Security Directory

Ústav pro zdravotní gramotnost, z.ú. is a Czech non-profit organization dedicated to promoting health literacy among the Czech population. The organization conducts research, organizes educational events, and collaborates with governmental and international bodies to improve public health knowledge. The website serves as an informational platform presenting the organization's mission, leadership, projects, and contact information. The site is professionally designed using WordPress and provides clear navigation and relevant content for its target audience.

Č

Česká lékařská komora

lkcr.cz

58

Česká lékařská komora is the professional medical chamber of the Czech Republic, established in 1999, serving as a regulatory and educational body for medical professionals. The website provides comprehensive information about membership, legal frameworks, educational resources, and public services. It targets medical professionals, the public, and media, positioning itself as a key national healthcare institution. The site is well-structured, professionally designed, and offers multilingual support. Technically, it uses a custom CMS, Google Analytics for tracking, and Google Fonts for typography, hosted by REG-ZONER with a valid DigiCert SSL certificate ensuring secure communications. Privacy and cookie policies are implemented with a consent mechanism, reflecting GDPR compliance. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website demonstrates a mature digital presence with strong business credibility and moderate to good technical and security posture.

V

vianovis GmbH - web mapping solutions

touvia.de

48

vianovis GmbH is a specialized technology company focused on delivering advanced web mapping solutions primarily for municipalities, cities, and regions in Germany. With over 30 years of experience, the company offers a comprehensive suite of geoportal services including touvia.MAPS, touvia.geoCMS, and touvia.komMIT, enabling clients to create interactive, customizable online maps with integrated data management and citizen participation features. The company positions itself as a full-service provider with personalized support and transparent pricing, serving over 200 customers nationwide. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, leveraging WebGL for real-time data visualization. Hosting is likely provided by kasserver.com, and the site employs HTTPS with hCaptcha for form security. The site is well-optimized for SEO and mobile devices, though some security headers could be improved. Security posture is solid with HTTPS and spam protection, but lacks explicit security policies or incident response contacts. Privacy compliance is good, featuring GDPR-compliant cookie consent and a privacy policy. No critical vulnerabilities or suspicious activities were detected. Overall, vianovis GmbH presents a professional, trustworthy, and technically competent online presence aligned with its business focus. Strategic improvements in security headers and formal security policies would enhance its security maturity and trustworthiness further.

Bergstadtatelier is a small regional e-commerce business specializing in personalized and mining heritage-themed merchandise such as calendars, wall pictures, mugs, postcards, and gifts. The website is built on the Shopify platform using the Dawn theme, indicating a modern and scalable technical infrastructure. The site is well-structured with good design quality, mobile optimization, and clear navigation, targeting customers interested in regional culture and personalized products. Security posture is strong due to Shopify's hosting and SSL implementation, with standard security headers and no visible vulnerabilities. However, the site lacks visible privacy and cookie policies, which impacts GDPR compliance and privacy transparency. Contact information is not explicitly provided, which may affect customer trust and support accessibility. Overall, the website is functional, secure, and professionally presented but would benefit from enhanced privacy compliance and clearer contact channels.

E

eBay Inc.

ebay-deine-stadt.de

76

eBay Deine Stadt is a localized e-commerce platform initiative by eBay Inc. targeting German cities and regions to support local retailers by integrating them into eBay's broader marketplace. The platform offers buyers access to local products online, enhancing visibility and sales for small and medium-sized local businesses. The website demonstrates a strong market position leveraging eBay's established brand and infrastructure. Technically, the website uses modern web technologies including Marko.js for rendering, SVG icons, and CDN-hosted static assets, ensuring fast performance and mobile optimization. The site is well-structured with good SEO and accessibility features, providing a professional user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact points for sellers and city participation. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.

Z

Zakra

zakrademos.com

69

Zakra is a WordPress theme provider specializing in offering over 100 starter sites that enable users to quickly build responsive and SEO-friendly websites. The company appears to be established since 2019 and targets website developers, freelancers, and small to medium businesses seeking ready-made website templates. The website demonstrates a moderate level of digital maturity with integration of modern web technologies such as Google Analytics, Google Tag Manager, Crisp Chat, and uses WordPress with Elementor and WooCommerce plugins. The site is hosted on a CDN (Cloudfront) ensuring reasonable performance and global availability. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is professional and trustworthy but could improve transparency and security documentation.

