Security Directory

C

Cornèr Bank Ltd.

cornercard.ch

73

Cornèrcard is a Swiss financial services provider specializing in Visa and Mastercard credit cards, prepaid cards, and related financial products. The company targets private and business clients in Switzerland, offering a variety of card options including cashback, travel, and social cause cards. Cornèrcard is part of the Cornèr Group, a reputable financial group in Switzerland, and enjoys strong market positioning supported by customer satisfaction awards and recognitions. The website provides comprehensive information about products, services, and customer support, including a dedicated mobile app for card management.

카

카페24 주식회사

cafe24corp.com

45

Cafe24 Corp. is a South Korean technology company specializing in providing a comprehensive global e-commerce platform. Their services include commerce platform solutions, global market expansion support, store and design services, marketing, hosting, and entrepreneurship education. The company positions itself as a leader in the Korean e-commerce ecosystem with a strong partner network and a focus on enabling global online business success. The website content is professionally presented in Korean with multilingual support, targeting online merchants and businesses seeking e-commerce solutions. Technically, the website uses modern JavaScript libraries such as jQuery 3.6.0 and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some accessibility features are basic, and no CMS or specific frameworks are detected. Hosting appears to be managed internally or through Cafe24's own infrastructure. From a security perspective, the site enforces HTTPS and uses standard tracking scripts without visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security best practices and privacy compliance. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and branding suggest a legitimate business. Overall, Cafe24's website is a well-structured, professional platform supporting a large e-commerce business. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, publishing security policies, and clarifying domain registration information to improve trust and compliance.

L

Landkreis Görlitz

landkreis.gr

55

Landkreis Görlitz operates an official regional government website providing comprehensive information and services related to district administration, economy, tourism, education, and social affairs. The site targets residents and visitors of the Landkreis Görlitz region in Germany, offering multilingual content and online citizen services including appointment scheduling and online applications. The website is built on the active-City CMS platform and employs modern JavaScript libraries such as jQuery and Klaro for cookie consent, alongside Matomo for privacy-conscious analytics. From a technical perspective, the website demonstrates moderate performance and basic mobile optimization. Accessibility features are present but could be improved. Security practices include the use of S/MIME certificates for secure email communication and a GDPR-compliant cookie consent mechanism. However, the site lacks explicit HTTP security headers, a published security policy, and a vulnerability disclosure program, which are areas for improvement. Overall, the website is trustworthy and professional, with clear contact information and consistent branding. The domain registration data aligns well with the website content, supporting legitimacy. The security posture is adequate but could be enhanced by implementing recommended best practices. Privacy compliance is good, reflecting adherence to GDPR requirements. Strategic recommendations include enhancing security headers, publishing security and incident response policies, improving mobile and accessibility features, and establishing a vulnerability disclosure process to strengthen the site's security maturity and user trust.

L

Landkreis Görlitz

kreis-goerlitz.de

55

Landkreis Görlitz operates an official regional government website providing comprehensive information about district administration, services, tourism, education, and social topics. The site targets residents and visitors of the Görlitz district in Germany, offering multilingual content and online services such as appointment scheduling and online applications. The website is built on the active-City CMS platform and incorporates modern web technologies including jQuery, Klaro for cookie consent, and Matomo for privacy-focused analytics. Hosting is provided by plesk11.ncserve.de. Security practices include the use of S/MIME certificates for secure email communication and a cookie consent mechanism compliant with GDPR. However, explicit security headers and vulnerability disclosure policies are not evident, suggesting room for improvement in security posture. Overall, the website is professional, trustworthy, and serves as a reliable information portal for the district.

S

Simple Lift s.r.o.

simplelift.cz

48

Simple Lift s.r.o. is a Czech-based company specializing in the sale and servicing of material handling equipment including pallet trucks, forklifts, hand trucks, lifting platforms, and tables. The company operates an e-commerce platform targeting businesses and individuals in the Czech Republic and Slovakia, offering both new and used equipment as well as maintenance services. The website is professionally designed, mobile-optimized, and includes structured data to enhance search engine visibility. Contact information and customer reviews are prominently provided, supporting customer trust and engagement. Technically, the site is built on WordPress with WooCommerce and uses modern libraries such as jQuery and Bootstrap, supported by WP Rocket for performance optimization. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though additional security headers and incident response information could improve the security maturity. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website represents a legitimate, medium-sized business with a solid digital presence and good operational transparency.

S

Simopt, s.r.o.

simopt.cz

50

Simopt, s.r.o. is a Czech Republic based technology company specializing in virtual reality, 3D projects, e-learning, mobile applications, and web development services. With over 30 years of experience, the company targets businesses and educational institutions seeking innovative digital solutions. The website presents a professional and consistent brand image, showcasing key services and client testimonials that reinforce its market position as a trusted local provider. Technically, the site employs modern JavaScript libraries and frameworks, including jQuery, YouTube API, and cookie consent tools, indicating a moderate level of digital maturity. The site is mobile optimized and includes SEO best practices, though it lacks some advanced accessibility features. Security posture is adequate with HTTPS implied but lacks visible security headers and published security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professional, though the absence of WHOIS data reduces domain trust slightly. Strategic improvements in security headers, incident response transparency, and WHOIS data visibility would enhance credibility and security.

