Security Directory

D

Damfastore

damfastore.de

37

Damfastore is a German-based e-commerce retailer specializing in e-cigarettes, liquids, aromas, and related accessories. The website targets both private customers and business clients, offering a broad product range with a focus on quality and fast delivery. The company positions itself as a specialist retailer with physical stores and an online presence, supported by ISO 9001 certification indicating adherence to quality management standards. Technically, the website employs modern web technologies including JavaScript, CSS, and trusted third-party widgets such as Trusted Shops and Doofinder for enhanced user experience and trust. The site is mobile-optimized and uses HTTPS to secure communications. However, there is a lack of publicly accessible privacy policy, terms of service, and explicit contact information, which impacts privacy compliance and user trust. Security posture is moderate with good SSL configuration but missing security headers and incident response contacts. Overall, the site is functional and professional but could improve transparency and compliance documentation.

A

Avoria GmbH

avoria-liquids.de

49

Avoria GmbH is a well-established German manufacturer and retailer specializing in E-Liquids, E-cigarettes, and related vaping products. The company positions itself as a market leader in Germany with a strong focus on quality, safety, and customer satisfaction. Their e-commerce platform is built on the Shopware CMS, leveraging modern technologies and integrations such as Google Analytics, Hotjar, Klaviyo, and Chatra for marketing, analytics, and customer support. The website is professionally designed, mobile-optimized, and provides comprehensive product information and customer engagement features including live chat and detailed FAQs. Security posture is strong with HTTPS, secure cookies, and privacy compliance mechanisms in place, although there is room for improvement in publishing dedicated security policies and incident response information. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

D

dampftbeidir.de

dampftbeidir.de

63

dampftbeidir.de is a German e-commerce retailer specializing in vaping products including e-cigarettes, liquids, bases, aromas, and hardware. Established in 2014, the company has built a strong market presence supported by over 12,000 positive customer reviews and a Trusted Shops certification, indicating a reputable and trusted online business. The website targets adult consumers interested in vaping, with appropriate age verification mechanisms in place. Technically, the site is built on the JTL Shop platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and Slick Slider, and integrates Google Analytics 4 and Google Tag Manager for analytics and marketing purposes. The site is hosted behind Cloudflare, ensuring reliable performance and security. Security posture is good with HTTPS enforced and cookie consent mechanisms implemented, though explicit security headers and published security policies are lacking. Privacy compliance is basic with cookie consent but no clearly found privacy policy page. Overall, the website is professional, trustworthy, and well-optimized for its target market, with room for improvement in privacy transparency and security documentation.

B

besserdampfen

besserdampfen.de

45

besserdampfen is a well-established German e-commerce retailer specializing in vaping products including e-cigarettes, liquids, aromas, and accessories. Founded in 2011, the company has positioned itself as a market leader with multiple industry awards and customer trust recognitions. The website offers a comprehensive product catalog and customer service options targeting adult consumers interested in vaping. Technically, the site is built on the Shopware CMS platform, leveraging modern technologies such as Google Analytics, Usercentrics for consent management, and Doofinder for search functionality. Hosting is provided by Timme Hosting, with a secure HTTPS configuration and good mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. Privacy compliance is partial, with cookie consent but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

Z

ZAZO

zazo.de

56

ZAZO is a German-based e-commerce retailer specializing in vaping products including e-cigarettes, e-liquids, aromas, and accessories. Established since 2011, it positions itself as a trusted vape shop with a broad product range and reliable shipping services. The website is professionally designed, mobile-optimized, and provides a secure login mechanism with CSRF protection. However, explicit privacy and terms of service policies are not found in the provided content, which is a compliance gap. The cookie consent mechanism is implemented, supporting GDPR compliance to some extent. Security posture is good with HTTPS and secure forms, but incident response and vulnerability disclosure policies are absent. Overall, the site is legitimate, well-branded, and targets mature audiences interested in vaping products.

