Security Directory

Pfotenzeit- Mittelhessen GbR operates a specialized dog training and care business in the Mittelhessen region of Germany. Their services include dog training school, dog trainer education, dog boarding, dog hotel, dog care, dog walking, daycare, pet food and supplies, and events. The company targets dog owners and aspiring dog trainers, positioning itself as a regional leader with a focus on quality training and care. The website content is well-structured, professionally designed, and provides clear contact information and social media links, enhancing trust and accessibility. Technically, the website is built on the 1&1 IONOS Website Editor platform, utilizing modern web technologies such as jQuery, Skrollr.js for animations, and Snowplow Analytics for tracking. It supports progressive web app features via service workers and is hosted on 1&1 IONOS infrastructure. The site is mobile optimized with good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers or detailed security policies are present, and there is no incident response or vulnerability disclosure information. The domain WHOIS data is minimal but consistent with a legitimate small business, though registrant details are not fully disclosed. Overall, the website presents a trustworthy and professional front for a small regional business with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers, incident response transparency, and enhanced accessibility could further strengthen the security posture and user trust.

Hundeschule Ampertal is a small, certified dog training business based in Germany offering a range of services including basic obedience, problem behavior correction, mantrailing, and specialized training for fearful dogs. The business emphasizes a compassionate, cooperative training philosophy and holds memberships in recognized canine associations, enhancing its credibility. The website is professionally designed, mobile-optimized, and provides clear contact details and certifications, positioning it well within its local niche market. Technically, the site is built on the 1&1 IONOS Website Editor platform, leveraging modern JavaScript libraries and service workers for progressive web app capabilities. Analytics are implemented via Snowplow, with cookie consent mechanisms in place, reflecting a moderate level of digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, the site is trustworthy, safe, and compliant with basic privacy regulations, suitable for its target audience of dog owners seeking professional training services.

The website the-doghouse.de represents a small local business specializing in comprehensive dog care services including dog boarding, daycare, training, and retail of pet food and equipment. The business targets dog owners primarily in the German regions around Schöffengrund, Wetzlar, Gießen, and Frankfurt. The site is professionally designed with clear navigation and relevant content that effectively communicates the business offerings. Technically, the site is built on the 1&1 IONOS Website Editor platform, leveraging modern technologies such as jQuery, Mapbox, and CDN services to ensure moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and CAPTCHA on contact forms, but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening.

K

Kibérelem.hu

kiberelem.hu

52

Kibérelem.hu is a Hungarian online platform specializing in commercial real estate rentals, primarily serving Budapest. The website offers a marketplace for property owners and businesses to list and find commercial spaces such as shops, offices, and specialized premises. It targets small and medium-sized enterprises and local municipalities, providing features like auctions and community-driven feedback to support business growth. Technically, the site uses a modern but somewhat dated tech stack including jQuery 2.2.4, Bootstrap, and Owl Carousel, with Google Analytics and cookie consent mechanisms implemented. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enforced, but some outdated libraries and missing security headers present potential risks. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Overall, the site is trustworthy and professionally maintained, with clear contact information and active social media presence.

F

Ferienwohnungen in Bamberg und Umgebung

fewo-in-bamberg.de

52

The website fewo-in-bamberg.de operates as a specialized regional platform offering listings and booking referrals for private holiday apartments, apartments, and houses in Bamberg and its surroundings. It targets tourists and visitors seeking accommodation in this German region, providing a comprehensive directory of over 110 private rental options with detailed contact information and booking links to external platforms such as Booking.com and Airbnb. The platform also offers availability calendars and local tourist tips, enhancing the user experience for vacation planning. Technically, the website is built on Drupal 7 CMS, utilizing jQuery 2.2.4 and Bootstrap 3.4.1 frameworks, along with Flexslider for image carousels. While the site is mobile-optimized and features a professional design with clear navigation, the use of Drupal 7, which is end-of-life, poses potential security risks. The site enforces HTTPS and includes privacy and cookie policies compliant with GDPR, but lacks visible terms of service and incident response contact information. From a security perspective, the site benefits from HTTPS and some security headers but misses critical headers like Content Security Policy and X-Frame-Options. No security.txt or vulnerability disclosure information is present. The absence of updated CMS and some security best practices suggests moderate security posture with room for improvement. Overall, the website is a credible and trustworthy regional hospitality platform with good content quality and user experience. However, it should prioritize upgrading its CMS, enhancing security headers, and adding incident response and vulnerability disclosure information to strengthen its security and compliance posture.

K

KX Personal GmbH / Karriere Hamburg

karriere-hamburg.de

67

Karriere Hamburg, operated by KX Personal GmbH, is a well-established online job portal focused on the Hamburg metropolitan region. It offers a comprehensive platform for job seekers and employers, featuring job listings, apprenticeships, dual study programs, internships, and career advice. The site maintains a strong regional presence and partners with reputable local media such as the Hamburger Morgenpost (MOPO), enhancing its market position and trustworthiness. The content is professionally curated, targeting both candidates and employers in Hamburg and surrounding areas. Technically, the website employs a modern yet somewhat dated technology stack including jQuery 2.2.4, Foundation 5.5.3, and Splide.js for UI components. Hosting is provided by SchlundTech, a German hosting provider, ensuring regional compliance and performance. The site is mobile-optimized with good SEO practices and a clear navigation structure, although accessibility features are basic. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS and has implemented cookie consent banners, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent with the business profile, showing no suspicious patterns or privacy protection that would raise concerns. Overall, Karriere Hamburg presents a secure, professional, and user-friendly platform for regional employment services. Strategic improvements in security headers, incident response transparency, and enhanced accessibility could further strengthen its security posture and user trust.

