Security Directory

E

EcoLED Solutions

ecoledsolutions.sk

40

EcoLED Solutions is a Slovak company specializing in comprehensive LED lighting solutions for public and industrial sectors, focusing on cost savings and modern energy-efficient technologies. The company positions itself as a leader in eco-friendly LED lighting in Slovakia, offering services including LED fixtures, lighting control systems, and project financing. The website content is primarily in Slovak and targets local municipalities and industrial clients. Technically, the website uses traditional web technologies including HTML, CSS, JavaScript with older libraries such as jQuery 1.10.2, Prototype.js, and Scriptaculous. The site is served over HTTPS with DNSSEC enabled, indicating a good baseline security posture. However, the absence of modern security headers and use of outdated JavaScript libraries present potential vulnerabilities. The site lacks visible privacy and cookie policies, which impacts GDPR compliance and user trust. No contact phone numbers or social media links are explicitly provided, limiting direct communication channels. Certifications such as ISO 9001 and ISO 14001 are prominently displayed, enhancing trust and credibility. Overall, the website is functional but basic in design and content quality, with moderate technical implementation and security posture.

R

Red Stag Casino

redstagcasino.eu

56

Red Stag Casino operates as an online gambling platform offering over 200 games, exclusive bonuses, and VIP-level support. The website targets adult users interested in online casino gaming and positions itself as a niche player with a focus on customer experience and exclusive offers. The business model revolves around online gambling services with a VIP customer support approach. The site content and branding are consistent and professionally presented, catering to an adult audience with gambling interests. Technically, the website employs modern web technologies including Bootstrap 5 for responsive design and Matomo for analytics and tracking. The site is well-optimized for mobile devices and includes standard SEO and accessibility features, though accessibility could be improved. The infrastructure appears stable with no signs of blocking or WAF interference, and the site uses HTTPS with appropriate security headers, indicating a good security posture. Security-wise, the site implements HTTPS and several security headers, and maintains a security policy page. However, it lacks a public vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by comprehensive privacy and cookie policies with GDPR considerations. Overall, the site presents a moderate risk profile typical for online gambling platforms. The lack of WHOIS registrant transparency due to privacy protection is common in this industry but slightly reduces trust. Strategic recommendations include adding a vulnerability disclosure policy, improving incident response contact visibility, and enhancing accessibility features to strengthen compliance and user trust.

exe.cute is a small Swiss-based full-stack development and design service provider, operated by Marina, a passionate developer focused on delivering robust and aesthetically pleasing web applications. The website serves as a professional portfolio showcasing key services such as custom development, design identity, and consulting. The business model is service-oriented with a personal and artisanal approach, targeting individuals and businesses seeking tailored digital solutions. Technically, the site uses modern technologies including Angular and Tailwind CSS, providing a responsive and visually appealing user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies, representing areas for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security practices.

The website hk8.sk represents the Združenie hlavných kontrolórov samosprávnych krajov SR (HK8), a Slovak professional association for chief controllers of self-governing regions. The organization focuses on enhancing the expertise and effectiveness of control activities within local government, supporting professional development, legislative advocacy, and cooperation with similar institutions domestically and internationally. The site content is primarily informational, targeting professionals in Slovak regional government oversight. The business model is membership-based, funded by contributions from regular and honorary members, positioning HK8 as a niche professional association within the Slovak government sector. Technically, the website is built using static HTML generated by Artisteer, with CSS and jQuery for styling and interactivity. Hosting appears to be provided by Websupport, inferred from the nameservers. The site demonstrates basic mobile responsiveness and accessibility but lacks advanced SEO and performance optimizations. No analytics or tracking technologies are detected, indicating minimal user tracking. From a security perspective, the domain benefits from DNSSEC, indicating a commitment to DNS integrity. However, the website lacks visible HTTPS confirmation in the provided data, security headers, and privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms or contact mechanisms are present to facilitate incident reporting or user communication. These gaps suggest a moderate security posture with room for significant improvement. Overall, the website is functional and serves its informational purpose but requires enhancements in security, privacy compliance, and user engagement features to improve trustworthiness and regulatory adherence.

xAI is a technology company specializing in advanced artificial intelligence models and services, including the Grok AI models and API access. The company positions itself as an innovator in AI with a mission to advance scientific discovery and deepen understanding of the universe. Their business model includes subscription tiers such as SuperGrok and API offerings targeting developers and AI enthusiasts. The website reflects a medium-sized enterprise with a professional and consistent brand presence, supported by partnerships with major investors and a clear product roadmap. Technically, the site is built on a modern React and Next.js stack, hosted on Cloudflare, offering moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website is trustworthy and professional, with room for improvement in security and privacy transparency.

Editura AGIR is a Romanian publishing house specializing in engineering and technical literature, offering a range of books, magazines, bulletins, and scientific communications. The website provides detailed information about publications, procurement, collaboration, and terminological resources, targeting engineers, academics, and technical professionals. The business operates with a small-sized model focused on niche educational content. Technically, the website uses basic HTML, CSS, and JavaScript with Facebook SDK integration and Google Analytics for traffic monitoring. The hosting is provided by CYBER_FOLKS S.R.L., a reputable Romanian registrar. Security posture is moderate with no DNSSEC and missing security headers, and privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional but could benefit from modernization and improved security and privacy practices.

