Security Directory

B

BSR

bsr.de

64

BSR is a large municipal service provider based in Berlin, specializing in waste management, recycling, environmental education, and city cleanliness. The website reflects a well-established organization with a strong focus on sustainability and community engagement through various programs and services. The company holds certifications and operates multiple subsidiaries, reinforcing its market position as a key player in Berlin's environmental sector. Technically, the website uses the Scrivito CMS platform with modern web technologies, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, targeting residents and businesses in Berlin.

K

Kreisstadt Bergheim

bergheim.de

67

The website www.bergheim.de serves as the official online portal for the municipal government of Kreisstadt Bergheim in Germany. It provides residents and visitors with news, press releases, and access to various public services and administrative information. The site is positioned as a local government authority platform, focusing on community engagement and service delivery. The content is well-structured, professionally presented, and targets a general audience including local citizens and stakeholders. Technically, the website is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern web technologies such as JavaScript and the Slick Slider library for interactive content. The site is mobile-optimized and accessible, with a good SEO foundation. HTTPS is enforced, ensuring secure communication, though some security headers appear to be missing. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible sensitive data exposure. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and trust. No vulnerabilities or malicious content were detected in the provided content. Overall, the website is trustworthy and professional, suitable for its role as a government information portal. Strategic improvements in privacy compliance and security hardening would enhance its posture and user trust.

L

Landkreis Bayreuth

landkreis-bayreuth.de

61

Landkreis Bayreuth operates as the official government website for the Bayreuth district in Germany, providing a broad range of public services and information to residents and stakeholders. The site covers areas such as citizen services, education, culture, environment, traffic, veterinary services, and economic development, positioning itself as a comprehensive resource for local governance and community engagement. The website is built on TYPO3 CMS, a robust and widely used content management system for government entities, ensuring a stable and scalable digital infrastructure. The design is professional, mobile-optimized, and accessible, supporting a positive user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies, which could be improved to enhance trust and compliance. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and credible, serving its governmental function effectively, but would benefit from enhanced privacy and security transparency.

O

Obec Ladice

ladice.sk

68

Obec Ladice operates an official municipal website serving the local community of Ladice, Slovakia. The site provides residents and visitors with essential information including local news, public notices, contact details for municipal offices, event calendars, weather forecasts, and community services. The website also promotes a mobile application to enhance accessibility and engagement. The business model is focused on public service and community information dissemination, positioning itself as a trusted local government portal.

O

Obec Moškovec

moskovec.sk

64

Obec Moškovec operates an official municipal website serving the local community in Slovakia. The site provides comprehensive information about the municipality's history, governance, news, events, and public services. It targets residents and visitors seeking local government information and community updates. The website is positioned as a trusted source for official communications and public documents. Technically, the site employs modern web technologies including JavaScript modules, Google reCAPTCHA for security, and accessibility features to ensure usability across devices. The platform is built on the ModerneObce.sk CMS, which is tailored for municipalities. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance including cookie consent mechanisms. However, the site lacks explicit security policy and incident response disclosures. Overall, the website is professional, trustworthy, and well-maintained, supporting the municipality's digital presence effectively.

O

Obec Kozárovce

kozarovce.sk

66

Obec Kozárovce operates as the official municipal government website for the Kozárovce community in Slovakia. It provides residents and visitors with local news, event calendars, public notices, contact information, and community services. The website serves as a central hub for municipal communication and public engagement, reflecting a small government entity focused on transparency and accessibility. Technically, the site employs modern web technologies including HTTPS, JavaScript frameworks, and accessibility features, ensuring a good user experience across devices. Security measures such as HTTPS, reCAPTCHA, and cookie consent mechanisms are in place, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates a solid security posture with no evident vulnerabilities or suspicious content. The domain registration data aligns well with the website's governmental nature, supporting its legitimacy and trustworthiness.

S

Sparkasse Vest Recklinghausen

vesterleben.de

55

Vesterleben is a regional digital magazine and information portal serving the Vest region in Germany. It provides local news, event listings, and community engagement content, supported by reputable local institutions including Sparkasse Vest Recklinghausen, Diakonie Recklinghausen, Hertener Stadtwerke, and RDN-Verlag. The website targets residents and visitors interested in regional culture, social events, and local initiatives. The business model is based on regional media publication with digital content and downloadable print editions, positioning itself as a trusted local information source.

