Security Directory

L

Livesport s.r.o.

flashscore.ca

65

Flashscore.ca is a leading Canadian sports media platform operated by Livesport s.r.o., specializing in live scores, news, and updates for a wide range of sports including NHL, NBA, NFL, MLB, MLS, and soccer leagues. The site targets sports fans and bettors primarily in Canada, offering extensive coverage of over 5000 competitions across 30+ sports. The business model relies heavily on advertising and affiliate marketing partnerships with major bookmakers such as bet365 and Stake.com. Technically, the website employs modern JavaScript frameworks, uses HTTPS with strong security headers, and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for performance and mobile use, with a high legitimacy score despite the absence of WHOIS domain registration details due to privacy protection.

L

Livesport s.r.o.

flashscore.info

60

Flashscore.info is a large-scale sports media website specializing in providing live football scores, results, and standings from over 1000 football leagues worldwide. The site targets football fans globally, offering real-time updates and comprehensive coverage of major leagues such as EPL, La Liga, Serie A, and international tournaments. The business model primarily revolves around advertising revenue and sports data services, positioning itself as a leading live sports score provider. The website is branded under Livesport s.r.o., a recognized entity in the sports media sector since at least 2017. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics and marketing, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, with good content relevance and navigation clarity. However, some technical improvements could be made, such as adding explicit security headers and enhancing accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting good baseline security practices. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of explicit privacy policies, terms of service, and contact information for security incidents represents an area for improvement to enhance compliance and user trust. Overall, Flashscore.info presents a professional and trustworthy platform for sports fans, with a solid technical foundation and good security posture. Strategic enhancements in privacy transparency and security communication would further strengthen its risk profile and compliance standing.

L

Livesport s.r.o.

flashscore.co.uk

62

Flashscore.co.uk is a regional variant of the global Flashscore sports live score and news platform operated by Livesport s.r.o., a Czech-based media company founded in 2006. The website provides real-time football scores, results, and news coverage for over 1000 football leagues worldwide, targeting football fans and sports bettors primarily in the UK. The business model relies heavily on advertising and affiliate marketing partnerships with bookmakers such as bet365, BetMGM, and Betway. The site demonstrates a strong market position as a leading live sports score provider with extensive global coverage and a professional digital presence. Technically, the website employs modern JavaScript frameworks, SVG graphics, and integrates third-party services like Google Tag Manager, Optimizely for A/B testing, and OneTrust for cookie consent management. The site is mobile-optimized and SEO-friendly, with good content quality and navigation clarity. However, some accessibility features could be improved. The domain www.flashscore.co.uk itself is not independently registered per Nominet UK rules, indicating it is likely a subdomain or alias of the main flashscore.com domain. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no visible privacy policy or terms of service on the main page, which is a compliance gap. Overall, the security posture is moderate but could be enhanced by implementing recommended headers and publishing clear policies. The overall risk assessment is moderate with a legitimacy score affected by the lack of WHOIS data for the .co.uk domain and missing privacy documentation. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and providing incident response contacts to improve trust and compliance.

M

McDonald's Slovakia spol. s.r.o.

mcdonalds.sk

70

McDonald's Slovakia spol. s.r.o. operates the official McDonald's website for Slovakia, providing information on menu offerings, promotions, and services such as McDelivery and a mobile app with coupons. The website targets general consumers in Slovakia and maintains a strong brand presence consistent with the global McDonald's identity. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a large retail and hospitality business.

S

Supabase

supabase.in

69

Supabase is a technology company providing a comprehensive Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The platform is positioned as a leading open-source alternative in the backend-as-a-service market, with a strong developer focus and growing adoption by notable companies. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and demonstrates excellent performance and mobile optimization. Security posture is good with HTTPS enforced and domain protections in place, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but should enhance transparency around privacy and security to improve compliance and user trust.

G

Gaijin Games Kft.

warthunder.com

64

War Thunder is a well-established online multiplayer combat game developed by Gaijin Network Ltd., targeting gamers interested in realistic military vehicle simulations. The website demonstrates a mature digital presence with comprehensive content, strong branding, and multi-platform support including PC, consoles, and mobile. The technical infrastructure leverages modern web technologies, secure HTTPS connections, and consent management, reflecting a high level of digital maturity. Security posture is solid with HTTPS enforcement and session management, though improvements such as DNSSEC enablement and explicit security policies could enhance trust further. Overall, the site is professional, user-friendly, and trustworthy with extensive community engagement and ecommerce integration.