D

Deutscher Frauenrat e.V.

frauenrat.de

57

The Deutscher Frauenrat e.V. is a prominent non-profit umbrella organization representing approximately 60 women’s organizations across Germany. It serves as the largest political advocacy group for women's rights and gender equality in the country, actively engaging at national, European, and United Nations levels. The website reflects a professional and comprehensive digital presence, offering detailed information about their advocacy work, campaigns, publications, and events. The organization targets a broad audience including civil society, policymakers, and the general public interested in gender equality issues. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and FontAwesome. It employs Cloudflare for DNS and security, and uses Borlabs Cookie for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. Analytics are handled via Matomo, ensuring privacy-conscious tracking. From a security perspective, the site enforces HTTPS with secure cookie attributes and a robust cookie consent mechanism. However, it lacks explicit HTTP security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data is consistent with the organization’s identity and domain usage, enhancing trustworthiness. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance. It effectively supports the organization's mission and provides a trustworthy platform for stakeholders. Strategic improvements could include adding security headers and publishing a formal security policy to further enhance trust and compliance.

Z

Zweckverband JenaWasser

jenawasser.de

50

JenaWasser is a regional public utility entity responsible for the safe supply of drinking water and environmentally compliant wastewater disposal in the Jena and Thüringen region of Germany. The website reflects a professional and consistent brand presence, targeting local residents and businesses with clear information about their services. The technical infrastructure is based on TYPO3 CMS, leveraging modern web technologies including jQuery and Font Awesome, with integrated consent management via Usercentrics and analytics through Google Analytics. The site is well-optimized for mobile and SEO, providing a good user experience. Security posture is solid with HTTPS enabled and consent mechanisms in place, though there is room for improvement in publishing explicit privacy policies, terms of service, and security policies. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or malicious activity.

F

Flottmann Kneipe

flottmannkneipe.de

57

Flottmann Kneipe is a small hospitality business located in Herne, Germany, operating within a historic cultural venue known as the Flottmann-Hallen. The business offers traditional bar food, drinks, a beer garden, and a rich program of cultural events including concerts and readings, positioning itself as a local cultural hub. The website is built using RapidWeaver CMS with a moderate technical infrastructure including jQuery and Google Analytics for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent and privacy policy present. Overall, the website is professional and trustworthy with clear contact information and social media presence, targeting mature audiences interested in nightlife and culture.

V

VHS – Deutscher Volkshochschul-Verband Herten

abschlussmachen.de

47

The website 'abschlussmachen.de' is an educational platform operated by the VHS – Deutscher Volkshochschul-Verband Herten, targeting individuals seeking to complete their school leaving certificates in several German cities. It offers information, consultation, and contact options including phone and WhatsApp, positioning itself as a regional adult education provider. The site is well-branded, consistent, and provides relevant content tailored to its audience. Technically, the site is built using RapidWeaver with UIkit framework, leveraging modern JavaScript libraries and Google Analytics for tracking. Hosting is likely provided by 1&1 IONOS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and a GDPR-compliant cookie consent mechanism (Usercentrics). However, it lacks explicit security headers, a published security policy, and incident response contacts. No vulnerabilities or suspicious content were detected. Overall, the site presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include adding security headers, a terms of service page, and a vulnerability disclosure policy to enhance trust and security posture.

D

Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e.V. (DWA)

dwa-digital.de

59

The Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e.V. (DWA) operates the website dwa-digital.de as a platform dedicated to the digital transformation of the water management sector in Germany and Europe. The organization is a leading non-profit association with approximately 14,000 members from diverse sectors including municipalities, academia, industry, and government. The website offers expert knowledge, educational programs such as the Digitale Akademie, and events like the Digitaler Dienstag to foster digital innovation and skills development in water and wastewater management. Technically, the website is built using RapidWeaver with Foundation framework and various stacks plugins, leveraging Matomo for analytics and CookieHub for consent management. The site is well-structured, mobile-optimized, and employs HTTPS with a good security posture. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. However, formal security policies and incident response contacts are not publicly disclosed. Security-wise, the site shows good practices including encrypted connections and no visible vulnerabilities or exposed sensitive data. The use of privacy-respecting analytics and cookie management tools further supports compliance. No WAF or blocking mechanisms interfere with content access, ensuring full transparency and accessibility. Overall, the website represents a credible, professional, and trustworthy digital presence for the DWA, effectively supporting its mission to lead digital transformation in water management. Strategic improvements could include publishing explicit security policies and vulnerability disclosure information to enhance trust and preparedness.

