Security Directory

The Deutsche Gesellschaft für Radioonkologie e.V. (DEGRO) operates a professional and well-established website for its annual congress focused on radiooncology. The site serves as a central platform for scientific exchange, professional networking, and clinical education within the German-speaking radiooncology community. The 2026 congress is scheduled for June 25-27 in Leipzig, emphasizing interprofessional and interdisciplinary collaboration. The website is content-rich, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on the Contao CMS platform, leveraging common JavaScript libraries such as jQuery and plugins for sliders and lightboxes. It employs HTTPS with a valid SSL certificate and includes cookie consent mechanisms aligned with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published, indicating room for improvement in security transparency. From a security perspective, the site demonstrates good baseline protections including CSRF tokens and session management cookies. The absence of WHOIS data transparency reduces domain trust slightly, but the professional content and organizational affiliations support legitimacy. No critical vulnerabilities or suspicious content were detected. Overall, the site presents a low-risk profile with recommendations to enhance security headers and publish formal security policies. Strategically, the site effectively supports DEGRO's mission to foster scientific dialogue and professional development in radiooncology. It integrates social media channels and external partner links, enhancing community engagement. The lack of direct contact emails or phone numbers on the homepage suggests contact is managed via subpages or external sites, which could be improved for user convenience.

P

Promet d.o.o.

promet-split.hr

56

Promet d.o.o. is a municipal public transportation company based in Split, Croatia, providing city and suburban passenger transport services. The company operates primarily within the Split agglomeration, serving local residents and visitors. The website reflects a medium-sized municipal entity with a focus on transportation services. The business model is centered on public transit organization and operation, positioning Promet d.o.o. as a key local transport provider. Technically, the website is built on the DNN (DotNetNuke) CMS platform, utilizing jQuery and related libraries for frontend functionality. Google Analytics is integrated for traffic monitoring. The site is served over HTTPS with a good SSL configuration, indicating a secure connection. Mobile optimization and SEO practices are adequately implemented, though accessibility features are basic. From a security perspective, the site employs HTTPS and modern JavaScript libraries but lacks explicit security headers and published security policies such as privacy, cookie, or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms a consistent and legitimate domain registration aligned with the company's municipal nature. Overall, the website is professional and trustworthy but has compliance gaps regarding privacy and cookie policies and lacks transparency on security incident handling. Strategic improvements in these areas would enhance the site's security posture and regulatory compliance.

L

Lion's Eye

lionseye.co.za

39

Lion's Eye is a luxury boutique villa located in Camps Bay, Cape Town, offering sophisticated accommodation with six bedrooms and stunning sea views. The business operates under the Living Hotels brand, owned by Derag Livinghotels AG + Co. KG, a German hospitality group. The website presents a professional and visually appealing digital presence built on WordPress with Elementor, featuring clear navigation and detailed descriptions of suites and services. The site integrates booking services via Nightsbridge and links to related luxury apartment offerings, indicating a well-structured hospitality business model targeting discerning travelers seeking high-end accommodation in Cape Town. Technically, the website uses modern web technologies and is mobile optimized, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks security headers and privacy compliance documentation, representing areas for improvement. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

M

Mastercard

priceless.com

75

Priceless.com is a premium experience platform exclusively for Mastercard cardholders, offering access to unique events and travel experiences primarily targeting the German market. The website is well-branded with Mastercard's identity and provides a professional user experience with clear navigation and localized German content. Technically, the site employs modern JavaScript libraries, CDN hosting via Amazon CloudFront, and integrates analytics and marketing tools such as Adobe DTM and Google Analytics. Security posture is strong with HTTPS enforced, security headers implemented, and a cookie consent mechanism in place. However, the absence of WHOIS registration data and explicit incident response contacts slightly reduces trust. Overall, the site appears legitimate and professionally maintained, aligned with Mastercard's brand standards.

N

Netsimple Conspiracy s.r.o.

netsimple.cz

46

Netsimple Conspiracy s.r.o. is a Czech Republic-based small web development and online marketing company specializing in custom websites and e-commerce solutions. The company emphasizes bespoke design and coding without templates, serving clients across the Czech Republic with over 11 years of experience. Their website reflects a professional digital presence with clear contact information, client references, and integrated analytics and spam protection tools. Technically, the site uses a proprietary CMS, jQuery, Google Analytics, and Google reCAPTCHA, with moderate performance and good mobile optimization. Security posture is decent with HTTPS and CAPTCHA but lacks explicit security headers and privacy policies. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small businesses. Overall, the site is safe, professional, and business-focused with room for improvement in privacy and security transparency.