The website at profdata.my.site.com is a Salesforce-hosted login portal primarily designed for authenticated users to access services related to Profdata. The site leverages Salesforce Lightning technology and integrates multiple third-party payment processors such as Stripe, PayPal, and Adyen, as well as analytics tools like Google Analytics and Mixpanel. The platform appears to be targeted at professional users requiring secure access to business services. The absence of public business information and contact details on the login page suggests it is intended for existing customers or employees rather than the general public. Technically, the website demonstrates a moderate level of digital maturity, utilizing modern frameworks and cloud hosting on Salesforce infrastructure. The Content-Security-Policy header is well-defined, restricting resources to trusted domains, and HTTPS is enforced, indicating a strong security baseline. However, the site lacks additional security headers and explicit privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows good practices with HTTPS and CSP but could improve by adding more comprehensive security headers and reducing reliance on 'unsafe-inline' scripts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable for the subdomain, which is typical for Salesforce-managed domains, and does not raise immediate concerns. Overall, the site is secure and professionally implemented for its purpose as a login portal but lacks public-facing business and compliance information. Strategic improvements in privacy disclosures and security headers would enhance trust and compliance posture.

S

Supabase

supabase.in

69

Supabase is a technology company providing a comprehensive Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The platform is positioned as a leading open-source alternative in the backend-as-a-service market, with a strong developer focus and growing adoption by notable companies. Technically, the website is built on modern frameworks like Next.js and React, hosted with Cloudflare DNS, and demonstrates excellent performance and mobile optimization. Security posture is good with HTTPS enforced and domain protections in place, though there is room for improvement in publishing explicit security policies and enabling DNSSEC. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and technically mature, but should enhance transparency around privacy and security to improve compliance and user trust.

V

Veranstaltungsservice Bamberg GmbH

kartenkiosk-bamberg.de

62

Kartenkiosk Bamberg is a well-established regional event ticketing and concert organization service operating primarily in northern Bavaria, Germany. The company, Veranstaltungsservice Bamberg GmbH, has over 30 years of experience and offers ticket sales, event organization, and customer support services. The website is professionally designed with clear navigation, mobile optimization, and integrates modern frontend technologies such as Bootstrap and jQuery. It also includes comprehensive legal documentation including privacy policy, terms of service, and cookie consent mechanisms, demonstrating a strong commitment to compliance and user privacy. Social media integration and active marketing tools like Google Analytics and Facebook Pixel are used responsibly with user consent.

:

:data factory GmbH

add-factory.de

41

The website for :data factory GmbH is currently minimalistic, presenting only a logo image with no additional content or business information. This limits the ability to fully understand the company's market position, services, or target audience. The lack of metadata, structured data, and contact details suggests the site may be under development or serves as a placeholder. Technically, the site does not demonstrate modern web practices such as HTTPS, security headers, or SEO optimization, indicating low digital maturity. Security posture is weak due to absence of HTTPS and security policies, exposing potential risks if sensitive data were to be collected. Overall, the site presents a low-risk profile due to minimal content but requires significant improvements to meet professional, security, and compliance standards.

K

Klimaschutzportal

klimaschutz-landkreis-neumarkt.de

52

The Klimaschutzportal website serves as a comprehensive climate protection information platform for the Landkreis Neumarkt region in Germany. It provides detailed content on renewable energy sources, energy consulting, funding programs, and community events, positioning itself as a trusted local government affiliated resource. The site targets residents and stakeholders interested in sustainable energy and climate initiatives. Technically, the website is built on WordPress using Elementor and several specialized plugins for event management and GDPR compliance, reflecting a modern and maintainable infrastructure. Security posture is solid with HTTPS enforced and privacy-respecting analytics via Matomo, though some security headers could be improved. Privacy and cookie policies are clearly presented with an opt-in consent mechanism, demonstrating good compliance with GDPR. Overall, the site is professional, trustworthy, and well-structured, supporting its mission to inform and engage the local community on climate protection.

L

Landratsamt Neustadt a.d.Aisch-Bad Windsheim

kreis-nea.de

49

The website www.kreis-nea.de serves as the official digital portal for the Landkreis Neustadt a.d.Aisch-Bad Windsheim government authority in Germany. It provides comprehensive information and services related to local administration, including vehicle registration, family services, waste management, and digital appointment booking. The site targets residents and stakeholders within the county, offering a user-friendly and well-structured platform to access governmental resources and news. The business model is that of a public sector entity focused on service delivery and information dissemination. Technically, the website is built on TYPO3 CMS with Bootstrap framework, enhanced by privacy-conscious tools such as Matomo analytics and a GDPR-compliant consent manager. Hosting is managed via INWX, a reputable German provider. The site demonstrates good performance, mobile responsiveness, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and implementing a vulnerability disclosure mechanism to enhance transparency and security posture.

