Security Directory

O

Obec Dolní Ředice

dolniredice.cz

9

Obec Dolní Ředice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information including municipal news, official notices, practical resident information, and contact details. It targets residents and visitors seeking local government services and updates. The website is positioned as a trusted local government portal with a focus on community engagement and transparency. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, Swiper.js, and Highslide JS, likely managed via the Galileo CMS platform. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Cookie consent and privacy policies are implemented, indicating GDPR compliance. From a security perspective, the site uses HTTPS and has cookie consent mechanisms but lacks visible advanced security headers and explicit incident response policies. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. No vulnerabilities or malicious content were detected. Overall, the website is a well-maintained municipal portal with good content quality and user experience. The main risks relate to domain registration transparency and security header implementation. Strategic improvements in these areas would enhance trust and security posture.

O

Obec Chvojenec

chvojenec.cz

42

Obec Chvojenec is the official website of the municipality of Chvojenec in the Czech Republic, serving as a local government portal providing community information, public notices, and municipal services. The website targets residents and visitors seeking information about local governance, events, and services. The site is well-structured with clear navigation and consistent branding, reflecting a small government entity focused on community engagement. Technically, the website employs standard web technologies including jQuery, YouTube API integration, and Google Analytics for visitor tracking. It uses HTTPS to secure communications and implements a cookie consent mechanism, indicating some level of privacy awareness. However, the absence of a dedicated privacy policy and security headers suggests room for improvement in compliance and security hardening. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible vulnerabilities in the provided content. The lack of WHOIS data limits domain trust verification, but the website content and external references support its legitimacy. No signs of malicious or adult content were found, and the site appears safe for general audiences. Overall, the website is functional and professional for its purpose but would benefit from enhanced privacy disclosures, improved security headers, and better transparency in domain registration to strengthen trust and compliance.

O

Obec Dolní Roveň

dolniroven.cz

9

Obec Dolní Roveň operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive local government information including news, events, official notices, and contact details for municipal offices. It targets residents and visitors seeking authoritative information about the municipality. The business model is a public service portal typical for local government entities, focusing on transparency and community engagement. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 4, Swiper.js for slideshows, and Highslide for image viewing. The CMS appears to be Ocelot, a platform commonly used for municipal websites in the region. The site is mobile optimized, accessible, and uses HTTPS, but lacks some advanced security headers. Cookie consent and privacy policies are implemented, indicating awareness of GDPR compliance. From a security perspective, the site shows good basic practices such as HTTPS and cookie consent but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern and should be investigated to ensure domain legitimacy and continuity. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. Strategic improvements in security headers, incident response transparency, and domain registration verification are recommended to enhance trust and resilience.

O

Obec Horní Ředice

horniredice.cz

42

Obec Horní Ředice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about the municipality, including local government news, event calendars, public notices, educational institutions, and community services. It targets residents and visitors seeking official information about Horní Ředice. The business model is that of a government information portal, focusing on transparency and community engagement. The website is well-branded and consistent with its official purpose, reflecting a small-sized local government entity founded in 2003. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates external resources such as YouTube for video content and Smart App Banner for mobile app promotion. The hosting is managed through a Czech registrar and name servers, indicating local infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site benefits from HTTPS encryption and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies such as vulnerability disclosure or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR applicability. No tracking or advertising scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional, serving its governmental function effectively. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance user trust and regulatory adherence.

M

Město Horní Jelení

hornijeleni.cz

50

The website www.hornijeleni.cz serves as the official online presence of the municipal government of Horní Jelení, a small town in the Czech Republic. It provides comprehensive information about the city, local administration, community services, events, and public notices. The site targets residents and visitors seeking official information and municipal services. The business model is that of a government entity focused on public service and communication. Technically, the website employs standard web technologies including jQuery, Google Analytics, and Google Tag Manager for analytics and tracking. It uses web fonts and a cookie consent mechanism compliant with GDPR. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. However, no CMS or hosting provider details are evident, and security headers are not visibly implemented. From a security perspective, the site uses HTTPS and includes a cookie consent banner with detailed settings, indicating attention to privacy compliance. However, the absence of security headers and lack of visible incident response or security policy pages suggest room for improvement. The WHOIS data is missing, which reduces trustworthiness from a domain registration perspective, although the site content and contact details strongly indicate legitimacy. Overall, the website is a well-structured, professional municipal portal with good content quality and privacy compliance. The main risks relate to missing WHOIS data and limited visible security controls. Strategic recommendations include enhancing security headers, verifying domain registration, and publishing explicit security policies to improve trust and compliance.