G

Glamour Guardian s.r.o.

hezke-vlasy.cz

58

Glamour Guardian s.r.o. operates the website www.hezke-vlasy.cz, a specialized e-commerce platform focused on professional hair cosmetics, hairdressing supplies, and salon equipment primarily serving the Czech market. The company offers a broad product range including hair colors, shampoos, conditioners, styling products, and salon furniture, targeting both professional hairdressers and general consumers. The website is well-structured, with clear navigation and comprehensive product categorization, supporting a positive user experience. The presence of privacy policies, terms of service, and contact information reflects a commitment to regulatory compliance and customer service. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and Google reCAPTCHA to enhance marketing, analytics, and security. The site is built on the FastCentrik e-commerce platform, indicating a managed hosting and CMS environment. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and form protections in place, but the absence of explicit security headers suggests room for improvement. From a security and compliance perspective, the site demonstrates GDPR compliance with a clear privacy policy and cookie consent mechanisms. However, the lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve security readiness. Overall, the site is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security headers. Strategically, the company should focus on strengthening its security posture by implementing recommended HTTP security headers, publishing incident response contacts, and clarifying domain registration details. These steps will enhance customer trust and reduce potential risks. The technical infrastructure is modern and supports business operations effectively, but continuous monitoring and updates are advised to maintain security and performance standards.

The website www.b2bpoptavka.cz operates as a B2B marketplace platform specializing in connecting businesses with tenders and public contracts primarily in the Czech Republic. Managed by ALSENTA s.r.o., the platform has a strong market presence with over 540,000 inquiries and a broad category coverage. The business model focuses on facilitating procurement and supplier matching, targeting companies seeking new customers and contract opportunities. The site is professionally designed with clear navigation and a responsive layout, supporting a positive user experience for its target audience. Technically, the website leverages modern frontend technologies including Bootstrap, jQuery, and Google services such as Analytics and Adsense. The infrastructure supports moderate performance and good mobile optimization. However, no CMS or hosting provider details were identified. The site implements cookie consent mechanisms aligned with GDPR requirements, enhancing privacy compliance. From a security perspective, the site enforces HTTPS and uses consent banners for cookies, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection limits domain trust verification, though the website content and business information appear legitimate and professional. Overall, the website presents a solid business platform with good technical and privacy compliance maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

I

Infonia spol. s r.o.

infonia.cz

58

Infonia spol. s r.o. is a Czech digital agency specializing in custom web design, SEO, PPC campaigns, and digital marketing services. With over 25 years of experience and more than 500 satisfied clients, the company positions itself as a reliable partner for businesses seeking to enhance their online presence. Their offerings include proprietary CMS-based websites, graphic design, copywriting, and ongoing technical support. The website is professionally designed, mobile-optimized, and provides clear contact information and client testimonials, reinforcing trust and credibility. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and integrates marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Smartlook. The site enforces HTTPS and uses cookie consent mechanisms, though explicit privacy and terms of service pages are not found. Security headers are not explicitly detected, suggesting room for improvement in security hardening. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data is a concern for domain legitimacy verification, reducing overall trustworthiness. The website content is safe, business-oriented, and compliant with basic privacy practices. Overall, Infonia demonstrates a mature digital presence with solid business credibility but should enhance transparency around privacy policies and security configurations. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, and verifying domain registration details to improve trust and compliance.

K

Krytoland.cz

krytoland.cz

59

Krytoland.cz is an established Czech e-commerce retailer specializing in mobile phone accessories including cases, tempered glass, and custom-designed products. The website offers a broad product catalog targeting consumers seeking affordable and customizable mobile accessories. Technically, the site employs modern web technologies such as jQuery, Font Awesome, Google Tag Manager, and tracking tools like Facebook Pixel and Smartlook, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and some security best practices but lacks comprehensive security headers and explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, which slightly impacts business credibility. Overall, the site is functional, user-friendly, and safe for general audiences but would benefit from enhanced privacy compliance and clearer contact information.

E

Engineering inspection company s. r. o.

eic.sk

48

Engineering inspection company s. r. o. (EIC) is a Slovak-based service provider specializing in technical inspections, conformity assessments, employee qualifications, and certifications related to engineering and safety. The company targets businesses and professionals requiring compliance and safety certifications primarily in the energy and transportation sectors. Their website presents a professional image with clear service offerings and contact information, positioning them as a trusted regional player. The digital infrastructure is built on WordPress with modern plugins and tracking tools, indicating a moderate level of digital maturity. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response details. Overall, the website is well-structured, GDPR compliant, and trustworthy, supporting the company's credibility and business operations.

M

meine Buchhandlung

buchhandlung.de

68

The website www.buchhandlung.de serves as a German-language platform to help users find local bookstores across Germany. It focuses on promoting the tolino device family, eBooks, books, and audiobooks, positioning itself as a niche retail discovery service. The platform integrates Google Maps for location services, requiring user consent for functional cookies related to map embedding. The site demonstrates a moderate level of digital maturity with use of jQuery, Modernizr, and Google Maps API, and shows good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. However, no direct contact information or incident response details are published, which could be improved for better trust and transparency.