S

SOPREMA

sopraconnect.com

50

SopraConnect is a corporate login portal for SOPREMA, a company operating in the energy sector. The website provides a user authentication interface for customers or partners to access account-related services. The domain is well-established, registered since 2007, indicating a mature business presence. The site uses legacy ASP.NET WebForms technology with common JavaScript libraries such as jQuery and Moment.js, and Telerik UI components for enhanced user interface elements. However, the site lacks modern CMS or advanced web frameworks and shows basic mobile and accessibility support. From a security perspective, the website does not display advanced security headers or DNSSEC, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The login form includes client-side validation but lacks visible incident response or vulnerability disclosure information. The domain registration data is consistent and trustworthy, with no privacy protection masking registrant details. Overall, the site is functional for its purpose but requires improvements in privacy compliance, security headers, and modern web practices to enhance trust and security posture. There are no signs of malicious content or blocking mechanisms, and the content is safe for general audiences.

S

Svět knihy, s.r.o.

rostik.cz

45

Rostik.cz is an educational and cultural platform dedicated to promoting reading among children, youth, and adults in the Czech Republic. It operates as part of the 'Rosteme s knihou' campaign and offers book recommendations, author information, and a community for readers. The website is managed by Svět knihy, s.r.o., a recognized entity in the Czech book industry. The platform leverages modern web technologies including jQuery, Bootstrap, and Facebook SDK for social login and engagement. The site is well-structured, mobile-optimized, and provides a positive user experience with clear navigation and relevant content. Privacy and cookie policies are present and indicate GDPR compliance, although explicit contact information is not prominently displayed. The absence of WHOIS data limits transparency regarding domain registration details, but the presence of official partner logos and consistent branding supports legitimacy. Security posture is good with HTTPS enforced and secure login forms, though additional security headers and a vulnerability disclosure policy would enhance trust. Overall, Rostik.cz is a credible and well-maintained platform serving its educational mission effectively.

G

GMF Aquapark Prague, a.s.

aquapalace.cz

64

Aquapalace Praha operates the largest aquapark in the Czech Republic and Central Europe, offering a comprehensive leisure complex including water parks, sauna worlds, fitness centers, spa and wellness services, medical balneo treatments, and hotel accommodations. The business targets families, tourists, and wellness enthusiasts, positioning itself as a premier destination for active recreation and relaxation. The website is professionally designed with multilingual support, clear navigation, and integrated e-commerce for ticket sales and reservations. Technically, the site uses modern web technologies such as jQuery, Owl Carousel, and Bootstrap, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS usage and secure forms, though HTTP security headers are not explicitly detected. Privacy compliance is strong, with clear GDPR and cookie policies and consent mechanisms. The WHOIS data is missing, which limits domain trust assessment, but the overall business credibility and online presence are high. Strategic recommendations include improving security headers, publishing a security policy, and verifying domain registration details to enhance trust.

R

reality VAŠATOVÁ s.r.o.

reality-vasatova.cz

55

reality VAŠATOVÁ s.r.o. is a small real estate agency based in Hradec Králové, Czech Republic, offering comprehensive real estate services including sales, rentals, property management, and consulting. The company emphasizes a transparent, professional, and client-focused approach, supported by positive client testimonials and multimedia references. The website is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience with clear navigation and relevant content. Technically, the site uses Joomla CMS with common libraries such as jQuery, Google Maps API, and Google Tag Manager, integrating Google reCAPTCHA for form security and a cookie consent mechanism to comply with privacy regulations. Security posture is good with HTTPS and form protections, though some improvements in security headers and incident response documentation are recommended. WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information appear legitimate and consistent with a professional real estate service provider. Overall, the site presents a trustworthy and user-friendly platform for its target audience.

T

Tereza Kostková

terezakostkova.com

51

The website www.terezakostkova.com serves as the official online presence of Czech actress Tereza Kostková. It provides biographical information, a detailed calendar of her theater and media appearances, collaborations with brands, and contact details for professional inquiries. The site targets fans, media professionals, and event organizers interested in her work. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, featuring Google Fonts and Google Analytics for tracking. The design is professional and mobile-optimized, offering a good user experience with clear navigation. However, the site lacks privacy and cookie policies, which is a compliance gap under GDPR regulations. Security headers are not evident, and the WHOIS data for the domain is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and professional but requires improvements in privacy compliance and security practices.

The website kalendarvh.cz is a specialized archival project by the Václav Havel Library, providing detailed day-by-day programs of Václav Havel's presidency from 1989 to 2003. It serves historians, students, journalists, and the general public interested in Czech modern history. The project is non-commercial and educational, with a niche market position focused on cultural heritage preservation. Technically, the site uses a simple stack including jQuery 2.2.4, Google Fonts, and Google Analytics, hosted on a Czech hosting provider. The site is accessible, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening.

F

Felix a spol. AK, s.r.o.

akf.cz

44

Felix a spol. AK, s.r.o. is a well-established Czech law firm with over 30 years of experience, offering comprehensive legal services in multiple languages including Czech, English, German, and Polish. The firm positions itself as a trusted partner to clients, emphasizing expertise in GDPR compliance, legal education through Moot Court events, and pro bono work. Their market position is strengthened by memberships in international legal networks and active participation in legal community events. Technically, the website is built on WordPress with modern plugins and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is evident with dedicated GDPR and cookie policy pages, and contact information is clearly provided. Overall, the website reflects a credible and professional legal services provider with a solid digital footprint.

