Security Directory

T

Tauben-Shop

tauben-shop.de

48

Tauben-Shop is a German e-commerce retailer specializing in products for pigeons, ornamental birds, and breeders. The website offers a variety of health products, accessories, and event tickets catering to a niche market of bird enthusiasts and breeders. The site is built on the Shopware CMS platform and hosted on servers associated with matrix3.de, a German hosting provider. The website is well-branded and provides a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy, cookie, and terms of service pages, which are critical for compliance and user trust. Security-wise, the site uses HTTPS and SSL certificates, but additional security headers and policies are not evident.

S

Smile Clinic Slovakia

smileclinic.sk

47

Smile Clinic Slovakia is a specialized dental implant clinic operating primarily in Bratislava and Piešťany, Slovakia. The business focuses on providing lifelong dental implant solutions with over 20 years of experience, targeting patients seeking high-quality dental restoration services. The website is professionally designed using WordPress and Elementor, featuring multilingual support and SEO optimization to reach a broad audience. The presence of social proof tools and structured data enhances its market credibility. Technically, the site uses modern web technologies and integrates analytics and marketing tools, though performance is moderate and accessibility is basic. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

L

Løgmansskrivstovan

logir.fo

57

The website logir.fo is the official Faroese legal database managed by Lógartænastan within the Ministry of Justice (Løgmálaráðið). It serves as an authoritative source for Faroese laws, regulations, and legal documents, updated regularly following official publications. The target audience includes legal professionals, government officials, and the general public seeking access to Faroese legislation. The business model is government-operated, providing free access to legal information with a focus on transparency and public service. Technically, the website employs a modern but straightforward tech stack including Bootstrap, jQuery, Font Awesome, and other JavaScript libraries to provide a responsive and user-friendly interface. The site is mobile-optimized and offers structured search capabilities for legal documents. Performance is moderate, with room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. Google Analytics is used for user tracking without visible consent mechanisms. Overall, the website is trustworthy and professionally maintained, reflecting its government affiliation. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing incident response contact details to improve compliance and security maturity.

M

Mateřská škola Světýlko s.r.o.

svetylko.com

62

Mateřská škola Světýlko s.r.o. is a private kindergarten based in Třebíč, Czech Republic, founded in 2011. The institution focuses on providing quality preschool education with an emphasis on cooperation with families, individual approach to children, and fostering a friendly atmosphere. The website serves as an information portal for parents and prospective clients, offering details about the school, enrollment procedures, events, and contact information. The business operates locally with a clear target audience of families seeking early childhood education services.

Vinařství Winberg Mikulov is a small, regionally focused winery based in South Moravia, Czech Republic, specializing in quality white and red wines. The website supports their business model by offering an e-shop for wine sales, accommodation services, and event hosting such as tastings and teambuilding. The site is professionally designed using Bootstrap and includes mobile optimization and clear navigation. However, the technical infrastructure uses some outdated components such as the legacy Google Analytics ga.js script. Security posture is moderate with HTTPS implied but lacking explicit security headers and modern analytics. Privacy compliance is limited with no dedicated privacy or cookie policy pages, though terms and conditions are present. The site enforces age verification for alcohol sales, indicating regulatory awareness. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Some suspicious external links embedded in the footer code suggest possible SEO spam or injection, which should be addressed.

S

Studio Marta

studiomarta.cz

10

Studio Marta is a theatrical studio affiliated with the Janáček Academy of Music and Performing Arts (JAMU) in Brno, Czech Republic. It focuses on theatrical education, student performances, and cultural events, serving students, academics, and theatre enthusiasts. The website provides program schedules, student profiles, and ticketing links, positioning itself as a niche educational and cultural institution with a strong local presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable plugins for enhanced user experience and content delivery. The site is mobile-optimized and has good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and a formal security policy. Privacy compliance is adequate with cookie consent mechanisms and a privacy policy in place. Overall, the site is professional, trustworthy, and well-maintained, reflecting the institution's credibility and cultural mission.

M

Monoplay

monoplay.eu

41

Monoplay is a well-established international contemporary dance festival based in Zadar, Croatia, specializing in solo dance performances and educational workshops. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimization. The festival targets dance professionals, students, and the general public interested in contemporary dance. While the site is professionally designed and content-rich, it lacks critical privacy and cookie policies, which affects compliance. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms, with no explicit emails or phone numbers published. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security hardening.

