Security Directory

U

Uplift Founders

upliftfounders.com

59

Uplift Founders is a specialized coaching service focused on empowering startup founders to scale their businesses faster by addressing both the inner psychological aspects and the outer strategic business challenges. Founded in 2023 and based in Germany, the company targets seed-stage founders approaching Series A funding as well as bootstrapped founders with significant traction. Their offerings include a proprietary Founder Audit, shift sessions, a Clarity Program for bi-weekly coaching, and an intensive Series A Co-Pilot mode for hands-on support. The website is professionally designed, mobile-optimized, and rich in content, including detailed FAQs and client testimonials, which enhance trust and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for UI components, alongside Matomo for privacy-conscious analytics. The domain is registered with a reputable registrar and secured with HTTPS, although DNSSEC is not enabled. No major security vulnerabilities or exposed sensitive data were detected. However, the site lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and security. Overall, the security posture is solid but could be improved by implementing additional HTTP security headers, enabling DNSSEC, and publishing formal security and incident response policies. The business credibility is high due to transparent contact information, professional content, and consistent branding. No adult or questionable content is present, making the site safe for general audiences.

M

Mon magasin Vert

monmagasinvert.fr

69

Mon magasin Vert is a regional retail and e-commerce company specializing in gardening, pet supplies, and outdoor equipment, primarily serving the Brittany and Pays de la Loire regions in France. The website is built on a modern Magento platform with the Hyvä frontend theme, indicating a mature digital infrastructure. The company is part of the Eureden group, a known entity in the agricultural and retail sector. The site demonstrates good privacy compliance with clear cookie consent mechanisms and privacy policies in French, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and security headers present, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

G

Globus

globus.hu

55

Globus is a Hungarian company specializing in the manufacturing and retail of canned vegetable products, including peas, corn, beans, lentils, and vegetable mixes. The website serves as a product showcase and customer engagement platform, offering recipes, blog content, and career information. The company appears to hold a solid position in the Hungarian canned vegetable market with a medium-sized business model focused on retail and manufacturing. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Tag Manager and Swiper.js for analytics and user interface enhancements. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

G

GEMINI APPS sp. z o. o.

gemini.pl

60

Gemini.pl is a well-established Polish e-commerce platform specializing in health and beauty products, offering nearly 27,000 items across multiple categories such as health, pregnancy, child care, cosmetics, hygiene, and medical equipment. The company, GEMINI APPS sp. z o. o., founded in 1990, operates with a strong market presence in Poland, targeting general consumers seeking health and beauty products online. The website demonstrates a professional design with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the site leverages modern frameworks like Vue.js and Nuxt.js, combined with Tailwind CSS for styling and Swiper.js for interactive elements, hosted by home.pl S.A., a reputable Polish hosting provider. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is weak due to missing explicit privacy and cookie policies, and no incident response or vulnerability disclosure information is published. Overall, Gemini.pl is a credible and professional online retailer with a solid technical foundation but should enhance privacy and security transparency to improve compliance and user trust.

A

Medicare.pl - Kliknij po zdrowie (dawniej allecco.pl)

allecco.pl

62

Medicare.pl is a large Polish online pharmacy platform offering a wide range of approximately 18,000 products including medicines, cosmetics, supplements, and medical devices. The business model combines e-commerce with physical pickup points in over 800 pharmacies across 364 cities, targeting general consumers seeking convenient access to health-related products. The website is built on the AptusShop CMS platform and leverages modern technologies such as Google Tag Manager, Cookiebot for consent management, and various marketing tools like Prefixbox and Edrone. Hosting and content delivery are supported by Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and multiple security headers present, although explicit privacy policies and terms of service are not found in the provided content. WHOIS data is unavailable from the Polish NASK registry, which slightly reduces trust but is common for privacy-protected domains in this sector. Overall, the website demonstrates a professional and trustworthy e-commerce presence in the healthcare industry.