E

EEM - Empresa de Eletricidade da Madeira

eem.pt

61

EEM - Empresa de Eletricidade da Madeira is a regional energy company focused on the production, transport, distribution, and commercialization of electricity in the Autonomous Region of Madeira, Portugal. The company positions itself as an environmentally sustainable energy provider, serving residential and commercial customers in the region. Their website reflects a medium-sized enterprise with a clear business model centered on energy services and sustainability. The digital presence is professional, with good content quality and consistent branding.

The website crashday.cz represents a small academic research team from the Institute of Forensic Engineering at Brno University of Technology, specializing in traffic accident analysis and automotive crash testing. The site serves as an informational platform showcasing their work and research activities. The technical infrastructure is based on a modern WordPress CMS with standard plugins and themes, hosted by WEDOS, a Czech hosting provider. The site is accessible via HTTPS with a valid SSL certificate, ensuring secure communication. However, the site lacks critical privacy and cookie policies, as well as explicit contact information, which limits its compliance with GDPR and general privacy best practices. Security posture is moderate with room for improvement in security headers and incident response disclosures. Overall, the site is professionally presented but minimalistic in content and compliance documentation.

Rezervacekluziste.cz is an online reservation platform dedicated to managing bookings and ticket sales for sports facilities in the municipality of Líbeznice, Czech Republic. Operated by BluePool s.r.o., the platform enables users to register, select dates, purchase tickets via PayU, and receive QR code tickets for entry. The service targets local residents and visitors seeking convenient access to municipal sports venues. The website presents a professional and consistent brand aligned with the municipality and operator, offering clear instructions and support contact information. Technically, the site employs modern JavaScript libraries, Google Fonts, and Google Analytics for user tracking, hosted likely via WEDOS, a Czech hosting provider.

CreativeGUERILLA is a small Czech Republic based creative agency specializing in idea generation and execution for notable clients such as Plzeňský Prazdroj, BAT, L'Oréal, and Coca-Cola. The website is minimalistic, providing basic information and a single email contact without additional business or compliance details. Technically, the site uses jQuery 3.6.0 and is hosted via Active24, but lacks modern security features such as HTTPS and security headers. No privacy or cookie policies are present, indicating limited GDPR compliance. The security posture is weak due to missing HTTPS and security headers, though no critical vulnerabilities were detected. Overall, the site is functional but basic, with room for improvement in security, compliance, and content richness.

D

Duncan-Parnell

duncan-parnell.com

65

Duncan-Parnell is a well-established company with over 75 years of experience specializing in survey equipment, geospatial technology, and custom printing solutions. The company serves a professional B2B audience including construction contractors, engineers, and architects primarily in the Southeastern United States. Their business model focuses on providing high-quality hardware, software, and services to support successful project execution. The website reflects a mature digital presence with multiple locations and a broad product catalog. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. The absence of WHOIS data reduces domain trustworthiness somewhat, but the professional content and business information mitigate this risk. Overall, the site is trustworthy and professionally maintained.

F

Filmondo

filmondo.cz

52

Filmondo is a Czech creative studio specializing in video marketing and related services such as aerial drone photography, animation, photography, training, virtual tours, live streaming, and equipment rental. The company positions itself as a specialist with over seven years of experience and a substantial portfolio of references, targeting businesses and organizations seeking to enhance their brand through video content. The website is built on WordPress and employs modern web technologies including jQuery, Bootstrap, and various JavaScript libraries, with Google Analytics and Tag Manager integrated for user tracking. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data reduces domain registration trustworthiness, but the website content and client testimonials indicate a legitimate and professional business. Overall, the site is well-designed, user-friendly, and content-rich, though improvements in privacy compliance and security headers are recommended.

Rinker Materials is a division of The QUIKRETE Companies specializing in the manufacturing and distribution of concrete pipe and related infrastructure products. The company targets construction professionals and infrastructure developers, offering a range of products including bridges, precast box culverts, end treatments, and specialty applications. The website reflects a well-established business with consistent branding and a clear market position within the transportation and manufacturing sectors. Technically, the website is built on WordPress with Bootstrap and uses modern libraries such as jQuery and Font Awesome. It integrates marketing and analytics tools including Google Tag Manager, Google Analytics, and HubSpot, alongside a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a professional and trustworthy front for Rinker Materials, but the missing WHOIS information and lack of explicit security policies suggest areas for improvement to enhance trust and compliance.

