Security Directory

I

IOSEC

iosec.eu

59

IOSEC is a specialized service provider focused on GDPR compliance, cybersecurity, and related certifications such as ISO/IEC 27001, ISO 22301, and TISAX. The company targets organizations requiring expert guidance in data protection, risk management, and security audits, positioning itself as a niche player in the European information security market. The website is professionally designed using Joomla CMS and Bootstrap, offering a multi-lingual experience and clear service descriptions. Technical infrastructure is modern and secure, with HTTPS enforced and secure forms implemented. However, the absence of a cookie policy and explicit incident response contacts are areas for improvement. Overall, IOSEC demonstrates a strong security posture and business credibility, suitable for clients seeking compliance and cybersecurity consulting.

C

Celimed s.r.o.

celimed.sk

66

Celimed s.r.o. operates as the official authorized representative and e-commerce retailer of OMRON medical devices in Slovakia, specializing in blood pressure monitors, inhalators, and related healthcare technology. The company holds a strong market position as a trusted provider with clinical accuracy and endorsement from healthcare professionals. Their website offers a comprehensive product catalog, customer support, and educational content targeting Slovak consumers and healthcare providers. Technically, the website is built on the SiteJay 2.0 CMS platform, utilizing modern JavaScript libraries such as jQuery, Fancybox, and Slick Carousel. It integrates Google Analytics and Tag Manager for analytics and marketing, alongside a live chat service (SmartSupp). The site is mobile-optimized with good SEO and accessibility features, though some security headers could be improved. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for maturity in security governance. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively supports the business model of authorized medical device retail and customer engagement in Slovakia.

V

Vlasy z Turecka – transplantace vlasů v Turecku

vlasyzturecka.cz

44

Vlasy z Turecka is a Czech Republic-based medical tourism service specializing in hair transplantation procedures performed in Turkey, specifically representing the Istanbul Medipol faculty hospital. The website targets Czech-speaking individuals seeking advanced hair transplant methods such as FUE Sapphire and DHI, complemented by PRP therapy and comprehensive pre- and post-operative care. The business operates as a small entity with a clear focus on facilitating medical travel and treatment arrangements. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap, jQuery, FancyApps UI, and Splide.js. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good design and navigation, although accessibility features are basic. Hosting is provided by WEDOS, consistent with the domain registration data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and publicly available privacy or cookie policies, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. Tracking scripts indicate extensive user monitoring without visible consent mechanisms, posing privacy compliance risks. Overall, the website is professionally presented and trustworthy for its niche market but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

CreativWerkstatt Herten is a local educational and creative workshop provider based in Herten, Germany. The organization offers a variety of courses spanning creative arts, environmental education, dance, theater, science, and media, targeting a broad audience including schools and the general public. The website is professionally designed using WordPress and modern web technologies, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Overall, the website and domain registration details are consistent and legitimate, reflecting a trustworthy and credible educational service provider.

The Seniorenbeirat Holzwickede website serves as an informational platform for the senior advisory council of the Holzwickede community in Germany. It provides basic information and community engagement resources targeted at senior citizens and local residents. The site is built on WordPress using the Nirvana theme and hosted on netcup servers, reflecting a modest technical infrastructure suitable for a small local government entity. The website employs HTTPS and a cookie consent mechanism, demonstrating basic privacy compliance. However, it lacks comprehensive security policies, incident response contacts, and terms of service, which limits its security maturity. The content is minimal but relevant, with no signs of tracking or advertising beyond cookie management. Overall, the site is functional and moderately trustworthy but could benefit from enhanced security and privacy features.

D

DVGW

mein-regelwerk.de

53

DVGW operates a professional website providing the DVGW-Regelwerk, a foundational set of technical rules and DIN standards for the gas and water industries in Germany. The site targets professionals requiring authoritative regulatory content, offering online subscriptions and a shop for purchasing modules. The business is positioned as a trusted authority in the energy sector with consistent branding and quality content. Technically, the site is built on WordPress with Elementor and Yoast SEO, featuring modern plugins and a cookie consent mechanism. The SSL configuration is excellent, but some security headers are missing. Privacy compliance is partial due to the absence of a visible privacy policy or terms of service. Contact information is clearly presented, enhancing business credibility. Overall, the site is secure, professional, and well-structured, though improvements in privacy documentation and security headers are recommended.

I

IWW Analytik und Service

iww-analytik-und-service.de

52

IWW Analytik und Service is a specialized service provider focused on water analytics and related consulting services, primarily serving the water management sector in Germany. The company positions itself as a competent partner in water-related environmental services, targeting professional and organizational clients. The website is professionally designed using WordPress with the Divi theme and includes modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance respectively. Hosting is provided by netcup, a German hosting provider, which aligns with the company's geographic focus. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and detailed privacy or terms of service documentation. Contact information is not directly visible on the homepage, which may impact user trust and compliance. Overall, the site is functional, well-structured, and suitable for its niche audience but would benefit from enhanced privacy and security disclosures.

