Security Directory

S

Střední odborná škola Říčany s.r.o.

sosricany.cz

41

Střední odborná škola Říčany s.r.o. is a small, family-character educational institution in the Czech Republic focused on vocational secondary education. The school emphasizes close cooperation with parents and practical training workplaces, offering various specialized programs including culinary arts, food technology, and a new economic lyceum program integrating AI and project work. The website is professionally designed with good navigation and mobile responsiveness, leveraging modern JavaScript libraries and privacy-conscious analytics (Matomo). Security posture is solid with HTTPS and reCAPTCHA, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data reduces domain trust but the website content and contact information are consistent with a legitimate educational entity.

M

Ministarstvo rada, mirovinskog sustava, obitelji i socijalne politike

mrms.hr

54

The website represents the official online presence of the Croatian Ministry of Labour, Pension System, Family and Social Policy. It serves as a comprehensive information portal for Croatian citizens and stakeholders regarding labor laws, social welfare programs, pension regulations, and family policies. The site is well-positioned as a government resource, providing authoritative content and official communications. The target audience includes citizens, social service users, and public sector employees. Technically, the website employs a traditional web stack with jQuery, Modernizr, and various UI libraries such as Fancybox and Owl Carousel. It uses HTTPS with Google Analytics for visitor tracking, and includes cookie consent mechanisms compliant with GDPR. The site demonstrates good mobile optimization and accessibility features, though some libraries like jQuery are outdated, which could pose security risks. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable due to GDPR privacy restrictions, but the domain is a government .gov.hr domain, indicating high legitimacy. Overall, the website is a trustworthy and professional government portal with good content quality and privacy compliance. Strategic improvements include updating technical libraries, enhancing security headers, and publishing security policies to strengthen trust and resilience.

The website www.gsbz-buchholz.de represents the Gesundheitsfachschule und Bildungszentrum Buchholz, affiliated with the Krankenhäuser Buchholz und Winsen gemeinnützige GmbH. It serves as a portal for healthcare education, training, and employment opportunities in the Buchholz and Winsen region of Germany. The site targets prospective students and job seekers interested in healthcare professions, providing detailed information about training programs, career paths, and affiliated hospitals. The business operates as a non-profit healthcare and educational institution, positioning itself as the largest employer in the region with a strong community focus. Technically, the website is built on TYPO3 CMS, utilizing modern frontend libraries such as jQuery and Owl Carousel. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and the site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. However, there is no cookie consent mechanism or explicit security and incident response policies published, which are areas for improvement. From a security perspective, the site maintains a good posture with HTTPS and no detected vulnerabilities. The absence of security headers and incident response information slightly reduces the security maturity. Privacy compliance is adequate with a clear privacy policy and terms of service, but the lack of cookie consent and data protection officer contact details indicates partial GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic recommendations include implementing cookie consent, publishing security policies, enhancing accessibility, and adding security headers to improve compliance and security posture further.

A

audaris GmbH

audaris.de

60

audaris GmbH is a German-based technology company specializing in digital marketing and cloud solutions tailored for the automotive dealership sector. As part of the betzemeier group, audaris offers a comprehensive suite of services including vehicle management software, digital marketing, image and video solutions, dealership websites with integrated online trade, and B2B sales platforms. The company positions itself as a digital full-service provider for automotive dealers, leveraging cloud technologies and innovative marketing tools to enhance lead generation and operational efficiency. Technically, the website employs modern web technologies such as jQuery, Foundation CSS framework, Google Tag Manager, and Google reCAPTCHA Enterprise, indicating a mature digital infrastructure. The site is hosted on Schlundtech servers, uses HTTPS with strong SSL configuration, and implements a detailed cookie consent mechanism compliant with GDPR. The website is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement, use of reCAPTCHA to prevent abuse, and granular cookie consent. However, it lacks explicit security policies, incident response contacts, and security.txt files, which are recommended for enhanced transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, audaris GmbH presents a credible, professional online presence with strong business and technical foundations. The company’s integration within the betzemeier group and visible trust indicators such as awards and Google Partner status further reinforce its market position. Strategic improvements in security transparency and incident response readiness would enhance its security posture and stakeholder trust.

T

Turistička Zajednica Varaždinske Županije

turizam-vzz.hr

52

The website turizam-vzz.hr serves as the official tourism portal for Varaždin County in Croatia, managed by the regional tourism board Turistička Zajednica Varaždinske Županije. It provides comprehensive information about local destinations, cultural heritage, accommodation options, events, and tourism offers, targeting tourists and visitors interested in exploring the region. The site is positioned as a regional governmental/non-profit entity focused on tourism promotion. Technically, the website is built on Joomla CMS using Bootstrap, jQuery, and other common web technologies. It features responsive design and moderate performance, with good SEO and basic accessibility features. The site employs HTTPS and includes a cookie consent mechanism, demonstrating awareness of GDPR requirements, though it lacks a clearly published privacy policy and terms of service. From a security perspective, the site uses HTTPS but lacks important security headers and does not publish security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness. Overall, the site is professional and trustworthy but could improve its security posture and privacy compliance documentation.