D

Duncan-Parnell

duncanparnell.com

66

Duncan-Parnell is a well-established, family-owned business specializing in providing high-quality survey equipment, geospatial technology, and custom printing solutions primarily to construction contractors, engineers, surveyors, architects, and designers. With over 75 years of experience and multiple physical locations across the Southeastern United States, the company positions itself as a trusted partner offering both products and services including equipment rentals and support. The website reflects a professional B2B business model with a focus on customer service and industry-specific solutions. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Microsoft Clarity, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, though there is room for improvement in implementing comprehensive security headers and explicit security policies. The absence of WHOIS data reduces domain trust verification, but the website content and business information strongly suggest legitimacy. Overall, the site is well-designed, mobile-optimized, and provides clear navigation and contact options, supporting a positive user experience.

N

Netigate

ntgt.de

59

Netigate operates a professional survey and feedback platform targeting businesses seeking employee, customer, and market insights. The website analyzed is a login portal supporting organizational and individual accounts, with accessibility features and links to legal and privacy policies hosted on official Netigate domains. The technical infrastructure is based on ASP.NET Web Forms hosted on Microsoft Azure DNS, using modern JavaScript libraries like jQuery. The site demonstrates moderate digital maturity with basic mobile optimization and accessibility compliance. Security posture is adequate with HTTPS usage and secure form handling, though explicit security headers and cookie consent mechanisms are absent. Overall, the site is trustworthy and business-focused with no signs of malicious activity or suspicious content.

F

FC Vysočina Jihlava

fcvysocina.cz

46

FC Vysočina Jihlava operates an official website serving as the primary digital platform for the football club. The site provides comprehensive information about the club, including team rosters, match schedules, ticketing, fan engagement, and historical archives. The club targets football fans and the local community, positioning itself as a regional sports entity competing in the Chance národní liga. The business model focuses on fan engagement, sponsorship visibility, and community presence. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and LightGallery, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and formal privacy or security policies. Overall, the domain is legitimate and well-established, consistent with the club's history. Recommendations include publishing privacy and terms of service policies, enhancing security headers, and providing clear contact information for security and business inquiries.

Z

Zoologická zahrada Jihlava, příspěvková organizace

zoojihlava.cz

57

Zoo Jihlava is a well-established zoological garden in the Czech Republic, operating since 2001. The organization provides animal exhibitions, educational programs, and various visitor services including events and guided tours. The website reflects a non-profit business model focused on community engagement and education, targeting families, children, and tourists. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website is built on WordPress with modern libraries such as jQuery and Google Maps API integration. It uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms compliant with GDPR. The site shows moderate performance and good mobile optimization, although accessibility features are basic. SEO is supported by the Yoast SEO plugin, enhancing search visibility. From a security perspective, the site enforces HTTPS and uses nonce tokens for AJAX calls, but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Business credibility is supported by clear contact information, social media presence, and trust indicators such as organizational memberships. Overall, Zoo Jihlava's website demonstrates a solid digital presence with good security and privacy practices. Strategic improvements could include adding security headers, publishing a security policy, and enhancing accessibility. These steps would further strengthen the site's security posture and user trust.

F

Fundació ENT

fiscalidadresiduos.org

48

The website 'Observatorio Fiscalidad Residuos - ENT' is operated by Fundació ENT, a small non-profit organization founded in 2018 in Spain. It serves as an observatory focused on fiscal instruments related to waste management, providing updated data, studies, and case references primarily for public administrations and researchers. The site is well-structured, professionally designed, and offers relevant content in Spanish and Catalan, with an English summary available. Technically, it is built on WordPress with modern plugins and uses Google Analytics for user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks published privacy and security policies. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

I

InCommon

incommon.org

49

InCommon is a well-established organization founded in 2000, providing integrated identity and access management (IAM) services primarily for the education and research sectors. Their offerings include single sign-on, cloud access, federation services, eduroam wireless access, certificate services, and trusted access software solutions. The website reflects a strong community-driven approach, targeting students, faculty, staff, and researchers globally. The organization maintains a reputable market position as a leader in IAM for research and education communities. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and Cloudflare DNS/CDN services. The site is well-optimized for SEO, mobile-friendly, and accessible, with excellent design quality and user experience. However, there is room for improvement in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and employs Google reCAPTCHA v3 for form protection. DNSSEC is not enabled, and no explicit security headers were detected, which are areas for enhancement. The WHOIS data shows privacy protection typical for this sector, with a domain age consistent with the organization's history, supporting legitimacy. Overall, InCommon demonstrates a strong digital presence with professional content and solid security posture, though improvements in privacy compliance and DNS security would further strengthen their risk profile and trustworthiness.

