Security Directory

D

Dieci srl

dieci.com

51

Dieci srl is a manufacturer specializing in telehandlers, forklifts, concrete mixers, and dumpers primarily serving the agriculture and construction sectors. The company offers a broad product range including stationary, articulated, and rotating machinery, targeting professional users in farming, construction, mining, and emergency services. The website is multilingual, professionally designed, and includes resources such as downloadable brochures, dealer networks, newsletters, and digital service portals (DTS and DCS). Technically, the site uses modern web technologies including Bootstrap, jQuery, and various UI libraries, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit incident response information. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is functional, professional, and trustworthy from a business perspective but could improve security and transparency aspects.

L

Linklaters

linklaters.de

67

Linklaters is a global law firm focused on providing legal certainty in a changing world, targeting corporate clients and legal professionals. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Cookiebot, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is partially addressed through cookie consent mechanisms, but no privacy policy or terms of service were detected in the provided content. Overall, the site is legitimate and trustworthy, aligned with the Linklaters brand and German market presence.

S

Stadt Ibbenbüren

ibbenbueren.de

53

The website www.ibbenbueren.de serves as the official municipal portal for the city of Ibbenbüren, Germany. It provides a broad range of online services and information tailored to citizens, local businesses, and visitors, including administrative services, social benefits, cultural events, and urban planning. The site is well-positioned as a trusted government resource with a clear focus on accessibility and user engagement through social media channels and visual assistance tools. Technically, the site employs a mature technology stack centered around jQuery and proprietary CMS components, delivering a responsive and accessible user experience. While performance is moderate, the site benefits from good SEO practices and a clear navigation structure. The cookie consent mechanism and privacy policy demonstrate compliance with GDPR requirements. From a security perspective, the site shows good practices such as no exposed sensitive data and consent-based cookie usage. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website is a reliable and professional municipal platform with strong content quality and privacy compliance. Strategic improvements in security transparency and technical hardening would further strengthen its posture and user trust.

K

K2N way s.r.o.

kubota.cz

62

Kubota.cz represents the Czech Republic branch of Kubota Corporation, a globally recognized manufacturer of agricultural and industrial machinery. The website showcases a comprehensive product range including tractors, lawn mowers, and accessories, targeting agricultural professionals and municipal service providers. The company emphasizes sustainability and environmental responsibility, supported by a long corporate history and recent acquisitions such as Kverneland and Great Plains. Technically, the website employs modern frameworks like Bootstrap and jQuery, with integrated analytics and cookie consent mechanisms, reflecting moderate digital maturity. Security posture is adequate with cookie consent and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Kubota's strong market position in the manufacturing sector.

S

Správa železnic, státní organizace

szdc.cz

60

Správa železnic is a Czech state organization responsible for managing the national railway infrastructure. The website serves multiple audiences including passengers, suppliers, carriers, and contractors, providing comprehensive information about projects, services, and organizational structure. It holds a significant market position as the primary railway infrastructure manager in the Czech Republic. The site is well-branded and professionally maintained, reflecting its government entity status. Technically, the website is built on the Liferay CMS platform and uses modern JavaScript libraries such as jQuery, Slick Carousel, and Unite Gallery. It integrates analytics tools including Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile-optimized with good navigation and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and includes important security headers. It publicly documents its cybersecurity policies and incident response capabilities, including a CSIRT team. However, the absence of a vulnerability disclosure policy and security.txt file is noted. WHOIS data is unavailable, which limits domain registration trust analysis, but the official domain and content suggest legitimacy. Overall, the website demonstrates a solid security posture and compliance with GDPR, with clear contact and privacy information. The risk level is moderate due to missing WHOIS transparency and minor technical improvements needed. Strategic recommendations include implementing a vulnerability disclosure program, enhancing accessibility, and maintaining updated domain registration information.

M

Muséum de Bordeaux - sciences et nature

museum-bordeaux.fr

57

The Muséum de Bordeaux - sciences et nature is a well-established public museum located in Bordeaux, France, focusing on natural history and cultural exhibitions. It serves a broad audience including families, schools, leisure professionals, journalists, and patrons. The museum offers permanent and temporary exhibitions, educational workshops, events, and virtual tours, positioning itself as a key cultural institution in the region. Technically, the website is built on Drupal 10 with modern libraries such as jQuery UI, Slick Carousel, Leaflet.js for maps, and FontAwesome for icons. It demonstrates good mobile optimization, accessibility, and SEO practices. The site includes a cookie consent mechanism and privacy policies aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The WHOIS data is unavailable, which limits domain registration insights but does not detract from the site's legitimacy given its professional content and official nature. Overall, the website is secure, compliant, and professionally maintained, with no signs of blocking or malicious activity. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

H

HELLENiQ ENERGY

helleniqenergy.gr

71

HELLENiQ ENERGY is a leading energy group operating in Southeastern Europe with activities spanning six countries. The company focuses on refining, supply, and sales of petroleum products and petrochemicals, positioning itself as a key player in the energy sector. Their website reflects a professional corporate presence with clear branding and comprehensive business information. The target audience includes industry stakeholders, partners, and customers interested in energy solutions with a focus on low carbon emissions. Technically, the website is built on Drupal 9, leveraging modern web technologies such as jQuery UI and Slick Carousel for UI components. It integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements multiple security headers, contributing to a strong security posture. Cookie consent mechanisms comply with GDPR requirements, offering users granular control over cookie categories. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in transparency around security policies and incident handling would further strengthen its security and compliance posture.

