Security Directory

D

Department of Health - National Malaria Control and Elimination Program

nmcep.net

59

The Online Malaria Information System (OLMIS) is a government-backed platform managed by the Department of Health's National Malaria Control and Elimination Program in the Philippines. It serves as a centralized portal for malaria data management, surveillance, and program coordination aimed at malaria elimination by 2030. The website is professionally designed with clear branding and provides comprehensive information about the program's mission, objectives, and partners. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and various plugins to deliver a responsive and user-friendly experience. Security measures include HTTPS enforcement and CSRF protection on forms, though advanced security headers and bot protections are lacking. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or registration issues, which slightly impacts trust. Overall, the platform demonstrates a solid digital presence supporting a critical public health initiative.

G

Gemeinde Dintikon

dintikon.ch

50

Gemeinde Dintikon is the official website of the municipality of Dintikon, Switzerland, providing residents and visitors with comprehensive information about local government services, politics, administration, education, environment, leisure activities, and current news. The site serves as a key communication channel for the community, offering contact details, event announcements, and online services. The website is well-structured and professionally designed, reflecting its role as a trusted local government portal. Technically, the website employs a modern but straightforward technology stack including jQuery, Bootstrap, Moment.js, and Google reCAPTCHA for form security. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and SEO optimization. No major technical issues or vulnerabilities are evident from the provided data. From a security perspective, the website uses HTTPS and integrates Google reCAPTCHA to protect forms. However, it lacks visible security headers and does not publish privacy or cookie policies, which are important for GDPR compliance and user trust. There is no evidence of a vulnerability disclosure policy or incident response contacts. Overall, the security posture is moderate but could be enhanced with additional best practices. The overall risk assessment is low given the nature of the site as a municipal government portal with no sensitive user data collection beyond basic contact forms. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing clear incident response contacts to improve compliance and security maturity.

F

Flughafen Nürnberg GmbH

flughafen-nuernberg.de

64

Flughafen Nürnberg GmbH operates the regional airport in Nuremberg, Germany, providing comprehensive flight information, parking services, VIP offerings, and travel bookings. The website serves a broad audience of travelers and business partners with a well-structured, bilingual interface. Technically, the site uses modern CMS technology (Scrivito) and integrates consent management via Usercentrics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response details could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site projects professionalism and trustworthiness consistent with a public transportation entity.

G

gesinn.it GmbH & Co. KG

semantic.wiki

60

gesinn.it GmbH & Co. KG operates semantic.wiki, a German-based technology company specializing in modular semantic wiki software and enterprise-class MediaWiki solutions. Their offerings include semantic::core, semantic::apps, and semantic::packs, targeting enterprises and organizations seeking advanced knowledge management and process automation tools. The company positions itself as a niche provider with a focus on semantic technologies and agile documentation. The website reflects a professional and consistent brand image with clear contact channels and customer testimonials, indicating a trustworthy business presence. Technically, the site runs on MediaWiki 1.27.1 with Semantic MediaWiki extensions, uses jQuery and Bootstrap for UI, and integrates Piwik for analytics. Hosting is via Cronon GmbH, with domain registration dating back to 2015, consistent with the company's founding. Security posture is good with HTTPS enabled and CSRF protections, though some security headers and DNSSEC are missing. Privacy compliance is basic but includes cookie consent and a privacy policy. Overall, the site is well-structured, mobile-optimized, and provides relevant business information.

A

Avenir Financial Group

avenirgroup.cz

52

Avenir Financial Group is a Czech Republic based financial advisory company with over 20 years of experience among its founders. The company offers a comprehensive range of financial services including insurance, investment, real estate, mortgage advisory, and vehicle financing. Their business model focuses on providing clients with access to a broad portfolio of vetted financial institutions and products, emphasizing fair and quality service. The website reflects a mature digital presence built on Joomla CMS with Bootstrap and jQuery, featuring a cookie consent mechanism and Google Analytics integration with IP anonymization. Contact information and partner affiliations are clearly presented, enhancing business credibility. However, the absence of WHOIS data limits domain trust evaluation. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, user-friendly, and compliant with privacy regulations, targeting clients seeking financial and insurance services in the Czech market.

PozzWare.com is a personal website operated by Stefano Pozzati, offering free software, card games, video games, and art. The site targets a general audience interested in technology and creative digital content. It operates as a small-scale personal project supported by donations and monetized through Google Adsense. The website is hosted by SmarterASP.NET and uses modern web technologies including Bootstrap, jQuery, Angular, and Unity for game development. The domain is well-established, registered since 2007, indicating a stable online presence. From a technical perspective, the site employs standard web technologies and frameworks, with moderate performance and good mobile optimization. However, it lacks advanced security headers and DNSSEC, and does not provide privacy or cookie policies, which are important for compliance and user trust. Google Analytics and Adsense are used for tracking and advertising, but no explicit cookie consent mechanism is present. Security posture is basic with HTTPS enabled but missing several best practices such as security headers and incident response information. No critical vulnerabilities or malware indicators were found, but improvements are recommended to enhance security and privacy compliance. Overall, the site is functional and trustworthy as a personal project but would benefit from enhanced security and compliance measures. Strategic recommendations include implementing DNSSEC, adding privacy and cookie policies with consent mechanisms, deploying security headers, and publishing vulnerability disclosure and incident response contacts to improve trust and compliance.