S

sledovanitv.cz s.r.o.

sledovanitv.cz

63

SledovaniTV.cz is a Czech Republic-based OTT internet television provider established in 2012, offering over 170 TV channels, catch-up TV, and video on demand services including prima+ and HBO Max. The service targets families and general viewers in the Czech Republic and EU, providing multi-device streaming with flexible subscription packages. The website demonstrates a mature digital presence with modern technologies such as Alpine.js, Google Tag Manager, and cookie consent management, hosted on AWS infrastructure. Privacy and cookie policies are clearly presented, and contact information including email and phone support is available. Security posture is solid with HTTPS enforced and secure payment methods, though explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

TonyBet Group

tonybet.group

47

TonyBet Group is an established international online betting and iGaming company founded in 2011, offering a comprehensive range of products including sportsbook, online casino, live casino, and online games. The company holds multiple licenses across key jurisdictions such as the UK, Spain, Canada, Australia, and several European countries, positioning itself as a reputable player in the regulated gambling market. The website reflects a professional corporate presence with a focus on responsible gaming and compliance. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit incident response policies could enhance trust. WHOIS data is privacy protected, which is common in this industry, but the business legitimacy is supported by visible licensing and social media presence. Overall, the site is safe, professional, and compliant with relevant regulations, targeting adult online gaming customers.

The website www.betano.bg currently serves as a splash screen protected by Cloudflare's WAF, embedding its main content via an iframe from a third-party domain related to gaming. This indicates the site is part of an online gambling platform targeting adult users. Due to the WAF protection and minimal content on the page, a full content and security analysis is limited. The technical infrastructure relies on Cloudflare for security and performance, but lacks visible security headers and privacy compliance indicators on this page. The absence of contact information, privacy policies, and terms of service reduces transparency and trustworthiness. Overall, the site shows a low digital maturity level in terms of direct content delivery and compliance visibility.

The website favbet.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This prevents extraction of business, legal, or contact information from the site. The domain is mature, registered since 2004 with GoDaddy.com, LLC, and uses Cloudflare for DNS and security services. No privacy policies, cookie banners, or terms of service documents are visible in the provided HTML content. The technical infrastructure relies on Cloudflare's security platform, but no additional technologies or CMS platforms are detectable due to the blocking. Security posture is limited to Cloudflare's protection, with no visible security headers or policies. Overall, the site cannot be fully analyzed due to the WAF challenge, resulting in a low AI score and limited insights.

J

jackpots.ch

jackpot.ch

69

jackpots.ch is a Swiss-based online casino platform offering over 2,000 casino games with legal authorization in Switzerland. The website targets adult Swiss players, providing welcome bonuses and free spins to attract users. The platform uses modern web technologies including React and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, and Usercentrics for consent management. Security posture is strong with HTTPS and security headers properly implemented, although explicit privacy and terms of service pages are not detected in the provided content. The absence of clear contact information and incident response details suggests areas for improvement in transparency and compliance. Overall, jackpots.ch presents a professional and trustworthy online gambling service within its regulated market.

W

Winbet

winbet.bg

51

Winbet.bg is a Bulgarian online gambling platform specializing in sports betting and casino games. The website targets Bulgarian-speaking users and offers a variety of betting options including live sports betting and casino promotions. The platform is positioned as a local market player with a medium-sized operation. Technically, the site uses modern web technologies such as React, PWA capabilities, and is hosted behind Cloudflare CDN, ensuring good performance and availability. Security posture is solid with HTTPS enforced and standard security headers, although there is a lack of publicly available security policies and incident response information. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. Overall, the site presents a professional and trustworthy gambling service for adults in Bulgaria.

The Československá asociace čistících stanic (formerly Česká asociace čisticích stanic) is a small, non-profit association focused on improving the quality and safety of cleaning stations for chemical and food transport containers primarily in the Czech Republic and Slovakia. The association provides certification services, education, and advocacy for its members and is recognized by European and Czech chemical industry bodies. The website content is professionally relevant but basic in design and technical implementation, lacking modern CMS or frameworks. Security posture is moderate with HTTPS implied but no visible security headers or explicit privacy and cookie policies, which are compliance gaps. The site uses Google Analytics without a consent mechanism, indicating privacy compliance weaknesses. WHOIS data confirms a consistent and legitimate domain registration dating back to 2006, supporting the association's stated history. Overall, the site is safe, trustworthy, and functional but would benefit from improved privacy compliance and security hardening.

