Security Directory

R

R-S Matco LLC

rsmatco.com

47

R-S Matco LLC is a well-established supplier specializing in boiler tubing products and related services, serving industries such as power generation, industrial boilers, pulp & paper, and petrochemical sectors. The company positions itself as a leader with one of the largest inventories in the industry, offering value-added services including project management, rapid shipping, and custom tube preparation. The website reflects a professional B2B business model targeting industrial procurement professionals and plant managers. Technically, the website is built on WordPress with WPBakery Page Builder and integrates Google Tag Manager for analytics. The site demonstrates good design quality, mobile optimization, and clear navigation, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are needed in privacy compliance and security best practices. Contact information is clearly presented, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and establishing a formal security policy and incident response contacts to strengthen trust and compliance.

The website www.eeagrants.ro serves as the official Romanian governmental portal for the EEA and Norwegian Grants 2014-2021, managed by the Ministry of Investments and European Projects. It provides comprehensive information about grant programs, project calls, results, and bilateral relations, targeting Romanian governmental bodies, NGOs, and the general public interested in European funding opportunities. The site is well-branded with consistent use of official logos and government references, establishing high trustworthiness and credibility. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, Google Analytics, Facebook SDK, and Google Charts. It is mobile responsive with good SEO and accessibility basics, though accessibility could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. However, security headers are missing, and privacy and cookie policies are not explicitly present, indicating areas for compliance improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and use of reCAPTCHA for forms, with no visible vulnerabilities or exposed sensitive data. The lack of security headers and formal incident response or vulnerability disclosure information are notable gaps. WHOIS data is privacy protected as per Romanian ROTLD policy, which is standard and justified for this governmental domain. Overall, the site is a professional, trustworthy government resource with solid technical foundations but could enhance privacy compliance and security posture by adding explicit policies and security headers. The risk level is low, but improvements in transparency and security best practices are recommended.

Jugendberufsagentur Schleswig-Flensburg is a regional government-supported agency focused on assisting youth aged 14 to 25 in the Schleswig-Flensburg district of Germany with career orientation and entry into the workforce. The agency collaborates with multiple public entities including the local employment agency, job center, youth welfare services, and vocational training centers. The website is professionally designed using Joomla CMS with Gantry5 and UIkit frameworks, providing clear navigation and relevant content in German. Technical infrastructure is modern and secure with HTTPS and obfuscated emails to reduce spam. However, some security headers are missing and no explicit incident response or vulnerability disclosure mechanisms are present. Overall, the site demonstrates good privacy compliance with a cookie consent banner and a privacy policy page. The business credibility is high due to clear contact information and official partner links. No advertising or tracking beyond cookie consent is detected, and the content is safe for general audiences.

S

Stadt Garching

garching.de

53

The website www.garching.de is the official municipal portal for the city of Garching, Germany. It provides comprehensive information and services related to city administration, politics, family and education, social services, housing, economy, mobility, nature and climate protection, culture, research, and religious sites. The site targets residents, visitors, and local businesses, offering key services such as online appointment booking and detailed local government information. The business model is public service with a focus on community engagement and transparency. Technically, the website uses a modern tech stack including jQuery, Bootstrap 5, Font Awesome, and integrates accessibility tools like ReadSpeaker and Google Translate. It is built on the EGOTEC CMS platform and hosted with DomainControl. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. From a security perspective, the site uses HTTPS and employs email obfuscation to reduce spam. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident. There is no visible security policy or incident response contact, and no vulnerability disclosure mechanism is found. Privacy compliance is good with a comprehensive GDPR-compliant privacy policy, though cookie consent mechanisms are minimal. Overall, the website is trustworthy, professional, and safe for general audiences. It effectively serves its role as a municipal information and service portal. Strategic improvements include enhancing security headers, implementing cookie consent, and publishing incident response contacts to strengthen security posture and compliance.

Hansestadt Wismar operates an official municipal website serving citizens, tourists, and local businesses with comprehensive information and services including administrative tasks, event calendars, and tourism promotion. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site uses a legacy but functional tech stack centered around jQuery and IKISS CMS, with moderate performance and good mobile optimization. Security posture is adequate with cookie consent and HTTPS implied, but lacks explicit security headers and vulnerability disclosure mechanisms. WHOIS data aligns with the website's claims, reinforcing legitimacy. Overall, the site is a trustworthy government portal with room for technical and security enhancements.