H

Hrvatski zavod za norme

hzn.hr

60

Hrvatski zavod za norme (HZN) is an independent, non-profit public institution serving as the national standards body of the Republic of Croatia. The organization focuses on the development and promotion of standards, facilitating voluntary application of norms within Croatia, and ensuring access to international and European standards through its memberships. The website reflects a well-established institution with a clear mission to support normization activities and provide related services such as sales of Croatian standards and membership management. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with good mobile optimization and accessibility features. It integrates Google Analytics for user tracking and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. The site is served over HTTPS with no visible security misconfigurations, although some security headers could be improved. From a security perspective, the site demonstrates a mature posture with encrypted communications, privacy compliance, and no evident vulnerabilities or exposed sensitive data. However, it lacks explicit incident response or vulnerability disclosure information, which could enhance trust and preparedness. The WHOIS data is privacy protected due to GDPR, which is justified for this type of governmental-related entity, though it limits transparency. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining compliance with evolving privacy regulations to further strengthen security and trust.

MAS Karlštejnsko, z.ú. is a small, non-profit regional development agency based in the Czech Republic, established in 2008. The organization focuses on supporting municipalities, entrepreneurs, non-profit organizations, and private individuals within its region by providing consulting services, facilitating access to European and national grant programs, and managing projects aligned with local development strategies. The website reflects a professional and consistent brand presence with clear communication of its mission and services. Technically, the site is built on WordPress using modern technologies such as Bootstrap, jQuery, and Swiper.js, with SEO optimization via Yoast and analytics through Google Analytics and Tag Manager. The site is mobile-optimized and performs moderately well.

O

Obec Kozomín

kozomin.cz

48

Obec Kozomín operates as the official municipal government website for the Kozomín municipality in the Czech Republic. It provides residents and visitors with essential local government information, including official announcements, contact details, office hours, and community news. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Swiper.js, and Leaflet for maps, built on the Galileo CMS platform. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly detailed. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

O

Obec Vodochody

vodochody.cz

48

Obec Vodochody operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive local government information including news, events, official documents, contact details, and community services. It targets residents and visitors seeking municipal updates and services. The website integrates modern web technologies such as jQuery, Bootstrap, and Swiper.js to deliver a responsive and user-friendly experience. It also promotes a mobile app and virtual tours to enhance community engagement. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers or explicit security policies. WHOIS data is unavailable, which limits domain trust verification, but the official content and accessibility certification support legitimacy. Overall, the site is well-structured, accessible, and trustworthy for its intended audience.

M

MOONTON Games

moonton.com

62

MOONTON Games is an established international mobile gaming company specializing in game development, publishing, and esports. The company operates globally with offices in multiple Asian countries and has a strong presence in the mobile esports ecosystem, particularly with its flagship title Mobile Legends: Bang Bang. The website reflects a professional and consistent brand image targeting gamers worldwide and esports enthusiasts. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. Overall, the site is safe, accessible, and trustworthy, though WHOIS data for the subdomain is unavailable, which is typical for subdomains but limits full domain trust verification.

P

Poule et Toque

poule-et-toque.fr

64

Poule et Toque is a French company specializing in supplying poultry products to the professional foodservice and catering sectors. Their website presents a well-structured, professionally designed platform targeting restaurateurs and catering professionals with segmented product lines such as 'Prêt à Cuire', 'Prêt à réchauffer', and 'Prêt à Servir'. The company positions itself as an expert in French poultry, offering solutions tailored to various foodservice needs. The site includes rich content, social media integration, and a dedicated subdomain for a poultry competition, indicating active engagement in their industry. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Matomo for analytics, showing a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and compliance with GDPR suggest legitimacy. The site is accessible with no blocking or WAF challenges detected.

The website represents ncm - Net Communication Management GmbH, a small Austrian technology company specializing in GDPR-compliant web analytics through their proprietary tool CheckEffect. The company has a strong market position in the Alpine region, offering privacy-focused analytics as an alternative to Google Analytics. The technical infrastructure is modern, leveraging Contao CMS, Bootstrap, and JavaScript libraries, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a positive business reputation.

N

Nick

nick.tv

70

Nick.com is the official global website for Nickelodeon, a leading children's entertainment brand owned by Paramount Global. The site offers access to popular children's shows such as SpongeBob SquarePants, Dora, and Teenage Mutant Ninja Turtles, targeting a young audience and their families. The website is professionally designed with excellent content quality and consistent branding, reflecting its enterprise-level status in the media industry. Technically, the site leverages modern JavaScript frameworks like React and integrates industry-standard tools for analytics and cookie consent management, ensuring a responsive and performant user experience across devices. Security posture is strong with HTTPS enforcement and security headers, although explicit privacy and terms of service pages are not evident in the provided content. WHOIS data is unavailable, likely due to privacy protection, which is justified for a large media company. Overall, the site is trustworthy, safe for general audiences, and well-optimized for SEO and accessibility.