U

Urząd Miasta Zielona Góra

zielona-gora.pl

9

The website www.zielona-gora.pl serves as the official municipal portal for the city of Zielona Góra in Poland. It provides residents, visitors, and businesses with access to city government information, including details about city authorities, departments, local districts, public services, cultural institutions, and tourism. The site is positioned as a government public service portal with a medium-sized audience primarily composed of local citizens and stakeholders. Technically, the site is built on WordPress using the Avada theme and incorporates common web technologies such as jQuery, FontAwesome, and accessibility plugins. The site demonstrates moderate performance and good mobile optimization with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. WHOIS data is unavailable from the registry, but the site’s branding and content strongly indicate legitimacy as an official government resource. Overall, the site is safe, professional, and trustworthy, serving its public service role effectively.

S

Saito Media

saitomedia.eu

47

Saito Media is a small technology-focused creative solutions company specializing in brand development, content marketing, graphic design, web and app development, UX design, and creative advertising. The company targets businesses seeking to meet digital transformation goals with innovative and tailored digital strategies. The website demonstrates a professional market position with over 5 years of experience and a high client satisfaction rate, supported by a portfolio of recent projects. Technically, the site is built on WordPress using Elementor and the Porto theme, leveraging modern web technologies such as jQuery and Bootstrap. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but could be improved by implementing additional security headers and publishing security policies. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR indicators. Overall, the website is trustworthy, professional, and well-structured, supporting the company’s business credibility effectively.

Z

Základní škola a gymnázium Navis

msratolest.cz

54

Základní škola a gymnázium Navis is a private educational institution in the Czech Republic offering preschool, primary, and gymnasium level education. The school emphasizes values-based education founded by families, aiming to develop children and students intellectually, personally, and spiritually. Their website reflects a professional and modern digital presence with clear navigation and comprehensive information about their educational offerings and community activities. The institution targets students, parents, and prospective families seeking quality education in a nurturing environment. Technically, the website is built on the Dmp.Cms.Core platform, utilizing modern web technologies such as jQuery, Bootstrap, and Owl Carousel. Media assets are hosted on Microsoft Azure Blob Storage, indicating a reliable hosting infrastructure. The site is mobile-optimized and includes SEO best practices, cookie consent management, and analytics integration via Google Analytics and Google Tag Manager. From a security perspective, the site enforces HTTPS and uses anti-forgery tokens in forms, demonstrating good baseline security hygiene. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious content were detected, and the site is free from adult or questionable material. Overall, the website presents a trustworthy and professional front for the educational institution, though the absence of WHOIS data limits full domain legitimacy assessment. Strategic recommendations include adding security headers, publishing security policies, and enhancing incident response transparency to strengthen security posture and stakeholder confidence.

SIRO-Poland Sp. z o. o. operates as the exclusive distributor in Poland for decorative furniture accessories, including handles, knobs, LED lighting, and decorative mats. The company targets furniture manufacturers, wholesalers, retailers, and interior designers, positioning itself as a key player in the Polish furniture accessory market. The website reflects a professional business presence with clear product offerings and partner relationships. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks some security headers and formal privacy/cookie policies, which are areas for improvement. Overall, the site is trustworthy and well-maintained, supporting the company's market position.

Semaco Real Estate is a specialized real estate advisory and sales company operating primarily in Kraków, Poland. With over two decades of experience and a portfolio of more than 30 investments and approximately 1500 sold apartments, the company positions itself as a trusted local expert in both primary and secondary real estate markets. Their services encompass guiding clients through the entire property transaction process, including financing assistance and new development projects. The website reflects a professional and customer-focused approach, emphasizing quality housing and client satisfaction. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA, hosted likely by home.pl S.A. The site is mobile optimized and uses EstiCRM as its content management system. Performance is moderate with good SEO and accessibility basics. Tracking and marketing tools such as Google Analytics and Facebook SDK are integrated, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in hardening the website. No critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are published. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security configurations and transparency around security policies would enhance the company’s risk posture and customer trust.

G

Glamour Guardian s.r.o.

hezke-vlasy.cz

58

Glamour Guardian s.r.o. operates the website www.hezke-vlasy.cz, a specialized e-commerce platform focused on professional hair cosmetics, hairdressing supplies, and salon equipment primarily serving the Czech market. The company offers a broad product range including hair colors, shampoos, conditioners, styling products, and salon furniture, targeting both professional hairdressers and general consumers. The website is well-structured, with clear navigation and comprehensive product categorization, supporting a positive user experience. The presence of privacy policies, terms of service, and contact information reflects a commitment to regulatory compliance and customer service. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Google Tag Manager, and Google reCAPTCHA to enhance marketing, analytics, and security. The site is built on the FastCentrik e-commerce platform, indicating a managed hosting and CMS environment. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and form protections in place, but the absence of explicit security headers suggests room for improvement. From a security and compliance perspective, the site demonstrates GDPR compliance with a clear privacy policy and cookie consent mechanisms. However, the lack of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve security readiness. Overall, the site is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security headers. Strategically, the company should focus on strengthening its security posture by implementing recommended HTTP security headers, publishing incident response contacts, and clarifying domain registration details. These steps will enhance customer trust and reduce potential risks. The technical infrastructure is modern and supports business operations effectively, but continuous monitoring and updates are advised to maintain security and performance standards.