Z

Zakra

zakratheme.com

67

Zakra is a well-established WordPress theme provider founded in 2019, offering a highly customizable, fast, and SEO-friendly multipurpose theme with over 100 templates. The company targets WordPress users ranging from small businesses to bloggers and eCommerce store owners, positioning itself as a top-rated theme in the market. Technically, the website leverages modern WordPress technologies, including popular page builders and SEO plugins, ensuring excellent performance and mobile optimization. Security posture is solid with HTTPS enabled and domain transfer protection, but lacks visible security headers and formal privacy or cookie policies. Overall, the site demonstrates professionalism and trustworthiness but would benefit from enhanced privacy compliance and security best practices.

W

Wirtschaftsförderung Erzgebirge GmbH

odbornipracovnici-krusnohori.cz

55

The website www.odbornipracovnici-krusnohori.cz operates as a regional job portal branded as Fachkräfteportal Erzgebirge, targeting job seekers and employers within the Erzgebirge region of Germany. It provides a platform for posting and searching job offers across multiple industries, with a focus on local employment opportunities. The portal is managed by Wirtschaftsförderung Erzgebirge GmbH, a regional economic development entity, which lends credibility and a governmental association to the service. The site supports multiple languages including Czech, German, and English, enhancing accessibility for a diverse regional audience. Technically, the website employs a modern tech stack including JavaScript libraries such as jQuery and Select2 for UI enhancements, and integrates analytics and marketing tools like Matomo Analytics, Google Tag Manager, Google Analytics 4, and Facebook Pixel. The site uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR, reflecting a mature approach to privacy and data protection. The content is well structured with clear navigation, job filtering options, and categorized listings, providing a good user experience. From a security perspective, the site enforces HTTPS and includes basic security headers, though it lacks advanced headers like Content-Security-Policy or Strict-Transport-Security. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a published security policy or incident response contact limits transparency in security governance. The WHOIS data is unavailable or missing, which raises concerns about domain registration legitimacy and should be monitored. Overall, the website presents a professional and trustworthy regional job portal with good technical implementation and privacy compliance. The main risk lies in the lack of WHOIS transparency and limited published security governance documentation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility compliance to further strengthen trust and security posture.

W

Wirtschaftsförderung Erzgebirge GmbH

specialists-erzgebirge.com

64

Wirtschaftsförderung Erzgebirge GmbH operates the Fachkräfteportal Erzgebirge, a regional job recruitment portal focused on the Erzgebirge region in Germany. The platform offers a comprehensive job board with numerous current and qualified job listings, targeting both job seekers and companies within the region. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and providing detailed filters for job searches. Technically, the site leverages modern JavaScript libraries, Matomo and Google Analytics for analytics, and Google Tag Manager for tag management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and a robust cookie consent mechanism, though some security headers and explicit security policies are absent. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency despite the professional appearance and operation of the site. Overall, the site is trustworthy and well-positioned as a regional employment platform but would benefit from improved domain registration transparency and enhanced security policies.

P

Sign in - Matomo

pitcom-webanalyse.de

60

The website www.pitcom-webanalyse.de serves as a login portal for the Matomo analytics platform, an open source and privacy-focused web analytics solution. The site primarily targets administrators or users of Matomo analytics, providing access to analytics dashboards and data. The business model revolves around offering free/libre analytics software, likely supported by professional services or hosting. The site content is minimal and focused on authentication, with no public-facing business information or marketing content. Technically, the site uses HTTPS and AngularJS framework, with JavaScript-based tracking and fallback image tracking. The infrastructure appears standard for a Matomo installation but lacks visible security headers and detailed metadata.

