Security Directory

H

HSH Soft- und Hardware Vertriebs GmbH, Niederlassung: GS-Computerservice

xn--fundbrodeutschland-q6b.de

64

Fundbürodeutschland is a German centralized online lost and found platform operated by HSH Soft- und Hardware Vertriebs GmbH, integrating with official authorities across Germany. It offers services including lost item search, online auctions, and administrative tools such as data deletion and fund office software. The platform targets residents and governmental bodies, positioning itself as a key national service with over 766 fund offices and 75,000 items listed. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Leaflet.js for interactive maps, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Privacy compliance is good, with a clear privacy policy and cookie banner aligned with GDPR. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the website is professional, trustworthy, and functional, serving an important public service niche.

F

Fachstelle für Statistik Kanton St. Gallen

statistik-bodensee.org

10

The website statistik-bodensee.org serves as an official regional statistics platform for the Lake Constance Region, providing comprehensive data on land use, population, employment, economy, and tourism. It is supported by governmental institutions, notably the Fachstelle für Statistik Kanton St. Gallen, and targets researchers, policymakers, and the public interested in regional statistics. The platform is multilingual and uses a professional CMS (Contao) with modern frontend technologies to deliver a good user experience. Technically, the site employs a range of JavaScript libraries and frameworks including jQuery, Bootstrap, and others, ensuring moderate performance and good mobile optimization. However, some technical improvements are possible, such as enabling DNSSEC and adding security headers to enhance security posture. The site uses HTTPS but lacks advanced security policies and incident response information. From a security perspective, the website shows a moderate security maturity level with HTTPS enabled and domain transfer protection in place. However, the absence of DNSSEC, security headers, and comprehensive privacy and cookie policies indicates room for improvement. The newsletter form collects user emails but has minimal anti-spam protection. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy compliance measures. Strategically, the website is well-positioned as a niche governmental statistics resource with consistent branding and clear contact information. To improve, it should implement stronger privacy and security controls, publish security policies, and consider cookie consent mechanisms to align with GDPR requirements and enhance user trust.

I

Interreg Alpenrhein-Bodensee-Hochrhein

interreg.org

62

Interreg Alpenrhein-Bodensee-Hochrhein is a European Union regional cooperation program focused on promoting cross-border collaboration in the Alpenrhein, Bodensee, and Hochrhein regions. The website serves as an information and funding portal, providing resources, project submission options, and updates about the program. It is positioned as a key facilitator of innovative projects with significant EU and partner country funding. Technically, the site is built on the Plone CMS platform, uses Bootstrap for responsive design, and integrates Matomo for analytics alongside a robust cookie consent mechanism. Security posture is generally good with HTTPS enforced and privacy compliance evident, though some security headers and explicit policies could be improved. The WHOIS data is unavailable, likely due to privacy protection, but the website's content and structure indicate legitimacy and professionalism. Overall, the site is well-designed, accessible, and trustworthy, serving a specialized governmental and non-profit audience.

K

Kleintheater Schlösslekeller

schloesslekeller.li

59

Kleintheater Schlösslekeller is a small cultural theater venue located in Vaduz, Liechtenstein, offering a variety of cultural events including concerts, readings, and theater performances. The website serves as an information and ticketing portal for local audiences interested in cultural activities. The business operates likely as a community or non-profit entity supported by sponsors and ticket sales. Technically, the website is built on Drupal 10 with modern frontend frameworks and uses Matomo for privacy-conscious analytics. The site is mobile optimized and accessible, with clear navigation and good content quality. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though some security headers and vulnerability disclosures are missing. Privacy compliance is adequate with a privacy policy present but lacks a cookie consent mechanism. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.

The Verein Familienchronik Liechtensteiner Gemeinden operates a specialized genealogical platform aggregating family history data from multiple Liechtenstein municipalities. The platform serves both the public and research communities, offering access to approximately 100,000 records. The organization is a non-profit association representing eight municipalities, positioning itself as the central genealogical resource in Liechtenstein. Technically, the website employs modern front-end technologies including Vue.js and Bootstrap, with privacy-conscious analytics via Matomo. The site is mobile-optimized and well-structured, providing a professional user experience. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the platform benefits from HTTPS and does not expose sensitive data or vulnerable libraries. The absence of a visible security policy or incident response contact reduces transparency. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration consistent with the organization's local presence. Overall, the website is a well-executed, trustworthy platform with minor gaps in security and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and user trust.

SLOVAK INTERCARGO, s.r.o. is a Slovak company established in 1996 specializing in customs declaration, statistical, forwarding, and transport logistics services. The company targets business partners requiring comprehensive logistics and customs support, positioning itself as a reliable regional service provider with a partnership with CZECH INTERNATIONAL, a.s. The website reflects a professional business presence with clear contact information and service descriptions. Technically, the site uses modern JavaScript libraries such as jQuery, Modernizr, and Bootstrap, ensuring responsive design and moderate performance. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is trustworthy and professionally maintained, though improvements in security transparency and SEO could enhance its digital maturity.