The website www.b2bpoptavka.cz operates as a B2B marketplace platform specializing in connecting businesses with tenders and public contracts primarily in the Czech Republic. Managed by ALSENTA s.r.o., the platform has a strong market presence with over 540,000 inquiries and a broad category coverage. The business model focuses on facilitating procurement and supplier matching, targeting companies seeking new customers and contract opportunities. The site is professionally designed with clear navigation and a responsive layout, supporting a positive user experience for its target audience. Technically, the website leverages modern frontend technologies including Bootstrap, jQuery, and Google services such as Analytics and Adsense. The infrastructure supports moderate performance and good mobile optimization. However, no CMS or hosting provider details were identified. The site implements cookie consent mechanisms aligned with GDPR requirements, enhancing privacy compliance. From a security perspective, the site enforces HTTPS and uses consent banners for cookies, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection limits domain trust verification, though the website content and business information appear legitimate and professional. Overall, the website presents a solid business platform with good technical and privacy compliance maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would enhance trust and security posture.

D

Dematis

e-facteur.com

9

E-facteur is a professional service website operated by Dematis, a French company specializing in secure electronic mail and document dematerialization solutions. The website targets enterprises and local authorities, offering services such as certified email with tracking, timestamping, and archiving. The company has a strong market presence with hundreds of thousands of users and a portfolio of related digital services. Technically, the website uses modern JavaScript libraries and frameworks, including jQuery, Owl Carousel, and Swiper Slider, and integrates a live chat service (Tawk.to) for customer support. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is implied, but explicit HTTP security headers are not detected in the provided data. No forms with sensitive inputs are present on the homepage, reducing immediate risk exposure. Privacy and cookie policies are comprehensive and GDPR compliant, linked to the parent company’s main site. However, the WHOIS data for the domain www.e-facteur.com is missing, which raises concerns about domain registration legitimacy and consistency with the business claims. Overall, the website is professional and trustworthy from a content and business perspective but would benefit from improved transparency on domain registration and enhanced security headers.

R

Rittler & Co Werbeagentur Graz

werbe-agentur-graz.at

68

Rittler & Co Werbeagentur Graz is a well-established full-service marketing and advertising agency based in Graz, Austria, with over 20 years of experience. They specialize in brand positioning, branding, corporate websites, online shops, and digital marketing strategies. The agency serves businesses seeking comprehensive marketing solutions with a focus on clear strategy, strong creative execution, and measurable results. Their market position is reinforced by multiple industry awards and a strong portfolio of clients. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries like jQuery and Owl Carousel, and implements cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS and no exposed sensitive data, but lacks explicit security policies or incident response information. Overall, the website reflects a professional and credible business with a high level of trustworthiness.

F

Fitek

fitek.com

49

Fitek is a medium-sized technology company specializing in digital invoice management and bookkeeping automation solutions for finance professionals. Established in 2003, the company offers a comprehensive B2B SaaS platform that streamlines purchase, expense, and approval workflows, integrating with leading accounting systems. Their multilingual website and customer testimonials indicate a strong market presence in multiple European countries. Technically, the website is built on WordPress with Elementor and employs modern tools such as Google Tag Manager and WPML for multilingual support. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements like enabling DNSSEC and security headers are recommended. No critical vulnerabilities or privacy policy were detected, but cookie compliance is well implemented. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

O

Oleje a maziva Total - Autorizovaný distributor | Oleje-Total.cz

oleje-total.cz

49

The website oleje-total.cz operates as an authorized distributor of Total brand lubricants and oils, targeting automotive and industrial customers primarily in the Czech Republic. It offers a broad range of products including motor oils, industrial oils, and lubricants for various vehicle types and machinery. The business model is e-commerce focused, providing direct sales through an online platform with clear categorization and product offerings. The site positions itself as a trusted distributor with consistent branding and a professional online presence. Technically, the website utilizes a BohemiaSoft CMS platform with a technology stack including jQuery, Google Tag Manager, Google Analytics, and other common JavaScript libraries. The site is mobile optimized with good SEO practices and a moderate performance profile. Accessibility features are basic but present. Security measures include HTTPS, cookie consent with granular preferences, and CSRF protection, though some security headers are missing and the jQuery version is outdated, which could pose risks. From a security standpoint, the site demonstrates a reasonable posture with encrypted connections and user consent mechanisms. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness. No direct contact emails or phone numbers were found, limiting direct communication channels. There is no evidence of formal security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is functional, professional, and compliant with privacy regulations, but the lack of domain registration transparency and some technical security gaps suggest moderate risk. Strategic improvements in domain registration visibility, security header implementation, and updated libraries are recommended to strengthen the security posture and business credibility.

S

Sappex Aluminium s.r.o.

sappex-aluminium.cz

9

Sappex Aluminium s.r.o. is a Czech manufacturer and supplier specializing in high-quality aluminum windows, doors, sliding systems, facades, and fire protection systems. With over 10 years of tradition, the company offers comprehensive services including price calculation, precise measurement, professional installation, and after-sales service. Their market position is strong within the Czech Republic, targeting residential and commercial construction sectors. The website reflects a professional digital presence with clear navigation, good content quality, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and SEO best practices, though no CMS or hosting provider is explicitly identified. Security posture is good with HTTPS and cookie consent mechanisms, but lacks published security policies or incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the website content and contact details appear legitimate and consistent with a small manufacturing business.