VKR Holding is an established enterprise headquartered in Denmark, specializing in the ownership and development of companies that produce sustainable building components focused on improving indoor climate and environmental impact. With a presence in 38 countries and over 17,000 employees, VKR Holding holds a strong market position in the manufacturing sector, particularly in real estate-related products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that targets investors, partners, and stakeholders interested in sustainability and corporate governance. Technically, the site employs modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance, hosted likely behind Cloudflare or a similar provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

A

Asseco Solutions

assecosolutions.sk

53

Asseco Solutions is a well-established Slovak technology company specializing in enterprise resource planning (ERP) software and business process management solutions. With over 30 years of experience, the company serves a diverse clientele including medium to large enterprises, public sector organizations, and hospitality businesses. Their product portfolio includes multiple ERP systems tailored for various industries, supported by cloud applications and comprehensive customer support services. The website reflects a professional and consistent brand image, targeting business customers primarily in Slovakia and neighboring regions. Technically, the website employs modern JavaScript libraries and frameworks, including Owl Carousel and Google Tag Manager, with a custom-built CMS or platform. Hosting is provided by Websupport, and the site uses HTTPS with DNSSEC enabled, indicating a secure and stable infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism that denies ad and analytics storage by default, reflecting a privacy-conscious approach. However, the absence of a published privacy policy, terms of service, and explicit security or incident response policies represents a compliance gap. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Asseco Solutions presents a credible and professional online presence with a strong business focus. Strategic improvements in privacy documentation and security transparency would enhance trust and compliance posture.

P

PINO group s.r.o.

pinostravovanie.sk

59

PINO group s.r.o. operates as a specialized food service provider focusing on school and corporate catering in Bratislava and surrounding areas. With over 17 years of experience, the company offers accredited, high-quality meal preparation services including options for lactose-free, meat-free, gluten-free, and GMO-free diets. The website reflects a well-established local business with clear service offerings and strong trust indicators such as accreditation and membership in relevant associations. Technically, the website uses modern web technologies including Bootstrap and Google services for analytics and bot protection, hosted on a DNSSEC-enabled domain with HTTPS enforced. Security posture is solid with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is addressed with a GDPR cookie consent mechanism and a privacy policy page. Overall, the site is professional, trustworthy, and well-suited for its target audience of schools and corporate clients.

A

AstraZeneca Czech Republic

astrazeneca.cz

66

AstraZeneca Czech Republic is a branch of the global biopharmaceutical company AstraZeneca plc, focused on delivering innovative medicines primarily in oncology, respiratory, cardiovascular, and diabetes therapeutic areas. The website reflects a mature digital presence with comprehensive content about the company’s mission, values, and sustainability efforts. Technically, the site uses Adobe Experience Manager CMS, integrates advanced analytics and marketing tools such as Adobe Analytics and Tealium, and is hosted on robust infrastructure including AWS and Cloudflare for security and performance. Security posture is strong with HTTPS enforcement, modern security headers, and cookie consent mechanisms, though no explicit security or incident response contact information is provided. The WHOIS data is not publicly available, likely due to privacy protection, which is justified given the corporate nature of the entity. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

F

Freiberger Brauhaus

freiberger-pils.de

65

Freiberger Brauhaus is a well-established German brewery with a rich heritage spanning approximately 175 years of pilsner brewing tradition. The company emphasizes authenticity, regional pride, and tradition in its branding and product offerings. The website serves as a marketing and informational platform showcasing their beer products, brewery tours, events, and an online shop. The target audience is mature adults interested in traditional beer culture. Technically, the website employs modern web technologies including Google Tag Manager and Usercentrics for consent management, ensuring GDPR compliance and user privacy. The site is mobile-optimized with good navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy and professionally maintained, with clear compliance to privacy regulations and responsible marketing practices for alcoholic beverages.

E

Erzgebirgssparkasse

erzgebirgssparkasse.de

69

Erzgebirgssparkasse is a regional financial institution based in Germany, offering a broad range of banking and financial services including online banking, loans, investments, insurance, and real estate services. The website targets both private and corporate customers, providing comprehensive digital access to their products and services. The bank maintains a strong local presence and positions itself as a trusted financial partner in the Erzgebirge region. Technically, the website is built on Adobe Experience Manager, indicating a mature and enterprise-grade digital infrastructure. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, although some security headers are not explicitly visible in the HTML. Privacy policies and cookie management comply with GDPR requirements. No critical vulnerabilities or suspicious activities were detected. Overall, Erzgebirgssparkasse demonstrates a solid digital presence with good security and compliance practices, supporting its role as a reputable regional bank.