T

Teatar EXIT

teatarexit.hr

41

Teatar EXIT is a well-established Croatian theatre company founded in 2003, specializing in provocative and innovative theatrical performances. The website serves as a digital platform to showcase their program, ticket sales, and festival events, targeting a general audience interested in cultural arts. The company maintains a consistent brand presence with active social media channels and a mobile app offering, indicating a moderate level of digital maturity. Technically, the site is built on WordPress with modern libraries and frameworks such as Bootstrap and jQuery, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS, GDPR-compliant consent mechanisms, and Google reCAPTCHA on forms, although there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating and no detected malicious content.

I

Institute for New Media and E-democracy

edemokracija.hr

49

The website www.edemokracija.hr represents the Institute for New Media and E-democracy (InMed), a Croatian academic and research institution focused on new media, e-democracy, and journalism. The site serves as a platform for disseminating information about conferences, calls for papers, and research activities. It targets academics, researchers, and media professionals interested in these fields. The business model is non-profit and research-oriented, with a niche market position in Croatia and international academic circles. Technically, the website is built on WordPress and utilizes a modern tech stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. The site is hosted by CARNET, a Croatian academic network, which aligns with the institute's educational nature. The website is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's academic and Croatian identity, enhancing trustworthiness. Overall, the website is professional, trustworthy, and serves its academic audience well. To improve security posture and compliance, the institute should consider adding security headers, a vulnerability disclosure policy, and clearer contact information for security incidents. These steps would enhance user trust and align with best practices for academic institutions operating online.

B

Bürgerhaus Garching / Kultur Garching

kultur-garching.de

51

The website www.kultur-garching.de serves as the official cultural portal for the town of Garching, Germany, providing comprehensive information about local cultural events, ticket sales, and related services. It targets local residents and visitors interested in cultural activities, positioning itself as a key local cultural institution with a focus on event promotion and community engagement. The business model is primarily public service oriented, supported by partnerships with established ticketing platforms such as Münchenticket. Technically, the site is built on the EGOTEC CMS platform, leveraging modern JavaScript frameworks like Angular and libraries such as jQuery and Slick Carousel for interactive features. Hosting is provided by SchlundTech, a reputable German hosting provider, ensuring stable and localized infrastructure. Security posture is adequate with HTTPS enforced and email obfuscation implemented, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is supported by a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are absent. Overall, the site demonstrates good content quality, usability, and trustworthiness appropriate for a government cultural service portal.

K

Kassenärztliche Vereinigung Schleswig-Holstein

ekvsh.de

56

The website ekvsh.de serves as a secure member login portal for the Kassenärztliche Vereinigung Schleswig-Holstein, a regional healthcare association in Germany. It provides access to various healthcare-related services and applications, primarily targeting medical practitioners and their staff. The portal integrates with official KBV and KV-SafeNet services and offers remote support via TeamViewer Quicksupport. The site is built using JavaServer Faces with PrimeFaces and jQuery, reflecting a moderately modern technical infrastructure with responsive design for mobile devices. However, it lacks visible privacy and cookie policies, and no security headers are detected in the HTML content, indicating room for improvement in security and privacy compliance. Contact information is limited to a telephone hotline for technical support, with no email or social media contacts provided. Overall, the site appears legitimate and professionally maintained, but enhancements in privacy transparency and security hardening are recommended.

D

Deutscher Ärzteverlag

aerzteverlag.de

38

Deutscher Ärzteverlag GmbH operates as a leading medical specialist publisher in Germany, providing a wide range of medical, dental, and healthcare publications and services. The company targets healthcare professionals and institutions, offering products such as journals, job market platforms, and continuing education programs. Their market position is strong within the German healthcare publishing sector, supported by a consistent brand presence and a professional website. Technically, the website is built on WordPress with modern technologies including jQuery, Bootstrap, and Font Awesome, and integrates Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good SEO and accessibility practices, with a responsive design suitable for mobile users. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not directly visible, and no terms of service or security policies are published. Overall, the website reflects a mature digital presence with room for enhanced transparency in security and incident response policies.

Hrvatski izvoznici is a well-established Croatian association dedicated to supporting exporters through certifications, news, events, and educational resources. The website serves as a comprehensive platform for Croatian exporters, providing timely updates, a database of exporters, and organizing key industry events. The organization maintains strong partnerships with major Croatian financial and trade institutions, enhancing its credibility and market position. Technically, the website uses a custom CMS with legacy JavaScript libraries and integrates Google Analytics and Google Tag Manager for tracking. While the site is functional and professionally designed, some outdated technologies and missing security headers present moderate security risks. Privacy compliance is addressed through a cookie consent banner and a basic cookie policy, but no explicit privacy or security policies are found. Overall, the site is trustworthy and serves its target audience effectively, though improvements in security and technical modernization are recommended.