Fair Go Casino is an Australian-focused online gambling affiliate platform operated by Deckmedia, offering a variety of casino games, promotions, and bonuses targeting Australian players. The website is designed with mobile optimization and provides multiple payment options including Bitcoin, Neosurf, and POLi. Technically, the site uses modern HTML5 and JavaScript technologies with Microsoft Clarity for analytics, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is supported by Curacao licensing and CDS certification, though direct company contact emails are not published. Overall, the site is functional and trustworthy as an affiliate platform but could improve security and privacy practices.

O

Captcha - WEDOS Global Protection

obec2030.cz

48

The analyzed URL is a captcha verification page provided by WEDOS Global Protection, serving as a security gate to protect the underlying website. The page itself contains minimal content, primarily a form with a captcha image and input field, and no business or contact information. The domain is registered with REG-WEDOS and uses WEDOS name servers, consistent with the hosting and protection provider. The domain age is approximately 3.5 years, which is reasonable for the service. Technical infrastructure is basic, with no advanced frameworks or CMS detected. Security posture shows some best practices such as CSRF token usage and captcha protection, but lacks visible security headers and privacy policies. The page is blocked by a WAF/security mechanism, limiting the ability to perform a full content and compliance analysis.

A

Automattic

simplenote.com

65

Simplenote, owned by Automattic, is a well-established note-taking service offering a simple, free, and cross-platform solution for users to keep notes synced across devices. The website is professionally designed, leveraging the WordPress.com platform and Jetpack plugin, with strong branding consistency and positive trust signals including media endorsements and official app store links. The technical infrastructure is modern and performant, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and domain protections in place, though some improvements are recommended such as enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed via a comprehensive privacy policy hosted on Automattic's site, but lacks a cookie consent mechanism. Overall, the website is trustworthy, safe, and professionally maintained.

P

Pricemania s.r.o.

pricemaniaacademy.sk

39

Pricemania Academy, operated by Pricemania s.r.o., is a Slovak-based educational platform offering the first comprehensive e-commerce and online marketing training program in Slovakia. The website provides interactive workshops, webinars, and tailored training sessions aimed at e-shops and online businesses. It positions itself as a trusted source with professional mentors, case studies, and a satisfaction guarantee. Technically, the website uses modern web technologies including JavaScript libraries, Vimeo API, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mouseflow. The site is mobile optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and secure forms, but lacks some security headers and visible cookie consent mechanisms, which impacts GDPR compliance. Overall, the domain registration and business information are consistent and legitimate, supporting a high trust level.

H

HTP s.r.o.

htpcr.cz

44

HTP s.r.o. is a well-established Czech manufacturing company specializing in custom engineering parts and components, serving primarily European and U.S. markets. The company has a strong market position supported by a long history since 1996 and a diverse client base including major industrial players. Their website reflects a professional business with comprehensive service offerings in sheet metal processing, welding, machining, and assembly. Technically, the website uses common web technologies such as jQuery, Google Analytics, and Piwik for analytics, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms such as a privacy policy or cookie consent. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

珠

珠海格力电器股份有限公司

greeyun.com

53

The website greeyun.com represents the corporate presence of Zhuhai Gree Electric Appliances Co., Ltd., a manufacturing company based in China. The site content is minimal, primarily consisting of the company name in Chinese and a government ICP备案 link, indicating compliance with Chinese internet regulations. The business appears to focus on manufacturing electrical appliances, but no detailed business descriptions, services, or contact information are provided on the site. The domain is registered with Alibaba Cloud Computing and is consistent with the hosting provider, supporting legitimacy. From a technical perspective, the website uses basic HTML and CSS without advanced frameworks or CMS. Hosting is provided by Alibaba Cloud, a reputable provider. The site lacks mobile optimization, accessibility features, and SEO best practices. Security headers are minimal, with only a Content-Security-Policy to upgrade insecure requests. DNSSEC is not enabled, and no advanced security measures are observed. There are no forms, scripts, or analytics tools detected, indicating a very basic technical infrastructure. Security posture is moderate but limited by the absence of comprehensive security headers and DNSSEC. The lack of privacy and cookie policies, as well as absence of contact information, reduces compliance with global privacy standards such as GDPR. No vulnerability disclosure or incident response information is present. The site content is safe with no adult or questionable material detected. Overall, the website is functional but minimal, with significant room for improvement in content richness, security, privacy compliance, and user engagement. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and cookie policies, adding contact information, and improving website content and design to better reflect the company's market position and build trust.