B

Bundesministerium der Justiz und für Verbraucherschutz

bmjv.de

72

The Bundesministerium der Justiz und für Verbraucherschutz (Federal Ministry of Justice and Consumer Protection) operates an official German government website providing comprehensive legal and consumer protection information. The site targets citizens, legal professionals, and government entities, offering extensive resources on legislation, justice digitalization, and consumer rights. The website is well-branded, consistent, and professionally maintained, reflecting its authoritative role in the German government. Technically, the site is built on the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and SVG graphics, and is hosted on DNS servers associated with 123ns.eu and 123ns.de. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No major third-party analytics or advertising scripts were detected, indicating a privacy-conscious approach. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, suggesting areas for improvement. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is trustworthy, safe, and compliant with GDPR, serving as a reliable source of legal and consumer information for the German public. Strategic recommendations include enhancing security transparency, publishing incident response details, and implementing security.txt for vulnerability reporting.

R

Riegele Wirtshaus

riegele-wirtshaus.de

44

Riegele Wirtshaus is a Bavarian restaurant and brewery guesthouse located in Augsburg, Germany, offering traditional Bavarian cuisine and a variety of Riegele beers. The website presents a professional and well-structured digital presence with clear business information, event listings, and reservation options. The technical infrastructure is based on WordPress CMS hosted on Hetzner servers, utilizing modern web technologies and SEO frameworks to optimize visibility and user experience. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though improvements are recommended in security headers and privacy compliance. Overall, the website reflects a trustworthy and credible hospitality business with a focus on local culture and customer engagement.

A

Augsburg Marketing

augsburg-marketing.de

41

Augsburg Marketing is a local city marketing organization focused on supporting the development and promotion of Augsburg through strategic initiatives encompassing retail development, events, and cultural marketing. The organization targets local residents, businesses, event organizers, and tourists, positioning itself as a key promoter of Augsburg's attractiveness and economic vitality. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses modern web technologies including Matomo for privacy-conscious analytics, asynchronous JavaScript loading, and SVG graphics. Hosting is provided by Schlund Technologies, a reputable provider. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed in the HTML content and no dedicated security or incident response policies are published. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, Augsburg Marketing's website presents a low-risk profile with solid privacy and security practices appropriate for a government/non-profit entity. Strategic recommendations include enhancing security headers, publishing terms of service and security policies, and improving accessibility to further strengthen trust and compliance.

A

Augsburg Marketing GmbH

augsburger-stadtsommer.de

37

The Augsburger Stadtsommer website serves as a comprehensive event promotion platform for the city of Augsburg's summer cultural activities. It is managed by Augsburg Marketing GmbH, a local marketing entity focused on promoting city events and tourism. The site offers detailed program schedules, event descriptions, partner information, and ticketing links, targeting residents and visitors interested in cultural and leisure activities during the summer season. The content is well-organized, primarily in German, and includes social media integration and partner endorsements. Technically, the website employs modern web technologies including asynchronous JavaScript, CSS, SVG graphics, and Matomo analytics configured with cookie disabling by default to respect user privacy. Hosting is provided by Schlund Technologies, a professional hosting provider. The site is mobile-optimized with good navigation and user experience, though accessibility features could be enhanced. SEO is basic but sufficient for the target audience. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a GDPR-compliant cookie consent mechanism. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy policies are comprehensive and linked externally to the parent marketing company’s domain. Overall, the website presents a low-risk profile with a solid business credibility and privacy compliance posture. Strategic improvements could include adding security headers, enhancing accessibility, and publishing explicit security and incident response policies to further strengthen trust and compliance.

HUNDSANS Hundeschule is a small, locally focused dog training school and retail shop operating in the Inntal, Rosenheim, Kufstein, and Tirol regions. The business emphasizes gentle, violence-free dog training methods and offers a variety of services including individual and group training, social dog walks, and nose work activities. Their online presence includes a professional website with integrated booking and e-commerce capabilities, supported by modern web technologies and CDN hosting. The company maintains active social media channels and provides clear contact information, enhancing customer trust and engagement. Technically, the website is well-structured, mobile-optimized, and uses HTTPS with a good security posture, although explicit security headers could be improved. Privacy compliance is evident through cookie consent and a privacy policy, aligning with GDPR requirements. Overall, the website and business present a trustworthy, professional image with a focus on customer service and quality content.

A

Augsburg Marketing

augsburg-city.de

38

Augsburg City is a well-established city marketing platform operated by Augsburg Marketing, focusing on promoting shopping, cultural events, leisure activities, and tourism in Augsburg, Germany. The website serves as a comprehensive guide for residents and visitors, offering event calendars, shopping tips, and city vouchers. It maintains a strong market position as a key local resource for city-related information and promotion. Technically, the website uses modern web technologies including JavaScript, SVG graphics, and Matomo analytics for privacy-conscious user tracking. Hosting is provided by Schlund Technologies, and the site demonstrates good mobile optimization, accessibility, and SEO practices. The site is fully accessible without any WAF or security challenges. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks publicly visible security policies or incident response contacts, which could be improved. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the website's purpose and location, indicating legitimacy. Overall, Augsburg City presents a professional, trustworthy, and user-friendly online presence with strong compliance to privacy regulations. Strategic improvements in security transparency and incident response readiness would further enhance its security posture.