Kwiat Kobiecości is a Polish non-profit organization dedicated to raising awareness and providing support for women diagnosed with cervical cancer. Founded around 2021, it is driven by the personal experiences of Ida Karpińska and other women who have battled and overcome this disease. The organization focuses on education, support, and advocacy to address the alarming statistics of cervical cancer in Poland. The website serves as a platform for information dissemination and community engagement, leveraging social media channels such as Facebook, Instagram, and YouTube to extend its reach. Technically, the website is built on WordPress using the Divi theme, supplemented by plugins like WooCommerce, Responsive Lightbox, and YOP Poll. It integrates Google Analytics and Facebook Pixel for visitor tracking and marketing insights. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. The absence of visible privacy and cookie policies, as well as security headers, indicates areas for improvement in compliance and security hardening. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks advanced security headers and explicit privacy compliance mechanisms. No WHOIS data is available, likely due to privacy protection, which is justifiable given the organization's non-profit and health-related nature. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Kwiat Kobiecości presents as a legitimate and focused non-profit entity with a clear mission. Enhancements in privacy policy visibility, cookie consent, and security headers would strengthen its compliance posture and user trust. The technical infrastructure is sound but could benefit from ongoing updates and security best practices to maintain resilience.

F

Fundacja Wygrajmy Zdrowie

wygrajmyzdrowie.pl

45

Fundacja Wygrajmy Zdrowie is a Polish non-profit foundation established in 2004, dedicated to oncology patient support, education, and advocacy. It collaborates with prominent European and global patient coalitions and Polish medical societies, positioning itself as a trusted entity in the healthcare non-profit sector. The website provides comprehensive information on patient rights, clinical trials, and health education, targeting patients, families, and healthcare professionals. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and plugins for performance and compliance. Security posture is good with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with a detailed privacy policy and GDPR cookie consent. Overall, the site is professional, trustworthy, and well-maintained, supporting its mission effectively.

F

Fundacja EuropaColon Polska

europacolonpolska.pl

46

Fundacja EuropaColon Polska is a Polish non-profit organization dedicated to supporting patients and raising awareness about digestive system cancers, particularly colorectal cancer. Affiliated with the European organization Digestive Cancers Europe, it provides educational resources, patient support, advocacy, and participates in research initiatives. The foundation targets patients, caregivers, and the general public with a focus on prevention and quality of life improvement. The website reflects a professional and consistent brand image with comprehensive content tailored to its audience. Technically, the website is built on WordPress using modern frameworks like Bootstrap 4 and WPBakery Page Builder. It employs common plugins such as Contact Form 7 and MediaPress, and is hosted by home.pl S.A., a reputable Polish hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and use of security-related plugins, but could be enhanced by implementing additional security headers and a cookie consent mechanism. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of DNSSEC and some security headers represents an area for improvement. Privacy compliance is mostly addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent banner may pose GDPR compliance risks. No incident response or vulnerability disclosure policies were found. Overall, the website is trustworthy and professionally managed, with a strong alignment between domain registration data and business claims. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and establishing a vulnerability disclosure policy to further strengthen security and compliance.

W

Wolters Kluwer ČR, a. s.

rizeniskoly.cz

64

Řízení školy is a Czech educational platform operated by Wolters Kluwer ČR, a. s., providing comprehensive resources, legal guidance, and management tools for school directors and educational staff. The website offers subscription-based access to magazines, articles, calendars, and training events tailored to the Czech education sector. The platform is well-positioned as a trusted mentor for school administration, supported by a professional design and consistent branding. Technically, the site leverages modern web technologies including React and Cream CMS, with integrations for Google Tag Manager and consent management to ensure privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected. The absence of WHOIS domain registration data limits domain legitimacy verification, but the website's content and affiliation with Wolters Kluwer indicate a credible business. Overall, the site provides a safe, professional, and user-friendly experience for its target audience.