S

Studio Marta

studiomarta.cz

10

Studio Marta is a theatrical studio affiliated with the Janáček Academy of Music and Performing Arts (JAMU) in Brno, Czech Republic. It focuses on theatrical education, student performances, and cultural events, serving students, academics, and theatre enthusiasts. The website provides program schedules, student profiles, and ticketing links, positioning itself as a niche educational and cultural institution with a strong local presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins for enhanced user experience and content delivery. The site is mobile-optimized and has good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and a formal security policy. Privacy compliance is adequate with cookie consent mechanisms and a privacy policy in place. Overall, the site is professional, trustworthy, and well-maintained, reflecting the institution's credibility and cultural mission.

A

Antir, s.r.o.

antir.cz

46

Antir, s.r.o. is a Czech Republic-based small manufacturing company specializing in custom stainless steel production, including railings, staircases, and winery equipment such as tanks and vinification vessels. Founded in 2007, the company offers end-to-end services from measurement and design to installation and delivery, targeting clients in construction, interior design, and the wine industry. The website reflects a professional presence with clear business information and a gallery of references, positioning the company as a specialist in its niche market. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. However, the site lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. The contact form collects personal data but does not show explicit anti-spam or privacy compliance mechanisms. From a security perspective, the site uses HTTPS as implied by URLs but does not demonstrate implementation of security best practices such as Content Security Policy or HSTS headers. No incident response or vulnerability disclosure information is provided, which could be a gap in readiness. No suspicious or malicious content was detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and incident response transparency to improve trust and reduce risk. Strategic improvements in these areas will strengthen the company’s digital maturity and customer confidence.

G

Glamour Guardian s.r.o.

vseprovlasy.cz

55

Glamour Guardian s.r.o., operating the website vseprovlasy.cz, is a well-established Czech retail business specializing in professional hair cosmetics and hairdressing equipment. With over 27 years of experience, the company serves both professional hairdressers and end customers, offering a wide range of products, expert seminars, and personalized services including free regional delivery and loyalty discounts. The website reflects a mature e-commerce platform with a clear focus on the hair care industry and a strong local market presence. Technically, the website is built on the FastCentrik e-shop platform using ASP.NET technologies, enhanced with modern JavaScript libraries such as Owl Carousel and Google reCAPTCHA for security. The site is mobile-optimized, accessible, and incorporates SEO best practices, ensuring a good user experience. Privacy and cookie consent mechanisms are well implemented, demonstrating compliance with GDPR requirements. From a security perspective, the site uses HTTPS and includes anti-spam measures like Google reCAPTCHA. While explicit security headers are not fully confirmed, the site shows no signs of vulnerabilities or exposed sensitive data. However, the absence of a public WHOIS record suggests domain privacy protection, which is common and justified for this business type but limits domain age verification. Overall, the website presents a professional, trustworthy, and compliant online presence with moderate to good technical and security posture. Strategic recommendations include enhancing security headers, publishing a security.txt file for vulnerability disclosure, and providing incident response contact information to further strengthen trust and security readiness.

R

RKM

die-deutschen-musikhochschulen.de

43

Die deutschen Musikhochschulen is a German association representing music universities and conservatories, providing organizational information, event details, and competition announcements. The website serves students, educators, and stakeholders in the music education sector in Germany. The business operates as a non-profit association with a clear focus on education and cultural promotion. Technically, the website is built on WordPress using the Divi theme, leveraging jQuery and Owl Carousel for interactive elements. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. No vulnerabilities or tracking scripts were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security headers and transparency policies are recommended.

G

Girona Softwareentwicklung GmbH

konsentas.de

49

Konsentas.de is a professional website operated by Girona Softwareentwicklung GmbH offering a modular online appointment scheduling system tailored for German government authorities. The platform supports various public sector applications including resident registration, health offices, vehicle registration, and COVID-19 related tools. The website demonstrates a solid market position with multiple municipal clients and a clear focus on e-government digital transformation. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and integrates Google Analytics and LinkedIn tracking for marketing insights. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is moderate with cookie consent implemented but lacking explicit security headers and published security policies. WHOIS data aligns with the business identity, indicating legitimacy. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.

P

Polskie Towarzystwo Onkologii Klinicznej

ptok.pl

57

The website ptok.pl represents the Polish Society of Clinical Oncology, a well-established professional healthcare society focused on oncology education, research, and clinical practice in Poland. The site offers a comprehensive range of resources including news, conferences, educational programs, and publications targeted primarily at oncology professionals and patients seeking oncology information. The society has a strong market position supported by a domain age of nearly two decades and partnerships with reputable organizations such as ESMO. Technically, the site is built on Drupal 8 with modern front-end libraries and integrates Google Tag Manager for analytics and cookie consent management. Security posture is adequate with HTTPS enabled and a consent mechanism in place, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, lacking explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and safe for general audiences.