T

Talention GmbH

talention.com

64

Talention GmbH operates a professional recruitment marketing software platform targeting HR professionals and companies seeking to improve their recruiting success. The website is built on the HubSpot CMS platform and integrates multiple modern analytics and marketing technologies including Google Analytics, Facebook Pixel, and AdRoll for retargeting. The site features a GDPR-compliant cookie consent mechanism and a comprehensive privacy policy in German. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are absent. The domain WHOIS data is missing or unavailable, which raises some concerns about registration legitimacy, but the website content and presentation are professional and trustworthy. Overall, the site scores well on content quality, technical implementation, and security, but business credibility is slightly impacted by the lack of visible contact details and WHOIS transparency.

Cargo Grill & Deli is a small hospitality business operating a restaurant and delicatessen in Kraków, Poland. The company offers high-quality steaks, seafood, and a curated wine selection, targeting local customers and visitors seeking premium dining experiences. The website reflects a professional and consistent brand image, supported by a modern WordPress-based technical infrastructure with WooCommerce integration for potential e-commerce capabilities. The site includes GDPR-compliant privacy and cookie policies with an active consent mechanism, demonstrating awareness of privacy regulations. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the website is trustworthy, well-structured, and provides multiple contact channels, supporting good business credibility.

P

P.P.H.U. KRAKBET MAREK TERMANOWSKI, KRZYSZTOF TERMANOWSKI SPÓŁKA JAWNA

krakbet.pl

10

Krakbet is a well-established concrete production and transport company based in Kraków, Poland, with over 20 years of experience. The company emphasizes high-quality products, advanced technology, and customer-oriented service. Their website reflects a professional digital presence with clear business information, certifications, and a portfolio of projects, positioning them as a leading local manufacturer in the construction materials sector. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though there is room for improvement in security headers and DNS security. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, Krakbet demonstrates a solid security posture with HTTPS and reCAPTCHA integration but could enhance security by enabling DNSSEC and adding security headers. The website is accessible without WAF interference, and the domain registration data supports the legitimacy and longevity of the business.

P

PERSKIMEDIA Szymon Perski

chb14.pl

56

CHB14 is a modern office building located in Kraków, Poland, offering high-standard office spaces with flexible layouts across five floors. The business targets companies seeking premium office rental spaces with amenities such as 24/7 security, underground parking, and energy-efficient solutions. The website reflects a professional real estate leasing business with a clear market position in the Kraków commercial property sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is good with HTTPS and reCAPTCHA usage, though improvements in DNSSEC and security headers are recommended. Privacy compliance is strong with comprehensive cookie and privacy policies and a consent mechanism. Overall, the website is trustworthy, well-designed, and suitable for its business purpose.

A

ACATOM Sp. z o.o.

acatom.pl

52

ACATOM Sp. z o.o. is a Polish real estate developer with over 15 years of experience, specializing in residential property development across multiple cities including Warsaw, Rzeszów, Katowice, and Kraków. The company emphasizes environmentally conscious construction using proven materials and offers modern, functional apartments at accessible prices. Their market position is that of an established regional developer with a solid portfolio and ongoing projects. Technically, the website is built on WordPress with modern frameworks and plugins, featuring good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, consent management, and reCAPTCHA integration, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. No critical vulnerabilities or suspicious indicators were found, supporting a high legitimacy score.

I

Intima Clinic

intimaclinic.pl

54

Intima Clinic is a modern private medical clinic based in Kraków, Poland, specializing in gynecology, obstetrics, infertility treatment, aesthetic gynecology, urogynecology, physiotherapy, and endocrinology. The clinic offers over 50 medical procedures and consultations, targeting women seeking specialized healthcare services. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. It includes GDPR-compliant privacy and cookie policies with an opt-in consent mechanism, reflecting a strong commitment to user privacy and regulatory compliance. Technically, the site is built on WordPress with modern libraries and plugins such as Yoast SEO and WP Rocket, hosted by cyber_Folks S.A. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. No WAF or blocking mechanisms interfere with content access. WHOIS data confirms a stable domain registration since 2014, consistent with the business's operational history. Overall, the site demonstrates a mature digital presence with good security and privacy practices.

D

DER MED

dermed.pl

58

DER MED is a well-established medical center in Kraków, Poland, specializing in dermatology, plastic surgery, aesthetic medicine, and related fields. With over 25 years of experience, the center offers a broad range of services tailored to both women and men across different age groups. The website reflects a professional and modern digital presence, leveraging contemporary technologies such as the Astro framework, MailerLite for marketing, and analytics tools including Google Tag Manager and Hotjar. Social media integration and multilingual support enhance user engagement and accessibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, DER MED demonstrates strong business credibility and digital maturity, positioning itself as a trusted healthcare provider in its market.

M

MERKURY Akcesoria Meblowe Mariusz Adamczyk

merkuryam.pl

45

MERKURY Akcesoria Meblowe Mariusz Adamczyk is a Polish company specializing in the production and distribution of furniture accessories. Founded in 2019, it has established itself as a leader in the Polish market by offering a wide range of products including handles, hinges, guides, and other essential furniture components. The company targets both professionals and amateurs in the furniture manufacturing and interior design sectors, operating both physical and online sales channels. The website reflects a professional and consistent brand image with clear contact information and a strong partner ecosystem featuring well-known industry brands. Technically, the website is built on WordPress with WooCommerce and Elementor, indicating a modern but moderately complex infrastructure. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. Overall, the business demonstrates good credibility and market positioning with room for improvement in privacy compliance and security best practices.