P

Příbram Média s.r.o.

pribram.cz

51

Příbram Média s.r.o. operates www.pribram.cz, the largest local news portal serving the Příbram region in the Czech Republic. The website provides comprehensive local news coverage, traffic updates, event information, and advertising services targeted at residents and visitors of the region. The business model centers on media content delivery combined with advertising revenue. The company maintains a professional online presence with consistent branding and integration of social media channels such as Facebook, Instagram, YouTube, and Twitter. The content is primarily in Czech and focuses on community news and events, making it highly relevant to its target audience. Technically, the website uses a custom CMS with a technology stack that includes jQuery, jQuery UI, Google Fonts, and lazy loading for images. It integrates Google Analytics and Facebook Pixel for analytics and tracking, alongside Seznam Sklik for advertising. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations such as GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the legitimacy of the domain registration, matching the company information and location. Overall, www.pribram.cz is a trustworthy and professionally managed local news portal with a solid business foundation and adequate technical infrastructure. Strategic improvements in security policies and technical modernization could further strengthen its security posture and user trust.

D

Dolák s.r.o.

toyotadolak.cz

44

Toyota Dolák is a large, authorized Toyota dealership and service provider operating in the Czech Republic. It holds the position as the largest Toyota sales and service partner in the country, offering a comprehensive range of services including new and used vehicle sales, vehicle buyback, leasing, rental, and authorized servicing. The company operates multiple branches across key Czech cities, enhancing accessibility and customer reach. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to consumers and businesses interested in Toyota vehicles and related services. From a technical perspective, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, and various UI libraries. It is mobile-optimized and SEO-friendly, with good performance and accessibility standards. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a security.txt file suggests room for improvement in security best practices. The lack of WHOIS data reduces domain trustworthiness somewhat, but the professional presentation and detailed business information mitigate concerns. Overall, Toyota Dolák presents a trustworthy and professional online presence with strong business credibility and good technical implementation. Strategic improvements in security policies and domain transparency would further enhance trust and compliance.

5

5M square s.r.o.

novesvetlo.cz

43

5M square s.r.o. operates the website novesvetlo.cz, specializing in the sale of healthy and biodynamic lighting products including full-spectrum LED strips, blue light blocking glasses, and lighting solutions designed to support healthy sleep. The company targets customers seeking lighting solutions with positive health impacts, positioning itself as a niche e-commerce provider in the Czech Republic's energy-related retail sector. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site uses established JavaScript libraries such as jQuery and Flexslider, hosted likely with WEDOS, and implements cookie consent mechanisms, though lacks advanced security headers and explicit incident response information. Security posture is moderate with no critical vulnerabilities detected but could be improved with enhanced HTTP security headers and documented security policies. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness. Strategic recommendations include improving security headers, publishing security policies, and enhancing analytics and marketing transparency.

B

Bc. Jiří Trnka

musicgate.cz

44

MUSICGATE.cz is a Czech Republic-based media portal specializing in music-related content including news, event invitations, press releases, photo and video reports, interviews, and reviews. Founded in 2016 and operated by Bc. Jiří Trnka, the site targets music enthusiasts primarily within the Czech Republic. The business model revolves around content publishing supported by advertising partnerships and sponsored banners. The portal maintains a consistent brand presence and offers a comprehensive range of music-related services, positioning itself as a niche leader in the Czech music media space. Technically, the website employs a custom CMS with a technology stack including jQuery, jQuery UI, Google Fonts, and standard web technologies. Hosting is linked to the registrar REG-GRANSY and nameserver svethostingu.eu. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Advertising is managed primarily through the Sklik network, with transparent ad placements and cookie consent mechanisms in place. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the site lacks a formal security policy or vulnerability disclosure mechanism. Overall, the security posture is adequate but could be improved with additional headers and incident response documentation. The overall risk assessment is low, with no signs of malicious content or blocking mechanisms. The site is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include enhancing security headers, implementing a security.txt file, and formalizing incident response policies to further strengthen the security posture and user trust.

Úklidy Morava is a small, local cleaning services company based in Moravská Ostrava, Czech Republic, offering household, office, and communal area cleaning services primarily in the Moravian region. The company emphasizes professional and precise cleaning work with a long-standing presence since 1995, supported by a domain registered in 2013. The website presents clear business information and contact details but lacks formal privacy and cookie policies, which are important for compliance and user trust. Technically, the site uses older JavaScript libraries and lacks visible advanced security headers, indicating room for improvement in security posture. Overall, the site is functional and professional but would benefit from modernization and enhanced compliance measures.