G

GEF Ingenieur AG

siskmr.com

42

The website sisKMR.com represents GEF Ingenieur AG, a specialized engineering company providing software solutions for static calculations and optimization of district heating pipelines. The company holds a strong market position in Europe with over 30 years of experience and offers software, engineering services, training, and support primarily targeting planners, engineers, and manufacturers in the energy sector. The website is professionally designed, multilingual, and provides clear contact channels including forms, email, phone, and physical address. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, though no cookie consent mechanism or terms of service are present. Overall, the site is trustworthy and business credible, with minor improvements recommended in security and privacy transparency.

A

Autodesk, Inc

tinkercad.com

56

Tinkercad is a free, web-based application developed by Autodesk, Inc, focused on providing accessible tools for 3D design, electronics, and coding. It targets educators, students, and hobbyists, serving as an introductory platform to Autodesk's broader design technologies. The website demonstrates a high level of digital maturity with modern frameworks like Angular, service workers for offline capabilities, and integration with Autodesk APIs. The content is rich, well-structured, and optimized for various devices, reflecting excellent user experience and design quality. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, complemented by kidSAFE COPPA certification ensuring child safety and privacy compliance. However, the absence of explicit cookie consent mechanisms and security headers suggests room for improvement in privacy compliance and security best practices. WHOIS data is unavailable, likely due to privacy protections, but the website's professional presentation and Autodesk branding support its legitimacy. Overall, the site is trustworthy, well-maintained, and suitable for its educational audience.

R

ruhr-concept KG

presse-service.de

57

ruhr-concept KG operates the website presse-service.de, a specialized press service portal established since 1995, targeting municipalities, associations, publishers, parties, companies, media offices, and hotel chains in Germany. The platform facilitates active press work by distributing press releases and media to editorial offices, subscribers, and readers. The website demonstrates a good level of content quality and professional design, with a strong focus on accessibility, integrating an advanced accessibility tool to support various user needs. Technically, the site is built on ASP.NET with Bootstrap and jQuery, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but would benefit from enhanced security and compliance documentation.

The website www.eeagrants.ro serves as the official Romanian governmental portal for the EEA and Norwegian Grants 2014-2021, managed by the Ministry of Investments and European Projects. It provides comprehensive information about grant programs, project calls, results, and bilateral relations, targeting Romanian governmental bodies, NGOs, and the general public interested in European funding opportunities. The site is well-branded with consistent use of official logos and government references, establishing high trustworthiness and credibility. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, Google Analytics, Facebook SDK, and Google Charts. It is mobile responsive with good SEO and accessibility basics, though accessibility could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. However, security headers are missing, and privacy and cookie policies are not explicitly present, indicating areas for compliance improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and use of reCAPTCHA for forms, with no visible vulnerabilities or exposed sensitive data. The lack of security headers and formal incident response or vulnerability disclosure information are notable gaps. WHOIS data is privacy protected as per Romanian ROTLD policy, which is standard and justified for this governmental domain. Overall, the site is a professional, trustworthy government resource with solid technical foundations but could enhance privacy compliance and security posture by adding explicit policies and security headers. The risk level is low, but improvements in transparency and security best practices are recommended.

B

Bücher Pustet

pustet.de

67

Bücher Pustet is a well-established regional bookstore chain in Bavaria, Germany, with a nearly 200-year history. The company operates multiple physical stores and a comprehensive online shop offering books, eBooks, audiobooks, calendars, games, and related products. Their services include community events, gift vouchers, and specialized offerings for schools, libraries, and corporate clients. The website reflects a mature retail business with a focus on customer engagement and regional presence. Technically, the website uses modern web technologies including Bootstrap and FontAwesome, with a custom CMS managing rich content modules. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security is well-implemented with HTTPS and multiple security headers, but lacks visible privacy and cookie policies, which are important for GDPR compliance. The security posture is strong with no detected vulnerabilities or exposed sensitive data. However, the absence of public incident response information and vulnerability disclosure mechanisms suggests room for improvement in transparency and preparedness. Overall, the site is trustworthy and professional but should enhance privacy compliance and user consent mechanisms. Strategically, Bücher Pustet should prioritize publishing comprehensive privacy and cookie policies, implement consent banners, and provide clear security and incident response information to strengthen user trust and regulatory compliance. Enhancing accessibility and continuous security audits will further improve the site's quality and resilience.