The website themely.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification. No actual business content, metadata, or contact information is available for analysis. The domain is registered since 2008 with Cloudflare, Inc. as the registrar and hosting provider, indicating a mature and legitimate domain registration. However, the lack of accessible content prevents assessment of the company's business model, services, or compliance posture. The technical infrastructure includes Cloudflare's security mechanisms such as Turnstile captcha, but no further technology stack or CMS details are available. Security posture cannot be evaluated beyond the presence of Cloudflare protection. Overall, the site appears to be protected by a WAF, limiting visibility into its operations and content.

J

James Hardie

aestuver.com

66

The website www.aestuver.com represents a specialized business unit under the James Hardie brand, focusing on passive fire protection solutions including fire protection boards, expansion joints, and electrical fire protection for structural and tunnel applications. The site targets industry professionals and OEMs in sectors such as energy, transportation, and manufacturing. The digital infrastructure is built on ASP.NET with Kentico CMS, integrating modern marketing tools like Google Tag Manager and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS registration data is a notable concern for domain legitimacy, although the professional branding and corporate association mitigate some risk. Overall, the site is functional, professional, and safe for general audiences, but would benefit from enhanced transparency and security practices.

The website coopdisk.cz is a login portal for the COOP organization, leveraging Nextcloud technology for file storage and collaboration services. The platform appears targeted at internal users or members of the COOP group, providing access to file sharing, notifications, and user management features. The domain is registered in the Czech Republic and has been active since 2018, consistent with the business's operational timeline. Technically, the site uses modern web technologies including Nextcloud and Vue.js, with HTTPS enforced, but lacks comprehensive privacy and cookie policies, as well as public contact information. Security posture is moderate with room for improvement in security headers and incident response transparency.

C

COOP Morava

nacoopka.cz

53

COOP Morava operates the naCOOPka platform, a retail loyalty application designed to provide customers with benefits such as discounted products, store locators, and contest participation. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeting consumers shopping at COOP Morava stores in the Czech Republic. Technically, the site uses modern web technologies including JavaScript and Google Tag Manager, with HTTPS enforced and a cookie consent mechanism implemented. However, the absence of WHOIS data and a dedicated privacy policy page slightly reduce trust from a compliance and domain legitimacy perspective. Security posture is generally good but could be improved by adding security headers and publishing a security policy. Overall, the site is functional, trustworthy, and serves its business purpose effectively.

T

The Blog Starter

theblogstarter.com

50

The Blog Starter is a specialized educational website dedicated to helping beginners start their own blogs with minimal technical skills. The site offers comprehensive step-by-step tutorials, videos, and personal assistance, positioning itself as a trusted resource in the blogging education niche. It leverages affiliate marketing, particularly with BlueHost, to monetize its content while providing valuable guidance on blogging best practices. Technically, the site is built on WordPress, employs modern tracking and analytics tools, and demonstrates good SEO and mobile optimization. Security posture is strong with HTTPS and security headers, though improvements in privacy compliance such as cookie consent are recommended. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the website content and author credibility mitigate this concern. Overall, the site presents a professional, trustworthy, and user-friendly platform for aspiring bloggers.

GreenGeeks is a well-established web hosting provider specializing in eco-friendly and green energy hosting solutions. Founded in 2008 and based in Agoura Hills, California, the company offers a broad range of hosting services including shared, reseller, VPS, dedicated servers, and specialized WordPress and WooCommerce hosting. Their market position is strong within the green hosting niche, supported by certifications such as the EPA Green Power Partner and a commitment to sustainability through renewable energy matching and tree planting initiatives. The website reflects a professional and trustworthy brand with clear service offerings and customer support channels. Technically, the website is built on modern frameworks such as Nuxt.js and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight. The site is fast, mobile-optimized, and SEO-friendly, providing a positive user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness slightly, but the overall business credibility remains high due to strong branding, customer testimonials, and transparent contact information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, GreenGeeks presents a mature and reliable hosting service with a strong environmental focus, suitable for customers seeking sustainable web hosting solutions.