O

Obec Býšť

byst.cz

48

Obec Býšť operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about the municipality, including local government, education, culture, sports, and community services. It targets residents and visitors seeking official information and services. The website is well-structured with clear navigation and uses modern web technologies such as jQuery, Bootstrap, and Swiper.js to enhance user experience. Mobile optimization is good, and the site includes a cookie consent mechanism indicating awareness of privacy compliance requirements. However, the absence of a privacy policy and WHOIS registration data presents compliance and trust concerns. Security posture is moderate with HTTPS usage but lacks visible security headers and vulnerability disclosure policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

pg-webstudio is a small German web design and development service provider specializing in custom websites using popular CMS platforms such as Wordpress, Drupal, Grav, Contao, and Joomla. The company targets local businesses and individuals in Göttingen and surrounding areas, offering a comprehensive range of services including SEO, responsive design, interactive maps, and ongoing website maintenance. The website showcases a strong portfolio of client projects across various industries, demonstrating technical versatility and design expertise. Technically, the site uses modern web standards and frameworks like Bootstrap 4 and jQuery, hosted on Alfahosting servers. Mobile optimization and user experience are excellent, with clear navigation and professional content. Security posture is moderate with cookie consent implemented and form nonce tokens present, but lacks visible HTTP security headers and explicit security policies. No active analytics tracking or advertising is detected, enhancing privacy compliance. WHOIS data aligns with the website's business focus, indicating legitimacy. Overall, the site is professional, trustworthy, and well-structured.

B

BIOLASE

biolase.com

61

BIOLASE is a recognized global leader in dental laser technology, specializing in manufacturing advanced all-tissue and soft-tissue dental lasers. The company also provides comprehensive education, training, and support services to dental professionals worldwide. Recently integrated into the MegaGen family, BIOLASE aims to enhance its legacy of quality and customer care under new leadership. The website reflects a mature digital presence with rich content, clear navigation, and professional branding targeted at dental practitioners and patients interested in laser dentistry solutions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enabled and secure form handling, but lacks explicit security headers and published security policies. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness slightly. Additionally, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Contact information is comprehensive, including phone numbers, email, physical address, and contact forms, supporting business credibility. Overall, BIOLASE's website demonstrates strong business credibility and technical implementation but should address privacy compliance and WHOIS transparency to enhance trust and security posture.

S

SEATAC

seatacsolutions.ca

58

SEATAC is a specialized Technology Access Centre based in Nova Scotia, Canada, focused on advancing ocean innovation through applied research and development services. It operates as a small entity connected with the Nova Scotia Community College and serves primarily small and medium-sized companies in the ocean technology sector. The website presents a professional image with clear branding and consistent messaging about its mission and services. Technically, the site is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and MediaElement.js, and integrates Google Fonts and Yoast SEO for enhanced user experience and search optimization. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and well-positioned within its niche, with room for enhancements in security and privacy practices.

S

SkillsPass

skillspass.com

66

SkillsPass is a digital platform designed to help workers manage and share their training certificates securely and conveniently. It is supported by partnerships with government agencies, regulators, and industry groups, positioning it as a trusted service in the Canadian workforce training sector. The platform replaces traditional paper certificates with a mobile-accessible digital solution, enhancing career mobility and compliance. The website is professionally designed, leveraging WordPress and Elementor technologies, and incorporates SEO best practices to reach its target audience effectively. However, the absence of WHOIS data raises questions about domain registration transparency, although the association with Bluedrop ISM lends credibility. Security posture is generally good with HTTPS and no exposed sensitive data, but improvements are needed in security headers and privacy compliance mechanisms such as cookie consent. Overall, the site presents a trustworthy and functional service with room for enhanced security and compliance documentation.

K

Katholische Marien-Grundschule

marien-grundschule.de

56

Katholische Marien-Grundschule is a small Catholic primary school located in Berlin, Germany, affiliated with the Archdiocese of Berlin. The school provides education primarily for children with specific support needs, emphasizing a holistic and values-based approach. The website serves as an information portal for parents, students, and the community, offering details about school services, events, and contact information. The site is well-structured and professionally maintained, reflecting the institution's commitment to transparency and community engagement. Technically, the website is built on Joomla CMS with modern plugins and demonstrates good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate educational institution.

O

OEMUS MEDIA AG

welovewhatwedo.org

56

OEMUS MEDIA AG is a well-established German media company specializing in dental publishing, online media, and event management. The website analyzed is a dedicated anniversary campaign site celebrating 30 years of OEMUS, showcasing employee testimonials and company milestones. The company holds a strong market position as a key player in the dental media sector with a medium-sized operation based in Leipzig, Germany. Technically, the site uses modern frontend technologies including jQuery and Owl Carousel, hosted likely on AWS infrastructure. The site is mobile-optimized and professionally designed, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is transparent and consistent, though the domain age is relatively new compared to the company's long history, indicating a possible new campaign domain. No suspicious or malicious content was found, and the site is safe for general audiences.