K

Kerempuh – Satiričko kazalište Kerempuh

kazalistekerempuh.hr

9

Kerempuh is a well-established satirical theatre based in Croatia, operating since 2002. The website serves as a digital presence for the theatre, providing information about performances and cultural events. The site targets a general audience interested in theatre and cultural arts, positioning itself as a reputable cultural institution in the Croatian market. The business model revolves around live theatrical performances and related cultural activities. Technically, the website is built on WordPress with modern plugins and themes, including WPBakery Page Builder and Font Awesome, and uses Google Fonts for typography. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks explicit privacy and terms of service pages, advanced security headers, and incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy but could enhance privacy compliance and security posture to better protect users and build trust.

A

Alan Hržica

alanhrzica.com

10

Alan Hržica is a recognized Croatian Christian musician with a professional online presence promoting his music albums, concerts, and videos. The website serves as a personal branding platform targeting Croatian-speaking audiences interested in spiritual and religious music. The site is built on WordPress using the Salient theme and WPBakery Page Builder, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy compliance is addressed with a cookie consent banner and a basic cookie policy page, though no privacy policy or terms of service are explicitly found. Contact information is limited to social media links without direct emails or phone numbers. Overall, the website is professional and trustworthy but could improve security and compliance documentation.

Portal narodnih knjižnica is a Croatian national library portal established in 2016, providing comprehensive administrative data, digital and regional collections, and library-related news and projects. It serves a broad audience including the general public, researchers, and minority communities in Croatia. The website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. The portal is positioned as an authoritative resource in the Croatian library sector with consistent branding and good content quality. Technically, the site is moderately performant and mobile-optimized but lacks explicit security headers and detailed security policies. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response documentation. Overall, the site is trustworthy, safe, and professionally maintained, with a strong alignment between WHOIS registration data and website content.

S

Stena Projects

stena-projects.eu

45

Stena Projects is a Croatian-based company specializing in the design and manufacture of handcrafted interior and exterior decorative elements, including stone and wood wall claddings, 3D decorations, decorative columns, and custom projects. The company targets customers seeking elegant and modern design solutions that blend art and nature. Their market position is that of a niche provider with a focus on quality and craftsmanship. Technically, the website is built on WordPress using modern plugins such as WPBakery and Slider Revolution, with multilingual support via WPML. The site is hosted by a Croatian hosting provider, Plus Hosting Grupa d.o.o., and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by adding security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in privacy and security documentation.

S

Scenoteka Zagreb

scenoteka.hr

48

Scenoteka Zagreb is a cultural and theatrical venue located in the heart of Zagreb, Croatia, offering a platform for independent theater productions, stand-up comedy, and other performing arts. The organization focuses on providing accessible cultural experiences and operates through event organization, ticket sales, and venue rental. The website reflects a well-established regional cultural institution with a clear target audience of theater enthusiasts and local community members. Technically, the website is built on WordPress using modern themes and plugins, ensuring a responsive and visually appealing user experience. The presence of structured data and social media integration enhances its digital maturity. Security-wise, the site enforces HTTPS and includes GDPR-compliant cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's cultural mission effectively.

P

Pozitivan ritam

pozitivanritam.hr

44

Pozitivan ritam is a Croatian independent media and event organization specializing in music festivals, club events, and independent music production and distribution. The website showcases a variety of music-related content including festival announcements, club event schedules, and record label news, targeting music enthusiasts primarily in Croatia and the surrounding region. The business operates multiple music venues and organizes notable festivals such as Sea Sound Festival and Martinska Punk, positioning itself as a key player in the regional independent music scene. Technically, the website is built on Drupal CMS with a modern tech stack including jQuery, Font Awesome, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate, with standard use of third-party scripts and advertising networks. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, but could improve by adding additional security headers and tightening CSP rules. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a GDPR-compliant cookie consent banner and a privacy policy page in Croatian. However, no terms of service or explicit contact information for security or incident response was found. Overall, the website presents a professional and trustworthy front for a small independent music business. The lack of WHOIS data due to privacy protection is typical and justified for this business type. Recommendations include enhancing security headers, publishing terms of service, and providing clearer contact information to improve trust and compliance.

G

Getim d.o.o.

getim.hr

10

Getim d.o.o. is a Croatian IT company established in 1998, providing comprehensive IT solutions including sales and servicing of computer equipment, IT system maintenance, remote support, web design, hosting, and marketing services. The company positions itself as a key IT partner for business clients in Croatia, offering tailored solutions to meet diverse client needs. The website reflects a professional and consistent brand image with clear contact information and a modern technical infrastructure based on Joomla CMS and Helix Ultimate framework. Security posture is solid with HTTPS enabled and no exposed sensitive data, though there is room for improvement in privacy compliance and security headers. Overall, the website is trustworthy and well-maintained, supporting the company's business credibility.