S

Supabase

supabase.com

70

Supabase is a technology company providing a Postgres development platform that enables developers and businesses to build scalable applications with integrated backend services such as authentication, realtime data, edge functions, storage, and vector embeddings. The company is positioned as a modern, open-source alternative to Firebase, targeting developers seeking a robust and extensible backend platform. The website demonstrates a high level of digital maturity with a modern tech stack including React and Next.js, hosted with Cloudflare and registered via Amazon Registrar. The site is well-designed, mobile-optimized, and provides clear navigation and rich content, reflecting professionalism and strong market positioning. Security posture is good with HTTPS and domain protection statuses, but could be enhanced by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

The website at yfdnza.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an embedded iframe from an external domain. There is no visible business information, contact details, or user-facing content, indicating the site may be a placeholder or used for advertising/tracking purposes rather than a legitimate business presence. The domain WHOIS data is highly suspicious, showing a creation date in the future (2025-07-22) and listing the registrar as PDR Ltd., a domain registrar, rather than an end-user or business entity. This inconsistency undermines the trustworthiness of the domain and website. Technically, the site lacks security best practices such as DNSSEC, security headers, and visible HTTPS enforcement. No privacy or cookie policies are present, and no GDPR compliance indicators are found. Overall, the site exhibits a low level of digital maturity and security posture, with significant gaps in transparency and compliance.

T

trendtours Touristik GmbH

trendtours.de

58

trendtours Touristik GmbH is a leading direct travel tour operator in Germany, specializing in bus, flight, and roundtrip package tours. Founded in 2005, the company serves German-speaking travelers with a broad portfolio of travel offers, including discounted and curated group tours. The website reflects a professional and consistent brand presence with strong trust signals such as Trustpilot integration and membership in the Deutscher Reiseverband. The target audience is primarily leisure travelers seeking organized travel experiences within Germany and abroad. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Font Awesome, alongside Google Tag Manager and a Usercentrics consent management platform for GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with deferred script loading and image placeholders. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Business credibility is strong due to clear company information, contact details, and trust indicators. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security best practices. There is no indication of WAF or content blocking, allowing full content accessibility and analysis.

A

Animod GmbH

animod.de

63

Animod GmbH operates a German hospitality e-commerce platform specializing in hotel vouchers and short trips across Germany and Europe. The website targets general consumers looking for discounted travel gift options and short vacation packages. With over 20 years of experience, Animod positions itself as an established player in the travel voucher market. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, and hosted on Hetzner, a reputable German hosting provider. The website demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are detected. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. No incident response or vulnerability disclosure information is publicly available. Overall, the domain registration data is consistent with the business identity, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and compliance.

H

Holiday Extras Ltd

holidayextras.de

63

Holiday Extras Ltd operates a leading online platform specializing in travel extras such as airport parking, hotels, and transfers, primarily targeting German-speaking European markets. The company positions itself as a market leader with over 40 years of experience, offering convenience and enhanced travel experiences to its customers. The website is professionally designed, localized in German, and integrates multiple social media channels to engage its audience. Technically, the website employs modern web technologies including React, extensive use of JavaScript, and third-party optimization and analytics tools such as Visual Website Optimizer and Google Analytics. Hosting and content delivery leverage Amazon Cloudfront CDN, ensuring reliable performance. The site is mobile-optimized and includes SEO best practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a strong digital presence with good content quality and security posture. The absence of WHOIS data limits domain trust assessment, but the business credibility is supported by consistent branding and market claims. Strategic recommendations include enhancing security transparency, improving accessibility, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

The website dobrypravnik.eu is currently a parked domain page indicating that the domain is for sale. There is no substantive business content, contact information, or privacy and security policies present. The site primarily serves as a placeholder with advertising links and an iframe loading external content from a third-party domain. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript used for layout and advertising scripts. No modern CMS or frameworks are detected. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is absent. Overall, the site does not represent an active business or service and is positioned for domain resale.

A

AUTO B.E.K.

autobek.cz

53

AUTO B.E.K. is a small automotive dealership and service center located in Ústí nad Labem, Czech Republic, specializing in sales and servicing of Mazda, SsangYong, Honda, and authorized Subaru servicing. The company offers comprehensive post-sale services including used car sales, trade-ins, financing, and insurance consulting. The website is built on the Wix platform, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and consistent with a legitimate local business. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

S

Urlaub in Sachsen: Kultur, Natur & Genuss erleben

sachsen-tourismus.de

61

The website www.sachsen-tourismus.de serves as a regional tourism portal promoting travel, culture, nature, and leisure experiences in Saxony, Germany. It targets tourists and travelers seeking vacation information and booking options in the region. The site is built on TYPO3 CMS and hosted on Schlund Technologies infrastructure, indicating a stable and professional technical foundation. The content is well-structured, visually appealing, and optimized for mobile devices, providing a good user experience. However, explicit privacy policies and terms of service are not found in the provided content, which could be improved for compliance and user trust. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks some security headers and incident response information.