F

Fotograf Tim Kurzweg

fotografpassau.de

41

Fotograf Passau, operated by Tim Kurzweg, is a local photography business specializing in weddings, portraits, events, advertising, drone photography, and graphic design services primarily serving Passau and the Niederbayern region in Germany. The website presents a professional portfolio with clear service offerings, contact options, and partner references, positioning the business as a trusted local provider. The technical infrastructure is based on WordPress with performance optimizations via WP Rocket and uses common web technologies including jQuery and Swiper.js. Hosting is provided by kasserver.com, a known hosting provider. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but the use of an outdated jQuery version and lack of security headers present moderate risks. Privacy compliance is partial, with a privacy policy likely embedded in the Impressum page but no explicit cookie consent mechanism. Overall, the website is accessible, well-structured, and trustworthy, though improvements in security and privacy practices are recommended.

W

Welcome Hotels GHG Beteiligungsgesellschaft mbH

welcome-hotels.com

55

Welcome Hotels GHG Beteiligungsgesellschaft mbH operates a network of 14 hotels across Germany, offering accommodation, wellness, and event hosting services. The company emphasizes sustainability, demonstrated by its GreenSign certification, and targets a broad audience including tourists, business travelers, and event organizers. The website is professionally designed, mobile-optimized, and provides comprehensive information about hotel locations, amenities, and special offers. Technically, the site uses modern JavaScript libraries and integrates cookie consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and trust indicators.

L

Literatur Rheinland

literatur-rheinland.de

49

Literatur Rheinland is a cultural network platform dedicated to connecting literary institutions, initiatives, and actors within the Rheinland region of Germany. It promotes literary events, publishes a magazine, and offers a literature map highlighting regional literary figures and institutions. The website is built on Drupal 10, featuring modern web technologies and responsive design, ensuring good user experience and accessibility. Social media integration with Facebook, Instagram, and YouTube supports community engagement. Privacy compliance is addressed with a cookie consent banner and a privacy policy in German. Security posture is adequate with HTTPS and cookie management, though some security headers and explicit policies could be improved. Overall, the site serves as a trusted regional literary hub with good content quality and professional presentation.

Z

ZURB, Inc.

zurb.com

70

ZURB, Inc. is an established design consultancy founded in 1999, specializing in strategic marketing, branding, and user experience design. The company serves a diverse clientele ranging from startups to large enterprises, offering services such as growth design, design systems, experience design, product innovation, and mobile/web app development. Their market position is strong, supported by notable client logos and a consistent brand presence. Technically, the website is well-built using modern frameworks like Foundation, with Cloudflare DNS and CDN services enhancing performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with integrated analytics tools such as Google Analytics and Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business with a high level of digital maturity.

H

Hilfetelefon Gewalt an Männern

maennerhilfetelefon.de

66

Hilfetelefon Gewalt an Männern is a German government-supported non-profit organization providing confidential counseling and support services to men who have experienced various forms of violence. The website offers multiple contact channels including telephone, chat, and email, with clear accessibility and privacy features. It is well-branded and professionally designed, targeting men in need of help across Germany. The site is multilingual and includes government funding acknowledgments from several German federal states. Technically, the website is built on Drupal CMS, uses Matomo for privacy-conscious analytics, and incorporates modern web technologies including responsive design and accessibility enhancements. The site is served over HTTPS with no detected blocking or WAF interference, ensuring secure and reliable access. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks publicly visible security policies or incident response contacts. No vulnerabilities or suspicious external links were detected. Privacy compliance is strong with GDPR-aligned cookie management and anonymous counseling options. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a government-backed support service. Strategic improvements could include publishing a dedicated security policy, incident response information, and vulnerability disclosure details to further enhance trust and security posture.

S

Stadt Bad Homburg v. d. Höhe

bad-homburg.de

62

The website www.bad-homburg.de is the official online presence of the city Bad Homburg v. d. Höhe in Germany, serving as a municipal government portal. It provides residents and visitors with access to city information, online services, economic support, event calendars, and digital administration resources. The site is well-branded with consistent city logos and uses modern web technologies including Tailwind CSS and SVG graphics. The technical infrastructure leverages Cloudflare for DNS and likely CDN services, enhancing performance and security. Matomo analytics is employed, reflecting a privacy-conscious approach to user tracking. Security posture is solid with HTTPS enforced, though explicit security headers are not detected in the provided data. Privacy and cookie policies are not evident in the analyzed content, indicating an area for improvement in compliance and transparency. Contact information and incident response details are also not found, which could impact user trust and support. Overall, the site is professional, accessible, and trustworthy, suitable for its government service role.