Č

Česká rada dětí a mládeže

darujemekrouzky.cz

41

Darujemekrouzky.cz is a Czech non-profit project organized by the Česká rada dětí a mládeže that provides financial support to families in difficult financial situations to pay for children's extracurricular activities. The project operates a voucher system targeting children aged 3 to 18 years, including support for Ukrainian refugee families residing in the Czech Republic. Supported by multiple foundations and institutions, the project enjoys strong trust signals including the patronage of the Czech president's wife. Technically, the website is built on WordPress with the Avada theme, uses modern web technologies, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The domain WHOIS data is unavailable, limiting domain trust verification, but the website content and partner references strongly indicate legitimacy.

P

Pilsen Jaguars

pilsenjaguars.cz

46

Pilsen Jaguars is a small, community-focused cheerleading sports club based in Plzeň, Czech Republic, operating since 2020. The organization offers cheerleading training, camps, competitions, and team recruitment primarily targeting youth and adults interested in cheerleading. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. It integrates social media channels and uses Google Analytics for visitor tracking. The hosting provider is REG-WEDOS, consistent with the domain registration data. From a security perspective, the website uses HTTPS and implements a cookie consent banner, indicating basic GDPR compliance. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could be improved. No forms or sensitive data exposure were detected on the homepage. The WHOIS data is consistent with the business profile, showing no suspicious patterns. Overall, the website presents a trustworthy and professional image suitable for its community sports club purpose. Strategic improvements in security policy transparency and advanced security controls would enhance its security posture and compliance maturity.

T

Taneční Akademie Plzeň

tanecniakademieplzen.cz

50

Taneční Akademie Plzeň is a small local dance academy based in the Czech Republic, focused on providing dance training and activities primarily for children and youth. The website presents the academy's founder and main trainer, Alena Hadravová, and highlights the academy's values such as passion, joy, and communication. The business model revolves around offering dance courses and team activities within the Plzeň region. The website is built on WordPress, hosted by Wedos, and uses common web technologies including jQuery and Google Fonts. The site is moderately optimized for mobile devices and has a professional design with clear navigation.

R

Royal Terberg Group B.V.

terberggroup.com

10

Royal Terberg Group B.V. is a well-established family-owned business specializing in the development, production, and modification of special transport vehicles and environmental loading systems. With a history spanning over 155 years, the company serves logistics and waste collection markets, offering a broad range of products and services including maintenance, spare parts, repair, rental, and telematics. The website reflects a professional and consistent brand image, targeting business clients in transportation and environmental sectors. Technically, the site employs modern web technologies such as Bootstrap, Vue.js, and Matomo analytics, and is built on the Episerver CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response contact information, which are areas for improvement. The absence of WHOIS registration data reduces trust slightly, though the overall digital presence and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration status.

T

Terberg Kinglifter

terbergkinglifter.com

10

Terberg Kinglifter is a specialized Dutch manufacturer of truck-mounted forklifts, offering a range of models including compact, universal, electric, and high-power variants. The company serves a broad industrial audience, including logistics, beverage distribution, agriculture, and governmental sectors. Supported by a global distributor network and company-owned locations in the Netherlands and Germany, Terberg Kinglifter maintains a strong market presence within Europe and beyond. The website reflects a mature digital infrastructure with modern analytics and marketing tools, good mobile optimization, and clear navigation. Security posture is solid with HTTPS enforcement and privacy compliance, though some security headers and explicit incident response policies could be improved. WHOIS data is unavailable due to EURid privacy policies, which is typical for .eu domains, but the website's branding and contact information support legitimacy. Overall, the site is professional, trustworthy, and business-focused.

T

Terberg Techniek

terbergtechniek.nl

10

Terberg Techniek is a specialized vehicle modification company operating under the Royal Terberg Group umbrella, focusing on bespoke heavy-duty vehicle adaptations including chassis modifications, mining vehicles, and truck-mounted cranes. The company targets industrial clients requiring custom vehicle solutions, positioning itself as a niche leader with a medium-sized operational footprint primarily in the Netherlands but serving global markets. The website reflects a professional and consistent brand image with comprehensive service descriptions and recent project highlights. Technically, the site employs a modern technology stack including Matomo analytics, Google Tag Manager, Azure Application Insights, and Vue.js, hosted on a CMS platform identified as Episerver (Optimizely). The site is mobile optimized and performs moderately well with good SEO and accessibility basics. Security posture is strong with HTTPS enforced, privacy-compliant cookie consent, and anonymized analytics tracking, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professionally maintained, supporting the company's business credibility and digital presence.

T

Terberg Special Vehicles

terbergspecialvehicles.com

76

Terberg Special Vehicles is a specialized manufacturer of industrial and terminal vehicles, including terminal tractors, RoRo tractors, and electric vehicles, serving global markets such as ports, distribution centers, and industry. The company operates under the Royal Terberg Group umbrella and offers comprehensive services including maintenance, telematics, and training. The website demonstrates a mature digital presence with modern technologies like Vue.js, Bootstrap, and integrated analytics tools such as Matomo and Azure Application Insights. Security posture is generally good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a concern but the professional content and consistent branding mitigate trust issues. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements.

R

REMEX GmbH

meb-wissen.de

50

MEB Wissen is an educational platform operated under the REMEX GmbH group, focused on providing training and resources related to the German Ersatzbaustoffverordnung (EBV) regulation. The platform offers on-demand courses, live webinars, group seminars, and digital/print work aids targeting professionals in construction and environmental sectors. The business model centers on paid and free educational content to support sustainable building material usage. Technically, the website is built on WordPress with WooCommerce and Masterstudy LMS, leveraging modern web technologies such as Vue.js and Bootstrap. The site is hosted on INWX nameservers and shows good SEO and mobile optimization practices. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements are recommended such as adding security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR, though explicit cookie consent is missing. The WHOIS data aligns with the business claims, showing no suspicious patterns. The site integrates social media channels and partner domains related to REMEX GmbH, enhancing credibility.

N

NeoPixel s.r.o.

neopixel.sk

10

NeoPixel s.r.o. is a Slovak-based technology service provider specializing in comprehensive web solutions and SEO optimization. Established in 2015, the company positions itself as a leader in web design and SEO services within its regional market. Their website emphasizes delivering high-quality web presence and search engine visibility for clients, targeting businesses and individuals seeking to improve their online footprint. The business model focuses on service delivery including SEO, web design, and e-commerce solutions. Technically, the website is built on WordPress using the Elementor page builder, supported by modern analytics tools such as Google Analytics and Microsoft Clarity, and employs Cloudflare for DNS and hosting services. The site is mobile-optimized with good navigation and professional design, reflecting a mature digital presence.

K

Karl Kahane Foundation

karlkahanefoundation.org

45

The Karl Kahane Foundation is a Swiss-based charitable organization established in 1991, focusing on social inclusion, accessibility, and migration-related projects primarily in Europe, Turkey, the Middle East, and North Africa. The foundation operates as a non-political, non-religious entity supporting vulnerable communities through funding and partnerships with reputable NGOs. The website reflects a professional and consistent brand presence, with clear information about its founder, board members, and partners. Technically, the site is built on WordPress with standard SEO and analytics tools, offering good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable or malformed, likely due to privacy protection, which is common for non-profits but slightly reduces trust. Overall, the site is trustworthy and well-positioned within its niche, though improvements in privacy compliance and security best practices are recommended.

T

TPA Slovakia

tpa-group.sk

71

TPA Slovakia is a professional services firm specializing in audit, accounting, tax, payroll, IT security, and digitalization services targeted at business clients in Slovakia. The website presents a consistent and professional brand image aligned with the TPA Group network. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. The site includes cookie consent mechanisms via Cookiebot, demonstrating awareness of privacy compliance requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the website is trustworthy and well-positioned in its market segment, but could improve transparency by publishing privacy and security policies.

The website www.welterbe-bernau.de serves as the official online presence for the UNESCO World Heritage Bauhaus site in Bernau, Germany. It provides comprehensive visitor information including guided tours, workshops, exhibitions, podcasts, and a merchandise shop. The business operates under BeSt Bernauer Stadtmarketing GmbH, focusing on cultural heritage promotion and tourism services. The site targets tourists, educators, and cultural enthusiasts with a clear and professional presentation. Technically, the website is built on the Contao CMS platform using Bootstrap for responsive design and jQuery for interactivity. It employs Matomo analytics for user tracking, indicating a privacy-conscious approach. The site is mobile-optimized with lazy loading images and structured navigation, though accessibility features are basic. Hosting appears stable with multiple authoritative nameservers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a cookie consent mechanism, which are recommended for enhanced protection and GDPR compliance. No incident response or vulnerability disclosure policies are published, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and serves its cultural mission well. Strategic enhancements in security policies and privacy compliance would further strengthen its posture and user trust.

Galerie Bernau is a small, regionally focused art gallery operated under the BeSt Bernauer Stadtmarketing GmbH umbrella. It provides cultural services including exhibitions, artist ateliers, community events, and an art shop, targeting local art enthusiasts and visitors. The website is professionally designed with clear navigation and good mobile optimization, leveraging modern technologies such as Contao CMS, Bootstrap, and analytics tools like Google Analytics and Matomo. Security posture is solid with HTTPS and anonymized tracking, though improvements are recommended in security headers and cookie consent mechanisms. The domain registration and hosting setup appear legitimate and consistent with the business profile. Overall, the site reflects a trustworthy and community-oriented cultural institution with room for enhanced privacy compliance and security transparency.

BeSt Bernauer Stadtmarketing GmbH operates the website www.bernau-besuchen.de as an official tourism and city marketing platform for Bernau bei Berlin, Germany. The site provides comprehensive information on sightseeing, accommodations, events, and cultural activities targeting tourists and visitors. The business model focuses on promoting local tourism and supporting visitor engagement through event promotion, guided tours, and a souvenir shop. The company maintains a consistent brand presence with clear contact information and active social media channels. Technically, the website is built on the Contao Open Source CMS with Bootstrap framework and uses jQuery and Matomo analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, delivering a good user experience with moderate performance. Hosting appears to be managed via your-server.de and related nameservers, indicating a professional hosting environment. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and does not provide a public security policy or vulnerability disclosure mechanism. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website scores well on content quality, technical implementation, and business credibility, with room for improvement in security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the domain appears legitimate and consistent with the business purpose.

B

Behinderten- und Rehabilitations-Sportverband Berlin

bsberlin.de

47

The Behinderten- und Rehabilitations-Sportverband Berlin (BS Berlin) is a non-profit sports association dedicated to promoting inclusive sports and rehabilitation sports in Berlin. The website serves as a platform to inform about events, campaigns, and educational offerings related to inclusive sports, targeting people with disabilities, sports clubs, and partners in politics and associations. The organization holds a strong regional position with established programs and partnerships. Technically, the website is built on TYPO3 CMS with Bootstrap 4, uses Matomo for analytics, and implements accessibility and privacy best practices including cookie consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve transparency by adding terms of service and security-related policies.

S

Schützenverband Berlin-Brandenburg e.V.

svbb.org

63

Schützenverband Berlin-Brandenburg e.V. is a regional non-profit sports association focused on sports and archery shooting activities within the Berlin-Brandenburg area. The organization provides information, coordination, and event management services for its member clubs and the broader sports shooting community. The website serves as an information hub with event calendars, contact forms, and embedded media to support its members and interested parties. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Modern Events Calendar Lite, indicating a moderate level of digital maturity. The site is mobile-optimized and includes privacy and cookie consent mechanisms, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and incident response information could enhance the security maturity. Overall, the website presents a professional and trustworthy front for the association with clear business information and consistent branding.

V

Volt Power Analytics

voltrystad.com

58

Volt Power Analytics is a specialized energy analytics company focused on providing advanced power market modeling solutions for the European market. Leveraging Rystad Energy's data, they offer daily updated Forward Horizon Reports and customizable market simulations. The company targets professionals and organizations in the energy sector, including utilities, investors, and government entities. Their business model centers on delivering SaaS-based analytics and forecasting tools with a strong emphasis on data accuracy and market insights. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools, reflecting a moderate to high digital maturity. Security posture is solid with HTTPS, domain transfer lock, and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, though direct contact details are limited to a web form. Strategic recommendations include enhancing DNS security, publishing security policies, and expanding contact options to improve trust and compliance.

F

Fleetback

fleetback.com

65

Fleetback is a Luxembourg-based company founded in 2015 that provides a comprehensive digital platform for automotive dealerships to streamline and digitalize their sales, after-sales, self-service, audits, and parking processes. The company serves over 2,000 customers across 26 countries, positioning itself as a key player in the automotive digital solutions market. The website reflects a professional and consistent brand image, targeting automotive professionals such as technicians, salespeople, and service advisors. Technically, the website is built on WordPress with modern libraries and frameworks including jQuery, Bootstrap, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted with Amazon Registrar and uses AWS DNS services. It features a cookie consent mechanism compliant with GDPR and employs Google reCAPTCHA v3 for bot protection. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and implements best practices like bot protection and cookie consent. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, Fleetback's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

A

Arved Fuchs Expeditionen

arved-fuchs.de

56

Arved Fuchs Expeditionen is a German-based non-profit organization focused on environmental and climate expeditions, primarily using the sailing ship Dagmar Aaen since 1988. The organization engages in scientific expeditions, youth education, lectures, and publishes related content such as podcasts and books. Their market position is niche but well-established in the environmental expedition and education sector. The website is built on Joomla CMS with modern frontend frameworks, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and obfuscated emails, though some security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Contact information is transparent and professional, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

B

brand MARINE CONSULTANTS GmbH

brand-marine.com

51

brand MARINE CONSULTANTS GmbH is a specialized marine consultancy founded in 2014, offering a broad range of services including salvage operations, casualty management, surveys, and expert witness services. The company targets shipowners, law firms, insurance companies, and offshore contractors globally. The website is professionally designed, mobile optimized, and uses modern web technologies including Contao CMS and various JavaScript libraries. Privacy and cookie policies are implemented with GDPR compliance. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. No direct contact emails or phone numbers are present on the services page, which could impact user trust. Overall, the security posture is moderate with room for improvement in security headers and incident response transparency.

O

Oshkosh Corporation

oshkoshsseries.com

64

Oshkosh S-Series is a specialized product line under the established Oshkosh Corporation, focusing on front discharge concrete mixers. The website serves as a product and support portal targeting construction and industrial customers, offering detailed product information, parts and service support, and innovation features. The site is professionally designed using HubSpot CMS and integrates modern marketing and analytics tools, reflecting a mature digital presence. Security posture is adequate with HTTPS and domain protections, though improvements like DNSSEC and security policies are recommended. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site demonstrates strong business credibility and technical implementation, suitable for an enterprise-level industrial manufacturer.

O

Oshkosh Corporation

oshkoshairport.com

62

Oshkosh Airport Products is a division of Oshkosh Corporation specializing in the design and manufacture of Airport Rescue and Firefighting (ARFF) vehicles for airports worldwide. The company holds a strong market position as a leading manufacturer with a comprehensive dealer network and aftermarket support, offering high-performance ARFF trucks and innovative solutions such as electric ARFF vehicles. The website reflects a professional and consistent brand presence aligned with Oshkosh Corporation's corporate identity. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility and security headers could be made. Performance is moderate, with a well-structured navigation and rich content. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not fully implemented, and no dedicated security or incident response policies are visible. The WHOIS data is unavailable, which limits domain registration trust analysis, but the website content and branding strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, accessibility, and visible policy links would enhance trust and compliance further.

O

Oshkosh AeroTech

oshkoshaerotech.com

65

Oshkosh AeroTech is a specialized provider of ground support equipment and comprehensive airport solutions, leveraging the strength and legacy of its parent company, Oshkosh Corporation. The company focuses on delivering technology-driven products and aftermarket customer care to airports, airlines, ground handlers, and military clients. Their product portfolio includes electric ground support equipment, gate equipment, defense aviation ground equipment, and airport operational services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as Swiper.js and jQuery, and integrates Google Tag Manager and HubSpot Analytics for tracking. Hosting is managed via AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs domain status locks to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, and does not provide visible security policies or incident response information. Privacy compliance is partial, with a comprehensive privacy policy linked to the parent company but no cookie consent mechanism detected. Contact information is primarily via web forms, with no explicit emails or phone numbers listed. Overall, the website demonstrates a solid business credibility and technical foundation but could improve in privacy compliance and security transparency to enhance trust and regulatory adherence.

M

MAXIMETAL

maximetal.com

61

MAXIMETAL is a Canadian manufacturing company specializing in custom fire apparatus and utility trucks with over 40 years of industry experience. The company serves major fire departments and utility companies across Canada and the United States, leveraging partnerships with industry leaders such as Oshkosh Corporation and Pierce Manufacturing. Their website reflects a mature business with a clear market position and professional branding. Technically, the website is built on WordPress with modern plugins and technologies including Google Analytics, reCAPTCHA, and SEO optimizations. The site is mobile-friendly and provides a good user experience with clear navigation and relevant content. Security practices include HTTPS enforcement and CAPTCHA on forms, though some security headers are missing. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data introduces some uncertainty about domain registration legitimacy, which slightly impacts trust. Overall, MAXIMETAL presents a credible and professional online presence with solid business and technical foundations. Strategic recommendations include enhancing security headers, verifying domain registration details, and adding explicit security policies to further strengthen trust and compliance.

K

Kewaunee

kewauneefabrications.com

62

Kewaunee Fabrications is a specialized heavy fabrication company operating under the parent company Oshkosh Corporation. The company offers a comprehensive range of manufacturing services including welding, finishing, assembly, machining, fabrication, and quality inspection, supported by ISO 9001 certification and certified weld inspectors. Their market position is that of a trusted industrial fabricator serving B2B clients in manufacturing sectors. The website is professionally designed using WordPress, with good SEO and mobile optimization, hosted on AWS infrastructure. Security posture is solid with HTTPS and domain EPP protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy hosted on the parent company domain. Overall, the site is trustworthy and professionally maintained, reflecting a mature business presence.

I

Iowa Mold Tooling Co., Inc.

imt.com

64

Iowa Mold Tooling Co., Inc. is a well-established manufacturing company specializing in the design and production of mechanics trucks, lube trucks, tire trucks, air compressors, and truck mounted cranes. The company operates as a subsidiary of Oshkosh Corporation, indicating a strong market position and corporate backing. Their website reflects a professional and consistent brand image, targeting industrial customers and distributors with detailed product information and support resources. The business model focuses on manufacturing and distribution through a network of partners and direct sales. Technically, the website is built on WordPress using Elementor, with integrations for Google Analytics and social media feeds, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience.

F

Frontline Communications

frontlinecomm.com

65

Frontline Communications is a specialized manufacturer of custom command and communication vehicles serving government and emergency response sectors. The company operates as a division of Pierce Manufacturing Inc., itself part of Oshkosh Corporation, indicating strong corporate backing and market presence. Their product range includes mobile command centers, EOD vehicles, SWAT trucks, and other specialty communication vehicles designed for high reliability and operational efficiency. The website reflects a professional and consistent brand image with clear business focus and target audience alignment. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including jQuery, Google Analytics, and Facebook SDK for marketing and analytics purposes. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. Performance is moderate, typical for CMS-driven marketing sites. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks some security best practices such as security headers, a published security policy, and vulnerability disclosure mechanisms. Privacy compliance is well addressed through a comprehensive privacy policy linked to the parent company and a cookie consent mechanism. Overall, the website presents a trustworthy and professional front for Frontline Communications, though the absence of WHOIS registration data and direct contact information slightly reduces transparency. Strategic improvements in security disclosures and contact availability would enhance trust and compliance.

N

Netzwerk Kleinkunst der Evangelischen Kirche in Mitteldeutschland

kleinkunst-ekm.de

45

The website www.kleinkunst-ekm.de serves as a cultural networking platform for the Evangelische Kirche in Mitteldeutschland, connecting artists and church communities across the region. It offers a curated portal for artists and venues, supporting cultural events such as Kirchenkino and providing resources like documents and workshops. The site is positioned as a small, non-profit entity with a clear regional focus and strong church affiliation. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and popular carousel and slider libraries. Hosting is provided by Eastlink, a German hosting provider, with HTTPS enabled ensuring secure communication. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Analytics are handled via Matomo, indicating some privacy consideration. From a security perspective, the site uses HTTPS but lacks visible security headers and published security or incident response policies. No cookie consent mechanism is present, which is a GDPR compliance gap. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a small non-profit organization, with no suspicious patterns. Overall, the website is professional, trustworthy, and serves its community well, but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal policies.

E

ezra. Opferberatung Thüringen

opferhilfe-thueringen.de

57

ezra. Opferberatung Thüringen is a specialized non-profit organization providing counseling and support services to victims of right-wing, racist, and antisemitic violence in the German state of Thüringen. The organization targets affected individuals, their relatives, and witnesses, offering victim assistance, incident documentation, and a victim aid fund. The website is professionally designed, multilingual, and well-structured, reflecting a clear mission and strong regional presence. It is supported by official funding bodies and partners, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress, hosted by Raidboxes, and uses common plugins and libraries such as Contact Form 7 and Font Awesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the site is trustworthy and serves an essential social function with a strong regional focus.

E

Evangelische Kirche in Mitteldeutschland (EKM)

kirchenlandkarte.de

10

The website www.kirchenlandkarte.de is an official online project of the Evangelische Kirche in Mitteldeutschland (EKM), providing a comprehensive interactive map and detailed information about over 4000 churches, monasteries, and chapels in Central Germany. It serves as a cultural and religious tourism portal targeting visitors interested in church architecture, history, and spiritual sites. The platform offers detailed descriptions, opening hours, and contact information, enhancing visitor engagement and community outreach. Technically, the site employs a modern tech stack including Bootstrap, jQuery, Leaflet for mapping, and Matomo for analytics, hosted on Eastlink servers. The site is mobile-optimized with good SEO practices and a professional design, ensuring a positive user experience. The content is rich, well-structured, and consistent with the church's branding. From a security perspective, the site uses HTTPS and implements secure form handling with CSRF tokens. However, it lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is strong, with a comprehensive privacy policy aligned with GDPR and DSG-EKD standards, though no explicit cookie consent mechanism is present. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and user trust.

F

Ferienhaus "Brückenhaus Naumburg"

brueckenhaus-naumburg.de

55

Ferienhaus "Brückenhaus Naumburg" is a small hospitality business offering a lovingly restored historic holiday home located in Naumburg, Germany. The website provides detailed information about the rental property, pricing, availability, and booking options, targeting tourists seeking accommodation in the Saale-Unstrut region. The business positions itself as a niche provider of heritage vacation rentals with a focus on comfort and local charm. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Slider Revolution, with a booking system integrated for user convenience. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks some advanced security headers and explicit privacy or security policies. Overall, the website is professional and trustworthy, though it could improve privacy compliance and security posture by adding missing policies and headers.

F

Förderverein Moritzkirche Naumburg (Saale) e.V.

moritzkirche-naumburg.de

49

The website represents the Förderverein Moritzkirche Naumburg (Saale) e.V., a non-profit organization dedicated to preserving and promoting the cultural and religious heritage of the St. Moritz church in Naumburg, Germany. It offers information about church services, exhibitions, concerts, and historical lectures, targeting local visitors and cultural enthusiasts. The site is well-branded and provides clear contact and donation information, reflecting a trustworthy community institution. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and slick carousel, delivering a good user experience with mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is used, but no security headers or vulnerability disclosures are present, indicating room for improvement in security posture. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security measures.

E

Evangelische Schulstiftung in Mitteldeutschland St. Johannes

schulstiftung-ekm.de

39

The Evangelische Schulstiftung in Mitteldeutschland St. Johannes operates as a large non-profit educational foundation managing 42 educational institutions across the German states of Saxony, Saxony-Anhalt, and Thuringia. It serves over 7,000 students with a staff of approximately 900, offering a broad range of school types including primary, secondary, and special education. The foundation also provides career opportunities and professional development programs, positioning itself as a key regional player in evangelical education. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and well-structured user experience. While performance is moderate, the site is mobile-optimized and SEO-friendly. Analytics are handled via Matomo/Piwik, reflecting a moderate level of user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

K

KS Digital

ksdigital.no

66

KS Digital is a Norwegian government-affiliated digital service provider delivering sustainable shared digital services tailored to the needs of the municipal sector. The company is relatively new, founded in 2024, and targets Norwegian municipalities with digital solutions that align with sector requirements. The website reflects a professional and consistent brand presence with clear messaging about its mission and services. Technically, the site is built on WordPress with modern plugins and frameworks such as React, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, leveraging Yoast SEO and structured data for enhanced search visibility. Security posture is adequate with HTTPS implied, but lacks explicit security headers and detailed security or privacy policies. No forms or direct contact information are present on the homepage, which may impact user engagement and trust. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

C

Cloud Security Alliance Norway Chapter

cloudsecurityalliance.no

61

The Cloud Security Alliance Norway Chapter website serves as the local representation of the global Cloud Security Alliance organization, focusing on cloud security education, networking, and community engagement within Norway. Founded in 2015, the chapter provides members with access to events, research, and professional development opportunities in cloud security. The website is hosted on the Higher Logic platform, leveraging ASP.NET WebForms and common web technologies such as jQuery and Bootstrap for its frontend implementation. From a technical perspective, the site employs a moderate technology stack with CDN hosting via Amazon CloudFront, ensuring reasonable performance and availability. While the site is functional and professionally designed, mobile optimization and accessibility are basic, and SEO practices are modest. The site uses HTTPS with good SSL configuration but lacks several recommended security headers, which could enhance its security posture. Security-wise, the website enforces HTTPS and uses Google Tag Manager for analytics and tracking but does not provide explicit security policies, incident response contacts, or vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism or GDPR compliance indicators. The absence of direct contact emails or phone numbers on the homepage limits immediate user engagement but aligns with the community-focused nature of the chapter. Overall, the website is trustworthy and legitimate, consistent with the Cloud Security Alliance brand and its Norway chapter mission. Strategic improvements in security headers, privacy compliance, and mobile accessibility would enhance the site's security posture and user experience.

N

Norwegian University of Science and Technology

ntnu.edu

69

The Norwegian University of Science and Technology (NTNU) operates a comprehensive and professionally designed website serving students, researchers, and the academic community. The site offers detailed information on study programs, research initiatives, student life, and institutional resources, positioning NTNU as a leading educational institution in Norway. The digital infrastructure leverages modern technologies including Liferay CMS, Bootstrap, and various analytics tools, reflecting a mature and well-maintained technical environment. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be enhanced. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and user-centric design.

A

ADS Maritime Holding Plc

adsmh.com

50

ADS Maritime Holding Plc operates as a preferred provider of tanker vessel services, focusing on maritime transportation within the energy sector. The company targets businesses and stakeholders requiring specialized tanker vessel logistics. The website presents a professional and consistent brand image, leveraging WordPress CMS with the Divi theme, and includes standard web technologies such as JavaScript and Google Tag Manager for analytics and cookie consent management. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit privacy or security policies. Overall, the website is functional and business-oriented but would benefit from enhanced transparency and security measures.