V

Vest Erleben

vest-erleben.de

55

Vest Erleben is a regional media platform serving the Vest Recklinghausen area in Germany, providing local news, event information, and community engagement. The website is supported by a consortium of local institutions including Sparkasse Vest Recklinghausen, Diakonie Recklinghausen, Hertener Stadtwerke, and RDN-Verlag, positioning it as a trusted source for regional content. The platform targets residents and visitors interested in cultural, social, and economic developments within the region. Technically, the website is built on WordPress with modern enhancements such as ElasticPress for search, Matomo for analytics, and responsive design elements ensuring good mobile usability. The site uses HTTPS and includes basic security practices like CSRF tokens, but lacks some advanced security headers and explicit cookie consent mechanisms. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site demonstrates a reasonable posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, it could improve by implementing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy. Privacy compliance is partially addressed with a privacy policy present, but cookie consent mechanisms are missing despite tracking usage. Overall, Vest Erleben is a credible and professionally maintained regional media website with solid business credibility and technical infrastructure. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

H

Heinz Sielmann Stiftung

wanninchen.de

51

The Heinz Sielmann Stiftung operates the Naturlandschaft Wanninchen, a nature experience center dedicated to biodiversity, environmental education, and conservation in Germany. The website effectively communicates their mission, events, and fundraising opportunities, targeting nature enthusiasts, educators, and donors. The organization holds recognized certifications that enhance trust and credibility. Technically, the site is built on TYPO3 CMS with modern web technologies, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management in place, though a dedicated security policy and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Neue Bühne Senftenberg is a regional cultural institution based in Germany, specializing in theatrical performances, seasonal events, and youth theater programs. The website serves as a platform for event promotion, ticket sales, and community engagement, targeting a broad audience including families, educators, and theater enthusiasts. The organization maintains an active social media presence and provides clear contact information, reinforcing its community-oriented business model. Technically, the website is hosted on Amazon AWS infrastructure and utilizes Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized with a clean design and structured navigation, though accessibility features are basic. Security is well-handled with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and defense-in-depth. From a security perspective, the site demonstrates good practices such as encrypted connections and no exposed sensitive data. However, it lacks formal security policies, incident response information, and vulnerability disclosure mechanisms, which are important for transparency and trust. The privacy policy is present and GDPR compliant, but cookie consent is missing, which could pose compliance risks. Overall, the website is professional, trustworthy, and serves its business purpose effectively. Strategic enhancements in privacy compliance, security headers, and incident response transparency would further strengthen its security posture and regulatory adherence.

G

Gingco Communication GmbH & Co. KG

gwa-online.de

64

GWA Kreis Unna operates as a regional public service provider specializing in waste management, recycling, and sustainable building materials within the Kreis Unna area in Germany. The organization offers a broad range of services including waste calendars, consulting on waste disposal, service products, and commercial waste solutions, positioning itself as a key environmental service entity in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to residents and businesses in the area. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Swiper.js for sliders and Google reCAPTCHA for form security. Hosting appears to be managed by 1&1 IONOS SE, inferred from the nameservers. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes security best practices such as cookie consent mechanisms and use of reCAPTCHA. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, compliant with GDPR, and provides a safe user experience. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and implementing a security.txt file to improve transparency and security posture.

M

Mittelzentraler Städteverbund Göltzschtal

das-goeltzschtal.de

49

The Mittelzentraler Städteverbund Göltzschtal website serves as the official regional portal for four municipalities in the Göltzschtal region of Germany, focusing on intermunicipal cooperation, regional development, economic promotion, and tourism. The site targets local citizens, visitors, and businesses, providing information about community projects, economic opportunities, and cultural events. The business model is non-commercial, centered on governmental and non-profit collaboration to strengthen the region. The website is well-branded and consistent with official municipal identities, reflecting a trustworthy regional government presence. Technically, the site is built on the TYPO3 CMS platform, utilizing modern web technologies such as deferred JavaScript loading and responsive design. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Hosting appears to be with a German provider, consistent with the regional focus. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and employs some best practices such as deferred script loading. However, explicit security headers are not detected, and there is no visible security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is evident. Overall, the security posture is adequate but could be improved with additional headers and transparency. The overall risk assessment is low given the nature of the site as a regional governmental portal with no commercial transactions or sensitive data collection. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and considering a vulnerability disclosure mechanism to enhance trust and compliance.