G

Gymnázium Teplice

gymtce.cz

48

Gymnázium Teplice is a secondary grammar school based in the Czech Republic, providing comprehensive secondary education with a focus on preparing students for higher education. The institution actively participates in European educational programs such as Erasmus+ and offers Cambridge Exam preparation, positioning itself as a reputable educational provider in the Ústecký kraj region. The website reflects a medium-sized educational institution with consistent branding and a good level of content quality. Technically, the website employs common JavaScript libraries including jQuery, jQuery UI, Hammer.js, and integrates Facebook SDK for social media functionality. The site is built on the eSchool.cz CMS platform, with moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced for better compliance and user experience. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating room for improvement in security best practices and privacy compliance. The absence of WHOIS data raises minor concerns about domain registration transparency, though the active content and partner affiliations support the site's legitimacy. Overall, the website is professional and trustworthy for its educational purpose but would benefit from enhanced privacy disclosures, security headers, and improved mobile and accessibility features to strengthen its digital maturity and compliance posture.

O

Obchodní akademie s. r. o.

obaka.cz

40

Obchodní akademie s. r. o. is a small private educational institution in the Czech Republic specializing in business academy studies combined with sports activities. It operates multiple campuses in Ostrava and Karviná, targeting students interested in both academic and athletic development. The website presents clear contact information and social media presence, supporting its regional educational role. Technically, the site uses a modern JavaScript stack including jQuery, Nette Framework AJAX, and Google reCAPTCHA for security on login forms. The site is mobile optimized with moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS and CAPTCHA but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is missing, limiting domain trust assessment, but no suspicious content or vulnerabilities were detected. Overall, the site is professional and functional but could improve privacy compliance and security hardening.

S

Střední škola obchodní a služeb SČMSD, Polička, s.r.o.

ssospolicka.cz

48

Střední škola obchodní a služeb SČMSD, Polička, s.r.o. is a private secondary vocational school located in Polička, Czech Republic, with a long-standing tradition dating back to 1929. The school offers a variety of study programs including business, marketing, public administration, cosmetology, hairdressing, and sports massage, targeting students and their parents. The website reflects a professional and well-structured digital presence with comprehensive content, clear navigation, and modern web technologies. Security measures such as HTTPS, Google reCAPTCHA Enterprise, and Google Tag Manager are implemented, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. However, WHOIS data for the domain is unavailable, which slightly impacts trustworthiness from a domain registration perspective. Overall, the site is trustworthy, content-rich, and serves its educational audience effectively.

Základní škola a Praktická škola, Opava is a public educational institution located in Opava, Czech Republic, providing primary and practical school education. The website serves students, parents, and the local community with information about school events, projects, and contact details. The institution maintains a consistent brand presence and complies with GDPR regulations, reflecting a responsible approach to data privacy. Technically, the website uses a modern tech stack including jQuery, Mapy.cz API, and Owl Carousel, built on the AKTIVNÍ ŠKOLA CMS platform. It is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, supporting the institution's mission effectively.

E

Edunation

edunation.cz

54

Edunation is a specialized Czech company providing digital services tailored for educational institutions, including school website creation, graphic design, and virtual tours. The website reflects a focused business model targeting schools and school founders, with a strong presence in the Czech education sector. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette, and Google APIs, indicating a mature digital infrastructure. Security measures include HTTPS and Google reCAPTCHA, but the absence of explicit security headers and privacy policies suggests room for improvement. Overall, the site is professional and trustworthy, though it lacks some compliance documentation and direct contact details. Strategic enhancements in privacy compliance and security policies would strengthen its market position and trustworthiness.

B

Bez Bariér

ostrava-bezbarier.cz

50

Bez Bariér is a small non-profit organization based in Ostrava, Czech Republic, providing free advisory and mapping services to severely physically disabled citizens, particularly those using wheelchairs. Established in 2000, it focuses on barrier-free access consulting, accessibility mapping, and project documentation review for local authorities. The website reflects a specialized local service with strong ties to municipal partners and accessibility initiatives. Technically, the site is built on WordPress with common libraries like jQuery and Lightbox2, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data reduces domain trust but the site's content and partnerships support its legitimacy. Overall, the site is professional and trustworthy for its niche audience but should enhance privacy compliance and security best practices.

Č

Čazmatrans - Nova d.o.o.

cazmatrans.hr

53

Čazmatrans - Nova d.o.o. is a Croatian transportation company specializing in bus services within Croatia and international routes. The website provides an online ticket purchasing platform targeting general travelers and commuters. The company has a medium-sized presence with multiple subsidiaries and a well-established market position since 2012. The website is professionally designed with good navigation, mobile optimization, and relevant content focused on transportation services. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google services like Tag Manager and Maps API, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, cookie consent implemented, and secure payment logos displayed, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides a safe user experience.