P

psn media GmbH & Co. KG

psnmedia.de

10

psn media GmbH & Co. KG is a well-established digital agency based in Rostock, Germany, operating since 2003. The company offers a comprehensive portfolio of digital services including web design, web development, app development for iOS and Android, individual software solutions, corporate design, and cross-media marketing campaigns. Their client base spans from medium-sized enterprises to large corporations and public institutions, positioning them as a versatile and reliable partner in the digital transformation space. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to business clients seeking digital innovation. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and slick carousel for UI components, alongside analytics and tracking tools including Google Analytics, Facebook Pixel, and Mouseflow. The site uses HTTPS with good SSL configuration and integrates a consent management platform to comply with GDPR requirements. While the site lacks explicit security headers and a public security policy, it demonstrates a solid baseline security posture with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site benefits from encrypted communications and user consent mechanisms for tracking. However, it could improve by implementing additional HTTP security headers and publishing incident response contacts or security policies. The WHOIS data aligns well with the website's claims, showing consistent domain registration and no suspicious patterns, supporting the legitimacy of the business. Overall, psn media presents a trustworthy and professional digital presence with strong business credibility and good privacy compliance. The site is well-optimized for user experience and mobile devices, making it suitable for its target audience of businesses seeking digital agency services.

J

JTRE a.s.

jtre.sk

53

JTRE a.s. is a leading real estate development company based in Slovakia with a strong presence in the Central and Eastern European market. The company specializes in a wide range of real estate projects including residential, office, multifunctional, hotel, retail, and industrial developments. Their website reflects a mature and professional business with a clear market position and extensive project portfolio. The content is well-structured, professionally designed, and targets investors, tenants, and clients interested in real estate development in the region. Technically, the website is built on Drupal 10 with modern JavaScript libraries and tracking tools, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website and business demonstrate high credibility and trustworthiness.

A

Abfallwirtschaft Schleswig-Flensburg GmbH

asf-online.de

57

Abfallwirtschaft Schleswig-Flensburg GmbH operates as a regional public waste management service provider in Germany, focusing on waste collection, recycling, and environmental education for residents and businesses in the Schleswig-Flensburg area. The website serves as an information hub offering schedules, service details, and contact options, positioning the company as a trusted regional authority in waste management. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery, providing a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility and public service mission.

Jugendberufsagentur Schleswig-Flensburg is a regional government-supported agency focused on assisting youth aged 14 to 25 in the Schleswig-Flensburg district of Germany with career orientation and entry into the workforce. The agency collaborates with multiple public entities including the local employment agency, job center, youth welfare services, and vocational training centers. The website is professionally designed using Joomla CMS with Gantry5 and UIkit frameworks, providing clear navigation and relevant content in German. Technical infrastructure is modern and secure with HTTPS and obfuscated emails to reduce spam. However, some security headers are missing and no explicit incident response or vulnerability disclosure mechanisms are present. Overall, the site demonstrates good privacy compliance with a cookie consent banner and a privacy policy page. The business credibility is high due to clear contact information and official partner links. No advertising or tracking beyond cookie consent is detected, and the content is safe for general audiences.

M

Montano Real Estate GmbH

montano.eu

56

Montano Real Estate GmbH is a specialized investment and asset management company focused on the German commercial real estate market. Founded in 2013, it offers tailored investment products and manages assets exceeding 1.6 billion euros, targeting institutional investors seeking secure and high-yield opportunities. The company emphasizes sustainable value creation and maintains partnerships with major players such as Carlyle Group and Beyond Real Estate Holding. The website is professionally designed with good navigation and mobile optimization, utilizing modern web technologies like Bootstrap and jQuery. However, it lacks explicit privacy and cookie policies, security headers, and visible contact information, which are areas for improvement. The domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

E

easybell GmbH

easybell.de

72

easybell GmbH is a German telecommunications provider specializing in internet and telephony services for private and business customers. The company offers a range of products including SIP Trunks, Cloud Telefonanlage, Microsoft Teams integration, and Home Office Connect solutions. With over 50,000 business customers and a parent company Dstny, easybell holds a solid market position in the telecommunications sector in Germany. The website reflects a professional and customer-focused business model emphasizing flexible contracts without minimum terms. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery and Bootstrap. It integrates multiple analytics and marketing tools including Matomo, Google Analytics, Microsoft Clarity, and Trustami for reputation management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and there is no published security.txt or clear incident response contact, which are areas for improvement. The WHOIS data is limited due to DENIC privacy policies but consistent with the domain's German origin and business claims. Overall, easybell.de is a trustworthy and professionally managed website with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency on incident response contacts to further strengthen security and trust.