M

Małek Family Company

agregatymalek.pl

57

Małek Family Company is a small, established Polish manufacturer specializing in plastering machines, silomats, and related construction equipment. Founded in 1994, the company offers production, sales, leasing, and machine servicing, supported by CE certifications. Their digital presence is built on a WordPress platform with modern plugins and a clear focus on product showcasing and customer service. The website is well-structured, mobile-optimized, and includes essential compliance features such as cookie consent and a privacy policy. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be added for enhanced protection. Overall, the company demonstrates a trustworthy and professional online presence aligned with its business operations.

F

Fibero G. Rojek, J. Rojek Sp. j.

fibero-textil.com

51

Fibero-Textil is a Polish textile company specializing in high-quality upholstery, curtain, and decorative fabrics for home and office interiors. Established in 2013, the company positions itself as a trend-conscious retailer offering tailored fabric solutions through both physical and online channels, including export services. The website reflects a professional and consistent brand image with clear business and contact information, supported by GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and plugins, delivering a good user experience with mobile optimization and SEO considerations. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains moderate user tracking with privacy compliance. Overall, Fibero-Textil demonstrates a credible and trustworthy online presence suitable for its business scope.

D

DOLS-výroba Dveří, Oken, Listovních Schránek, a.s.

parcel-boxy-dols.cz

57

The website www.parcel-boxy-dols.cz represents a Czech manufacturing company specializing in the production and sale of high-quality parcel boxes and mailboxes. The company offers a variety of products including wall-mounted, built-in, and free-standing parcel boxes, as well as mailboxes equipped with additional features such as doorbells and video modules. Their target audience includes homeowners, apartment complexes, and developers. The business model is focused on manufacturing and e-commerce sales, positioning the company as a reputable local manufacturer with a comprehensive product portfolio. Technically, the website employs a custom e-commerce platform (Shopion.cz) and utilizes common JavaScript libraries such as jQuery, bxSlider, and Fancybox. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy and cookie policies are implemented with a consent mechanism, reflecting GDPR compliance. However, no explicit security headers or incident response information are present, which could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration legitimacy. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website is professional and trustworthy in terms of business presentation and privacy compliance but would benefit from enhanced security headers, incident response disclosures, and verification of domain registration details to improve legitimacy and security posture.

Inforpol Net is a Polish technology company specializing in web design, domain registration, dedicated servers, IT services, programming, and online advertising. Established in 1996, the company has evolved from print directories to a comprehensive digital service provider with a strong local presence. Their market position is supported by a portfolio of over 1500 projects and more than 4500 satisfied clients, targeting primarily Polish businesses seeking professional IT and marketing solutions. The company holds a Google Partner certification, enhancing its credibility in digital advertising services. Technically, the website is built on WordPress using Bootstrap and jQuery, with integrations for Piwik PRO analytics and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices. Hosting appears to be managed via NDC-related domains, consistent with the company's service offerings. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response information are absent. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, Inforpol Net presents a trustworthy and professional online presence with good compliance and security posture. Strategic improvements in security headers and public security policies could further enhance their risk management and customer trust.

B

B&S Sławomir Nowak

stabilny.net

51

Stabilny.net is a Polish internet services provider specializing in hosting, domain registration, virtual and dedicated servers, and backup solutions. Established in 2013, the company targets individuals and businesses seeking reliable and secure web hosting services within Poland. Their website reflects a professional and consistent brand image, emphasizing security, technical support, and infrastructure quality. The company maintains a local data center with 24/7 administration and advanced environmental controls, positioning itself as a trustworthy provider in the local market. Technically, the website is built on WordPress using popular plugins such as Visual Composer, LayerSlider, and Contact Form 7. It integrates multiple analytics and marketing tools including Google Analytics, Smartlook, and Salesmanago. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and SSL is properly configured, ensuring secure communications. From a security perspective, the site uses HTTPS and reCAPTCHA for form protection but lacks published security policies, vulnerability disclosure, and security headers. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, stabilny.net presents a credible and professional business with a solid technical foundation and good market positioning. To enhance trust and compliance, the company should publish comprehensive privacy and cookie policies, implement security headers, and provide incident response information. These steps will improve their security posture and regulatory compliance, reducing risk and increasing customer confidence.

O

Online Group Sp. z o.o.

onlinegroup.pl

46

Online Group Sp. z o.o. is a well-established digital marketing agency based in Kraków, Poland, specializing in SEO, Google Ads campaigns, social media marketing, and comprehensive 360° marketing solutions. The company targets businesses seeking to enhance their online visibility, customer acquisition, and sales performance. With certifications such as Google Partner and ISO 9001:2015, and a strong client base reflected in high Google ratings, Online Group holds a reputable market position in the Polish digital marketing sector. The website demonstrates a professional and consistent brand image with comprehensive service offerings and client success case studies. Technically, the site is built on WordPress with modern libraries and plugins, optimized for SEO and mobile responsiveness, and integrates multiple marketing and analytics tools. Security posture is good with HTTPS enforced and GDPR compliance evident through detailed privacy and cookie policies and consent mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the website and business present a credible, professional, and trustworthy digital presence.