T

Turistička zajednica grada Sv. I. Zeline

visitzelina.hr

41

The website represents the official tourism board of Sveti Ivan Zelina, Croatia, providing comprehensive information about local culture, events, gastronomy, sports, and accommodation. It serves as a key resource for tourists and local visitors, promoting sustainable tourism and regional attractions. The site is well-branded and consistent with its government and non-profit identity. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and offers interactive features like maps and video content. Security-wise, the site uses HTTPS with good SSL configuration but lacks some security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's purpose and location, indicating legitimacy and trustworthiness.

H

Hireology

hireology.com

11

Hireology is a well-established technology company specializing in applicant tracking system (ATS) software solutions tailored for businesses to streamline their hiring processes. Founded in 2008, the company has positioned itself as a significant player in the recruitment technology sector, offering a B2B SaaS model targeting businesses seeking efficient recruitment management tools. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at its target audience. Technically, the website is built on WordPress with Elementor, hosted on Amazon AWS infrastructure, and employs modern web technologies including Google Fonts and Font Awesome. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS with a good SSL configuration and implements several security headers, indicating a solid security posture. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response information. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit vulnerability disclosure mechanisms and incident response contacts. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR compliance indicators. Business credibility is high, supported by clear contact information, professional content, and trust signals like SSL and legal documentation. Overall, Hireology's website is trustworthy, secure, and professionally maintained, with minor recommendations to enhance DNS security and publish security policies. The risk level is low, making it a reliable platform for its users and clients.

P

Provident Photography

providentphotos.com

45

Provident Photography is a small, locally focused photography business based in Hastings, Nebraska, specializing in business headshots, senior portraits, family and children photography, sports, and school photos. The website presents a professional image with clear service offerings and customer testimonials, positioning the company as a trusted local provider. The technical infrastructure is built on WordPress with modern plugins and libraries such as jQuery, Font Awesome, and Owl Carousel, supporting a good user experience and SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

B

Bike Kitchen Brno

bikekitchenbrno.cz

40

Bike Kitchen Brno is a small community-driven non-profit organization based in the Czech Republic focused on providing an open bicycle repair workshop and fostering social engagement around cycling culture. The website serves as a hub for community events, educational programs, and environmental initiatives. The organization benefits from EU grant support, indicating some level of external validation and funding. Technically, the website is built on WordPress with common plugins and uses HTTPS with a good SSL configuration, though some libraries like jQuery are outdated, posing potential security risks. The site lacks formal privacy and cookie policies, which is a compliance gap especially under GDPR. Security posture is moderate with some best practices implemented but missing key headers and vulnerability disclosures. Overall, the site is functional, well-branded, and serves its community purpose effectively but would benefit from improved compliance and security hardening.

E

Effet Webservice

effet.info

48

Effet Webservice is a small Austrian technology company specializing in server administration, TYPO3 CMS, WordPress, ownCloud/Nextcloud hosting, SEO, and web marketing services. The company targets businesses and organizations seeking professional web hosting and digital marketing solutions. Their market position is that of a niche specialist with a focus on TYPO3 CMS and managed hosting services. The website is professionally designed, consistent in branding, and provides clear contact information including a physical address and phone number. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery frameworks, delivering a moderate performance and good mobile optimization. The site uses HTTPS and includes proper meta tags for SEO but lacks advanced security headers and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of privacy policy and cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of cookies but lacks security headers and formal security policies. The WHOIS data is privacy protected, which is justified for this business type, and no suspicious domain registration patterns were found. Overall, the security posture is moderate with room for improvement in policy transparency and header implementation. The overall risk is low given the professional nature of the site and absence of vulnerabilities, but the company should enhance privacy compliance and security best practices to strengthen trust and regulatory adherence.

E

EDF Renewables North America

edf-renewables.com

53

EDF Renewables North America operates as a market-leading independent power producer and service provider specializing in renewable energy solutions including wind (onshore and offshore), solar photovoltaic, energy storage, and electric vehicle charging across North America. The company positions itself as a sustainable energy partner, targeting businesses and communities seeking clean energy solutions. Their website reflects a mature digital presence with comprehensive content, multi-language support, and active engagement through social media channels. The business is a subsidiary of the EDF Group, a major global energy player, reinforcing its market credibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Yoast SEO, ensuring good SEO and user experience. The site is mobile-optimized and accessible, with a moderate performance profile. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, explicit security headers and incident response information are absent, representing areas for improvement. The WHOIS data for the domain is unavailable, indicating possible privacy protection or proxy registration. While this reduces transparency, the website's branding, content quality, and external affiliations support its legitimacy. No direct company contact emails or phone numbers are published, with contact facilitated via web forms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website demonstrates a professional and trustworthy digital presence aligned with its business objectives in the renewable energy sector. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving direct contact information to strengthen trust and compliance.