A

Abfallwirtschaftsbetrieb des Landkreises Augsburg

awb-landkreis-augsburg.de

46

The Abfallwirtschaftsbetrieb des Landkreises Augsburg operates as the official waste management authority for the Landkreis Augsburg region in Germany. The website serves as a comprehensive portal providing residents and businesses with detailed information on waste disposal, recycling services, collection schedules, and environmental advice. It also offers a citizen portal for managing waste-related services, reflecting a public service business model focused on environmental sustainability and community support. Technically, the website is built on the Joomla CMS platform, enhanced with modern front-end libraries such as Flickity for carousels and Usercentrics for cookie consent management. The site demonstrates good mobile optimization, clear navigation, and SEO best practices including structured data markup. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and implements CSRF tokens and a consent management platform, indicating a solid baseline security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. It effectively supports its public service mission with clear contact information and transparent communication. Strategic improvements in security headers, accessibility, and policy disclosures would further enhance its security and compliance stature.

K

kaleidos:code GmbH

getdoyo.app

55

doyo is a German-based interactive city tour app developed by kaleidos:code GmbH, offering engaging and gamified city exploration experiences using augmented reality, quizzes, and professional audio narration. The website is well-designed, mobile-optimized, and provides clear navigation and content relevant to tourists and families interested in discovering cities independently. Technically, the site leverages modern web technologies including Webflow CMS, jQuery, Google Tag Manager, and Plausible Analytics, hosted on Amazon CloudFront, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance including cookie consent mechanisms. No critical vulnerabilities or privacy issues were detected. Overall, the site demonstrates a mature digital presence with high trustworthiness and professionalism.

V

Vestische Pioniere

vestische-pioniere.de

46

Vestische Pioniere is a regional initiative based in Germany that honors companies in the Kreis Recklinghausen area for their commitment to ecological and social sustainability. Supported by local government and financial institutions, it operates as a non-profit award platform promoting responsible business practices. The website is well-designed, mobile-optimized, and provides clear information about the award, jury, criteria, and participation process. Technically, the site uses modern frontend frameworks like Vue.js combined with a WordPress backend, and employs Matomo analytics for privacy-conscious visitor tracking. Security measures include HTTPS enforcement and CSRF protection cookies, alongside a comprehensive cookie consent mechanism. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, the site presents a professional and trustworthy digital presence for a small regional non-profit initiative.

S

Shell Slovensko

shell.sk

71

Shell Slovensko operates a comprehensive digital platform focused on providing fuel retail, electric vehicle charging, and loyalty services to consumers and corporate clients in Slovakia. The website reflects a strong market position as a leading energy provider with a well-established brand and a broad service portfolio including Shell ClubSmart loyalty program, Shell Café, and corporate fuel cards. The site is professionally designed, localized in Slovak language, and targets both individual customers and business clients.

L

Lehner Lifttechnik GmbH

lehner-lifttechnik.at

46

Lehner Lifttechnik GmbH is a family-run Austrian company specializing in the design and manufacture of accessibility lifts including stairlifts, platform lifts, vertical platform lifts, and special lifts. With over 30 years of experience, the company focuses on enabling independent living for mobility-challenged individuals by providing safe, reliable, and innovative lifting solutions. Their market position is supported by a comprehensive product range and international presence. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Adobe Typekit fonts. The site is well-structured, mobile-optimized, and uses HTTPS to secure communications. However, explicit privacy and cookie policies are not clearly found, indicating room for improvement in compliance. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but is common for privacy-protected domains. Overall, the website presents a professional and trustworthy front with clear contact information and social media presence. Strategic recommendations include enhancing privacy compliance, implementing security headers, and improving WHOIS transparency to strengthen trust and security posture.

DVGW Deutscher Verein des Gas- und Wasserfaches e.V. is a well-established, independent association focused on providing reliable, technically sound, and safe gas and water supply standards and services. With a history spanning over 165 years, it serves as a recognized rule setter and innovation driver in the German gas and water sectors, also engaging internationally. The organization offers a broad range of services including standardization, certification, research, vocational training, and technical consulting, targeting professionals and stakeholders in the energy and water industries. Technically, the website is built on TYPO3 CMS, hosted on Microsoft Azure infrastructure, and employs modern web technologies including SVG graphics, JavaScript libraries, and privacy-conscious analytics tools like Matomo and eTracker. The site is well-optimized for mobile devices and accessibility, with good SEO practices. Cookie consent mechanisms are implemented, reflecting attention to privacy compliance. From a security perspective, the site uses HTTPS and integrates cookie consent and privacy-respecting analytics. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found, representing areas for improvement. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns well with the organization's profile, indicating high legitimacy. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience, with a strong business credibility and technical foundation. Strategic enhancements in privacy and security transparency would further strengthen its posture.

L

Libération

liberation.fr

62

Libération is a prominent French media company delivering continuous news coverage across politics, international affairs, society, sports, environment, and sciences. The website demonstrates a mature digital presence with a professional design, clear navigation, and mobile optimization. It leverages modern web technologies including React and performance monitoring tools to ensure a quality user experience. Security posture is strong with HTTPS enforcement and consent management for tracking, though explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data limits full domain trust assessment, but the brand's reputation and content quality support legitimacy. Overall, the site is well-positioned in the French media landscape with a robust subscription and advertising business model.