3

3D Ouest

3douest.com

58

3D Ouest is a French software company specializing in management solutions for local governments and public sector entities. Established in 2003, it offers a suite of SaaS applications tailored to various municipal needs such as childcare, municipal hall management, tourist tax collection, cemetery management, and scheduling. The company positions itself as a specialist provider with a strong focus on adapting to client-specific management modes and providing personalized support. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting French local authorities. Technically, the website is built on WordPress with modern plugins including Yoast SEO and LayerSlider, and uses Matomo for privacy-conscious analytics. The site is hosted by OVH sas, a reputable French hosting provider. The technical implementation is solid with good mobile optimization and SEO practices, though some security enhancements like DNSSEC and security headers could be improved. From a security perspective, the site uses HTTPS and hCaptcha to protect forms, but lacks published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR considerations are evident. Overall, 3D Ouest presents a trustworthy and professional online presence consistent with its business claims. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

G

GRANDFILM

grandfilm.de

48

Grandfilm is a German-based film distribution and production company specializing in independent and art-house cinema. Their website showcases a broad portfolio of films currently in cinemas, upcoming releases, and educational film content, targeting film enthusiasts, cinema operators, and educators. The business operates primarily in the media sector with a small company size and a niche market position in Germany. Technically, the website is built on WordPress with modern analytics and marketing integrations such as Google Analytics, Google Tag Manager, and Facebook Pixel, all implemented with GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site enforces HTTPS and uses cookie consent but lacks explicit security policy pages and some security headers, indicating room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Liga Vozíčkářů

ligavozic.cz

45

Liga Vozíčkářů is a Czech non-profit organization dedicated to supporting wheelchair users and people with disabilities. Established since 2000, the organization provides various activities and advocacy services to its target audience. The website is built on WordPress using the Avada theme and several common plugins, including Contact Form 7 and Cookie Notice, indicating a moderate level of digital maturity. The site implements HTTPS and cookie consent mechanisms, reflecting basic compliance with privacy standards. However, it lacks explicit privacy and terms of service policies, which are important for full GDPR compliance. Security posture is adequate with no evident vulnerabilities or exposed sensitive data, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security documentation.

O

One World Romania

oneworld.ro

47

One World Romania is a well-established non-profit organization dedicated to promoting documentary films through its flagship One World Romania festival and related cultural activities such as workshops and film tours. The organization targets documentary enthusiasts, educators, and the general public interested in socially relevant cinema. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, hosted on a Romanian hosting provider, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy present but no detailed privacy or incident response policies. Social media integration and newsletter subscription indicate active community engagement. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

G

Global Encryption Coalition

globalencryption.org

72

The Global Encryption Coalition is a non-profit organization founded in 2020 that promotes and defends encryption worldwide, particularly in countries and multilateral forums where encryption is under threat. With over 350 members, the coalition supports companies offering encrypted services and organizes events such as Global Encryption Day to raise awareness. The website reflects a mature digital presence with a focus on advocacy, policy, and community engagement. Technically, the site is built on WordPress with modern plugins and libraries, including Yoast SEO and CookieYes for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and accessible, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. WHOIS data is unavailable due to privacy protection, but the site’s professionalism and active content indicate legitimacy. Overall, the site presents a trustworthy and authoritative resource in the encryption advocacy space.

L

La Semaine du Son

lasemaineduson.org

43

La Semaine du Son is a recognized non-profit organization dedicated to raising awareness about societal issues related to sound. It organizes international events, conferences, and competitions, notably in partnership with UNESCO, focusing on auditory health and sound culture. The website is professionally designed, multilingual, and provides comprehensive information about its activities and partners. Technically, it is built on WordPress with modern plugins and themes, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site presents a trustworthy and professional digital presence aligned with its mission.

D

Digitalagentur Sabelfeld

sabelfeld-webdesign.de

53

Digitalagentur Sabelfeld is a newly established digital agency based in Lippstadt, Germany, specializing in web design, e-commerce solutions, SEO, and online marketing. The company positions itself as a professional and reliable partner for small to medium businesses seeking to enhance their digital presence and customer reach. The website is well-designed, modern, and optimized for mobile devices, reflecting a strong digital maturity. Technically, the site is built on WordPress with popular plugins such as Elementor and Slider Revolution, ensuring flexibility and ease of content management. Security posture is good with HTTPS enabled and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the site projects a trustworthy and professional image with clear business focus and digital competence.