S

Sönke Ludwig

vibed.org

46

vibed.org is the official website for vibe.d, an open source asynchronous I/O and web toolkit framework written in the D programming language. The project targets developers seeking efficient, fiber-based blocking programming models and high-performance web frameworks. The site provides detailed feature descriptions, code examples, documentation, and community resources, positioning itself as a niche but mature technology framework with a consistent update cadence since its founding in 2012. Technically, the website employs standard web technologies including Bootstrap CSS and Normalize.css for styling, and Prettify.js for code syntax highlighting. Hosting is managed through German-based hosting providers, with stable DNS configurations. The site is mobile optimized and well structured, offering a good user experience and clear navigation. However, it lacks advanced accessibility features and modern security headers. From a security perspective, the site uses a domain status that prevents unauthorized transfers but does not enable DNSSEC. No HTTPS or SSL configuration details were provided, and no security headers were detected in the HTML content. Privacy compliance is minimal, with no cookie consent mechanisms or GDPR-specific disclosures. Contact information is limited to a contact page form, with no direct emails or phone numbers published. No vulnerability disclosure or incident response policies are present. Overall, vibed.org is a credible and professional technical project website with good content quality and business credibility. Security posture and privacy compliance require improvement to meet modern standards. The site is safe for general audiences and free from suspicious or malicious content.

M

Mitegro GmbH & Co. KG

markenlust.de

59

Mitegro GmbH & Co. KG operates a professional electro wholesale cooperation platform in Germany, focusing on providing top brands and quality products to specialized retailers, craftsmen, and industry sectors. The website serves as a marketing and informational hub for their brand partners and target audience, emphasizing quality, performance, and security in their offerings. The company positions itself as a strong market player within the German electro wholesale industry, leveraging partnerships with well-known brands such as Bosch, Liebherr, Miele, and Siemens. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frontend technologies including jQuery, Bootstrap, and Slick Carousel for responsive and interactive user experience. The site is mobile-optimized and includes SEO best practices such as meta tags and structured navigation. Cookie consent mechanisms and GDPR-compliant privacy policies are implemented, reflecting a mature digital compliance posture. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security headers and dedicated security or incident response pages. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's business claims, indicating a legitimate and professionally managed domain. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security policy transparency and advanced security headers. The risk profile is low, and the site is suitable for its business purpose with recommendations to enhance security posture further.

Pykonik is a well-established community organization focused on Python programming enthusiasts in Kraków, Poland. The website serves as a hub for event announcements, speaker presentations, and community engagement. It has a strong local presence with a history dating back to 2008, supported by active social media channels and meetup events. The business model revolves around organizing and promoting Python user group meetings and related social gatherings. Technically, the site is built on a modern stack including Python, Django, Bootstrap, and uses Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enabled but lacks advanced security headers and DNSSEC is not configured. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy but could improve in security and compliance areas.

N

NBtech

nbtech.fr

46

NBtech is a French industrial engineering and technical consulting company founded in 2014, specializing in automotive, aeronautics, railway, and industrial maintenance sectors. The company provides pragmatic and comprehensive solutions including mechanical and electronic testing, incident analysis, and industrial methods consulting. Their client portfolio includes major industry players such as Bosch, Thales, Airbus, Renault, Stellantis, and SNCF, indicating a strong market position. The website is professionally designed, well-structured, and includes detailed information about services, partners, and company values. Technically, the site is built on WordPress with Elementor, uses modern libraries and frameworks, and is hosted by PLANETHOSTER. It implements GDPR-compliant cookie consent and privacy policies, and integrates Google Analytics and Tag Manager for analytics. Security posture is strong with HTTPS enforced and security headers present, though no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence with good privacy compliance and trustworthy business information.

N

Niedax Rico Engineering

rico-engineering.de

49

Rico Engineering GmbH is a German engineering company specializing in cable route planning and mechanical services with over 50 years of experience. The company operates as part of the Niedax Group and targets industrial clients requiring expert planning support throughout all project phases. The website is professionally designed using TYPO3 CMS and modern web technologies, providing clear navigation and relevant business content. Contact information is prominently displayed, supporting effective client communication. The technical infrastructure is solid, hosted likely by Deutsche Telekom, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website reflects a credible and trustworthy business presence with room for enhanced security and compliance maturity.