DEKSOFT operates as a specialized web portal providing cloud-based computing applications tailored for the construction industry, with a focus on energy and building physics. The company primarily serves professionals in the Czech Republic and Slovakia, offering a subscription licensing model that includes a free trial period. Their product suite includes thermal analysis, acoustics, photovoltaics, and BIM-related tools, positioning them as a regional leader in construction software solutions. The website reflects a professional and consistent brand image with clear business and contact information. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The infrastructure is cloud-based, supporting multi-device access and seamless software updates. Performance and mobile optimization are good, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The use of third-party analytics and marketing scripts is transparent, though monitoring and updating these dependencies is recommended. Overall, the security posture is solid but could be enhanced with formal policies and security headers. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to improve transparency and trust. Enhancing accessibility and security headers would further strengthen the site’s security and compliance posture.

P

Private by Design, LLC

wikis.world

67

Wikis World operates as a niche Mastodon social media instance targeting wiki enthusiasts and general users interested in decentralized social networking. The platform is community-driven, emphasizing open content licensed under Creative Commons and governed by clear moderation policies. The business is small, US-based, and founded in 2022, with transparent administration and no commercial advertising, positioning itself as a trusted community hub within the fediverse. Technically, the website leverages Mastodon 4.4.1 with modern JavaScript modules and React components, hosted by masto.host in the EU. The infrastructure is adequate with moderate performance and good mobile optimization, though some accessibility and SEO features are basic. The absence of DNSSEC and security headers suggests room for security enhancements. Security posture is solid with HTTPS enforced and domain status locks, but lacks published security policies or incident response contacts. Privacy compliance is basic with a privacy policy present but no cookie consent or GDPR-specific details. No vulnerabilities or malicious indicators were detected. Overall, the website presents a trustworthy, well-maintained community platform with good business credibility and technical foundation but could improve in security hardening and privacy compliance to enhance user trust and resilience.

Z

Zuriel

zuriel.cz

59

Zuriel is a Czech Republic based retail company specializing in toys and related products, operating both a physical store in Hradec Králové and an online e-commerce platform. The website offers a wide range of toy categories, targeting parents and children, with a focus on fast delivery and competitive pricing. The business appears to be a small-sized local retailer with a consistent brand presence and good trust indicators such as social media integration and customer review badges. Technically, the website employs modern analytics and marketing technologies including Google Analytics, Facebook Pixel, Microsoft Clarity, and others, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. The site is served over HTTPS with good security practices observed, though some security headers could be improved. No WHOIS data is publicly available, indicating privacy protection which is common and justified for this business type. Overall, the website is professional, secure, and trustworthy with no signs of malicious activity or content safety concerns.

C

Comerto, s.r.o.

comerto.com

61

Comerto, s.r.o. is a Czech-based digital marketing agency specializing in web development, SEO, PPC, social media marketing, and consulting services. Established in 2011, the company serves over 600 clients with a stable team of online specialists. Their website demonstrates a professional and modern digital presence with comprehensive service offerings and client references. The company targets businesses seeking to enhance their online visibility and sales through tailored digital solutions. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel, with responsive design and good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS registration data slightly reduces trust but is likely due to privacy protection. Overall, Comerto presents a credible and professional digital marketing service provider with a strong online footprint.

3

37signals LLC

basecamp.com

65

Basecamp is a mature and reputable project management software company operated by 37signals LLC, with a strong market position serving small to medium-sized businesses globally. The company emphasizes straightforward, no-nonsense collaboration tools that replace multiple other software products, offering a comprehensive suite of project management, communication, and client collaboration features. Their business model is subscription-based SaaS, supported by a long history and a transparent, customer-focused approach. Technically, the website is well-built using modern web standards, optimized for mobile and desktop platforms, and hosted with Cloudflare DNS and registrar services. The site employs progressive web app features and uses SVG graphics and modular JavaScript. Performance and SEO are strong, with good accessibility features. The company provides multiple platform apps and extensive support resources including live classes and detailed documentation. Security posture is solid with HTTPS enforced, data backups, and transparent security policies. However, DNSSEC is not enabled, and no security.txt or explicit incident response contacts are published. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The company provides direct contact emails to founders, enhancing trust and transparency. Overall, Basecamp presents a low-risk, trustworthy profile with excellent business credibility and technical maturity. Strategic improvements could include enhanced DNS security, formal vulnerability disclosure channels, and additional security headers to further strengthen their security posture.