S

StaWEBnice - tvorba webových stránek a eshopů

stawebnice.com

60

StaWEBnice is a small Czech technology service provider specializing in web development, e-commerce solutions, SEO, copywriting, and digital marketing. The company targets small business owners, entrepreneurs, and bloggers primarily in the Czech Republic, offering affordable and professional web and e-shop creation services. The website is well-structured, professionally designed, and provides comprehensive information about services, team, and client references. Technically, the site is built on Joomla CMS with modern frameworks and libraries, including Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

P

Provident Promotions

providentpro.com

53

Provident Promotions is a small, regionally focused creative agency based in Hastings, Nebraska, specializing in digital media marketing services including website design, logo creation, photography, video production, and SEO. The company targets local businesses and non-profits seeking professional marketing tools to build and grow their brands. Their website demonstrates a good level of technical maturity, leveraging WordPress CMS with modern plugins and libraries to deliver a responsive and SEO-optimized user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration transparency, which could impact trustworthiness despite the professional presentation and client testimonials. Overall, the website is well-designed and functional but would benefit from enhanced privacy compliance and clearer domain legitimacy.

R

Rugby Club Vannes

rugbyclubvannes.bzh

45

Rugby Club Vannes operates a professional and well-structured website serving as the primary digital presence for the rugby club. The site provides comprehensive information about the club's teams, news, match schedules, ticketing, and merchandise. The club targets rugby fans and the local community in France, positioning itself as a regional sports entity with a solid online footprint. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. The site employs modern web technologies including jQuery and Font Awesome, and implements cookie consent via tarteaucitron.io, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with cookie consent present but no clear privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and functional, with room for improvement in privacy and security transparency.

J

Jan VOSÁTKA

vosatkajan.cz

53

The website vosatkajan.cz is a personal website belonging to Jan Vosátka, primarily focused on personal genealogy and related content. It serves as a personal branding and informational site without evident commercial activities. The site is built on Joomla CMS with the Gantry 5 framework and uses common web technologies such as jQuery and Font Awesome. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, but lacks advanced security headers and formal privacy or terms of service documentation. Contact information is limited but includes a valid email and WhatsApp number. Overall, the site is trustworthy and safe for general audiences.

C

Cyberworx Technologies Pvt Ltd

cyberworx.in

46

Cyberworx Technologies Pvt Ltd is a well-established digital agency based in Delhi NCR, India, specializing in website design, development, ecommerce solutions, mobile app development, SEO, and digital brand development. The company positions itself as a top-tier service provider with a strong portfolio and client base, supported by a high aggregate rating and extensive service offerings. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Microsoft Clarity, and Materialize CSS, ensuring a responsive and user-friendly experience. However, there is room for improvement in security posture, particularly in implementing security headers and formal privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and social media presence.

L

Swiss Gaming and Esports Hub: Festivals, Collaboration, and Competitive Insights

ludicious.ch

9

The website ludicious.ch serves as a niche media platform dedicated to the Swiss gaming and esports community. It provides news, festival coverage, and insights into the growth of esports and international collaboration within Switzerland's gaming industry. The target audience includes game developers, esports enthusiasts, and industry professionals interested in Swiss gaming culture. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses jQuery and Font Awesome for UI elements. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security-wise, the site uses HTTPS but lacks security headers and formal security policies, which could be improved. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact is available only through a contact form, with no direct emails or phone numbers published. Overall, the site is professional and relevant but would benefit from enhanced security and privacy compliance measures.

A

AutoTužil

autotuzil.cz

54

AutoTužil is a small automotive service provider based in the Czech Republic offering a wide range of vehicle repair and maintenance services including nonstop auto repair, air conditioning servicing, diagnostics, and sale of auto accessories. The website is professionally designed with clear navigation and good mobile optimization, targeting vehicle owners in the local region. The business appears well-established with a founding year of 2004 indicated in the footer, although domain registration details are unavailable, which introduces some uncertainty about domain legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacking security headers and a privacy policy, which are recommended for compliance and trust. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved transparency and security practices.

