Security Directory

C

CSL Behring

cslbehring.fi

64

CSL Behring Finland Oy operates as a leading biotechnology company specializing in therapies for rare and serious diseases. The company is part of the global CSL Limited group, with a strong market position in plasma-derived and recombinant biopharmaceuticals. Their website reflects a professional and consistent brand presence, targeting healthcare professionals and patients in Finland. The technical infrastructure employs modern web technologies including Google Tag Manager and OneTrust for cookie consent, ensuring compliance with GDPR and user privacy standards. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not prominently published. Overall, the website is trustworthy, well-maintained, and compliant with relevant regulations, supporting the company's enterprise-level stature in the healthcare sector.

C

CSL Behring Danmark

cslbehring.dk

63

CSL Behring Danmark is a healthcare-focused pharmaceutical company specializing in innovative recombinant and plasma-derived medicines for treating bleeding disorders, immune deficiencies, and other chronic conditions. The company operates as part of the global CSL Limited group, serving the Danish market with a professional and well-branded online presence. The website demonstrates a moderate to high level of digital maturity, employing modern web technologies including Google Tag Manager and OneTrust for privacy compliance. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature enterprise-level healthcare business.

Abwasserbeseitigung Rendsburg is a municipal utility service responsible for wastewater disposal and treatment in the city of Rendsburg and surrounding areas including Büdelsdorf. The organization operates a dedicated sewage treatment plant and provides related services such as property drainage management. The website serves as an informational portal for residents and businesses, offering updates, contact information, and access to service-related forms. The market position is that of a local government service provider with a clear focus on environmental and public utility functions. Technically, the website is built on the Contao Open Source CMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, and jQuery. The site is hosted on infrastructure associated with Schleupen, a known service provider. While the site is functional and moderately optimized for mobile devices, it lacks advanced SEO and accessibility features. The absence of modern security headers and cookie consent mechanisms indicates room for improvement in technical security and privacy compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, which are positive indicators. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. The WHOIS data aligns well with the website's municipal nature, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could benefit from enhanced headers, policies, and transparency. The overall risk assessment is low given the nature of the business and the absence of sensitive data exposure or suspicious activity. Strategic recommendations include implementing security headers, adding cookie consent and privacy enhancements, publishing security and incident response policies, and updating technical components to modern standards to improve trust and compliance.

Doppelpunkt Werbeagentur is a small, established German advertising agency founded in 2001, specializing in corporate design, marketing, photography, 3D visualization, webshops, and print media. The website is professionally designed with good content quality and consistent branding, targeting businesses seeking advertising and marketing services in Germany. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics and Google Tag Manager for analytics and tracking. The site lacks a cookie consent mechanism and DNSSEC, which are areas for improvement. Security posture is moderate with no explicit security headers detected and no DNSSEC enabled. The domain registration data is consistent with the business claims, indicating high legitimacy. Overall, the website is functional, trustworthy, and compliant with GDPR, though it could enhance security and privacy features.

S

Sanitär Heizung Mangold

sanitaer-heizung-mangold.de

48

Sanitär Heizung Mangold is a small German company specializing in sanitary and heating services, targeting residential and commercial customers. The website presents basic information about their services but lacks comprehensive business and compliance details. Technically, the site is built on WordPress using Bootstrap, with moderate performance and mobile optimization. Security posture is limited, with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the site is functional but basic, with moderate business credibility and no signs of malicious activity.

Antesto s.r.o. operates the INFINEO platform, a Czech Republic-based SaaS web application designed for financial advisors to create tailored financial analyses and manage client data efficiently. The platform emphasizes independence from financial institutions, offering objective financial planning tools accessible via any internet-connected device. INFINEO targets individual advisors and firms, providing customization options and API integrations to meet diverse client needs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site features responsive design optimized for mobile devices, ensuring accessibility and usability across platforms. However, some security headers are missing, and privacy compliance elements such as cookie consent and privacy policies are not evident. From a security perspective, the site uses HTTPS with a strong SSL certificate, ensuring encrypted data transmission. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and company information appear professional and trustworthy. Strategic improvements include adding privacy and cookie policies, security headers, and incident response information to enhance compliance and security posture.

The website lrp.lt is currently inaccessible due to a Cloudflare WAF security challenge page that blocks direct content access. The domain is registered to a Lithuanian telecommunications entity since 1999, indicating a legitimate and long-standing registration. However, no business content, contact information, or policies are accessible for detailed analysis. The technical infrastructure relies on Cloudflare services including Turnstile CAPTCHA for bot mitigation. Due to the blocking, the website's content quality, privacy compliance, and business credibility cannot be fully assessed. Security posture is partially observable through the presence of Cloudflare's WAF, but no additional security headers or policies are visible.