G

Großmarkt Rostock GmbH

rostocker-weihnachtsmarkt.de

45

The Rostocker Weihnachtsmarkt website represents the largest Christmas market in Northern Germany, organized by Großmarkt Rostock GmbH. It serves a broad audience including visitors, families, vendors, and travel organizers by providing detailed event information, attractions, special actions, and an online shop for exclusive products. The business holds a strong market position as a leading regional event in the hospitality and retail sectors. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, hosted by Alfahosting, and includes a cookie consent mechanism and Google Analytics with privacy features enabled. Security posture is moderate with HTTPS enabled and privacy compliance evident, though improvements in security headers and incident response documentation are recommended. Overall, the site is professional, trustworthy, and well-structured, supporting a positive user experience.

The website www.locator-tzzz.com serves as an interactive tourism portal for Zagrebačka županija (Zagreb County) in Croatia. It is operated by the Turistička zajednica Zagrebačke županije, a public non-profit organization focused on promoting tourism within the region. The site offers an interactive map, listings of points of interest, accommodations, events, and cycling routes, targeting tourists and visitors interested in exploring the area. The business model is non-commercial, aiming to support regional tourism development. Technically, the website employs a range of established web technologies including Google Maps API, jQuery, Bootstrap, and various UI libraries to provide a responsive and interactive user experience. The site is moderately optimized for mobile devices and has a clear navigation structure. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of CSRF tokens in forms is a positive sign, but the absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness despite the professional appearance of the site. Overall, the website provides valuable regional tourism information but suffers from significant security and compliance gaps. The unclear domain registration status is a critical risk factor. Strategic improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance trust and protect users.

Portal narodnih knjižnica is a Croatian national library portal established in 2016, providing comprehensive administrative data, digital and regional collections, and library-related news and projects. It serves a broad audience including the general public, researchers, and minority communities in Croatia. The website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. The portal is positioned as an authoritative resource in the Croatian library sector with consistent branding and good content quality. Technically, the site is moderately performant and mobile-optimized but lacks explicit security headers and detailed security policies. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response documentation. Overall, the site is trustworthy, safe, and professionally maintained, with a strong alignment between WHOIS registration data and website content.

K

Knjižnice grada Zagreba

kgz.hr

10

Knjižnice grada Zagreba operates as the official public library network for the City of Zagreb, Croatia. The website provides comprehensive information about library services, locations, events, and digital resources targeting a broad audience including children, youth, and adults. The organization is positioned as a key cultural and educational institution within the region, with a history dating back to 2000. The site demonstrates consistent branding and a professional online presence with active social media engagement.

T

Thomastik-Infeld GmbH

thomastik-infeld.com

71

Thomastik-Infeld GmbH is a well-established Austrian company specializing in the development and production of high-quality music strings since 1919. The company targets musicians and music professionals worldwide, offering a broad portfolio including orchestral, guitar, and folk strings. Their website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce and consulting tools. Technically, the site employs modern frameworks such as Bootstrap and jQuery, enhanced with Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is trustworthy, professional, and compliant with GDPR, serving as a strong digital asset for the company.

G

Gradska knjižnica Sveti Ivan Zelina

knjiznica-zelina.hr

10

Gradska knjižnica Sveti Ivan Zelina is a public library serving as a cultural, educational, and social hub for the local community in Sveti Ivan Zelina, Croatia. The website provides information about library services, events, special collections, and access to an online catalog. The target audience includes children, youth, and adults interested in literature and cultural activities. The library operates as a non-profit public institution with a focus on community engagement and education. Technically, the website is built on Joomla CMS and utilizes common frontend technologies such as jQuery, Bootstrap, UIkit, and Smart Slider 3. It integrates Facebook SDK for social media and includes an accessibility widget (UserWay). The site is hosted under a Croatian academic registrar (CARNET), indicating a stable and appropriate hosting environment. The website is moderately performant and well-optimized for mobile devices with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic, with no dedicated privacy policy page found, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional, serving its public service mission effectively. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, and publishing incident response contacts to enhance security posture and compliance.

M

Muzej Sveti Ivan Zelina

muzej-zelina.hr

47

Muzej Sveti Ivan Zelina is a small, government-affiliated cultural institution dedicated to preserving and showcasing the heritage of Sveti Ivan Zelina, Croatia. The website provides detailed information about the museum's history, collections, events, and projects, targeting local visitors, tourists, and cultural enthusiasts. The digital presence is supported by a moderate technology stack including jQuery, Bootstrap, and various UI libraries, with Google Analytics for visitor tracking. The site is mobile responsive and includes accessibility features, enhancing user experience. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a formal privacy policy, indicating room for compliance improvement. WHOIS data confirms domain legitimacy and consistency with the museum's identity. Overall, the website is professional and trustworthy but could benefit from enhanced privacy and security practices.