Patio.coop is a global network of worker-owned tech cooperatives specializing in software development, communication, and design services. The cooperative model emphasizes democratic ownership and international collaboration, with over 80 cooperatives and 1500 cooperators across 24+ countries. The website presents a professional and consistent brand image targeting organizations and individuals interested in cooperative technology solutions. Technically, the site leverages modern JavaScript libraries such as Three.js and D3 for interactive globe visualizations, and uses standard web technologies including CSS3 and HTML5. Hosting and DNS are managed via NS1 DNS servers, indicating a reliable infrastructure. Security posture is moderate; domain registration includes transfer prohibitions, but lacks DNSSEC and security headers. No privacy or cookie policies are present, and contact is limited to a web form without direct emails or phone numbers. Social media presence is strong and aligned with the cooperative identity. Overall, the site is safe, professional, and functional but could improve in privacy compliance and security best practices.

V

Virtuplex

virtuplex.space

63

Virtuplex operates the world's largest commercial virtual reality labs with locations in Dubai, Bratislava, and Prague. The company specializes in providing VR solutions that allow clients to experience and interact with buildings, products, and spaces before they are physically built. Their market position is strong, supported by over 100 projects and a diverse client base across industries such as real estate, urban planning, retail, manufacturing, and defense. The website reflects a mature digital presence with modern technologies and comprehensive service descriptions.

The website www.vojujezd-brdy.cz serves as an informational portal focused on tourism, hiking, cycling, and local history related to the former military area Brdy in the Czech Republic. It targets tourists and outdoor enthusiasts seeking less crowded natural areas. The site provides detailed descriptions of trails, accommodation options, and local services, monetized primarily through Google Adsense advertising. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and integrates Google Analytics and a consent management platform to comply with privacy regulations. The website is accessible without WAF or security challenges, but lacks explicit privacy and terms of service pages, and does not provide direct contact information, which limits user trust and compliance transparency. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is functional and relevant for its niche audience but could improve in privacy transparency, security best practices, and contact availability.

E

European Business Enterprise, a.s.

statnisprava.cz

58

The website statnisprava.cz is a Czech government-related public service portal operated by European Business Enterprise, a.s. It provides comprehensive information on government offices, job vacancies, tenders, insolvencies, and related public services. The site targets a broad audience including citizens seeking official information and services. Technically, the site uses IBM Domino backend technology with a frontend built on HTML5, Bootstrap, jQuery, and Font Awesome, delivering a responsive and navigable user experience. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but the business information and content quality support legitimacy. Overall, the site is professional, content-rich, and serves an essential government function with room for security and privacy improvements.

P

PopUp Domination

pdmntn.com

52

PopUp Domination is a technology company specializing in popup marketing software designed to help businesses capture leads and increase conversions. The website analyzed is a login page for their SaaS platform, indicating an established business model focused on subscription services for digital marketers and website owners. The company appears to have been founded around 2017, consistent with the domain registration date. The website uses modern web technologies including AngularJS, Bootstrap, and integrates monitoring and customer support tools such as New Relic and Intercom, reflecting a moderate level of digital maturity.

A

Asociace výchovných poradců, z.s.

asociacevp.cz

41

Asociace výchovných poradců, z.s. is a Czech non-profit association established in 2006 that supports educational and career counseling professionals across various educational institutions. The association provides networking, training, advocacy, and informational resources to its members and the public. It holds recognized status within the Czech Republic, evidenced by national awards and active event organization. The website is built on WordPress with standard plugins and technologies, presenting content primarily in Czech and targeting educational professionals and clients seeking counseling services. The site is moderately optimized technically, with good mobile responsiveness and basic accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which reduces transparency and trustworthiness, though the website content and presentation support legitimacy. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

H

HLR-UTBILDNING

hlrutbildning.net

41

HLR-UTBILDNING is a Swedish company specializing in heart and lung resuscitation (HLR) and first aid training services. They offer various training packages including heart starter leasing and maintenance, targeting workplaces and organizations to improve emergency preparedness and safety. The company claims to be nationally active with a foundation year of 2005 and holds certification from Hjärt-Lungfonden, enhancing their credibility in the healthcare training sector. The website is professionally designed using WordPress and Elementor, with good SEO practices but lacks visible privacy and cookie policies. Contact information is clearly provided, supporting business credibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy.

M

Modifinder AB

modifinder.se

52

Modifinder AB operates as a specialized SEO agency based in Malmö, Sweden, focusing on search engine optimization services for local businesses. The website demonstrates a professional approach with a clear business focus on SEO consulting and strategy. The technical infrastructure is built on WordPress with Elementor and related plugins, indicating a modern and flexible digital presence. However, the absence of WHOIS data for the domain www.modifinder.se raises concerns about domain registration legitimacy and transparency. Security posture is limited by the lack of visible security headers and privacy policies, which are critical for compliance and trust. Overall, the website is functional and well-designed but requires improvements in security and compliance documentation to enhance trustworthiness and regulatory adherence.