P

Počítáme s vodou

pocitamesvodou.cz

45

Počítáme s vodou is an environmental project focused on educating government representatives, public administration, and citizens about sustainable and nature-based rainwater management practices in the Czech Republic. The website serves as an information hub offering publications, case studies, event archives, and a database of practical examples related to decentralized rainwater utilization and management. The project positions itself as a trusted resource in the environmental and governmental sector with a clear focus on sustainability and water conservation. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Maps API, and SEO plugins. It uses HTTPS and integrates social media channels for outreach. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data for enhanced search visibility. From a security perspective, the site enforces HTTPS but lacks several important security headers such as Content-Security-Policy and HSTS, which could improve its security posture. No signs of WAF or blocking mechanisms were detected, and no sensitive data exposure was found. However, the absence of privacy and cookie policies indicates compliance gaps, especially regarding GDPR. Overall, the site is a credible and professionally maintained resource with strong content quality and user experience. The main risk lies in the missing WHOIS data, which reduces domain trustworthiness, and the lack of explicit privacy compliance documentation. Strategic improvements in security headers and privacy transparency are recommended to enhance trust and compliance.

H

Hutschn Bräu

hutschn-braeu.at

49

Hutschn Bräu is a small hospitality business operating a brewery and beer garden located in Vienna's Böhmischen Prater. The website reflects a local-focused business offering self-brewed beers, freshly cooked meals, and sweets, with an active community engagement through events and a newsletter. The business model combines on-site hospitality with an online shop, targeting local visitors and beer enthusiasts. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and a responsive design. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is addressed with a GDPR privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy, with good content quality and user experience.

P

Plinko Game Online

plinkogambling.games

56

Plinko-Gambling.game is a professionally designed online gambling website specializing in Plinko casino games. It offers a comprehensive range of services including real money gameplay, mobile app downloads, demo versions, cryptocurrency support, and detailed casino reviews. The site targets adult users interested in online gambling and positions itself as a trusted source for Plinko gaming with a focus on transparency and fairness through provably fair technology. Technically, the site is built on WordPress with modern plugins for SEO and performance optimization, hosted behind Cloudflare DNS. Security posture is good with SSL encryption and 2FA mentioned, but lacks explicit published privacy and cookie policies. The domain is newly registered with privacy protection, which is typical for gambling sites but reduces registrant transparency. Overall, the website is well-structured, mobile-optimized, and content-rich, but could improve privacy compliance and contact transparency.

B

Bellona N.V.

grandwin-cz.cz

54

Grandwin CZ is an international online casino operated by Bellona N.V., licensed under Curacao eGaming, targeting Czech players with a comprehensive offering of casino games and sports betting. The website is professionally designed, mobile-optimized, and provides a rich user experience with detailed information on games, bonuses, and payment methods. Technically, it is built on WordPress with modern libraries and uses Cloudflare for DNS and security. Security posture is good with HTTPS and CSP headers, though additional security headers and privacy compliance mechanisms could be improved. The domain is recently registered but consistent with the business operator. Overall, Grandwin CZ presents a trustworthy and competitive online gambling platform for its target market.

P

Plinko X

plinkox.com

53

Plinko X is a niche online gaming review and affiliate website dedicated to the Plinko X slot game by Smartsoft Gaming. The site offers detailed game reviews, demo access, strategies, and affiliate links to online casinos. It targets online casino players and gaming enthusiasts interested in this specific game. The website is built on WordPress with SEO optimizations and uses Cloudflare DNS services. While the site is well-structured and content-rich, it lacks key privacy and cookie policies, as well as direct contact information, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and legitimate for the business type and age.

I

International Water Association

iwa-network.org

52

The International Water Association (IWA) is a globally recognized non-profit organization dedicated to uniting water professionals from over 140 countries to advance sustainable water and sanitation solutions. With a history spanning over 75 years, IWA serves as a leading voice in the water sector, offering membership services, knowledge resources, events, and professional networking opportunities. The website reflects a mature digital presence with comprehensive content, including news, events, blogs, and educational programs targeted at water sector stakeholders worldwide. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder, ensuring a responsive and SEO-optimized experience. Hosting appears stable with TransIP nameservers, and the site uses HTTPS with good SSL configuration. Cookie consent mechanisms and privacy policies are implemented, reflecting compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS and uses reputable plugins but lacks some advanced security headers and a public security policy or incident response information. No vulnerabilities or suspicious activities were detected in the content. The WHOIS data aligns well with the organization's identity, showing consistent registration details and domain age appropriate for the business history. Overall, the website demonstrates a strong professional and trustworthy presence with good compliance and technical maturity. Recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and vulnerability disclosure policies to further strengthen trust and security posture.