T

Textereien Manuela Reich

textereien.ch

45

Textereien Manuela Reich is a small Swiss-based professional text and content creation service provider specializing in website content, print materials, proofreading, and consulting. The business emphasizes personalized service, creativity, and quality, targeting individuals and businesses needing professional writing support. The website is well-structured, professionally designed, and provides clear contact information and a comprehensive privacy policy, reflecting a mature digital presence. Technically, the site uses standard modern web technologies including HTML5, CSS3, jQuery, and Modernizr, hosted by a reputable Swiss provider. Security posture is moderate with some best practices observed such as CAPTCHA on the contact form and detailed privacy disclosures, but lacks visible security headers and cookie consent mechanisms. No vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy and professional, with room for improvement in security hardening and privacy transparency.

The website cda-amc.ca is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. The domain is newly registered in March 2024 with a Canadian registrant address, consistent with the .ca domain. The site uses Cloudflare for DNS and security, indicating a modern hosting and protection setup. However, no business, contact, or policy information is publicly accessible at this time, limiting the ability to assess the company's operations or compliance. The security posture shows good HTTPS implementation and domain status protections but lacks DNSSEC and published security policies. Overall, the site appears to be in a pre-access or verification state, restricting content and business insight extraction.

M

Mobirise Ltd

mobirise.eu

59

Mobirise Ltd operates a well-established website offering a free HTML builder software that leverages AI and drag-and-drop technology to enable users to create professional, mobile-friendly websites without coding. The company targets a broad audience including individuals, freelancers, and small businesses, positioning itself as a leading no-code website builder with over 2.5 million users. The website is technically mature, employing modern frameworks such as Bootstrap 5, and integrates popular analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and domain locking, though improvements in security headers and DNSSEC are recommended. Privacy compliance is partially addressed with clear privacy and terms pages but lacks explicit cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

M

Mangold Photovoltaik GmbH

mangold-photovoltaik.de

39

Mangold Photovoltaik GmbH is a German company specializing in photovoltaic solar energy solutions, offering a comprehensive range of products and services including solar modules, inverters, mounting, maintenance, and expert consulting. With over 20 years of experience and TÜV Rheinland certification, the company holds a strong regional market position in Schwäbisch Gmünd, Germany. Their business model focuses on direct sales, installation, and customer education through training courses. Technically, the website is built on custom HTML with JavaScript libraries such as jQuery and Highslide, hosted on kasserver.com. While the site is accessible and content-rich, it lacks advanced security headers and cookie consent mechanisms, which are recommended for improved GDPR compliance and security posture. Overall, the website demonstrates good professionalism and trustworthiness but could benefit from enhanced security and privacy features.

S

Solarfuxx GmbH

solarfuxx.de

46

Solarfuxx GmbH is a German-based company specializing in photovoltaic solar energy solutions, energy storage, e-mobility charging infrastructure, and heating/climate technology integration. With over 15 years of regional experience, they serve customers primarily in the North Rhine-Westphalia region, offering consulting, installation, and ongoing support. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The company demonstrates strong business credibility through certifications and memberships in recognized industry organizations. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with cookie consent mechanisms implemented for GDPR compliance. Hosting is provided by websupport.cz, as indicated by the domain's nameservers. Performance is moderate with good mobile optimization and SEO practices. However, no advanced frameworks or CMS platforms are detected, suggesting a custom or lightweight site build. From a security perspective, the site uses HTTPS and employs email obfuscation to reduce spam. Cookie consent is implemented with opt-in functionality, supporting privacy compliance. However, security headers are not explicitly detected, and no published security or incident response policies are found. No vulnerabilities or suspicious patterns are evident, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence with good privacy compliance and moderate security posture. Strategic improvements could include adding explicit security headers, publishing security policies, and enhancing accessibility features to further strengthen the security and compliance posture.

E

engagently

engagently.com

67

Engagently is a specialized engagement platform designed to foster high-quality, respectful online conversations and dynamic communities, primarily targeting publishers and their audiences. The platform emphasizes privacy, data ownership, and GDPR compliance, positioning itself as a privacy-friendly alternative to large social networks. The website showcases a professional design with clear messaging, multimedia content, and client logos from reputable media companies, indicating a credible market presence. Technically, the site is built using modern web technologies including Next.js and Storyblok CMS, ensuring fast performance, mobile responsiveness, and good SEO practices. The platform integrates AI-powered moderation to maintain content quality and safety. While HTTPS is enforced, the site lacks some security headers and does not publicly disclose a security policy or incident response plan, which are areas for improvement. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, engagently presents a trustworthy and professional platform with a strong focus on privacy and user engagement, but should enhance transparency around security policies and domain registration details to strengthen trust further.