D

Deutscher Volkshochschul-Verband e. V.

volkshochschule.de

62

The Deutscher Volkshochschul-Verband e. V. operates the website volkshochschule.de, serving as the central platform for adult education centers (Volkshochschulen) in Germany. The site provides course finding tools, educational policy information, and news updates, targeting adult learners and educational institutions. It holds a strong position as a leading non-profit educational association in Germany. Technically, the website is built on the Sitepark CMS platform, hosted on bringe.net, and employs modern web technologies including responsive images and SVG icons. The site is mobile optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS, uses anonymized Matomo analytics, and provides a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not found, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

S

Stadt Duisburg

duisburg.de

59

The website duisburg.de serves as the official digital portal for the city of Duisburg, Germany, providing residents and visitors with comprehensive information about city services, events, tourism, and administrative functions. It positions itself as a key government resource with a broad range of public service offerings and community engagement initiatives. The site demonstrates consistent branding and a professional presentation aligned with municipal government standards. Technically, the site is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern web technologies including SVG icons, accessibility plugins, and JavaScript frameworks. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are not clearly present in the provided content. Analytics are conducted via Matomo, indicating moderate user tracking with some privacy compliance gaps. Overall, the site is trustworthy and well-maintained, though improvements in privacy transparency and security headers would enhance compliance and user trust.

W

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG

weigl.at

49

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG is a well-established Austrian family-owned company specializing in the manufacturing, planning, installation, and servicing of elevators, stairlifts, homelifts, and related mobility solutions. With a history dating back to 1899, it holds a leading market position in Austria as the largest elevator producer and market leader for stairlifts and wheelchair lifts. The company targets both end consumers and businesses seeking high-quality mobility and lift solutions, offering a broad product portfolio and regional presence in Austria, Germany, Slovenia, and Switzerland. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including asynchronous JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. However, some technical improvements could be made, such as implementing security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. There is no visible security policy or incident response information on the site, and no WHOIS data is available for the domain, which slightly reduces trustworthiness. The company demonstrates trust through certifications, state awards, and detailed contact information. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy digital presence for a mature manufacturing business. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, and publishing explicit security and incident response policies to strengthen the security posture and user trust.

The Maison Départementale des Personnes Handicapées de Seine-et-Marne (MDPH 77) is a government entity providing centralized access to rights and benefits for persons with disabilities in the Seine-et-Marne region of France. The website serves as an official portal offering information, application processing, partner resources, and event updates tailored to the disabled community and their families. It is positioned as a trusted regional public service with a clear mission and strong local government backing. Technically, the website is built on Drupal 8, hosted by Scaleway, and employs modern web standards including responsive design, SVG icons, and privacy-focused analytics via Matomo. Cookie consent is managed through a compliant mechanism (Tarteaucitron), reflecting good privacy practices. The site demonstrates good SEO, accessibility, and user experience, with clear navigation and professional branding consistent with government standards. From a security perspective, the site uses HTTPS with a good SSL configuration and clientTransferProhibited domain status, indicating protection against unauthorized domain transfers. While explicit security headers are not visible in the HTML, the overall posture is solid with no exposed sensitive data or vulnerabilities detected. However, the site lacks publicly visible security policies or incident response contacts, which could be improved. Overall, the website is a well-maintained, trustworthy government portal with strong compliance to privacy regulations and a clear focus on serving its target audience. The risk profile is low, with recommendations to enhance security headers and publish security policies to further strengthen trust and resilience.

The website represents the official digital presence of the Conseil départemental de Seine-et-Marne, a French local government entity. It provides a broad range of public services and information targeting residents, professionals, and partners within the Seine-et-Marne department. The site is well-structured with clear navigation and integrates social media channels to enhance outreach. Technically, it is built on Drupal 8, hosted by SCALEWAY, and uses Matomo for analytics, indicating a modern and privacy-conscious approach to user tracking. Security posture is solid with HTTPS and domain transfer protections, though it lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy government service portal.

P

Plinko

plinkosoldiveri.it

49

Plinkosoldiveri.it is a newly established Italian website dedicated to the gambling game Plinko, providing detailed information, guides, strategies, and affiliate links to online casinos offering Plinko games. The site targets Italian players interested in gambling and offers localized content including demo versions and mobile app instructions. Technically, the site uses standard web technologies with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. The domain is very new but currently expired, which poses a risk to business continuity and trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is a niche affiliate platform with good content quality but needs improvements in security and compliance to enhance trust and reliability.

P

Private by Design, LLC

ruby.social

68

Ruby.social is a niche Mastodon instance dedicated to the Ruby programming language community, operated by Private by Design, LLC based in the US. The platform offers a federated social networking experience tailored for Ruby enthusiasts, with active user engagement and a clear community focus. Technically, the site runs Mastodon version 4.4.1 with modern web technologies including Ruby on Rails and React, delivering a good user experience with mobile optimization and accessible navigation. Security posture is moderate, with HTTPS enforced and domain registration protections in place, but lacking security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service. Overall, the website is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

N

Neos Foundation e.V.