The Oley Foundation is a well-established non-profit organization focused on supporting individuals living with home IV nutrition and tube feeding. Their website serves as a comprehensive resource offering advocacy, education, community engagement, and events tailored to patients, caregivers, clinicians, and industry partners. The organization has a strong market position as a trusted leader in this niche healthcare sector, supported by a long domain history and recognized certifications such as the Candid Platinum Seal. Technically, the website is built on the YourMembership CMS platform and leverages a variety of modern web technologies including jQuery, YUI, Google Analytics, New Relic for performance monitoring, and DataDome for bot protection. The site demonstrates good mobile optimization and user experience, though there is room for improvement in accessibility and SEO practices. From a security perspective, the site enforces HTTPS and employs bot mitigation tools, but lacks some advanced security headers and a public vulnerability disclosure policy. The WHOIS data aligns well with the organization's identity and history, reinforcing legitimacy. Privacy compliance is basic with a visible cookie consent mechanism and a privacy policy, but GDPR compliance is not explicitly indicated. Overall, the website presents a professional and trustworthy digital presence with moderate technical sophistication and a solid security baseline. Strategic enhancements in security headers, incident response transparency, and privacy compliance would further strengthen their posture and user trust.

M

Medycyna Praktyczna

mp.pl

62

Medycyna Praktyczna is a leading Polish medical portal providing comprehensive, evidence-based medical knowledge and educational resources for healthcare professionals and patients. The website offers a wide range of services including medical articles, educational programs, webinars, podcasts, and access to medical publications. It targets primarily doctors and medical specialists, positioning itself as a trusted source of medical information in Poland. The portal demonstrates a mature digital infrastructure with modern technologies such as Bootstrap, Google Tag Manager, and multiple analytics and advertising platforms integrated with GDPR-compliant consent management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of public WHOIS data is typical for .pl domains and does not detract from the site's legitimacy given its professional content and market presence. Overall, the website is well-designed, content-rich, and trustworthy, serving a critical role in the Polish healthcare information ecosystem.

T

TOTOHOST d.o.o.

totohost.com

59

TOTOHOST d.o.o. is a Croatian web hosting company operating since 2004, offering a range of hosting services including NVMe web hosting, business hosting, VPS cloud servers, domain registration, and reseller hosting. The company positions itself as a reliable local provider with over 5000 customers and more than 7500 registered domains. Their website is professionally designed, mobile-optimized, and provides comprehensive information about their services, pricing, and support options. Technically, the site runs on WordPress with modern technologies such as CloudLinux, LiteSpeed web servers, and Imunify360 security solutions, ensuring good performance and security. The presence of SSL, daily backups, and malware protection indicates a strong security posture, although HTTP security headers and public security policies could be enhanced. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. Overall, the website and business demonstrate a mature digital presence with high trustworthiness and professionalism.

E

Erste banka

erstebank.hr

64

Erste banka is a well-established Croatian financial institution operating since 2004, offering a broad range of banking services including accounts, loans, credit cards, investments, and insurance. The website reflects a mature digital presence with a modern tech stack, responsive design, and good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not prominently disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Erste banka demonstrates a high level of business credibility and digital maturity appropriate for a leading bank in Croatia.

H

Hrvatsko kreditno osiguranje d.d.

hkosig.hr

43

Hrvatsko kreditno osiguranje d.d. is a Croatian insurance company specializing in trade credit insurance and risk management, serving entrepreneurs and businesses seeking protection for their receivables. It holds a unique market position as the first and only Croatian company offering such services, supported by its subsidiary Business Info Service L.L.C. that provides credit information and analysis. The website is built on WordPress with standard plugins for SEO, forms, and cookie management, reflecting a moderate level of digital maturity. The site is accessible, mobile-optimized, and professionally designed, though it lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS and cookie consent implemented, but could be improved by adding security headers and incident response information. Overall, the domain registration is consistent with the business claims, indicating legitimacy.