E

EXO TECHNOLOGIES, spol. s r.o.

exohosting.sk

53

EXO TECHNOLOGIES, spol. s r.o. operates the website exohosting.sk, providing web hosting, domain registration, email hosting, and server services primarily targeting Slovak customers and small to medium businesses. The company has a strong market position as one of the largest domain registrars in Slovakia with over 20 years of operational history. Their service offerings include nearly 400 domain extensions and a variety of hosting solutions, supported by a professional website with good content quality and clear navigation. Technically, the website uses modern frontend technologies such as jQuery, Font Awesome, and the Foundation CSS framework, delivering a mobile-optimized and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

D

Deutsches Rotes Kreuz

drk-intern.de

58

The website www.drk-intern.de serves as an internal portal for the Deutsches Rotes Kreuz (German Red Cross), a large non-profit humanitarian organization in Germany. It provides access to various internal services such as knowledge databases, user management, service databases, and other organizational resources. The platform targets employees and members of the DRK, facilitating operational efficiency and information sharing within the organization. The site is well-branded with consistent use of official logos and links to subsidiary and partner domains, reinforcing its legitimacy and trustworthiness. Technically, the site is built on TYPO3 CMS and employs modern frontend libraries including jQuery, Foundation, and LightGallery. Hosting appears stable with dedicated nameservers, and the site uses HTTPS with a cookie consent mechanism powered by CCM19, indicating compliance with privacy regulations. Performance and mobile optimization are moderate to good, though accessibility and SEO could be improved further. From a security perspective, the site enforces HTTPS and uses secure login portals for internal services. However, explicit security headers and published security policies or incident response information are absent. No vulnerabilities or exposed sensitive data were detected in the content. The domain WHOIS data aligns well with the organization, supporting a high legitimacy score. Overall, the website is professional, secure, and compliant with GDPR, serving its internal audience effectively. Recommendations include enhancing security headers, publishing security and incident response policies, improving accessibility, and expanding SEO metadata to further strengthen the platform's security posture and user experience.

The Erasmus+ website serves as the official German national portal for the European Union's Erasmus+ program, focusing on education, youth, and sport. It is operated by four National Agencies under the Deutscher Akademischer Austauschdienst e.V. (DAAD). The site provides comprehensive information on project support, application processes, and program details, targeting educational institutions, youth organizations, and project participants. The website is well-positioned as a trusted government-backed resource with strong partnerships and funding from EU and German federal ministries. Technically, the site is built on TYPO3 CMS with modern frontend libraries such as jQuery and Bootstrap, ensuring good mobile responsiveness and accessibility. It employs a robust cookie consent mechanism that blocks analytics scripts until user consent is given, demonstrating strong privacy compliance. Hosting is managed via INWX, a reputable provider, and the site uses HTTPS with anonymized IP tracking for analytics. From a security perspective, the site shows good practices including consent-based tracking, anonymization, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and a published security or incident response policy, which could be improved. The domain registration is consistent with the official nature of the site, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its educational and governmental mission effectively. Strategic improvements in security policy transparency and header implementation would further strengthen its posture.

GHH-BONATRANS is a leading global manufacturer specializing in wheelsets, wheels, axles, and related components for rolling stock including high-speed trains, metros, trams, locomotives, and freight wagons. The company serves over 80 countries worldwide and is recognized for its technological innovation, comprehensive product portfolio, and commitment to quality and customer service. The website reflects a mature business with a professional online presence, showcasing news, certifications, and career opportunities. Technically, the website employs a modern but somewhat dated technology stack including jQuery, Bootstrap, and Font Awesome, with integrations for Google Analytics, reCAPTCHA, and social sharing tools. The site is mobile optimized and provides a good user experience with clear navigation and structured content. However, some improvements could be made in accessibility and security headers to enhance overall robustness. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. The presence of Google reCAPTCHA on forms adds protection against automated abuse. No critical vulnerabilities or exposed sensitive data were detected, but the absence of explicit security headers and incident response information suggests room for improvement in security posture. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to strengthen trust and compliance.

B

BusinessPilot GmbH

bmwi-wegweiser.de

61

The Gründerplattform, operated by BusinessPilot GmbH, is a well-established German government-supported online platform providing comprehensive guidance and resources for entrepreneurs and startups. It offers detailed information on relevant authorities, legal forms, financing, and business planning, positioning itself as a key resource for new business founders in Germany. The platform enjoys strong market positioning supported by reputable partners such as KfW Bankengruppe and has a high level of user trust as evidenced by positive user ratings. Technically, the website leverages modern JavaScript libraries, Apache Wicket framework, and Cloudflare services to ensure performance and security. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, secure, and compliant with GDPR, making it a reliable resource for its target audience.

R

ReeGO Development s.r.o.

reego.cz

58

ReeGO Development s.r.o. is a Czech-based software development company specializing in application programming, web creation, and digital solutions. Their website highlights services such as real estate systems, web presentations, smart home technologies, and global real estate databases, positioning them as a niche technology provider in the Czech market. The company targets businesses and organizations seeking tailored digital services and smart technology management. Technically, the website employs modern JavaScript frameworks including Vue.js and jQuery, integrates Google Analytics and Tag Manager for tracking, and uses a custom CMS platform. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident in meta tags and structured navigation. Security-wise, the site uses HTTPS and includes Google reCAPTCHA for form protection, but lacks visible security headers and published security policies, which could be improved. The absence of WHOIS data limits domain legitimacy verification, but the professional presentation and consistent branding support moderate trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to strengthen compliance and user trust.