D

DRK-Blutspendedienste

spenderservice.net

68

The website www.spenderservice.net is the official digital service portal for blood donors affiliated with the Deutsches Rotes Kreuz (German Red Cross). It provides a comprehensive platform for blood donors in Germany to manage their donation appointments, view donation history, participate in forums, and access a dedicated mobile app. The service is positioned as a trusted non-profit healthcare platform with a strong focus on user engagement and convenience. Technically, the website employs modern web technologies including JavaScript, CSS, and Bootstrap framework, with backend indications of Ruby on Rails. It integrates cookie consent management via CookieFirst and uses Piwik/Matomo for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and provides seamless navigation and user experience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent mechanisms. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the strong branding and professional presentation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with minor penalties for missing WHOIS data and security policy disclosures. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to bolster trust and compliance.

E

Úvodní stránka

engineering-card.cz

46

The website engineering-card.cz serves as an informational portal for the Professional Engineer Card initiative in the Czech Republic, part of a broader European project to enhance engineer mobility. It is managed by Czech engineering organizations and government bodies, providing detailed information about the card, registration processes, and organizational structure. The site targets engineers seeking professional certification and mobility within Europe. Technically, the site is built on Joomla! CMS using standard web technologies like Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF tokens, but lacks HTTP security headers and explicit privacy policies, which are areas for improvement. No blocking or WAF mechanisms were detected, and the domain registration data is consistent and legitimate, supporting trust in the site. Overall, the site is professional and functional but could enhance compliance and security practices.

The Comité Nacional Español ENGINEERS EUROPE is a newly established professional association representing Spanish engineers within the broader European engineering community. The organization aims to promote recognition, mobility, and professional opportunities for engineers across Europe. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Rank Math PRO. It is hosted by a reputable registrar and uses HTTPS, but lacks advanced security headers and DNSSEC. Privacy and terms of service pages are absent, indicating compliance gaps. No direct contact information is published, which may affect user trust and engagement. Overall, the site presents a professional image suitable for its target audience but requires enhancements in security and compliance to improve trustworthiness and regulatory adherence.

R

rbb Rundfunk Berlin-Brandenburg

rbb-online.de

54

rbb24 is a well-established multimedia news portal serving the Berlin and Brandenburg regions, operated by the public broadcaster Rundfunk Berlin-Brandenburg (rbb). The website offers comprehensive news coverage including politics, economy, culture, sports, and panorama, supported by video and audio content. It maintains a strong digital presence with official social media channels and uses modern web technologies and a professional CMS platform, ensuring a high-quality user experience. The site is well-branded and trusted within its regional market.

K

Katholisches Bibelwerk e. V.

bibelwerk.de

48

Das Bibelwerk is a German non-profit organization focused on providing serious and lively biblical interpretation and education. It operates through two main entities: the Katholisches Bibelwerk e. V. and the Verlag Katholisches Bibelwerk GmbH, offering publishing and retail services via its online shop. The website serves as a portal linking to these entities and related services, targeting religious communities and individuals interested in biblical studies. Technically, the site is built on TYPO3 CMS with moderate performance and good mobile optimization, using Umami Analytics for minimal user tracking. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy or cookie policies. No contact information or forms are present on the analyzed page, limiting direct user engagement. WHOIS data aligns with the website's claims, showing consistent domain registration without privacy protection, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security practices.

Inzerce BiL.cz operates as a Czech Republic-based online classified ads platform, providing free listings across a wide range of categories including automotive, real estate, electronics, and services. Established in 2007, it has built a modest but steady user base with over 4 million visitors and more than 137,000 ads posted. The platform's business model relies primarily on advertising revenue, leveraging Google Adsense and other ad networks. The website content is primarily in Czech, targeting a general audience seeking local classifieds. Technically, the site uses standard web technologies such as HTML, CSS, and JavaScript, with hosting and domain registration managed by WEDOS, a reputable Czech provider. Performance and mobile optimization are basic but functional, with room for improvement in accessibility and modern web standards. Security posture is adequate with HTTPS enabled, but lacks several important security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy features.

O

Obec Hovězí

obec-hovezi.cz

48

Obec Hovězí operates an official municipal website serving the local community of Hovězí in the Czech Republic. The site provides comprehensive information about local government, community events, public notices, and services. It targets residents and visitors seeking official information and municipal resources. The business model is a government public service portal with a focus on transparency and community engagement. The website is well-branded with consistent use of official logos and symbols, and it maintains a good level of content quality and navigation clarity. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for language accessibility. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No major technical issues or vulnerabilities were detected in the content. From a security perspective, the website enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam and abuse. However, it lacks explicit security headers and does not provide dedicated security or incident response policies. Privacy policies and cookie policies are present but lack active consent mechanisms. There is no vulnerability disclosure or security.txt file, which could enhance transparency and security posture. Overall, the website is trustworthy and professional, reflecting its role as an official municipal portal. The domain registration is consistent with the municipality's history, and no suspicious patterns were found. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security policies, and considering a vulnerability disclosure program to strengthen security and compliance.