A

AnarchyMu Season 6 Episode 3

anarchymu.com

56

AnarchyMu.com is a niche online gaming website hosting private servers for the MU Online MMORPG, specifically focusing on Season 6 Episode 3. The site offers game client downloads, player rankings, market for in-game items, and community forums. The target audience is MU Online players seeking private server experiences with enhanced rates and features. Technically, the site uses jQuery and jQuery UI libraries, with Cloudflare DNS hosting but lacks advanced security headers and DNSSEC. The website design is functional and moderately optimized for mobile, with basic SEO and accessibility features. Security posture is limited, with no evident privacy or cookie policies, and no incident response or vulnerability disclosure information. The domain is registered since 2017 with a reputable registrar and Cloudflare nameservers, indicating moderate legitimacy. Overall, the site provides a functional gaming community platform but lacks formal privacy, security, and compliance measures.

The Wasser- und Bodenverband "Untere Tollense / Mittlere Peene" is a regional government-related organization based in Jarmen, Germany, focused on water and soil management. Their website provides comprehensive information about their tasks, organizational structure, and current activities, targeting local stakeholders and the public interested in environmental and water management issues. The site is professionally designed with clear navigation and relevant content, reflecting a small-sized public service entity. Technically, the website is built on TYPO3 CMS 6.2 with common web technologies such as Bootstrap, jQuery, and Font Awesome. While the site is mobile-optimized and performs moderately well, it uses an outdated CMS version which may pose security risks. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is trustworthy and serves its informational purpose effectively but would benefit from modernization and enhanced security and privacy practices.

The Wasser- und Bodenverband Mittlere Uecker-Randow is a regional public law corporation in Germany responsible for the maintenance and management of secondary water bodies and related infrastructure within the Uecker and Randow river basins. Founded in 1992, the organization serves municipalities and landowners in a defined geographic area, providing essential environmental and water management services. The website reflects this mission with detailed descriptions of its history, responsibilities, and operational scope, targeting local stakeholders and the general public. Technically, the website is built on TYPO3 CMS version 6.2, utilizing Bootstrap and common JavaScript libraries such as jQuery and Flexslider. The site is moderately optimized for mobile devices and offers a clear navigation structure. Hosting is managed via DomainControl nameservers, indicating professional domain management. However, the CMS version is outdated, which may pose security risks. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating partial compliance with modern security and privacy standards. No incident response or vulnerability disclosure information is provided. No tracking or analytics scripts were detected, suggesting minimal user tracking. Overall, the website is trustworthy and professional for its public sector role but would benefit from updates to security practices, privacy compliance, and CMS modernization to enhance its security posture and regulatory adherence.

L

Landkreis Ludwigslust-Parchim

kreis-lup.de

60

The Landkreis Ludwigslust-Parchim website serves as the official digital portal for the regional government of the Ludwigslust-Parchim district in Germany. It provides comprehensive administrative information, citizen services, political updates, and regional news. The site targets residents, local businesses, and visitors seeking governmental resources and services. The business model is that of a public sector entity focused on regional governance and community support. Technically, the website employs a traditional tech stack centered around jQuery and the ikiss CMS framework, supplemented by accessibility tools such as Eye-Able and ReadSpeaker. The site is mobile-optimized and offers good navigation and content structure, although some technologies are somewhat dated. Performance is moderate, with no significant technical issues detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response policies are not publicly evident, and no vulnerability disclosure mechanisms are present. The WHOIS data is minimal but does not raise suspicion, supporting the site's legitimacy as a governmental domain. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could benefit from enhanced security policies and transparency. The risk profile is low, with recommendations focusing on improving security headers, incident response visibility, and vulnerability disclosure to strengthen trust and resilience.

E

European Free Trade Association (EFTA)

efta.int

70

The European Free Trade Association (EFTA) website serves as the official online presence of the intergovernmental organization comprising Iceland, Liechtenstein, Norway, and Switzerland. It provides comprehensive information about EFTA's role in promoting free trade and economic integration within Europe and globally. The site targets government officials, trade professionals, and policy makers, offering detailed resources on trade relations, legal texts, statistical cooperation, and organizational structure. The website is well-established, reflecting the organization's long history since 1997, and maintains a professional and authoritative tone.

H

hoster.by

hoster.by

65

hoster.by is a Belarus-based technology company specializing in domain registration, web hosting, and cloud infrastructure services. Established in 2004, it offers a comprehensive platform for businesses to start and grow online, including free SSL certificates and promotional offers for domain purchases. The company targets businesses and individuals seeking reliable hosting and IT infrastructure solutions. The website demonstrates a solid technical foundation using Bitrix CMS and integrates multiple communication channels such as live chat and social media. Security posture is generally good with HTTPS and Let’s Encrypt SSL usage; however, the absence of explicit privacy and cookie policies indicates compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

HBF Textiles

hbftextiles.com

50

HBF Textiles is a professional textile manufacturing company specializing in woven upholstery, wrapped panels, wallcoverings, coated fabrics, leather, and drapery products. The company targets designers, furniture manufacturers, and commercial and residential clients, positioning itself as a medium-sized player in the manufacturing sector. The website is built on a modern Drupal 10 CMS with e-commerce capabilities, integrating advanced technologies such as Google Tag Manager and Adobe DTM for analytics and marketing. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which should be further investigated. Overall, the website is professional, well-structured, and trustworthy, with a good balance of business and technical maturity.