S

Spectrum Ophthalmics

spectrum-uk.co.uk

63

Spectrum Ophthalmics is a UK-based supplier specializing in ophthalmology equipment, targeting healthcare professionals and clinics in the UK and Ireland. The company positions itself as a leading provider of advanced ophthalmic technology and solutions. The website reflects a professional and focused business model centered on healthcare equipment supply. Technically, the website is built on WordPress 6.0.1, utilizing modern analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, but lacks visible security headers and explicit security policies, which are recommended for improvement. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy. Overall, the website is professional and safe, but the domain registration inconsistency should be addressed to enhance trust and credibility.

A

ARTOS, a.s.

nuo.sk

56

NUO.sk is a Slovak telecommunications service provider offering bundled high-speed internet, digital television with over 200 channels, and telephone services primarily targeting domestic households across Slovakia. The company operates through a network of regional partners, with ARTOS, a.s. as the main entity. The website presents a professional and consistent brand image with clear service descriptions and multiple contact options. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, AOS, and Leaflet, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. WHOIS data aligns well with the website's business claims, indicating a legitimate and consistent registration. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional online presence for NUO services.

I

INFINITY GROUP a.s.

infinitygroup.sk

48

INFINITY GROUP a.s. is a Slovak manufacturing company specializing in the production of shaped cut parts and weldments for construction, mining machinery, rail vehicles, and handling equipment. Established in 2008, the company leverages advanced technologies such as laser, plasma, and oxygen cutting, CNC machining, bending, surface treatment, and welding to deliver high-quality products. The company holds multiple certifications including ISO 9001 and CE standards, reinforcing its commitment to quality and compliance. The website targets industrial clients and businesses in the manufacturing sector, positioning itself as a reliable regional manufacturer with a solid market presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Isotope, Owl Carousel, and Google Fonts. It employs performance optimizations such as lazy loading and caching via WP Rocket, and integrates GDPR-compliant cookie consent mechanisms through the Complianz plugin. The site is mobile-optimized and SEO-friendly, though some lazy loading images show errors which may affect user experience. From a security perspective, the site uses HTTPS with DNSSEC enabled and integrates Google reCAPTCHA v3 for bot protection. However, it lacks explicit HTTP security headers and does not provide a dedicated security policy or incident response contact. No vulnerabilities or malicious content were detected, but improvements in security headers and broken image fixes are recommended to enhance security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility. The domain registration data aligns well with the business claims, showing a consistent and legitimate online presence. Strategic recommendations include implementing security headers, fixing broken images, and adding explicit security and incident response information to further strengthen trust and security.

P

pixelmolkerei AG

pixelmolkerei.ch

60

pixelmolkerei AG is a specialized company providing advanced CGI, 3D visualization, and VR/AR/MR solutions primarily for the healthcare sector. With offices in Switzerland and Canada, they serve medical professionals and healthcare institutions by delivering immersive training and marketing content. Their market position is strong, supported by long-term partnerships with reputable healthcare companies and positive client testimonials. The website reflects a professional and modern digital presence with rich multimedia content and interactive features. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. Security posture is good with HTTPS and CAPTCHA on forms, but lacks some security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is trustworthy and well-designed but could improve compliance and security transparency.

G

Panel de Control

gestiondecuenta.com

56

The website paneles.gestiondecuenta.com is a Spanish-language login portal designed for users to manage various services and applications through a centralized control panel. It targets a general audience likely consisting of existing customers or users of the service platform. The site offers language options linking to related domains in Galician, Catalan, English, and Portuguese, indicating a multi-regional approach. The business model appears to be service management, but no explicit company or business details are provided on the login page. The market position and company size cannot be determined from the available data. Technically, the site uses a standard modern web stack including jQuery 3.6.0, Bootstrap, and the Inspinia framework for UI. The site is mobile optimized with good design quality and user experience. However, no CMS or hosting provider information is discernible. Performance is moderate based on the technology used and page complexity. SEO and accessibility features are basic but functional. From a security perspective, the site uses HTTPS (implied by URL scheme) and employs secure form submission via POST. The password field includes a show/hide toggle for usability. However, no HTTP security headers (CSP, HSTS, etc.) are detected, and no anti-CSRF tokens are visible in the login form. There is no privacy or cookie policy present, nor any contact or incident response information, which limits compliance and trust. WHOIS data for the subdomain is unavailable, which is typical, but no registrar or domain creation data is found for the main domain, limiting trust assessment. Overall, the site is functional and professionally designed but lacks transparency and security best practices in several areas. The risk level is moderate with recommendations to improve security headers, privacy compliance, and contact transparency to enhance trust and regulatory adherence.