O

Obec Huslenky

huslenky.cz

48

Obec Huslenky operates an official municipal website serving the residents and visitors of the Huslenky municipality in the Czech Republic. The site provides local government information, public notices, event calendars, and community services, positioning itself as a trusted source for municipal communication. The business model is governmental public service with a focus on transparency and community engagement. The website is well-established, with a domain age dating back to 2000, reflecting a stable online presence. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google services like reCAPTCHA for form security and Google Translate for language accessibility. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate spam on forms. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No vulnerabilities or exposed sensitive data were detected in the content. Privacy policies are present and GDPR compliance is indicated, though the cookie consent mechanism is absent. Overall, the website is a reliable and legitimate municipal portal with a good trust profile. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, and enhancing accessibility and SEO to improve user experience and compliance. These improvements will strengthen the site's security posture and regulatory adherence while maintaining its role as a key community resource.

S

S-EPI, s.r.o.

mzdovecentrum.sk

54

Mzdové centrum is a well-established Slovak online portal providing comprehensive and up-to-date information for payroll accountants and HR professionals. Operated by S-EPI, s.r.o., the site offers a wide range of services including legal updates, tax and payroll guidance, educational video and audio content, and practical tools such as calculators and calendars. The portal targets professionals in Slovakia's payroll and human resources sectors and maintains a consistent and professional brand presence. Technically, the website is built on ASP.NET with jQuery and includes cookie consent mechanisms compliant with GDPR. While the site performs moderately in terms of speed and accessibility, it is mobile-optimized and SEO-friendly. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy, legitimate, and serves its niche audience effectively.

S

S-EPI, s.r.o.

vssr.sk

54

The website www.vssr.sk serves as a specialized information portal dedicated to Slovak public administration, providing comprehensive guidance on legislation, accounting, reporting, and supplementary information tailored to public sector entities. Operated by S-EPI, s.r.o., the portal targets government employees, local authorities, and professionals involved in public administration. It offers a variety of services including legislative updates, calculators, calendars, and a subscriber-only written advisory service. The site maintains a professional and consistent brand presence with clear navigation and relevant content in Slovak language. Technically, the site is built on an ASP.NET Web Forms platform with jQuery and custom scripts, reflecting a mature but somewhat legacy infrastructure. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Security-wise, HTTPS is enforced with no visible vulnerabilities or exposed sensitive data, though security headers are not explicitly detected. Privacy compliance is well addressed with GDPR-aligned cookie consent mechanisms and linked privacy and terms of service pages. Overall, the security posture is solid but could be enhanced by implementing additional security headers and explicit incident response policies. The business credibility is high, supported by consistent WHOIS data, partner affiliations, and professional content. No adult or questionable content is present, making the site safe for general audiences. Advertising is limited and transparent, primarily using a single ad network. Strategically, the site is well-positioned as a trusted resource for Slovak public administration professionals, with opportunities to modernize technical infrastructure and strengthen security policies to maintain trust and compliance.

T

THINline s.r.o.

registrace-domeny-eu.cz

59

THINline s.r.o. operates the website registrace-domeny-eu.cz, providing domain registration services specifically for .eu domains along with web hosting packages. The company positions itself as an accredited .eu domain registrar with a regional presence in the Czech Republic, managing over 59,000 domains including thousands of .eu domains. The website targets individuals and businesses seeking affordable and reliable domain registration and hosting services. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. Hosting is likely provided by Český hosting, a partner mentioned on the site. Security posture is moderate but lacks modern security headers and explicit HTTPS confirmation in the provided data. Privacy compliance is minimal, with no cookie consent mechanism and only basic privacy and terms pages. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site is functional and professional but could improve in security and privacy compliance to enhance user trust.

T

THINline interactive s.r.o.

domena-webhosting.cz

42

The website www.domena-webhosting.cz is an informational portal focused on webhosting and domain registration advice primarily for the Czech Republic market. Operated by THINline interactive s.r.o., it provides guidance on selecting webhosting services, domain names, free hosting options, and catalogs of providers. The site leverages affiliate partnerships with Czech hosting companies such as Český hosting and promotes related services like virtual and dedicated servers. The content is well-structured, relevant, and targeted at individuals and small businesses seeking hosting knowledge. Technically, the site uses standard HTML, CSS, and JavaScript with Google Analytics and Tag Manager for visitor tracking. However, it lacks modern security headers and privacy/cookie policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and footer information suggest a legitimate small business presence. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures.

X

Xiaomi Global

mi.com

65

Xiaomi Global operates as the official international website for Xiaomi Corporation, a leading technology company specializing in smartphones, wearables, smart home devices, and lifestyle products. The site serves a global audience, offering comprehensive product catalogs across multiple sub-brands such as Redmi and POCO. The business model focuses on e-commerce and direct consumer engagement, positioning Xiaomi as a major player in the global consumer electronics market. Technically, the website leverages modern web technologies including React, Google Tag Manager, and TrustArc for consent management, hosted likely on Akamai infrastructure. The site demonstrates strong digital maturity with excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. From a security perspective, the site enforces HTTPS, includes multiple security headers, and employs consent mechanisms for privacy compliance. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given Xiaomi's global brand presence. Overall, Xiaomi Global presents a professional, secure, and user-friendly platform with minor gaps in explicit security disclosures. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and enhancing contact transparency to further strengthen trust and compliance.