A

Asociácia čistiarenských expertov SR

acesr.sk

53

The website acesr.sk represents the Asociácia čistiarenských expertov SR, a Slovak professional association focused on water treatment expertise. Established in 2003, the association facilitates knowledge exchange, professional education, and organizes events and publications for experts in water treatment and environmental sectors. The site targets professionals from water companies, consulting firms, academia, and government bodies. The association maintains a modest but consistent presence with over 120 individual and 20 corporate members, positioning itself as a key non-profit entity in Slovakia's water treatment industry. Technically, the website is built on WordPress 6.8.1 with common plugins such as SiteOrigin Panels and SO Widgets Bundle, leveraging Google Fonts and Font Awesome for styling. The site is hosted likely via Websupport.sk, consistent with the registrar and nameservers. Performance and mobile optimization are good, though accessibility and SEO are basic. The site uses HTTPS with no visible security warnings, but lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, the site shows a moderate security posture with HTTPS enabled and no exposed sensitive data. However, it lacks privacy and cookie policies, consent mechanisms, and vulnerability disclosure information, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The site does not appear to use analytics or advertising scripts, indicating minimal user tracking. Overall, the website is a professional and trustworthy platform for its niche audience but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

E

EPF Île-de-France (EPFIF)

grigny2.fr

54

The website www.grigny2.fr represents a French government-backed urban renewal project focused on the Grigny 2 area. Managed by EPF Île-de-France (EPFIF), the project aims to improve living conditions through social housing solutions, property acquisition, and community engagement. The site targets residents, property owners, and local stakeholders, providing information and support related to the transformation of the neighborhood. The website is well-structured, professionally designed, and optimized for SEO and mobile use, reflecting a moderate to high level of digital maturity. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Bootstrap for responsive design. It uses Google Analytics for visitor tracking and implements a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected and no dedicated security or incident response pages are present. The WHOIS data is notably missing, which reduces trustworthiness from a domain registration perspective. However, the website content and contact information strongly indicate legitimacy as a government project. Overall, the site presents a low risk profile but would benefit from enhanced transparency regarding domain registration and security policies. Strategic recommendations include implementing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.

U

Université de Cergy-Pontoise / Faclab

faclab.org

59

Faclab is an educational FabLab affiliated with the Université de Cergy-Pontoise, located in Gennevilliers, France. It provides a range of services including workshops, professional training, documentation, and community maker residencies. The website targets students, makers, and professionals interested in digital fabrication and collaborative making. The business model is focused on education and community engagement within the maker ecosystem. The website is professionally designed, consistent in branding, and includes trust indicators such as university affiliation and GDPR compliance. Technically, the website is built on WordPress 6.8.1 with modern technologies including jQuery, Flowplayer, Google reCAPTCHA, and GDPR cookie consent management via the Complianz plugin. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is no published security policy or incident response contact information. The absence of WHOIS data limits the ability to fully assess domain registration trustworthiness, though the university affiliation and professional presentation suggest legitimacy. Overall, the website presents a low risk profile with good privacy compliance and a solid technical foundation. Strategic improvements include adding security headers, publishing a security policy, and improving domain registration transparency.

T

TukuToi Co Ltd

tukutoi.com

64

TukuToi Co Ltd is a specialized technology service provider focusing on custom WordPress development and PHP programming, emphasizing Swiss quality standards. The company offers tailored solutions including custom themes, plugins, strategic consulting, and comprehensive maintenance services. Their market position is that of a niche provider targeting businesses and professionals seeking high-quality web development services. The website demonstrates a professional and consistent brand presence with clear service offerings and recent project showcases. Technically, the website is built on WordPress 6.7.2 with modern technologies such as Bootstrap, jQuery, and advanced plugins like Toolset and ACF. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some technical improvements are recommended, including the addition of security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security headers and an incident response policy. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, reducing trustworthiness and suggesting the need for verification of domain registration status. Overall, the website is professional, trustworthy, and well-constructed, but improvements in privacy compliance and security transparency are advised to strengthen the security posture and regulatory adherence.

Fidelity Investments operates as a leading diversified financial services company based in the United States, offering investment management, financial advisory, and retirement planning services. The website content reflects a mature, enterprise-level business with a strong market position and a clear focus on serving U.S. individuals, while restricting international access through an explicit usage agreement. Technically, the site employs modern JavaScript libraries and analytics tools, though some areas such as mobile optimization and accessibility could be improved. Security posture is solid with HTTPS usage and security overview references, but lacks visible advanced security headers and explicit incident response disclosures. Overall, the site is professional, trustworthy, and compliant with privacy and cookie policies, though WHOIS data is unavailable, likely due to privacy protections.