Schmetterlingspark Klütz is a small regional butterfly park located in Germany, offering visitors a tropical flight hall experience with a variety of live butterflies and related attractions. The website presents clear information about opening hours, ticketing, and contact details, targeting tourists and families interested in nature and leisure activities. The technical infrastructure is based on a 1&1 IONOS CMS platform with modern JavaScript libraries and analytics integration, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations.

Staatliche Schlösser und Gärten M-V is an official government entity managing historic castles, gardens, and cultural heritage sites in Mecklenburg-Vorpommern, Germany. The website serves as a portal for visitors and tourists to explore events, tours, and digital museum experiences. It targets a broad audience including families, cultural tourists, and B2B tourism groups. The organization holds a strong market position as the official state institution for cultural heritage in the region. Technically, the website is built on WordPress 6.4.1 with a modern tech stack including jQuery, Swiper.js for sliders, Matomo for analytics, and Google reCAPTCHA v3 for form security. The site is hosted likely by mvnet.de, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms for GDPR compliance. Mobile optimization and navigation are good, though accessibility could be improved. Security posture is solid with HTTPS, reCAPTCHA, and privacy-focused analytics, but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through a privacy policy and cookie banner, but terms of service and vulnerability disclosure are absent. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's mission to promote cultural heritage and tourism. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

P

Pro-bio Liga

lovime.bio

43

Lovime.bio is a Czech-based organization operating since at least 2018, focused on providing information, news, and community engagement related to organic farming, bio food, and ecological agriculture. The organization offers workshops, guided food walks, consultations, farm excursions, and educational programs, positioning itself as a niche non-profit or advocacy entity within the organic food sector in the Czech Republic. The website is professionally designed with consistent branding and clear navigation, targeting consumers interested in organic and ecological food. Technically, the site runs on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, showing moderate digital maturity and good mobile optimization. Security posture is solid with HTTPS enforced, though lacking some security headers and cookie consent mechanisms. WHOIS data is malformed and unavailable, which slightly reduces trust but the website's content and partner ecosystem support its legitimacy. Overall, the site is a credible and well-maintained resource for organic food information in its region.

K

Kitl s.r.o.

kitl.cz

42

Kitl s.r.o. is a Czech family-owned company founded in 2007 specializing in the production and retail of natural herbal and fruit syrups, mead, and mineral waters. The company emphasizes the use of organic and environmentally friendly raw materials. The website presents a professional e-commerce platform with a clear product catalog and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook Pixel, with HTTPS enforced for secure communications. However, the absence of WHOIS data and registrant information reduces domain trustworthiness. Privacy and cookie policies are not clearly presented, which may impact compliance with GDPR regulations. Overall, the site is well-designed and functional, targeting general consumers interested in natural health products.

L

Latvijas Pašvaldību savienība

lps.lv

46

Latvijas Pašvaldību savienība (LPS) is a key Latvian non-profit association representing local governments. The website serves as an information hub providing news, committee details, international cooperation, projects, and resources for municipalities and public sector stakeholders. It targets municipal officials and Latvian citizens interested in local governance. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and social media channels. Technically, it uses modern web technologies including jQuery, Google reCAPTCHA, Google Analytics, and Google Custom Search, ensuring a moderate to good performance and mobile optimization. Security posture is strong with HTTPS and bot protection, though lacks some security headers and published policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the domain and WHOIS data align well with the organization's legitimacy and business purpose.

V

Vegane Gesellschaft Österreich

vegan.at

54

Vegane Gesellschaft Österreich is a well-established non-profit organization dedicated to promoting vegan and plant-based nutrition in Austria. The website serves as an educational and community platform offering resources such as events, recipes, nutritional information, and advocacy tools. It holds a strong market position as a leading vegan society in Austria with a consistent brand presence and active social media engagement. Technically, the site is built on Drupal 7 with modern JavaScript libraries and analytics tools like Matomo and Google Tag Manager, reflecting a mature digital infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks some advanced security headers and explicit incident response information. Overall, the site demonstrates a high level of trustworthiness and compliance with GDPR, making it a credible and safe resource for its audience.

H

Hansel Oy

hansel.fi

75

Hansel Oy is a Finnish government-owned company specializing in centralized public procurement services. The website serves as an official portal for public sector organizations in Finland to access procurement frameworks and related services. The company holds a strong market position as a key government procurement facilitator, focusing on efficiency and compliance. The website content is professionally presented, targeting public sector entities with clear information about services and privacy practices. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates consent management via Cookiebot, and uses analytics tools like Hotjar and Piwik Pro. The security posture is robust with HTTPS enforcement, security headers, and monitoring via Sentry, although some legacy libraries like jQuery 2.2.4 could be updated. Privacy compliance is well addressed with a comprehensive privacy policy and explicit cookie consent mechanisms. Overall, the site is trustworthy, secure, and well-aligned with its government service mission.