T

Turistička zajednica grada Sv. I. Zeline

visitzelina.hr

41

The website represents the official tourism board of Sveti Ivan Zelina, Croatia, providing comprehensive information about local culture, events, gastronomy, sports, and accommodation. It serves as a key resource for tourists and local visitors, promoting sustainable tourism and regional attractions. The site is well-branded and consistent with its government and non-profit identity. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap, jQuery, and Owl Carousel, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is mobile-optimized and offers interactive features like maps and video content. Security-wise, the site uses HTTPS with good SSL configuration but lacks some security headers and formal security policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's purpose and location, indicating legitimacy and trustworthiness.

G

Grad Sveti Ivan Zelina

zelina.hr

49

The website www.zelina.hr/portal serves as the official municipal portal for the city of Sveti Ivan Zelina in Croatia. It provides a broad range of public information including local government structure, public tenders, news, events, and citizen services. The site targets residents and stakeholders of the municipality, offering them access to official announcements and resources. The business model is that of a government public service platform, with a focus on transparency and community engagement. The domain is well-established since 2001, reinforcing its credibility as an official source. Technically, the site is built on Joomla CMS with several common web technologies such as jQuery, MooTools, Bootstrap, and UIkit frameworks. It uses K2 for content management and RokSprocket for interactive features like slideshows. The site is moderately performant, mobile-optimized, and includes accessibility features such as dyslexia-friendly fonts and contrast controls. SEO and metadata are properly implemented, including Open Graph and Twitter cards. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism with opt-in functionality. CSRF tokens are present, and no sensitive data is exposed in the HTML. However, security headers like CSP and HSTS are not detected, and there is no published security policy or incident response contact information. Google Analytics is used for visitor tracking, with moderate user tracking levels and good privacy compliance. Overall, the website demonstrates a solid security posture and good privacy compliance for a government portal. The domain WHOIS data aligns well with the website content and geographic location, indicating high legitimacy. No critical vulnerabilities or suspicious content were found. Strategic recommendations include adding security headers, publishing a security policy, and providing incident response contacts to enhance trust and security maturity.

H

Hrvatski zavod za norme

hzn.hr

60

Hrvatski zavod za norme (HZN) is an independent, non-profit public institution serving as the national standards body of the Republic of Croatia. The organization focuses on the development and promotion of standards, facilitating voluntary application of norms within Croatia, and ensuring access to international and European standards through its memberships. The website reflects a well-established institution with a clear mission to support normization activities and provide related services such as sales of Croatian standards and membership management. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js, with good mobile optimization and accessibility features. It integrates Google Analytics for user tracking and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. The site is served over HTTPS with no visible security misconfigurations, although some security headers could be improved. From a security perspective, the site demonstrates a mature posture with encrypted communications, privacy compliance, and no evident vulnerabilities or exposed sensitive data. However, it lacks explicit incident response or vulnerability disclosure information, which could enhance trust and preparedness. The WHOIS data is privacy protected due to GDPR, which is justified for this type of governmental-related entity, though it limits transparency. Overall, the website is professional, trustworthy, and well-maintained, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining compliance with evolving privacy regulations to further strengthen security and trust.

A

Agencija za ugljikovodike

azu.hr

55

The website azu.hr represents the Agencija za ugljikovodike, a Croatian government agency specializing in the management and development of hydrocarbon and geothermal energy resources. The agency positions itself as a key player in Croatia's sustainable energy transition, providing data resources, coordinating projects, and supporting the development of new energy technologies. The website content is rich with news updates, project information, and sector-specific resources, targeting energy professionals, government stakeholders, and researchers. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, Material Icons, and accessibility tools like the UserWay widget. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured navigation. Hosting appears to be managed under Croatian academic or government infrastructure, consistent with the agency's profile. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No forms or direct contact information were found in the analyzed content, which may limit user engagement or support channels. Overall, the website is professional, trustworthy, and aligned with its governmental role. The domain registration data supports legitimacy and consistency with the agency's history. Strategic improvements in privacy compliance and security headers would further strengthen the site's posture.

The website www.javnanabava.hr serves as the official Croatian government portal dedicated to public procurement. It provides authoritative information, legal frameworks, news updates, statistical data, and educational resources aimed at public sector entities, suppliers, and other stakeholders involved in public procurement processes. The portal is managed by the Ministry of Economy's Directorate for Public Procurement Policy, reflecting a strong government presence and trustworthiness. Technically, the site leverages modern web technologies including Blazor, Bootstrap, and Oqtane CMS, ensuring a responsive and accessible user experience. Accessibility tools and cookie consent mechanisms are implemented, demonstrating compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, well-maintained, and serves its governmental informational purpose effectively.