S

Sliač Hájniky

sliachajniky.sk

55

Sliač Hájniky is a Slovak real estate project focused on new residential housing development. The website serves as an informational platform showcasing different housing units (Dom A, B, C, D) with sections for exterior, interior, and project details. The target audience is general consumers interested in purchasing new homes in the Sliač area. The business model revolves around property development and sales, positioning itself as a local real estate offering. Technically, the site is built on WordPress using the Divi theme and Smart Slider 3 plugin, with integration of Facebook Pixel for marketing tracking. The site is mobile optimized and has good SEO practices via Yoast SEO plugin, but lacks full analytics configuration. Security posture is moderate with HTTPS enabled but missing key security headers and no visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure mechanisms are present. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

K

Kober-Verlag GmbH

pool-magazin.com

40

The website www.pool-magazin.com is a professionally designed media publication operated by Kober-Verlag GmbH, focusing on swimming pools and wellness topics. It serves industry professionals and enthusiasts by providing articles, news, and magazine downloads related to pool projects, technology, and wellness solutions. The site uses WordPress with the Kadence theme and several plugins to deliver a modern and responsive user experience. Analytics are handled via Matomo with cookie consent mechanisms in place, reflecting a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration issues or privacy protection, which slightly impacts trustworthiness. Overall, the site is safe, well-structured, and relevant to its niche audience.

P

piXel relations GmbH

pixelrelations.de

54

piXel relations GmbH is a well-established digital agency based in Cologne, Germany, specializing in digital strategies, web design, development, and online marketing services. With approximately 20 years of experience, the company targets businesses seeking comprehensive web solutions including SEO, eCommerce, and social media marketing. The website reflects a professional market position with clear service offerings and a strong local presence. Technically, the website is built on the webEdition CMS platform, utilizing modern frameworks such as UIkit and FontAwesome for UI elements. Analytics are implemented via Matomo and Microsoft Clarity, indicating a moderate level of digital maturity and user tracking. The site is mobile-optimized and SEO-friendly with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes CSRF protection on its contact form. However, it lacks visible security headers and an explicit cookie consent mechanism, which are areas for improvement. No security policy or incident response information is published, limiting transparency in security governance. Overall, the website is trustworthy and professional with a solid business foundation. The security posture is adequate but could be enhanced by implementing additional headers, visible consent mechanisms, and publishing security policies. The risk level is low, but attention to GDPR cookie compliance and security best practices is recommended.

S

Stredoslovenská vodárenská prevádzková spoločnosť, a.s.

stvps.sk

45

Stredoslovenská vodárenská prevádzková spoločnosť, a.s. (StVPS) is a Slovak regional water utility company providing water supply and wastewater management services. The company operates accredited laboratories for water quality analysis and offers a range of customer services including billing, connection information, and support. The website reflects a professional and consistent brand presence targeting Slovak customers and municipalities. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and moderate performance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its sector.

R

RV Phönix Augsburg

rv-phoenix.de

43

RV Phönix Augsburg is a well-established German cycling club founded in 1893, focused on organizing cycling events such as the Schwarzbräupreis and providing training opportunities for cycling enthusiasts. The website serves as a community hub with event news, galleries, and team information, targeting local and regional cycling participants. Technically, the site is built on WordPress with a modern tech stack including jQuery, Font Awesome, and various plugins for event and map functionalities. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is basic with a GDPR privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its niche well.

T

TSV Schwabmünchen Handball

handball-schwabmuenchen.de

46

TSV Schwabmünchen Handball is a local German sports club dedicated to handball, offering multiple teams across genders and age groups. The website serves as an information hub for news, schedules, team details, and community engagement, supported by active social media channels. Technically, the site is built on WordPress with modern plugins and themes, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and some security best practices, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

A

AutoScout24 GmbH

autoscout24.de

60

AutoScout24 GmbH operates the largest online automotive marketplace in Europe, offering a comprehensive platform for buying and selling new and used vehicles, motorcycles, commercial vehicles, and related services such as leasing and financing. The website targets consumers and dealers primarily in Germany and other European countries, providing a user-friendly and well-branded digital experience. The company maintains a strong market position with extensive vehicle listings and dealer networks. Technically, the website employs modern web technologies including React, service workers, and integrates with major analytics and advertising platforms such as Google Tag Manager, Facebook Pixel, and Bing Ads. Hosting is managed via Amazon AWS, ensuring reliable infrastructure. Security posture is robust with HTTPS enforcement, reCaptcha Enterprise integration, and GDPR-compliant consent management. However, explicit public security policies and incident response information are not found, representing an area for improvement. Overall, the website is professional, secure, and compliant, with a high trustworthiness rating.