V

Vermoont s.r.o.

mojehradiste.cz

40

MojeHradiště.cz is a municipal portal serving the residents of Mnichovo Hradiště, Czech Republic. It functions primarily as an online gateway providing links to various official municipal services, including citizen portals, reservation systems, financial transparency tools, and local event information. The portal is operated by Vermoont s.r.o. and was established in 2020, aligning with the domain registration date. The website targets local citizens seeking convenient access to municipal resources and information. Technically, the website employs a modest technology stack including jQuery and Modernizr, with Google Analytics for visitor tracking. The site is hosted under a Czech registrar (REG-WEDOS) and uses HTTPS, although explicit SSL configuration details and security headers are not evident from the HTML content. The site demonstrates good mobile optimization and a clear, consistent design, but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the portal shows basic adherence to best practices, such as HTTPS usage and absence of visible vulnerable forms on the homepage. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, and no contact information is provided for security or general inquiries. The site’s content is safe, non-adult, and appropriate for a general audience. Overall, the website is a functional and trustworthy municipal information portal with room for improvement in privacy compliance, security hardening, and user contact transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

D

Divadlo Andreja Bagara Nitra

dab.sk

61

Divadlo Andreja Bagara Nitra is a well-established cultural theatre organization based in Nitra, Slovakia, offering a variety of theatrical performances and related cultural services. The website reflects a professional and consistent brand presence, targeting a general audience interested in theatre and cultural events. The business model is that of a non-profit cultural institution with a medium-sized operational scale. Technically, the website uses a modern CMS (Winston CMS), integrates common libraries such as jQuery, and employs Google Analytics and Facebook SDK for analytics and social engagement. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but could improve by adding more explicit security headers and incident response information. Overall, the site is trustworthy, compliant with GDPR, and free from blocking or WAF interference.

S

SolidComponents

solidcomponents.com

58

SolidComponents is a well-established B2B platform specializing in the distribution and cataloging of industrial components such as fasteners, springs, bearings, and electronics. Founded in 1999 and based in Sweden, the company provides engineers and procurement professionals with access to a comprehensive digital catalog, including CAD model downloads and supplier information. The website demonstrates a mature digital infrastructure with a variety of JavaScript libraries and custom tools to enhance user experience, including 3D viewers and configurators. While the platform uses HTTPS and has a privacy policy, it lacks visible cookie consent mechanisms and some security headers, which are areas for improvement. The domain registration details are consistent with the business claims, indicating legitimacy and trustworthiness.

S

Startlapjátékok

startlapjatekok.hu

52

Startlapjátékok is a Hungarian online gaming portal offering a wide variety of free online games across multiple categories such as logic, browser, strategy, mahjong, skill, shooting, car, sports, and football games. The website targets a general audience interested in casual online gaming and has been operating for over 10 years, establishing a solid market presence in Hungary. The business model is primarily advertising-supported, leveraging multiple ad networks and retargeting services to monetize the platform. The site features comprehensive privacy and cookie policies compliant with GDPR, and integrates consent management mechanisms to ensure user privacy. Technically, the site uses a mix of JavaScript libraries including jQuery, Google Tag Manager, Facebook Pixel, and analytics services like Gemius and Smartlook, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and some security best practices observed, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, user-friendly, and trustworthy, with no signs of adult or unsafe content.

C

Crohn en Colitis NL

crohn-colitis.nl

59

Crohn en Colitis NL is a Dutch non-profit association dedicated to supporting approximately 90,000 people in the Netherlands affected by Crohn's disease, colitis ulcerosa, or short bowel syndrome. The organization provides patient support, information, and community engagement, positioning itself as a leading healthcare association in its niche. The website is built on WordPress using the FoundationPress theme and integrates modern tracking and consent technologies such as Google Analytics, Google Tag Manager, and Cookiebot. The technical infrastructure is solid with HTTPS enforced and Cloudflare services providing bot protection and performance enhancements. Security posture is strong with appropriate headers and no visible vulnerabilities, although the use of an outdated jQuery version presents a minor risk. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of a terms of service page and explicit security policy or incident response contact information are areas for improvement. Overall, the website is professional, trustworthy, and well-suited for its target audience.

W

World Architecture News

worldarchitecturenews.com

68

World Architecture News operates as a specialized media platform delivering architecture and design news, project showcases, and industry awards globally. The website targets architects, designers, and industry professionals, providing sector-specific content across transport, residential, commercial, healthcare, education, and humanitarian projects. The platform maintains a moderate market position within the architecture media niche, leveraging partnerships with related awards sites to enhance its offerings. Technically, the site employs a mix of legacy and modern technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and New Relic for performance monitoring. The site is mobile optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. WHOIS data is unavailable, which reduces trustworthiness but the site content and external references suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

S

Sandhills Global

sandhillscloud.com

58

Sandhills Global operates a comprehensive multi-brand digital platform serving various industry-specific marketplaces primarily in transportation and technology sectors. The website analyzed is a secure login portal providing unified access to over 50 brands, including well-known names such as AuctionTime, TractorHouse, and MachineryTrader. The platform targets industry professionals and customers requiring streamlined access to multiple services under one account. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA to ensure security and user tracking. The use of HTTPS and anti-CSRF tokens indicates a strong baseline security posture, although some security headers are missing. Privacy and cookie policies are clearly linked, demonstrating compliance awareness, though a cookie consent mechanism is absent. Overall, the site is professional, secure, and trustworthy with minor areas for improvement in security headers and privacy mechanisms.