O

Online Solutions Oy

online.fi

59

Online Solutions Oy is a Finnish technology company specializing in eBusiness solutions, information security, and hosting services. The company leverages its proprietary eStage platform to deliver versatile eBusiness applications and emphasizes security and reliability in its hosting offerings. The website presents a professional image targeting business customers primarily in Finland, with a focus on quality and trustworthiness. Technically, the site uses standard web technologies including Bootstrap and JavaScript, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by adding explicit security headers and formal policies. Privacy compliance is partial, with a cookie policy present but lacking a consent mechanism and no visible privacy policy page. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced transparency and security documentation.

B

BTL Industries

btlnet.com

59

BTL Industries is a well-established global manufacturer of medical equipment specializing in rehabilitation, cardiology, and aesthetic medicine. The company offers a broad portfolio of clinically proven devices and maintains a strong international presence with direct offices in over 90 countries. Their website reflects a professional and comprehensive digital presence, showcasing detailed product categories, educational resources, and event participation. The technical infrastructure leverages modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security posture is generally strong with HTTPS enforcement and secure forms, though the absence of visible security headers and a published security policy indicates room for improvement. Privacy compliance is robust, featuring a comprehensive GDPR-aligned privacy and cookie policy with user consent mechanisms. However, the lack of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, which should be further investigated. Overall, BTL Industries presents a credible and professional online presence aligned with its business scope and market position.

F

Fox Legal

foxlegal.cz

57

Fox Legal is a small law firm based in Prague, Czechia, specializing in corporate and commercial law, intellectual property transactions, compliance, and litigation. The website presents a professional image with clear descriptions of key legal services targeted at business clients in the Czech market. The firm positions itself as a specialized legal service provider with a focus on corporate clients. Technically, the website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is strong with HTTPS enforced and appropriate security headers present, but the absence of explicit privacy and cookie policies reduces compliance maturity. No WHOIS data was available, likely due to privacy protection, which is common for small professional services. Overall, the site is trustworthy and professional but could improve privacy compliance and contact transparency.

W

WEBHOUSE, s.r.o.

visitroznov.cz

46

The website visitroznov.cz serves as a comprehensive tourism portal for Rožnov pod Radhoštěm, a town in the Czech Republic. It provides visitors with information on accommodation, cultural events, sports activities, and local attractions, positioning itself as a key regional resource for tourists and locals alike. The site is operated by WEBHOUSE, s.r.o., a Czech company specializing in web design and content management systems. The business model focuses on promoting local tourism and hospitality services through curated content and event calendars. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations for Google Analytics, Google Tag Manager, and Google Translate for multilingual support. It uses the VISMO CMS platform, which is tailored for municipal and tourism websites. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could be improved. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's purpose and location, indicating legitimacy. Overall, visitroznov.cz is a trustworthy and professionally maintained tourism information portal with solid business credibility and adequate technical implementation. Strategic enhancements in security policies and transparency could further strengthen its compliance and user trust.

R

RAINBOW

rainbow-studio.net

68

RAINBOW is a specialized web and e-commerce agency based in France, focusing on Shopify and Shopify Plus platforms. Established since 2005, it positions itself as a leading Shopify Expert Partner in France, offering UX/UI design, web development, and quality assurance services certified by OPQUAST. The website demonstrates a strong portfolio with notable clients, professional branding, and comprehensive service offerings tailored to businesses seeking high-quality e-commerce solutions. Technically, the site is built on Shopify's platform using modern web technologies, optimized for performance, accessibility, and SEO. Security posture is robust with HTTPS, captcha protections, and cookie consent mechanisms, although explicit security headers could be further verified. Privacy compliance is well addressed with clear policies and consent banners. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance and operation of the website.

F

FIDUCIAL

fiducial.fr

57

FIDUCIAL is a well-established French company providing a wide range of business services including accounting, legal advice, payroll management, auditing, IT solutions, and office equipment. The website targets business professionals and SMEs in France, offering comprehensive solutions to support business growth and operational efficiency. The site is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit privacy policies are lacking. WHOIS data is not publicly available, likely due to privacy protection, but the website's professional appearance and domain usage suggest legitimacy. Overall, the site presents a trustworthy and credible business front with room for improvement in security and compliance documentation.