R

Rhenus

aktenvernichtung.de

72

Rhenus operates a professional German-language website focused on secure destruction and disposal services for documents, data carriers, and hard drives. The company positions itself as a leading provider in Germany with over 40 years of experience and multiple security locations. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager and Usercentrics for consent management. The site is well-structured, mobile-optimized, and SEO-friendly, targeting both business and private customers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published policies are lacking. Contact is primarily via a contact form with no direct emails or phone numbers visible. Overall, the domain and website appear legitimate and consistent with the Rhenus Group brand.

K

Kandersteg International Scout Centre

kisc.ch

56

Kandersteg International Scout Centre (KISC) operates as the World Centre of the World Organisation of the Scout Movement (WOSM), providing accommodation, adventure programs, and volunteering opportunities primarily for scouts and youth organizations globally. The website reflects a well-established non-profit entity with a clear mission to support scouting activities and community engagement. The site is professionally designed with consistent branding and clear navigation, targeting a global scouting audience. Technically, the site is built on Drupal 7 with a range of JavaScript libraries enhancing user experience and interactivity. Mobile optimization and SEO practices are adequately implemented, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, functional, and compliant with privacy regulations.

F

FPT Software

fpt-software.com

79

FPT Software is a well-established global technology solutions provider headquartered in Vietnam, specializing in digital transformation and IT consulting services. The company offers a broad portfolio of services including AI, IoT, cloud computing, smart factories, and RPA, targeting enterprise clients worldwide. Their market position is strong, supported by a long domain history and a consistent brand presence across multiple localized domains. Technically, the website employs modern frameworks and analytics tools, indicating a mature digital infrastructure. However, some gaps exist in privacy compliance and security headers implementation. The security posture is generally good with HTTPS and domain transfer protections, but enabling DNSSEC and publishing security policies would enhance trust. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

F

FPT Software

fptsoftware.com

79

FPT Software is a well-established global technology solutions provider headquartered in Vietnam, specializing in AI-powered digital transformation and IT consulting services. The company offers a broad portfolio of services including smart factories, cloud, RPA, AI, IoT, and product engineering, targeting enterprises seeking next-level digital transformation. The website reflects a mature digital presence with excellent design, mobile optimization, and clear navigation, supporting its enterprise market positioning. Technically, the site leverages modern frameworks such as Bootstrap 5 and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, Microsoft Clarity, and LinkedIn Insight Tag. Hosting and DNS services are managed via Cloudflare, ensuring good performance and security. However, the absence of DNSSEC and security headers indicates room for improvement in technical security hardening. From a security perspective, the website uses HTTPS and has domain transfer protections in place, but lacks visible privacy and cookie policies, consent mechanisms, and incident response contacts. No vulnerability disclosure or security.txt files were found, which are recommended for enterprise-grade security transparency. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website demonstrates strong business credibility and technical maturity but requires enhancements in privacy compliance and security best practices to align with modern enterprise security standards.

Infosys Limited is a globally recognized leader in next-generation digital services and consulting, offering a broad portfolio of IT services including digital transformation, consulting, data analytics, and digital marketing. The company targets enterprise clients seeking to navigate complex digital landscapes and enhance operational efficiency. The website reflects Infosys's strong market position and commitment to innovation and client success. Technically, the website is built on a robust infrastructure leveraging Adobe Experience Manager as its CMS, integrated with modern technologies such as Adobe Launch for tag management, OneTrust for privacy compliance, and Vidyard for video content. The site is optimized for performance, mobile responsiveness, and accessibility, demonstrating a mature digital presence. From a security perspective, Infosys employs strong HTTPS encryption, comprehensive security headers, and cookie consent mechanisms aligned with GDPR requirements. The presence of certifications like ISO 27001 and SOC 2 further underscores their commitment to security and compliance. No significant vulnerabilities or suspicious indicators were detected. Overall, the website presents a professional, trustworthy, and secure digital front for Infosys, supporting their enterprise business model and global operations. Strategic recommendations include continuous monitoring of third-party dependencies, enhancing incident response visibility, and maintaining rigorous security practices to uphold their strong security posture.

The Secession website represents a well-established Austrian non-profit cultural institution dedicated to contemporary art exhibitions and events. It holds a strong market position as one of the oldest independent art exhibition houses globally, with a rich history dating back to 1897. The site targets art enthusiasts, visitors, and the contemporary art community, offering detailed information about exhibitions, events, and the institution's mission. The business model is non-commercial, focusing on cultural promotion and education. The website content is rich, professionally designed, and consistent with the institution's branding and reputation. Technically, the website employs a mix of legacy and modern JavaScript libraries, including jQuery 1.11.3, GSAP, and Slick Carousel, with no explicit CMS detected, suggesting a custom-built platform. Performance is moderate with good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. Hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses Google Analytics with consent mechanisms denying ad and analytics storage by default, indicating good privacy awareness. However, the use of outdated jQuery versions and missing explicit security headers like Content Security Policy and X-Frame-Options present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Overall, the website is trustworthy, professional, and safe for general audiences. It demonstrates a mature digital presence suitable for a cultural institution, with minor technical and security improvements recommended to enhance resilience and compliance.