P

Playtech

playtechone.com

10

PlaytechOne operates a professional online gambling platform offering casino games and sportsbook services targeting adult users interested in online betting. The website demonstrates a modern technical infrastructure with JavaScript frameworks, New Relic monitoring, and Google Analytics integration, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly visible. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. However, the absence of WHOIS registration data raises concerns about domain transparency, which may impact trust. Overall, the platform appears legitimate and professionally managed but would benefit from enhanced transparency and security disclosures.

A

ATCOM S.A.

atcom.gr

10

ATCOM S.A. is a Greece-based digital business agency specializing in technology-driven business transformation. The company offers a broad range of services including commerce, enterprise architecture, mobile solutions, and performance marketing, targeting organizations seeking to enhance their digital maturity and customer experience. The website reflects a strong market position with professional branding, case studies, and a clear focus on innovation and technology platforms such as Netvolution™ and Tapvolution™. Technically, the site uses modern JavaScript libraries, integrates with major analytics and tracking tools, and employs Akamai CDN for hosting. Security posture is solid with HTTPS and tracking consent mechanisms, though explicit privacy and terms policies are not found in the provided content. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

3

3DFindit

partcommunity.com

66

3DFindit is a specialized CAD content platform serving engineers, architects, and purchasers by providing access to extensive manufacturer catalogs and 3D BIM content. The platform supports multiple search modalities including 3D geometric, 2D sketch, and color search, facilitating efficient part finding and design integration. It is positioned as a key player in the CAD/BIM content market, backed by the parent company CADENAS, a recognized entity in the technology sector. The website demonstrates a professional and consistent brand presence with comprehensive content and multilingual support.

S

Supabase

supabase.co

70

Supabase is a technology company providing a Postgres-based development platform that enables developers to build production-grade applications with integrated backend services such as authentication, realtime data, storage, and vector embeddings. Positioned as an open-source alternative to Firebase, Supabase targets developers and businesses seeking scalable backend infrastructure with a strong focus on Postgres. The company has established a strong market presence with notable customers and a popular GitHub repository. Technically, the website is built using modern frameworks like Next.js and React, hosted with Cloudflare DNS and CDN services, and demonstrates excellent performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain protections, though improvements can be made by enabling DNSSEC and publishing formal security policies. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the technology sector.

E

eVstupenka

evstupenka.cz

68

eVstupenka.cz is a well-established online ticketing platform primarily serving the Liberec region in the Czech Republic. Founded in 2006, it offers a comprehensive catalog of cultural events including theater, concerts, musicals, festivals, and other entertainment options. The platform supports online ticket sales, subscription packages, and gift vouchers, targeting local residents and visitors interested in cultural activities. The website demonstrates a consistent brand presence and provides a user-friendly experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies such as React and Next.js, integrated with DatoCMS for content management, and employs Google Tag Manager and Analytics for tracking.

J

James Hardie Europe GmbH

holzbauplaner.com

43

The website holzbauplaner.com hosts the fermacell Timberwork Planner, a specialized tool designed for professionals in timber construction to calculate and design timber frame wall panels according to recognized standards. The business is operated by James Hardie Europe GmbH, a medium-sized company based in Germany, focusing on manufacturing and construction sectors. The site provides detailed technical content, tutorials, and downloadable documentation to support its users, primarily structural engineers and architects. Technically, the website uses modern web technologies such as Vue.js and JavaScript libraries, ensuring a responsive and user-friendly experience. However, some security best practices like security headers and DNSSEC are not implemented, which could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR requirements. Overall, the site is professional, trustworthy, and well-positioned within its niche market.

J

James Hardie Europe GmbH

aestuver.de

56

The website www.aestuver.de represents Aestuver®, a well-established German brand under James Hardie Europe GmbH specializing in fire protection solutions using glass fiber lightweight concrete technology. The company offers a broad portfolio of certified fire protection products and engineering services targeting construction professionals, industrial OEMs, and infrastructure projects. The site demonstrates a solid market position with a focus on quality, certification, and technical support. Technically, the website is built on ASP.NET WebForms with Kentico CMS, hosted behind Cloudflare, and integrates modern marketing and analytics tools such as Google Tag Manager and cookie consent mechanisms. Security posture is good with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is basic but present with clear cookie and privacy policies. Overall, the site is professional, trustworthy, and well-structured, supporting the company's business credibility and customer engagement.