M

Mémorial ACTe

memorial-acte.fr

60

Mémorial ACTe is a French cultural institution dedicated to the history, heritage, and memory of the transatlantic slave trade, slavery, and its abolition. Positioned as a regional cultural center in the Caribbean, it offers permanent and temporary exhibitions, cultural events, and space rentals. The website reflects a professional and well-maintained digital presence with a focus on education and cultural engagement. The institution targets a broad audience including tourists, students, and researchers interested in Caribbean history and culture. Technically, the website uses modern web technologies such as Bootstrap and JavaScript, hosted by OVH, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact and social media channels.

I

iPRAHA13.cz

ipraha13.cz

61

iPRAHA13.cz is a local news and information portal serving the Prague 13 district and its surrounding community. The website offers a variety of content including news articles, event calendars, advertising opportunities, premium content, and business directories. It targets residents and local businesses, positioning itself as a key media outlet for community engagement and information dissemination. The business model relies on advertising and premium subscriptions, supported by partnerships with local organizations and sponsors. Technically, the website is built on a modern stack including Laravel Livewire and Bootstrap, ensuring a responsive and user-friendly experience across devices. The site employs HTTPS with a valid SSL certificate and includes privacy and cookie policies compliant with GDPR. However, some security best practices such as security headers are not evident, and no explicit incident response or vulnerability disclosure information is provided. From a security perspective, the site shows a good posture with encrypted connections and CSRF protection tokens. The absence of WHOIS data for the domain is a notable concern, as it limits transparency and trust in domain ownership. No signs of malicious content or adult material were found, and the site appears safe for general audiences. Overall, iPRAHA13.cz is a credible and professionally maintained local media platform with good content quality and privacy compliance. Strategic improvements in domain transparency, security headers, and contact information disclosure would enhance trust and security posture.

R

RecyBag

recybag.ch

48

RecyBag is a Swiss-based company focused on environmental sustainability, offering recycling bags and related products to consumers interested in contributing to a better future. The website presents a professional design with consistent branding and a clear focus on its niche market. The technical infrastructure relies on standard web technologies including jQuery and custom CSS, with no detected use of major CMS platforms or third-party analytics. Security posture is basic, with no evident security headers or policies, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is functional and accessible but would benefit from enhanced security and compliance measures.

F

Federal Office of Information Technology, Systems and Telecommunication FOITT

eiam.swiss

50

The website www.eiam.swiss serves as the official portal for the Swiss Federal Administration's central identity and access management system, eIAM. It provides a unified login infrastructure for federal web applications and native mobile apps, streamlining authentication processes and reducing costs. The site targets federal employees, IT specialists, application officers, integration managers, as well as citizens and business representatives via the CH-LOGIN service. The business model is a government service focused on secure, centralized identity management within the Swiss federal ecosystem. Technically, the website employs a traditional tech stack including jQuery and JavaScript, hosted likely on government infrastructure with a CMS identified as U5 CMS. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security practices include HTTPS usage and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are absent. From a security standpoint, the site demonstrates a solid posture consistent with government standards but lacks some modern security headers and explicit privacy compliance disclosures. The WHOIS data is privacy protected, which is typical for Swiss government domains, and does not detract from the site's legitimacy. No signs of malicious activity or vulnerabilities were detected. Overall, the site is trustworthy, professionally maintained, and serves a critical government function. Recommendations include enhancing privacy and cookie policy transparency, implementing security headers, and improving mobile and accessibility features to align with best practices.

H

Hi, Cloud AG

hi1.ch

10

Hi, Cloud AG operates the Sovereign AI website, providing advanced AI workplace solutions, blockchain, and zero trust security services primarily targeting companies and government authorities in Switzerland. The company positions itself as a secure and innovative technology provider within the Swiss market. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence. Technically, the site uses a proprietary CMS platform with modern web standards, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and basic security headers present, though there is room for improvement in implementing advanced headers and formal security policies. Privacy compliance is partial, with a comprehensive privacy policy but lacking cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a trustworthy and professional entity with a solid foundation in technology services.

D

DISH Digital Solutions GmbH

metro.bar

10

DISH Digital Solutions GmbH operates a specialized SaaS platform focused on providing website building services tailored for hospitality businesses such as restaurants, cafes, bars, bakeries, and delivery services. The platform emphasizes ease of use, enabling customers to create websites without coding knowledge. The company positions itself as a niche digital solutions provider within the hospitality sector, supported by a multilingual website and integration with a broader digital club ecosystem at dish.co. Technically, the website employs modern web technologies including Bootstrap, Google Tag Manager, Adobe DTM, and Usercentrics for consent management, reflecting a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though explicit security headers and incident response policies are absent. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve transparency around security and contact information.