O

Ogma data solutions d.o.o.

ogma.hr

43

Ogma data solutions d.o.o. is a Croatian Managed Service Provider specializing in delivering advanced IT infrastructure management, security, cloud services, and user support to organizations of various sizes and sectors. Founded in 2020, the company positions itself as a proactive and innovative IT partner, emphasizing security and operational continuity. Their website reflects a professional digital presence built on WordPress with modern design elements and clear service descriptions. Technically, the site uses WPBakery and the Salient theme, ensuring good mobile responsiveness and moderate performance. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

B

BITWARE j.d.o.o.

bitware.hr

41

BITWARE j.d.o.o. is a Croatian software development company specializing in web and mobile application development, with a strong focus on client relationships and modern technologies. The company has a solid portfolio including projects for cultural institutions, energy companies, and retail businesses, positioning itself as a reputable local technology service provider. Their website is built on WordPress with modern frameworks and includes essential features such as contact forms with reCAPTCHA and cookie consent mechanisms. Security posture is adequate with HTTPS and spam protection, though improvements in security headers and incident response documentation are recommended. Overall, the company demonstrates a professional online presence with clear business information and a trustworthy domain registration history.

A

APATOR POWOGAZ CZECHIA s.r.o.

metra-su.cz

50

APATOR POWOGAZ CZECHIA s.r.o. is a well-established Czech company specializing in manufacturing and distributing measuring and controlling units such as heat cost allocators, water meters, thermostats, and related software solutions. With over 70 years of experience and a broad product portfolio, the company targets businesses and distributors in the energy and thermoregulation sectors. Their website reflects a professional presence with clear product information, contact channels, and customer support services. The company maintains a moderate digital maturity with modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA for form security. Cookie consent mechanisms and GDPR compliance are addressed, though the privacy policy is basic in scope.

K

Specialisté na dmychadla – Kubíček VHS

kubicekvhs.cz

41

The website kubicekvhs.cz appears to be a small-scale, Czech Republic based site likely related to education or a personal business, given the domain age and hosting details. The site uses common web technologies such as Google Analytics, Google Tag Manager, and Font Awesome icons, hosted on websupport.cz servers. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which limits its compliance and trustworthiness. The content quality is basic with minimal SEO and accessibility features, indicating a modest digital maturity level. Security posture is weak due to missing security headers and lack of disclosed security policies or incident response mechanisms. Overall, the site is accessible with no blocking or WAF detected, but improvements in privacy compliance, security best practices, and business transparency are recommended to enhance trust and professionalism.

Dormer Pramet is a well-established manufacturer and supplier of high-performance cutting tools, serving primarily the manufacturing and machining industries. The company operates a professional and modern website that showcases its product offerings such as turning, milling, threading, and holemaking tools. The website targets industrial clients and professionals seeking advanced machining solutions. Technically, the site leverages modern web technologies including Angular framework, Google Tag Manager, and Microsoft Clarity for analytics, hosted likely on corporate infrastructure associated with Sandvik. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit privacy and terms documentation. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and credible online presence.

B

berry2b

berry2b.com

10

berry2b is an educational technology platform focused on providing students with digital tools to manage their school life, including schedules, homework, and grades, while also preparing them for career entry. The platform also offers recruiting tools for companies to find apprentices and trainees, positioning itself as a bridge between education and employment in Germany. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics technologies, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, though improvements are needed in security headers and visible privacy policies. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the main domain. Overall, berry2b presents a credible and functional online presence with room for enhanced transparency and security practices.

S

Sedmá generace

sedmagenerace.cz

54

Sedmá generace is a Czech socio-ecological magazine established in 1991, focusing on social and environmental issues such as nature protection, renewable energy, alternative economy, and human and animal rights. The website serves as a digital platform for publishing articles, news, and podcasts, supporting subscriptions and donations. It maintains a consistent brand presence and targets a general audience interested in ecological and societal topics. Technically, the site is built on WordPress with WooCommerce, employing modern web technologies and integrating Google Analytics and Tag Manager for tracking. The site demonstrates good SEO practices and mobile optimization. Security-wise, the site uses HTTPS and cookie consent mechanisms compliant with GDPR, though it lacks explicit security policies or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

R

Runwayonline

runwayonline.cz

52

Runwayonline.cz is a Czech lifestyle online magazine established in 2020, focusing on fashion, beauty, travel, food, and entertainment content. The website targets a general audience interested in lifestyle topics and maintains a consistent brand presence with active social media channels on Facebook, Instagram, and YouTube. The business model revolves around content publishing and advertising revenue, primarily leveraging the Seznam SSP ad network. Technically, the site is built on WordPress with popular plugins such as Yoast SEO and Elementor, indicating a modern and maintainable infrastructure. Hosting and domain registration are managed by Wedos, a Czech provider, aligning with the website's regional focus. Security posture is adequate with HTTPS enforced and Google Analytics integrated with opt-out capabilities; however, the absence of security headers and explicit privacy and cookie policies indicates room for improvement. No WAF or blocking mechanisms were detected, allowing full content accessibility.