I

Invest in Mecklenburg-Vorpommern GmbH

invest-in-mv.de

55

Invest in Mecklenburg-Vorpommern GmbH operates as a regional investment promotion agency focused on attracting and supporting investments in the German state of Mecklenburg-Vorpommern. The website provides comprehensive information and services including location analysis, funding advice, and business establishment support, targeting investors and companies interested in the region. The site is professionally designed, well-structured, and uses modern technologies such as TYPO3 CMS, Bootstrap, and UIkit, ensuring good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for the investment promotion entity.

W

WERK3 Werbeagentur GmbH & Co. KG

werk3.de

54

WERK3 Werbeagentur GmbH & Co. KG is a small, full-service advertising agency based in Rostock, Germany. The company specializes in marketing strategies, corporate design, campaign conception, and website development, positioning itself as a creative and award-winning agency within the regional media sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking comprehensive marketing solutions. Technically, the website is built on TYPO3 CMS and leverages a modern technology stack including jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. Analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel are integrated, with a clear cookie consent mechanism ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. From a security perspective, the website enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the website's claims, indicating a legitimate and trustworthy online presence. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with recommendations to enhance security headers, publish formal security policies, and improve accessibility to further strengthen its security posture and user trust.

Ż

Żywiec Zdrój

wolewode.pl

69

The website 'Mamo, tato, wolę wodę!' is an established educational program initiated by Żywiec Zdrój, targeting preschools in Poland to promote healthy hydration habits among children. The program offers educational materials, contests, and certification, positioning itself as a trusted and recognized initiative in the Polish education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google services for analytics and spam protection. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, though it lacks advanced security headers and a published security policy. The domain is stable and consistent with the business claims, enhancing trust. Overall, the site is secure, compliant with GDPR, and professionally maintained, suitable for its educational mission.

E

Effet Webservice

effet.info

48

Effet Webservice is a small Austrian technology company specializing in server administration, TYPO3 CMS, WordPress, ownCloud/Nextcloud hosting, SEO, and web marketing services. The company targets businesses and organizations seeking professional web hosting and digital marketing solutions. Their market position is that of a niche specialist with a focus on TYPO3 CMS and managed hosting services. The website is professionally designed, consistent in branding, and provides clear contact information including a physical address and phone number. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery frameworks, delivering a moderate performance and good mobile optimization. The site uses HTTPS and includes proper meta tags for SEO but lacks advanced security headers and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of privacy policy and cookie consent mechanisms. From a security perspective, the site benefits from HTTPS and absence of cookies but lacks security headers and formal security policies. The WHOIS data is privacy protected, which is justified for this business type, and no suspicious domain registration patterns were found. Overall, the security posture is moderate with room for improvement in policy transparency and header implementation. The overall risk is low given the professional nature of the site and absence of vulnerabilities, but the company should enhance privacy compliance and security best practices to strengthen trust and regulatory adherence.

D

D'aucy

daucy.fr

51

D'aucy is a well-established French cooperative brand specializing in vegetable products including canned, frozen, and prepared foods. The website reflects a mature digital presence with a focus on sustainability, cooperative values, and consumer engagement through recipes and educational content. Technically, the site uses WordPress with modern JavaScript libraries and analytics tools such as Matomo and Microsoft Clarity, ensuring a good user experience and data-driven insights. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and parent company association. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations.

S

StaWEBnice - tvorba webových stránek a eshopů

stawebnice.com

60

StaWEBnice is a small Czech technology service provider specializing in web development, e-commerce solutions, SEO, copywriting, and digital marketing. The company targets small business owners, entrepreneurs, and bloggers primarily in the Czech Republic, offering affordable and professional web and e-shop creation services. The website is well-structured, professionally designed, and provides comprehensive information about services, team, and client references. Technically, the site is built on Joomla CMS with modern frameworks and libraries, including Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

L

Leonardo Demartino

demartino.ar

52

Leonardo Demartino's website serves as a professional portfolio highlighting his expertise as a lead developer in software, game development, and multimedia applications. The site showcases a variety of projects across multiple platforms including iOS, Android, Steam, and consoles, positioning him as a niche player in the indie game and multimedia software market. The business model is primarily personal branding and project promotion, targeting developers, gamers, and potential collaborators. Technically, the website employs a modern and responsive design using Bootstrap, jQuery, and Google Fonts, ensuring good mobile optimization and user experience. The site is well-structured with clear navigation and professional content presentation. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. No forms or analytics scripts reduce the attack surface and tracking footprint, but the absence of incident response or vulnerability disclosure information indicates room for improvement in security maturity. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user confidence.