R

Rotopino.pl S.A.

narzedzia.pl

76

Narzedzia.pl is a large Polish e-commerce platform specializing in tools and power tools for both professional and home use. The website offers a broad product range with over 30,000 items, fast delivery options, and deferred payment methods, targeting professionals in construction, finishing, and gardening sectors as well as DIY enthusiasts. The business is operated by Rotopino.pl S.A., a known entity in the Polish market. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Google Analytics 4, ensuring good performance and user experience. Security is well implemented with HTTPS, security headers, and cookie consent mechanisms, although no explicit security policy or incident response information is published. The WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces transparency but is common for commercial sites. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

stonebrook GmbH

stonebrook.de

49

stonebrook GmbH is a regional IT service provider based in Schwabmünchen, Germany, specializing in IT support and infrastructure solutions for small and medium-sized enterprises. Their offerings include IT management, server hosting, monitoring, patch management, and telephony solutions, positioning them as a reliable local partner for IT needs. The website is professionally designed, content-rich, and targets regional businesses effectively. Technically, the site runs on WordPress with modern plugins such as Contact Form 7 and Google reCAPTCHA, ensuring basic security and user interaction capabilities. The presence of SEO plugins and structured data indicates a focus on discoverability and user experience. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is partially addressed with a GDPR privacy policy present, but lacks cookie consent mechanisms and detailed incident response information. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. The site is accessible without WAF or blocking mechanisms, facilitating comprehensive analysis.

The website hanikvolleyball.cz is a Czech-language volleyball training and informational platform primarily targeting volleyball players and enthusiasts. It offers articles, videos, and information about volleyball camps, focusing on both beginner and advanced training. The site is small-scale, with a niche market position, and has been operational since 2002, indicating a stable presence in its domain. The business model revolves around content publishing and community engagement through social media channels. Technically, the site is built on WordPress with modern plugins for SEO, document embedding, and cookie consent. It uses Google Analytics and Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. Security-wise, the site benefits from HTTPS and cookie consent but lacks visible security headers and formal privacy or security policies, which are areas for improvement. Overall, the site is safe, professional, and well-structured but would benefit from enhanced compliance and security practices.

Dampfers-Corner.de is a small German-language blog focused on the vaping community, offering an Easy Liquid Calculator tool and affiliate advertising primarily through Amazon. The site operates on WordPress with a basic but functional design and moderate technical infrastructure. It uses HTTPS and includes GDPR-compliant cookie consent and privacy policy pages, but lacks explicit security policies and terms of service. Contact is available only via a form, with no direct emails or phone numbers published. The security posture is moderate with room for improvement in security headers and incident response readiness. Overall, the site is accessible, safe, and serves a niche audience with basic content and tools.

B

Bigpoint

seafight.com

63

Seafight.com is an established online browser-based MMORPG pirate game operated by Bigpoint GmbH, targeting gamers interested in fantasy and pirate-themed multiplayer experiences. The website offers a rich user experience with real-time gameplay, social media integration, and community engagement. Technically, the site uses a mature technology stack including jQuery, Google Analytics, and hCaptcha for security and user interaction. The security posture is solid with HTTPS enforced and CAPTCHA protections, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site presents a professional and trustworthy gaming platform with a strong market position in its niche.

B

Bigpoint GmbH

darkorbit.com

59

DarkOrbit is a browser-based MMO space combat game operated by Bigpoint GmbH, a large German game developer. The website offers a rich user experience with multi-language support, secure login and registration forms, and integration with social media platforms such as Facebook. The technical infrastructure leverages modern JavaScript libraries, consent management platforms, and tracking tools to ensure GDPR compliance and user engagement. Security posture is strong with HTTPS enforcement and captcha protections, though some HTTP security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS data for the domain reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and known company association. Overall, the site is well-positioned in the online gaming market with a solid technical foundation and good privacy practices.

K

Kreisjugendring Lichtenfels

kjr-lichtenfels.de

50

Kreisjugendring Lichtenfels is a regional non-profit organization operating as part of the Bavarian Youth Ring, serving as a central hub for youth organizations in the Lichtenfels district of Germany. The organization provides youth programs, event coordination, equipment lending, and support services to local youth groups and associations. Their website reflects a professional and community-focused approach, with clear navigation and relevant content tailored to their audience. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, ensuring a stable and maintainable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent, but no explicit terms of service or incident response policies are visible. Overall, the site is trustworthy, well-maintained, and serves its community effectively.

W

Werbeagentur Praxmarer

praxmarer.net

56

Werbeagentur Praxmarer is a small, regionally focused advertising agency based in Mils bei Imst, Tirol, Austria. The company specializes in a comprehensive range of marketing services including website design, graphic design, SEO, print media, and professional photography. Their website reflects a professional and consistent brand image, targeting local businesses and organizations seeking marketing and advertising solutions. The agency emphasizes strategic consulting and personalized service to help clients differentiate themselves in competitive markets. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as jQuery and Swiper.js, and it is optimized for mobile devices with good SEO practices. Security-wise, the site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and detailed incident response information. The absence of WHOIS data for the domain reduces the overall trust score, though the website content and business information appear legitimate and professional. Overall, the site demonstrates a solid digital presence with room for improvement in security and transparency.