C

CRANE

crane.hr

9

CRANE.hr is the official website of the Croatian Investors and Business Angels Association, the oldest such organization in Croatia, focused on connecting private investors with innovative early-stage companies. The website serves as a platform for sharing news, events, and resources related to investment and entrepreneurship in Croatia. It targets private investors and startups seeking early-stage funding, positioning itself as a key national player in the investment ecosystem. The business model revolves around networking, knowledge sharing, and facilitating investments. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO, WPML for multilingual support, Contact Form 7 for contact forms, and WPBakery Page Builder for layout management. The site is hosted by a Croatian hosting provider, cyber_Folks d.o.o., and uses HTTPS with a valid SSL certificate. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and some security plugins (e.g., Wordfence), but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is professional and trustworthy with good business credibility and content quality. However, improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

E

Evropská databanka s.r.o.

systemeliska.cz

9

The website www.systemeliska.cz represents a Czech-based software solution provider specializing in a custom content management system named Eliška, developed by Evropská databanka s.r.o. The company offers a CMS platform with modern tools for easy website management, marketing support, and integration with economic systems such as POHODA. The target audience includes businesses and web developers seeking efficient web presentation solutions. The website is professionally designed with clear navigation and relevant content, supporting a moderate level of digital maturity with a technology stack based on PHP, MySQL, jQuery, and CodeIgniter framework. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though lacking explicit security headers and detailed privacy or security policies. The absence of WHOIS registration data limits domain trust assessment, but the visible business information and contact details support legitimacy. Overall, the site is functional, business-oriented, and compliant with basic privacy regulations.

D

Dematis

e-facteur.com

9

E-facteur is a professional service website operated by Dematis, a French company specializing in secure electronic mail and document dematerialization solutions. The website targets enterprises and local authorities, offering services such as certified email with tracking, timestamping, and archiving. The company has a strong market presence with hundreds of thousands of users and a portfolio of related digital services. Technically, the website uses modern JavaScript libraries and frameworks, including jQuery, Owl Carousel, and Swiper Slider, and integrates a live chat service (Tawk.to) for customer support. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is implied, but explicit HTTP security headers are not detected in the provided data. No forms with sensitive inputs are present on the homepage, reducing immediate risk exposure. Privacy and cookie policies are comprehensive and GDPR compliant, linked to the parent company’s main site. However, the WHOIS data for the domain www.e-facteur.com is missing, which raises concerns about domain registration legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy from a content and business perspective but would benefit from improved transparency on domain registration and enhanced security headers.

D

Dematis

e-assemblees.com

10

E-assemblees.com is a French SaaS platform operated by Dematis, specializing in secure electronic voting and meeting management for various deliberative assemblies including elected officials, shareholders, co-owners, and social-economic committees. The platform offers comprehensive services such as secure convocation sending, agenda and resolution management, electronic voting, and distribution of meeting minutes, accessible across devices with a focus on compliance and security. The company positions itself as a trusted third party with hosting in France and multi-factor authentication to ensure data protection and service availability. Technically, the website employs modern web technologies including jQuery, Bootstrap, Firebase Messaging, and PWA features, hosted by OVH sas. The site is mobile-optimized and uses lazy loading and parallax effects for enhanced user experience. SEO and accessibility are adequately addressed, though accessibility could be improved. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced, multi-factor authentication, and hosting on geo-distributed French sites. However, DNSSEC is not enabled, and security headers are missing, which are recommended improvements. No explicit security policy or incident response contacts are published. Privacy compliance is good with GDPR-aligned policies present, though cookie consent mechanisms could be enhanced. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain age and WHOIS data support legitimacy. Strategic recommendations include enabling DNSSEC, publishing security policies, adding security headers, and improving cookie consent transparency to further strengthen security and compliance.

E

E-parapheurs

e-parapheurs.com

51

E-parapheurs is a French-based digital signature and document validation solutions provider targeting enterprises and public sector organizations. The company offers services to simplify and secure document signing workflows, supporting both simple signatures and complex validation circuits. The website is professionally designed using WordPress and Elementor, with modern SEO and privacy consent mechanisms in place. However, the absence of WHOIS registration data raises questions about domain legitimacy, although the website content and partner ecosystem suggest a legitimate business. Security posture is good with HTTPS and cookie consent, but could be improved with additional security headers and explicit privacy policies. Overall, the site presents a moderate risk profile with recommendations to enhance transparency and security.

D

Dematis

dematis.com

56

Dematis is a French technology company specializing in digital dematerialization solutions primarily serving public sector entities and businesses involved in public procurement and electronic document management. Established in 2003, Dematis holds a strong market position as a leader in France with multiple specialized platforms offering services such as electronic public procurement, electronic convocations, secure storage, and electronic signatures. The company emphasizes secure and legally compliant digital workflows, supported by certifications like RGS** and eIDAS. Technically, the website employs modern frameworks such as Bootstrap and jQuery, hosted by OVH sas, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protection statuses, though improvements like DNSSEC and security headers are recommended. Privacy compliance is addressed with policies present but lacks active cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

F

Fundacja Frank Bold

frankbold.pl

54

Fundacja Frank Bold is a Polish non-profit organization specializing in legal advocacy and environmental protection. Established in 2013, it offers expert legal services and education focused on sustainable development, renewable energy, air quality, and responsible governance. The foundation supports social organizations and citizens in defending their rights and promoting environmental responsibility. Their market position is strong within Poland's environmental and legal advocacy sectors, leveraging a professional website with rich content and clear communication channels. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, integrated with MailerLite for marketing and Google Analytics for tracking. The site is mobile-optimized, accessible, and SEO-friendly, with proper metadata and structured data enhancing search visibility. Security is well managed with HTTPS, DNSSEC, and cookie consent mechanisms, although some security headers and explicit incident response policies are absent. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and professional, including official emails, phone numbers, and physical addresses. Social media integration further supports trust and outreach. Overall, the website presents a low-risk profile with high professionalism and compliance. Strategic improvements could include publishing a security policy, enhancing security headers, and adding a vulnerability disclosure policy to further strengthen trust and security readiness.