WakeUpFestival.cz is the official website for a Pentecostal Christian street festival held annually in České Budějovice, Czech Republic. The festival focuses on community worship, prayer, and cultural events organized by the non-profit association Spolek Most in cooperation with the local diocese. The website provides detailed event information, participant lineups, and contact details, targeting Christian groups and local attendees interested in spiritual and cultural activities. Technically, the site is built on WordPress using the Enfold theme and LayerSlider plugin, with modern web technologies and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features. Overall, the site is professional, trustworthy, and well-suited for its niche audience but would benefit from improved privacy and security practices.

Newzoo is a well-established company founded in 2003, specializing in providing industry-leading PC and console games data, gamer research, and market sizing and forecasting insights. Positioned as a global leader in the gaming data sector, Newzoo targets businesses and professionals seeking comprehensive analytics to inform strategic decisions. The website reflects a professional and consistent brand image, supported by structured data and social media presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and LiteSpeed Cache, leveraging Cloudflare for DNS and hosting. The site uses Google Tag Manager for analytics and tracking, and includes Font Awesome for iconography. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration and Cloudflare's protection. However, DNSSEC is not enabled, and some security headers are not explicitly present. There is no visible security policy, incident response information, or vulnerability disclosure page, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Newzoo's website is professional, secure, and credible, though it lacks explicit privacy and cookie policies in the analyzed content. The site is safe for general audiences and does not contain adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, adding security and incident response documentation, and enhancing security headers to improve the security posture further.

S

Spolek Most

boziden.cz

33

The website www.boziden.cz represents a small non-profit organization named Spolek Most, focused on organizing spiritual and cultural events such as the multi-genre festival 'Boží den', creative weekends, and spiritual retreats primarily in the České Budějovice region of the Czech Republic. The organization aims to foster community engagement and spiritual experiences through family-friendly activities, music, and prayer. The website is built on WordPress using the Bricks theme and Jet Engine plugin, featuring modern web technologies and responsive design. It is well-structured with clear navigation and event information, supported by social media channels on Facebook, Instagram, and YouTube. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable, limiting domain trust assessment, but the website content and structure indicate a legitimate community organization. Overall, the site provides a positive user experience with good content quality and technical implementation but would benefit from enhanced privacy compliance and security best practices.

Mount Hosín is a community and cultural project based in the Czech Republic focused on revitalizing a historic estate and offering creative events and accommodation. The website presents the project clearly with good content quality and a professional design, targeting a general audience interested in cultural, educational, and spiritual activities. Technically, the site is built on WordPress with modern JavaScript libraries and uses Google Analytics for tracking. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data reduces trust in domain legitimacy, though the website content appears authentic and well-maintained. Overall, the site is functional and informative but requires improvements in privacy compliance and security best practices.

The Norway Portal is the official website of the Norwegian Ministry of Foreign Affairs, providing comprehensive information about Norway's embassies, consulates, and permanent missions worldwide. It serves as a key resource for diplomats, travelers, and international relations stakeholders seeking authoritative information on Norway's diplomatic presence. The site is well-positioned as a government information portal with a clear focus on transparency and accessibility. Technically, the website employs modern JavaScript libraries such as jQuery 3.7.1 and integrates analytics tools including Matomo and Microsoft Application Insights, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR compliance. However, it lacks visible security headers and dedicated security or incident response pages, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a high level of professionalism and trustworthiness consistent with its government status. The absence of WHOIS data is typical for Norwegian domains and does not detract from legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing security headers to further strengthen the security posture.

G

GDPR Local

gdprlocal.com

67

GDPR Local is a specialized service provider offering professional GDPR Article 27 EU Representative and data protection services. Founded in 2020, the company targets businesses needing to comply with EU data protection regulations, particularly those requiring an EU Representative under GDPR. The website presents a professional image with good content quality and SEO optimization, supporting multiple languages via Weglot. Technically, the site is built on WordPress, uses modern analytics tools like Microsoft Clarity and Google Tag Manager, and is hosted with Cloudflare, ensuring good performance and security. However, explicit privacy and cookie policies are not detected in the provided content, which is a compliance gap. Security posture is solid with HTTPS and domain transfer protections, but DNSSEC is not enabled. Overall, the site is trustworthy and well-positioned in its niche but should improve privacy compliance documentation and contact transparency.

D

DIRS21

dirs21.de

64

DIRS21 is a well-established German company specializing in web-based booking and channel management solutions for the hospitality industry. With over 20 years of experience and more than 5300 customers, it positions itself as a market leader offering SaaS products that enable hotels and gastronomy businesses to optimize their online distribution and direct bookings. The website reflects a mature digital presence with professional design, clear navigation, and modern technology stack including WordPress, Bootstrap, and HubSpot integrations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. No critical vulnerabilities or suspicious content were detected. Overall, DIRS21 demonstrates strong business credibility and technical maturity suitable for its target market.