neos.social

64

Neos.social is a niche Mastodon instance operated by Neos Foundation e.V., focused on providing a social networking platform for discussions related to Neos and connecting users to the broader Fediverse. The platform leverages the open-source Mastodon software (version 4.4.1) and modern web technologies such as React and JavaScript ES modules, delivering a responsive and user-friendly experience. The website content is well-structured and relevant to its target audience, with a consistent branding approach and clear community focus. From a technical perspective, the site employs modern frameworks and technologies, including WebSockets for real-time communication, and uses CDN resources for media delivery. However, some security best practices such as enabling DNSSEC and implementing security headers are not observed, which could be improved to enhance the overall security posture. The absence of cookie consent mechanisms and limited privacy compliance indicators suggest room for improvement in regulatory adherence. Security-wise, the domain registration is transparent and consistent with the organization's identity, enhancing trustworthiness. The domain is protected against unauthorized transfers, but lacks DNSSEC. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the site maintains a moderate security posture but would benefit from enhanced security policies and compliance measures. Strategically, Neos.social serves a small but focused community, positioning itself as a specialized social platform within the Fediverse ecosystem. The lack of commercial advertising and tracking aligns with privacy-conscious user expectations. To strengthen its market position and trust, the platform should consider publishing more comprehensive privacy and security policies, implementing cookie consent, and improving technical security controls.

S

Spreadshirt

spreadshirt.pl

61

Spreadshirt.pl is a professional e-commerce platform specializing in custom apparel and merchandise, positioning itself as the largest T-shirt printing company in Europe. The website offers users the ability to purchase ready-made designs or create their own, with a focus on fast shipping and a broad product range. The platform targets a general audience interested in personalized clothing and accessories. Technically, the site employs modern JavaScript frameworks, including Lit and Glide.js, and integrates a comprehensive cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers likely in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS data from the Polish registry limits domain trust verification, but the website's professional presentation and privacy compliance mitigate concerns. Overall, the site demonstrates a solid balance of business credibility, technical sophistication, and privacy adherence.

S

Spreadshirt

spreadshirt.no

64

Spreadshirt.no is a well-established e-commerce platform specializing in custom printed apparel and products, positioning itself as Europe's largest T-shirt printing company. The website offers a user-friendly interface with clear navigation, modern design, and comprehensive content focused on custom design and shopping experiences. Technically, the site employs modern JavaScript frameworks and libraries, including Lit and Glide.js, and integrates robust cookie consent management via OneTrust, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and multiple security headers present, although public security policies and incident response contacts are not disclosed. The absence of WHOIS data for the .no domain is a notable gap, limiting full domain legitimacy verification. Overall, the site demonstrates a mature digital presence with good privacy and security practices, suitable for its large-scale e-commerce operations.

S

Spreadshirt

spreadshirt.it

62

Spreadshirt is a leading European e-commerce platform specializing in custom apparel printing, particularly t-shirts. The website targets a broad audience interested in personalized clothing and accessories, offering both pre-designed and user-created products. The company operates multiple regional sites, indicating a strong market presence across Europe. Technically, the site employs modern JavaScript frameworks and libraries, including Glide.js for sliders and OneTrust for cookie consent management, ensuring compliance with GDPR and providing a good user experience across devices. Security posture is solid with HTTPS enforced and standard security headers present, although no dedicated security policy or incident response information is publicly available. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility, with room for improvement in accessibility features and explicit security disclosures.

S

Spreadshirt

spreadshirt.ie

62

Spreadshirt.ie is an established e-commerce platform specializing in custom t-shirt printing and personalized apparel. The website serves both consumers looking to create custom products and designers wishing to sell their designs on a marketplace. It operates as part of the larger Spread Group with multiple country-specific domains, indicating a broad international presence. The platform offers key services including on-demand printing, a marketplace for designs, and a start-selling program for designers. The website is professionally designed with good content quality and clear navigation, targeting a general audience interested in personalized clothing products. From a technical perspective, the site uses modern JavaScript frameworks and libraries such as Glide.js for sliders, OneTrust for cookie consent, and Adobe Launch for analytics and tag management. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers and policies are not clearly disclosed, and no incident response or vulnerability disclosure information is found. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy policy and GDPR compliance indicators. Overall, the website presents a low risk profile with a professional business model and good technical implementation. Recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure channels to enhance trust and compliance.