T

THURZO – FUGGER

tfze.sk

57

THURZO – FUGGER is a cultural and educational exposition located in Banská Bystrica, Slovakia, focusing on the mining history of the region, particularly from the era of the Thurzovsko-Fuggerovská company. The website offers detailed information about the exposition, including augmented and virtual reality experiences, guided tours, and historical insights. It targets tourists, schools, and history enthusiasts, providing a rich, interactive experience. The business is relatively new, founded in 2022, and operates as a small entity within the hospitality and education sectors. Technically, the website is built on WordPress with modern plugins and uses Google Analytics for visitor tracking. It is hosted on Websupport with DNSSEC enabled and uses HTTPS, indicating a secure infrastructure. However, the site lacks visible privacy and cookie policies, which is a compliance gap. Contact information is clearly provided, including phone, email, and a contact form. Overall, the website is professional, trustworthy, and content-rich, but could improve privacy compliance and security headers.

B

Brevo

newsletter2go.de

67

Brevo operates as a technology company specializing in email marketing and newsletter services, integrating the Newsletter2go brand to serve German-speaking markets. The website provides login access and account creation for users, targeting businesses and marketers seeking efficient email marketing solutions. The company positions itself as an established player in the SaaS email marketing space with a professional and consistent brand presence. Technically, the website is built on WordPress with modern JavaScript frameworks such as React and uses SEO best practices including structured data and canonical URLs. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enforced and secure login forms, but lacks some security headers and explicit privacy/cookie policies. WHOIS data is missing, which slightly reduces trust but the professional site and branding mitigate concerns. Overall, the site is safe, business-focused, and well-implemented with room for improvement in privacy compliance and security headers.

E

EuregioKultur e. V.

euregio-lit.eu

51

EuregioKultur e. V. is a small non-profit cultural association dedicated to fostering cross-border cultural and literary exchange within the Euregio Maas-Rhein region. The organization runs several literary projects and awards, targeting cultural institutions, translators, students, and literary enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content focused on its mission. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Facebook SDK for social integration. It employs HTTPS with a good SSL configuration and includes a GDPR-compliant cookie consent mechanism. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to EURid privacy policies, but the domain appears legitimate based on content and partner affiliations. Overall, the website presents a low-risk profile with good privacy compliance and a clear cultural mission. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security posture and user trust.

Bock auf Alsdorf is a community-driven initiative promoting the city of Alsdorf, Germany, as a vibrant leisure and cultural destination. The website showcases partnerships with local venues and organizations such as Stadthalle Alsdorf, Energeticon, and Cineplex Alsdorf, emphasizing family-friendly and cultural activities. The platform serves residents and visitors by providing information about leisure opportunities and local events. Technically, the site is built on WordPress with common plugins and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and well-structured but lacks comprehensive privacy and cookie policies, which impacts GDPR compliance. Security posture is adequate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

H

Hamburger Morgenpost

mopop.de

53

MOPOP.de is a well-established regional online portal dedicated to music and pop culture in Hamburg, operated under the Hamburger Morgenpost media brand. The site offers a comprehensive range of content including news, concert and festival information, artist interviews, reviews, and music charts, targeting music enthusiasts primarily in the Hamburg region. The business model is content-driven, supported by advertising and partnerships, positioning MOPOP.de as a key player in local cultural media.

F

FastSpring

fastspring.com

65

FastSpring is a well-established digital commerce platform specializing in SaaS and software companies, providing a comprehensive suite of services including global payments, subscription management, fraud prevention, and merchant of record capabilities. The company positions itself as a trusted global partner enabling software businesses to scale efficiently and compliantly. The website reflects a mature digital presence with professional design, clear navigation, and multi-language support, targeting software and SaaS businesses worldwide. Technically, the site is built on WordPress and hosted on AWS infrastructure, leveraging modern analytics and marketing tools such as Google Analytics, Tag Manager, Marketo, and Clearbit. Security is robust with HTTPS enforced, multiple security headers, and domain registration protections, although DNSSEC is not enabled. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms implemented via OneTrust. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response contact and lack of a security.txt file suggest areas for improvement in transparency and vulnerability management. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with relevant privacy regulations. Strategically, FastSpring should consider enabling DNSSEC, publishing a formal security policy, and establishing clear incident response channels to further enhance trust and security maturity. These steps will solidify its position as a secure and reliable ecommerce partner in the competitive SaaS market.

B

Beratungsstelle Frauen-Notruf Münster e.V.

frauennotruf-muenster.de

44

Beratungsstelle Frauen-Notruf Münster e.V. is a well-established non-profit organization founded in 1982, dedicated to providing counseling and support services to women and girls affected by sexualized violence. The organization operates primarily in Münster, Germany, offering specialized assistance, public awareness campaigns, and online counseling. Their website reflects a professional and trustworthy presence with clear contact information and a strong focus on accessibility and user experience. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and Bootstrap, hosted on servers associated with agenturserver. The site is mobile-optimized, accessible, and SEO-friendly. Security practices include HTTPS enforcement and cookie consent mechanisms, although some HTTP security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with GDPR-aligned cookie consent and a comprehensive privacy policy. However, no explicit security policy or incident response information is published, which could be enhanced. Overall, the website scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable and professional resource for its target audience.