A

Atari®

atari.com

74

Atari.com is the official e-commerce website for Atari®, a well-known brand in the gaming industry. The site offers classic and modern gaming consoles, cartridges, merchandise, and collectibles, targeting gamers and collectors worldwide. The website leverages the Shopify platform, integrating multiple third-party services for reviews, marketing, and product customization, reflecting a mature digital infrastructure. The site is professionally designed with good content relevance and user experience, supporting its position as a large, established brand in the gaming and entertainment sector. Security posture is solid with HTTPS enforced and form protection via hCaptcha, though there is room for improvement in explicit security headers and published security policies. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and business credible, with a strong domain history and consistent WHOIS data.

Č

Český svaz moderního pětiboje, z.s.

pentathlon.cz

44

Český svaz moderního pětiboje, z.s. is the official Czech Modern Pentathlon Association, established in 2002, serving as the national governing body for modern pentathlon sports in the Czech Republic. The organization focuses on athlete development, competition organization, and promotion of the sport to youth and sports enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience of athletes, clubs, and fans. Technically, the site employs modern JavaScript libraries, lazy loading, and integrates social media and analytics tools, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and removal of potentially sensitive inline scripts. Privacy compliance is basic, lacking explicit privacy and terms of service pages. Overall, the domain registration data aligns well with the business, supporting high legitimacy and trustworthiness.

ČESKOMORAVSKÝ POHÁR RALLYE (ČMPR) operates as an organizer and promoter of rally competitions primarily targeting motorsport enthusiasts in the Czech Republic. The website serves as the official platform for event calendars, results, rules, and news related to the rally cup. The business is positioned as a niche regional motorsport event organizer with a small organizational size and a history dating back to 2010. The site content is primarily in Czech and focuses on rally event information and community engagement via social media channels such as Facebook and YouTube. Technically, the website is built on WordPress using the Blocksy theme and leverages common web technologies including jQuery, Yoast SEO for search optimization, Google reCAPTCHA v3 for form security, and Swiper.js for UI components. Hosting appears to be provided by a Czech hosting provider (cesky-hosting.eu). The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA to protect forms from abuse. However, it lacks visible security headers and does not publish security policies or incident response contacts. Privacy and cookie policies are absent, indicating gaps in compliance with GDPR and related regulations. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a professional and trustworthy front for its business purpose but would benefit from enhanced privacy compliance, security policy transparency, and improved contact information availability to strengthen user trust and regulatory adherence.

V

Virtuplex

virtuplex.space

63

Virtuplex operates the world's largest commercial virtual reality labs with locations in Dubai, Bratislava, and Prague. The company specializes in providing VR solutions that allow clients to experience and interact with buildings, products, and spaces before they are physically built. Their market position is strong, supported by over 100 projects and a diverse client base across industries such as real estate, urban planning, retail, manufacturing, and defense. The website reflects a mature digital presence with modern technologies and comprehensive service descriptions.

O

Obec Zadní Třebaň

zadnitreban.cz

45

Obec Zadní Třebaň is a small municipal government website serving the local community of Zadní Třebaň in the Czech Republic. The site provides comprehensive information about the municipality, including local news, events, administrative contacts, and public services. It targets residents and tourists, offering cultural event details and local infrastructure information. The website is professionally designed with consistent branding and good content quality, reflecting its role as an official government portal. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for maps. It is mobile optimized and accessible, with a cookie consent mechanism and privacy policy in place, indicating a reasonable level of digital maturity. However, some security best practices such as explicit HTTP security headers are not evident, and WHOIS data is missing, which slightly impacts trust. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The presence of cookie consent and privacy policy supports GDPR compliance. The lack of incident response or security policy information is a gap. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk is low given the nature of the site as a local government portal with no sensitive transactions or personal data collection beyond basic contact forms. Strategic recommendations include enhancing security headers, verifying SSL configuration, and improving WHOIS transparency to boost trust and compliance.

N

Nevypusť duši, z. s.

nevypustdusi.cz

53

Nevypusť duši is a Czech non-profit organization dedicated to mental health education, prevention, and support primarily targeting children, youth, parents, educators, and social workers. The organization offers a range of preventive programs, support groups, and educational resources to foster open conversations about mental health and provide practical help. It has a strong partnership ecosystem and a clear mission to integrate mental health awareness into everyday life in Czech society. The website reflects a professional and well-established presence with comprehensive content and multiple communication channels.