N

Niedax Group

niedax-group.com

56

Niedax Group is a well-established German company specializing in cable management systems with over 100 years of experience. It operates globally with numerous subsidiaries and partners, serving industries such as energy, infrastructure, and manufacturing. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS with modern frontend technologies. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be enhanced. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the company's extensive footprint and professional presentation.

A

Ace IT s.r.o.

gdpr-experts.cz

44

GDPR Experts, operated by Ace IT s.r.o., is a specialized small business based in the Czech Republic providing GDPR compliance and IT security consulting services. Their offerings include GDPR training, audits, legal documentation, and IT security assessments tailored for companies and entrepreneurs within the EU. The website is professionally designed with clear navigation and relevant content targeting businesses needing GDPR solutions. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, indicating a moderate level of digital maturity. However, there are gaps in privacy compliance, notably the absence of explicit privacy and cookie policies. Security posture is adequate with HTTPS implied but lacks visible security headers and incident response information. Overall, the domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

A

Acemail

acemail.cz

47

The website acemail.cz serves as a webmail client interface, powered by RainLoop Webmail software. It provides users with email management capabilities including support for PGP encryption and two-factor authentication, targeting general users seeking secure email access. The domain is registered since 2011 in the Czech Republic, indicating a mature service presence. Technically, the site uses modern JavaScript frameworks like Knockout.js and Bootstrap for UI rendering, but lacks advanced SEO and accessibility features. Security-wise, while it supports important features like 2FA and PGP, it lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. Overall, the site is functional but could improve in transparency and security best practices.

G

Gibraltaz

gibraltaz.fr

10

Gibraltaz is a French technology company founded in 2020, specializing in custom digital business solutions and software services primarily serving enterprises, associations, and territorial organizations in the Grand Est region and Luxembourg. The company offers a broad range of services including consulting, software development, UX/UI design, maintenance, and digital transformation support. They are recognized partners of regional industry initiatives and have won awards for innovation. Technically, the website is built on WordPress with modern plugins and frameworks, hosted by OVH, and uses HTTPS with some security best practices but lacks explicit security headers and formal policies. Contact is primarily via email and web forms, with social media presence on LinkedIn and Facebook enhancing credibility. Privacy and cookie policies are missing, representing compliance gaps. Overall, the website is professional, content-rich, and trustworthy, with moderate technical and security maturity.

N

Niedax | Kleinhuis | Fintech

niedax.de

57

Niedax | Kleinhuis | Fintech is a well-established German industrial group specializing in cable management systems and electrical installation materials. With over 100 years of experience and a global presence in more than 30 countries, the company offers a broad product portfolio including steel, stainless steel, fiberglass-reinforced plastic, and PVC solutions. Their services include custom project management, BIM data provision, and technical consulting, targeting electrical installation professionals and industrial clients worldwide. The website reflects a mature digital presence with comprehensive content, multiple language options, and a professional design consistent with their market position. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and Swiper JS, ensuring good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS enforced and use of Google reCAPTCHA on forms, though explicit security headers and published security policies are not evident. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The main concern is the absence of WHOIS data for the domain www.niedax.com, which is inconsistent with the company's long history and global footprint. This discrepancy may be due to privacy protection or domain registration under a different domain, which slightly reduces trustworthiness. Overall, the website is professional, secure, and business credible, with recommendations to enhance transparency and security disclosures.

M

Metrel GmbH

metrel.de

58

Metrel GmbH is a medium-sized German company specializing in the manufacture and distribution of electrical safety testing instruments and related software solutions. Their product portfolio covers electrical safety in installations, high-voltage insulation testing, PAT testing, power quality analysis, and software including cloud services. The company targets electrical engineers, safety inspectors, laboratories, and industrial customers primarily in the energy and electrical sectors. The website reflects a professional B2B business model with a clear market position in Europe. Technically, the website uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and is hosted on Microsoft Azure DNS infrastructure. The site is mobile-optimized and SEO-friendly. Security posture is good with HTTPS, security headers, and secure forms, though no explicit security policy or incident response page is published. Privacy and cookie policies are comprehensive and GDPR compliant. Contact information is clearly provided with company domain emails and phone numbers. Overall, the website is trustworthy, professional, and well-maintained.

Focus Nerez is a specialized professional magazine dedicated to stainless and corrosion-resistant steels, targeting industry professionals and businesses in the manufacturing sector. The website provides news, technical articles, e-paper subscriptions, and advertising opportunities, positioning itself as a niche media outlet within the Czech Republic and neighboring regions. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. However, some technical improvements are needed, particularly in security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure appear professional and trustworthy. Overall, the site demonstrates a moderate level of digital maturity with room for security and compliance enhancements.