P

Polskie Towarzystwo Neurologiczne

ptneuro.pl

60

Polskie Towarzystwo Neurologiczne operates a professional and educational website serving neurologists, medical professionals, and patients in Poland. The site provides membership information, certifications, news, educational campaigns, and access to professional journals. The organization is well-established with a domain registered since 2006 and maintains a consistent brand presence online. Technically, the website is built on Drupal 8 with modern JavaScript libraries and integrates Google Analytics for traffic monitoring. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements could be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a credible and trustworthy professional society with good digital maturity.

F

Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej

ippez.pl

55

The Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej is a Polish non-profit organization dedicated to enhancing patient rights awareness, promoting health education, and supporting patient organizations across Poland. The website reflects a mature presence with comprehensive content about their campaigns, projects, and educational initiatives. Their market position is that of a reputable healthcare advocacy entity with strong ties to patient communities and healthcare stakeholders. Technically, the website is built on WordPress using modern frameworks like Bootstrap and Divi Builder, with SEO and accessibility considerations in place. Security posture is good with HTTPS enforced and consent management implemented, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Tourism Office Pula

pulainfo.hr

43

Tourism Office Pula operates as the official tourism promotion entity for the city of Pula, Croatia, providing comprehensive information on local attractions, events, accommodation, and visitor services. The website is well-structured, multilingual, and designed to serve tourists and visitors seeking travel-related information. The business model is government-oriented, focusing on tourism promotion and visitor engagement. The site demonstrates a good level of digital maturity with modern WordPress infrastructure, SEO optimization, and accessibility features. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

M

MAS Radbuza

mas-radbuza.cz

41

MAS Radbuza is a Czech local action group focused on community-led local development across 52 municipalities in the Plzeň region. The organization manages EU grant distribution through multiple operational programs and supports local education projects, GDPR compliance services, and cultural initiatives. The website is built on WordPress with a moderate technical stack including Bootstrap and jQuery, and uses Google reCAPTCHA for form security. While the site is accessible and well-structured, it lacks some modern security headers and cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trustworthiness, but the presence of partner logos and EU funding references supports legitimacy. Overall, the site demonstrates a good balance of content quality and technical implementation with room for security and privacy improvements.

M

MGS Motor Gruppe Sticht GmbH & Co. KG

auto-hensel.de

60

MGS Motor Gruppe Sticht GmbH & Co. KG is a well-established automotive dealership group operating nine locations in Bavaria, Germany. The company offers a wide range of vehicles including new and used cars, commercial vehicles, and campers, representing multiple well-known brands such as Ford, Fiat, Mazda, and Jaguar. Their business model focuses on vehicle sales, leasing, servicing, and customer support, targeting both private and commercial customers in the region. The website reflects a professional and comprehensive digital presence with clear navigation and detailed service offerings. Technically, the website employs modern web technologies including jQuery, Owl Carousel, and a proprietary CMS platform by Audaris. It is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured content. Google Analytics is used with consent management configured to deny tracking by default, indicating privacy awareness. From a security perspective, the site uses HTTPS with secure cookie flags and basic security best practices. However, it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR requirements, providing a trustworthy platform for customers. Strategic improvements could include enhanced security headers and published security policies to further strengthen trust and compliance.

M

Metrostav Development a.s.

metrostavdevelopment.cz

56

Metrostav Development a.s. is a well-established real estate developer in the Czech Republic, focusing on residential and commercial projects primarily in Prague. The company is part of the larger Metrostav Group and has a domain age consistent with its business history, indicating a stable market presence. Their website provides comprehensive information about ongoing and completed projects, targeting property buyers and investors in the region. Technically, the website employs modern web technologies such as Bootstrap, jQuery UI, and integrates Google Analytics and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements CSRF tokens in forms, but lacks explicit security headers and published security policies, which are recommended for improvement. Privacy compliance is strong with a visible cookie consent mechanism and a detailed privacy policy. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, with room for enhancement in security transparency and incident response readiness.

S

SHERWOOD Digital a.s.

majales.cz

9

The website www.majales.cz serves as the central portal for the Majáles 2026 student festivals held across multiple Czech cities including Prague, Brno, Ostrava, and Hradec Králové. Operated by SHERWOOD Digital a.s., the site promotes large-scale student celebrations and provides event information and ticketing details. The business is positioned as a leading festival organizer in the Czech Republic, targeting students and young adults interested in cultural and social events. The site content is primarily in Czech with an option for English, reflecting a regional focus with some international accessibility. Technically, the website employs a modern tech stack including Bootstrap, Owl Carousel, Swiper, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Cookie consent is managed via CookieScript, demonstrating compliance with EU cookie regulations. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were identified, and accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in for targeting and performance cookies, which is positive. Security headers are implied but not explicitly confirmed. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a publicly accessible privacy policy and terms of service pages is a compliance gap. Additionally, WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website presents a professional and trustworthy front for a regional event organizer but would benefit from enhanced transparency in privacy and security policies, explicit contact information, and verification of domain registration details to strengthen trust and compliance posture.

L

Litea Solution s.r.o.

usbmedia.cz

60

USB Media, operated by Litea Solution s.r.o., is a Czech-based company specializing in the custom manufacturing and sale of promotional USB flash drives and IT-related corporate gifts. Established in 2010, the company offers a range of services including laser engraving, printing on flash drives, and production of IT gadgets such as Bluetooth speakers and wireless chargers. Their market position is that of a specialized provider catering primarily to business clients seeking unique promotional items. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Analytics, Google reCAPTCHA, and Owl Carousel. It uses Google Fonts and integrates Google Maps API for location services. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on its contact form, which helps mitigate spam and abuse. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of a privacy policy and cookie consent mechanism, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data showing domain registration since 2010. Contact details are transparent with dedicated customer service representatives. The site does not contain any adult or questionable content and targets a general business audience. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and regulatory adherence.