A

Automobile Tierhold GmbH

kia-tierhold-augsburg.de

63

Automobile Tierhold GmbH operates as an authorized Kia automobile dealership based in Augsburg, Germany. The company offers a wide range of new and used Kia vehicles, including electric and hybrid models, and provides services such as test drive bookings, vehicle configurators, leasing options, and business vehicle solutions. The website reflects a professional local dealership with consistent Kia branding and a focus on customer engagement through online tools and offers. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern JavaScript libraries like jQuery and Adobe DTM for analytics and tag management. It employs Google Tag Manager and OneTrust for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security or incident response policies, which are areas for improvement. The WHOIS data is minimal but does not raise immediate concerns, though more transparency would enhance trust. Overall, the website is well-structured, user-friendly, and compliant with basic privacy requirements, serving its target audience effectively.

A

Automobile Tierhold GmbH

mazda-automobile-tierhold-augsburg.de

58

Automobile Tierhold GmbH operates as a local Mazda automobile dealership and service provider based in Augsburg, Germany. The website serves as an informational portal for Mazda models and related services, targeting prospective and current Mazda customers in the region. The business positions itself as an authorized Mazda partner, focusing on vehicle sales and maintenance services. The site branding is consistent with Mazda's official identity, enhancing trust among visitors. Technically, the website employs modern frontend technologies such as React and Slick Carousel for UI components, and integrates Google Tag Manager for analytics and marketing purposes. The site appears mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical optimizations. From a security perspective, the site uses HTTPS and asynchronous loading of analytics scripts, but lacks explicit security headers and visible privacy or cookie policies. There is no evidence of vulnerability disclosure or incident response mechanisms, which could be improved to enhance security posture and compliance. WHOIS data shows consistent German DNS usage, supporting legitimacy, but lacks detailed registrant information. Overall, the website is professional and safe for general audiences, but improvements in privacy compliance, security best practices, and contact transparency are recommended to strengthen trust and regulatory adherence.

Volvo Cars is a premium automotive manufacturer with a strong presence in Germany, offering vehicle sales and dealer services through a comprehensive online platform. The website provides localized content, including a dealer locator and test drive scheduling, targeting German customers. The technical infrastructure leverages modern web technologies such as Next.js, Google Tag Manager, and OneTrust for privacy compliance, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and vulnerability disclosures are not publicly available. The absence of WHOIS data is unusual but likely due to privacy or registry policies rather than malicious intent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

Z

zeitmechanik GmbH

zeitmechanik.net

59

zeitmechanik GmbH operates a German-language online workshop planning platform designed to optimize scheduling, workload, and revenue for automotive and related service providers. The company emphasizes ease of use, data security with AES-512 encryption, and GDPR compliance, targeting small to medium-sized workshops. The website is built on WordPress with modern plugins and includes a comprehensive cookie consent mechanism. However, WHOIS data for the domain is unavailable, raising questions about domain registration legitimacy despite professional website content and business claims. The site offers multiple contact channels and a free trial, positioning itself as a trusted SaaS provider in its niche.

The website www.emdizajn.sk is currently inaccessible due to a 403 Access Forbidden error page that blocks access based on geographic location (Finland). The page contains no usable content, metadata, or business information, preventing any meaningful analysis of the company's services, technical infrastructure, or security posture. No contact information, privacy policies, or compliance documentation is available from the provided data. Due to the access restriction, the website's security posture cannot be evaluated, and no vulnerabilities or security best practices can be identified. Overall, the site appears to be either geo-restricted or protected by access control mechanisms that prevent external analysis. For a comprehensive assessment, access to the full website content and WHOIS data is required.

S

STAVIVO IBV, s.r.o.

ibv.sk

60

Stavivo IBV, s.r.o. is a well-established Slovak company specializing in the retail of building materials, tools, and home improvement products with over 20 years of experience. The company targets construction professionals, DIY enthusiasts, and homeowners primarily in Slovakia, offering a broad product range including construction systems, roofing, bathrooms, doors, flooring, garden supplies, and tool rental services. Their market position is that of a trusted regional supplier with a solid reputation and a growing online presence including an e-commerce platform. Technically, the website is built on WordPress with modern plugins and performance optimizations such as WP Rocket and lazy loading. The site uses standard analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security-wise, the site employs HTTPS with good SSL configuration and some security best practices, but lacks explicit security policies and incident response information. Privacy compliance is partially addressed with a cookie consent mechanism, but no clear privacy policy or terms of service are found. Overall, the website is professional, trustworthy, and functional, with room for improvement in privacy and security transparency.