V

vykup.sk s.r.o.

vykupminci.sk

49

vykup.sk s.r.o. operates a specialized retail business focused on purchasing gold and silver coins, including collectible and investment coins, primarily serving customers in Bratislava and Košice, Slovakia. The company offers free coin valuation and immediate cash payments, positioning itself as a trusted local numismatic buyer with additional services such as banknote and medal purchases. The website reflects a small-sized business with a clear local market focus and a straightforward business model centered on precious metal coin acquisition.

G

Global Services Slovakia s.r.o.

vykup-striebra-bratislava.sk

39

The website vykup-striebra-bratislava.sk represents a small local business specializing in the purchase of silver items including jewelry, coins, and technical silver in Bratislava, Slovakia. The company operates a physical location and offers cash payments, targeting individuals and businesses looking to sell silver. The site provides pricing information, a calculator tool, and contact details, positioning itself as a trusted local buyer with some promotional offers. Technically, the website uses an older technology stack including jQuery 1.6.4 and Bootstrap CSS, with Google Analytics for tracking. The site is built on a proprietary CMS by Global Services Slovakia s.r.o. While functional and moderately optimized, the site lacks modern security headers and uses outdated JavaScript libraries, which could pose security risks. Mobile optimization and accessibility are basic but present. From a security perspective, the site uses HTTPS but does not implement advanced security headers or provide explicit privacy, cookie, or security policies. No incident response or vulnerability disclosure information is available. The use of outdated libraries and absence of security headers reduce the security posture score. Contact information is clearly presented, but privacy compliance is weak due to missing policies. Overall, the website is safe for general audiences, with no adult or questionable content. The business appears legitimate and consistent with WHOIS data. Recommendations include updating JavaScript libraries, adding privacy and cookie policies, implementing security headers, and improving mobile and accessibility features to enhance trust and compliance.

A

Asian Family Services

asianfamilyservices.nz

67

Asian Family Services is a New Zealand-based non-profit organization dedicated to providing culturally tailored mental health, gambling harm minimisation, and wellbeing support services to Asian communities nationwide. Established in 2015, the organization operates multiple branches and offers multilingual support including English, Mandarin, Cantonese, Korean, Japanese, Thai, Vietnamese, and Hindi. The website reflects a professional and community-focused service provider with clear contact information, leadership visibility, and active social media presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and integrates multiple analytics and tracking pixels including Google Analytics, TikTok, and Facebook. Hosting and DNS are managed via reputable providers including Dreamscape Networks and Cloudflare, ensuring good performance and security. The site is mobile optimized and accessible with a clear navigation structure. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though improvements are recommended in implementing security headers and publishing formal security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but GDPR compliance is not explicitly indicated. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively. Strategic recommendations include enhancing security headers, formalizing security and incident response policies, and improving privacy compliance transparency.

A

Intro

angiology.cz

53

The website www.angiology.cz/intro serves as an entry point for healthcare professionals, restricting access to medical content intended solely for this audience. The site uses a basic ASP.NET WebForms framework with legacy JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The content is minimal and primarily serves as a gatekeeper rather than a full informational portal. Security posture is moderate with HTTPS implied but lacking visible security headers and using outdated libraries. Privacy compliance is basic, with a cookie consent banner present but no accessible privacy policy on this page. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency and trustworthiness. Overall, the site is functional but could benefit from modernization and enhanced security and compliance measures.

B

Bohušovická mlékárna, a.s.

skyrcz.cz

58

Bohušovická mlékárna, a.s. is a Czech dairy manufacturer specializing in the production of Skyr, a traditional Icelandic dairy product. The company is a market leader in the Czech Republic for Skyr products, offering a variety of flavors and promoting healthy living through high-protein, low-fat dairy options. Their website is professionally designed, mobile-optimized, and rich in content including product details, recipes, and retail partner information. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA to enhance user experience and security. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. Security posture is good with HTTPS and CAPTCHA protection on forms, though security headers could be improved. Overall, the website is trustworthy, professional, and compliant with relevant privacy regulations.

R

Regionalna razvojna agencija Primorsko-goranske županije

prigoda.hr

46

Regionalna razvojna agencija Primorsko-goranske županije (PRIGODA) is a government-established regional development agency focused on coordinating sustainable and balanced regional growth in the Primorsko-goranska County of Croatia. Founded in 2017, it serves as a support center for local governments and legal entities, providing consultancy and project management services, especially related to EU funding and strategic regional development. The website reflects a professional government entity with detailed information on projects, funding opportunities, and regional strategies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though it lacks some advanced security headers and explicit privacy policies. The security posture is adequate with HTTPS and Google Analytics tracking, but could be improved with better security policies and headers. Overall, the site is trustworthy and well-positioned as a regional government resource, but should enhance privacy and security transparency to improve compliance and user trust.