N

Nadácia otvorenej spoločnosti

osf.sk

46

Nadácia otvorenej spoločnosti is a well-established Slovak non-profit foundation founded in 2003, dedicated to supporting open society, democracy, and freedom through grants, scholarships, and projects. The website reflects a professional and consistent brand presence with comprehensive content targeting civil society organizations, media, and the general public interested in democratic values. The foundation maintains a moderate-sized digital footprint with active news updates and partnerships in the region. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Mailchimp, indicating a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and GDPR compliance, though there is room for improvement in HTTP security headers and incident response transparency. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

A

Active Citizens Fund

ngonorway.org

65

Active Citizens Fund is a Norwegian non-profit initiative focused on facilitating partnerships and grant opportunities between Norwegian and European civil society organizations. The website serves as a resource hub offering information on funding calls, partner registration, inspirational project stories, and newsletters. It is associated with the Norwegian Helsinki Committee and the Norwegian Ministry of Foreign Affairs, indicating a credible and official backing. The site is scheduled for closure in December 2024, and content updates have ceased accordingly. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Ninja Forms, and uses Plausible Analytics for privacy-friendly tracking. The site is hosted likely on Norwegian government infrastructure, ensuring reliability and compliance with local standards. The design is professional, mobile-optimized, and accessible, with good SEO practices implemented. From a security perspective, the site enforces HTTPS and uses nonce tokens for REST API calls, with no visible vulnerabilities or exposed sensitive data. However, it lacks a formal security policy, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance GDPR compliance and security transparency. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. Strategic recommendations include implementing cookie consent, publishing a security policy, and adding vulnerability disclosure information to improve compliance and trust.

G

Geopark Železné hory – Další nový web v rámci sítě Geopark Železné hory Sites

geoparkzh.cz

54

Geopark Železné hory is a regional organization dedicated to promoting geological heritage, education, and tourism in a geologically significant area of the Czech Republic. The website provides rich content about geotourism, educational programs, research, and interactive media, targeting a broad audience interested in natural and cultural heritage. The site is built on WordPress with modern plugins and includes Google Analytics for visitor tracking. A cookie consent mechanism is implemented, indicating awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were found, and no direct contact information is clearly presented on the site. The WHOIS data for the domain is missing, which slightly reduces trustworthiness but does not negate the legitimacy suggested by the website content and social media presence.

A

Advance Local Media LLC

redclaymedia.com

59

Advance Originals is a film and television production company operating under Advance Local Media LLC, a large and reputable media organization in the United States. The company specializes in creating authentic and impactful stories for television, digital streaming platforms, and feature films, leveraging a rich history of Pulitzer Prize-winning journalism and partnerships with independent creatives. Their market position is strong, supported by their parent company and sister company Condé Nast, with a focus on substantive storytelling that resonates with a broad audience. Technically, the website is built on WordPress with the Avada theme and Yoast SEO plugin, featuring modern web technologies and multimedia content such as embedded Vimeo videos. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and explicit incident response information. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of cookie consent mechanisms and detailed security policies indicates room for improvement in privacy compliance. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the website content and business affiliations strongly suggest legitimacy. Overall, the website and business present a professional and trustworthy front with excellent content quality and business credibility. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and verifying domain registration details to improve trust and security posture.

S

ShipEngine

shipengine.com

71

ShipEngine operates as a technology platform specializing in multi-carrier shipping and logistics APIs, serving platforms, third-party logistics providers, brands, and developers. The company positions itself as a leading API provider with a significant shipment volume, offering services such as shipping APIs, address validation, tracking, rate comparison, and embeddable components. The website reflects a mature digital presence with modern technologies including WordPress CMS, jQuery libraries, Google Tag Manager, and Optimizely for marketing and analytics. Privacy compliance is supported by a cookie consent mechanism, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. WHOIS data for the www subdomain is unavailable, which is unusual but does not detract from the professional appearance and trustworthiness of the site. Overall, the website demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information clarity.

Posázaví o.p.s. is a non-profit organization focused on destination management and tourism promotion in the Posázaví region of the Czech Republic. The website serves as a comprehensive portal for tourists, offering detailed information on local events, tourist attractions, active tourism activities, services, and regional products. The organization appears well-established since 2004 and maintains partnerships with regional and national tourism bodies, enhancing its market position as a key regional tourism information provider. Technically, the website employs modern JavaScript libraries such as jQuery, jQuery UI, Swiper, and Plupload, alongside Google Analytics and Google Tag Manager for visitor tracking. The site uses the Apollo publishing system, indicating a professional content management approach. The website is moderately performant, mobile-optimized, and provides good navigation and content relevance, although accessibility features could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerabilities or malicious content were detected. The WHOIS data for the subdomain is unavailable, which is typical, but the main domain's legitimacy is supported by the website's content and partnerships. Overall, the site is a trustworthy and professional tourism portal with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen user trust and regulatory compliance.