B

Bonavita, spol. s r.o.

bonavita.cz

46

Bonavita, spol. s r.o. is a leading Czech manufacturer specializing in breakfast cereals, oat flakes, and soy products. The company operates a professional website that supports its retail and e-commerce business models, including a bonus program and an online shop. The website is well-structured, with clear navigation and relevant content targeting general consumers interested in healthy breakfast options. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, and integrates analytics and marketing tools like Google Analytics and Seznam Retargeting. While the website is mobile-optimized and user-friendly, there is room for improvement in security headers and accessibility compliance. The security posture is moderate, with HTTPS implied but no explicit security headers detected in the provided data. Privacy and cookie policies are present and GDPR compliant, reflecting a good privacy compliance stance. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the overall business credibility remains high due to clear contact information and professional presentation.

K

Krankenhaus Buchholz und Winsen gemeinnützige GmbH

krankenhaus-winsen.de

49

Krankenhaus Winsen is a regional acute care hospital located near Hamburg, Germany, operating under the umbrella of Krankenhaus Buchholz und Winsen gGmbH. The hospital offers a broad range of medical services across multiple specialized departments and competence centers, including surgery, anesthesiology, gynecology, orthopedics, and emergency care. The website targets patients, visitors, and healthcare professionals, providing comprehensive information about medical services, patient preparation, and events. The hospital maintains partnerships with related healthcare and educational institutions, enhancing its service offerings and training capabilities. Technically, the website is built on TYPO3 CMS, utilizing modern JavaScript libraries such as jQuery and Owl Carousel for interactive elements. The site is mobile-optimized with good navigation clarity and SEO practices. Hosting is provided by kundenserver.de, with HTTPS enforced and cookie consent implemented via an opt-in mechanism. Analytics are handled through Matomo, respecting user privacy. From a security perspective, the site uses HTTPS and cookie consent but lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. The absence of a public incident response or vulnerability disclosure policy is noted as an area for improvement. The WHOIS data aligns with the hospital's identity, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, Krankenhaus Winsen's website demonstrates a solid digital presence with good content quality, privacy compliance, and business credibility. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure to strengthen security posture and trust.

K

Krankenhaus Buchholz und Winsen gemeinnützige GmbH

krankenhaus-buchholz.de

49

Krankenhaus Buchholz und Winsen gemeinnützige GmbH operates as a regional healthcare provider located near Hamburg, Germany, offering a broad range of medical services including surgery, anesthesiology, gynecology, neurology, and emergency care. The hospital positions itself as a medium-sized non-profit institution with specialized competence centers and partnerships, notably with Krankenhaus Winsen. The website is professionally designed using TYPO3 CMS, featuring good mobile optimization and clear navigation, supporting a positive user experience for patients, visitors, and healthcare professionals. Compliance with GDPR and cookie consent regulations is well implemented, reflecting a mature privacy posture. Security practices include HTTPS enforcement and cookie opt-in mechanisms, though there is room for improvement in security headers and incident response transparency. The website integrates Matomo analytics with minimal user tracking, aligning with privacy best practices. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining regular security audits to further strengthen the security posture.

H

HochschülerInnenschaft an der medizinischen Universität Graz

oehmedgraz.at

46

ÖH Med Graz is the official student representation body for the Medical University of Graz, Austria. The organization provides advocacy, consultation, and various student services, positioning itself as a key support entity for medical students. The website reflects a non-profit educational focus with clear targeting towards students at the university. Technically, the site is built on WordPress using modern plugins and frameworks such as Elementor and Yoast SEO, indicating a moderate to advanced digital maturity. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional, serving its intended audience effectively.

M

Metrostav Development a.s.

palmovkaopenpark.cz

56

Metrostav Development a.s. is a well-established real estate developer operating primarily in Prague and other locations in the Czech Republic. The company focuses on residential and commercial projects, emphasizing modern architecture, quality materials, and environmental responsibility. Their website reflects a mature digital presence with clear business information, multiple ongoing and completed projects, and a professional design. Technically, the site uses a modern tech stack including jQuery UI, Bootstrap, Font Awesome, and integrates Google Analytics and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site is trustworthy, professional, and well-maintained, supporting the company's market position as a reputable real estate developer.