J

James Hardie Europe

jameshardie.de

65

James Hardie Europe operates as a manufacturer and supplier of fiber cement facade cladding products targeted primarily at the German construction market. The website presents a professional and well-structured digital presence, offering detailed product information, sample ordering, technical support, and dealer locator tools. The company positions itself as a leading provider of durable and aesthetic facade solutions, leveraging fiber cement technology. Technically, the website is built on ASP.NET with Kentico CMS, uses Cloudflare for DNS and likely CDN services, and integrates OneTrust for cookie consent and Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service in the provided content. Overall, the site is trustworthy and professionally maintained but could improve transparency and security documentation.

D

dgstudio.cz s.r.o.

dgstudio.cz

61

dgstudio.cz s.r.o. is a small Czech digital agency specializing in custom web design, e-commerce development, branding, graphic design, and bespoke software solutions. With over 14 years of experience and more than 300 satisfied clients, the company positions itself as a creative and professional partner for businesses seeking tailored digital services. Their offerings include integration with accounting and CRM systems, reflecting a focus on business process optimization. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare Turnstile captcha for bot protection. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. Cookie consent and privacy policies are implemented, indicating attention to GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates a solid baseline with HTTPS, consent management, and bot mitigation. The absence of WHOIS data reduces transparency but does not indicate malicious intent. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The overall risk is low, but improvements in security headers, incident response transparency, and vulnerability disclosure would enhance the security posture and trustworthiness further.

Estian.cz is a Czech-based small retail business specializing in premium coffee, ionized syrups, teas, and water dispensers. The website presents a professional e-commerce platform targeting consumers interested in high-quality beverage products. The business appears niche-focused with a clear product offering and a localized market presence. Technically, the website uses modern JavaScript libraries and font loading techniques, with a cookie consent mechanism implemented to comply with privacy regulations. However, no explicit privacy policy page was found, which is a compliance gap. Security posture is moderate with secure login forms and cookie consent but lacks visible HTTP security headers and advanced security policies. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency but is common for small businesses. Overall, the website is functional, professional, and moderately trustworthy, but improvements in privacy disclosures and security headers are recommended.

S

Sächsischer Städte- und Gemeindetag e.V.

ssg-sachsen.de

65

Sächsischer Städte- und Gemeindetag e.V. is a regional government association representing cities and municipalities in Saxony, Germany. The organization provides advocacy, information, events, and publications to support local governments. The website reflects a professional and consistent brand presence with a focus on municipal topics and intercommunal cooperation projects. The technical infrastructure is based on the ionas4 CMS with modern JavaScript frameworks and Google Invisible reCAPTCHA for form security. Hosting appears to be managed by Deutsche Telekom, inferred from the nameservers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and published security policies would enhance trust. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

M

Městské divadlo Děčín, příspěvková organizace

divadlodecin.cz

44

Městské divadlo Děčín is a municipal theater organization based in the Czech Republic, providing a diverse program of theatrical performances, concerts, and cultural events. The website serves as a platform for event promotion and ticket sales, integrating a dedicated ticket reservation service. The institution maintains a strong local presence with multiple partnerships and sponsors, reflecting its role as a key cultural venue in the region. The website content is well-structured, visually consistent, and targets a general audience interested in culture and theater.

N

Norma24

norma24.de

73

Norma24 is a German online retail platform offering a wide range of Norma products with a focus on quality, variety, and fast delivery. The website is built on the Spryker e-commerce framework and leverages modern marketing and analytics tools such as Usercentrics CMP for cookie consent, Microsoft Clarity, Google Tag Manager, Facebook Pixel, and Emarsys for customer engagement and tracking. The technical infrastructure is supported by Akamai CDN services, ensuring reliable hosting and performance. Security measures include HTTPS enforcement and standard security headers, reflecting a solid security posture. However, the absence of explicit privacy policy, terms of service, and contact information pages indicates areas for compliance and transparency improvement. Overall, the website presents a professional and trustworthy e-commerce experience for general consumers in Germany.