C

COMvergence

comvergence.net

57

COMvergence is an independent international research company specializing in measuring and analyzing the performance and strategic developments of global marketing communications (MarCom) agencies, major independents, and large management consultancy firms. The company provides high-value data and insights on global media spend investments through a modern online platform featuring dashboards and dynamic graphs. Their target audience includes advertisers, agencies, pitch consultants, media vendors, and financial analysts. COMvergence holds a strong market position as a global authoritative source for agency data collection and analysis, supported by strategic alliances with reputable industry organizations such as Nielsen and Kantar Media. Technically, the website is built on WordPress CMS with modern plugins for SEO (Yoast) and analytics (Google Analytics via MonsterInsights). The site is hosted by OVH sas and uses HTTPS with good SSL configuration. The website demonstrates good mobile optimization, accessibility, and SEO practices. Privacy and cookie policies are comprehensive and GDPR compliant, featuring a consent mechanism. However, some security best practices like DNSSEC and advanced security headers are not implemented. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response information is noted. The domain registration is consistent and trustworthy, with no privacy protection used, aligning with the business profile. Overall, the site is professional, secure, and compliant with privacy regulations. The overall risk assessment is low, with recommendations to enhance DNS security, implement additional HTTP security headers, and publish security policies to further strengthen trust and compliance.

W

WordPress Affiliate Manager

wpaffiliatemanager.com

61

WordPress Affiliate Manager is a specialized software provider offering an affiliate management plugin for WordPress websites, primarily targeting e-commerce and membership site owners. The company has established itself since 2010 as a niche player integrating with popular e-commerce platforms such as WooCommerce, WP eStore, and Easy Digital Downloads. Their business model includes free and paid licenses, premium support, and addon sales, supported by a community forum and detailed documentation. The website content is well-structured, professional, and focused on delivering clear value propositions to its target audience. Technically, the website is built on WordPress 6.8.1 using a child theme of the Genesis Framework, leveraging common plugins like Yoast SEO, Contact Form 7, and bbPress. The site uses Cloudflare for DNS and includes Google reCAPTCHA v3 for bot protection. Performance and mobile optimization are moderate to good, with room for improvement in accessibility and security headers. Analytics are implemented via Clicky Web Analytics, indicating moderate user tracking. From a security perspective, the site benefits from HTTPS and reCAPTCHA but lacks DNSSEC and explicit security headers such as CSP or HSTS. No sensitive data exposure or vulnerable libraries were detected in the provided content. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website presents a trustworthy and professional front with a solid business foundation and moderate technical maturity. Security posture is adequate but could be enhanced with additional measures. Privacy compliance requires improvement to meet modern standards. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and providing clearer contact channels to improve trust and compliance.

K

komunitko1415.cz

komunitko1415.cz

49

Komunitko 1415 is a Czech community center website established in 2024, focused on providing a space for social gatherings, volunteering, creative workshops, and support for foreigners including Czech language courses. The website targets local community members and foreigners in need, offering cultural and educational activities. The business operates as a small non-profit entity with EU co-financing support, emphasizing social inclusion and community engagement. Technically, the site is built on WordPress 6.8.1 with a modern tech stack including popular plugins for event management and UI enhancements. The site is mobile optimized and SEO friendly, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and privacy-respecting analytics (Piwik PRO) used, but lacks some security headers and cookie consent mechanisms. No direct contact emails or phone numbers are published; contact is via forms. Overall, the site is trustworthy and professionally presented, suitable for its community-oriented mission.

L

LGS Furth im Wald 2025

furth2025.de

48

LGS Furth im Wald 2025 is a regional event organizer hosting the Bavarian Landesgartenschau 2025, a cultural and nature-focused garden show in Furth im Wald, Germany. The website serves as an information portal for visitors, offering event details, ticketing, and sponsorship opportunities. The site is built on a modern WordPress infrastructure using Elementor and Yoast SEO, indicating a good level of digital maturity. Security measures include HTTPS, reCAPTCHA for forms, and GDPR-compliant cookie consent mechanisms. However, some security headers could be improved, and no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-optimized for its audience.

S

STG Combustion Control GmbH & Co KG

stg-cottbus.com

54

STG Combustion Control GmbH & Co KG is a medium-sized German company specializing in advanced combustion control and process optimization technologies primarily for the glass industry, with additional clients in steel, chemical, and biotechnology sectors. Founded in 1990, the company has a strong market position supported by over 30 years of experience and recognized certifications such as Siemens Solution Partner. Their key offerings include process control systems, oxygen measurement technologies, calorimeters, and burner technologies, tailored to industrial clients seeking energy efficiency and emission reduction. Technically, the website is built on a modern WordPress platform with a comprehensive multilingual setup and SEO optimizations. The site features a cookie consent mechanism compliant with GDPR, professional design, and good mobile and accessibility standards. The technical stack includes popular plugins for SEO, downloads, and consent management, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent for privacy compliance. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security transparency and defense-in-depth. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy digital presence aligned with the company's industrial B2B focus. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance.