I

Internationale Bodensee-Konferenz

bodenseekonferenz.org

62

The Internationale Bodensee-Konferenz (IBK) is a regional political cooperation organization focused on cross-border collaboration in the Bodensee region. The website serves as an information and communication platform for stakeholders, partners, and the public, providing news, events, project information, and resources related to regional cooperation. The organization operates as a non-profit entity with strong ties to governmental bodies and European Union programs, positioning itself as a key facilitator of regional development and cooperation. Technically, the website employs a mix of legacy and modern web technologies including AngularJS, jQuery, and Matomo analytics, hosted on a secure HTTPS platform. The site demonstrates good mobile optimization, accessibility features, and privacy-conscious tracking practices. However, some JavaScript libraries are outdated, which could pose security risks if not regularly updated. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. While no explicit security policies or incident response contacts are published, the site avoids exposing sensitive data and disables cookies in analytics tracking to enhance privacy. The absence of WHOIS data limits domain registration transparency but does not detract from the apparent legitimacy of the organization based on content and external references. Overall, the IBK website presents a professional, trustworthy, and well-maintained digital presence suitable for its governmental and non-profit audience. Strategic improvements in security headers, updated libraries, and enhanced transparency around security policies would further strengthen its posture.

C

Codalex AB

n.nu

56

N.nu is a Swedish-based technology company operating a website builder platform that enables users to create professional websites quickly and easily. Established in 2009 and operated by Codalex AB, the platform boasts over 20,000 active sites and offers features such as SEO-friendly templates, mobile responsiveness, unlimited hosting space, and integrated tools like newsletters and blogs. The business model is subscription-based with a free trial period, targeting individuals and small businesses seeking simple yet powerful website creation tools. Technically, the site uses a combination of HTML5, Bootstrap, jQuery, and tracking services like Google Analytics and Redistats, hosted with Cloudflare DNS and registered via Loopia AB. The website is well designed, mobile optimized, and SEO friendly, providing a good user experience.

K

KORTS Immobilien GmbH

korts-immobilien.de

50

KORTS Immobilien GmbH is a Hamburg-based, owner-managed real estate consultancy specializing in commercial office properties with over 19 years of market experience. The company offers comprehensive brokerage and advisory services tailored to tenants and property owners in the Hamburg metropolitan area. Their business model focuses on personalized service, leveraging a broad network of market participants to provide exclusive access to properties and expert negotiation support. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Timme Hosting, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

M

Muthesius Kunsthochschule

muthesius-kunsthochschule.de

54

Muthesius Kunsthochschule is a medium-sized, specialized educational institution in Germany focused on art and design education. It offers a range of Bachelor and Master programs in fields such as Kommunikationsdesign, Industriedesign, Freie Kunst, and Raumstrategien. The institution maintains a strong market position as the only art university in Schleswig-Holstein with international reach and interdisciplinary offerings. The website is built on WordPress with a modern tech stack including jQuery, Events Manager, and accessibility plugins, hosted by planet-ocean-hosting. It features comprehensive content, good mobile optimization, and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The site demonstrates good privacy compliance with GDPR-aligned policies and active user consent management. Overall, the website is professional, trustworthy, and well-maintained, supporting the institution's educational mission effectively.

Incom GmbH operates a specialized communication and collaboration platform tailored for higher education institutions, particularly targeting design and art universities in Germany. The platform facilitates modern teaching concepts, enabling seamless interaction between educators and students, and extends the scope of academic courses both temporally and spatially. The business model is based on a cost-effective SaaS offering with included support and consulting services, positioning Incom as a niche player in the educational technology sector. The company has been established since 2005, reflecting a mature presence in its market segment. Technically, the website employs a modern yet straightforward technology stack including Bootstrap, jQuery, Font Awesome, and Matomo for privacy-conscious analytics. The platform is custom-built without reliance on common CMS solutions, hosted under a reputable registrar with stable DNS configurations. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, suitable for the target audience. From a security perspective, the website enforces HTTPS with AES 256-bit encryption, avoids third-party advertising and tracking services like Google Analytics, and respects user privacy by not profiling visitors. However, it lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS, which are recommended to strengthen its security posture. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Strategic recommendations include implementing DNSSEC, adding security headers, publishing security policies, and introducing cookie consent mechanisms to improve GDPR compliance and security maturity.