E

Elevate Festival

elevate.at

49

Elevate Festival is an established interdisciplinary cultural event held annually in Graz, Austria, focusing on music, art, and political discourse. The festival offers a diverse program including concerts, performances, workshops, and discussions, targeting culturally and politically engaged audiences. The website is built on TYPO3 CMS with Bootstrap framework, providing a responsive and well-structured user experience. It includes essential privacy and cookie policies, indicating GDPR compliance, and integrates Matomo analytics for user tracking. Security posture is solid with HTTPS enforcement and standard security headers, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-positioned within its niche.

F

FunkFeuer Wien - Verein zur Förderung freier Netze

funkfeuer.at

53

FunkFeuer.at represents a non-commercial, community-driven initiative focused on building and maintaining free, decentralized wireless networks in Austria. Founded in 2003, it operates through volunteer-run nodes that form a mesh network to provide open communication infrastructure without commercial interests. The website serves as an informational hub with links to regional initiatives, community resources, and sponsors supporting the project. Technically, the site uses modern web technologies such as Bootstrap and custom CSS, delivering a mobile-optimized and well-structured user experience. However, it lacks formal privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The absence of tracking and advertising tools aligns with the community's privacy-conscious ethos. WHOIS data confirms the domain's legitimacy and consistent registration details matching the organization's profile. Overall, the site is trustworthy and functional but could enhance compliance and security transparency.

M

mur.at - Initiative Netzkultur

mur.at

55

mur.at is a small cultural initiative based in Austria focused on promoting network culture and network art. The website serves as a portal to various related projects and provides resources such as a newsletter subscription and service status monitoring. The business model appears to be non-profit or community-driven, targeting artists and cultural communities interested in digital and networked art. Technically, the site is built using modern front-end technologies including Hugo CMS, Bootstrap, jQuery, and LESS CSS, with a responsive design suitable for mobile devices. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. Security posture is moderate with no detected blocking or WAF mechanisms, but the absence of security best practices and compliance documentation reduces the overall security score. Overall, the site is professional and consistent in branding but could enhance trust and compliance by adding privacy policies and security measures.

R

Radio Helsinki

helsinki.at

46

Radio Helsinki is a well-established community radio station based in Graz, Austria, with a strong focus on alternative and cultural programming. The website serves as a hub for live radio streaming, program schedules, podcasts, workshops, and community engagement. The station has a solid market position as a local non-profit media outlet with a loyal audience and active social media presence. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. The security posture is good with no detected vulnerabilities or exposed sensitive data. GDPR compliance is evident through comprehensive privacy and cookie policies. The domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly platform for community radio listeners and contributors. Strategic improvements could focus on publishing formal security policies and incident response information to enhance transparency and trust.

H

HochschülerInnenschaft an der TU Graz (HTU Graz)

htugraz.at

56

HTU Graz serves as the official student representation body at the Technical University of Graz, Austria. It advocates for student interests, provides various support services, and organizes events with a large volunteer base. The organization is well integrated within the university ecosystem and collaborates with multiple student unions and partners. The website is built on TYPO3 CMS with Bootstrap, offering a professional and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and formal incident response disclosures. Overall, the site reflects a trustworthy and credible non-profit educational entity.

T

TJ Spartak Hořovice, z.s.

plavanihorovice.cz

47

TJ Spartak Hořovice is a local Czech sports club specializing in swimming and modern pentathlon. The website serves as an information hub for club members and the local community, providing event calendars, news updates, photo galleries, and training schedules. The club operates as a non-profit entity, focusing on youth and amateur sports activities in the Hořovice region. The site is well maintained with consistent branding and relevant content for its target audience. Technically, the website is built on Joomla CMS with supporting frameworks such as Bootstrap and UIkit, leveraging jQuery and Google Fonts for enhanced user experience. The site is mobile optimized and includes a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS but lacks several important security headers like Content-Security-Policy and HSTS, which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent banner present but no explicit privacy policy or terms of service pages found. Overall, the website presents a moderate risk profile with good business credibility but could benefit from improved security practices and enhanced privacy documentation. Strategic recommendations include implementing security headers, publishing a comprehensive privacy policy, and maintaining up-to-date software to mitigate potential risks.

A

AutoTužil

autotuzil.cz

54

AutoTužil is a small automotive service provider based in the Czech Republic offering a wide range of vehicle repair and maintenance services including nonstop auto repair, air conditioning servicing, diagnostics, and sale of auto accessories. The website is professionally designed with clear navigation and good mobile optimization, targeting vehicle owners in the local region. The business appears well-established with a founding year of 2004 indicated in the footer, although domain registration details are unavailable, which introduces some uncertainty about domain legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled but lacking security headers and a privacy policy, which are recommended for compliance and trust. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved transparency and security practices.