A

Artikelparadis

artikelparadis.se

7

Artikelparadis is a Swedish article directory website established in 2011 and operated by Staffan Sundblad. It serves as a platform for users to submit and publish articles across a wide range of categories, aiming to be the largest Swedish article catalog. The website targets Swedish content creators and small businesses seeking online exposure through article publishing. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The design is minimalistic with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, indicating poor compliance with GDPR and other privacy regulations. The WHOIS query for the subdomain returned no data, raising concerns about domain registration consistency. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.

A

Appelhoff GmbH & Co. KG

appelhoff-unna-dbg.de

10

Appelhoff GmbH & Co. KG, operating under the DIE BADGESTALTER brand, is a specialized service provider in bathroom renovation and heating system installation based in Holzwickede, Germany. The company offers comprehensive services including planning, execution, and coordination with a focus on individual customer needs, fixed pricing, and guaranteed deadlines. As part of a larger network of over 130 specialized firms, it holds a strong regional market position with a professional and customer-centric approach. Technically, the website is built on the Marcapo Websitemanager CMS, employs modern web technologies, and integrates privacy-conscious analytics (Matomo) and user consent mechanisms. Security posture is solid with HTTPS and cookie consent but lacks explicit security policy documentation and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The website itf-tkd.shop is a parked domain currently offered for sale via the Sedo domain marketplace. It contains minimal content, primarily advertising the domain sale and providing generic information in German. There is no active business or service presence on the site. The technical infrastructure relies on standard HTML5, CSS normalization, and Google Ads for monetization. The domain is registered through Spaceship, Inc. in Iceland, but the WHOIS data shows a creation date in the future (2025), indicating possible data inconsistency or placeholder registration. Security posture is minimal with no advanced headers or policies implemented, and privacy compliance is basic with only a Sedo privacy policy link available. Overall, the site lacks business credibility and trust indicators.

B

BM fuer Bildung

klassejob.at

56

Klassejob.at is an official educational website affiliated with the Austrian Federal Ministry of Education, providing comprehensive information about careers in teaching and early childhood education. The platform targets students and individuals interested in pursuing these professions, positioning itself as a trusted government resource. The website offers clear navigation to specialized subdomains for teacher training and early childhood pedagogy, reinforcing its role as an informational hub. Technically, the website employs standard modern web technologies such as HTML5 and CSS3, with good mobile optimization and accessibility features. While explicit CMS or hosting details are not evident, the site demonstrates moderate performance and good SEO practices through well-structured metadata and Open Graph tags. No advanced frameworks or analytics tools are detected, indicating a straightforward, content-focused implementation. From a security perspective, the site uses HTTPS as indicated by URLs, but lacks explicit security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms or data collection mechanisms are present on the main page, reducing immediate data protection risks. The WHOIS data confirms the domain's legitimacy and alignment with the Austrian Ministry of Education, enhancing trustworthiness. However, the absence of vulnerability disclosure and incident response information suggests room for improvement in security transparency. Overall, Klassejob.at presents a professional, trustworthy, and safe educational resource with solid business credibility. Strategic enhancements in privacy compliance, security headers, and incident response disclosures would further strengthen its security posture and regulatory adherence.

Z

Zentrum für Elementarpädagogik

zentrum-elementarpaedagogik.at

37

Zentrum für Elementarpädagogik is an Austrian educational organization specializing in elementary pedagogy training and services. The website presents a professional and well-structured platform primarily targeting educators and professionals interested in early childhood education. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is acceptable with HTTPS enabled but lacks advanced security headers and visible incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance measures.

I

Italieonline s.r.o

olaszorszagonline.hu

42

Italieonline s.r.o operates a professional online travel agency website focused on Italian holidays, offering a wide range of accommodation options including apartments, hotels, and camping sites. The company has a strong market presence since 1997 and is a member of multiple reputable travel associations, enhancing its credibility. The website targets Hungarian-speaking travelers and provides multilingual support through sister sites in various European languages. Technically, the site employs modern web standards, responsive design, and Google Analytics for user tracking, with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is well-structured, user-friendly, and trustworthy for its intended audience.