E

ENGINEERS EUROPE Central Secretariat AISBL

feani.org

66

ENGINEERS EUROPE is a well-established federation representing professional engineers across 33 European countries. The organization focuses on uniting national engineering associations, facilitating professional mobility through certifications like the EUR ING certificate, and providing educational resources such as the European Engineering Education Database and continuing professional development materials. The website reflects a professional, non-profit entity with a clear mission to strengthen the engineering profession in Europe. Technically, the site is built on Drupal 10, uses modern web fonts, and integrates Google Tag Manager for analytics. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and a published security policy. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, professional, and serves its target audience effectively.

D

Deutscher Bundestag

deutscher-bundestag.de

63

The Deutscher Bundestag website serves as the official online presence of the German Parliament, providing comprehensive information about parliamentary activities, members, agendas, and live streams. It targets the general public and stakeholders interested in governmental affairs. The site is positioned as a key governmental information portal in Germany, offering essential services related to legislative transparency and public engagement. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with custom styling and scripts. It uses HTTPS for secure communication and integrates Matomo analytics for user tracking. The site appears to be well-structured with good mobile optimization and SEO practices, although no common CMS or hosting provider details are evident from the data. From a security perspective, the site benefits from HTTPS and Google site verification, indicating legitimacy and basic security hygiene. However, the absence of explicit security headers, privacy and cookie policies, and incident response contacts suggests room for improvement in security posture and compliance. No WAF or blocking mechanisms were detected, and the content is fully accessible. Overall, the website is a credible and authoritative source of governmental information with good content quality and business credibility. Strategic enhancements in privacy compliance, security headers, and incident response transparency would further strengthen its security and trustworthiness.

B

BUWOG Immobilien Treuhand GmbH

buwog-immobilientreuhand.de

44

BUWOG Immobilien Treuhand GmbH operates in the real estate sector, providing property management and related services to tenants, property owners, and investors. The company positions itself as an important player within the German real estate market, with a professional online presence that targets a broad audience including tenants and investors. The website content is well-structured and professionally designed, reflecting a medium-sized enterprise with consistent branding and clear business focus. Technically, the website is hosted on Microsoft Azure infrastructure, utilizing Azure DNS and Cookiebot for cookie consent management. The site employs modern web technologies including JavaScript and CSS, and demonstrates good mobile optimization and SEO practices. However, some advanced security headers and explicit privacy policy documentation are missing, which could be improved to enhance compliance and security posture. From a security perspective, the website benefits from HTTPS encryption and a robust cookie consent mechanism, indicating awareness of GDPR and privacy requirements. No critical vulnerabilities or suspicious patterns were detected in the WHOIS data or website content. Nonetheless, the absence of explicit privacy policies, terms of service, and incident response contacts suggests room for improvement in transparency and user trust. Overall, the website presents a trustworthy and professional image with moderate technical maturity and compliance. Strategic enhancements in privacy documentation, security headers, and contact transparency would further strengthen its security posture and regulatory compliance.

ETARGET SE is a Slovakia-based advertising technology company founded in 2003, specializing in ad delivery services and operating an ad network platform primarily serving advertisers and publishers in Central Europe. The company is a Google Ads Certified External Vendor and a registered participant in the IAB Europe Transparency & Consent Framework, reflecting its commitment to industry standards and privacy compliance. The website content is focused on privacy and cookie policies, demonstrating transparency and adherence to GDPR requirements. Technically, the website uses basic HTML and CSS with custom fonts loaded from a subdomain. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS indications. Security practices include data retention limits, storage within the EU, and no collection of personally identifiable information, though DNSSEC is not enabled and security headers are not explicitly present. The security posture is solid with no critical vulnerabilities detected, but improvements could be made by enabling DNSSEC, publishing a vulnerability disclosure policy, and enhancing incident response contact visibility. Privacy compliance is strong, with clear policies and opt-in/out mechanisms. Overall, the site is professional and trustworthy, with a good balance of business credibility and privacy focus. Strategically, ETARGET should focus on enhancing technical security measures and expanding transparency around incident response to further strengthen trust and compliance.

Kormidlo.cz is a Czech non-profit online catalog managed by the organization Econnect, providing a curated directory of links related to civil society topics such as human rights, social development, environment, culture, and the non-profit sector. Established in 2000, it serves as a resource hub for NGOs, activists, researchers, and the general public interested in civic issues. The website offers categorized content and allows users to submit or suggest edits to links, supported by EU funding disclaimers and managed with a custom CMS called Toolkit. Technically, the website employs standard web technologies including HTML, CSS, and JavaScript, with integrations of Google Analytics, Google Tag Manager, and Google Adsense for tracking and monetization. The site is hosted by Econnect's own hosting services and uses HTTPS for secure communication. However, the design is basic and somewhat dated, with limited mobile optimization and accessibility features. SEO practices are basic but functional. From a security perspective, the site benefits from HTTPS and a cookie consent mechanism compliant with EU regulations. However, it lacks advanced security headers and does not provide explicit privacy policies, terms of service, or vulnerability disclosure information. Contact information is limited to a single email address, with no phone or physical address details. No WAF or blocking mechanisms are detected, and the site content is safe with no adult or questionable material. Overall, Kormidlo.cz is a legitimate, stable, and moderately secure non-profit resource website with room for improvement in privacy compliance, security hardening, and user experience enhancements.

