Security Directory

C

Copernicus GmbH

copernicus.org

62

Copernicus GmbH operates the website copernicus.org, a well-established platform dedicated to promoting scientific work through open-access journal publishing, organizing international scientific conferences, and providing software solutions to support the scientific community. Founded in 1997 and based in Germany, the company targets scientists, researchers, and academic institutions worldwide. The website reflects a professional and consistent brand image with clear navigation and relevant content focused on education and research. Technically, the website employs a custom CMS with a technology stack including jQuery and Bootstrap, delivering a moderate performance with good mobile optimization. Hosting and domain registration are handled by reputable providers, though DNSSEC is not enabled, representing a minor security gap. The site uses HTTPS throughout and includes secure login forms, but lacks advanced security headers and a cookie consent mechanism. From a security perspective, the site demonstrates a solid baseline with HTTPS and clientTransferProhibited domain status, but would benefit from enhanced security headers, DNSSEC activation, and published security policies. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, though cookie consent is missing. No vulnerabilities or malicious content were detected, and the domain registration details align well with the business, supporting high legitimacy. Overall, copernicus.org is a trustworthy and professional scientific publishing platform with good technical and business credibility. Strategic improvements in security practices and privacy mechanisms would further strengthen its posture and compliance.

The website www.blovice-mesto.cz serves as the official municipal portal for the city of Blovice in the Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, social services, and municipal projects. The site targets residents and visitors seeking official information and services related to the city. The business model is that of a government entity providing transparency and public access to municipal data and services. Technically, the website employs common web technologies including jQuery, Bootstrap, and various JavaScript libraries for UI enhancements and interactivity. The site is mobile-optimized with a responsive design and includes a cookie consent mechanism, indicating some level of privacy compliance. However, there is no explicit privacy policy or terms of service found, and no advanced security headers are detected, which suggests room for improvement in security posture. From a security perspective, the site uses HTTPS, but lacks visible security headers and detailed privacy or incident response policies. The WHOIS data is unavailable, which reduces trust slightly but may be due to privacy protection or registry issues. No vulnerabilities or malicious content were detected. Overall, the site appears legitimate and safe but could benefit from enhanced transparency and security practices. The overall risk is moderate with recommendations to implement explicit privacy and security policies, improve security headers, and provide clear contact information to enhance trust and compliance.

M

Město Zdice

mesto-zdice.cz

9

Město Zdice operates an official municipal website serving the local community of Zdice in the Czech Republic. The site provides comprehensive information about the town, including news, events, municipal services, and contact details. It targets residents, visitors, and local government stakeholders, positioning itself as a trusted source of official information. The website's business model is focused on public service and community engagement, typical for a local government entity. Technically, the website employs a custom CMS with common web technologies such as jQuery, Bootstrap 4.4.1, and other JavaScript libraries. The site is mobile-optimized and features a cookie consent mechanism, indicating some level of digital maturity. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data and security.txt reduces overall trust. The cookie consent banner is a positive privacy compliance indicator, though a dedicated privacy policy page is missing. Overall, the website is functional, professional, and safe for general audiences. The main risk lies in the lack of transparency in domain registration and limited privacy documentation. Strategic improvements in security headers, privacy policies, and WHOIS transparency would enhance trust and compliance.

D

DANONE

jogurtdanone.pl

69

Danone Poland operates a comprehensive website focused on its yogurt and dairy product lines, reflecting the brand's global presence and commitment to nutrition and health. The site showcases a broad portfolio of products and related brands, targeting general consumers interested in dairy and plant-based nutrition. Technically, the website employs modern JavaScript libraries including jQuery and Bootstrap, integrates Google Tag Manager and New Relic for analytics and performance monitoring, and uses HTTPS to secure communications. However, explicit privacy and cookie policies are not found on the analyzed page, which is a compliance gap. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response contact details suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, supporting Danone's market position as a leading food manufacturer.

O

Obec Panenské Břežany

panenskebrezany.cz

48

The website www.panenskebrezany.cz serves as the official online presence for the municipality of Panenské Břežany in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, waste collection schedules, and contact details for municipal offices. The site targets local citizens and stakeholders interested in community updates and administrative matters. The business model is that of a government information portal, focusing on transparency and public service. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper, and Leaflet for mapping. It is built on a CMS platform likely provided by Galileo Corporation, as indicated by footer references. The site is mobile optimized, accessible, and SEO-friendly, with a good user experience and clear navigation. Cookie consent mechanisms and privacy policies are implemented, reflecting GDPR compliance. From a security perspective, the site uses HTTPS and includes cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for trust and legitimacy, though the official nature of the content mitigates this somewhat. Overall, the website is a well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include enhancing security headers, publishing security policies, and resolving WHOIS data visibility to strengthen trustworthiness and compliance.