I

Italieonline s.r.o

wlochyonline.pl

36

Italieonline s.r.o operates a professional online travel agency website focused on vacations in Italy, offering a wide range of accommodations including apartments, hotels, and camping sites. The company targets Polish-speaking travelers and has a strong presence in multiple European markets through related language sites. The business is well-established since 1997 and is a certified member of several travel associations, enhancing its market credibility. Technically, the website uses modern web technologies, responsive design, and integrates Google Analytics for tracking. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

I

Italieonline s.r.o

talianskoonline.sk

10

Italieonline s.r.o operates a professional online travel agency website specializing exclusively in holidays in Italy, offering a wide range of accommodations including apartments, hotels, and campsites for both summer and winter vacations. The company has a strong market presence in Slovakia and neighboring Central European countries, supported by multiple language versions and membership in reputable travel associations. The website demonstrates a good level of digital maturity with modern technologies, responsive design, and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy and well-positioned in its niche.

I

Italieonline s.r.o

italieonline.cz

11

Italieonline s.r.o is a well-established Czech travel agency specializing exclusively in holidays in Italy, offering a wide range of accommodations including apartments, hotels, and campsites. The company has been operating since 1997 and holds multiple certifications from national travel associations, reinforcing its market credibility. The website targets Czech and Slovak tourists and provides multilingual support through partner domains for other European markets. Technically, the website employs modern web standards, uses Google Analytics and Tag Manager for tracking, and is hosted on a Czech hosting provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Overall, the site is professional, user-friendly, and trustworthy, with no signs of malicious or adult content.

V

VOKO Studio

vokostudio.com

43

VOKO Studio is a small freelance digital agency based in Dublin, Ireland, specializing in affordable web design, mobile app development, and graphic design services. Founded in 2017, the company positions itself as a reliable and cost-effective alternative to larger agencies, offering fixed-price packages starting at €379. Their portfolio and presence on Google Play with multiple apps and thousands of downloads demonstrate active business operations and client engagement. Technically, the website is built with modern web standards including HTML5, CSS3, PHP7, and jQuery, hosted on HostGator servers. The site is mobile optimized and includes integration with Google Maps and Google Fonts, providing a good user experience and SEO foundation. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. The contact form uses a third-party service (Formspree) for email submissions, and no incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but could improve its security posture and privacy compliance to better align with industry best practices.

P

Private Pädagogische Hochschule Augustinum

pph-augustinum.at

46

Private Pädagogische Hochschule Augustinum is a reputable Austrian higher education institution specializing in teacher training, continuing education, and educational research. The website reflects a well-established organization with a clear focus on pedagogical sciences and international cooperation. Their market position is regional with a strong emphasis on quality education and sustainability, as evidenced by their Österreichisches Umweltzeichen certification. Technically, the website is built on a modern CMS (ProcessWire) with a clean HTML5 and CSS3 codebase, enhanced by JavaScript libraries such as Flickity for UI components. The site is mobile-optimized, accessible, and SEO-friendly, though some improvements in security headers and cookie consent mechanisms are recommended. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement in security maturity. Privacy compliance is good, with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the website presents a professional, trustworthy, and content-rich platform suitable for its educational audience. Strategic enhancements in security and privacy compliance would further strengthen its posture and user trust.

The Industrie- und Handelskammer Lüneburg-Wolfsburg (IHK Lüneburg-Wolfsburg) is a regional chamber of commerce serving approximately 70,000 commercial enterprises across multiple districts in Germany. The website provides comprehensive business consulting, educational programs, networking opportunities, and advocacy services tailored to the regional business community. It positions itself as a key economic stakeholder and resource for local businesses. Technically, the website is built on the CoreMedia CMS platform, utilizing modern JavaScript libraries, cookie consent management via Cookiebot, and analytics through eTracker. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and provides transparent contact and social media channels.

O

OKsystem a.s.

oksystem.com

67

OKsystem a.s. is a well-established Czech IT company specializing in custom software development, IT services, and training with over 35 years of market presence. The company targets private firms and public administration, offering innovative, secure, and reliable software solutions. Their market position is strong, supported by a large customer base and official partnerships such as the Czech national pavilion at EXPO 2025. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and reCAPTCHA, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are not evident. The absence of WHOIS data for the .com domain is a concern but may be due to privacy or alternative domain usage. Overall, the website is professional, trustworthy, and compliant with GDPR.

F

ForCamping s.r.o.