S

Stavebné Centrum Ádám

adamcentrum.sk

42

Stavebné Centrum Ádám is a Slovakian small business specializing in construction materials and home improvement services, operating since 2009. The company positions itself as a reliable partner for construction and renovation projects, targeting both individual customers and businesses in the local region. The website reflects a professional and consistent brand image, with clear service offerings and a focus on customer support through social media and contact forms. Technically, the site is built on WordPress using modern tools like Elementor and Astra theme, with good SEO and mobile optimization. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms in place, though there is room for improvement in explicit security policies and incident response information. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

P

PRESPOR spol. s r.o.

prespor.sk

45

PRESPOR spol. s r.o. operates the website prespor.sk, a Slovakian retail and e-commerce platform specializing in building materials, sanitary products, tools, and garden supplies. The company targets construction professionals, DIY enthusiasts, and gardeners, offering a broad product range through both physical and online stores. The website is well-branded and consistent with the company's traditional market position in Slovakia. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins to provide a functional and responsive user experience. The site integrates Google Tag Manager, Facebook Pixel, and other marketing tools for analytics and advertising. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and detailed security or privacy policies. No critical vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are in place, but privacy and terms of service pages are not clearly found, indicating room for compliance improvement. Overall, the website presents a professional and trustworthy front for the business with moderate technical maturity and security posture. Strategic enhancements in privacy compliance and security policy transparency would strengthen trust and regulatory adherence.

E

Eden Malacky

edenmalacky.sk

42

Eden Malacky is a small retail business specializing in bathroom and kitchen materials and services, targeting homeowners and individuals in Slovakia. The website is built on WordPress using the Divi theme and incorporates common marketing and analytics tools such as Google Analytics and Facebook Pixel. The technical infrastructure is moderate with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy image but would benefit from enhanced security and compliance documentation.

K

KaMi Levice

kami-lv.sk

52

KaMi Levice operates as a specialized bathroom and parquet studio based in Slovakia, offering services including bathroom visual design, bathroom equipment and furniture, tiles, sanitary ware, and various types of flooring such as laminate, vinyl, composite, and wooden floors. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and UI libraries, hosted on Wix's Ireland data center. The digital presence is functional with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No incident response or security contact information is provided, which limits the security transparency. Overall, the website is professional and trustworthy for a small local business but would benefit from enhanced privacy compliance and security best practices.

L

LG Krono

lgkrono.sk

45

LG Krono is a Slovak interior design studio specializing in housing reconstruction and detailed functional design, leveraging over two decades of experience. The company targets homeowners and clients seeking comprehensive interior renovation services. The website is built on a modern WordPress infrastructure using Elementor, Redux, and NitroPack for performance optimization, indicating a mature digital presence. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and terms policies are absent. The site integrates cookie consent via Cookiebot and uses Google Tag Manager for analytics, reflecting moderate user tracking and basic privacy compliance. Overall, LG Krono presents a professional and trustworthy online presence with room for improvement in privacy disclosures and contact transparency.

S

Stova

stova.sk

59

Stova is a well-established retail company based in Slovakia, specializing in building materials, garden supplies, and home improvement products. The website presents a professional and regionally focused business with a clear market position in the Spiš region. Their digital presence is built on WordPress with a solid technical infrastructure including SEO optimization, GDPR compliance, and social media integration. The site uses HTTPS and DNSSEC, indicating a good security baseline. However, there is room for improvement in security policies and incident response transparency. Overall, the website is trustworthy and serves its target audience effectively.

M

Mirad

mirad.sk

57

Mirad is a well-established Slovak retail and wholesale company specializing in bathroom products, fireplaces, heating, and pumping technology. With over 26 years in the market and physical stores in Prešov, Poprad, and Giraltovce, Mirad serves both end consumers and business clients. The website reflects a mature digital presence built on WordPress with Elementor, featuring a professional design, clear navigation, and relevant content. The company leverages modern SEO and marketing tools including Yoast SEO and Google Tag Manager. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Contact information is clearly provided, enhancing trust and business credibility.