R

Riseup

riseup.net

65

Riseup is a small, donation-funded organization providing secure online communication tools such as email, VPN, mailing lists, and collaboration platforms targeted at activists and groups working on liberatory social change. The organization emphasizes privacy, self-determination, and democratic alternatives in digital communication. Their market position is niche, focusing on privacy-conscious users and social justice communities globally. Technically, the website uses modern frontend technologies like Bootstrap and Font Awesome, is mobile optimized, and provides good accessibility and SEO features. Security-wise, the site enforces HTTPS, has a clientTransferProhibited domain status, and offers extensive security resources, though it lacks DNSSEC and some security headers. Privacy compliance is strong with a comprehensive privacy policy and no detected tracking or analytics. Overall, the website is trustworthy, professional, and aligned with its mission.

D

Demo verze stránek

mravenci.dev

57

Mravenci.cz is a Czech marketing agency specializing in online advertising, website creation, and e-commerce solutions tailored for small businesses and entrepreneurs. The company positions itself as a strategic marketing partner with affordable services and expert oversight, primarily targeting smaller firms such as restaurants, manufacturers, and small e-shops. The website showcases client references and offers free consultations, emphasizing transparency and trustworthiness. Technically, the site is built on WordPress using Elementor, with performance optimizations and modern web technologies. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, user-friendly, and compliant with GDPR, but lacks visible WHOIS data and explicit contact emails or phone numbers, which slightly impacts trust assessment.

P

PAMAX

pamax.cz

50

PAMAX is a traditional Czech family-owned business specializing in the custom manufacture and retail of beds, mattresses, and furniture with a focus on health-certified products. Established in 1997, the company leverages its long-standing expertise to serve customers seeking high-quality, tailor-made sleep and home comfort solutions. The website reflects a professional e-commerce platform built on PrestaShop, integrating modern tracking and marketing tools such as Google Analytics and Facebook SDK. Contact information and social media presence are clearly provided, enhancing customer trust and engagement. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and privacy consent mechanisms. Overall, PAMAX demonstrates a credible and mature digital presence aligned with its business history and market positioning.

S

Statutární město Děčín

mmdecin.cz

51

The website www.mmdecin.cz serves as the official web portal for the statutory city of Děčín in the Czech Republic. It provides municipal information, public service announcements, and downloadable documents for residents and visitors. The site is positioned as a government entity portal with a focus on local governance and community services. The target audience primarily includes city residents and stakeholders interested in municipal affairs. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Font Awesome. It incorporates Google reCAPTCHA for form security and implements a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data is likely due to privacy protection, which is common and justifiable for government domains. Overall, the website presents a professional and trustworthy front for the city government, with room for improvement in privacy policy transparency, security header implementation, and accessibility compliance. The risk level is low, but strategic enhancements in security posture and compliance documentation are recommended.

G

Gebrüder Weiss

gw-world.com

61

Gebrüder Weiss is a globally operating full-service logistics provider specializing in transport, supply chain management, warehousing, and digital logistics solutions. The company holds a strong market position in Europe with a broad international footprint and a comprehensive portfolio of services tailored to both business and private customers. Their website reflects a mature digital presence with multi-language support and extensive service information. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including lazy loading, consent management via Usercentrics, and Google Tag Manager for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms, but lacks visible security headers and a public incident response or vulnerability disclosure policy. The WHOIS data is missing or unavailable, which is unusual for an enterprise-grade domain and warrants further investigation. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is moderate with strong business credibility and technical implementation but some concerns around domain registration transparency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and clarifying domain registration details to improve trust and compliance.

T

Tritón Pardubice, spol. s r. o.

satniskrinky.cz

41

Tritón Pardubice, spol. s r. o. operates the website satniskrinky.cz, specializing in the development and manufacturing of equipment for changing rooms, workshops, and offices, including lockers, boxes, and related furniture. The company has an established market presence since 2009 and targets businesses and organizations requiring such equipment. The website reflects a professional e-commerce platform built on WordPress with WooCommerce and Elementor, providing a comprehensive product catalog and clear navigation. Social media integration and compliance with GDPR through detailed privacy and cookie policies demonstrate digital maturity. Security posture is strong with HTTPS enforcement and standard security headers, though the absence of a dedicated security policy or incident response contact suggests room for improvement. Overall, the site is trustworthy, well-branded, and compliant, supporting the company's business objectives effectively.

