporting their business model with clear service offerings and product sales via an integrated e-shop. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating Google services such as Maps and Analytics. The site is mobile-optimized and demonstrates moderate performance. Security measures include HTTPS and Google reCAPTCHA on contact forms, though explicit security headers and privacy policies are not evident. Analytics usage is moderate, with standard tracking scripts in place. The security posture is generally good, with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy and cookie policies and lack of incident response information represent compliance gaps. The WHOIS data for the subdomain cms.artio.net is unavailable, which is typical for subdomains; the main domain artio.net is the registered entity, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence for ARTIO s.r.o., with recommendations to enhance privacy compliance and security header implementation to further strengthen their security and trustworthiness.

E

EUROEXPO Messe- und Kongress-GmbH

logimat-messe.de

54

LogiMAT is a leading international trade show focused on intralogistics solutions and process management, organized by EUROEXPO Messe- und Kongress-GmbH in Germany. The website presents a professional and comprehensive platform for industry professionals, offering detailed event information, expert forums, and international expansions. The technical infrastructure is based on Drupal 7 with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the site is well-structured, accessible, and trustworthy, supporting a medium-sized enterprise with a strong market position in the transportation and logistics sector.

Y

Ypsilon.Net AG

specials.de

56

Specials.de is a German-based tourism partner program operated by Ypsilon.Net AG, offering affiliate marketing services, booking tools, and advertising materials for travel products including flights, hotels, car rentals, and package tours. The company positions itself as a reliable full-service provider with in-house technology and a dedicated call center staffed by trained travel agents. The website is professionally designed, well-structured, and targets a broad audience including adults, youth, students, and travel agencies. Technically, the site uses standard web technologies such as jQuery and custom scripts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and comprehensive legal documentation.

PLAWINET is a Polish IT company specializing in designing and developing software systems delivered as Software as a Service (SaaS). Their offerings include responsive websites, e-commerce stores, web applications, and dedicated IT solutions. The company targets businesses seeking IT outsourcing and SaaS solutions, positioning itself as a small but professional service provider in the technology sector. Founded in 2013, PLAWINET maintains a consistent brand presence with clear contact information and business identifiers such as VAT and REGON numbers. Technically, the website uses modern web technologies including Bootstrap 4, jQuery, and Google Analytics, providing a good user experience with mobile optimization and basic accessibility features. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

REJS Spółka z o.o. is a well-established European manufacturer specializing in furniture accessories and metal processing services, primarily serving the kitchen and wardrobe sectors. The company offers a broad range of products including drawer systems, metal and aluminum fittings, and provides advanced metal and glass processing services. Their market position is strong, supported by multiple industry awards and a professional online presence. The website is built on WordPress, leveraging modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the company demonstrates good compliance with GDPR and provides clear contact and business information, enhancing trust and credibility.

G

GAMET Sp. z o. o.

gamet.eu

41

GAMET Sp. z o. o. is a well-established Polish manufacturer specializing in decorative furniture and door fittings with over 35 years of experience. The company operates internationally, serving manufacturers, retailers, and designers, and is part of the larger Stalmot Group. Their product range includes furniture handles, knobs, hooks, feet, door handles, and technical fittings. The website is professionally designed using WordPress and Elementor, featuring multilingual support and modern web technologies. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a mature digital presence with good business credibility and compliance with GDPR regulations.

N

Nomet

nomet.pl

60

Nomet is a well-established Polish manufacturing company specializing in modern furniture accessories such as handles, baskets, bathroom and kitchen equipment, wardrobe fittings, and decorative articles. The company emphasizes its 40 years of experience, 100% Polish capital ownership, and modern production facilities, positioning itself as a trusted B2B supplier in the furniture manufacturing sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeted at furniture manufacturers and interior designers. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery, Swiper.js, Tippy.js, and Slick Carousel, along with Google reCAPTCHA for form security and Facebook Pixel for marketing analytics. The site is served over HTTPS with good SSL configuration, although security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. From a security perspective, the site demonstrates a moderate security posture with HTTPS, secure forms, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. WHOIS data is unavailable due to .pl registry policies, but the website content and business information indicate legitimacy and trustworthiness. Overall, the website presents a professional and credible business front with good technical implementation and privacy compliance. Strategic improvements in security headers, incident response transparency, and contact information visibility would further strengthen the security posture and trustworthiness of the site.