Č

Česká golfová federace

bavsegolfem.cz

41

Bav se golfem is a Czech Republic-based golf information platform operated in association with the Czech Golf Federation. It serves as a comprehensive resource for golf enthusiasts, providing location-based golf course listings, beginner guides, event information, and blog content. The platform targets a broad audience ranging from beginners to advanced players, promoting golf as a healthy and enjoyable leisure activity. The website is well-positioned nationally as a trusted source for golf-related information in the Czech Republic. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Facebook SDK, Google reCAPTCHA, and Mapy.cz API for mapping services. The site is hosted on Czech infrastructure with Active24 as the inferred hosting provider. The website demonstrates good mobile optimization, SEO practices, and user experience, although accessibility features are basic. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent automated abuse. However, explicit security headers are not evident, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business purpose. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

I

International Taekwon-Do Federation

itftkd.org

50

The International Taekwon-Do Federation (ITF) operates a comprehensive online platform serving the global Taekwon-Do community. The website acts as a central hub providing access to official federation information, event details, a dedicated database, live event streaming, and an e-commerce store for official merchandise. The organization positions itself as the supreme authority in ITF Taekwon-Do, targeting practitioners, members, and enthusiasts worldwide. The business model is non-profit and community-focused, emphasizing legacy and authenticity of the martial art founded by Gen. Choi Hong Hi. Technically, the website is built on WordPress using the Twenty Twenty-One theme, enhanced with JavaScript libraries such as jQuery and Owl Carousel for interactive content. The site is hosted likely via GoDaddy, with HTTPS enabled and basic performance and mobile optimization. Accessibility and SEO are implemented at a basic to good level, with internationalization supported through Google Translate integration. From a security perspective, the site benefits from HTTPS and domain locking status but lacks advanced DNS security (DNSSEC) and security headers. There are no visible forms collecting personal data on the main page, and no published security or incident response policies. Privacy compliance is partial, with privacy and cookie policies present but no active cookie consent mechanism. The domain registration is consistent and appropriate for the organization's history, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-aligned with its mission, though improvements in security headers, privacy compliance, and incident response transparency are recommended to strengthen its security posture and regulatory adherence.

E

ELREC AG

entsorgi.li

48

Entsorgi Wertstoffsammelstelle operates as a public recycling and waste collection service primarily serving private individuals and businesses in Liechtenstein and adjacent Swiss regions. The company offers a variety of recycling collection points for materials such as metals, paper, plastics, electronics, and hazardous waste. It also provides container rental services and has formed strategic partnerships, notably with RecyPac for the national RecyBag recycling system, enhancing its logistics and quality assurance capabilities. The website reflects a regional leader position in waste management services with a focus on sustainability and circular economy principles. Technically, the website is built on WordPress 6.7.4, leveraging modern JavaScript libraries and Google Maps API for interactive location services. The site is mobile-optimized, accessible, and employs GDPR-compliant privacy and cookie policies. Performance is moderate with good SEO and user experience design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The WHOIS data is notably absent, which raises concerns about domain registration legitimacy. Despite this, the website content and business information appear professional and trustworthy. No security incident response or vulnerability disclosure information is provided, indicating potential areas for improvement in transparency and security readiness. Overall, Entsorgi presents a credible and regionally important recycling service with a well-structured digital presence. Addressing domain registration transparency and enhancing security headers would strengthen trust and security posture further.

U

UltiMaker

ultimaker.com

10

UltiMaker is a well-established company specializing in professional 3D printing solutions, including a wide range of 3D printers, materials, and software tailored for industries such as manufacturing, automotive, defense, and education. The company positions itself as a leader in the 3D printing market, offering innovative and modular products that cater to professional and industrial needs. The website reflects a mature digital presence with comprehensive content and a professional design, targeting business customers and professionals seeking advanced 3D printing technologies. Technically, the site is built on WordPress and leverages modern JavaScript libraries and marketing tools, hosted with reputable providers and protected by HTTPS. However, there is a lack of visible privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS and form protections but could be improved by adding security headers and publishing incident response information. Overall, the site is trustworthy and professional but should enhance privacy compliance and security transparency to align with best practices.

C

CompanyWall

companywall.co.uk

10

CompanyWall is a UK-based financial data platform specializing in providing credit rating information and comprehensive financial analysis of UK companies. Established in 2013, it offers various subscription and pay-per-report services tailored to business entities seeking reliable financial insights for business expansion and risk management. The platform is supported by a consistent brand presence and active social media channels, reinforcing its market position as a trusted financial data provider. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, and Google reCAPTCHA, hosted by GoDaddy. The site is mobile-optimized with good SEO practices and uses HTTPS to secure user interactions. However, some security headers are missing, and cookie consent mechanisms could be improved to enhance privacy compliance. Security posture is solid with HTTPS and bot protection on forms, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a good balance of usability, security, and business credibility, suitable for its target audience. Strategically, CompanyWall should focus on enhancing privacy compliance by implementing cookie consent banners, adding security headers, and publishing a dedicated security policy to further build trust and meet regulatory requirements.

B

BAVARIA Bratislava s.r.o.

bavariabratislava.sk

10

BAVARIA Bratislava s.r.o. operates as an authorized BMW dealership and service center located in Bratislava, Slovakia. The company offers a comprehensive range of BMW vehicles including new and used cars, alongside financial services, servicing, and original accessories. Positioned as the largest and most modern BMW showroom in Slovakia, it targets BMW customers seeking premium automotive products and services. The website reflects a professional and consistent brand image aligned with BMW standards. Technically, the website is built on the siteLAB CMS platform and incorporates modern JavaScript libraries such as Swiper.js and Owl Carousel for UI components, along with Google reCAPTCHA for form security and Facebook SDK for customer chat integration. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and integrates anti-bot measures via reCAPTCHA. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

C

CompanyWall Business

companywall.me

63

CompanyWall Business is a Montenegro-based financial and business intelligence platform established in 2013, offering comprehensive credit and financial data services to a wide range of clients including SMEs, large enterprises, financial institutions, startups, and non-profits. The platform provides detailed credit reports, ownership transparency, bankruptcy data, and marketing databases, supporting informed business decisions and risk management. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery UI, FontAwesome, Google reCAPTCHA, and Keycloak SSO for authentication, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS enforcement and bot protection, though some security headers could be improved. The WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's professional content, clear contact information, and social media presence support its legitimacy. Overall, the site is well-designed, mobile-optimized, and provides valuable services to its target audience.