K

Kahoot! AS

kahoot.com

69

Kahoot! AS operates a globally recognized game-based learning platform that enables educators, students, and corporate trainers to create and participate in interactive quizzes and learning games. The platform's freemium SaaS business model supports a large user base with premium and enterprise offerings. Technically, the website is built on WordPress, hosted on AWS infrastructure, and integrates modern JavaScript libraries and payment processing via Recurly. The site demonstrates good digital maturity with responsive design, accessibility considerations, and SEO optimization. Security posture is solid with HTTPS enforcement, clientTransferProhibited domain status, and reputable third-party integrations, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for educational and corporate learning needs.

B

Bundesministerium der Justiz

unserrechtsstaat.de

41

The website 'Unser Rechtsstaat' is an official educational platform operated by the German Federal Ministry of Justice (Bundesministerium der Justiz). It aims to educate the general public about the German Grundgesetz (Basic Law) through interactive content, quizzes, and informative articles. The site is well-branded with government logos and provides a trustworthy source of constitutional knowledge. The target audience is broad, encompassing all German citizens interested in understanding their fundamental rights and the legal framework of their country. Technically, the website employs a modern frontend stack including jQuery, Foundation CSS, Slick Carousel, and React components for interactive map features. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. No CMS is explicitly detected, suggesting a custom or government-managed platform. From a security perspective, the site enforces HTTPS and uses cookie consent tools but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with a legitimate government domain, enhancing trustworthiness. Overall, the security posture is solid but could be improved by adding security headers and a vulnerability disclosure policy. The overall risk assessment is low, with the site presenting no suspicious or malicious content. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and possibly adding terms of service for completeness. The site serves as a reliable and professional government resource for constitutional education.

E

Einfacher und schneller bezahlen mit Girocode und Paysier

paysier.com

60

PAYSIER is a German-based payment service provider specializing in secure and convenient invoice payments integrated with SCHUFA credit checks. The company targets online merchants and their customers, offering a solution that enhances risk management and sales performance. The website is professionally designed using WordPress, with modern technologies such as Google Analytics and Tag Manager for analytics and marketing purposes. Cookie consent mechanisms are implemented in compliance with GDPR, ensuring user privacy and data protection. Security posture is strong with HTTPS enforced and standard security headers present, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the domain registration details are consistent with the business claims, indicating legitimacy and trustworthiness.

T

TOOLPIXX / Andreas van Loock

fraspy.com

57

FRASPY is a specialized service provider offering age verification and identity check solutions tailored for online retailers selling age-restricted products such as e-cigarettes, tobacco, alcohol, and CBD. The company operates primarily in the German-speaking market, with a focus on compliance with youth protection laws. Their business model centers on providing plugins and SaaS solutions integrated with a wide range of e-commerce platforms, supported by full-service installation and ongoing support. The company has established trust through partnerships with recognized entities like SCHUFA and Händlerbund and has a solid customer base with positive testimonials. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Borlabs Cookie for privacy compliance. The site employs modern web technologies including lazy loading for images and optimization scripts, ensuring moderate performance and good mobile responsiveness. SEO and accessibility are adequately addressed, though some improvements could be made in security headers and accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which slightly impacts the overall trust score. Overall, FRASPY presents a professional and trustworthy online presence with a clear business focus and compliance orientation. Strategic improvements in security transparency and domain registration clarity would enhance trust and security posture further.

D

DS MACHINES s.r.o.

kochpro.sk

68

KochPro, operated by DS MACHINES s.r.o., is a Slovak-based company specializing in professional gastronomy equipment including cooking kettles, frying pans, and kitchen robots. The company positions itself as a reliable partner for professional kitchens in Slovakia and the Czech Republic, leveraging a partnership with the established manufacturer Alba Horovice. Their business model focuses on B2B sales, installation, and servicing of gastro equipment, supported by express repair services and extended warranties. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, the website uses modern web technologies including Laravel Livewire, service workers, and integrates Google Tag Manager and analytics tools. The site is served over HTTPS with CSRF protections and a comprehensive cookie consent mechanism, indicating a good level of digital maturity and privacy compliance. Performance is moderate with room for optimization, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and provides granular cookie consent options. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively. Strategic improvements in security headers and incident response transparency would further enhance its posture.