N

Northstar Travel Media LLC

phocuswrighteurope.com

63

Phocuswright Europe is a prominent travel and technology conference organized by Northstar Travel Media LLC, targeting top executives, innovators, and influencers in the travel industry. The website promotes the 2026 event in Barcelona, Spain, offering professional development, networking, and insights into travel technology trends. The business holds a strong market position as a leading European travel tech event with a medium-sized organizational footprint. Technically, the site employs modern web technologies including Bootstrap, jQuery, and advanced analytics tools such as Google Analytics, Google Tag Manager, RudderStack, and Intercom, indicating a mature digital infrastructure. The website is well-optimized for mobile and accessibility, with good SEO practices and professional design. Security posture is solid with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site presence. Overall, the site is trustworthy and professional but would benefit from clarifying domain registration and publishing security policies.

B

ByteDance

cloudwego.io

59

CloudWeGo is an open-source middleware platform primarily focused on enabling enterprise cloud-native architectures and microservices. Backed by ByteDance, it offers a suite of high-performance frameworks and tools such as Kitex, Hertz, and Volo, targeting developers and organizations building scalable microservices. The website reflects a mature, professional presence with clear branding and a focus on technology innovation. Technically, the site is built using modern static site generation (Hugo), with a tech stack including Go, Rust, JavaScript, and Bootstrap, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and dedicated vulnerability reporting pages, though it lacks some security headers and formal privacy/cookie policies. Overall, the domain and website appear legitimate and trustworthy, with strong enterprise user endorsements and active community engagement via GitHub and Discord.

Ge-Baek Hosin Sool is a well-established traditional Taekwon-Do ITF school based in the Czech Republic, focusing on martial arts training with an emphasis on moral and traditional values rather than competitive sports. The website serves as an information hub for recruitment, member resources, event schedules, and media galleries, targeting individuals and families interested in Taekwon-Do. The school maintains partnerships with other martial arts organizations and receives sponsorship from various municipalities, indicating a strong community presence. Technically, the website uses modern web technologies including Bootstrap and Google Analytics, with responsive design and multilingual support. HTTPS is enforced, and Google Analytics consent is configured to deny ad and analytics storage by default, reflecting a basic level of privacy awareness. However, the site lacks explicit privacy and security policies, terms of service, and direct contact information, which are areas for improvement. From a security perspective, the site shows good SSL configuration but lacks security headers and formal incident response or vulnerability disclosure mechanisms. No WHOIS data is available due to privacy protection, but the website's professional appearance and affiliations suggest legitimacy. Overall, the site scores well on content quality and business credibility but could enhance privacy compliance and security posture. Strategic recommendations include implementing comprehensive privacy and security policies, adding terms of service, improving contact transparency, and deploying security headers to strengthen trust and compliance.

B

Bezplatná právní poradna online zdarma pro všechny

bezplatnapravniporadna.cz

47

Bezplatná právní poradna online zdarma pro všechny is a Czech Republic-based free legal advice website offering extensive legal content authored by legal professionals. The site targets the general public seeking legal guidance without charge, positioning itself as a comprehensive resource for various legal topics including family law, civil law, labor law, and more. The business model revolves around providing free legal information and advice, supported by advertising revenue from Google Adsense and Czech Sklik networks. The website demonstrates consistent branding and good content quality with a professional and user-friendly design.

E

European Business Enterprise, a.s.

statnisprava.cz

58

The website statnisprava.cz is a Czech government-related public service portal operated by European Business Enterprise, a.s. It provides comprehensive information on government offices, job vacancies, tenders, insolvencies, and related public services. The site targets a broad audience including citizens seeking official information and services. Technically, the site uses IBM Domino backend technology with a frontend built on HTML5, Bootstrap, jQuery, and Font Awesome, delivering a responsive and navigable user experience. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but the business information and content quality support legitimacy. Overall, the site is professional, content-rich, and serves an essential government function with room for security and privacy improvements.

P

PopUp Domination

pdmntn.com

52

PopUp Domination is a technology company specializing in popup marketing software designed to help businesses capture leads and increase conversions. The website analyzed is a login page for their SaaS platform, indicating an established business model focused on subscription services for digital marketers and website owners. The company appears to have been founded around 2017, consistent with the domain registration date. The website uses modern web technologies including AngularJS, Bootstrap, and integrates monitoring and customer support tools such as New Relic and Intercom, reflecting a moderate level of digital maturity.

B

Biotech

biotech-analytics.com

9

Biotech Analytics is a specialized data analytics platform focused on the biotechnology sector, offering features such as data export and site notifications. The company appears to be a small-sized entity based in Austria, founded in 2019, and closely associated with the Biotech brand. The website is professionally branded but contains minimal content, primarily serving as a portal for analytics services. Technically, the site uses modern JavaScript frameworks including Vue.js and Bootstrap, hosted by Hetzner Online GmbH, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is legitimate and trustworthy but could improve in security and privacy transparency.