IESA, operating under the parent company Aareon, is a leading Spanish technology firm specializing in software solutions for property management and administration of communities. With over 38 years of experience, the company offers a comprehensive platform, Gesfincas, alongside a suite of integrated solutions aimed at digitalizing and optimizing the daily operations of property administrators and communities. Their market position is strong within Spain and Europe, supported by continuous innovation and a broad product portfolio. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, complemented by advanced analytics tools such as PostHog and Hotjar. The site is well-optimized for mobile devices, features clear navigation, and maintains good SEO practices. Security measures include HTTPS enforcement, secure form handling, and cookie consent mechanisms, although some security headers could be enhanced. From a security perspective, the site demonstrates a mature posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear policies and GDPR adherence. The presence of a whistleblower channel and a documented security policy further reinforce their commitment to security and compliance. Overall, the risk profile is low with a high degree of trustworthiness and professionalism. Strategic recommendations include enhancing security headers, implementing a security.txt file for vulnerability disclosures, and increasing visibility of incident response contacts to further strengthen security culture and compliance.

S

Stadtmarketing Herne

cranger-kirmes.de

45

Cranger Kirmes is a major annual folk festival in North Rhine-Westphalia, Germany, organized by Stadtmarketing Herne. It is the largest family funfair in Germany, attracting millions of visitors with around 50 rides and various entertainment options. The website serves as an information portal for visitors, providing event details, schedules, ticketing options, and contact information. The site is well-branded, professionally designed, and targets families and general visitors interested in the event. Technically, the website is built on WordPress with WPBakery Page Builder and uses modern web technologies including lazy loading images and asynchronous scripts. It integrates analytics via Pirsch and manages advertisements with AdRotate. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Hosting details are not explicit, but the domain uses stable DNS providers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While no explicit security policies or incident response contacts are published, no vulnerabilities or exposed sensitive data were detected. Security headers could be enhanced for better protection. Overall, the site maintains a good security posture suitable for its business model. The domain WHOIS data aligns well with the website content, showing consistent registration and no privacy protection, which is appropriate for a public event. The site maintains transparency with clear contact details and social media presence, enhancing trustworthiness. No critical issues or blocking mechanisms were detected, allowing full content access and analysis.

S

Slovenská asociácia logopédov

sal.sk

54

Slovenská asociácia logopédov is a Slovak non-profit professional association dedicated to specialists dealing with communication disorders. The organization provides educational courses, publishes scientific and professional literature, and supports the professional community of speech therapists in Slovakia. Their market position is that of a national association with a clear focus on healthcare and education sectors. The website serves as an information hub and e-commerce platform for specialized publications. Technically, the website uses a custom CMS with modern JavaScript libraries including jQuery and Google Analytics for tracking. The site is mobile optimized and has good SEO practices, although some accessibility features are basic. Performance is moderate, with external dependencies on Google Fonts and CDN-hosted libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit cookie consent mechanisms. No vulnerability disclosures or incident response contacts are published, indicating room for improvement in security transparency and compliance. The WHOIS data is consistent with the business claims, showing a legitimate and appropriately aged domain. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and user trust.

W

wer denkt was GmbH

xn--mngelmelder-l8a.de

63

Mängelmelder.de is a German nationwide platform enabling citizens to report public infrastructure issues directly to their local municipalities. The platform facilitates transparent tracking of reported issues via web and mobile apps, promoting civic engagement and municipal responsiveness. The service operates on a voluntary basis by municipalities and is supported by the company wer denkt was GmbH. The website is professionally designed, mobile-optimized, and integrates interactive mapping and multimedia content to enhance user experience. Technically, the site leverages modern web technologies including Vue.js, OpenLayers for mapping, jQuery, and FontAwesome icons. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. Analytics are handled through Matomo with a cookie consent mechanism respecting user privacy. The site demonstrates good SEO and accessibility practices, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent for tracking scripts. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent and transparent, with no privacy protection or suspicious patterns, indicating a legitimate and trustworthy domain. Overall, Mängelmelder.de presents a solid digital presence with a clear civic mission, good technical implementation, and a moderate to strong security posture. Enhancements in security policy transparency and accessibility could further strengthen trust and compliance.

C

conversiontracking.io

conversiontracking.io

66

conversiontracking.io is a small digital agency specializing in conversion tracking services, including Google Tag Manager, Google Analytics, and Facebook Pixel integration. The website positions itself as a specialist helping marketers and businesses optimize their ad spend and improve conversion rates by implementing accurate tracking solutions. The business is recent, founded in 2024, and operates primarily online with a focus on data-driven marketing improvements. Technically, the site is built on Squarespace, uses modern analytics and tracking technologies, and is hosted via a reputable registrar with privacy protection enabled. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies. The site is accessible without WAF or blocking mechanisms, and content is professional and safe for general audiences.