P

Procter & Gamble

mujsvet-pg.cz

71

The website 'Můj svět P&G' serves as a localized consumer engagement platform for Procter & Gamble in the Czech and Slovak markets. It provides product information, promotional campaigns, contests, cashback offers, and community features tailored to regional consumers. The site reflects a strong market position of P&G as a leading multinational consumer goods company, focusing on brand marketing and customer interaction. Technically, the site is built on a modern stack including React and Sitecore CMS, hosted on Microsoft Azure, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed through links to official P&G privacy and terms pages and a cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

T

TVO spółka z ograniczoną odpowiedzialnością

klubtvokazje.pl

50

Klub TVOkazje is a loyalty program operated by TVO sp. z o.o., targeting retail customers in Poland who shop via TV Okazje. The program offers benefits such as gifts, discounts, points accumulation, free shipping, and birthday promotions. The website is built using modern frontend technologies like Vue.js and provides a good user experience with clear navigation and consistent branding. The technical infrastructure is moderate in performance and mobile optimized, hosted likely by OVH SAS. Security posture is adequate but could be improved by adding security headers and explicit incident response policies. Privacy compliance is strong with a comprehensive privacy policy and minimal tracking. Overall, the website is trustworthy and professionally maintained, supporting a small-sized retail loyalty business.

The website bilingualgeek.com currently serves a 404 Not Found error page with no accessible business content. The domain is registered since 2016 with NameCheap, Inc. and is hosted on Google Cloud Platform. The page content indicates the domain is used by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. However, no direct business information, contact details, or user-facing content is available on the site. Technically, the site uses standard web technologies (JavaScript, HTML, CSS) and enforces HTTPS with frequent certificate rotation, but lacks security headers and cookie consent mechanisms. The absence of contact information and the 404 status significantly reduce the website's usability and trustworthiness. Security posture is moderate with no evident vulnerabilities, but improvements are needed in DNS security and transparency. Overall, the site is not currently functional for end users and provides minimal information about the business or services.

V

Výstražné informace hydrometeorologických jevů

vystrahygalileo.com

46

The website vystrahygalileo.com is a newly launched Czech language informational platform providing hydrometeorological warnings and alerts. It appears to serve as a public service or governmental resource focused on weather-related hazard information for Czech regions. The site features an interactive map and search functionality for area-specific warnings. Technically, the site uses modern JavaScript and CSS with Google Tag Manager and Google Analytics for tracking. However, it lacks comprehensive privacy, cookie, and terms of service policies, and does not provide explicit contact information or security policies. The domain is very new, registered in December 2024, consistent with a new service launch. Security posture is basic with no advanced headers or protections detected. Overall, the site is safe for general audiences but would benefit from improved privacy compliance and security best practices.

The domain juicingoasis.com currently serves a 404 Not Found error page with no accessible business content. The page content indicates that the domain is hosted by Admiral, a service provider specializing in copyright access control and privacy consent management for digital publishers. No direct business information, contact details, or policies are available on the site. Technically, the site uses basic HTML, CSS, and JavaScript, hosted on Google Cloud Platform with DNS managed by AWS Route 53. Security practices described pertain to Admiral's hosting environment, including HTTPS enforcement and certificate rotation, but no advanced security headers or policies are present. The domain registration is legitimate, registered since 2017 with NameCheap, Inc., and is not privacy protected. Overall, the site is non-functional as a business website and lacks critical privacy, security, and contact information, resulting in a low trust and quality score.

EkoLink.cz is a Czech environmental link catalog managed by the civic association BEZK, established since 2000. It serves as a resource hub for environmental, ecological, energy, transport, and societal topics, targeting the general public interested in nature and sustainability. The website aggregates over 1900 categorized links and provides community engagement through link submissions and feedback. Technically, the site uses a custom CMS called Toolkit, hosted on ecn.cz infrastructure, and integrates Google Analytics and Adsense for tracking and monetization. The design and user experience are basic but functional, with moderate SEO and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and formal policies. Overall, the domain registration is consistent and legitimate, reflecting a stable and trustworthy non-profit entity.

C

Centrum Paraple, o.p.s.

aukceproparaple.cz

46

Centrum Paraple, o.p.s. operates a charitable auction platform through Galerie KODL, organizing annual art auctions to raise funds for people with paraplegia and wheelchair users. The website reflects a well-established non-profit entity with a clear mission and target audience of art collectors and philanthropic supporters. The digital infrastructure is built on Bootstrap 3.4.1 and a proprietary CMS (Vizus CMS), with moderate performance and good mobile optimization. Security posture is moderate, with cookie consent implemented but lacking visible security headers and explicit privacy policies. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact information indicate legitimacy and trustworthiness. Strategic improvements in security headers, privacy policy publication, and SSL configuration are recommended to enhance compliance and security.