Y

Yapaka

yapaka.be

55

Yapaka is a well-established Belgian government-initiated non-profit program focused on the prevention of child maltreatment. The website serves parents, children, adolescents, and professionals by providing educational content, campaigns, and support resources. It holds a strong market position within the Wallonie-Bruxelles region and benefits from governmental backing. Technically, the site is built on Drupal 7 with common web libraries and frameworks, hosted by Etnic, and uses HTTPS with cookie consent and CAPTCHA for security and privacy. However, the use of an outdated CMS and lack of modern security headers present some risks. The site is content-rich, professionally designed, and trustworthy, with moderate user tracking via Google Analytics and Matomo. No explicit privacy or security policies are found on-site, but a privacy/legal link to the Federation Wallonie-Bruxelles portal is provided.

E

English Football League

efl.com

64

The English Football League website serves as the official digital presence for the English Football League, providing news, media content, and league information to football fans and stakeholders. The site demonstrates a professional design with consistent branding and a focus on delivering relevant sports content. Technically, the site employs modern web technologies including Nuxt.js, jQuery, Video.js, and Google reCAPTCHA, indicating a mature digital infrastructure. Analytics are handled via Fathom Analytics, and advertising is integrated through Adition and Google Ads. Security posture is adequate with HTTPS enforced and bot protection mechanisms in place, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is notably absent or unregistered under the queried domain, which raises concerns about domain registration legitimacy despite the professional site appearance. Overall, the site is functional and trustworthy from a user perspective but would benefit from enhanced transparency and security best practices.

L

如梭加速器 官方网站

loicaubert.com

41

The website loicaubert.com presents a VPN service branded as 如梭加速器, targeting Chinese-speaking users seeking stable and fast scientific internet access. It offers AI-based intelligent connection technology and global server deployment to ensure uninterrupted VPN service. The site provides software downloads for Windows, Mac, and Android platforms, with user testimonials and a high aggregate rating displayed. However, the domain is very recently registered, which contrasts with the claim of a 10-year brand history, raising questions about longevity and trust. Technically, the site uses common web technologies such as Bootstrap, jQuery, and Modernizr, with moderate performance and good mobile optimization. The hosting registrar is GoDaddy.com, LLC. There is no evidence of a CMS or advanced frameworks. SEO and accessibility are basic but functional. Tracking scripts from Baidu Analytics and ysponge.com are present, indicating moderate user tracking. From a security perspective, the site lacks visible security headers, DNSSEC is not enabled, and no HTTPS or SSL configuration details are provided in the data. There are no published privacy, cookie, or terms of service policies, nor incident response or vulnerability disclosure information. Contact information such as emails or phone numbers is absent, limiting user trust and compliance with privacy regulations. Overall, the site is accessible and functional but has significant gaps in security posture and privacy compliance. The recent domain age and lack of transparency on policies and contact details reduce business credibility. Strategic improvements in security, compliance, and transparency are recommended to enhance trust and user confidence.

M

European Economic Area - Shop Online at Alaska Mileage Plan Shopping

mileageplanshopping.com

60

The website www.mileageplanshopping.com appears to serve as a portal related to Alaska Mileage Plan Shopping, specifically targeting users in the European Economic Area with a GDPR residency prompt. The content is minimal, lacking substantive business information, contact details, or user engagement features. The technical infrastructure relies on common JavaScript libraries such as jQuery and RequireJS, with static assets served via Fastly CDN. However, the site lacks visible security headers, privacy policies, and cookie consent mechanisms, indicating a low level of compliance and security maturity. The WHOIS data is unavailable, suggesting the domain may be unregistered or very recently registered, which raises concerns about legitimacy and trustworthiness. Overall, the site presents a basic, low-content presence with limited business or security assurances.

J

Лучшее порно японки с миниатюрными азиатками

japansexfuck.com

37

The website japansexfuck.com is an adult entertainment platform specializing in Japanese and Asian pornographic videos, primarily targeting a Russian-speaking adult audience. It offers free streaming of explicit sexual content with a focus on Japanese women and miniature Asian girls. The business model relies on advertising revenue, as evidenced by multiple third-party ad scripts embedded in the site. The domain is newly registered in late 2023, consistent with a recently launched adult content site. Technically, the site uses standard web technologies including HTML5, CSS3, and jQuery 2.2.4, with asynchronous loading of advertising scripts to optimize performance. The site is mobile responsive and provides basic SEO metadata, but lacks advanced accessibility features and security headers. Hosting and DNS are managed via Dynadot8 LLC and their DNS servers, with no DNSSEC enabled. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no privacy or cookie policy, nor any contact information for security incidents or general inquiries, which poses compliance and trust risks. The WHOIS data is public and consistent with the domain's purpose, but the lack of registrant details reduces trustworthiness. Overall, the site functions as a niche adult content provider with basic technical implementation but significant gaps in privacy, security, and business transparency. These gaps expose the site to potential compliance issues and reduce user trust. Strategic improvements in security policies, privacy disclosures, and contact transparency are recommended to enhance credibility and compliance.