4camping.cz

73

ForCamping s.r.o. operates 4camping.cz, a leading Czech retailer specializing in outdoor and camping equipment. The company combines e-commerce with a network of 21 physical stores, offering over 12,000 products. The website targets outdoor enthusiasts, hikers, cyclists, and families, positioning itself as a market leader with recognized awards such as ShopRoku. The business model focuses on providing a comprehensive product range with customer advisory services and a loyalty program. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and a proprietary e-commerce framework named Asgard. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain legitimacy verification, but the professional presentation and business presence support trust. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

W

Wolters Kluwer ČR, a. s.

rodicevitani.cz

55

The website www.rodicevitani.cz serves as the official platform for the 'Rodiče vítáni' certification, a recognized mark for schools in the Czech Republic that foster positive communication and trust with parents. The project is managed under Wolters Kluwer ČR, a reputable company, and targets educational institutions and parents seeking quality assurance in school-family relations. The site provides information on certification criteria, renewal processes, and contact support, positioning itself as a trusted resource in the Czech education sector. From a technical perspective, the website employs modern frontend technologies including Bootstrap 5 and integrates Google Tag Manager for analytics and consentmanager.net for cookie consent management. The site is mobile optimized with a clear navigation structure and professional design, although some accessibility and SEO enhancements could be made. The absence of detected CMS or hosting details limits deeper infrastructure insights. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common for corporate domains but limits domain age verification. Overall, the site demonstrates a moderate security posture with room for improvement in headers and transparency. The overall risk assessment is low, with the site appearing legitimate, professionally maintained, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, improving accessibility, and publishing vulnerability disclosure or incident response policies to strengthen trust and security culture.

The domain e-svatek.cz is newly registered in March 2024 and currently serves as a parked domain with no active business content or services. The website primarily displays a domain-for-sale message and embeds an iframe from an external source, likely for monetization purposes. There is no privacy policy, cookie policy, terms of service, or contact information available, which significantly limits the site's credibility and user trust. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript, and no detected CMS or advanced frameworks. Security posture is weak due to lack of HTTPS enforcement and absence of security headers. Advertising scripts and tracking pixels from third-party ad networks are present, indicating monetization attempts but with poor transparency.

N

Netzgesellschaft Ahlen mbH

erdgasumstellung-ahlen.de

40

Netzgesellschaft Ahlen mbH operates as a regional energy utility focused on the transition of natural gas supply from L-gas to H-gas in the Ahlen region of Germany. The website serves as an information hub providing detailed guidance on the conversion process, timelines, cost reimbursement, and technical information for installers and chimney sweeps. The company positions itself as a trusted local energy network operator with clear communication channels and customer support. Technically, the website is built on WordPress with standard plugins and libraries such as jQuery and Slick Carousel, hosted on generic servers with a secure HTTPS configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices but lacks advanced security headers and cookie consent mechanisms. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though formal security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with GDPR in terms of privacy policy presence but could improve in cookie consent and security transparency. The domain WHOIS data is minimal but consistent with a small regional utility, with no privacy protection or suspicious patterns detected.

W

Werbebaugesellschaft mbH

werbebau.com

49

Werbebaugesellschaft mbH is a German company specializing in exhibition stand construction and brand presentation services with over 50 years of industry experience. The company offers comprehensive services including consulting, design, construction, production, assembly, transport, and storage of exhibition materials. Their market position is that of an established medium-sized business serving clients worldwide, with a focus on delivering turnkey solutions from concept to execution. Technically, the website employs modern JavaScript libraries such as jQuery, Flexslider, and fullpage.js, combined with CSS3 and HTML5 standards. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some accessibility features could be improved, and no CMS or hosting provider information is evident. From a security perspective, the site uses SSL encryption and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, the absence of explicit security headers and the lack of publicly available security or incident response policies suggest room for improvement. The missing WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website is well-structured and informative, supporting the company's business credibility. Strategic recommendations include enhancing security headers, publishing security policies, updating libraries regularly, and improving accessibility to strengthen the security posture and compliance standing.

Č

České priority

pank.cz

46

PANK is a specialized research and advisory project operated by the Czech non-profit organization České priority, focusing on enhancing knowledge work and informed decision-making within Czech public administration. The website serves as a resource hub offering guides, case studies, and recommendations tailored for teams in government organizations. The project is supported by the Technological Agency of the Czech Republic, indicating credible backing and alignment with national research priorities. Technically, the website is built using modern frameworks such as Quarto and Bootstrap, with privacy-conscious analytics via Matomo configured to respect DoNotTrack and disable cookies. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, though explicit security headers and formal policies like privacy and cookie policies are missing, representing areas for improvement. Overall, the domain registration data is consistent with the website's purpose and origin, supporting legitimacy and trustworthiness.