P

PDI Technologies, Inc.

pdisoftware.com

67

PDI Technologies, Inc. is an established enterprise-level company specializing in software solutions for fuel wholesale and convenience retail businesses. Their website presents a professional and well-structured digital presence, targeting B2B clients in the energy and retail sectors. The company leverages modern marketing and analytics tools such as Marketo and Google Tag Manager, indicating a mature digital infrastructure. The website is hosted via Cloudflare and built on WordPress, with SEO optimization through Yoast SEO Premium. Security posture is good with HTTPS enabled and domain transfer protections in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is currently weak, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and business credible, but could enhance user trust and compliance by publishing comprehensive privacy and security policies.

L

Ladislav Pavlovič

ladislavpavlovic.sk

52

The website ladislavpavlovic.sk is a dedicated informational and commemorative site focused on the life and career of Ladislav Pavlovič, a Slovak football legend. It serves a niche audience of football fans and sports historians primarily in Slovakia, offering biographical content, career highlights, achievements, and media galleries. The site also links to a related football event domain, pavloviccup.com, indicating a partnership or related service. Technically, the site uses a moderately modern stack including Bootstrap, jQuery, and Google Fonts, hosted likely by Websupport, with DNSSEC enabled for domain security. However, it lacks advanced security headers and privacy policies, which are critical for compliance and trust. The site is mobile responsive and has good navigation and content quality but does not collect user data via forms. Security posture is moderate with room for improvement in headers and privacy compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.

Z

Zerg Data s.r.o.

healthprofile.digital

62

Healthprofile.digital is a Slovak-based digital healthcare platform operated by Zerg Data s.r.o., established in 2018. The website provides health profiling services or information primarily targeting Slovak-speaking users, with additional language support for English and German. The platform is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO. Hosting appears to be managed through Websupport, a Slovak hosting provider. Technically, the site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and important security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit contact or incident response information is provided. The domain registration data aligns well with the website's business claims, supporting legitimacy. Overall, the site is functional and moderately professional but requires improvements in privacy, security, and transparency to enhance trust and compliance.

The website cassiopea.sk presents minimal content, consisting primarily of a single image and basic HTML structure with no substantive business information or user engagement features. The domain is well aged, registered since 2007, and uses DNSSEC and HTTPS, indicating a baseline of technical legitimacy. However, the lack of privacy policies, contact information, and security headers suggests a low maturity level in security and compliance practices. The use of Google Analytics indicates some level of user tracking, but without visible privacy disclosures, this raises compliance concerns. Overall, the site appears to be a placeholder or under development rather than a fully operational business website.

U babičky is a small hospitality business based in Banská Bystrica, Slovakia, specializing in preparing and delivering weekly lunch menus with soup, catering services for various social events, and large-volume food delivery for corporate clients. The website presents a clear and consistent brand image with detailed menu offerings including allergen information, and provides multiple contact channels including phone and email. The business targets local residents and companies seeking convenient and quality meal options. Technically, the website uses common web technologies such as jQuery, Bootstrap, FontAwesome, and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

R

Reštaurácia Červený Rak Banská Bystrica

cervenyrak.sk

55

Reštaurácia Červený Rak Banská Bystrica is a well-established local hospitality business in Slovakia, operating since 1997 with an online presence since 2003. The company offers a blend of traditional and modern cuisine, complemented by a brewery and catering services. Their market position is that of a trusted local restaurant and pub with additional services such as food delivery and private event hosting. Technically, the website is built on WordPress using Elementor and OceanWP, with modern plugins for SEO, GDPR compliance, and user interaction. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the website is trustworthy and compliant with GDPR, serving a mature audience due to alcohol-related content.

VEGUM a.s. is a Slovak industrial manufacturing company specializing in rubber mixtures, molded and pressed rubber products, and engineering production. The company also engages in energy and environmental activities. The website presents a professional and consistent brand image targeting industrial clients and business partners. The site is primarily in Slovak with options for English and German, indicating some international outreach. The technical infrastructure is basic but functional, leveraging jQuery and Jssor slider technology. The website is moderately optimized for mobile and accessibility but could benefit from improvements in these areas. Security posture is adequate with HTTPS enabled and GDPR compliance evident through a detailed privacy policy and cookie consent mechanism. However, the absence of security headers and incident response contacts suggests room for improvement. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data and visible certifications. No suspicious or malicious content was detected.

A

Allianz - Slovenská poisťovňa, a.s.

allianz.sk

68

Allianz - Slovenská poisťovňa, a.s. operates a professional insurance website targeting private individuals and businesses in Slovakia. The company offers a broad range of insurance products including property, motor, travel, life, and business insurance. The website reflects the strong brand identity of the Allianz Group and is designed to provide clear navigation and relevant content for its audience. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.