C

Centrum Paraple, o.p.s.

stardanceproparaple.cz

54

Centrum Paraple is a Czech non-profit organization focused on supporting people with spinal cord injuries through social rehabilitation services. The website promotes the StarDance charity event, which is supported by Czech Television and the public, to raise funds and awareness. The organization has a clear market position as a reputable charity with established partnerships and a strong social media presence. Technically, the website uses Bootstrap 3.4.1 and is built on the Vizus CMS platform, offering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks some security headers and formal privacy and terms policies. WHOIS data is missing, which slightly impacts trust but the site content and contact information support legitimacy. Overall, the site is professional and trustworthy, serving a general audience with safe content.

The website alsikskrpa.cz is a cultural and historical project dedicated to the Hussite military leader Alšík Škrpa. It provides detailed historical narratives, media content including audio, and promotes a museum located at the Pátek castle in the Czech Republic. The target audience includes history enthusiasts and local visitors interested in Hussite history. The business model focuses on cultural heritage promotion and museum visitor engagement, positioning itself as a niche local cultural site. Technically, the website uses a traditional HTML/CSS/JavaScript stack with jQuery and Google Fonts, hosted on a Czech hosting provider inferred from the nameservers. The site is moderately performant, mobile-optimized, and has basic accessibility and SEO features. No CMS or advanced frameworks are detected. The site lacks advanced security headers and HTTPS enforcement is not confirmed from the provided data. From a security perspective, the site shows minimal security posture with no privacy or cookie policies, no security headers, and no vulnerability disclosure mechanisms. Contact information is clearly provided, but no incident response or security contacts are present. There is no evidence of user tracking or analytics, which reduces privacy risks but also limits marketing insights. Overall, the site is safe, with no adult or explicit content, and provides a good user experience with clear navigation and relevant content. However, it lacks important compliance elements such as privacy and cookie policies and could improve its security posture by implementing HTTPS and security headers.

G

Geodetický a kartografický ústav Bratislava

gku.sk

59

Geodetický a kartografický ústav Bratislava is a Slovak government institution specializing in geodetic and cartographic services. It provides key national services including cadastral data management, electronic portals for real estate information, and spatial observation services. The website serves government agencies, municipalities, and geospatial professionals with authoritative data and services. The institution holds a strong market position as the official geodetic authority in Slovakia. Technically, the website is built on a custom CMS (WebJET) and uses common JavaScript libraries such as jQuery and Bootstrap. It is mobile-optimized and accessible, with moderate performance. SEO is basic but functional. Cookie consent and GDPR compliance mechanisms are implemented effectively, reflecting good digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of security headers and vulnerability disclosure policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain as a government entity with consistent registration details. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and trustworthiness further.

K

KiKA

kikaninchen.de

48

KiKANiNCHEN is a well-established multimedia preschool platform operated under the KiKA brand, a joint venture of German public broadcasters ARD and ZDF. The website offers a rich variety of children's TV series videos, online games, craft ideas, and songs tailored for toddlers and preschool children, positioning itself as a trusted educational and entertainment resource in the German media landscape. The platform targets young children and their parents, providing a safe and ad-free environment for early online experiences. Technically, the site employs modern web standards including HTML5, CSS, JavaScript, and structured data (JSON-LD) to enhance SEO and accessibility, though mobile optimization and accessibility features are basic and could be improved. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a critical area for improvement given GDPR requirements. Overall, the website demonstrates high business credibility and content quality but should strengthen its privacy and security posture to align with best practices.

X

Xiaomi Global

xiaomi.com

63

Xiaomi Global operates as the official international website for Xiaomi Corporation, a leading global technology company specializing in consumer electronics such as smartphones, wearables, smart home devices, and lifestyle products. The website serves as a comprehensive e-commerce and marketing platform targeting a global audience interested in innovative technology products. The site demonstrates a high level of digital maturity, utilizing modern web technologies including React, advanced image formats, and performance monitoring tools to ensure a fast and responsive user experience across devices. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through the presence of privacy and cookie policies with consent mechanisms, aligning with GDPR standards. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence consistent with a large enterprise brand.

The domain severskevyhlidky.cz currently hosts no active website and instead displays a Webnode error placeholder page indicating the domain is available for registration. There is no business information, contact details, or content describing any services or products. The domain was registered in 2019 and uses Webnode's platform and Amazon Cloudfront CDN for hosting the placeholder page. The technical infrastructure is minimal and lacks modern security headers or privacy compliance features. No analytics or marketing tools are present. The security posture is weak due to absence of HTTPS details and security policies. Overall, the site is not operational and provides no business or security assurances.