S

Spreadshirt

spreadshirt.at

63

Spreadshirt.at is a professional e-commerce platform specializing in custom T-shirt printing and apparel design, serving primarily the Austrian and broader European market. It operates as part of the larger Spread Group, which is a leading player in the European custom apparel printing industry. The website offers a marketplace for designs, a custom design tool, and B2B corporate clothing solutions, positioning itself as a comprehensive service provider in this niche. Technically, the site employs modern JavaScript libraries, SVG icons, and cookie consent frameworks, ensuring a good user experience and compliance with GDPR regulations. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not evident. Overall, the site is well-designed, mobile-optimized, and trustworthy, with clear navigation and professional branding. The lack of WHOIS data limits domain registration trust analysis but does not detract from the site's apparent legitimacy. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

S

Spreadshirt

spreadshirt.com.au

65

Spreadshirt.com.au is a well-established e-commerce platform specializing in custom t-shirt printing and personalized apparel. The website offers users the ability to create custom designs or shop from a marketplace of designs, targeting a broad general audience interested in personalized clothing. The business operates in the Australian market with multiple international domain variants, indicating a large-scale operation. Technically, the site employs modern JavaScript libraries, lazy loading, and cookie consent mechanisms, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Security-wise, the site enforces HTTPS and uses cookie consent tools but lacks explicit security policies or vulnerability disclosure information. The WHOIS data is privacy-protected, which is typical for commercial entities, and no suspicious patterns were detected. Overall, the website demonstrates a strong security posture and business credibility with room for improvement in publishing security policies and headers.

C

Contact Privacy Inc. Customer 0152436388

aus.social

69

Aus.Social operates as an independent Mastodon instance branded as 'thundertoot', providing a federated social networking platform within the fediverse. It targets general users interested in decentralized social media without ads or algorithms. The platform leverages the open-source Mastodon software, currently running version 4.5.0-alpha.1, and employs modern web technologies including React and JavaScript ES modules. Hosting and CDN services are provided via bunny.net, ensuring fast content delivery and good mobile optimization. The website design is professional and consistent with Mastodon's branding, offering clear navigation and user-friendly experience.

Saint-Gobain Construction Products CZ a.s., operating under the brand Weber, is a leading manufacturer and supplier of construction materials and systems in the Czech Republic. Their website offers comprehensive information about their products including facades, plasters, insulation, flooring, adhesives, and waterproofing solutions. The company targets professionals such as architects, developers, investors, as well as DIY enthusiasts, providing both products and supporting digital tools like calculators and design applications. The website is professionally designed, well-structured, and consistent with the Saint-Gobain corporate identity. Technically, the website is built on Drupal CMS and employs modern web technologies including Google Tag Manager, OneTrust for cookie consent, and lazy loading for performance optimization. The site is mobile-optimized and accessible, with good SEO practices and structured data implemented. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy is absent. The WHOIS data for the domain is incomplete and malformed, lacking registrar and registrant details, which reduces trustworthiness from a domain registration perspective. However, the website content and branding strongly indicate legitimacy as part of the Saint-Gobain group. Contact information is available, including a company phone number and social media channels, but no direct company emails are exposed on the site. Overall, the website presents a trustworthy and professional digital presence for a large manufacturing company, with good privacy compliance and user experience. Recommendations include enhancing security headers, publishing a security policy or incident response contacts, and verifying WHOIS data for improved domain trust.

Saint-Gobain Construction Products CZ a.s., operating under the Weber brand, provides comprehensive construction materials, tools, and expert consultancy services tailored to architects, developers, and investors in the Czech Republic. The website offers a well-structured platform with practical tools, educational content, and product information supporting successful construction projects. The company leverages its strong market position as part of the Saint-Gobain group, emphasizing quality and sustainability certifications such as LEED and BREEAM. Technically, the website is built on Drupal CMS with modern web technologies including Google Tag Manager and Bootstrap, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site demonstrates a mature digital presence aligned with business goals and compliance requirements.

G

GMF Aquapark Prague, a.s.

aquapalace.cz

64

Aquapalace Praha operates the largest aquapark in the Czech Republic and Central Europe, offering a comprehensive leisure complex including water parks, sauna worlds, fitness centers, spa and wellness services, medical balneo treatments, and hotel accommodations. The business targets families, tourists, and wellness enthusiasts, positioning itself as a premier destination for active recreation and relaxation. The website is professionally designed with multilingual support, clear navigation, and integrated e-commerce for ticket sales and reservations. Technically, the site uses modern web technologies such as jQuery, Owl Carousel, and Bootstrap, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS usage and secure forms, though HTTP security headers are not explicitly detected. Privacy compliance is strong, with clear GDPR and cookie policies and consent mechanisms. The WHOIS data is missing, which limits domain trust assessment, but the overall business credibility and online presence are high. Strategic recommendations include improving security headers, publishing a security policy, and verifying domain registration details to enhance trust.