C

CompanyWall Kft.

companywall.hu

62

CompanyWall Kft. operates the CompanyWall Business platform, providing comprehensive business and financial data services primarily focused on Hungarian companies. Established in 2013, it holds a strong market position as Hungary's largest business database for credit and financial information. The platform offers subscription-based access to detailed company credit reports, financial statements, bankruptcy and auction data, targeting businesses and professionals seeking reliable business intelligence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, and integrates Keycloak for single sign-on, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and anti-bot protections, though improvements in HTTP security headers and incident response transparency are recommended. Overall, the site demonstrates good privacy compliance with clear policies and consent mechanisms. The business is credible, with consistent WHOIS data and transparent contact information, supported by active social media presence. No critical vulnerabilities or suspicious content were detected, positioning the platform as a trustworthy resource in its sector.

C

CompanyWall Business

companywall.ba

65

CompanyWall Business is a well-established platform founded in 2013 that provides comprehensive financial and credit information services for companies operating in Bosnia and Herzegovina. It offers a variety of subscription packages tailored to different user needs, including detailed credit reports, financial analysis, and monitoring of company statuses such as bankruptcies and liquidations. The platform targets businesses and professionals who require reliable data to make informed decisions and maintain competitive advantage. The website demonstrates a consistent brand presence and professional content quality, supported by customer testimonials and active social media engagement. From a technical perspective, the website employs modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA for security. It integrates Keycloak for single sign-on authentication, indicating a mature approach to user management. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Performance is moderate, with room for optimization. Security-wise, the site enforces HTTPS, uses security headers, and implements bot protection mechanisms. However, it lacks a publicly available security policy and incident response information, which are recommended for transparency and compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, CompanyWall Business presents a trustworthy and professional online presence with solid business credibility and technical implementation. Strategic improvements in security transparency and accessibility could further enhance its posture.

C

CompanyWall

companywall.al

63

CompanyWall Business is a well-established platform founded in 2013 that provides comprehensive financial and credit information services for companies in Albania. It operates under the parent company CompanyWall UK Ltd and maintains a strong regional presence with partner sites across multiple Balkan countries. The website offers subscription-based access to detailed business data, credit evaluations, bankruptcy information, and auction listings, targeting business professionals and companies seeking reliable financial insights. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security posture is solid with HTTPS enforcement and input validation, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, reflecting good compliance practices. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

The website www.locator-tzzz.com serves as an interactive tourism portal for Zagrebačka županija (Zagreb County) in Croatia. It is operated by the Turistička zajednica Zagrebačke županije, a public non-profit organization focused on promoting tourism within the region. The site offers an interactive map, listings of points of interest, accommodations, events, and cycling routes, targeting tourists and visitors interested in exploring the area. The business model is non-commercial, aiming to support regional tourism development. Technically, the website employs a range of established web technologies including Google Maps API, jQuery, Bootstrap, and various UI libraries to provide a responsive and interactive user experience. The site is moderately optimized for mobile devices and has a clear navigation structure. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of CSRF tokens in forms is a positive sign, but the absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness despite the professional appearance of the site. Overall, the website provides valuable regional tourism information but suffers from significant security and compliance gaps. The unclear domain registration status is a critical risk factor. Strategic improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance trust and protect users.

O

Obiteljski centar

obiteljski.hr

48

Obiteljski centar is a Croatian public institution dedicated to providing counseling services and programs aimed at children, youth, parents, and families. The organization operates with a mission to support personal growth, strengthen family relationships, and foster community engagement. Their services are offered free of charge, emphasizing accessibility and social welfare. The website reflects a well-established entity with a domain age consistent with its founding year of 2013. The content is professionally presented in Croatian, targeting local audiences in need of social and family support services. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. While the hosting provider is not explicitly identified, the site uses HTTPS with a good SSL configuration, contributing to secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of a security policy or incident response page suggests room for enhancement in security transparency. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a clear focus on social services. Recommendations include implementing additional security headers, publishing security policies, and maintaining regular updates to WordPress and plugins to sustain security posture.

T

Turistička zajednica grada Sv. I. Zeline

visitzelina.hr

41

The website represents the official tourism board of Sveti Ivan Zelina, Croatia, providing comprehensive information about local culture, events, gastronomy, sports, and accommodation. It serves as a key resource for tourists and local visitors, promoting sustainable tourism and regional attractions. The site is well-branded and consistent with its government and non-profit identity. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and offers interactive features like maps and video content. Security-wise, the site uses HTTPS with good SSL configuration but lacks some security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's purpose and location, indicating legitimacy and trustworthiness.