SoviSol GmbH is a medium-sized German company specializing in the procurement and supply of solar energy components, including photovoltaic modules, battery storage systems, inverters, and mounting systems. With over 10 years of experience, the company targets professional customers such as solar installers, builders, and project developers. Their website presents a professional image with clear navigation, relevant content, and a focus on sustainable energy solutions. The company maintains multiple physical locations in Germany and provides clear contact information. Technically, the website uses modern frontend technologies like jQuery, Bootstrap, and Swiper.js, and integrates Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and performs moderately well.

The Local Europe AB operates a professional English-language news website focused on European news, travel, politics, and practical guides. Established in 2010 and headquartered in Stockholm, Sweden, it targets English-speaking residents and expatriates across Europe. The business model combines advertising, membership subscriptions, and job listings, positioning it as a reputable media outlet in its niche. The website features a modern, responsive design with comprehensive content and clear navigation, supported by a robust technical infrastructure including CMS, analytics, and membership management platforms. Technically, the site employs a variety of modern web technologies such as Google Tag Manager, Piano.io for membership/paywall, Cxense for content personalization, and MailerLite for newsletters. The site is well-optimized for mobile devices and SEO, though some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but explicit security headers and incident response information are not publicly detailed. The absence of WHOIS domain registration data is a notable anomaly that impacts domain trustworthiness, although the website content and business information appear legitimate and professional. Privacy policies and cookie consent comply with GDPR, reflecting a commitment to user data protection. Overall, the site presents a low risk profile but would benefit from improved transparency in domain registration and security policies.

R

Regional Development Agency DUNEA LLC.

dubrovnik-neretva.eu

42

The website represents the official Representation Office of the Dubrovnik-Neretva Region in Brussels, serving as a liaison and promotional platform for the region within the European Union. It highlights the Regional Development Agency DUNEA, which coordinates sustainable development and project management for the region. The site targets regional stakeholders, investors, EU institutions, and the general public interested in regional development. Technically, the site is built on Joomla CMS with a modern but moderate tech stack including Bootstrap, jQuery, and Revolution Slider, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but would benefit from enhanced privacy and security measures.

R

Regionalna razvojna agencija Dubrovačko-neretvanske županije - DUNEA

dunea.hr

41

Regionalna razvojna agencija Dubrovačko-neretvanske županije (DUNEA) is a government-established regional development agency founded in 2006 in Dubrovnik, Croatia. The agency focuses on promoting sustainable and balanced regional development, coordinating existing development activities, and aligning with national and EU requirements. Their key services include strategic planning, EU project management, and regional economic development initiatives. The website reflects a professional and consistent brand presence targeting regional stakeholders, local government, and businesses involved in development projects. Technically, the site is built on Joomla CMS with modern frontend frameworks and libraries, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and partner links.

P

Project Jupyter

jupyter.org

57

Project Jupyter is a leading open-source initiative providing interactive computing tools widely used in data science, education, and research. The platform offers multiple key services including JupyterLab, Jupyter Notebook, JupyterHub, and Voilà, supporting over 40 programming languages. The website reflects a mature, well-established project with a large user base and strong community backing. Technically, the site is built on modern web technologies with responsive design and privacy-conscious analytics. Security posture is strong with HTTPS and domain protections, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and safe for general audiences.

Muzej Međimurja Čakovec is a well-established regional museum in Croatia, offering a broad range of cultural, historical, and artistic exhibits. The website reflects a mature digital presence with detailed content about museum collections, exhibitions, and educational programs. The institution targets general audiences including tourists, researchers, and local visitors. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a Croatian hosting provider. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

The website www.knihkupectvipant.cz operates as an online bookstore specializing in books related to 20th century history and contemporary society, primarily targeting Czech-speaking audiences interested in educational content. The business supports educational initiatives and promotes its offerings through a structured e-commerce platform with clear navigation and product categorization. The site integrates modern web technologies including Bootstrap, jQuery, Google reCAPTCHA, Google Analytics, and Facebook Pixel to enhance user experience and marketing capabilities. Security measures include HTTPS and CAPTCHA for forms, but lack advanced security headers and explicit incident response policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and business presentation appear professional and legitimate. Privacy and cookie policies exist but are basic, with limited GDPR compliance indicators. Contact information is limited to an email address and inquiry forms, with no phone or physical address disclosed. Overall, the site demonstrates a moderate level of digital maturity and security posture, suitable for a small specialized e-commerce business.

C

Companies s.r.o.

companies.cz

57

Companies s.r.o. operates the website companies.cz, providing comprehensive business services focused on company formation, ready-made companies, virtual office solutions, and legal/accounting support primarily in the Czech Republic and Slovakia. Established since 2004, the company positions itself as a reliable partner for entrepreneurs seeking fast and professional business startup services. The website is well-structured, professionally designed, and offers multiple contact channels including phone, email, and online forms, enhancing customer engagement and trust. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Microsoft Clarity, and Cloudflare Turnstile CAPTCHA for form security. The site is mobile-optimized and uses HTTPS with strong SSL configuration, although some security headers are not detected. Cookie consent is implemented with granular user controls, reflecting a moderate level of privacy compliance. From a security perspective, the site demonstrates good practices such as encrypted connections and CAPTCHA protection on forms, but lacks published privacy and terms of service policies, which are important for full compliance and user trust. The absence of WHOIS data limits domain trust analysis, but the presence of official company registration details on the site supports legitimacy. Overall, the website presents a professional and trustworthy business front with moderate technical maturity and security posture. Strategic improvements in privacy documentation and security headers would enhance compliance and user confidence.