O

Obec Kozomín

kozomin.cz

48

Obec Kozomín operates as the official municipal government website for the Kozomín municipality in the Czech Republic. It provides residents and visitors with essential local government information, including official announcements, contact details, office hours, and community news. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Swiper.js, and Leaflet for maps, built on the Galileo CMS platform. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly detailed. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

S

Společenství obcí ORP Příbram

dsopribram.cz

47

Společenství obcí ORP Příbram is a voluntary association of municipalities in the Příbram region of the Czech Republic, established in 2015. It serves as a non-profit governmental entity providing joint services, educational programs, public procurement, and information resources to its member municipalities. The website is professionally designed, well-structured, and targets local government officials and residents within the region. The business model focuses on collaboration and shared municipal services, positioning it as a key regional governmental organization. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, Swiper, and other libraries, hosted on a custom CMS platform likely provided by Galileo Corporation. The site is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism in place. However, no privacy policy or terms of service pages were found, which is a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is missing, which reduces trust slightly but the official contact information and domain usage support legitimacy. Overall, the website is a credible and professional government association site with moderate technical maturity and some room for improvement in privacy and security documentation. Strategic recommendations include publishing privacy and security policies, implementing security headers, and improving WHOIS transparency.

M

MŠ Trhový Štěpánov

mstrhovystepanov.cz

46

MŠ Trhový Štěpánov is a local kindergarten serving the community of Trhový Štěpánov in the Czech Republic. The website provides comprehensive information for parents including staff details, school history, daily schedules, event calendars, photo galleries, and downloadable forms. It targets parents and guardians of preschool children, offering a community-focused educational service. The business model is that of a public educational institution with a small local footprint. Technically, the website is built using a combination of jQuery, Bootstrap, Swiper, and other JavaScript libraries, likely managed through the Galileo CMS platform. The site is mobile optimized, accessible, and well-structured, though performance is moderate. SEO and navigation are well implemented, providing a good user experience. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms of service documents. No WHOIS data is available, which reduces domain trustworthiness. No advanced security policies or incident response contacts are found, indicating room for improvement in security maturity. Overall, the website is safe, professional, and trustworthy for its intended audience, but would benefit from enhanced transparency regarding privacy, security policies, and domain registration details to improve compliance and trust.

O

Obec Lštění

lsteni-zlenice.cz

47

Obec Lštění operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about local government activities, official notices, event calendars, contact details, and integrated services such as payment portals and environmental monitoring. The website targets residents and visitors seeking municipal services and updates. Technically, the site uses a variety of JavaScript libraries including jQuery, Highcharts, and Bootstrap, indicating a moderately modern infrastructure with good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. The absence of WHOIS registration data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional, trustworthy for its purpose, but could improve in security and registration transparency.

The website www.mestocernosice.cz serves as the official online presence for the town of Černošice, Czech Republic. It provides comprehensive information about the municipality, including governance, public services, cultural events, and practical information for residents and visitors. The site is well-structured with clear navigation and a professional design consistent with government standards. The primary audience includes local citizens and stakeholders interested in municipal affairs. Technically, the website employs a range of established front-end libraries such as jQuery, Bootstrap, and Swiper, ensuring a responsive and user-friendly experience across devices. The site uses external CDNs for fonts and icons, contributing to moderate performance. However, no CMS or hosting provider details were identified, and no advanced frameworks appear in use. From a security perspective, the site uses HTTPS (assumed from the URL), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some level of privacy compliance, though no dedicated privacy policy or terms of service pages were found. The absence of WHOIS data for the domain is a notable concern, as it limits verification of domain legitimacy and ownership, which is unusual for an official government domain. Overall, the site is functional and professional but would benefit from enhanced transparency regarding privacy policies, security headers, and domain registration details to improve trustworthiness and compliance with modern standards.

G

Golf & Country Club Salzburg-Klessheim

golfclub-klessheim.com

52

Golf & Country Club Salzburg-Klessheim is a well-established regional golf club founded in 1955, offering a 9-hole golf course, driving range, professional golf training, tournaments, and hospitality services including the Restaurant Hubers. The website is professionally designed, mobile-optimized, and provides comprehensive information for golf enthusiasts and members. Technically, it is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Maps and Google Tag Manager for enhanced user experience and analytics. Security posture is good with HTTPS enforced and secure form handling, though security headers and incident response information are lacking. Privacy and cookie policies are present and GDPR compliant, reflecting a responsible approach to user data. However, the absence of WHOIS registration data raises concerns about domain registration transparency, which slightly impacts trustworthiness.