A

ABX software s.r.o.

abxharsys.cz

53

ABX software s.r.o. operates the website abxharsys.cz, offering a premium point-of-sale (POS) system tailored for restaurants and hospitality businesses primarily in the Czech Republic. Their product emphasizes ease of use and operational efficiency for restaurant management. The company positions itself as a niche provider within the hospitality technology sector, targeting small to medium-sized restaurant operators. The website content is professionally presented, with clear branding and relevant business information, although explicit contact details and legal policies are not prominently available. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrating third-party services such as Google Tag Manager, Cookiebot for cookie consent management, and Limetalk for live chat support. The site uses HTTPS with strong SSL configuration and leverages Cloudflare services inferred from cookies and scripts, enhancing security and performance. Mobile optimization and SEO practices are good, contributing to a positive user experience. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and comprehensive cookie consent with granular user controls. However, the absence of explicit security headers and a published security policy or incident response contact reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected in the analysis. The lack of WHOIS data due to privacy protection is noted but is not uncommon for small software companies and does not significantly detract from legitimacy given the professional web presence. Overall, the website presents a low-risk profile with solid business credibility and technical implementation. Strategic recommendations include publishing privacy and terms of service documents, enhancing security headers, and providing explicit security and incident response information to further strengthen trust and compliance.

The Industrie- und Handelskammer Lüneburg-Wolfsburg (IHK Lüneburg-Wolfsburg) is a regional chamber of commerce serving approximately 70,000 businesses across several districts in Germany. The website provides comprehensive information and services including business consulting, education, networking, and support for startups. It targets businesses and entrepreneurs in the Lüneburg-Wolfsburg region, positioning itself as a key regional economic facilitator. Technically, the website is built on the CoreMedia CMS platform and integrates modern web technologies including JavaScript, CSS, and HTML5. It employs third-party services such as eTracker for analytics, CCM19 for cookie consent management, and Userlike for chat support. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and provides a granular cookie consent mechanism. However, it lacks publicly visible security policies, incident response contacts, and security headers which could enhance its security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its audience with relevant content and clear contact information. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen trust and resilience.

E

EVIDENT GmbH

evident.de

47

EVIDENT GmbH is a German company specializing in dental practice management software, targeting dental professionals and clinics. The website is built on WordPress using the Divi theme and includes event calendar functionality. The technical infrastructure is modern but shows room for improvement in security headers and privacy compliance. The security posture is moderate with no critical vulnerabilities detected but lacks explicit security policies and incident response information. Overall, the website is professional and safe, but enhancements in privacy and security transparency are recommended.

T

TNX s.r.l.

avatable.com

48

AVATABLE is a specialized SaaS provider offering a comprehensive restaurant booking management system integrated with a website solution. The company, TNX s.r.l., targets restaurants, pizzerias, fast food outlets, and event organizers primarily in Italy. Their platform includes a booking engine, table and room management, digital menus, CRM capabilities, marketing automation, and delivery integration. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the site uses modern web technologies including jQuery, Bootstrap, and various JavaScript libraries, with good SEO and performance characteristics. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. WHOIS data is missing, which reduces trust slightly but the overall business presence and content quality support legitimacy.

O

Ordinalo

ordinalo.net

52

Ordinalo is an Italian-based software service provider specializing in take away and food delivery management solutions for restaurants and food businesses. The company offers a comprehensive SaaS platform including a website, mobile apps for Android and iOS, order management, delivery rider coordination, digital menus with QR codes, and marketing tools such as push notifications. Ordinalo positions itself as a niche player enabling restaurants to disintermediate from large food delivery platforms and build direct customer relationships. The website is professionally designed, content-rich, and targets small to medium-sized food service businesses in Italy. Technically, the site uses modern web technologies and integrates analytics and tracking tools, but lacks some advanced security headers and a published security policy. The WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility is supported by clear contact information, client logos, and active social media presence. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR awareness. Overall, Ordinalo presents a solid digital presence with room for security and compliance improvements.

The website www.bmj.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before content can be accessed. This prevents extraction of meaningful business, technical, or security information from the site content. The domain WHOIS lookup returned no registration data, which is unusual for a well-known domain and may indicate privacy protection or query limitations. Due to these access restrictions, the technical infrastructure appears to rely on Cloudflare for security and DDoS protection, but no further details can be confirmed. The security posture cannot be fully assessed, but the presence of a WAF challenge indicates some level of protection. Overall, the site cannot be fully analyzed until the security challenge is bypassed or removed.