C

CEC Praha a.s.

starcasinopetrovice.cz

9

Star Casino Petrovice is a regional casino operator in the Czech Republic, offering live table games such as poker, blackjack, and roulette, alongside a wide selection of modern VLT slot machines. The casino operates 24/7 with free entry and is located conveniently next to a shopping center with parking. The business is operated by CEC Praha a.s., a registered company with licensing from the Czech Ministry of Finance. The website demonstrates a moderate level of digital maturity, using modern JavaScript libraries and multimedia content to engage visitors. Security measures include HTTPS, CSRF tokens, and age verification, but lack some advanced security headers and explicit privacy policy pages. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance documentation.

C

CEC Praha a.s.

starcasinopruhonice.cz

65

Star Casino Průhonice is a well-established casino located near Prague, Czech Republic, operated by CEC Praha a.s. The casino offers a wide range of gaming options including over 120 modern slot machines, live card games, and American roulette with low minimum bets. Additional amenities include a fully stocked bar, private parking, and a VIP shuttle service. The business targets adult customers interested in gambling and entertainment, positioning itself as a regional leader with multiple sister casinos. Technically, the website uses modern JavaScript libraries and CSS frameworks, providing a responsive and visually appealing user experience. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though it lacks some advanced security headers and explicit privacy and terms of service pages. Overall, the site is professional and trustworthy, but the absence of WHOIS data reduces transparency. The content is adult-oriented due to gambling services and includes appropriate age verification and warnings.

D

DAVICE DachBAU & Service GmbH & Co. KG

davice.de

49

DAVICE DachBAU & Service GmbH & Co. KG is a German small business specializing in roofing construction, roof renovation, and photovoltaic system installation. The company positions itself as a regional expert providing tailored roofing and solar energy solutions to homeowners and businesses. Their website is professionally designed using Joomla CMS and features multimedia content such as videos and image sliders to showcase their services. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. Technically, the website employs modern web technologies including Bootstrap and Smart Slider 3, with a responsive design optimized for mobile devices. The hosting is managed via kasserver.com nameservers, indicating a professional hosting environment. The website implements a cookie consent mechanism compliant with GDPR requirements, although no explicit security policy or incident response information is present. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam risk. However, it lacks visible security headers and dedicated security or incident response pages. No analytics or tracking scripts were detected, indicating minimal user tracking and good privacy compliance. The domain WHOIS data is limited but consistent with the hosting provider, with no suspicious patterns detected. Overall, the website is trustworthy and professional, with good content quality and privacy compliance. Security posture is moderate with room for improvement in headers and incident response transparency. The business is well represented online, targeting customers interested in sustainable roofing and solar energy solutions.

S

Sport-Santé

sport-sante.lu

45

Sport-Santé is a Luxembourg-based non-profit federation focused on promoting therapeutic physical activities for patients with chronic diseases. Managed by the Fédération Luxembourgeoise des Associations de Sport de Santé (FLASS), it serves as a recognized label and resource hub offering information, events, and videos to support health through physical activity. The website is well-structured, multilingual, and optimized for SEO, targeting patients and healthcare professionals in Luxembourg. Technically, it is built on WordPress with modern plugins and libraries, providing a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust verification, but the presence of official partnerships and consistent branding supports legitimacy. Overall, the site is professional, informative, and trustworthy within its healthcare niche.

D

DISH Digital Solutions GmbH

metro.bar

10

DISH Digital Solutions GmbH operates a specialized SaaS platform focused on providing website building services tailored for hospitality businesses such as restaurants, cafes, bars, bakeries, and delivery services. The platform emphasizes ease of use, enabling customers to create websites without coding knowledge. The company positions itself as a niche digital solutions provider within the hospitality sector, supported by a multilingual website and integration with a broader digital club ecosystem at dish.co. Technically, the website employs modern web technologies including Bootstrap, Google Tag Manager, Adobe DTM, and Usercentrics for consent management, reflecting a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though explicit security headers and incident response policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve transparency around security and contact information.