V

Vier Gas Transport GmbH

viergas.de

51

Vier Gas Transport GmbH is a German company specializing in the acquisition, holding, and management of interests in gas transmission assets and the broader energy sector. Founded in 2012, it is the sole owner of Open Grid Europe, a leading European gas transmission system operator. The website targets investors and energy sector stakeholders, providing corporate, financial, and business news information. The business model focuses on asset management and energy sector investments, positioning Vier Gas as a significant player in European energy infrastructure. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with frontend technologies including jQuery and Bootstrap. Hosting is provided by Adacor, indicated by the nameservers. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The technical stack is modern and well-maintained, supporting a professional digital presence. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish explicit security or incident response policies. There is no cookie consent mechanism despite GDPR compliance indicated by the privacy policy. No vulnerabilities or malicious content were detected. Overall, the security posture is solid but could be improved by implementing additional headers and transparency measures. The overall risk assessment is low, with the website presenting a trustworthy and professional corporate image. Strategic recommendations include enhancing security headers, publishing incident response information, implementing cookie consent, and adding a vulnerability disclosure policy to strengthen compliance and trust.

DECLIMA s.r.o. is a Czech company specializing in smart building technologies and energy management solutions, primarily serving private and commercial customers in the Litomyšl region. Their services include energy measurement and control, project design, coordination of trades, financing assistance, automation with Loxone systems, installation, training, and servicing. The company positions itself as a comprehensive provider from project inception to ongoing monitoring and support. Technically, the website is built on WordPress with modern SEO and analytics tools, showing a good level of digital maturity. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some advanced security headers are missing. The absence of WHOIS data limits domain trust assessment, but the professional web presence and clear contact information support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

V

VENTA spol. s r.o.

koupelny-venta.cz

10

VENTA spol. s r.o. operates a comprehensive e-commerce platform focused on bathroom equipment, heating, ventilation, renewable energy systems, and related installation services primarily serving the Czech Republic. The company has a longstanding tradition since 1991 and offers a broad range of products alongside consulting, turnkey installations, subsidy handling, and after-sales service. The website reflects a mature digital presence with detailed product catalogs, clear navigation, and customer engagement tools such as live chat and customer reviews. Technically, the site employs modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and reCAPTCHA implemented, though there is room for improvement in HTTP security headers and published security policies. The absence of WHOIS data limits domain trust assessment but the website content and business information appear professional and credible. Overall, the site is well-positioned in its market niche with a solid digital infrastructure and compliance with privacy regulations.

The website 'Ich hab's gecheckt!' is a German health awareness campaign focused on educating the public about metabolic syndrome and promoting a healthy lifestyle to prevent cardiovascular diseases. It is operated by the BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V., a non-profit health insurance interest group based in Berlin. The site provides educational content and an online health check tool to engage users in monitoring their health. The target audience is the general German-speaking public interested in health and wellness. Technically, the website is built on WordPress using the Understrap theme framework with a child theme. It employs common web technologies such as jQuery and Popper.js. The site is served over HTTPS with a moderate performance profile and good mobile optimization. However, it lacks advanced security headers and structured data markup, which could improve SEO and security posture. From a security perspective, the site uses HTTPS and a cookie consent mechanism, but it does not provide a privacy policy or incident response information. No security.txt file or vulnerability disclosure policy is present. The absence of security headers like CSP and HSTS reduces the overall security score. No tracking or advertising scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional with clear contact information and a consistent brand presence. The main risks relate to incomplete privacy compliance and security best practices. Strategic recommendations include publishing a privacy policy, implementing security headers, and providing incident response contacts to enhance user trust and regulatory compliance.

B

BKK Faber-Castell & Partner

bkk-faber-castell.de

58

BKK Faber-Castell & Partner is a German statutory health insurance provider offering premium health services and customer-centric benefits. The company targets a broad demographic including families, seniors, students, and active individuals, emphasizing personalized service and digital convenience such as online membership and expert consultations. Their market position is regional with a focus on premium offerings and high customer satisfaction, supported by positive testimonials and a comprehensive bonus program. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap, Swiper.js, and jQuery. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Hosting details are not explicit but use multiple name servers from a hosting provider. Performance is moderate with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and secure form handling, but lacks explicit HTTP security headers and incident response contact information. Privacy compliance is strong with a clear GDPR-compliant privacy policy and cookie consent mechanism. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-aligned with the business goals. Strategic improvements in security headers, accessibility, and incident response transparency would enhance the security and compliance posture further.

S

Sturm, Ruger & Co., Inc.

ruger.com

68

Sturm, Ruger & Co., Inc. is a leading American firearms manufacturer with a broad portfolio of products including pistols, revolvers, rifles, and accessories. The company has a strong market position supported by a well-structured website that provides detailed product information, customer service, and investor relations. The website targets firearm consumers, law enforcement, and military sectors, emphasizing responsible firearm ownership. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with good mobile optimization and navigation clarity. Security posture is moderate with HTTPS usage and anonymized analytics but lacks explicit security headers and a cookie consent mechanism. The domain registration is consistent with the company's long history and public business presence, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with basic privacy policies, though improvements in cookie consent and security headers are recommended.