Saint-Gobain Construction Products CZ a.s., operating under the brand Weber in the Czech Republic, is a leading manufacturer and supplier of construction materials specializing in facade systems, insulation, flooring, adhesives, and related products. The website presents a professional and comprehensive digital presence targeting architects, developers, investors, and construction professionals. It offers extensive product information, technical support, online tools, and educational resources, positioning itself as a trusted industry leader. Technically, the site is built on Drupal CMS with modern web technologies including Google Tag Manager and responsive design, ensuring good performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high business credibility and compliance with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

M

Mlýny J. Voženílek, spol. s r.o.

mlynyvozenilek.cz

47

Mlýny J. Voženílek, spol. s r.o. is a Czech milling company with over 100 years of tradition, specializing in the production of high-quality wheat and rye flour as well as animal feed. Positioned as one of the largest mill product manufacturers in the Czech Republic, the company serves both professional bakers and households, emphasizing natural, additive-free products. The website reflects a medium-sized manufacturing business with a clear focus on quality and tradition, supported by multiple certifications and a professional online presence. Technically, the website employs modern web technologies including Google Analytics for tracking and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, it lacks some advanced security headers and comprehensive privacy and cookie policies, which are critical for GDPR compliance and user trust. From a security perspective, the site uses HTTPS and basic form protections but does not expose security policies or incident response contacts. The absence of WHOIS data limits domain legitimacy verification, although the business content and certifications suggest a legitimate operation. Overall, the security posture is moderate with room for improvement in privacy compliance and security best practices. Strategically, the company should focus on publishing clear privacy and cookie policies, enhancing security headers, and providing incident response information to improve trust and compliance. Verifying and publishing domain registration details would also strengthen legitimacy. These steps will help align the digital presence with the company's strong business reputation and support long-term growth and security.

L

Lentiamo s.r.o.

lentiamo.at

73

Lentiamo s.r.o. operates a professional e-commerce platform specializing in the sale of contact lenses, prescription glasses, sunglasses, and related accessories primarily targeting the Austrian market and other European countries. The website demonstrates a strong market position with a broad product catalog, virtual try-on features, and a loyalty program, supported by a Trusted Shops certification and excellent customer ratings. Technically, the site employs modern web technologies including Google Tag Manager, ES modules, and JSON-LD structured data, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS enforcement, secure login forms, and cookie consent mechanisms, though the absence of a published security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a notable gap, slightly impacting trustworthiness, but overall the site presents as a credible and professional retail platform.

L

Lentiamo s.r.o.

lentiamo.sk

63

Lentiamo s.r.o. operates a professional e-commerce platform specializing in eyewear products including contact lenses, prescription glasses, sunglasses, and related accessories. The company targets consumers primarily in Slovakia but maintains a strong presence across multiple European markets through localized domains. The website offers a comprehensive product catalog, virtual stylist tools, and customer support, positioning itself as a trusted retailer in the optical retail sector. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics 4, and Google Identity Services, ensuring a robust digital infrastructure with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement, secure login forms, and cookie consent mechanisms, although a dedicated security policy and incident response information are absent. Overall, the domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness. The site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable and professional online retailer.

K

Knihovna Václava Havla

havelchannel.cz

55

Havel Channel is a Czech Republic based non-profit media platform operated by the Václav Havel Library, providing political interviews, cultural discussions, and podcasts focused on Václav Havel's legacy and related societal topics. The website is professionally designed with good content quality and consistent branding aligned with its parent organization and strategic partners. Technically, the site uses modern web technologies including Google Fonts, SVG icons, and Google Analytics for tracking, hosted under a Czech registrar and name server. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the site is trustworthy and serves a niche audience interested in Czech political and cultural discourse.

C

CEWE FOTOKNIHA - fotoobrazy, fotky a ďalšie fotoprodukty | CEWE.sk

cewe.sk

61

The website www.cewe.sk represents a regional e-commerce platform specializing in photo products such as photobooks, photo prints, photo gifts, and related services. It targets consumers in Slovakia interested in personalized photo products and offers a dedicated mobile app for photo projects. The business model is retail-focused with a medium-sized market presence and consistent branding. Technically, the site employs modern web technologies including JavaScript ES modules, SVG icons, responsive images, and integrates consent management via Usercentrics. Google Tag Manager and Adobe DTM are used for analytics and marketing tag management, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and published security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the provided content. Overall, the site is professional, user-friendly, and trustworthy but could improve transparency around privacy and security policies.

D

Dyn - Handball, Basketball, Tischtennis, Volleyball live streamen und auf Abruf

dyn.sport

64

Dyn Sport is a specialized streaming service offering live broadcasts and highlight coverage of various German and European sports leagues including handball, basketball, volleyball, table tennis, and hockey. The platform targets sports fans interested in these niche markets, providing subscription-based access to live and on-demand content. The website is professionally designed with a consistent brand presence and good content relevance, optimized for mobile devices and featuring modern web technologies such as React and SVG graphics. However, the site lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. Security headers and detailed security policies are also not evident, indicating room for improvement in security posture. Overall, the domain is privacy protected in WHOIS, which is typical for commercial streaming services, and the website appears legitimate and safe for general audiences.