SIRO-Poland Sp. z o. o. operates as the exclusive distributor in Poland for decorative furniture accessories, including handles, knobs, LED lighting, and decorative mats. The company targets furniture manufacturers, wholesalers, retailers, and interior designers, positioning itself as a key player in the Polish furniture accessory market. The website reflects a professional business presence with clear product offerings and partner relationships. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks some security headers and formal privacy/cookie policies, which are areas for improvement. Overall, the site is trustworthy and well-maintained, supporting the company's market position.

R

RENDART sp. z o. o.

rendart.pl

40

RENDART sp. z o. o. is a specialized marketing agency focused on providing creative marketing solutions for real estate developers, particularly small to medium-sized residential investments. Established in 2014 and based in Poland, the company offers a comprehensive suite of services including website development for developers, 3D visualizations, virtual tours, branding, and printed marketing materials. The website demonstrates a strong market position with over 10 years of experience and more than 700 completed projects, supported by client testimonials and educational webinars. Technically, the website is built on WordPress with modern libraries and frameworks, ensuring good performance and mobile optimization. The security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

S

Semaco Home & Tourist

newcampsite.com

48

NewCampsite is a Polish-based hospitality business specializing in holiday rentals of modern Dutch-style mobile homes located on well-equipped campsites near beaches in Italy. The company offers vacation stays primarily in three Italian locations: Cesenatico, Ca'Savio, and Marina. Their market position is niche, targeting families and tourists seeking comfortable and nature-adjacent holiday accommodations. The website is built on Drupal 8, leveraging modern web technologies including lazy loading, slick carousels, and integrated booking widgets, reflecting a mature digital infrastructure. Security measures include HTTPS, Google reCAPTCHA v3, and GDPR-compliant cookie consent mechanisms, although DNSSEC is not enabled and some security headers are missing. Overall, the site is professional, user-friendly, and trustworthy, with positive customer reviews and clear contact information. The domain registration data aligns well with the business profile, supporting legitimacy.

Semaco Real Estate is a specialized real estate advisory and sales company operating primarily in Kraków, Poland. With over two decades of experience and a portfolio of more than 30 investments and approximately 1500 sold apartments, the company positions itself as a trusted local expert in both primary and secondary real estate markets. Their services encompass guiding clients through the entire property transaction process, including financing assistance and new development projects. The website reflects a professional and customer-focused approach, emphasizing quality housing and client satisfaction. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA, hosted likely by home.pl S.A. The site is mobile optimized and uses EstiCRM as its content management system. Performance is moderate with good SEO and accessibility basics. Tracking and marketing tools such as Google Analytics and Facebook SDK are integrated, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in hardening the website. No critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security configurations and transparency around security policies would enhance the company’s risk posture and customer trust.

T

The Dutch Selection BV

aedifai.com

56

Aedifai is a subscription-based SaaS platform specializing in real estate data and sales tracking powered by AI. It offers real-time property sales data, automated alerts, historical price trends, and AI-driven market predictions to investors, agents, and analysts. The platform is positioned as a comprehensive tool for multi-region real estate market insights with tiered pricing plans and free trials for entry-level users. Technically, the website leverages modern frameworks such as Ruby on Rails, Hotwire (Turbo and Stimulus), Tailwind CSS, and integrates analytics tools like Google Analytics and Mixpanel. The site is mobile-optimized, well-structured, and professionally designed, providing an excellent user experience. Security posture is good with HTTPS and CSRF protections, though some security headers and explicit policies are missing. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS domain registration data reduces trustworthiness and domain legitimacy verification. Overall, the website is professional, secure, and business-focused with minor gaps in security transparency and contact information.