B

BiznisWeb s.r.o.

biznisweb.sk

60

BiznisWeb s.r.o. operates a well-established e-commerce platform focused on enabling entrepreneurs and small to medium businesses in Slovakia and neighboring regions to quickly create and manage their own online stores. The platform offers customizable templates, multi-language support, and integration capabilities, positioning itself as a reliable SaaS provider since 2003. The website demonstrates a professional digital presence with good content quality, clear navigation, and consistent branding. Technically, it employs modern JavaScript frameworks, consent-based analytics, and privacy management tools, ensuring compliance with GDPR and user privacy expectations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, business-focused, and compliant with relevant regulations, making it a credible service provider in the e-commerce domain.

Č

ČESKÉ ŠTĚRKOPÍSKY SPOL. s r.o.

ceske-sterkopisky.cz

50

ČESKÉ ŠTĚRKOPÍSKY SPOL. s r.o. is a medium-sized Czech company specializing in the mining, processing, and distribution of natural aggregates such as sand and gravel. Established in 1994, it holds a leading market position in the Czech and Slovak markets, supported by its sister company SLOVENSKÉ ŠTRKOPIESKY, s.r.o. The company emphasizes socially and ecologically responsible mining practices. Technically, the website employs modern web technologies including the Nette PHP framework, Google Maps API, and jQuery, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and explicit incident response contacts. Overall, the website is professional and trustworthy, though domain registration data is missing, which slightly reduces trust. Strategic recommendations include enhancing security headers, improving contact visibility, and verifying domain registration details.

T

THINline s.r.o.

spolehlive-servery.cz

64

Spolehlivé servery, operated by THINline s.r.o., is a Czech managed hosting provider specializing in virtual and dedicated servers tailored for demanding applications. With over 20 years of experience and a strong customer base exceeding 25,000 clients, the company offers professional server management, domain services, and expert consulting. Their market position is solid within the Czech Republic's technology sector, focusing on businesses requiring reliable and high-performance hosting solutions. The website reflects a professional and trustworthy brand with excellent content quality and user experience. Technically, the website employs modern web technologies including Google Tag Manager and Visual Website Optimizer for analytics and marketing optimization. It is well-optimized for mobile devices and accessibility, with fast performance and good SEO practices. Hosting is provided by Český hosting, a known Czech hosting provider. However, no CMS or specific frameworks were detected, indicating a custom or proprietary platform. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. There is no evidence of security headers or published security policies, incident response contacts, or vulnerability disclosure programs, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and business information mitigate concerns. Overall, the website and business demonstrate a mature hosting service with strong customer trust and technical competence. Strategic recommendations include enhancing security transparency, publishing incident response information, and improving domain registration transparency to bolster trust and compliance.

N

NAFTA

nafta.sk

64

NAFTA is a leading Slovak international company specializing in the storage and development of underground natural gas reservoirs, as well as exploration and production of hydrocarbons. It holds a significant market position as the 6th largest gas storage operator in Europe, with operations extending beyond Slovakia into the Czech Republic, Germany, Austria, and Ukraine. The company offers a range of services including gas storage, innovative development projects, and support services in the energy sector. The website reflects a mature digital presence built on Drupal 10, featuring modern technologies and a professional design that supports business stakeholders and customers. Security measures such as HTTPS and security headers are well implemented, although some privacy compliance aspects like explicit cookie consent and incident response information could be improved. Overall, NAFTA demonstrates a strong security posture and credible business representation with comprehensive contact information and transparency.

R

Robert Bosch AG

bosch.at

58

Robert Bosch AG operates a comprehensive and professionally designed website for its Austrian branch, www.bosch.at, showcasing its diversified portfolio in mobility, home, and industrial solutions. The site targets a broad audience including customers, partners, and potential employees, emphasizing innovation and sustainability. The company maintains a strong market position as a large multinational enterprise with a well-established brand. Technically, the website employs modern web technologies such as Google Tag Manager, custom web components, and optimized images, ensuring fast performance and excellent mobile responsiveness. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a mature approach to data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy could enhance trust further. Overall, the site is highly professional, trustworthy, and aligned with Bosch's global standards.

Р

Роберт Бош ЕООД

bosch.bg

61

The website www.bosch.bg represents the Bulgarian branch of the multinational technology and manufacturing company Robert Bosch GmbH. It offers a comprehensive overview of Bosch's products and services across automotive, home, and industrial sectors, targeting both consumers and business clients. The site features rich content, including news, career opportunities, and corporate responsibility information, reflecting a mature and professional digital presence. Technically, the site employs modern web technologies such as Google Tag Manager and a custom privacy consent manager, ensuring good performance, mobile optimization, and SEO compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements, making it a reliable source for Bosch's Bulgarian market audience.