P

PK - stavební s.r.o.

pkstavebni.cz

40

PK - stavební s.r.o. is a small Czech construction company specializing in transportation infrastructure such as roads, parking lots, sidewalks, and cycle paths. Founded in 2021, the company leverages over 15 years of prior experience in the sector. Their website presents a professional image with clear descriptions of services, a gallery of completed projects, and references to reputable partner companies, positioning them as a credible player in their niche market. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by WEDOS. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and privacy compliance features. The site uses HTTPS, ensuring secure communications, but does not provide privacy or cookie policies, which is a compliance gap. From a security perspective, the site shows a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the company's founding date, supporting legitimacy. Overall, the website is functional, professional, and trustworthy for its business purpose but should enhance privacy compliance and security best practices to improve its risk profile and user trust.

M

Maps Marker Pro

mapsmarker.com

53

Maps Marker Pro is a specialized WordPress plugin provider focused on delivering advanced mapping solutions with an emphasis on ethical coding and user privacy. The company offers a feature-rich plugin supporting multiple map providers and geocoding services, targeting WordPress site owners and developers seeking flexible and privacy-conscious mapping tools. Their market position is strong within the WordPress ecosystem, supported by positive user testimonials and a clear commitment to data protection. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Slick Slider, and integrates multiple map APIs. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security-wise, HTTPS is enforced, and the company follows best practices by not storing geolocation data and using privacy-focused analytics (Matomo). However, some security headers like Content-Security-Policy are not explicitly detected, and no security.txt or incident response policies are published. The overall security posture is good, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though the absence of a cookie consent mechanism is a minor gap. The missing WHOIS data for the domain is a concern for trust but is mitigated by the professional website and active business presence. Strategically, the company should enhance transparency by publishing security and incident response policies, implement cookie consent mechanisms, and consider adding a security.txt file to improve vulnerability disclosure. Monitoring domain registration status is recommended to ensure ongoing legitimacy.

K

Kreisvolkshochschule Landkreis Harburg

kvhs-harburg.de

37

Kreisvolkshochschule Landkreis Harburg is a regional adult education institution in Germany offering a wide range of courses including languages, health, IT, culture, and basic education. The website is built on TYPO3 CMS and uses modern web technologies such as Bootstrap and jQuery, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, although some security headers could be improved. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Overall, the website reflects a trustworthy and professional educational service provider with a strong regional presence.

S

Sbor dobrovolných hasičů Psáry

hasicipsary.cz

51

Sbor dobrovolných hasičů Psáry is a local volunteer fire brigade organization based in Psáry, Czech Republic, founded in 2013. The organization focuses on firefighting response, youth engagement, and community cultural events. Their website serves as a communication platform for local residents and volunteers, providing updates, event information, and contact details. The site is built on WordPress using Elementor, indicating a moderate level of digital maturity with standard web technologies. Hosting is provided by a Czech hosting provider, ensuring local infrastructure alignment. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The site does not employ tracking or advertising technologies, reflecting a community-focused, non-commercial approach. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve privacy compliance and security hardening.

F

FSR - danske revisorer

fsr.dk

67

FSR - danske revisorer is a professional Danish organization representing auditors and accountants, focusing on revision, accounting, tax, and business economics. The website serves as an informational and organizational platform targeting professionals in Denmark's financial sector. The site demonstrates a moderate level of digital maturity, employing modern web technologies such as Bootstrap, jQuery, and various analytics and marketing tools including Google Tag Manager, HubSpot, and Hotjar. The presence of a comprehensive cookie consent mechanism indicates attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information suggests room for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, but the lack of WHOIS data limits full domain legitimacy verification.

T

Tritón Pardubice, spol. s r. o.

garderobenspinde.de

38

Tritón Pardubice, operating the website garderobenspinde.de, is a medium-sized manufacturing company specializing in equipment for changing rooms, workshops, and offices, including lockers, storage boxes, and specialized furniture. The company targets primarily the German market, offering a comprehensive product range supported by detailed catalogs and certifications. The website is professionally designed using WordPress with WooCommerce and Elementor, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although dedicated security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and mature business with a solid digital presence.

T

Tritón Pardubice, spol. s r. o.

triton.cz

48

Tritón Pardubice, spol. s r. o. is a Czech manufacturing company specializing in data cabinets and locker systems, with a strong regional presence and a tradition dating back to 1996. The company offers a range of products including data cabinets, data centers, and technical support accessories, targeting industrial and business clients. Their website reflects a professional and consistent brand image, supported by comprehensive product information and downloadable resources. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies and optimized for mobile devices. Security posture is solid with HTTPS enforcement and standard security headers, although there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates a mature digital presence with good business credibility and trust indicators.