Eurodesk Hungary, operated by Tempus Közalapítvány, is a well-established non-profit organization providing comprehensive information and support for youth international mobility opportunities, including Erasmus+ programs, scholarships, volunteering, and internships. The website serves as a key information hub targeting young people and professionals working with youth, offering news, newsletters, and detailed mobility information. The organization holds a strong market position as part of the broader Eurodesk European network and maintains partnerships with relevant EU and Hungarian governmental bodies. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, Facebook and TikTok tracking pixels, and reCAPTCHA for security. The site is well-optimized for mobile devices and SEO, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and a Content-Security-Policy header, though additional security headers could enhance protection. Privacy compliance is robust, featuring a comprehensive GDPR-compliant privacy policy and an active cookie consent mechanism. No critical security vulnerabilities or blocking mechanisms were detected, and the domain's WHOIS data aligns well with the organization's history and public presence, supporting high legitimacy. However, the site lacks explicit published security policies and incident response contacts, which could be improved to enhance trust and readiness. Overall, Eurodesk Hungary presents a trustworthy, professional, and user-friendly platform with strong compliance and security foundations, well-suited to its non-profit educational mission.

O

ODU - trade, s.r.o.

odutrade.com

48

ODU - trade, s.r.o. is a Slovak construction and engineering company specializing in residential, industrial, and administrative building projects. Founded in 2020, it offers comprehensive construction services including new builds, reconstructions, and project engineering. The company maintains a professional online presence with clear contact information, certifications, and social media engagement, positioning itself as a reliable regional player in the construction sector. The website is well designed, mobile-optimized, and provides relevant content for its target audience. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, hosted under a Slovak registrar with DNS servers in Slovakia. Performance and SEO are adequate, though accessibility could be improved. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, and no published security or incident response policies are found. Overall, the website is safe with no adult or questionable content, and no WAF or blocking mechanisms detected. The domain registration data aligns well with the business claims, supporting legitimacy. However, the absence of a privacy policy and security headers are notable compliance and security gaps. Strategic recommendations include publishing a privacy policy, enabling DNSSEC, adding security headers, and improving accessibility to enhance compliance, security, and user trust.

T

Tenarry Slovakia s.r.o.

tenarry.sk

48

Tenarry Slovakia s.r.o. is a specialized waste management company focusing on the sorting and processing of PET bottles, supplying major European manufacturers. The company operates advanced optical sorting technology capable of processing up to 3 tons of waste per hour and produces solid and alternative fuels. They also engage in social responsibility initiatives supporting children and schools through PET bottle cap collection programs. The website reflects a professional and consistent brand presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site uses modern libraries such as Bootstrap and jQuery, with responsive design and moderate performance. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

IPSEN

ipsen.com

70

Ipsen is a global biopharmaceutical company specializing in innovation and specialty care to improve patient outcomes worldwide. The company maintains a strong market position in healthcare with a focus on pharmaceutical research, development, and commercialization. Their website reflects a professional and enterprise-grade digital presence, supporting multiple languages and providing comprehensive information for investors, patients, and healthcare professionals. The technical infrastructure is built on WordPress with modern frameworks and performance optimizations, ensuring fast and accessible user experience across devices. Security posture is robust with HTTPS, security headers, and consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response details. The absence of WHOIS data is a notable gap but does not detract significantly from the overall credibility given the professional branding and content quality. Strategic recommendations include enhancing transparency around security policies and incident response, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

I

Institut für Medizininformatik (IMI) des Universitätsklinikums Frankfurt

se-atlas.de

52

SE-ATLAS is a specialized healthcare information platform operated by the Institut für Medizininformatik (IMI) of the Universitätsklinikum Frankfurt, focusing on mapping care centers and patient organizations for individuals with rare diseases in Germany. The platform serves patients, healthcare providers, and patient organizations by providing a searchable directory of specialized centers and networks. The website is well-positioned in a niche healthcare segment, offering valuable resources to a targeted audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and CSRF protections, though some HTTP security headers are missing and no explicit security policy or vulnerability disclosure is published. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in formal security documentation and header implementation.

The Bund Deutscher Landschaftsarchitekt:innen (bdla) is a professional association representing landscape architects in Germany. The website serves as a comprehensive platform offering information about membership benefits, events, news, educational resources, and professional services. It positions itself as a leading voice in the landscape architecture sector with a strong focus on networking, professional development, and advocacy. The site is well-maintained with active content updates and multilingual support.

S

Správa a údržba ciest Prešovského samosprávneho kraja

zjazdnostpsk.sk

42

Správa a údržba ciest Prešovského samosprávneho kraja operates a website providing meteorological station data and road maintenance information for the Prešov region in Slovakia. The site serves as a public service platform offering real-time weather data and coverage maps to residents and authorities. The company is a regional governmental entity established in 2004, with a medium-sized operational scope focused on transportation infrastructure and weather monitoring. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as jQuery, Bootstrap, and Google Maps API for interactive features. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. Security measures include HTTPS with a valid SSL certificate and DNSSEC enabled, alongside Google reCAPTCHA v3 to mitigate automated abuse. Security posture is solid but could be improved by adding explicit security headers and publishing a security policy or incident response contacts. Privacy compliance is limited due to the absence of explicit privacy and cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. No vulnerabilities or suspicious content were detected, and the domain's WHOIS data confirms legitimacy and consistency with the business purpose. Overall, the website is a trustworthy and functional public service portal with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

P

Potsdam Institute for Climate Impact Research

pik-potsdam.de

10

The Potsdam Institute for Climate Impact Research (PIK) is a well-established research institute specializing in climate impact research, resilience, and policy. The website reflects a professional and structured digital presence, primarily targeting researchers, policymakers, and academic audiences. It offers extensive information on research departments, projects, publications, and IT services supporting scientific collaboration. The technical infrastructure is based on the Plone CMS platform with modern web technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security or privacy policies. No advertising or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data confirms the domain's legitimacy and alignment with the institute's profile.

K

KORADO

korado.cz

61

KORADO is a leading global manufacturer specializing in steel heating bodies, including panel radiators, tubular radiators, design radiators, convectors, and ventilation units. The company targets both end customers and professionals, offering comprehensive heating solutions with a focus on modern, energy-efficient products. Their market position is strong, supported by a presence in 23 countries and a large customer base. The website reflects a mature digital presence with multilingual support and detailed product guides. Technically, the website employs modern analytics and marketing technologies such as Google Tag Manager, Google Analytics, Matomo, and reCAPTCHA v3, ensuring good tracking and security against bots. The site is mobile-optimized and well-structured, though some improvements in accessibility and security headers could be made. The cookie consent mechanism and privacy policy indicate good GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling, but lacks visible security headers and incident response information. The absence of WHOIS data reduces transparency and trust slightly, though the professional presentation and business information mitigate this concern. Overall, the website is professional, secure, and compliant, with minor areas for improvement in security policy visibility and WHOIS transparency. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding terms of service documentation.

D

Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V. (DGP)

pneumologie.de

51

The Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V. (DGP) operates pneumologie.de as a professional society website focused on respiratory medicine in Germany. It provides comprehensive resources including medical guidelines, research funding opportunities, educational programs, and membership services targeting healthcare professionals and patients. The site is well-branded, professionally designed, and offers clear navigation and relevant content in German. Technically, the site uses modern web technologies such as Bootstrap, Popper.js, Tippy.js, and Matomo analytics, hosted on a CMS platform named Snowboard. The website is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and secure form validation, though it lacks explicit security headers and published security policies. WHOIS data indicates a consistent and legitimate domain registration aligned with the organization's identity. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

T

The International Group of P&I Clubs

igpandi.org

65

The International Group of P&I Clubs operates as a leading mutual insurance consortium providing protection and indemnity coverage for approximately 90% of the world's ocean-going tonnage. The organization offers key services including liability insurance, reinsurance pooling, educational programs, and industry publications, targeting maritime industry professionals and shipping companies globally. The website reflects a strong market position with professional content and consistent branding. Technically, the website employs a modern technology stack including Bootstrap 5.3, jQuery, D3.js, and integrates analytics tools such as Google Tag Manager and Cloudflare Web Analytics. The site is hosted behind Cloudflare, ensuring good performance and security. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy or query failure, but the domain appears legitimate and well-maintained. Overall, the website demonstrates a high level of professionalism, security posture, and compliance with privacy regulations, making it a trustworthy resource within the maritime insurance sector.

J

JAM Audio

jamaudio.com

49

JAM Audio operates as an established e-commerce retailer specializing in consumer audio products such as Bluetooth speakers, wireless headphones, earbuds, and turntables. The company targets general consumers seeking affordable and quality audio devices. The website serves as the official brand store, reflecting a consistent and professional brand presence with clear product offerings and social media integration. The domain age and WHOIS data support the legitimacy and long-standing market presence of the brand. Technically, the website leverages modern web technologies including Bootstrap 5, Jekyll CMS, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and AdRoll. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate rather than fast. Hosting is inferred to be via GoDaddy, consistent with the registrar information. From a security perspective, the site uses HTTPS with proper domain status locks but lacks DNSSEC and explicit security headers. No security policy or incident response contacts are published, which limits transparency in security governance. Tracking and advertising scripts are present, with moderate user tracking levels and basic privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, JAM Audio's website is a credible, professionally maintained retail platform with good business credibility and technical implementation. Security posture is adequate but could be improved by enabling DNSSEC, publishing security policies, and enhancing security headers. Privacy compliance is basic but present. The site is safe for general audiences with no adult or questionable content.

F

Fox Corporation

foxcorporation.com

62

Fox Corporation is a major media company producing and distributing content through leading brands such as FOX News, FOX Sports, FOX Network, FOX Television Stations, and Tubi Media Group. The company targets a broad general audience with a focus on news, sports, and entertainment content. The website reflects a strong market position with comprehensive corporate governance and investor relations information. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and a responsible vulnerability disclosure policy, though explicit security headers and incident response contacts are not evident. WHOIS data is missing, which slightly reduces trust but the overall legitimacy is supported by the professional site content and branding.

T

Tomáš Michálek, fyzická osoba

meteo-roven.cz

49

The website meteo-roven.cz serves as a regional weather information portal focused on eastern Czech Republic, providing real-time data from multiple local meteorological stations. It also offers additional services such as webcams and an e-shop for weather-related products. The business appears to be a small, locally focused entity operated by an individual, with a domain age consistent with its operational history since 2016. The website uses a modern frontend technology stack including Bootstrap 4, jQuery, and various UI plugins, hosted on infrastructure associated with the WEDOS registrar and nameservers. The site is mobile responsive and offers a generally good user experience, though some minor code quality issues are present as evidenced by PHP notices in the navigation menu.

T

Terberg Kinglifter

terbergkinglifter.com

10

Terberg Kinglifter is a specialized Dutch manufacturer of truck-mounted forklifts, offering a range of models including compact, universal, electric, and high-power variants. The company serves a broad industrial audience, including logistics, beverage distribution, agriculture, and governmental sectors. Supported by a global distributor network and company-owned locations in the Netherlands and Germany, Terberg Kinglifter maintains a strong market presence within Europe and beyond. The website reflects a mature digital infrastructure with modern analytics and marketing tools, good mobile optimization, and clear navigation. Security posture is solid with HTTPS enforcement and privacy compliance, though some security headers and explicit incident response policies could be improved. WHOIS data is unavailable due to EURid privacy policies, which is typical for .eu domains, but the website's branding and contact information support legitimacy. Overall, the site is professional, trustworthy, and business-focused.

T

Terberg Techniek

terbergtechniek.nl

10

Terberg Techniek is a specialized vehicle modification company operating under the Royal Terberg Group umbrella, focusing on bespoke heavy-duty vehicle adaptations including chassis modifications, mining vehicles, and truck-mounted cranes. The company targets industrial clients requiring custom vehicle solutions, positioning itself as a niche leader with a medium-sized operational footprint primarily in the Netherlands but serving global markets. The website reflects a professional and consistent brand image with comprehensive service descriptions and recent project highlights. Technically, the site employs a modern technology stack including Matomo analytics, Google Tag Manager, Azure Application Insights, and Vue.js, hosted on a CMS platform identified as Episerver (Optimizely). The site is mobile optimized and performs moderately well with good SEO and accessibility basics. Security posture is strong with HTTPS enforced, privacy-compliant cookie consent, and anonymized analytics tracking, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professionally maintained, supporting the company's business credibility and digital presence.

T

TruckScout24 GmbH

truckscout24.com

67

TruckScout24 GmbH operates a leading European online marketplace specializing in commercial vehicles and recreational vehicles, including trucks, construction machinery, vans, and caravans. The platform offers extensive filtering options and a broad vehicle inventory, positioning itself as a market leader in its sector. The company targets both businesses and individual buyers and sellers across Europe, with a strong presence in Germany. Technically, the website employs modern web technologies such as Yii2 framework, jQuery, Bootstrap, and Keen Slider, ensuring a responsive and user-friendly experience across devices. The integration of Google Tag Manager and reCAPTCHA indicates a mature digital infrastructure with attention to analytics and security. Security posture is solid with HTTPS enforcement and cookie consent mechanisms; however, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data limits domain registration trust analysis but does not detract significantly from the overall credibility given the professional presentation and business information. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance.

M

Město Holice

holice.eu

56

The website www.holice.eu serves as the official municipal portal for the city of Holice in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, local news, events, public notices, and tourist information. The site is well-branded with consistent city logos and offers multiple channels for citizen engagement including social media and a chatbot. The business model is focused on public service and community engagement, positioning the city as accessible and transparent to its constituents. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and integrates third-party services such as Google Analytics and a chatbot platform. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent for privacy compliance. However, it lacks visible security headers and does not publish security policies or incident response information. The WHOIS data is privacy protected, which is common for .eu domains, and does not raise immediate concerns given the official nature of the site. Overall, the website is trustworthy and professional, serving its purpose as a municipal information portal. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to meet higher compliance standards.

T

Terberg Environmental

terbergenvironmental.com

10

Terberg Environmental is a well-established company specializing in eco-technology solutions for the waste management and recycling industry. Their product portfolio includes bin lifting systems, rear loaders, side loaders, and electric products, serving a global market with a strong emphasis on sustainability and innovation. The company operates under the Royal Terberg Group umbrella, indicating a solid corporate backing and extensive industry experience. The website reflects a professional and comprehensive digital presence, targeting industry professionals and organizations seeking reliable waste collection technologies. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and multiple analytics platforms, combined with a consent management platform to ensure GDPR compliance. Security posture is generally good with HTTPS enforced and privacy policies in place, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a notable concern for domain legitimacy, though the website content and structure suggest a legitimate and professional business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration clarity.

V

VR-EASY GmbH

vr-easy.com

10

VR-EASY GmbH operates a specialized SaaS platform enabling users to create, manage, and share virtual 360° tours online without the need for software installation. The company targets small to medium businesses, educational institutions, real estate professionals, and municipalities, offering tiered subscription packages tailored to various sectors. Their market position is that of a niche provider with innovative features such as integration of multimedia content and marketing tools, supported by reputable partners like Deutsche Telekom and EU funding. The website is primarily in German with English alternatives, reflecting a focus on the German market. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Popper.js, hosted on the Open Telekom Cloud which emphasizes green energy. The platform is web-based with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility is basic. The site lacks a CMS, indicating a custom-built solution. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers such as CSP or HSTS. No vulnerability disclosure or incident response policies are visible. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but no cookie consent mechanism is detected. Contact information is clear and professional, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned in its niche. Security improvements and enhanced privacy mechanisms would further strengthen its posture. The domain registration data aligns well with the business claims, supporting legitimacy.

T

Terberg HS GmbH

terberg-hs.de

69

Terberg HS GmbH is a well-established German company specializing in the manufacture and service of advanced waste disposal vehicles, with over 150 years of industry experience. The company operates globally, targeting municipalities and private waste management firms, and is part of the Royal Terberg Group. Their product portfolio includes side loaders, rear loaders, and front loaders, supported by service and rental offerings. The website reflects a mature business with a professional digital presence, leveraging modern web technologies and multiple analytics tools with GDPR-compliant consent management. Security posture is solid with HTTPS and anonymized tracking, though some improvements in security headers and incident response transparency are recommended. Overall, the domain and business information align well, supporting a high legitimacy score.

T

TruckScout24 GmbH

truckscout24.de

62

TruckScout24 GmbH operates a leading European online marketplace specializing in commercial and leisure vehicles including trucks, transporters, construction machinery, and caravans. The platform offers extensive vehicle listings with advanced filtering options, catering to both professional and private buyers and sellers. The company maintains a strong market position supported by official sponsorships and a professional digital presence. Technically, the website employs modern frameworks such as Yii2, Bootstrap, and jQuery, with integrations for Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and CSRF protections, though explicit security policies and incident response contacts are absent. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

C

Centrum environmentálních technik a technologií (CETT)

cett.eu

42

CETT (Centrum environmentálních technik a technologií) operates as a specialized hospitality and educational center located in the Czech Republic, offering conference facilities, accommodation, and environmental education programs. The business targets corporate clients, institutions, schools, and individual guests, emphasizing quality service and environmental awareness. The website reflects a professional and consistent brand image with clear service offerings and positive trust indicators such as certifications and guest ratings. Technically, the site employs modern frontend technologies including Bootstrap and Google Analytics, providing a responsive and user-friendly experience. However, some areas such as explicit cookie consent and security policies could be improved. Security posture is moderate with HTTPS usage but lacks visible security headers and incident response information. Overall, the site is trustworthy and well-positioned in its niche but would benefit from enhanced privacy and security transparency.

E

www.ekir.de

ekir.de

42

The website www.ekir.de appears to be a German language site with a strong emphasis on accessibility, integrating a comprehensive accessibility tool (digi·access) that offers multiple profiles and customization options for users with various disabilities. The site is built on WordPress CMS and uses common plugins such as Yoast SEO for search engine optimization and MashShare for social sharing. Hosting is provided by Cancom, as indicated by the nameservers. The site includes cookie consent management via Usercentrics, ensuring compliance with cookie regulations. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a gap in compliance and transparency. Contact information such as emails, phone numbers, or physical addresses are not present in the analyzed content, limiting direct communication channels.

D

DOTEX Wirkwaren GmbH

dotex.de

46

DOTEX Wirkwaren GmbH is a German textile manufacturing company specializing in the production, finishing, and custom tailoring of knitted and woven fabrics. Positioned regionally near the Swiss border, the company targets B2B customers seeking high-quality, customized textile solutions. Their website reflects a professional and consistent brand image with clear navigation and relevant content focused on their manufacturing capabilities and product offerings. The company maintains an active social media presence on Facebook and Instagram, enhancing their market visibility. Technically, the website is built on Joomla CMS and utilizes modern frontend technologies such as jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the security posture is stable but could be enhanced by implementing security headers, a cookie consent mechanism, and publishing incident response contacts. The domain WHOIS data is limited but consistent with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategic recommendations include improving security headers, adding cookie consent for GDPR compliance, publishing a security policy, and enhancing incident response transparency to strengthen trust and compliance.