C

Creatomatic

creatomatic.co.uk

68

Creatomatic is a Scotland-based digital agency specializing in web design, branding, and digital transformation services, with a focus on WordPress development and digital marketing. The company positions itself as a professional and trusted partner for businesses seeking to build and enhance their digital presence. The website reflects a small-sized agency with a solid reputation, supported by positive user ratings and active social media engagement. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The website is served securely over HTTPS with CDN support, ensuring good performance and availability. Security posture is generally good with HTTPS and privacy consent mechanisms implemented, though explicit security headers and detailed privacy or cookie policies are not detected in the provided content. The absence of WHOIS data for the subdomain queried is expected and does not detract significantly from the domain's legitimacy. Overall, Creatomatic demonstrates a professional online presence with moderate technical sophistication and a good security baseline, suitable for its business model and market segment.

M

Muthesius Kunsthochschule

muthesius.de

54

Muthesius Kunsthochschule is a specialized art university in Schleswig-Holstein, Germany, offering a range of Bachelor and Master programs in art, design, and spatial strategies. The institution emphasizes artistic freedom, interdisciplinary research, and international collaboration, serving a diverse student body including international students. The website reflects a mature digital presence built on WordPress, integrating accessibility and privacy compliance features such as cookie consent and GDPR-aligned policies. Social media and event information enhance community engagement. Security posture is solid with HTTPS and cookie management, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and well-structured, supporting the institution's educational mission effectively.

R

Rettungsdienst-Akademie Bonn

rdakademiebonn.de

46

Rettungsdienst-Akademie Bonn is a specialized educational institution based in Germany offering state-recognized training programs for emergency medical personnel including rescue helpers, paramedics, emergency paramedics, and emergency physicians. The website serves as a comprehensive platform for course information, scheduling, and contact, targeting individuals seeking professional certification in emergency medical services. The business operates in the healthcare and education sectors with a small organizational size and a founding year of 2021, aligning with the domain registration date. Technically, the website is built on WordPress using Elementor and several reputable plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. The site demonstrates good mobile optimization, clear navigation, and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, the website shows a mature digital presence with compliance to GDPR through privacy and cookie policies, social media integration, and structured data for SEO. No critical vulnerabilities or suspicious content were detected. The WHOIS data supports the legitimacy of the domain with consistent registration information and appropriate domain age. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

E-Werk Kulturzentrum GmbH operates a prominent cultural center in Erlangen, Germany, with over 35 years of history. The organization hosts a wide range of cultural events, concerts, and community programs, positioning itself as one of the largest cultural venues in Germany. The website reflects this focus with detailed event programming and cultural content aimed at regional and national audiences interested in arts and culture. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party services such as Cookiebot for consent management and Google/Facebook for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with comprehensive cookie categorization and GDPR-aligned consent. Overall, the site is trustworthy and professionally maintained, with no critical security or compliance issues detected.

G

Glashaus e.V.

glashaus.org

54

Glashaus e.V. is a small non-profit cultural organization based in Bayreuth, Germany, focused on hosting a variety of cultural events including concerts, art programs, and community gatherings primarily on the University of Bayreuth campus. The organization engages local students and the wider community, offering a café service and volunteer opportunities, positioning itself as a key cultural hub in the region. The website reflects this mission with event listings, membership information, and active social media channels. Technically, the site is built on an older WordPress platform with common JavaScript libraries like jQuery, bxSlider, and Slicknav, providing a moderate level of performance and mobile optimization. However, the use of outdated software versions and lack of modern security headers indicate technical debt and potential security risks. Security posture is basic with HTTPS enabled but missing advanced headers and no visible incident response or security policy documentation. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite Google Analytics usage. WHOIS data is unavailable, limiting domain trust verification, but the website content and social presence support legitimacy. Overall, the site is functional and trustworthy for its community audience but would benefit from technical and security modernization.

R

Rescuetrade OHG

rescuetrade.com

54

Rescue Trade OHG is a German-based manufacturer and global distributor specializing in disposable medical bedding products such as blankets, pillows, sheets, and transport sheets. Established in 2004, the company positions itself as a pioneer in the disposable bedding market with a strong focus on hygiene and patient safety. Their products serve a broad audience including hospitals, emergency medical services, ambulances, fire departments, and other public institutions. The company emphasizes compliance with international medical device regulations, holding ISO 13485 certification and FDA registration, which underscores their commitment to quality and regulatory adherence. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI plugins to deliver a responsive and user-friendly experience. The site is well-structured with clear navigation and professional design, although some accessibility features could be enhanced. Performance is moderate with no major issues detected. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The contact form redirects users to a contact page rather than processing data directly, reducing immediate risk. Nevertheless, the lack of published incident response policies, vulnerability disclosure mechanisms, and security.txt files suggests limited transparency in security operations. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and consistency with the business claims. This discrepancy warrants further investigation to confirm domain ownership and trustworthiness. Overall, Rescue Trade OHG presents a professional and credible online presence with strong business and regulatory credentials. The main risks lie in the missing WHOIS data and some gaps in security best practices. Addressing these issues would enhance trust and compliance, supporting the company’s market position as a reliable medical device manufacturer.