G

Grand Hotel Heiligendamm

grandhotel-heiligendamm.de

51

Grand Hotel Heiligendamm is a premium luxury hotel located in Mecklenburg-Vorpommern, Germany, offering upscale accommodation, Michelin-starred dining, spa and wellness services, and a variety of leisure activities. The website reflects a strong market position in the hospitality sector, targeting affluent travelers seeking an elegant and relaxing seaside experience. Technically, the site is built on WordPress with Elementor and WooCommerce, integrating modern marketing and analytics tools while maintaining good performance and mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers could enhance protection. Privacy compliance is well addressed with clear GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a trustworthy and professional digital presence aligned with its luxury hospitality brand.

A

ARTIO s.r.o.

artio.net

59

ARTIO s.r.o. operates a professional website focused on open-source software implementation, programming, and e-commerce solutions, primarily using Joomla CMS and Magento platforms. The company targets businesses seeking customized open-source software and e-commerce implementations, offering a range of services including SEO optimization and internet services. The website is well-structured, professionally designed, and includes product offerings with pricing, testimonials, and contact information, indicating a mature business presence. Technically, the site leverages Joomla CMS with Bootstrap and jQuery frameworks, integrates Google Maps for location display, and uses Google Analytics and Google Tag Manager for user tracking. The contact form is protected by Google reCAPTCHA v3, enhancing spam protection. However, explicit privacy and cookie policies are absent, and no security headers were detected, suggesting areas for security and compliance improvement. The security posture is moderate with HTTPS implied but lacking visible security headers and formal policies. The absence of WHOIS data for the domain cms.artio.net raises questions about domain registration legitimacy, although the website content and branding strongly suggest a legitimate business. Overall, the site is accessible, safe, and professional but would benefit from enhanced transparency and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, publishing security and incident response policies, adding security headers, and verifying domain registration details to improve trust and compliance.

F

Faboba

faboba.com

43

Faboba is a small French technology company specializing in the development of web-based applications, primarily focusing on Joomla and Wordpress translation components and custom web development services. Their website demonstrates a professional presence with clear offerings in CMS component development, site translation, and e-commerce solutions. The company also operates or has created the Tag4U personalized labels website, indicating some diversification in digital services. Technically, the site is built on Joomla CMS using Yootheme and Hikashop, with modern JavaScript libraries like jQuery and UIkit, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data for the domain reduces trust slightly, suggesting the domain may be new or privacy protected. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security practices.

P

Pneumo

pneumo.ch

54

Pneumo.ch is the official website of a Swiss professional association dedicated to promoting respiratory health. The organization provides education, certifications, congresses, and resources primarily targeting healthcare professionals in Switzerland. The website is well-structured, multilingual (German and French), and uses modern WordPress technology with Elementor for content management. It integrates SEO and GDPR compliance tools such as Rank Math and Complianz. Security posture is solid with HTTPS and standard security headers, though explicit security policies and incident response contacts are missing. The site uses Google Analytics with a consent mechanism, reflecting moderate user tracking. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

M

med update GmbH

freshup-inneremedizin.de

64

fresh up Innere Medizin is a specialized digital education platform offering livestream refresher courses for internal medicine professionals, targeting both returning practitioners and specialists seeking to update their knowledge. The platform is positioned as a complementary offering to established medical updates such as the DGIM INTERNISTEN UPDATE, leveraging expert speakers and CME accreditation to enhance its appeal. Technically, the website is built on a modern WordPress infrastructure with a suite of plugins supporting SEO, membership management, and user engagement. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from enhanced security headers and a formal vulnerability disclosure policy. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and consistency. The site maintains a professional and trustworthy image with clear branding and partnership endorsements.