R

Robert Bosch Μονοπρόσωπη Α.Ε.

bosch.gr

62

Robert Bosch Μονοπρόσωπη Α.Ε. operates as the Greek branch of the global Bosch Group, providing advanced technology and manufacturing solutions primarily in automotive, home, and industrial sectors. The website positions Bosch as a technology leader focused on improving quality of life and sustainability. The digital infrastructure is modern, leveraging responsive design, web fonts, and structured navigation, supporting a professional and accessible user experience. Security posture is strong with HTTPS and secure form practices, though some security headers and explicit incident response information are absent. Privacy compliance is good with a clear privacy policy, but cookie consent mechanisms are missing. Overall, the site reflects a mature enterprise with high trust and professionalism.

A

ATICO

atico.cz

67

ATICO is a medium-sized Czech energy company specializing in high-voltage and low-voltage electrical distribution systems, energy centers, and manufacturing of low-voltage switchboards including control systems. The company emphasizes innovation, professional approach, and over 30 years of industry experience, targeting business clients primarily in the Czech Republic and Slovakia. Their service portfolio includes consulting, manufacturing, installation, monitoring (ATICONTROL), and 24/7 maintenance services. The website is professionally designed, bilingual (Czech and English), and provides clear navigation and relevant business content. Technically, the site uses modern web technologies including Google Analytics, reCAPTCHA, and cookie consent mechanisms, ensuring compliance with GDPR and privacy standards. Security posture is strong with HTTPS and bot protection, though some security headers are not explicitly detected. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence and business information support legitimacy. No direct contact emails or phone numbers are found on the site, which could be improved for better customer engagement.

Hans-Böckler-Stiftung is a German non-profit foundation affiliated with the German Trade Union Confederation (DGB), focusing on labor participation, research funding, and scholarships. The website serves as an information portal for its institutes and services, targeting researchers, students, and labor organizations. The foundation maintains a solid market position within the non-profit sector in Germany, supported by multiple specialized research institutes. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with integration of a consent management platform (Usercentrics) and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. Security posture is moderate, with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional and trustworthy, though it could improve transparency by publishing privacy policies, terms of service, and incident response contacts.

M

Maastricht University

maastrichtuniversity.nl

69

Maastricht University is a well-established public university in the Netherlands, recognized for its international orientation and problem-based learning approach. The website reflects a mature digital presence with comprehensive educational, research, and student support content targeting prospective and current students, researchers, and academic staff. The institution holds reputable accreditations and certifications, reinforcing its market position in European higher education. Technically, the site is built on Drupal CMS, employs modern web standards, and integrates privacy and consent management tools effectively. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though incident response contact details could be more explicit. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR and other relevant regulations.

B

Bundeszentrale für politische Bildung

bpb.de

67

The Bundeszentrale für politische Bildung (bpb) is a German federal government agency dedicated to political education and civic engagement. The website serves as a comprehensive platform offering educational content, publications, events, and media resources to support citizens in understanding political processes. It targets a broad audience including the general public, educators, and students. The organization has a strong market position as an authoritative source for political education in Germany, supported by its government affiliation and long history since 1951. Technically, the website is built on the Drupal CMS with modern web technologies such as SVG graphics, JSON-LD structured data, and responsive design ensuring excellent accessibility and mobile optimization. The site performs moderately well with good SEO and accessibility features, though some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and employs some security best practices but lacks explicit security headers and a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, although a cookie consent mechanism is not evident. Overall, the website is professional, trustworthy, and well-maintained, reflecting the credibility of a government agency. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance its security posture and compliance.

B

Boys'Day

boys-day.de

53

Boys'Day is a well-established non-profit initiative in Germany focused on career orientation and life planning for boys starting from the 5th grade. The website serves as a comprehensive platform providing information, educational materials, and event coordination for boys, schools, and participating companies. It enjoys a strong market position as a nationwide recognized event with government ministry involvement and active social media presence. Technically, the website employs modern JavaScript technologies, uses Matomo for privacy-conscious analytics, and implements cookie consent mechanisms. The site is hosted via DomainControl (GoDaddy) and demonstrates good mobile optimization, accessibility, and SEO practices. The design is professional and user-friendly, supporting a positive user experience. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact page, which could be improved. No vulnerabilities or suspicious domains were detected, and the WHOIS data is consistent and transparent. Overall, Boys'Day presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include publishing explicit security policies, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.

N

NA beim BIBB

auslandsberatung-ausbildung.de

60

The website www.auslandsberatung-ausbildung.de is a professional advisory platform operated by NA beim BIBB, focusing on increasing international mobility for apprentices during vocational training. It targets employees in training companies, vocational schools, chambers, and craft associations in Germany. The site offers comprehensive information, practical examples, funding guidance, and strategic advice to facilitate foreign stays during training. Technically, the site is built on TYPO3 CMS with modern responsive design and SEO optimizations, ensuring good user experience and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. WHOIS data is consistent with a legitimate institutional domain. Overall, the site is trustworthy, well-branded, and serves a niche educational and governmental function effectively.