Giornale Diplomatico is an Italian online news portal specializing in political, diplomatic, economic, and cultural news with a focus on Italian government and international relations. The website targets Italian-speaking audiences interested in these sectors and operates as a niche media outlet with a small organizational size. Technically, the site is built on a custom PHP-based CMS using jQuery and jQuery UI libraries, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and a Content-Security-Policy header, but the use of an outdated PHP version and lack of advanced security headers present risks. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Contact information is limited to a contact form, with no explicit emails or phone numbers found. Overall, the site is safe, professional, and trustworthy but could benefit from technical and security improvements.

H

Hyundai Import Gesellschaft m.b.H.

hyundai.at

67

Hyundai Import Gesellschaft m.b.H. operates as the official importer and distributor of Hyundai vehicles in Austria, offering a broad range of automotive products including electric vehicles, hybrids, and traditional combustion engine models. The company targets individual consumers, business clients, and entrepreneurs, providing services such as vehicle sales, leasing, test drives, and after-sales support through a network of partners. The website reflects a strong market position with comprehensive product information and customer engagement features such as newsletter subscriptions and social media integration. Technically, the website is built on a modern stack including jQuery, Piwik PRO analytics, and Umbraco CMS, with media assets hosted on Azure CDN. The site demonstrates good performance, mobile optimization, and accessibility. SEO practices are well implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS, uses security best practices in form handling, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies. Privacy compliance is supported by a comprehensive privacy policy with GDPR consent in the newsletter form. Overall, the website is professional, trustworthy, and secure with minor gaps in privacy consent and security transparency. Strategic improvements in cookie consent and security disclosures would enhance compliance and user trust.

I

Institut für ökologische Wirtschaftsforschung (IÖW)

oekologisches-wirtschaften.de

10

Ökologisches Wirtschaften is a well-established German scientific journal focusing on social-ecological economic topics, bridging research and practical experience in politics and business. It serves a specialized audience interested in sustainable economic development and publishes issues with articles authored by experts. The website is powered by Open Journal Systems, a recognized platform for academic publishing, and is affiliated with reputable institutions such as the Institut für ökologische Wirtschaftsforschung (IÖW) and the oekom verlag publishing house. The content is professionally presented, with clear navigation and good mobile optimization. Technically, the site uses modern JavaScript libraries including jQuery, Bootstrap, and Popper.js, ensuring a responsive and interactive user experience. The hosting is managed via known providers with stable DNS configurations. Security posture is solid with HTTPS enforced and restricted access to subscriber-only PDFs, though the absence of explicit security headers and cookie consent mechanisms suggests room for improvement. No signs of blocking or WAF interference were detected, allowing full content accessibility. Overall, the security posture is good but could be enhanced by implementing security headers, cookie consent, and publishing incident response contacts. The business credibility is high due to institutional affiliations and professional presentation. No vulnerabilities or suspicious patterns were found. Strategic recommendations include improving privacy compliance and security best practices to further strengthen trust and compliance.

P

Party.Rent

partyrent.com

10

Party.Rent is a leading European rental company specializing in event equipment including furniture, tableware, and catering supplies. The company operates under the parent group Rent.Group and targets event planners, corporate clients, and private individuals across multiple European countries. Their website is professionally designed with a strong focus on user experience, multilingual support, and detailed product offerings. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and CSRF protections, though explicit security policies and headers could be improved. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

E

Elementare Vielfalt

elementare-vielfalt.de

54

Elementare Vielfalt is an educational platform focused on providing comprehensive information about vocational training, salaries, career tools, application tips, and job vacancies in the chemistry and pharmaceutical sectors in Germany. The website targets students, companies, teachers, and parents interested in these fields. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and Usercentrics for consent management, ensuring compliance with cookie regulations. Google Analytics 4 is integrated with IP anonymization to respect user privacy. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and privacy policies are not clearly visible in the provided content. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency by publishing detailed privacy and security policies and contact information.

T

Tiszántúli Református Egyházkerület

ttre.hu

40

The Tiszántúli Református Egyházkerület website serves as the official online presence of a Hungarian regional Reformed Church district. It provides comprehensive information about church activities, news, tourism, and spiritual resources targeted primarily at Hungarian-speaking church members and the broader community interested in religious heritage. The site is well-branded and consistent with its organizational identity, featuring clear contact details and a GDPR-compliant cookie consent mechanism. Technically, the website employs a custom CMS with common JavaScript libraries such as jQuery and Alertify.js, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It lacks advanced security documentation but does not exhibit any critical vulnerabilities or suspicious behavior. The domain WHOIS data aligns well with the organizational identity, supporting legitimacy and trustworthiness.