Č

Česká golfová federace

bavsegolfem.cz

41

Bav se golfem is a Czech Republic-based golf information platform operated in association with the Czech Golf Federation. It serves as a comprehensive resource for golf enthusiasts, providing location-based golf course listings, beginner guides, event information, and blog content. The platform targets a broad audience ranging from beginners to advanced players, promoting golf as a healthy and enjoyable leisure activity. The website is well-positioned nationally as a trusted source for golf-related information in the Czech Republic. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Analytics, Facebook SDK, Google reCAPTCHA, and Mapy.cz API for mapping services. The site is hosted on Czech infrastructure with Active24 as the inferred hosting provider. The website demonstrates good mobile optimization, SEO practices, and user experience, although accessibility features are basic. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent automated abuse. However, explicit security headers are not evident, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for its business purpose. Strategic improvements in privacy documentation and security headers would enhance compliance and security posture. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

Fotbalunas.cz is a well-established Czech media platform focused on amateur football, providing news, photo galleries, match tips, and community discussions. Owned by KPK sport s.r.o. since 2014, it holds a strong position in the Czech amateur football community with a medium-sized operation and consistent branding. The website leverages modern web technologies and integrates multiple advertising and tracking services to monetize its content. While the site is mobile-optimized and offers good user experience, it lacks explicit privacy and cookie consent mechanisms, which impacts GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and publishing security policies. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

T

Tritón Pardubice, spol. s r. o.

triton-racks.de

46

Tritón Pardubice, spol. s r. o. is a medium-sized manufacturing company founded in 1993 in Pardubice, Czech Republic, specializing in data cabinets, data center equipment, and locker room furnishings. The company has a strong regional presence and offers technical assistance and a configurator tool on its website. The website targets German-speaking customers and maintains a professional online presence with comprehensive product information and downloadable resources. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and implements GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent but could be improved with additional security headers and incident response information. Overall, the website is trustworthy, well-structured, and suitable for its industrial B2B audience.

R

Rádio Relax

radio-relax.cz

59

Rádio Relax is a well-established regional radio station in the Czech Republic, founded in 1998. It offers a variety of services including FM radio broadcasting across multiple cities, online streaming, podcasts, and local news coverage. The station targets a general audience within its broadcast regions and operates primarily on advertising revenue. The website is built on WordPress, leveraging common plugins for content management, cookie compliance, and media presentation. The technical infrastructure is modern enough to support a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though advanced security headers and incident response policies are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Apartmány Ralsko is a small hospitality business based in the Czech Republic offering accommodation in a private apartment complex with facilities for weddings, family events, and corporate training. The website presents a professional and well-structured digital presence built on WordPress with modern plugins such as Revolution Slider and WPBakery Page Builder. The technical infrastructure is adequate for a small business, hosted likely with WEDOS, a Czech hosting provider. Security posture is moderate with HTTPS enabled but lacking important security headers and proper analytics configuration. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is safe and trustworthy but would benefit from enhanced security and compliance measures.

D

Dieter Moch GmbH

dietermoch.de

45

Dieter Moch GmbH is a regional German company specializing in heating, sanitary, and electrical services, with over 25 years of experience serving the Pinneberg and Hamburg areas. Their business model focuses on installation, maintenance, and renovation services tailored to residential and commercial customers. The website reflects a professional and consistent brand image, providing clear contact information and job opportunities, indicating active operations. Technically, the site is built on WordPress using a commercial theme and common plugins, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit security policies. Overall, the site is trustworthy and compliant with GDPR requirements.

A

Archinfo

archinfo.sk

58

Archinfo.sk is a professional Slovak architectural portal providing comprehensive information, news, events, and resources for architects, designers, and related professionals in Slovakia. The site offers a variety of content including articles, discussions, competitions, and a database of firms and products, positioning itself as a key information hub in the Slovak architectural sector. Technically, the website uses a custom CMS with a technology stack including jQuery, Google Fonts, Font Awesome, and various JavaScript plugins. It implements HTTPS with good SSL configuration and integrates Google Analytics, Google Tag Manager, and Facebook SDK for analytics and marketing. Security posture is moderate with HTTPS and reCAPTCHA in place, but the use of an outdated jQuery version and lack of security headers are notable vulnerabilities. Privacy compliance is good with cookie consent and a privacy policy present, though no explicit security or incident response policies are published. Overall, the website is professional, content-rich, and trustworthy, with room for technical and security improvements.