R

Rescuetrade OHG

rescuetrade.de

53

Rescue Trade OHG is a German-based manufacturer and distributor specializing in medical disposable products, particularly single-use bedding sets, transfer sheets, and transport cloths for patient care. Established in 2004, the company serves a broad clientele including emergency services, hospitals, care facilities, and governmental agencies worldwide. Their products are certified under ISO 13485 and comply with FDA and MDR regulations, positioning them as a trusted provider in the healthcare sector. The website reflects a professional and consistent brand image with clear business information and downloadable resources for customers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience. While performance is moderate, the site is well-structured with good SEO practices and mobile optimization. However, no CMS or hosting provider details are explicitly detected. Security-wise, HTTPS is implied, and forms use validation scripts, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. Overall, the security posture is adequate but could benefit from enhanced HTTP security headers and explicit privacy controls. The lack of an incident response contact or vulnerability disclosure reduces transparency. The domain WHOIS data is minimal but consistent with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

U

Umlaut Recordings

umlaut.de

40

Umlaut Recordings is a small, niche music label and artist management entity focused on the Didgeridoo player Tom Fronza and associated musicians. The company offers workshops, live performances, studio music production, and music sales through an online shop. The website is professionally designed with clear navigation and good content quality, targeting music enthusiasts and event organizers. Technically, the site is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is solid with HTTPS, spam protection, and reCAPTCHA, though lacking some advanced security headers and explicit security policies. Privacy compliance is basic with privacy and terms pages present but no cookie consent mechanism. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy small business in the music sector.

K

Samlet guide til kultur, musik, teater og udstillinger - Find det hele på KultuNaut

kultunaut.dk

46

KultuNaut.dk is a Danish cultural event platform providing a comprehensive calendar for music, theater, exhibitions, and other cultural activities primarily in Denmark. The website offers multilingual support and allows users to search events by geography, genre, and date. It also supports event submissions and user ratings, positioning itself as a regional cultural aggregator. Technically, the site uses modern JavaScript libraries such as Leaflet for mapping and Pickaday for date selection, with a moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism but lacks visible security headers and explicit privacy or terms of service pages. The absence of WHOIS data limits domain trust assessment, though the site content and structure suggest legitimacy. Overall, KultuNaut.dk serves its target audience effectively but would benefit from enhanced transparency and security practices.

G

Gemeindewerke Ismaning GmbH

gwi-info.de

10

Gemeindewerke Ismaning GmbH is a municipal utility provider based in Germany, offering essential services including electricity, gas, water supply, wastewater management, and local swimming pool operations. The company serves both residential and commercial customers in the Ismaning region, positioning itself as a reliable regional energy supplier with a focus on customer service and sustainability. Their website reflects a professional and consistent brand image, providing comprehensive information and online services to their target audience. Technically, the website is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, ensuring good mobile optimization and accessibility. The site employs a cookie consent mechanism compliant with GDPR, and accessibility features are prominently implemented, enhancing usability for all users. Hosting appears to be managed by a reputable provider, and performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. However, it lacks explicit published security policies and incident response contacts, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the business claims, indicating a trustworthy domain registration. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic improvements in security transparency and technical optimizations could further strengthen their posture and user trust.

G

Gemeindewerke Ismaning GmbH

gemeindewerke-ismaning.de

54

Gemeindewerke Ismaning GmbH is a municipal utility provider based in Ismaning, Germany, offering essential services such as electricity, gas, water supply, wastewater management, and local swimming pool operations. The company targets both residential and commercial customers within its regional area, providing tailored energy tariffs and customer support. The website reflects a solid regional market position with a focus on community service and sustainability, including partnerships with local energy providers.

T

TAURIS

tauris.sk

50

TAURIS is a Slovak manufacturer specializing in meat and meat products, offering a broad range of items such as hams, sausages, salamis, and specialty products. The company targets Slovak consumers and business partners within the food manufacturing and retail sectors. The website reflects a medium-sized enterprise with a consistent brand presence and trust indicators including certifications and testimonials. Technically, the site employs a modern tech stack with Bootstrap, jQuery, and integrates multiple analytics and tracking tools controlled by a cookie consent mechanism. Security posture is solid with HTTPS and no exposed sensitive data, though security headers are absent and incident response information is not provided. Overall, the website is professional, user-friendly, and compliant with GDPR requirements for privacy and cookie policies.