S

Sekyra Group

saratovska22.sk

62

The website www.saratovska22.sk represents a real estate development project by Sekyra Group, a leading real estate company focused on large urban developments in Slovakia and the Czech Republic. The site provides detailed information about the residential units available, project features, and local amenities, targeting young professionals, students, and investors. Technically, the site uses modern web technologies including ES modules, Google Fonts, and SVG icons, with a responsive design and basic SEO optimizations. Security posture is moderate with HTTPS enforced and a cookie consent mechanism denying ad and analytics storage by default, but lacks published privacy policies, terms of service, and incident response information. Overall, the domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

P

PSG betonárna

psgbeton.cz

53

PSG betonárna is a Czech Republic based company specializing in the production and sale of concrete and concrete mixtures for both small and large construction projects. Founded in 2022, the company operates with a modern, computer-controlled production system and offers additional services such as concrete delivery with its own fleet and concrete pumping. The website reflects a regional supplier focused on quality and customer service, targeting construction professionals and individual builders in the Zlín and Otrokovice areas. The business is part of the PSG group, indicating a connection to a larger parent company. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and Bootstrap for responsive design. The site is mobile-optimized and features good SEO practices, though it lacks a visible CMS or explicit hosting details. Performance is moderate with a clean, professional design and clear navigation. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, along with cookie consent mechanisms. However, it lacks explicit security headers, a published security.txt file, and incident response contact information. Privacy compliance is basic, with no dedicated privacy or cookie policy pages found, though cookie consent scripts are present. Overall, the security posture is adequate but could be improved with additional headers and transparency. The overall risk assessment is low, with no signs of malicious content or suspicious domain registration. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving GDPR compliance to strengthen trust and security culture.

M

MoBagel Inc.

mobagel.com

68

MoBagel Inc. is a technology company specializing in AI solutions that simplify AI adoption for business and data teams. Their platform offers no-code AI builder tools and AI agents tailored for marketing, supply chain, finance, and manufacturing sectors. Recognized by Gartner and partnered with Fujitsu, MoBagel positions itself as a trusted AI vendor enabling scalable growth through advanced AI technologies including AutoML, MLOps, and Generative AI. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting enterprise and medium-sized businesses. Technically, the website is built on Webflow CMS with modern web technologies, optimized for performance and mobile responsiveness. The infrastructure leverages CDN hosting and uses standard web fonts and SVG icons. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the security posture is solid but could be improved by adding formal security policies and incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. The business credibility is high, supported by strong branding, partnerships, and trust indicators. No critical issues were found, and the website is safe for general audiences.

A

Automic Group

automic.com.au

61

Automic Group is a leading Australian provider of integrated investor administration services, including share registry, company secretarial, financial advisory, and ESG consulting. The company holds a strong market position with a significant share of ASX listed clients and IPOs in 2024. Their platform is technology-driven, leveraging HubSpot CMS and modern web technologies to deliver a seamless user experience. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. WHOIS data is privacy protected but consistent with a legitimate business domain. Overall, the site demonstrates high business credibility and technical maturity.

G

GASAG-Gruppe

gasag-gruppe.de

59

GASAG-Gruppe is a well-established energy company based in Berlin, Germany, with a history dating back to 1847. The company operates primarily in the energy sector, focusing on sustainable and climate-neutral energy solutions including the supply of green gas and electricity, energy services, and renewable energy production. The website reflects a mature digital presence with modern technologies such as Usercentrics for consent management and Google Tag Manager for analytics, hosted on Microsoft Azure DNS infrastructure. The site is professionally designed, mobile-optimized, and provides comprehensive corporate information and navigation. Security posture is strong with HTTPS enforced and consent mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and domain registration data indicate a legitimate and credible business with a strong regional market position.

vis.social is a niche Mastodon instance serving a community of creative professionals and researchers in scientific art, science communication, data visualization, and creative coding. It operates as a decentralized social media platform leveraging the open-source Mastodon software, providing a welcoming environment with a focus on inclusion and community engagement. The platform encourages sharing, discussion, and critique among its members, primarily English-speaking users interested in scientific and artistic topics. The business model is community-driven with free registration and optional donations to support the instance's operation. Technically, vis.social employs a modern web stack centered around Mastodon version 4.4.1, utilizing JavaScript ES modules, CSS with integrity checks, and SVG assets for UI elements. The site is mobile-optimized and demonstrates good SEO practices. Hosting details are partially inferred from the registrar (Gandi SAS), with no explicit CMS detected. Performance is moderate, with no major technical debt or errors observed. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and security headers are not explicitly present in the analyzed content. There is no published security policy or incident response contact information. Privacy compliance is partial, with a basic privacy policy available but lacking cookie consent mechanisms and terms of service. No vulnerabilities or exposed sensitive data were detected. Overall, vis.social presents a trustworthy and professional community platform with a solid technical foundation and good business credibility. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would enhance its security posture and user trust.