The Advertiser is a prominent regional news media outlet serving Adelaide and South Australia, providing comprehensive coverage of local news, sports, weather, business, and entertainment. The website is professionally designed with consistent branding and targets a general audience interested in regional news. It operates under the parent company News Corp Australia, indicating a strong market position in the media sector. Technically, the site leverages a modern technology stack including WordPress CMS, various advertising and analytics platforms, and is optimized for desktop and mobile users. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit privacy compliance disclosures. Overall, the site is trustworthy and well-maintained, though it lacks visible contact information and formal privacy and cookie policies in the analyzed content.

I

INTERIA.PL

terazgotuje.pl

53

TerazGotuje.pl is a Polish culinary and lifestyle media website operated under the INTERIA.PL brand, offering a wide range of content including recipes, diet advice, and celebrity kitchen features. The site targets a general audience interested in cooking and healthy eating, positioning itself as a trusted culinary guide in the Polish market. The domain is well-established since 2013 and hosted by a reputable Polish provider, home.pl S.A., reflecting a mature digital presence. Technically, the website employs modern web technologies such as responsive design, WebP images, and SVG graphics, ensuring good user experience across devices. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The site uses multiple third-party tracking and advertising services, indicating extensive user data collection but limited transparency. Overall, the website is professionally designed and functional but would benefit from enhanced privacy compliance and security hardening.

C

Consulting Service Sp. z o.o.

top.pl

59

Top.pl is a well-established Polish lifestyle and advice website operated by Consulting Service Sp. z o.o., affiliated with INTERIA.PL. The site offers a broad range of content including lifestyle guides, recipes, home and garden tips, financial advice, and curiosities, targeting a general Polish-speaking audience. The business model is primarily content publishing supported by advertising. The domain is long-standing, created in 1997, indicating a mature presence in the market. Technically, the site uses modern web technologies, including HTTPS, WebP images, and JavaScript-based tracking and advertising frameworks. The site is mobile-optimized with good SEO practices and a consistent brand presentation. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is evident with comprehensive privacy and cookie policies and consent mechanisms. However, explicit contact information and security policies are not prominently available. Overall, the site is professional, trustworthy, and safe for general audiences.

K

KiKA

kika.de

58

KiKA is a well-established German public children’s television channel jointly operated by ARD and ZDF, providing a broad range of children’s series, films, games, and creative content. The website reflects a mature digital presence with excellent content quality and a clear focus on its target audience of children and families. The technical infrastructure leverages modern web technologies such as Next.js and React, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR adherence. Overall, KiKA presents a trustworthy and professional online presence consistent with its public broadcaster status.

A

ASEKOL SK s.r.o.

cervenobielekontajnery.sk

45

The website cervenobielekontajnery.sk is operated by ASEKOL SK s.r.o., a Slovak company specializing in environmental services focused on the collection and sorting of small electronic waste via red and white stationary containers. The site targets municipalities and the general public to facilitate proper disposal of electronic waste, supporting local governments in waste management efforts. The business operates in a niche environmental sector with a clear and consistent brand presence and a small company size founded in 2020. Technically, the website is built on WordPress, hosted likely by Websupport, and uses standard web technologies such as JavaScript, CSS, and HTML5. The site is mobile optimized with good navigation and basic accessibility features. Performance is moderate, and SEO is basic but functional. No advanced frameworks or analytics tools are detected, indicating a simple but effective technical infrastructure. From a security perspective, the site uses HTTPS with DNSSEC enabled, which is positive. However, no security headers were detected, and there is no cookie consent mechanism, which are areas for improvement. The WHOIS data is transparent and consistent with the business claims, enhancing trustworthiness. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website presents a trustworthy and professional front for a small environmental service provider. Strategic improvements in security headers, privacy compliance, and incident response documentation would enhance the security posture and regulatory adherence, supporting long-term trust and operational resilience.

B

BSH Hausgeräte GmbH

bsh-group.de

66

BSH Hausgeräte GmbH is a leading global manufacturer of household appliances, operating as a subsidiary of the Bosch Group. The company offers a comprehensive portfolio of products and brands, emphasizing innovation, sustainability, and customer service. The website reflects a mature digital presence with extensive content tailored for consumers, partners, and job seekers. Technically, the site leverages modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and external vulnerability reporting mechanisms in place. Privacy compliance is well addressed with clear policies and consent management. The main risk factor is the absence of WHOIS data, which slightly impacts domain trust but is mitigated by strong corporate branding and external trust signals.

Zámek Pátek is a small cultural heritage site located in the Czech Republic, focused on preserving and promoting the historic Renaissance and Baroque chateau on the Ohře river. The website serves as an informational portal for visitors, offering details about tours, events, accommodation, and leisure activities. The business operates primarily as a non-profit or community-supported entity with volunteer involvement and modest entrance fees. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Google Analytics and Tag Manager for visitor tracking. Hosting is provided by VAS Hosting, as inferred from the nameservers. The site is mobile optimized and well structured, though it lacks advanced CMS or frameworks. Security posture is moderate with HTTPS enabled but missing security headers and no visible privacy or cookie policies, which are compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, the website is safe, family-friendly, and trustworthy, but could improve privacy compliance and security hardening.