S

STG Combustion Control GmbH & Co KG

stg-cottbus.de

53

STG Combustion Control GmbH & Co KG is a German-based company specializing in advanced process control systems and sensor technologies for the glass melting industry and related sectors such as steel, chemical, and biotechnology. Founded in 1990, the company has grown to a medium-sized enterprise with over 60 specialized engineers and technicians. Their offerings include modern process control systems, high-temperature oxygen sensors, advanced signal evaluation, and burner technologies, positioning them as a trusted partner in industrial process optimization. The website reflects a professional and well-established business with a clear market focus on industrial clients requiring energy-efficient and low-emission solutions. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO and multilingual support via WPML. It features good mobile optimization, accessibility, and SEO practices. The site employs HTTPS and a comprehensive cookie consent mechanism, indicating a strong commitment to privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The cookie consent banner is well implemented, supporting GDPR compliance. No signs of WAF or blocking mechanisms were detected, allowing full content access. The domain WHOIS data aligns with the business claims, supporting legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving a specialized industrial market. Strategic improvements could include adding security headers, publishing incident response information, and enhancing transparency around security policies.

G

Global payments Europe s.r.o.

gpwebpay.cz

44

Global payments Europe s.r.o. operates the GP webpay payment gateway, a modern and secure system enabling card payments on the internet, primarily serving Czech e-commerce merchants. The company holds a strong market position as the most widespread payment gateway in the Czech Republic, supporting major card brands such as Mastercard, VISA, Diners Club, and American Express. The website reflects a professional business model focused on providing fast, secure, and convenient payment processing services with integration support for popular e-shop platforms. Technically, the site is built on WordPress with modern libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is strong with HTTPS enforced and compliance with card security standards, although some improvements are recommended in cookie consent and security headers. Overall, the website and business appear legitimate and trustworthy, with clear contact information and consistent branding.

E

EURead

euread.com

49

EURead is a European network of 38 organizations across 27 countries dedicated to promoting reading and literacy. The website serves as an informational and advocacy platform highlighting member activities, campaigns, and research. The network operates as a non-profit entity focused on societal impact through literacy promotion. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google services for analytics and reCAPTCHA for form security. The site is hosted by One.com and uses HTTPS with a valid SSL certificate, although DNSSEC is not enabled. Security practices include cookie consent management and CAPTCHA protection, but there is room for improvement in security headers and DNS security. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

M

MediaClub

mediatube.cz

43

MediaTube is a Czech Republic-based media content platform operated by MediaClub, offering categorized video content across television, online, HBBTV, B2B, and radio media types. The website is built on WordPress and leverages modern JavaScript libraries and caching mechanisms to deliver a moderate performance user experience. It employs a consent management platform to comply with cookie regulations and uses Google Analytics for user tracking. However, the absence of a publicly accessible privacy policy and terms of service pages, as well as missing contact information, limits transparency and user trust. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy. Security posture is moderate with HTTPS enforced but lacking security headers and explicit incident response contacts. Overall, the site is functional and safe for general audiences but would benefit from enhanced compliance and security practices.

R

Rosteme s knihou

rostemesknihou.cz

54

Rosteme s knihou is a Czech non-profit campaign dedicated to promoting reading and literacy among children and youth. The website serves as a hub for campaign projects, events, book recommendations, and educational resources. It targets parents, educators, and children, aiming to foster a culture of reading through various initiatives and partnerships with cultural and governmental organizations. Technically, the website is built on WordPress 6.8.1, utilizing several plugins for event management, responsive menus, and GDPR compliance. It employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible, with a moderate performance profile. From a security perspective, the site enforces HTTPS and uses a GDPR-compliant cookie consent mechanism. However, there is a lack of visible security headers and no WHOIS data available, which slightly reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a professional and trustworthy front for the campaign, with good privacy compliance and a clear focus on educational content. The absence of WHOIS data is a concern but does not outweigh the positive indicators from the site's content and partnerships.

The ABC Global Book Service website is a non-profit international platform hosted by the World Intellectual Property Organization (WIPO) and managed by the International Computing Centre. It provides an expanding catalogue of accessible format books contributed by partner libraries worldwide under the Marrakesh Treaty framework. The site targets not-for-profit organizations serving persons who are blind, visually impaired, or otherwise print disabled. The business model is consortium-based, focusing on accessibility and international cooperation. The website content is multilingual and professionally presented, reflecting a consistent brand aligned with its parent organization.