K

KLIMAK COMFORT

klimadodomu.sk

65

KLIMAK COMFORT operates a professional e-commerce platform specializing in HVAC and renewable energy products such as air conditioners, heat pumps, photovoltaic systems, and underfloor heating. Established in 1993, it holds a strong market position in Slovakia as a leader in technical building equipment. The website offers comprehensive product listings, consultation services, and after-sales support, targeting residential and commercial customers interested in energy-efficient solutions. Technically, the site uses a modern tech stack including jQuery, Slick Carousel, and Google Tag Manager, running on the Unisite CMS platform. It demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms, reflecting a mature security posture. However, explicit security and incident response policies are not published, and no vulnerability disclosure information is available. Overall, the site is trustworthy, professionally designed, and compliant with GDPR requirements, making it a reliable platform for its target audience.

F

Fachstelle für Statistik Kanton St. Gallen

statistik-bodensee.org

10

The website statistik-bodensee.org serves as an official regional statistics platform for the Lake Constance Region, providing comprehensive data on land use, population, employment, economy, and tourism. It is supported by governmental institutions, notably the Fachstelle für Statistik Kanton St. Gallen, and targets researchers, policymakers, and the public interested in regional statistics. The platform is multilingual and uses a professional CMS (Contao) with modern frontend technologies to deliver a good user experience. Technically, the site employs a range of JavaScript libraries and frameworks including jQuery, Bootstrap, and others, ensuring moderate performance and good mobile optimization. However, some technical improvements are possible, such as enabling DNSSEC and adding security headers to enhance security posture. The site uses HTTPS but lacks advanced security policies and incident response information. From a security perspective, the website shows a moderate security maturity level with HTTPS enabled and domain transfer protection in place. However, the absence of DNSSEC, security headers, and comprehensive privacy and cookie policies indicates room for improvement. The newsletter form collects user emails but has minimal anti-spam protection. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy compliance measures. Strategically, the website is well-positioned as a niche governmental statistics resource with consistent branding and clear contact information. To improve, it should implement stronger privacy and security controls, publish security policies, and consider cookie consent mechanisms to align with GDPR requirements and enhance user trust.

V

Vadozner Huus

vadoznerhuus.li

57

Vadozner Huus is a community-oriented facility operated under the auspices of the Gemeinde Vaduz in Liechtenstein. It provides accessible communal spaces for residents and non-commercial groups to hold events, workshops, and meetings. The website reflects a local government service with a focus on inclusivity, creativity, and social engagement. The business model centers on offering shared spaces with flexible booking options, targeting local citizens and community organizations. Technically, the website is built on the concrete5 CMS platform, utilizing Bootstrap for responsive design and jQuery for interactivity. It integrates Matomo analytics for user tracking, emphasizing privacy. The site is mobile-optimized and presents a professional, consistent brand image aligned with the municipality. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses email obfuscation to protect contact information. However, it lacks visible security headers and does not provide explicit security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk assessment is low given the nature of the site and its community focus. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing privacy compliance to strengthen trust and regulatory adherence.

B

Bezpečné Čáslavsko – Společný informační kanál bezpečnostních složek

bezpecnecaslavsko.cz

41

Bezpečné Čáslavsko is a regional public safety information portal focused on the Čáslavsko microregion in the Czech Republic. It serves as a centralized channel providing updates and information about local police, municipal police, fire services, and other safety organizations. The website targets local residents and stakeholders interested in community safety and crime prevention. The business model is informational and community service-oriented, with a small regional footprint and a focus on public service rather than commercial activities. Technically, the site is built on WordPress with several plugins for maps, forms, and UI enhancements. While the site is mobile-optimized and well-structured, it uses outdated WordPress and jQuery versions, which pose security risks. Security posture is moderate with HTTPS enforced and Wordfence plugin active, but lacks modern security headers and up-to-date software. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and domain age. Strategic improvements in security updates, privacy documentation, and security headers are recommended to enhance trust and compliance.

G

Gemeinde Vaduz

vaduz.li

10

The website www.vaduz.li serves as the official online presence of the municipality of Vaduz, Liechtenstein. It provides comprehensive information about local government, administration, social services, environment, tourism, and community events. The site targets residents, visitors, and local businesses, offering a broad range of public services and community resources. The business model is that of a public sector municipal service provider, with a clear focus on transparency and community engagement. Technically, the site is built on the concrete5 CMS platform and leverages modern JavaScript libraries such as jQuery, Slick Carousel, Moment.js, and CLNDR.js for dynamic content and calendar functionalities. It uses Usercentrics for GDPR-compliant cookie consent management and Matomo for privacy-respecting analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is trustworthy, professional, and well-maintained, with strong alignment between domain registration data and website content. It is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen security posture.