L

LALIKBUS

lalikbus.sk

53

LALIKBUS is a Slovak passenger transport company with over 15 years of experience, offering a range of vehicle options including buses, microbuses, and personal autocars for various transport needs such as airport transfers and events. The website is built on WordPress and uses modern web technologies including Google Fonts, FontAwesome, and MasterSlider for a professional presentation. Contact information is clearly provided, including phone, email, and social media links, supporting customer engagement. Security measures include HTTPS with DNSSEC and Google reCAPTCHA for form protection, though the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. Overall, the site is functional, trustworthy, and professionally presented, but would benefit from enhanced privacy compliance and security best practices.

3

3b, s.r.o.

forfanshop.com

51

FORFANSHOP.com is an e-commerce platform operated by 3b, s.r.o., a Slovak company founded in 2014. The website specializes in retailing sportswear and fan merchandise, targeting sports enthusiasts primarily in Slovakia and Europe. The business model focuses on online sales of custom sports collections and fan articles, positioning itself as a niche regional leader in this market segment. The website content is well-structured, with clear navigation and a consistent brand presence. Technically, the website employs modern web technologies including JavaScript, CSS, and Vue.js components, with integration of Facebook SDK for social media and tracking purposes. Hosting appears to be provided by Websupport.sk, and the site is secured with HTTPS. Mobile optimization is good, though accessibility and SEO features are basic. Cookie consent is managed via CookieFirst, indicating some level of privacy compliance. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and explicit security or privacy policies. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the business information, supporting legitimacy. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy and security practices. Strategic enhancements in security headers, privacy documentation, and incident response readiness are recommended to strengthen the security posture and regulatory compliance.

S

SLAVO KISS

slavokiss.com

60

Slavokiss.com is a professional portfolio website for a graphic designer specializing in sports logos and branding. The site showcases a variety of sports-related branding projects including logos, fonts, and uniform designs, targeting clients worldwide. The business appears to be a small-scale, niche service provider with a focus on sports brand identity development. The website is well structured with a clean design and includes social media integration for broader reach. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with integrations of social media SDKs and Google Fonts. Hosting and domain registration are consistent with a legitimate small business, with the domain registered since 2013 and no privacy protection on WHOIS data. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and implementing privacy and cookie policies. No signs of WAF or content blocking were detected, and the content is safe for general audiences.

Q

Queen Barber

queenbarber.sk

57

Queen Barber is a small hospitality business operating barber shops in Slovakia, with physical locations in Banská Bystrica and Košice. The company focuses on providing quality men's haircut services emphasizing quality, comfort, and entertainment. The website reflects a local business with a clear brand identity and a focus on customer experience. Technically, the site is built on WordPress using the Impreza theme and WPBakery page builder, integrating modern marketing and analytics tools such as Google Analytics and Facebook Pixel with GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and DNSSEC enabled, though some security headers are missing and no explicit security or incident response policies are published. Overall, the website is professional, user-friendly, and compliant with basic privacy regulations, though it lacks explicit privacy and terms of service documentation. The domain registration data is consistent with the business profile, indicating legitimacy and trustworthiness.

K

KOMPOT

kompot.sk

62

KOMPOT is a Slovak e-commerce retailer specializing in unique Slovak design clothing and lifestyle products. Established in 2004, the company positions itself as a niche brand offering quality, hand-printed textiles and accessories with a focus on humor and durable design. The website is built on the Shopify platform, leveraging modern e-commerce technologies and marketing tools to reach its target audience primarily in Slovakia and surrounding regions. The digital infrastructure is mature, with good performance, mobile optimization, and SEO practices in place. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although explicit security policies and incident response contacts are not publicly available. Overall, the business demonstrates a credible online presence with consistent branding and compliance with GDPR regulations.

S

Stará Tržnica Banská Bystrica

staratrznicabb.sk

57

Stará Tržnica Banská Bystrica operates as a local community hub focused on gastronomy, cultural events, and a farmers market. The website presents a well-structured digital presence with event listings, community engagement features such as a radio message form, and a mobile application. The business targets local residents and visitors interested in quality food and cultural experiences. Technically, the site is built on Webflow CMS, uses modern JavaScript libraries like jQuery and Splide.js, and integrates marketing and analytics tools such as MailerLite and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are absent. Privacy compliance is good with a GDPR-compliant privacy policy and cookie management. Overall, the site is professional, trustworthy, and well-optimized for mobile users.