K

Kino Lucerna

kinolucerna.cz

59

Kino Lucerna is a historic cinema located in Prague, offering a rich program of film screenings, festivals, and premieres. The website serves as a digital platform for showcasing current and upcoming films, facilitating ticket sales, and engaging with cinema enthusiasts. The business operates primarily in the hospitality sector, focusing on cultural entertainment. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager and YouTube APIs for enhanced user experience and marketing. The site is hosted under a registrar consistent with the domain name and shows no signs of suspicious activity. Security posture is solid with HTTPS enforced and cookie consent implemented, although security headers and explicit privacy policies are absent. Overall, the website is professional, user-friendly, and trustworthy, but could improve compliance and transparency by publishing privacy and terms of service documents and providing clear contact information for security and general inquiries.

C

Conversion Tracking Specialist · Google Tag Manager · Analytics

codeandtonic.com

66

Conversiontracking.io is a small, specialized digital agency founded in 2024, focusing on improving conversion tracking and analytics for marketers using Google and Meta advertising platforms. The website is built on Squarespace and integrates modern tracking technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel to deliver measurable improvements in ad performance. While the technical infrastructure is solid and the site is professionally designed with good user experience, there is a notable absence of visible privacy and cookie policies, which impacts compliance and privacy posture. Security practices are generally good with HTTPS and domain transfer protections, but DNSSEC and HSTS are not enabled, representing areas for improvement. Overall, the business appears legitimate and trustworthy, with a clear market niche and professional branding.

A

ALI 21, s.r.o.

jirikovovideni.cz

41

Jiříkovo vidění is a Czech charitable beer project established in 2015, aimed at supporting people with serious long-term illnesses, especially the visually impaired and ALS patients. The project is a collaboration of six minipivovars and a general partner, the security agency ALI 21, s.r.o. It raises funds through the sale of special beer editions and public donations, with transparent accounting and community engagement. The website provides detailed project history, partner information, and event schedules, targeting charity supporters and beer enthusiasts in the Czech Republic and Austria. Technically, the site uses modern web technologies including jQuery and Google Tag Manager, hosted likely by Wedos, with moderate performance and good mobile optimization. Security posture is adequate but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the project.

VENI VIDI VICI is a charitable project based in the Czech Republic focused on supporting people with serious long-term illnesses, specifically ALS (amyotrophic lateral sclerosis) in its current phase. The project is a collaboration of several microbreweries and a security agency (ALI 21, s.r.o.) as the general partner. It raises funds through the sale of special beer editions and public donations, targeting beer enthusiasts and charity supporters. The project is relatively new, with the domain registered in late 2024, aligning with the project's launch timeline. Technically, the website uses jQuery and Google Analytics, hosted on WEDOS servers, and shows moderate performance and good mobile optimization. However, it lacks advanced security headers and published privacy or cookie policies, which are compliance gaps. The site is well-branded and professionally designed with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google Analytics but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Overall, the site demonstrates moderate security maturity but requires improvements in privacy compliance and security best practices. The overall risk is moderate, with recommendations to implement privacy and cookie policies, add security headers, and provide incident response information to enhance trust and compliance.

B

Bcreative s.r.o.

bcreative.cz

51

Bcreative s.r.o. is a Czech-based strategic and creative marketing agency specializing in web development, marketing campaigns, branding, and strategic consulting. The company positions itself as a long-term partner focused on delivering measurable marketing results efficiently and without compromise. Their target audience includes businesses seeking comprehensive marketing and digital transformation services. The website demonstrates a professional and consistent brand image with clear navigation and rich content including client testimonials and case studies. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, Slick Carousel, and TinyMCE, alongside Google Tag Manager for analytics. The site is mobile-optimized and uses HTTPS with good SSL configuration, although it lacks some security headers that could enhance protection. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security posture. The WHOIS data is missing, which reduces domain trustworthiness and should be investigated further. Overall, the website is professional, trustworthy, and well-structured, but improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

S

ShakeArt s.r.o.

shakespearevlitomysli.cz

56

ShakeArt s.r.o. operates the Shakespeare v Litomyšli festival, a cultural event focused on Shakespearean theatre performances held in the UNESCO heritage site of Litomyšl castle. The website presents a professional, content-rich platform promoting the 2025 festival edition with detailed program, ticketing, partner information, and contact details. The technical infrastructure leverages modern web technologies including Bootstrap and jQuery, hosted by WEDOS, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and secure form handling, though improvements in security headers and privacy consent mechanisms are recommended. WHOIS data confirms domain legitimacy and consistency with the business purpose. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.