Česká letecká servisní a.s. is a specialized aviation service company established in 1997, focusing on modernization, integration, and repair of avionics and special equipment for military, para-military, and civil aviation sectors. The company operates primarily in the Czech Republic and across multiple European countries, positioning itself as a leading expert in its field. Their key services include military and civil aviation modernization projects, avionics sales and servicing, and integration of mission-specific equipment. The website reflects a professional and consistent brand image with clear business information and certifications such as EASA PART 145 and PART 21 J/G, enhancing trust and credibility.

C

CROSS Zlín, a.s.

cross-traffic.com

60

CROSS Zlín, a.s. is a Czech Republic-based company specializing in intelligent transportation systems, including weigh-in-motion, traffic control, parking systems, road weather monitoring, and data collection solutions. Established in 1994, the company has a strong market presence with over 200 employees and multiple innovation awards, positioning itself as a key player in smart city and transportation technology sectors. Their website reflects a professional and comprehensive digital presence with detailed case studies and references, targeting municipalities and transportation authorities globally. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, and a proprietary CMS (Studio9 webManager), delivering a good user experience with mobile optimization and SEO best practices. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the company demonstrates a mature business and digital footprint with moderate risk due to domain registration opacity.

G

Green Ways s.r.o.

gw-int.net

71

Green Ways s.r.o. is a European leader in the green food market, specializing in high-quality, certified organic and vegan products. Founded in 2001, the company emphasizes product quality, scientific backing, and a customer-friendly approach. Their website is professionally designed, multilingual, and provides clear contact and business information, supporting their market position. Technically, the site uses modern JavaScript frameworks and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and incident response disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Strategic recommendations include improving security headers, publishing security policies, and resolving WHOIS inconsistencies to enhance credibility.

B

Bitrix Inc

bitrix24.in

73

Bitrix Inc operates Bitrix24, a comprehensive SaaS platform offering CRM, project management, collaboration, HR automation, and AI-powered assistant services. The platform targets businesses seeking integrated tools to manage sales, teams, and workflows efficiently. The website demonstrates a mature digital presence with professional design, structured content, and multi-platform support including Windows, MacOS, Android, iOS, and Linux. Technical infrastructure leverages the Bitrix CMS framework with modern JavaScript libraries and integrates multiple third-party analytics and advertising services. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security headers and published privacy or terms policies. Overall, the platform is positioned as a trusted, large-scale technology provider with a strong market presence in India and globally.

V

VulkaTec Riebensahm GmbH

vulkatec.de

49

VulkaTec Riebensahm GmbH is a German-based company specializing in the manufacture and distribution of volcanic plant substrates for sustainable greening projects, including urban landscaping, roof greening, and gardening. Positioned as a market leader in Europe with over 35 years of experience, the company combines high-quality product manufacturing with advanced logistics solutions, including their own silo fleet and pneumatic transport technology. Their business model includes both B2B services and a private customer online shop, targeting professional landscapers and private gardeners alike. Technically, the website is built on the Shopware CMS platform, leveraging modern web technologies and integrating Google Analytics 4 and a comprehensive cookie consent management system. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a professional user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No signs of malicious content or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating a legitimate and trustworthy domain registration. The company maintains active social media channels and provides clear contact information, enhancing credibility and customer engagement. Overall, VulkaTec demonstrates a mature digital presence with strong business credibility, good technical implementation, and compliance with privacy regulations, making it a reliable and professional online platform for their industry.

I

Isover

isover.cz

61

Isover is a well-established company specializing in insulation materials and solutions, operating primarily in the Czech Republic and part of the Saint-Gobain Group. The website presents a professional and content-rich platform focused on thermal, technical, and industrial insulation products, targeting construction professionals and homeowners interested in energy efficiency. Technically, the site is built on Drupal 10, employs modern web technologies, and is optimized for mobile devices. Security posture is good with HTTPS and standard best practices, though explicit security headers and privacy policies are not clearly visible. The absence of WHOIS data limits domain trust assessment but the website content and branding indicate a legitimate business. Overall, the site is professional and trustworthy with moderate user tracking and analytics integration.