D

Debrecen Megyei Jogú Város Önkormányzata

debrecen.hu

62

The website www.debrecen.hu is the official online presence of the Municipality of Debrecen, Hungary. It serves as a comprehensive portal providing information and services for residents, tourists, and business stakeholders. The site offers access to local government services, tourism guides, business investment information, and public announcements, positioning itself as a key digital resource for the city. The target audience includes local citizens, visitors, and investors, reflecting a government service model focused on public administration and community engagement. Technically, the website employs a custom CMS with a technology stack that includes jQuery, jQuery UI, Google Fonts, and lazy loading libraries. It demonstrates good mobile optimization and accessibility features, although SEO optimization is basic. The site loads with moderate performance and uses multiple third-party analytics and marketing tools, all integrated with a clear cookie consent mechanism, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent in compliance with GDPR. However, it lacks publicly available security policies and incident response contacts, and security headers are not explicitly detected in the provided data. No vulnerabilities or exposed sensitive data were found in the content. The domain registration is consistent with the official municipality, enhancing trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its role as a government portal effectively. Strategic improvements could include publishing security policies, enhancing SEO, and adding incident response information to strengthen security posture and user trust.

B

Bibellesebund Schweiz

bibellesebund.ch

57

Bibellesebund Schweiz is a well-established non-profit organization dedicated to encouraging people of all ages to engage with the Bible through reading and prayer. With a history dating back to 1925 in Switzerland and over 150 years internationally, it holds a strong position in the religious non-profit sector. The organization offers a variety of services including publications, apps, events, workshops, and camps, targeting individuals, families, and church communities. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and cookie consent tools, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Contact information is transparent and complete, enhancing business credibility.

F

Franz Neubauer Ges.m.b.H.

mercedes-benz-werkstatt.at

46

Franz Neubauer Ges.m.b.H. operates as an authorized Mercedes-Benz and smart vehicle service center located in Vienna, Austria. The company provides comprehensive automotive repair, maintenance, bodywork, and parts sales services, targeting Mercedes-Benz vehicle owners seeking quality and authorized service. The website reflects a small-sized, family-owned business with a clear focus on automotive transportation services. Technically, the site uses a CMS from Internetkonzepte.at and common JavaScript libraries such as jQuery and Modernizr, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic but present, with a GDPR-compliant privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-structured, supporting the business's credibility and customer engagement.

S

samra Co.,Ltd

smgroup.co.kr

61

SM그룹 is a large South Korean conglomerate operating across multiple sectors including manufacturing, construction, shipping, media, and leisure. The company presents itself as a global leader with a diversified portfolio of subsidiaries, targeting general consumers, business partners, and potential employees. The website reflects a professional corporate identity with consistent branding and comprehensive information about its subsidiaries and business areas. Technically, the website uses modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, hosted by Megazone, a Korean hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security-wise, the domain registration is transparent and consistent with the business, but the website lacks DNSSEC and security headers, and no cookie consent mechanism is present, which may affect compliance. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance to align with best practices.

1

11teamsports Vereinsshop

houseofclubs.at

50

The website houseofclubs.at operates as an e-commerce platform specializing in football-related sportswear and equipment under the brand 11teamsports Vereinsshop. It targets football clubs, teams, and sports enthusiasts primarily in Austria and German-speaking regions. The business model focuses on online retail sales of football shoes, clothing, and fan merchandise, positioning itself as a niche supplier within the sports retail market. The site integrates Amazon Pay for streamlined payment processing, enhancing user convenience. Technically, the website is built on the OXID eShop Community Edition platform, utilizing modern JavaScript libraries such as jQuery and Amazon Pay widgets. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. However, some security headers are missing, and no explicit incident response or security policy pages are published. From a security perspective, the site enforces HTTPS and employs secure login forms with anti-CSRF tokens. Cookie consent mechanisms are in place, indicating GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's business claims, showing consistent registrant information and domain age appropriate for the business. Overall, the website presents a professional and trustworthy e-commerce presence with good content quality and privacy compliance. Security posture is adequate but could be improved by adding security headers and explicit security policies. The absence of direct contact emails or phone numbers slightly limits business credibility but is mitigated by a contact form and clear privacy documentation.

ASKÖ Steiermark operates the ASKÖ Ferienbetreuung website, providing holiday and sports camps for children and youth aged 5 to 16 in Austria. The organization focuses on holistic health, creativity, and active outdoor experiences, supporting families and working parents. The website is professionally designed using the Jimdo CMS platform, with clear navigation and mobile optimization. It integrates third-party services such as POWr.io widgets and Google Maps, and includes cookie consent mechanisms compliant with GDPR. Contact information and social media links are clearly presented, enhancing trust and accessibility. Security posture is adequate with HTTPS and cookie controls, though additional security headers could improve defenses. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the organization's profile, indicating legitimacy and trustworthiness.