J

Jednota školských informatiků

jsi.cz

57

Jednota školských informatiků (JSI) is a Czech non-profit association dedicated to supporting the effective use of digital technologies in education, primarily targeting schools and educators. Established in 2002, JSI fosters communities of teachers and ICT enthusiasts to promote digital competencies and informatics thinking among children and students. The website serves as an informational and community platform, providing news, events, and resources related to digital education in the Czech Republic. Technically, the site is built on WordPress using the Divi theme, with standard JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and comprehensive SEO optimizations. Security-wise, the website uses HTTPS but lacks several important security headers and explicit incident response contacts, which could be improved to enhance trust and compliance. Privacy and cookie policies are not present, indicating a gap in GDPR compliance. Overall, the site is trustworthy and professional in its domain but would benefit from enhanced privacy, security, and compliance measures.

B

Blaník - svazek obcí

mikroregionblanik.cz

43

Blaník - svazek obcí is a regional association of municipalities in the Czech Republic providing official information, news, and event calendars for the Blaník region. The website serves residents, visitors, and local officials with relevant regional content and contact information. Technically, the site uses a modern CMS platform with common JavaScript libraries such as jQuery, Bootstrap, and Swiper for UI components, and Leaflet for map integration. The site is mobile optimized and accessible, with a cookie consent mechanism implemented. Security posture is moderate with HTTPS implied but lacking visible security headers and no published privacy or terms policies. WHOIS data is unavailable, which reduces trust assessment confidence. Overall, the site is functional and professional but would benefit from enhanced security and compliance documentation.

S

Svazek obcí - Region Dolní Berounka

dolniberounka.cz

45

Svazek obcí - Region Dolní Berounka is a regional non-profit governmental association serving multiple municipalities in the Czech Republic. The website provides news, event calendars, official documents, and contact information relevant to the local communities it serves. It targets residents, local officials, and visitors interested in the Dolní Berounka region. The business model is focused on regional cooperation and information dissemination without commercial intent. Technically, the website uses a custom CMS likely provided by Galileo Corporation, leveraging modern frontend technologies such as jQuery, Bootstrap, Swiper.js, and Mmenu.js. The site is mobile optimized and accessible, with a cookie consent mechanism implemented, but lacks visible privacy or terms of service pages. Performance is moderate with good SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details appear legitimate and consistent with a government entity. Overall, the site is functional, professional, and trustworthy for its intended audience, but improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and compliance.

M

Město Hořovice

mesto-horovice.eu

48

Město Hořovice operates an official municipal website serving residents and visitors with comprehensive information about city governance, services, cultural events, urban planning, and community resources. The website is well-structured, multilingual, and provides clear navigation to various municipal departments and services. The technical infrastructure leverages common web technologies including jQuery, Bootstrap, and Swiper.js, indicating a moderate level of digital maturity suitable for a government portal. Security posture is adequate with HTTPS implied but lacks visible advanced security headers and incident response information. Privacy compliance is strong with a clear cookie consent mechanism and a dedicated privacy policy page. Overall, the site presents a trustworthy and professional digital presence for the city government.

S

Sdružení obcí Sedlčanska

sedlcansko.cz

50

Sdružení obcí Sedlčanska is a regional association of municipalities in the Sedlčansko area of the Czech Republic, providing coordination, information, and services to local governments and citizens. The website serves as an official portal offering news, contact information, community projects, and tourism promotion. The organization positions itself as a trusted regional government entity with a focus on community engagement and public service. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience. The site includes a cookie consent mechanism aligned with privacy best practices, although it lacks a dedicated privacy policy and terms of service pages. Security posture is moderate with HTTPS usage implied, but no explicit security headers or incident response information are published. The absence of WHOIS data limits domain trust assessment, but the website content and contact details suggest legitimacy. Overall, the site is professionally designed, accessible, and safe for general audiences.