D

Danesco Trading Ltd.

lustfulmature.net

59

Lustfulmature.net is an adult entertainment website specializing in free streaming of mature and MILF pornographic videos aggregated from numerous third-party adult tube sites. The business operates primarily through advertising revenue and affiliate marketing, targeting an adult-only audience interested in explicit mature content. The website has been active since 2011, registered under Danesco Trading Ltd., indicating a stable domain history consistent with its business model. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Cloudflare DNS for performance and security. However, the site lacks advanced security headers and DNSSEC, and does not provide privacy or cookie policies, which are critical for compliance and user trust. Security posture is basic with no visible incident response or data protection officer contacts. The site content is clearly adult and NSFW, with no age verification or consent mechanisms, which may pose compliance risks in certain jurisdictions. Overall, the site functions as a niche adult content aggregator with moderate technical maturity but weak privacy and security compliance.

M

XXX TUBE Clips | HD Mature Videos

maturesxvids.com

55

Maturesxvids.com is an adult entertainment website specializing in aggregating and linking to mature-themed pornographic videos hosted on third-party platforms. The site targets an adults-only audience interested in mature content such as MILF, granny, anal, and amateur videos. It operates primarily as a content aggregator with affiliate-style links to partner adult sites. Technically, the site uses basic web technologies including jQuery and lazy loading for images, hosted behind Cloudflare DNS services. The design and user experience are functional but basic, with limited SEO and accessibility features. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and DNSSEC. Privacy compliance is minimal with no visible privacy or cookie policies and no GDPR indicators. The site lacks direct contact information or incident response channels, relying on disclaimers and third-party hosting for content responsibility. Overall, the site is functional for its niche but requires improvements in security, privacy, and compliance to enhance trust and reduce risk.

M

Hot Mature Ladies Tubes Video - Mature Porn

matureporn6.com

55

Matureporn6.com is an adult content aggregation website specializing in mature-themed pornographic videos sourced from various third-party adult tube sites. The site operates primarily as an advertising-supported platform, providing users with categorized and searchable access to explicit video content. The business model relies on affiliate linking and ad revenue, targeting an adults-only audience interested in mature adult entertainment. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted behind Cloudflare DNS services. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enforced but missing key security headers and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. No direct contact or company information is provided, limiting business credibility. Overall, the site is functional but basic, with significant room for improvement in security, privacy, and transparency.

T

Try Mama - Exciting Moms Porn

trymama.com

57

Trymama.com is an adult entertainment website specializing in mature and mom-themed pornographic video content aggregated from third-party sources. The site operates primarily as an advertising-supported platform, providing users with free access to a wide range of explicit videos. The business model focuses on niche adult content catering to an adults-only audience interested in mature and MILF categories. The website has been operational since 2008, indicating a stable presence in its niche market. Technically, the site uses standard web technologies including jQuery and lazy loading for images, hosted under a domain registered with NameSilo and DNS managed via Cloudflare. While HTTPS is enabled, the site lacks advanced security headers and DNSSEC, which are areas for improvement. Privacy compliance is minimal, with no explicit cookie or privacy policies visible, and no consent mechanisms implemented. Contact and incident response information are absent, limiting transparency and trust. Overall, the site is functional but basic in design and security, with moderate performance and limited mobile optimization.

The website allmaturesluts.com operates as an adult content aggregator specializing in mature and MILF pornographic videos. It provides categorized thumbnails and affiliate links to third-party adult video hosting platforms. The site targets an adults-only audience with explicit content and lacks any age verification mechanisms. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript with jQuery, and lazy loading for images. DNS is managed by Cloudflare, enhancing performance and some security aspects. However, the site lacks visible security headers and does not enforce HTTPS explicitly in the provided content. Privacy and cookie policies are absent, and no contact or business information is disclosed, which reduces trust and compliance posture. Advertising is served via magsrv.com with multiple ad slots, and tracking is done through AddThis services. Overall, the site is functional but basic in design and security, with significant gaps in privacy compliance and business transparency.

M

Movies Moms - mature sex movies free xxx porn old adult sex fuck

moviesmoms.net

56

MoviesMoms.net is an adult entertainment website specializing in aggregating and providing free access to mature and MILF-themed pornographic videos. The site operates primarily as an advertising-supported platform linking to third-party adult content providers. It has been active since 2007, indicating a long-standing presence in the niche adult content market. The website's technical infrastructure includes standard web technologies such as HTML5, CSS, JavaScript, and jQuery, with DNS services provided by Cloudflare. While HTTPS is enabled, the site lacks advanced security headers and privacy compliance mechanisms, which are critical for user trust and regulatory adherence. No privacy policy, cookie consent, or terms of service are present, and no direct contact information or incident response channels are disclosed, which limits transparency and user support capabilities. Overall, the site presents basic technical and business maturity but requires significant improvements in privacy, security, and compliance to enhance trustworthiness and regulatory alignment.

Y

Yunitoto

artofzoo.biz

52

Yunitoto is an Indonesian online gambling platform specializing in toto and slot games, offering a secure and engaging betting experience. The website targets adult Indonesian users interested in online betting, providing various games, promotions, and customer support via live chat and social media. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Owl Carousel, and integrates multiple tracking pixels such as Facebook Pixel and Twitter Widgets. Mobile optimization is good, with responsive design and mobile-specific features. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policies, which are critical for compliance and user trust. The domain is newly registered but consistent with the business claims, with no suspicious WHOIS patterns detected. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices.