Security Directory

D

DRF Luftrettung

drf-luftrettung-shop.de

54

DRF Luftrettung Shop is an e-commerce website dedicated to selling branded merchandise related to the DRF Luftrettung air rescue organization. The site offers a variety of products including patches, clothing, gift items, and helicopter models, targeting supporters and the general public interested in the organization. The website is built on the Shopware 6 platform, integrating PayPal for payment processing and featuring accessibility tools to enhance user experience. While the site demonstrates good technical infrastructure and a consistent brand presence, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is solid with HTTPS and CAPTCHA usage, but could be improved by adding security headers and a vulnerability disclosure policy.

I

Institut für Medizininformatik (IMI) des Universitätsklinikums Frankfurt

se-atlas.de

52

SE-ATLAS is a specialized healthcare information platform operated by the Institut für Medizininformatik (IMI) of the Universitätsklinikum Frankfurt, focusing on mapping care centers and patient organizations for individuals with rare diseases in Germany. The platform serves patients, healthcare providers, and patient organizations by providing a searchable directory of specialized centers and networks. The website is well-positioned in a niche healthcare segment, offering valuable resources to a targeted audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and CSRF protections, though some HTTP security headers are missing and no explicit security policy or vulnerability disclosure is published. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in formal security documentation and header implementation.

A

Anadolu Ajansı

anadoluimages.com

59

Anadolu Images is the digital content platform of Türkiye’s Global News Agency Anadolu Ajansı, offering a vast archive of editorial photos and videos alongside recent content from global news photographers. The platform targets media outlets and companies worldwide, providing subscription and pay-per-download services. The website is professionally designed with a clear navigation structure and responsive design, leveraging modern web technologies such as Bootstrap, jQuery, and Owl Carousel. Security posture is moderate with HTTPS usage and CSRF protections in forms, but lacks DNSSEC and explicit security headers. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms are absent. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established media service.

The Bund Deutscher Landschaftsarchitekt:innen (bdla) is a professional association representing landscape architects in Germany. The website serves as a comprehensive platform offering information about membership benefits, events, news, educational resources, and professional services. It positions itself as a leading voice in the landscape architecture sector with a strong focus on networking, professional development, and advocacy. The site is well-maintained with active content updates and multilingual support.

S

Steko s.r.o.

stekovranov.sk

43

Steko s.r.o. is a Slovakian company specializing in vehicle technical inspections, emission controls, originality checks, and car wash services primarily serving motorists in the Vranov nad Topľou region. The company has been operational since 2010, positioning itself as a trusted regional provider with a focus on quality and customer satisfaction. The website reflects this with clear service offerings, contact information, and relevant business documentation such as pricing and certifications. Technically, the website employs modern web technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and DNSSEC enabled, complemented by a GDPR-compliant cookie consent mechanism and privacy policy. However, there is room for improvement in implementing additional security headers and formal incident response disclosures. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

ADS Vranov, s.r.o.

sadka.sk

43

ADS Vranov, s.r.o. operates as a regional provider of fuel sales, automotive washing, and servicing in Slovakia, specifically in the Vranov nad Topľou, Svidník, and Humenné areas. The company offers motor fuels including Slovnaft branded gasoline and diesel, a loyalty program named SADKART, multiple car wash facilities, and authorized servicing for brands such as SOR and IVECO IRISBUS. Their market position is that of a small but established regional business with multiple physical locations and a focus on customer service. The website reflects this with clear contact information, service descriptions, and operational hours for each location. Technically, the website uses a traditional tech stack including jQuery 1.11.1, Bootstrap, and Font Awesome, with a cookie consent mechanism compliant with GDPR. However, some libraries are outdated, which may pose security risks. Security posture is moderate with HTTPS enabled and privacy policies in place, but lacks advanced security headers and explicit incident response contacts. Overall, the site is professional and trustworthy but could benefit from technical and security improvements.

D

Deutsches Thoraxregister

thoraxregister.de

51

The Deutsches Thoraxregister website serves as an interdisciplinary benchmarking project under the patronage of the DGAI and DGT, focusing on thoracic surgery and anesthesia in Germany. It provides an online portal for data entry and benchmarking, targeting medical professionals, patients, and participants in the registry. The site is built on Joomla CMS with a healthcare-oriented template and integrates modern web technologies such as Bootstrap, jQuery, and Font Awesome. Matomo analytics is used with privacy-conscious settings, avoiding tracking cookies. The website is well-structured, professionally designed, and provides clear contact and legal information, supporting trust and credibility. However, explicit security policies and headers are not evident, and no incident response or vulnerability disclosure mechanisms are published.

H

HubaX IT & Electronic Systems OG

hubax.eu

58

HubaX IT & Electronic Systems OG is a small Austrian technology company specializing in IT, software development, cloud services, and electronics. The company offers tailored software solutions, web and cloud hosting, electronics development including PCB design and production, and comprehensive IT consulting and support services. Their market position is that of a regional trusted provider with partnerships with major IT vendors such as Cisco, HP, Google, and Microsoft. The website is professionally designed using Joomla CMS and modern web technologies, providing a good user experience with clear navigation and mobile optimization. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. WHOIS data is privacy-protected, which is typical for this business type, and no suspicious patterns were detected. Overall, the website and business present a trustworthy and professional image suitable for their target audience of businesses seeking IT and electronics solutions.

MARIAH is a cloud-based platform focused on marina management and empowering boat owners through integrated internet and mobile applications. The platform offers services such as marina business management, wireless vessel monitoring via MyBoatStatus, online billing, and mobile apps for multiple platforms. The business is positioned as a niche provider in the marina and boating industry, leveraging integration with the established MarinaOffice software by Scribble Software, Inc. The website content is professional and targeted primarily at marina operators and recreational boat owners. Technically, the website uses a moderately dated but functional technology stack including jQuery, Bootstrap, and GridMVC. Hosting appears stable with DNS servers from StableTransit. The site has basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. No CMS is detected, and no analytics or tracking scripts are present in the provided HTML. From a security perspective, the site lacks DNSSEC and security headers, which are recommended to improve domain and web application security. HTTPS usage is implied but not confirmed in the data. Privacy compliance is partial with privacy and terms policies present but no cookie policy or consent mechanism. No contact emails or phone numbers are explicitly provided, which may impact user trust and support accessibility. Overall, the website is functional and professional with moderate trustworthiness. Security and privacy practices could be improved to enhance compliance and user confidence. The domain registration is consistent with the business timeline and shows no suspicious patterns.

T

Thieme Group

thieme.com

72

Thieme Group is a well-established international medical and scientific publisher committed to improving healthcare through high-quality information and educational resources. Their website reflects a professional and comprehensive digital presence targeting physicians, researchers, and medical educators. The company operates a publishing business model with a strong focus on healthcare and education sectors. Technically, the website uses modern CMS technology (Scrivito) and includes cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving transparency around domain registration.

T

Thieme Gruppe

thieme.de

72

Thieme Gruppe is a well-established German healthcare and medical publishing company focused on providing high-quality medical information and digital health services. The website demonstrates a strong commitment to accessibility, data protection, and compliance with international standards such as ISO 27001 and GDPR. The technical infrastructure leverages modern CMS technology (Scrivito) and includes cookie consent mechanisms, indicating a mature digital presence. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. However, the absence of WHOIS registration data introduces a minor trust concern. Overall, the site is professional, secure, and compliant, serving a broad audience of healthcare professionals and related stakeholders.

Q

Qorbi World an Estonia Company

qorbiworld.com

54

Qorbi World is a small Estonia-based technology company specializing in a free-to-play multi-game esports ecosystem that integrates blockchain technology and NFTs. Their platform offers unique gaming experiences with crypto rewards using the $QORBI token, exclusive NFT assets such as Qorbs, pets, and skins, and a marketplace for trading these assets. The company targets gamers interested in esports and blockchain gaming, positioning itself as a niche player in the emerging Web3 gaming market. The website is professionally designed with consistent branding and good content quality, supporting their business model and market positioning. Technically, the website leverages modern web technologies including React, Cloudflare hosting, and multiple analytics and marketing tools such as Google Analytics, FullStory, and Visual Website Optimizer. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and domain protection flags set, but lacks DNSSEC and important security headers. Privacy compliance is basic, with privacy and terms policies available but no cookie consent mechanism or explicit GDPR compliance indicators. Security-wise, the site shows moderate maturity but could enhance its defenses by enabling DNSSEC, adding security headers, and publishing incident response contacts. No critical vulnerabilities or phishing indicators were detected. Overall, the risk level is moderate with recommendations to improve security and privacy transparency. Strategically, Qorbi World should focus on strengthening its security posture, enhancing privacy compliance especially cookie consent, and improving transparency around contact and incident response. These steps will build greater trust with users and regulators, supporting sustainable growth in the competitive blockchain gaming sector.

U

University of Hohenheim

uni-hohenheim.de

11

The University of Hohenheim is a well-established German higher education institution specializing in agricultural sciences, natural sciences, business, economics, and social sciences. The website serves as a comprehensive portal for prospective students, staff, alumni, and other stakeholders, offering detailed information on degree programs, research, events, and university news. The institution positions itself as a leading university with a strong emphasis on research and international collaboration. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and Matomo for analytics. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. Hosting is managed via academic network nameservers (belwue.de), indicating reliable and specialized hosting. From a security perspective, the site enforces HTTPS, disables cookies in analytics, and respects Do Not Track settings, showcasing a privacy-conscious approach. However, there is room for improvement in implementing security headers and explicit cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected, and the login form appears secure. Overall, the website reflects a high level of professionalism, trustworthiness, and compliance with GDPR. The risk profile is low, with recommendations focusing on enhancing security headers and privacy transparency to further strengthen the security posture.

P

Potsdam Institute for Climate Impact Research

pik-potsdam.de

10

The Potsdam Institute for Climate Impact Research (PIK) is a well-established research institute specializing in climate impact research, resilience, and policy. The website reflects a professional and structured digital presence, primarily targeting researchers, policymakers, and academic audiences. It offers extensive information on research departments, projects, publications, and IT services supporting scientific collaboration. The technical infrastructure is based on the Plone CMS platform with modern web technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit security or privacy policies. No advertising or tracking scripts are present, indicating a privacy-conscious approach. WHOIS data confirms the domain's legitimacy and alignment with the institute's profile.

D

Deutsches Klimarechenzentrum GmbH

dkrz.de

65

The Deutsches Klimarechenzentrum GmbH (DKRZ) operates as a national service center providing high-performance computing and data management infrastructure to support climate research in Germany. The website reflects a well-established organization focused on delivering computational resources, data storage, and expert services to the scientific community engaged in climate modeling and simulations. Their market position is strong within the German and international climate research ecosystem, emphasizing collaboration and advanced technological support. Technically, the website is built on the Plone CMS platform, leveraging Bootstrap for responsive design and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, clear navigation, and professional content presentation. However, some improvements could be made in accessibility and the implementation of security headers. From a security perspective, the site enforces HTTPS and uses script integrity attributes, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and serves its target audience effectively. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

Pomozte dětem is a Czech non-profit foundation operating for over 25 years, dedicated to helping children with health and social disadvantages. The organization runs donation campaigns, grant programs, and charity events, partnering with major entities like Czech Television and Nadace rozvoje občanské společnosti. Their website is professionally designed using WordPress and Bootstrap, featuring rich content and clear navigation tailored to donors, partners, and grant applicants. Technically, the site employs modern web technologies and includes cookie consent mechanisms, but lacks some advanced security headers and explicit contact information. The absence of WHOIS data for the domain reduces transparency, though the website's content and partnerships strongly indicate legitimacy. Overall, the site demonstrates a mature digital presence with moderate security posture and good privacy compliance.

M

MOJEOBRAZOVKA.CZ

mojeobrazovka.cz

43

MojeObrazovka.cz is a Czech-Slovak advertising and media agency specializing in managing a unique network of out-of-home (OOH) digital LCD panels placed in public spaces such as hospitals, clinics, offices, and fitness centers. The company claims to reach approximately 2.9 million viewers monthly, positioning itself as a regional player in the digital advertising market. The website reflects a professional business model focused on providing advertising space and campaign management services with a clear target audience of businesses seeking OOH advertising solutions. The company is part of the CZECH Digital Media group, enhancing its credibility and market presence. Technically, the website is built on Joomla CMS using modern frameworks such as Helix Ultimate and SP Page Builder. It incorporates common web technologies including jQuery, Bootstrap, and Font Awesome, and integrates Google Analytics, Google Tag Manager, and Leady tracking for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are consistent with the business claims, with the domain created in 2019. From a security perspective, the website uses HTTPS with a valid SSL certificate and implements CSRF tokens for AJAX requests, indicating some security awareness. However, it lacks important security headers like Content-Security-Policy and HSTS, which could improve protection against common web attacks. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No vulnerability disclosure or incident response contact information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced security measures and improved privacy compliance documentation. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to strengthen security posture and regulatory compliance.

V

VÚB, a.s., pobočka Praha

vub.cz

61

VÚB, a.s., pobočka Praha is a banking institution offering a broad range of financial services including corporate financing, structured and export financing, factoring, electronic banking, and payment services. The website positions the bank as a strategic partner for businesses, emphasizing modern identification solutions compliant with AML regulations. It is affiliated with the Intesa Sanpaolo group, indicating a strong market presence in the Czech and Slovak banking sectors. The website is professionally designed with consistent branding and clear navigation, targeting business clients and retail customers. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Microsoft Clarity, and various tracking services. It is mobile optimized with good SEO and basic accessibility features. The site uses HTTPS with good SSL configuration but lacks some advanced security headers. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. However, no explicit security policy or incident response contacts are published. From a security perspective, the site shows good practices such as encrypted connections and consent management but could improve by adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, but the affiliation with Intesa Sanpaolo and professional presentation support trustworthiness. Overall, the site is a secure, professional banking portal with moderate tracking and marketing integration, suitable for its audience. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

B

Beskyd House s.r.o.

wolfenergy.cz

49

Wolf Energy, operated by Beskyd House s.r.o., is a Czech-based company specializing in energy-saving solutions including photovoltaic systems, heat pumps, and energy consulting. The company targets residential and commercial customers seeking energy independence and sustainability. Their business model encompasses tailored design, installation, administrative support for subsidies, and ongoing service. The website reflects a professional and consistent brand with clear contact information and community partnerships, notably with iKomunita. Technically, the site is built on WordPress with modern libraries and optimized images, offering good performance and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and formal policies. Overall, the domain registration aligns with the company's founding date and location, supporting legitimacy.

A

AquaSolarTech s.r.o.

aquasolartech.cz

47

AquaSolarTech s.r.o. operates the website aquasolar.tech, providing professional photovoltaic and heating/cooling solutions primarily in the Czech Republic. The company offers turnkey photovoltaic installations for residential and commercial clients, including additional services such as heat pumps, gas boilers, floor heating, and air conditioning. The business model focuses on comprehensive service delivery with financing and subsidy assistance, supported by a stock e-shop for photovoltaic goods. The website is well-positioned in the renewable energy sector with strong local market presence and partnerships with recognized brands like Benekov and Viessmann. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern web technologies including Google reCAPTCHA and Google Analytics. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though some security headers are missing and minor image loading issues exist. Overall, the security posture is good but could be improved by implementing additional HTTP security headers and fixing minor technical issues. Privacy compliance is strong with clear GDPR policies and cookie consent mechanisms. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategically, AquaSolarTech should focus on enhancing security headers, maintaining up-to-date software, and possibly adding a vulnerability disclosure policy to further strengthen trust and security culture.

A

AnalytikaWebu.cz

analytikawebu.cz

49

AnalytikaWebu.cz is a Czech-based privacy-focused web analytics platform founded in 2021. It offers realtime visitor tracking without storing IP addresses, sessions, or cookies, ensuring compliance with GDPR, CCPA, and PECR regulations. The service targets website owners seeking privacy-compliant analytics solutions and positions itself as a privacy-first alternative to traditional analytics providers. The platform provides features such as behavior analysis, acquisition channel tracking, geographic insights, custom event tracking, and data export capabilities. Technically, the website is built with modern web technologies including JavaScript, Google Tag Manager, and likely Laravel backend, hosted on Czech infrastructure with WEDOS as registrar and exon.io nameservers. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is strong with HTTPS enforced and CSRF protection, though formal security policies and incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and privacy compliance, making it a credible service in the web analytics market.

W

WindEurope

windeurope.org

58

WindEurope is a well-established European industry association advocating for wind energy policies and representing over 450 member companies. It operates as a key voice in the European renewable energy sector, providing policy advocacy, organizing industry events, and offering data and career resources. The organization is headquartered in Brussels, Belgium, and has a domain age consistent with its founding date in 2014, reinforcing its legitimacy and market presence. The website is professionally designed with excellent content quality, targeting industry stakeholders, policymakers, and professionals in the wind energy sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses multiple analytics platforms including Google Analytics, Matomo, and Microsoft Clarity. It is hosted behind Cloudflare, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, leveraging Yoast SEO Premium for enhanced search engine visibility. The technical infrastructure supports a positive user experience with fast loading and clear navigation. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, aligned with GDPR requirements. Contact information is clearly provided, enhancing trust and transparency. Overall, WindEurope's website demonstrates a high level of professionalism, security, and compliance suitable for an essential industry association. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

T

TriTec good choice s.r.o.

tritec.cz

43

TriTec good choice s.r.o. operates a professional automotive service center in Břeclav, Czech Republic, offering a wide range of vehicle repair and maintenance services including mechanical repairs, diagnostics, tire services, and parts sales. The company targets vehicle owners in the Czech Republic and neighboring countries, providing multilingual support and convenient pick-up services. The website reflects a well-structured and professionally designed digital presence with clear contact information and service descriptions. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a good user experience and mobile optimization. Security-wise, the site implements a detailed cookie consent mechanism but lacks visible security headers and published privacy or security policies, indicating room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Eurodesk

eurodesk.sk

38

Eurodesk is a well-established European youth information network operating since 2003, providing comprehensive information and support on educational mobility, volunteering, and youth participation programs such as Erasmus+ and the European Solidarity Corps. The website serves a broad youth audience across multiple countries, offering resources, training, and news updates to encourage active citizenship and international opportunities. Technically, the site is built on a modern WordPress platform with popular frameworks and plugins, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site demonstrates high legitimacy and trustworthiness, supported by consistent WHOIS data and official EU affiliations.

S

Slovenská asociácia organizátorov verejnej dopravy

saovd.sk

39

Slovenská asociácia organizátorov verejnej dopravy (SAOVD) is a Slovak non-profit association dedicated to coordinating and supporting regional integrated public transportation systems. It acts as a platform for its members to collaborate, advocate for legislative changes, and promote integrated transport solutions across Slovakia. The website reflects a professional and focused organization with clear contact information and partner affiliations to regional transport entities. Technically, the site uses established libraries such as jQuery, Bootstrap, and FontAwesome, providing a moderate performance and good mobile responsiveness. However, there is room for improvement in accessibility and security headers. The security posture is adequate with HTTPS usage implied, but lacks explicit security policies and cookie consent mechanisms. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

S

SAD Humenné, a.s.

sadhe.sk

41

SAD Humenné a.s. is a regional transportation company based in Slovakia, providing a range of passenger transport services including urban, suburban, long-distance domestic, international, and occasional charter transportation. The company targets the general public and passengers in Eastern Slovakia and neighboring regions, operating with a medium-sized business model focused on public transport and ticket sales. Their website reflects a consistent brand presence and offers clear contact information and partner affiliations. Technically, the website employs common and reliable web technologies such as jQuery, Bootstrap, and Font Awesome, ensuring a responsive and user-friendly experience. The site includes a cookie consent mechanism compliant with GDPR, uses Google Analytics with IP anonymization, and maintains good SEO and mobile optimization standards. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the website uses HTTPS and implements cookie consent but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and formal policies are recommended to enhance the security posture. Overall, the website is professional, safe, and trustworthy with moderate user tracking and good privacy compliance. The domain registration aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and auditing third-party scripts to maintain and improve security and compliance.

K

Košický samosprávny kraj

vucke.sk

58

Košický samosprávny kraj operates as the official regional government authority for the Košice region in Slovakia, providing a comprehensive digital platform for residents and stakeholders. The website offers extensive information on governance, social services, culture, health, education, transport, and regional development, positioning itself as a key regional information hub. The presence of ISO 27001 certification and GDPR-compliant data collection practices reflects a mature approach to security and privacy. Technically, the site employs modern web technologies including jQuery, Bootstrap, Google reCAPTCHA v3, and Hotjar for analytics and user experience enhancement. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its government mandate.

S

Scribble Software, Inc.

scribblesoftware.com

9

Scribble Software, Inc. is a specialized software provider focused on marina, boatyard, and harbor management solutions. Their offerings include cloud-based and desktop software products designed to streamline operations such as slip reservations, fuel sales, inventory control, service management, and integrated accounting. The company positions itself as a trusted partner for marina professionals, emphasizing efficiency, profitability, and connectivity through their MARINAGO Office platform and desktop solutions. The website reflects a mature business with a medium-sized footprint in the transportation and real estate sectors, targeting marina operators primarily in the United States. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various UI libraries, alongside Google Tag Manager and Google Ads for marketing and analytics. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be enhanced. Security posture is moderate with HTTPS usage implied but lacking visible security headers and explicit privacy or cookie policies. The absence of WHOIS data is a notable transparency gap, though the professional presentation and customer testimonials support business credibility. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from implementing security headers, formal privacy and cookie policies, and incident response disclosures. Overall, the risk is moderate with recommendations to improve compliance and security best practices to enhance trust and regulatory alignment.

E

E-Pagos S.A.

epagos.com

68

E-Pagos S.A. operates as a comprehensive payment solutions provider primarily serving public agencies and private companies in Argentina. Their platform consolidates multiple payment channels including credit/debit cards, virtual wallets, bank transfers, and POS terminals, offering a flexible and secure payment ecosystem. The company has established a solid market presence since its founding in 2015, with a medium-sized operation and trusted by numerous governmental entities and enterprises. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, and integrates security features like Google reCAPTCHA and PCI-DSS certification, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and spam protection, though improvements are recommended in DNS security and HTTP headers. Privacy compliance is partial, with clear privacy and terms pages but lacking cookie consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking and analytics in place.

C

Centro Interamericano de Administraciones Tributarias

ciat.org

61

The Centro Interamericano de Administraciones Tributarias (CIAT) operates as a well-established intergovernmental organization focused on enhancing tax administration across member countries through training, technical assistance, and cooperation. The website reflects a professional and consistent brand presence, offering multilingual content primarily in Spanish and English, targeting government tax administrations and related stakeholders. The technical infrastructure is based on WordPress with modern plugins and scripts, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the organization's public profile. Overall, the domain registration data supports the legitimacy and long-term operation of the organization.

B

British Business Chamber Croatia

bbcc.hr

44

The British Business Chamber Croatia (BBCC) operates as a non-profit organization dedicated to fostering business relationships between the UK and Croatia. Supported by the British Embassy in Zagreb, it offers membership services, networking events, seminars, and workshops to connect business leaders and professionals across the region. The website reflects a focused business model targeting companies interested in bilateral trade and partnerships. Technically, the website employs a modern but basic tech stack including jQuery and Bootstrap, with moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS usage but lacks visible security headers and formal policies, indicating room for improvement in compliance and incident readiness. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

Ríkisskattstjóri

skattur.is

68

The website innskraning.rsk.is serves as the official login portal for the Icelandic tax authority (Ríkisskattstjóri). It provides secure authentication mechanisms including electronic identification and web key login, integrating with the national island.is authentication service. The portal targets Icelandic taxpayers and businesses requiring access to tax-related services. The site is branded consistently with government standards and offers a professional user experience with modern web technologies such as Bootstrap and IBM Watson Assistant chat integration. While WHOIS data for the subdomain is unavailable, this is typical for subdomains and does not detract from the site's legitimacy. The portal uses HTTPS and includes CSRF protection tokens in forms, but lacks visible security headers and explicit security or incident response contact information.

D

Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V. (DGP)

pneumologie.de

51

The Deutsche Gesellschaft für Pneumologie und Beatmungsmedizin e.V. (DGP) operates pneumologie.de as a professional society website focused on respiratory medicine in Germany. It provides comprehensive resources including medical guidelines, research funding opportunities, educational programs, and membership services targeting healthcare professionals and patients. The site is well-branded, professionally designed, and offers clear navigation and relevant content in German. Technically, the site uses modern web technologies such as Bootstrap, Popper.js, Tippy.js, and Matomo analytics, hosted on a CMS platform named Snowboard. The website is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and secure form validation, though it lacks explicit security headers and published security policies. WHOIS data indicates a consistent and legitimate domain registration aligned with the organization's identity. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

D

Deutsches Klima Konsortium

deutsches-klima-konsortium.de

47

The Deutsches Klima Konsortium (DKK) is a reputable German non-profit consortium of leading climate research institutions. It serves as a scientific coordination and information platform, providing publications, briefings, and organizing events related to climate science. The website targets scientists, policymakers, media, and the interested public, positioning itself as a trusted source of climate knowledge in Germany. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, though it lacks explicit security policies and advanced security headers. Privacy compliance is well addressed with a comprehensive privacy and cookie policy, including consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns.

H

Helmholtz Institute for Functional Marine Biodiversity (HIFMB)

hifmb.de

45

The Helmholtz Institute for Functional Marine Biodiversity (HIFMB) is a German research institute specializing in marine biodiversity and ecosystem function research. The website serves as an information portal for their scientific activities, team, and news, targeting researchers, policymakers, and the interested public. The institute positions itself as a key player in marine ecosystem research and conservation science. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses multilingual support via WPML. The site is well-structured, mobile-optimized, and SEO-friendly, with a professional design and consistent branding. Security-wise, the site enforces HTTPS and follows good practices but lacks some security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency.

D

Delta Reisen s. r. o.

luxusni-plavby.cz

54

The website www.luxusni-plavby.cz represents a Czech travel company, Delta Reisen s. r. o., specializing in luxury cruise vacations primarily in the Mediterranean and Caribbean regions. The site offers detailed cruise packages, including ship information, destinations, and booking forms, targeting travelers seeking premium cruise experiences. The business model revolves around online presentation and booking facilitation of cruise trips, positioning itself as a niche luxury cruise provider in the Czech market. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and slick carousel, with integration of Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile responsive and well-structured, providing a good user experience. Security-wise, HTTPS is enforced with appropriate security headers, but lacks visible privacy and cookie policies, which impacts privacy compliance. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is professional and functional but would benefit from enhanced privacy disclosures and domain registration clarity.

D

Delta Reisen s. r. o.

luxusni-exotika.cz

56

The website Luxusni-exotika.cz is a professionally designed travel agency platform specializing in luxury exotic vacation packages primarily targeting customers interested in high-end travel to destinations such as the Maldives, Mauritius, Seychelles, and other exotic locations. The company behind the site, Delta Reisen s. r. o., positions itself as an expert in German and Austrian travel markets, offering exclusive hotel deals and comprehensive travel services including insurance and airport parking. The site features a modern technical infrastructure leveraging popular JavaScript libraries, Google Maps API, and integrated marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements could be made by adding security headers and publishing explicit security and incident response policies. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness, but the overall business credibility and content quality remain high. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and verifying domain registration details to improve trust and compliance.

D

Delta Reisen s.r.o.

travelio.sk

53

Travelio.sk is a professional online travel agency specializing in offering travel packages from German and Austrian travel agencies to Slovak customers. The company, Delta Reisen s.r.o., positions itself as an expert in this niche market, providing a wide range of services including flights, cruises, honeymoon trips, travel insurance, car rentals, and event tickets. The website is well-branded, with consistent logos and partner references, and includes customer testimonials that enhance trust. The business model focuses on direct representation and online booking convenience, targeting Slovak-speaking travelers seeking quality vacation options abroad. Technically, the website leverages a modern tech stack including jQuery, Bootstrap, Moment.js, and Slick Carousel, integrated within the CeSYS travel agency system platform. It employs standard marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Google Tag Manager, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and comprehensive search forms. From a security perspective, the site uses HTTPS with good SSL configuration and basic security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy or incident response contacts, which could be improved. Privacy compliance is well-handled with visible privacy and cookie policies and consent mechanisms. Overall, Travelio.sk presents a trustworthy and professional online presence with a solid business foundation and adequate technical and security measures. Strategic improvements in security policy transparency and header implementation could further enhance its security posture.

G

Gaidelis

gaidelisklasika.lt

47

Gaidelis is a Lithuanian brand specializing in traditional crispy crackers and biscuits, with a heritage dating back to 1969. The website presents the brand's products, emphasizing original recipes and new mini cracker offerings. The site targets general consumers interested in traditional Lithuanian snacks and operates an e-commerce platform powered by WooCommerce. The domain is relatively new but consistent with the brand's local presence. Technically, the website uses a modern WordPress CMS with popular plugins and frameworks, ensuring a good user experience and mobile optimization. Cookie consent is managed via Cookiebot, reflecting attention to privacy compliance. Security posture is good with HTTPS enabled, though some security headers could be improved. No explicit privacy or terms of service pages were found, and contact information is not directly visible in the HTML content. Overall, the site is professional, trustworthy, and well-positioned in its niche.

N

Nordcurrent

nordcurrent.com

68

Nordcurrent is a medium-sized game development company founded in 2008, specializing in creating and publishing games across multiple platforms including Steam, GOG, Epic Store, Playstation, and Xbox. The company targets gamers and developers, positioning itself as an established player in the technology and media sectors. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable third-party services such as Cookiebot for cookie consent and Google Analytics for traffic analysis. Hosting is provided by Amazon AWS, ensuring reliable infrastructure. Security posture is good with HTTPS enforced, domain registration locks, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner supporting GDPR. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security disclosures and accessibility.

V

Vortechs Media DOO

zemi.mk

65

Zemi.mk is a Macedonian-based web hosting provider and authorized .mk domain registrar operating since 2015 under the legal entity Vortechs Media DOO. The company offers a range of web hosting packages including shared, cloud, Windows, and Macedonian hosting, alongside domain registration and transfer services. Positioned as a leading local provider, Zemi.mk targets individuals and businesses in North Macedonia seeking affordable and reliable web services. The website is professionally designed, mobile-optimized, and provides clear navigation with comprehensive service descriptions and customer testimonials, enhancing trust and user experience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Swiper.js, and integrates third-party services like Google Tag Manager and Tawk.to for analytics and live chat support. The site uses HTTPS with good SSL configuration, though some security headers are not explicitly detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR indicators. Contact options include email and web forms, with abuse reporting channels clearly provided. Security posture is solid with enforced HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to server-side errors limits domain registration verification, slightly impacting trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Overall, Zemi.mk demonstrates a mature digital presence with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a formal security policy and vulnerability disclosure program, and improving WHOIS data availability to strengthen legitimacy verification and trust.

P

PCMA

conveningleaders.org

57

PCMA Convening Leaders is a well-established event platform serving global business events professionals, with a history spanning 70 years. The website effectively communicates event details, speakers, agenda, and participant resources, positioning itself as a leader in the hospitality and business events sector. The technical infrastructure is modern, leveraging WordPress with popular plugins and integrations for analytics, marketing, and user engagement. Security posture is strong with HTTPS, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are absent. Overall, the site demonstrates a mature digital presence with good compliance and trust indicators.

Canadian Tire Motorsport Park is a well-established Canadian motorsport and event venue offering racing events, corporate event hosting, and unique driving experiences. The website reflects a mature business with a strong brand presence supported by reputable sponsors and partners. The digital infrastructure is built on Shopify, leveraging modern web technologies and third-party marketing and analytics tools. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy available but no cookie banner or GDPR-specific disclosures. Overall, the website is professional and trustworthy, with room for improvement in security and privacy transparency.

G

Games Jobs Germany sagt Danke

gamesjobsgermany.de

41

Games Jobs Germany was a voluntary job board platform dedicated to the German games industry, hosting over a thousand job listings over eight years. The platform served as a community resource connecting employers and job seekers within the gaming sector and supported charitable causes such as Gaming Aid e.V. Due to declining job postings and challenging market conditions, the site has been taken offline. Technically, the website was built on WordPress using Bootstrap and Font Awesome, hosted on German servers (rzone.de). The site shows basic mobile optimization and SEO practices but lacks advanced technical features or performance optimizations. No analytics or advertising tools were detected, indicating a minimal digital footprint. From a security perspective, the site lacks visible security headers, privacy policies, cookie consent mechanisms, and incident response information. The absence of HTTPS status data limits full SSL evaluation, but the presence of a favicon and external font loading suggests standard web practices. No forms or data collection points were found, reducing attack surface but also limiting user engagement. Overall, the site presents a low-risk profile but also lacks modern compliance and security best practices. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and regulatory adherence.

Skillshot.pl is a specialized online job board platform focused on the Polish game development industry, operated by Orchid Games since 2011. It provides a niche marketplace connecting game development companies with job seekers, offering a variety of roles including programming, art, design, audio, testing, and management. The platform supports job ad posting and email notifications, serving a targeted audience of Polish gamedev professionals and employers. The website is professionally designed with good content relevance and navigation, optimized for mobile devices, and regularly updated with active job listings. Technically, it is built on Ruby on Rails with Bootstrap and FontAwesome, hosted by home.pl S.A., and uses Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS enabled and CSRF protections, but lacks DNSSEC and security headers, and does not implement a cookie consent mechanism. Privacy compliance is basic with a privacy policy and terms of service present but no explicit GDPR compliance indicators or data protection officer contact. Overall, the domain is legitimate, stable, and consistent with the business claims, with no signs of suspicious activity or content safety concerns.

R

Reboot

reboot.hr

48

Reboot.hr is a well-established Croatian regional media website focused on video game news, reviews, and culture. Founded in 2012, it serves as the largest regional gaming magazine and news portal, offering regular content updates including articles, podcasts, and community forums. The site targets gaming enthusiasts primarily in Croatia and the surrounding region. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google Analytics, hosted by a Croatian registrar and hosting provider. The website is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and consistent branding. Security-wise, the site enforces HTTPS and uses standard security practices but lacks explicit security headers and formal privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are publicly available, limiting transparency. Overall, the domain registration data aligns well with the website content, indicating legitimacy and stability. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security posture.

P

PPMG Content Tuners

contenttuners.com

40

Content Tuners, operated under PPMG, is a specialized B2B service provider focused on the automotive aftermarket industry. The company offers comprehensive content creation, design, production, sales, and distribution services tailored to automotive brands and dealers. Their portfolio includes multiple supporting brands such as PASMAG and Tuner Battlegrounds, positioning them as a notable player in automotive media and marketing. The website reflects a professional and consistent brand image with clear service offerings and a target audience of automotive businesses and enthusiasts. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, hosted on AWS infrastructure. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The technology stack includes common libraries such as jQuery and Bootstrap, ensuring a modern and maintainable platform. From a security perspective, the site uses HTTPS and implements CSRF tokens for AJAX requests, indicating basic security hygiene. However, it lacks DNSSEC, security headers, and visible privacy or cookie policies, which are critical for compliance and enhanced security posture. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is functional and professional but requires improvements in privacy compliance, security headers, and transparency to enhance trust and regulatory adherence. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in security and privacy policies will strengthen the company's digital maturity and stakeholder confidence.

H

HARMAN International

harman.com

69

HARMAN International is a global leader specializing in connected car technology, lifestyle audio innovations, professional audio solutions, and enterprise software. As a wholly-owned subsidiary of Samsung, it maintains a strong market position with a broad portfolio targeting consumers, automotive OEMs, and enterprises. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding. Technically, the site leverages modern frameworks such as Bootstrap and jQuery, hosted on a Microsoft SharePoint platform, and integrates advanced analytics and cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data absence slightly reduces domain trust. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.

T

The Digital Wellness Lab

digitalwellnesslab.org

48

The Digital Wellness Lab is a nonprofit research institution dedicated to understanding and promoting positive digital media experiences for young people from birth through young adulthood. The organization operates a professionally designed website built on WordPress, integrating SEO best practices and marketing analytics tools such as HubSpot and Google Analytics. The site is hosted by InMotion Hosting and uses standard web technologies including Bootstrap and jQuery. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies and no explicit GDPR indicators. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the domain registration is consistent and trustworthy, matching the organization's founding date and business model.