The Bayerischer Handwerkstag e. V. is a well-established non-profit umbrella organization representing the interests of the Bavarian handwork sector. The website serves as an information hub for members, press, and the general public, offering news, educational resources, and service information. It holds a strong regional market position as a key advocate for handwork in Bavaria. Technically, the site is built on the ODAV CMS platform, leveraging modern web technologies such as jQuery and Bootstrap, and integrates multiple analytics tools including Google Analytics and Matomo, with a clear focus on privacy compliance. Security posture is solid with HTTPS enforced and bot protection via Friendly Captcha, though some security headers could be improved. Overall, the site is professional, accessible, and trustworthy, with comprehensive cookie consent mechanisms and clear contact information. No critical vulnerabilities or suspicious content were detected.

D

DISH Digital Solutions GmbH

eatbu.hr

64

DISH Digital Solutions GmbH operates a specialized website builder platform tailored for the hospitality industry, targeting restaurants, cafes, bars, bakeries, and delivery services. The platform enables users to create websites quickly without coding knowledge, positioning itself as a niche digital solutions provider within the hospitality sector. The website content is professional, well-branded, and clearly communicates its value proposition to its target audience. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, Adobe Dynamic Tag Manager, and a Usercentrics consent management platform, indicating a mature digital infrastructure with good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a published security policy are absent. The absence of direct contact information and incident response details suggests areas for improvement in transparency and trust. Overall, the website is trustworthy, well-maintained, and compliant with GDPR, serving its business purpose effectively.

8

8devs

8devs.com

9

8devs is a small German company specializing in native app development for the healthcare sector, rescue services, and occupational safety. Their business focuses on improving health and well-being through innovative digital solutions, including apps like NeoDiary, HeroShift, and Verbandbuch. The company supports the entire app lifecycle from conception to publishing in major app stores. Technically, the website is built on WordPress with Elementor and uses modern web technologies, hosted by HTTP.NET INTERNET GMBH. The site is well designed, mobile optimized, and provides clear contact information. However, it lacks privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response details. Overall, the company presents a professional digital presence with room for improvement in compliance and security transparency.

The website represents a professional medical conference organized by Swiss medical societies specializing in pneumology, thoracic surgery, and sleep medicine. It serves as an information and registration portal for the SSP/SSTS - SSSSC Joint Annual Meeting 2025 in Geneva, Switzerland. The business model focuses on event organization and professional collaboration within the healthcare sector, targeting medical specialists primarily in Switzerland and Europe. The site is managed by Congrex Switzerland Ltd., a recognized event management company. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, jQuery, and Swiper.js. It demonstrates good mobile optimization, clear navigation, and SEO best practices. GDPR compliance is evident through integrated consent management tools and a clear privacy policy. The site uses HTTPS with strong SSL configuration, though security headers could be improved. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. The presence of consent management and privacy policies aligns with GDPR requirements. However, explicit security policies and incident response contacts are not publicly disclosed, which could be enhanced. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

D

d.vinci HR-Systems GmbH

dvinci-hr.com

49

d.vinci HR-Systems GmbH operates a professional German-language website offering specialized recruiting and onboarding software solutions. The company positions itself as an expert provider in the HR technology sector, targeting HR departments and recruiters seeking efficient applicant management and onboarding tools. The website demonstrates a mature digital presence with modern technologies including WordPress CMS, Bootstrap framework, and advanced SEO practices supported by Yoast SEO Premium and structured data. Analytics and marketing tools such as HubSpot and Google Tag Manager are integrated with appropriate cookie consent mechanisms, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Contact information is clearly presented with company domain emails and phone numbers, enhancing business credibility. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

K

l❶Iᐅ Kfz Versicherung trotz Schufa ▶️ Bonitätsprüfung ❷⓿❷❺

kfz-versicherung-trotz-schufa.com

50

The website www.kfz-versicherung-trotz-schufa.com operates as a niche comparison and informational platform focused on providing car insurance options for individuals with negative Schufa credit entries in Germany. It offers tariff comparisons, advice, and links to insurance providers that accept customers despite credit challenges. The site targets consumers seeking affordable and accessible car insurance solutions despite credit issues. Technically, the site is built on WordPress with a modern theme and SEO plugins, integrating Google Tag Manager and Borlabs Cookie for analytics and consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks advanced security headers and explicit security policies or incident response contacts. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and structure appear professional and trustworthy. Overall, the site presents moderate risk with room for improvement in transparency and security practices.