Z

ZiTex – Textil & Mode NRW

zitex.de

53

ZiTex – Textil & Mode NRW is a well-established cluster organization serving the textile and clothing industry in North Rhine-Westphalia, Germany. Founded in 2004, it operates as a neutral industry representative jointly managed by employer associations and trade unions, providing a unique cooperative structure in the German textile sector. The website reflects this professional positioning with clear business descriptions, event information, and partner references. Technically, the site is built on WordPress with modern plugins such as Event Espresso for event management and Borlabs Cookie for GDPR-compliant cookie consent. The infrastructure is hosted on RZone.de, with HTTPS enforced and no visible security vulnerabilities in the HTML content. Privacy compliance is well implemented, with clear privacy and cookie policies and consent mechanisms. Contact information is complete and professionally presented, enhancing business credibility.

L

Landwirtschaft Sozioökonomie: landwirtschaft-soziooekonomie.de

landwirtschaft-soziooekonomie.de

44

The website 'landwirtschaft-soziooekonomie.de' serves as a specialized platform focusing on the socio-economic aspects of agriculture, particularly labor quality and sustainable farming practices in Germany. It operates as a non-profit knowledge-sharing platform organizing events, workshops, and publishing documentation to support practitioners, scientists, and policymakers. The platform is niche-focused with a small scale and targets a specialized audience interested in agricultural socioeconomics. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and FontAwesome. The site demonstrates moderate digital maturity with good mobile optimization and a clean, professional design. However, performance is moderate and SEO and accessibility features are basic. From a security perspective, the site lacks explicit security headers and incident response policies. HTTPS usage and SSL configuration details are not provided, and no cookie consent mechanism is implemented, which may impact GDPR compliance. No contact information such as emails or phone numbers are clearly provided, limiting direct communication channels. Overall, the website is functional and professional but could improve its security posture and privacy compliance. Strategic enhancements in security headers, privacy policies, and contact transparency would strengthen trust and compliance.

B

BirdLife Norge

birdlife.no

63

BirdLife Norge is a well-established Norwegian non-profit organization focused on bird conservation and environmental protection. The website reflects a mature digital presence with a clear focus on education, community engagement, and conservation projects. The organization leverages modern web technologies such as Bootstrap and jQuery to deliver a responsive and accessible user experience. Social media integration is evident, enhancing outreach and community interaction. However, the website lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is moderate with no visible security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is professional, trustworthy, and serves its target audience effectively.

S

Sozialverband Deutschland e.V.

sovd-rentenlabyrinth.de

51

The Sozialverband Deutschland e.V. (SoVD) is a well-established non-profit organization focused on social welfare and pension advisory services in North Rhine-Westphalia, Germany. The website serves as an informational and service platform, providing guidance on pensions, social law, and related social services. It targets German residents seeking support navigating social security and pension systems. The organization maintains a strong regional presence with multiple advisory centers and active social media engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and integrates analytics and chatbot tools for enhanced user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and user-friendly platform for social welfare services.

R

Reactflow

cdnflow.co

58

Reactflow is a SaaS company specializing in conversion optimization tools such as session replay, heatmaps, funnel analytics, bug tracking, and customer feedback collection. The company targets marketers, UX designers, developers, and product managers aiming to improve website performance and user experience. The website is professionally designed, well-structured, and provides comprehensive information about its services and benefits. The technical infrastructure leverages modern JavaScript libraries and frameworks, with hosting and DNS managed via Cloudflare, ensuring good performance and availability. Security posture is solid with HTTPS enforced, data masking, and encryption in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is emphasized with GDPR adherence and data masking technologies, but no cookie consent mechanism was detected. Overall, the website and business demonstrate a mature and trustworthy presence in the technology SaaS market.

R

Reactflow

reactflow.com

58

Reactflow is a technology company specializing in conversion optimization tools such as session recordings, heatmaps, funnel analytics, bug tracking, and feedback collection. Their platform targets marketers, UX designers, developers, and product managers aiming to improve website performance and customer experience. The company has been operational since 2016 and positions itself as a competitive alternative to established players like Hotjar, emphasizing privacy and GDPR compliance. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various analytics and tracking tools, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced, data masking, and containerized services, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with a clear privacy policy, but lacks an explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, with extensive user tracking balanced by stated privacy measures.

S

Stiftung Rheinland-Pfalz für Kultur

kulturstiftung-rlp.de

58

The Stiftung Rheinland-Pfalz für Kultur is a regional cultural foundation in Germany focused on supporting and promoting cultural activities within Rheinland-Pfalz. The website highlights key cultural projects such as the Kultursommer Rheinland-Pfalz and the Künstlerhaus Edenkoben, positioning itself as a non-profit organization dedicated to cultural enrichment. The site is built on TYPO3 CMS with Bootstrap framework, indicating a modern but straightforward technical infrastructure. The website is mobile optimized and provides a good user experience with clear navigation and relevant content for its target audience. However, it lacks visible contact information, privacy policy, and terms of service pages, which are important for transparency and compliance. Security posture is moderate with cookie consent implemented but missing security headers and no visible incident response or security policies. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.