The website represents the Sportamt Stadt Graz, a municipal government entity providing an online platform for booking district sports fields in Graz, Austria. It offers a structured multi-step booking process including service selection, appointment scheduling, user data input, and payment options. The platform is designed primarily for local residents and sports teams, facilitating fair and organized access to public sports facilities. The business model is a public service, leveraging a third-party SaaS platform (eTermin) for appointment management. Technically, the website employs standard web technologies such as jQuery and SVG for UI elements, with a responsive design suitable for mobile devices. The site includes privacy and cookie policies linked to official city resources, indicating compliance with GDPR. However, no advanced security headers or explicit SSL configuration details were found in the provided data, suggesting room for security enhancements. From a security perspective, the platform shows good practices like encrypted data transmission and user authentication mechanisms. The absence of WHOIS data for the domain www.etermin.net raises questions about domain registration legitimacy, though the website content and contact details align with a legitimate municipal service. No critical vulnerabilities or adult content were detected. Overall, the website is a functional, government-backed service with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, domain registration transparency, and enhanced security audits are recommended to strengthen trust and resilience.

R

REMONDIS-Gruppe

remondis-standorte.de

52

REMONDIS-Gruppe is a large international enterprise specializing in waste disposal, recycling, and environmental services with approximately 800 locations across four continents. The website serves primarily as a location tool and informational portal for customers and potential employees, focusing on service availability and career opportunities. The business model centers on providing comprehensive environmental services with a strong market position in the energy and transportation sectors. Technically, the website uses legacy JavaScript libraries such as jQuery 1.10.2 and basic CSS frameworks, indicating moderate digital maturity. Mobile optimization and accessibility are basic, and SEO practices are minimal but present. Security posture is moderate with cookie consent implemented for Google Maps usage; however, no security headers or explicit SSL configuration details were found, suggesting room for improvement. No forms or direct contact details are visible, limiting user engagement and transparency. Overall, the website is functional but could benefit from modernization and enhanced security measures.

The website freiwilligendiensteimsport.nrw is a regional non-profit platform operated by Landessportbund NRW e.V., focused on facilitating volunteer placements in sports organizations within North Rhine-Westphalia, Germany. It targets young people seeking opportunities in the Bundesfreiwilligendienst (BFD) and Freiwilliges Soziales Jahr (FSJ) programs. The platform offers user registration, profile management, and direct application to available positions, positioning itself as a key regional resource for sports volunteer services. Technically, the site employs a modern but basic tech stack including jQuery, Bootstrap, and ASP.NET MVC framework. The design is professional and content-rich with good navigation and mobile responsiveness at a basic level. Performance is moderate, and SEO and accessibility features are present but could be improved. Hosting details are limited but the domain is registered with United Domains AG and uses secure HTTPS connections. From a security perspective, the site demonstrates some good practices such as HTTPS usage and anti-CSRF tokens in forms. However, it lacks DNSSEC, explicit security headers, and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is published, which limits transparency. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professionally managed with a clear business purpose. Strategic improvements in security headers, cookie consent, and published policies would enhance compliance and user trust. The domain registration details align well with the business, supporting legitimacy and credibility.

F

Fédération Nationale des Transports Routiers

fntr.fr

56

The Fédération Nationale des Transports Routiers (FNTR) is a leading professional organization representing the road transport and logistics sector in France. Established since 1998, it serves as a key advocacy and support body for transport companies, providing regional syndicate coordination, publications, and industry representation. The website reflects a mature digital presence with a professional design, clear navigation, and integration of modern web technologies such as Drupal 9, Bootstrap, and FontAwesome. Analytics tools including Google Analytics, Matomo, and Facebook Pixel are employed with privacy considerations like IP anonymization and cookie consent via tarteaucitron.io. Security posture is generally good with HTTPS enforced and no evident vulnerabilities, though explicit security headers and policies are not fully documented. The absence of explicit privacy policy and terms of service pages is a notable compliance gap. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

Bayer AG is a globally recognized enterprise operating primarily in healthcare, agriculture, and related life sciences sectors. The website serves as the German country platform, providing localized content, news, and corporate information. Bayer holds a strong market position as a leader in pharmaceuticals and crop science, supported by a large enterprise scale and multiple subsidiaries such as Monsanto and Covestro. The site reflects a professional and consistent brand image with comprehensive content tailored to a broad audience including customers, investors, and partners. Technically, the website is built on Drupal 11, leveraging modern web technologies and third-party services such as Google Analytics, Hotjar, and OneTrust for cookie compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs security best practices including cookie consent mechanisms and security modules. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not confirmed in the HTML and should be verified. No vulnerabilities or exposed sensitive data were detected. The absence of a public incident response or vulnerability disclosure page suggests an area for improvement. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained. The missing WHOIS data is likely due to registry restrictions or privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response policies, and continuous monitoring of third-party libraries for vulnerabilities.

H

Heilpädagogische Schule Turbenthal

hps-turbenthal.ch

47

Heilpädagogische Schule Turbenthal is a specialized day school located in Turbenthal, Switzerland, providing educational services to children and youth with special learning and life needs. The institution offers a range of services including therapies, lunch programs, school social work, and parent forums, positioning itself as a local leader in special education. The website is professionally designed using WordPress with a focus on accessibility and clear navigation, targeting families and stakeholders in the education sector. Technical infrastructure leverages common WordPress plugins and frameworks, ensuring moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site demonstrates a trustworthy and compliant digital presence suitable for its educational mission.