A

Associacio Catalana de Municipis i Comarques

acm.cat

53

The website acm.cat represents the Associació Catalana de Municipis i Comarques, a regional government association in Catalonia, Spain, founded in 2006. It serves as a platform to provide information, training, consulting, and communication services to municipalities and local government entities. The site is professionally designed using WordPress CMS with common plugins such as Yoast SEO and Cookiebot for privacy compliance. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and DNSSEC. No explicit privacy policy or terms of service pages were detected, though cookie consent is present and GDPR compliant. Contact information is primarily via embedded forms, with no direct emails or phone numbers found. Overall, the domain registration data is consistent and supports the legitimacy of the organization. The site is safe for general audiences and maintains a good level of professionalism and trustworthiness.

U

UGT Catalunya

ugt.cat

60

UGT Catalunya is a regional labor union organization based in Catalonia, Spain, focused on advocating for workers' rights and social welfare. The website serves as an information portal for union members and the general public, providing updates on labor rights and union activities. The organization maintains a consistent brand presence and active social media channels, reinforcing its position as a key player in the regional labor movement. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, LayerSlider, Yoast SEO, and WP Rocket, indicating a modern and maintainable infrastructure. The site is secured with HTTPS and includes essential security headers, contributing to a good security posture. Performance and mobile optimization are adequate, though accessibility features could be improved. Security-wise, the site demonstrates good practices with HTTPS and security headers but lacks explicit privacy policies, terms of service, and incident response contacts, which are important for compliance and trust. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data is privacy protected, which is typical for non-profit organizations. Overall, the website is professional, trustworthy, and serves its audience well. Strategic improvements in privacy disclosures and incident response transparency would enhance compliance and user trust.

C

CCOO CAT

ccoo.cat

62

CCOO CAT is a leading labor union in Catalonia, Spain, dedicated to protecting and improving workers' rights and conditions. With a large membership base and extensive representation, it offers services including advice, training, collective agreement information, and member discounts. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting workers and union members in Catalonia. Technically, it is built on WordPress with modern plugins and tracking tools, maintaining good SEO and accessibility standards. Security posture is solid with HTTPS and some security plugins, though it lacks explicit security headers and incident response contacts. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS registration data is a transparency concern but does not detract significantly from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained.

A

Academia Saint-Gobain

academiasaint-gobain.es

63

Academia Saint-Gobain is an educational platform offering specialized courses designed as a formative journey to enhance knowledge and skills. The website is professionally designed, leveraging WordPress CMS and integrates GDPR-compliant cookie consent mechanisms. It targets professionals and learners seeking structured training programs, positioning itself as a niche educational service under the Saint-Gobain brand umbrella. Technically, the site uses modern web technologies including Google Tag Manager for analytics and Ultimate Member for user management, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident, though additional security headers could enhance protection. The absence of WHOIS data limits domain registration insights, but the overall digital presence and branding suggest legitimacy and trustworthiness.

The European Climate Initiative (EUKI) is a German government-backed program under the Federal Ministry for the Environment, Climate Action, Nature Conservation and Nuclear Safety (BMUKN), established in 2017. It focuses on accelerating climate action across Europe by funding cross-border projects, providing training, and fostering a collaborative network of organizations and stakeholders. The website reflects a mature and professional presence with comprehensive content about projects, events, and knowledge sharing, targeting NGOs, policymakers, and climate action communities across Europe. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Events Manager, and Captcha.eu for security. It uses Matomo analytics for privacy-respecting user tracking and implements cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and security practices including HTTPS and form protection against bots. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response contacts, which could be improved. WHOIS data is minimal but consistent with a government initiative, and no suspicious patterns are detected. Overall, the site is trustworthy, professional, and compliant with GDPR and privacy standards. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to further strengthen trust and security culture.

H

Handelsregisterauszug Online - www.handelsregisterauszug-deutschland.de

handelsregisterauszug-deutschland.de

44

The website www.handelsregisterauszug-deutschland.de provides an online service for ordering official German commercial register extracts (Handelsregisterauszug) including notarized versions, certified English translations, and apostille certifications. It targets businesses, legal professionals, and individuals requiring official company data from German register courts. The service emphasizes fast delivery, no registration requirement, and a guarantee of no cost if no data is found. The business operates in a niche market segment focused on official document retrieval and certification within Germany. Technically, the website is built on the Drupal CMS platform, utilizing jQuery and client-side validation libraries. It employs Cloudflare for DNS and likely CDN services, enhancing availability and security. The site includes form validation, CAPTCHA to prevent spam, and IBAN validation with automatic BIC detection, indicating attention to data accuracy and user input security. However, no advanced security headers or explicit SSL configuration details were found in the provided data. From a security perspective, the site demonstrates moderate maturity with client-side protections and spam prevention but lacks published security policies, incident response contacts, and cookie consent mechanisms required for full GDPR compliance. The absence of security headers and limited visible server-side security measures suggest room for improvement. No vulnerabilities or malware indicators were detected in the analysis. Overall, the website is functional, professionally presented, and serves a clear business purpose with moderate technical and security posture. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and compliance with regulatory standards.