V

VANDERBERG MEDIA SE

zarya.cz

57

ZARY Apartments is a real estate development project based in the Czech Republic, focused on revitalizing a historic pulmonary sanatorium built in 1917 into a unique residential and wellness complex. The project includes 135 apartments, a restaurant, and a spa with therapeutic treatments targeting respiratory and musculoskeletal health. The website presents a professional and consistent brand image with clear contact information and a cookie consent mechanism, indicating a moderate level of digital maturity. Technically, the site uses modern web technologies including Bootstrap, Google Tag Manager, and cookie consent scripts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks explicit security headers and published security policies. Overall, the domain registration data aligns well with the business timeline and claims, supporting legitimacy. The site does not contain adult or questionable content and targets general audiences interested in real estate and wellness services.

F

Federal Office for Migration and Refugees

germany4ukraine.de

67

The Germany4Ukraine website is an official federal government portal managed by the Federal Office for Migration and Refugees. It provides comprehensive, multilingual information and services to support refugees from Ukraine, covering topics such as entry, residence, accommodation, healthcare, labor, integration, mobility, education, family support, and networking. The site is well-positioned as a trusted government resource with EU funding and partner institution endorsements. Technically, the site uses the Government Site Builder CMS and integrates Matomo analytics with privacy-conscious configurations. The website demonstrates good performance, accessibility, and SEO practices, with a clear and professional design optimized for mobile devices. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the site is highly trustworthy and serves its target audience effectively.

Apple's iTunes website serves as a comprehensive digital media platform offering music, movies, TV shows, podcasts, and audiobooks. As a globally recognized technology leader, Apple maintains a strong market position with a broad consumer base and a robust e-commerce model. The website reflects Apple's commitment to quality, user experience, and brand consistency. Technically, the site employs modern web technologies, optimized performance, and responsive design, ensuring accessibility across devices. Security measures are robust, including HTTPS enforcement and security headers, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital infrastructure aligned with Apple's enterprise stature.

M

METROBAU

metrobau.com

60

METROBAU is a Czech Republic-based real estate development and construction company specializing in sustainable residential projects with a focus on quality, environmental harmony, and BREEAM certification. The company offers services including building construction, property management, and architectural design through partnerships. The website presents a professional image with detailed project portfolios and comprehensive contact information, positioning METROBAU as a credible medium-sized player in the regional real estate market. Technically, the website uses modern web technologies, Google Tag Manager for analytics, and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is partial due to missing privacy policy and terms of service pages. Overall, the website is trustworthy and safe with room for improvement in compliance and security transparency.

J

jenreality.cz

jenreality.cz

57

jenreality.cz is a Czech real estate portal offering free property listings for owners and real estate agencies. It provides a comprehensive directory of real estate agencies, private advertisement insertion, and additional services such as a real estate blog and property monitoring. The website targets property owners, agencies, and private advertisers primarily within the Czech Republic and abroad. The portal appears to be well-established with a medium-sized market presence in the Czech real estate sector. Technically, the website uses a custom CMS with modern JavaScript, SVG graphics, and integrates third-party services such as Facebook Pixel, Google Analytics, and Seznam Map API. The site is mobile optimized with good SEO practices and a moderate performance profile. Privacy and cookie policies are comprehensive and GDPR compliant, indicating a mature approach to data protection. Security-wise, the site enforces HTTPS and uses asynchronous loading of tracking scripts, but lacks explicit security headers and does not provide a security.txt or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data is a concern for domain legitimacy but does not directly impact the operational security posture. Overall, jenreality.cz presents a professional and trustworthy real estate platform with good privacy compliance and moderate technical maturity. Strategic improvements in security headers, incident response transparency, and domain registration transparency would enhance trust and security posture.

A

Algeco

algeco.be

69

Algeco Belgium is a leading European provider of modular units and buildings, offering turnkey solutions, rental, sales, and comprehensive 360° services. The website is professionally designed using Drupal 9 CMS, with modern technologies and analytics tools such as Matomo and Google Tag Manager. Contact information including phone, email, and physical address is clearly presented, alongside active social media channels. The security posture is solid with HTTPS usage and no visible vulnerabilities, though explicit security policies are not publicly disclosed. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy page. WHOIS data is restricted, which is common for commercial entities but limits domain registration transparency. Overall, the site reflects a trustworthy and professional business presence in Belgium's modular construction sector.

A

Avril

groupeavril.com

70

Avril is a leading French industrial group specializing in oils and plant proteins, with a strong commitment to sustainability and addressing climate and demographic challenges. The company operates across multiple sectors including renewable energies, food production, specialty chemicals, agricultural solutions, incubators, and investments. Their market position is strong in France and internationally, supported by a broad portfolio of subsidiaries and brands. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on their business mission and sustainability goals. Technically, the site uses modern web technologies including WordPress CMS, jQuery, and privacy-focused analytics (Matomo). Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and branding strongly indicate a legitimate and established business. Overall, Avril demonstrates a solid digital maturity and business credibility with room for minor security enhancements.