I

Internationale Bodensee-Konferenz

bodenseekonferenz.org

62

The Internationale Bodensee-Konferenz (IBK) is a regional political cooperation organization focused on cross-border collaboration in the Bodensee region. The website serves as an information and communication platform for stakeholders, partners, and the public, providing news, events, project information, and resources related to regional cooperation. The organization operates as a non-profit entity with strong ties to governmental bodies and European Union programs, positioning itself as a key facilitator of regional development and cooperation. Technically, the website employs a mix of legacy and modern web technologies including AngularJS, jQuery, and Matomo analytics, hosted on a secure HTTPS platform. The site demonstrates good mobile optimization, accessibility features, and privacy-conscious tracking practices. However, some JavaScript libraries are outdated, which could pose security risks if not regularly updated. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While no explicit security policies or incident response contacts are published, the site avoids exposing sensitive data and disables cookies in analytics tracking to enhance privacy. The absence of WHOIS data limits domain registration transparency but does not detract from the apparent legitimacy of the organization based on content and external references. Overall, the IBK website presents a professional, trustworthy, and well-maintained digital presence suitable for its governmental and non-profit audience. Strategic improvements in security headers, updated libraries, and enhanced transparency around security policies would further strengthen its posture.

L

Liechtensteiner Alpenverein

rhiblok.li

62

Rhiblok is a community-focused climbing hall project scheduled to open in autumn 2026 in Liechtenstein, operated by the Liechtensteiner Alpenverein. The website presents detailed information about the facility, including climbing and bouldering routes, and serves as a communication platform for the local climbing community. The technical infrastructure is based on the concrete5 CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Anime.js, providing a responsive and visually engaging user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

S

seamtex

seamtex.at

72

seamtex is a specialized manufacturer and service provider of professional protective clothing, focusing on firefighter and heat protection garments. The company targets professional emergency services and emphasizes quality and certification in its products. The website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. The site includes multilingual support via TranslatePress and cookie consent management with Real Cookie Banner Pro, reflecting digital maturity and privacy awareness. Security posture is good with HTTPS enforced and some security best practices observed, though there is room for improvement in explicit security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's market position as a niche manufacturer in Austria.

I

Intercontinental Exchange, Inc.

ice.com

66

Intercontinental Exchange, Inc. (ICE) operates as a global leader in financial exchanges, clearing houses, and data services. The company is recognized for pioneering digitization in exchanges and continues to innovate in price discovery, capital raising, indexing, clearing, and mortgage technology. ICE targets financial institutions, market participants, and mortgage industry professionals with a B2B business model. The website reflects a mature enterprise with consistent branding and comprehensive business information. Technically, the website leverages modern JavaScript frameworks such as React, along with libraries like Lodash, Moment.js, and Highcharts. It uses Brightcove for video content and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and visible incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies, including GDPR adherence. Overall, the website presents a low risk with a high degree of professionalism and trustworthiness. The absence of WHOIS data is a limitation but does not significantly detract from the site's credibility given the strong business presence and external validations.

The Asociace DSO České republiky is a non-profit association representing voluntary municipal unions in the Czech Republic, focusing on fostering inter-municipal cooperation and supporting functional microregions. The organization aims to promote financial stability and recognition of public administration performance by municipalities, the Czech Republic, and regional authorities. Their website serves as an official platform providing strategic documents, project examples, news updates, and contact information for stakeholders. Technically, the website employs a custom CMS with a modern frontend stack including jQuery, Bootstrap, Swiper.js, and other UI libraries. The site is mobile-optimized with a clear navigation structure and cookie consent mechanisms, reflecting a moderate level of digital maturity. However, no advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and partner references support its legitimacy. Overall, the site is well-structured, content-rich, and trustworthy, serving its target audience effectively. Strategic recommendations include enhancing security headers, improving accessibility, and publishing detailed security and incident response policies to strengthen trust and compliance.

M

MŠ Petrov

mspetrov.cz

46

MŠ Petrov operates as a small local kindergarten located in Petrov, Czech Republic, providing preschool education and childcare services. The website presents a clear and consistent brand image with detailed descriptions of its educational offerings and community engagement. The institution targets parents and guardians of young children in the local area, emphasizing a nurturing and creative learning environment. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, and is built on a CMS platform likely provided by Galileo Corporation. The site is mobile optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and formal privacy documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security best practices.

M

Mateřská škola Nespeky

msnespeky.cz

46

Mateřská škola Nespeky operates as a local preschool educational institution in the Czech Republic, providing early childhood education and various extracurricular activities. The website serves as an official information portal for parents and the community, featuring details about classes, projects, events, and contact information. It maintains partnerships with reputable organizations such as Mensa ČR and is involved in EU co-financed projects, indicating a stable community presence and funding support. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and custom CMS components, delivering a responsive and accessible user experience. The site includes cookie consent mechanisms and GDPR-compliant privacy information, reflecting awareness of privacy regulations. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and external partnerships support legitimacy. Overall, the website presents a trustworthy, well-maintained educational resource with good privacy compliance and moderate security posture. Strategic improvements in security headers and domain registration transparency would enhance trust and resilience.

D

DE-VAU-GE Gesundkostwerk Deutschland GmbH

de-vau-ge.de

51

DE-VAU-GE Gesundkostwerk Deutschland GmbH is a well-established German manufacturer specializing in breakfast cereals, muesli bars, plant-based drinks, and snacks. Founded in 1899, it holds a strong market position as one of Europe's largest producers in its sector, primarily serving the European food retail market including private label partnerships. The website reflects a mature digital presence with comprehensive product information, sustainability initiatives, and career opportunities. Technically, the site is built on WordPress with modern plugins and analytics tools, optimized for SEO and mobile use. Security posture is solid with HTTPS, anti-spam measures, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the site demonstrates high professionalism, compliance with GDPR, and trustworthy business practices.

N

next Startup Day

next-startup-day.de

42

The next Startup Day website serves as the central platform for a major startup event in Niedersachsen, Germany, focusing on innovation, entrepreneurship, and networking among startups, investors, and companies. The event is supported by regional government entities, positioning it as a key regional initiative to foster startup ecosystem growth. The website provides detailed event information, speaker highlights, and partner collaborations, targeting startups, investors, and corporate participants. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, ensuring a flexible and visually appealing user experience. SEO and structured data are well implemented, enhancing discoverability. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and documented policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

New York Stock Exchange

nyse.com

66

The New York Stock Exchange (NYSE) website serves as a comprehensive platform for capital markets, providing services such as stock listings, trading, and market data distribution. It targets investors, listed companies, and financial professionals globally, positioning itself as a market leader under the parent company Intercontinental Exchange (ICE). The site features professional branding, rich content, and a modern technical infrastructure leveraging React and other contemporary web technologies. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although WHOIS data is unavailable likely due to privacy protections. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

D

Deutsche Gesellschaft für Internistische Intensivmedizin und Notfallmedizin (DGIIN) / Österreichische Gesellschaft für Internistische und Allgemeine Intensivmedizin und Notfallmedizin (ÖGIAIN)

akutwissen.de

51

AkutWissen.de is a specialized e-learning platform developed by the Deutsche Gesellschaft für Internistische Intensivmedizin und Notfallmedizin (DGIIN) and the Österreichische Gesellschaft für Internistische und Allgemeine Intensivmedizin und Notfallmedizin (ÖGIAIN). It offers a range of courses, webinars, podcasts, and interactive forums focused on intensive and emergency medicine, targeting medical professionals and learners in German-speaking countries. The platform leverages Moodle LMS technology with a modern tech stack including YUI, jQuery, and Matomo analytics, ensuring a robust and accessible user experience. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. The website is professionally designed with clear navigation and consistent branding, supported by affiliations with recognized medical societies.

C

Conventus GmbH

icem2026.com

10

ICEM 2026 is a professionally managed international conference focused on Emergency Medicine, scheduled for June 2026 in Hamburg, Germany. The website serves as an information hub and registration portal for attendees, exhibitors, and partners, leveraging a modern TYPO3 CMS platform with integrated GDPR-compliant cookie consent and spam protection via hCaptcha. The site demonstrates good technical maturity with moderate performance and mobile optimization. Security posture is solid with HTTPS and form protections, though security headers and explicit security policies could be improved. WHOIS data confirms domain legitimacy and appropriate registration history. Overall, the site is trustworthy and well-positioned to support the conference's business objectives.

K

KlimAktiv

klimaktiv.de

50

KlimAktiv is a German climate consultancy focused on supporting businesses, associations, authorities, and private individuals in measuring and reducing their carbon footprint to achieve zero emissions. With over 20 years of experience, they offer a comprehensive range of services including CO₂ calculators, climate strategy development, communication, and climate protection projects. The website reflects a professional and consistent brand with a clear mission centered on climate protection and sustainability. Technically, the site employs modern web technologies such as Bootstrap 5, Livewire (Laravel), and Swiper.js for interactive elements. It uses Matomo for analytics, indicating a privacy-conscious approach. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Performance is moderate with good SEO practices. From a security perspective, the website uses HTTPS and includes CSRF tokens, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited by the absence of explicit privacy and cookie policies or consent mechanisms. Overall, KlimAktiv presents a trustworthy and professional online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen their security posture and regulatory adherence.

Vojens Lufthavn operates as a regional airport serving the South Jutland area of Denmark, providing modern and renovated airport facilities with proximity to the Triangle Region and Germany. The website targets travelers and businesses in this region, offering information about airport services and operations. Technically, the site employs a modern tech stack including jQuery, Bootstrap, ASP.NET, and various JavaScript libraries for UI and media handling, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed with GDPR-aligned cookie management and clear privacy policy references. Overall, the site is professional and trustworthy but lacks visible company contact details and WHOIS transparency, which slightly impacts business credibility.

I

Isoplus Polska Sp. z o.o.

isoplus.pl

62

Isoplus Polska Sp. z o.o. is a well-established Polish manufacturer specializing in preinsulated heating pipes, serving the energy sector with a focus on environmentally friendly and efficient thermal pipe systems. The company offers a comprehensive product range including flexible, single, and double pipes, supported by certifications such as Euroheat & Power, positioning itself as a trusted player in the regional market. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile devices, providing clear business and contact information. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration and website content are consistent, supporting the legitimacy and credibility of the business.

L

Legal Cockpit

cockpit.legal

55

Legal Cockpit is a German-based service provider specializing in legal compliance solutions for websites and digital agencies. The company offers tools and consulting services to ensure websites meet legal requirements, particularly in the areas of privacy and data protection. The website is professionally designed, targeting website owners and agencies seeking legal security. The business operates in a niche market focused on legal compliance for digital businesses.

T

Thüringer Ministerium für Wirtschaft

efre-thueringen.de

58

The website www.efre-thueringen.de represents the Thüringer Ministerium für Wirtschaft's European Regional Development Fund (EFRE) program for the German state of Thüringen. It serves as an authoritative regional government portal providing comprehensive information on EU-funded development projects, funding opportunities, and strategic initiatives aimed at fostering regional growth, innovation, and sustainability. The site targets businesses, research institutions, and public stakeholders seeking funding and information about EFRE programs. Technically, the site is built on TYPO3 CMS, employs modern frontend libraries like Swiper.js, and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and privacy-aware analytics, though it lacks visible cookie consent banners and explicit security policies. Overall, the domain and hosting align with German governmental infrastructure, supporting high legitimacy and trust. Strategic recommendations include enhancing GDPR compliance with visible cookie consent, publishing security and incident response policies, and adding security headers to strengthen defenses.

B

badenovaWÄRMEPLUS GmbH & Co. KG

badenovawaermeplus.de

68

badenovaWÄRMEPLUS GmbH & Co. KG is a regional energy provider specializing in sustainable heat supply and renewable energy solutions in Germany. The company focuses on delivering Fernwärme (district heating), biogas, geothermal energy, solar, and wind energy services, targeting private customers, businesses, and industrial clients. Their market position is that of a key regional player driving the energy transition with innovative and efficient solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content for their audience. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response information are missing. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Aabenraa Kommune

aabenraa.dk

60

Aabenraa.dk is the official website of Aabenraa Kommune, a Danish municipal government entity. The site serves as a comprehensive portal offering citizen services, business information, news, and self-service solutions tailored to residents, businesses, and visitors. The website is well-positioned as the authoritative source for local government information and services in the Aabenraa region. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and accessibility tools like Monsido, ensuring good performance, mobile optimization, and accessibility compliance. Security posture is solid with HTTPS enabled and GDPR-compliant cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the site demonstrates a professional and trustworthy digital presence consistent with a government organization.

M

madaly GmbH

madaly.de

47

madaly GmbH is a small German marketing agency specializing in creator marketing targeted at the Gen-Z demographic. The company positions itself as a lead agency for innovative marketing and partnerships, offering services such as creator discovery, media production, concept development, and AI-powered reporting. The website is professionally designed using WordPress with Elementor and Yoast SEO, reflecting a modern and user-friendly digital presence. The technical infrastructure includes Cloudflare for hosting and security, Google Analytics and Hotjar for analytics, and a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is supported by a detailed cookie consent banner but lacks a visible privacy policy or terms of service. Overall, the website is trustworthy, safe for general audiences, and demonstrates a solid business credibility and technical maturity.

A

Akademie für Mediation, Soziales und Recht der Steinbeis Hochschule Berlin

akasor.de

53

The Akademie für Mediation, Soziales und Recht der Steinbeis Hochschule Berlin operates a professional educational website offering mediation and related training programs across multiple German cities. The website positions itself as a niche provider of certified mediation and supervision education, leveraging its affiliation with the Steinbeis Hochschule Berlin to establish credibility. The business model focuses on professional development and continuing education for individuals seeking certification in mediation, supervision, and coaching fields. Technically, the website employs a modern tech stack including jQuery, Swiper.js, Google Tag Manager, and Cookiebot for consent management. It is built on the Contao Open Source CMS platform and demonstrates good SEO practices with structured data and meta tags. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and publishing formal security policies or incident response contacts. No critical vulnerabilities or suspicious patterns were detected in the WHOIS data or site content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its educational audience with relevant content and transparent advertising and tracking practices.

A

ABR-IT

abr-it.de

61

ABR-IT is a small German IT service provider specializing in comprehensive IT solutions including web design, consulting, cloud services, telephony, and security technology. The company targets small to medium businesses and private clients, positioning itself as a trusted regional IT partner with certifications from Microsoft, Ionos, Hetzner, and Easybell. The website is built on WordPress with Elementor and integrates modern technologies such as Google Tag Manager and Complianz for GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a mature digital presence.

V

Vereniging Afvalbedrijven

trashtalks.nl

9

TrashTalks is a social media campaign operated by the Vereniging Afvalbedrijven, aimed at raising awareness among Dutch consumers about waste management, recycling, and sustainable product choices. The campaign leverages social media influencers and educational content to engage the public and promote environmentally responsible behavior. The website serves as a hub for campaign information, social media links, and a toolkit for partners. Technically, the website uses modern JavaScript libraries such as jQuery and Swiper.js for interactive content and responsive design. The site is mobile-optimized and includes SEO-friendly meta tags and Open Graph data. Google Analytics is implemented with IP anonymization to track user engagement while respecting privacy. However, no explicit privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site uses HTTPS and includes Google Tag Manager scripts but lacks visible security headers and formal security policies. There are no forms collecting user data on the homepage, reducing immediate risk exposure. WHOIS data confirms the domain is registered consistently with the Vereniging Afvalbedrijven organization, supporting legitimacy. Overall, the website is professionally designed and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

W

WEtell

wetell.de

54

WEtell is a small German telecommunications company specializing in sustainable and fair mobile phone services. Founded in 2020, it positions itself as an ethical alternative in the telecom market, emphasizing climate neutrality, data privacy, and community engagement. The website reflects this mission with comprehensive content, clear navigation, and strong branding consistency. Technically, the site uses modern JavaScript frameworks such as Alpine.js and Swiper.js, integrates Matomo for analytics, and employs Cookiebot for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and CSRF protections in place, though formal security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for mobile and accessibility. The domain WHOIS data aligns well with the business claims, showing no suspicious patterns. Recommendations include publishing explicit security policies and incident response information to further enhance trust and compliance.

L

Landgut Stober

landgut-stober.de

56

Landgut Stober is a well-established sustainable hospitality and event venue located near Berlin, Germany. The company offers a range of services including conference hosting, weddings, corporate and private events, and accommodation in an eco-friendly and historic setting. The business is recognized for its sustainability certifications and awards, positioning it as a leader in green hospitality in the region. The website is professionally designed, content-rich, and targets corporate clients and event planners seeking environmentally responsible venues. Technically, the site uses modern web technologies and a reputable CMS (Contao), with good mobile optimization and SEO practices. Security posture is solid with HTTPS and some security headers, though improvements like CSP and HSTS are recommended. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

B

Bertelsmann Stiftung

zukunftdernachhaltigkeit.de

56

Zukunft der Nachhaltigkeit is a German-language platform operated under the Bertelsmann Stiftung foundation, focusing on sustainability and economic transformation. The website provides research articles, podcasts, and newsletters aimed at professionals and stakeholders interested in sustainable economic systems. It holds a solid market position as a knowledge dissemination project backed by a reputable foundation. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS and secure forms, though some security headers and explicit policies are missing. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, with active social media engagement and clear business credibility.