T

TTA Personal GmbH

tta-personaltransport.de

52

TTA Personal GmbH is a German-Spanish personnel recruitment company specializing in the placement of Spanish professional bus and truck drivers in Germany. Established in 2011, the company positions itself as a market leader with a large database of over 20,000 drivers and offices in Berlin, Munich, Granada, and Valencia. Their services include recruitment, language training, and placement of various transport-related professions. The website is professionally designed using WordPress and Elementor, with good SEO practices including structured data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response information. Overall, the company appears credible and trustworthy with a solid digital presence but should enhance privacy and security transparency.

K

l❶Iᐅ Kfz Versicherung trotz Schufa ▶️ Bonitätsprüfung ❷⓿❷❺

kfz-versicherung-trotz-schufa.com

50

The website www.kfz-versicherung-trotz-schufa.com operates as a niche comparison and informational platform focused on providing car insurance options for individuals with negative Schufa credit entries in Germany. It offers tariff comparisons, advice, and links to insurance providers that accept customers despite credit challenges. The site targets consumers seeking affordable and accessible car insurance solutions despite credit issues. Technically, the site is built on WordPress with a modern theme and SEO plugins, integrating Google Tag Manager and Borlabs Cookie for analytics and consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit security policies or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and structure appear professional and trustworthy. Overall, the site presents moderate risk with room for improvement in transparency and security practices.

H

HUSS-VERLAG GmbH

huss-shop.de

47

HUSS-VERLAG GmbH operates the Huss Shop, an e-commerce platform specializing in technical and legal publications, software licenses, and digital reading services primarily targeting professionals in energy, transportation, logistics, and real estate sectors. The website demonstrates a solid market position within its niche, supported by trusted certifications and a consistent brand presence. Technically, the site employs a mix of legacy and modern web technologies including jQuery, Google Analytics, Matomo, and accessibility tools, with moderate performance and basic mobile optimization. Security posture is strong with HTTPS enforcement and GDPR-compliant cookie consent, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its target audience.

K

Kreditz

kreditz.com

76

Kreditz is a Sweden-based fintech company specializing in open banking and PSD2 data analytics to facilitate intelligent credit and risk decisions. Their offerings include consumer and business account certificates, leveraging consent-based data and AI technology to improve credit decisioning processes. The company targets financial institutions and businesses requiring advanced credit risk insights, positioning itself as a leader in the open banking data space. Technically, the website is built on modern frameworks such as React.js, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools including HubSpot, Google Analytics, Hotjar, and LinkedIn Insight. Security posture is strong with HTTPS enforcement, domain registration protections, and cookie consent management via Cookiebot, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Kreditz demonstrates a mature digital presence with good privacy compliance and professional branding, though improvements in transparency around security policies and terms of service would enhance trust further.

The analyzed website is a login portal for a service branded as iCC, likely related to Interact Cloud Control or a similar business platform. The page is minimalistic, focused solely on user authentication, with no additional business or policy information presented. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, and ASP.NET Core (.NET 6.0), indicating a contemporary development stack. The site is accessible without any web application firewall or security challenge blocking, allowing full content analysis. Security measures include the use of anti-forgery tokens and password input best practices, but lack visible security headers and privacy policies, which are areas for improvement. The absence of WHOIS data for the subdomain is typical and does not indicate risk, but limits domain trust assessment. Overall, the site is functional but basic in content and security posture.

D

Distriplac

distriplac.com

71

Distriplac is a Spanish company specializing in the distribution of construction materials, particularly for interior conditioning, drywall, and ceilings. The company positions itself as a leader in its niche market, targeting construction professionals and contractors. The website is built on the Magento e-commerce platform, leveraging modern JavaScript libraries such as RequireJS and jQuery, and integrates analytics and user behavior tracking tools like Google Tag Manager and Hotjar. A cookie consent mechanism is implemented via Cookiebot, indicating attention to privacy compliance. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance documentation.

I

Incusa

incusa.es

62

Incusa is a medium-sized manufacturing company specializing in the extraction and commercialization of high-purity feldspar and silica sand, serving industrial sectors such as ceramics, glass, foundry, and construction. The company operates internationally, distributing products in over 20 countries and is a subsidiary of the Saint-Gobain Group, indicating a strong market position and reputable backing. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy and security policy pages and security headers, which are recommended for compliance and enhanced protection. Overall, the website is trustworthy and well-structured, supporting the company's industrial business model and international reach.