F

Fitek

fitek.com

49

Fitek is a medium-sized technology company specializing in digital invoice management and bookkeeping automation solutions for finance professionals. Established in 2003, the company offers a comprehensive B2B SaaS platform that streamlines purchase, expense, and approval workflows, integrating with leading accounting systems. Their multilingual website and customer testimonials indicate a strong market presence in multiple European countries. Technically, the website is built on WordPress with Elementor and employs modern tools such as Google Tag Manager and WPML for multilingual support. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements like enabling DNSSEC and security headers are recommended. No critical vulnerabilities or privacy policy were detected, but cookie compliance is well implemented. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

D

Dachdecker – Dein Beruf: HOME

dachdeckerdeinberuf.de

44

The website dachdeckerdeinberuf.de serves as an educational and promotional platform dedicated to the roofing profession in Germany, targeting prospective apprentices and young individuals interested in vocational training. It offers comprehensive information on apprenticeship programs, internships, climate protection initiatives within the trade, and interactive engagement such as quizzes and newsletters. The site maintains a consistent brand presence with active social media integration and a clear call to action for apprenticeship applications. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap for responsive design, FontAwesome for icons, and integrates multiple analytics and marketing tools such as eTracker, Google Ads, Facebook Pixel, and Brevo for newsletter management. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, dachdeckerdeinberuf.de presents a professional, secure, and user-friendly platform with a strong focus on vocational education and climate-conscious roofing practices. Strategic improvements in security headers and publishing privacy policies would enhance compliance and trust further.

B

Bundesnetzagentur

bundesnetzagentur.de

60

The Bundesnetzagentur website serves as the official digital presence of the German Federal Network Agency, a government regulatory body overseeing energy, telecommunications, postal services, and rail infrastructure. The site provides comprehensive information, regulatory updates, consumer services, and data portals targeting both the general public and industry professionals. It maintains a strong market position as a national authority with a broad scope of regulatory responsibilities. Technically, the website is built on the Government Site Builder CMS, utilizing modern web technologies such as Bootstrap, jQuery, and Chart.js. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. The infrastructure appears stable and professionally maintained, with no signs of blocking or content restrictions. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a formal vulnerability disclosure policy. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy, though no explicit cookie consent mechanism is present. Social media links are privacy-conscious, and no advertising or tracking scripts are detected. Overall, the website is trustworthy, professional, and well-suited for its governmental regulatory role. Minor improvements in security headers, cookie consent, and vulnerability disclosure would enhance its security posture and user trust.

B

beIN EN

beinmediagroup.com

70

beIN MEDIA GROUP is a global leader in TV production and broadcasting, operating 34 to 60 channels across 5 continents and multiple languages. The company targets a broad audience of sports fans and media consumers worldwide, offering services including TV production, distribution, and media rights acquisition. The website reflects a professional media enterprise with consistent branding and a clear market position as a major international media group. Technically, the website is built on WordPress 6.5 with modern web technologies such as Bootstrap and jQuery. It employs Google Tag Manager and Cookiebot for analytics and consent management, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of explicit security headers and incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance is evident. Overall, the website presents low risk with a high degree of professionalism and trustworthiness. The lack of WHOIS data due to privacy protection is typical for large media companies and does not raise immediate concerns. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance.

R

RES Team

redditenhancementsuite.com

56

Reddit Enhancement Suite (RES) is a well-established, community-driven open source browser extension designed to enhance the Reddit user experience. With over 1 million users across multiple browsers, it holds a strong position in the niche market of Reddit enhancement tools. The project is supported by an active community on Reddit, GitHub, and Discord, reflecting a collaborative development and support model. The website provides clear information about the extension, download links for various browsers, and community resources, though it has entered maintenance-only mode as per the notice. Technically, the website uses a straightforward tech stack including Bootstrap for styling and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Hosting and domain registration are stable and consistent with the project's age and scope. However, there is room for improvement in security practices, such as enabling DNSSEC, implementing security headers, and adding cookie consent mechanisms. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies, incident response information, and GDPR compliance indicators. No critical vulnerabilities or suspicious content were detected. The use of Google Analytics without visible cookie consent may pose privacy compliance risks. Overall, the security posture is moderate but could be enhanced with additional controls and transparency. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance, security headers, and incident response readiness. The website is trustworthy, professional, and safe for general audiences, with no adult or explicit content. Strategic improvements in security and privacy policies would further strengthen user trust and regulatory compliance.

S

SHERWOOD Digital a.s.

majales.cz

9

The website www.majales.cz serves as the central portal for the Majáles 2026 student festivals held across multiple Czech cities including Prague, Brno, Ostrava, and Hradec Králové. Operated by SHERWOOD Digital a.s., the site promotes large-scale student celebrations and provides event information and ticketing details. The business is positioned as a leading festival organizer in the Czech Republic, targeting students and young adults interested in cultural and social events. The site content is primarily in Czech with an option for English, reflecting a regional focus with some international accessibility. Technically, the website employs a modern tech stack including Bootstrap, Owl Carousel, Swiper, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Cookie consent is managed via CookieScript, demonstrating compliance with EU cookie regulations. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details were identified, and accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent with opt-in for targeting and performance cookies, which is positive. Security headers are implied but not explicitly confirmed. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a publicly accessible privacy policy and terms of service pages is a compliance gap. Additionally, WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website presents a professional and trustworthy front for a regional event organizer but would benefit from enhanced transparency in privacy and security policies, explicit contact information, and verification of domain registration details to strengthen trust and compliance posture.