Security Directory

L

Livesport s.r.o.

flashscorethai.com

58

Flashscorethai.com is a localized Thai-language sports live score website operated under the brand Livesport s.r.o., a recognized global provider of live sports results and statistics. The website offers extensive live football scores, match results, league standings, and sports news primarily targeting football fans in Thailand. The site is well-branded, professionally designed, and provides a rich user experience with mobile optimization and clear navigation. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. WHOIS data is unavailable, possibly due to privacy protection, which slightly impacts trust but the strong brand association with Livesport s.r.o. supports legitimacy. Overall, the site is safe, professional, and reliable for its target audience.

L

Livesport s.r.o.

flashscoreusa.com

57

FlashscoreUSA.com is a sports media website operated by Livesport s.r.o., specializing in providing live soccer scores, results, and sports news from over 1000 leagues worldwide. The site targets sports fans and bettors, offering real-time updates and bookmaker odds integration. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, cookie consent mechanisms, and extensive SEO optimization. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and incident response information are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. Overall, the site is professional, trustworthy, and well-positioned in the sports media market.

L

Livesport s.r.o.

flashscore.ph

66

Flashscore.ph is a large-scale live sports score platform operated by Livesport s.r.o., focusing primarily on football scores and results for the Filipino market. The website provides extensive coverage of global football leagues and tournaments, serving sports enthusiasts with real-time updates. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and cookie consent mechanisms to comply with privacy regulations. The site is well-optimized for performance and mobile usage, offering a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks publicly available privacy policies, terms of service, and incident response contacts, which are areas for improvement. Overall, the domain registration and WHOIS data align well with the business, indicating a legitimate and trustworthy operation.

L

Livesport s.r.o.

flashscore.co.za

60

Flashscore.co.za is a professional live sports score and news website operated by Livesport s.r.o., a Czech-based media company. The site specializes in providing real-time soccer scores, results, and news from over 1000 leagues worldwide, targeting soccer fans primarily in South Africa. The business model relies heavily on advertising and affiliate marketing partnerships with bookmakers such as Betway and Easybet. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, responsive design, and integration of cookie consent mechanisms to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing security policies and incident response contacts. Overall, the site is trustworthy and well-positioned in the sports media sector.

L

Livesport s.r.o.

flashscore.in

61

Flashscore.in is a large-scale sports live score and statistics platform operated by Livesport s.r.o., targeting primarily Indian sports fans. The website offers extensive coverage of over 5000 competitions across more than 30 sports, including cricket, football, tennis, badminton, and kabaddi. It integrates bookmaker affiliate partnerships to monetize its traffic. Technically, the site uses a modern JavaScript framework, is mobile-optimized, and implements cookie consent mechanisms. Security posture is strong with HTTPS and security headers, though explicit privacy and terms policies are not found in the provided content. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is professional, trustworthy, and well-positioned in the sports media sector.

L

Livesport s.r.o.

flashscore.mobi

46

Flashscore.mobi is a mobile-optimized live sports score platform primarily focused on football but also covering multiple other sports. Operated by Livesport s.r.o., the website provides real-time sports results, standings, and betting affiliate links, targeting sports fans who prefer mobile access. The business model relies on advertising and affiliate marketing, with a well-established market presence since 2006. Technically, the site uses modern JavaScript, Google Analytics, and Adsense for tracking and monetization, with good mobile responsiveness and SEO optimization. However, the absence of privacy and cookie policies, contact information, and security headers indicates gaps in privacy compliance and security posture. The WHOIS data is unavailable due to privacy protection, which is common for media websites but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures.

O

OZ po Škole

corobim.sk

55

The website 'čo Robím' operated by OZ po Škole is a Slovak non-profit platform dedicated to career orientation and professional development through video stories and employer presentations. It targets students and job seekers in Slovakia, providing valuable insights into various professions to aid career decisions. The platform leverages social media and video content to engage its audience and build trust. Technically, the site uses a custom-built infrastructure with common web technologies including jQuery, Modernizr, and jwplayer, but lacks a modern CMS or advanced frameworks. While the site is accessible and functional with moderate performance and basic mobile optimization, it shows gaps in privacy compliance and security best practices, such as missing privacy and cookie policies and outdated JavaScript libraries. Security posture is moderate with no visible security headers and no explicit incident response contacts. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance measures.

D

Drive Magazin

drivemagazine.sk

46

DriveMagazine.sk is a Slovak online magazine focused on travel, leisure, gastronomy, and automotive topics. It targets a general audience interested in lifestyle and travel within Slovakia and abroad. The website is relatively new, founded in 2021, and operates as a small media publisher with a consistent brand presence and active social media channels. Technically, the site uses modern web technologies including UIkit framework and ProcessWire CMS, hosted with Azure DNS services. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and domain transfer protection, though it lacks some security headers and explicit cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no visible cookie banner. Overall, the site is trustworthy and professionally maintained, suitable for its media publishing business model.

The website trupoint.com is currently inaccessible due to a Cloudflare security challenge page that requires human verification before access. This prevents any direct analysis of the website's content, business information, or security policies. The domain is registered with GoDaddy.com, LLC since 1997, indicating a long-standing registration, but no registrant details or business information are publicly available. The site uses Cloudflare's Turnstile captcha for bot mitigation, indicating a focus on security at the perimeter level. However, the lack of DNSSEC and absence of visible content or policies limits the ability to assess the site's compliance and trustworthiness. Overall, the site appears to be protected by a strong WAF but lacks publicly accessible information to evaluate its business or security posture comprehensively.

S

SEAK

seakenergetics.com

60

SEAK Energetics operates as a technology provider specializing in power line-based street lighting control systems and electric vehicle charging solutions. Their patented technology targets commercial, industrial, and municipal clients aiming for energy savings and smart city integration. The website demonstrates a professional digital presence with case studies, customer references, and multimedia content highlighting their market position and innovative services. Technically, the site employs modern web technologies and integrates analytics and user engagement tools, though some security best practices like security headers and explicit privacy policies are missing. The absence of WHOIS data raises concerns about domain registration legitimacy, but the overall business presentation suggests a credible entity. Strategic improvements in privacy compliance and security posture would enhance trust and regulatory adherence.

E

select-language

eucerin-me.com

66

The website www.eucerin-me.com serves as a language selection landing page for the Eucerin brand targeting the Middle East region. It links to multiple regional Eucerin websites in various languages, indicating a global brand presence with localized content. The site uses modern tracking technologies such as Google Tag Manager and Hotjar, reflecting a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is limited due to missing security headers and unknown SSL configuration. Overall, the site appears functional and professionally designed but requires improvements in security, privacy compliance, and transparency to enhance trustworthiness.

N

Site en construction

naos-digital.com

31

The website naos-digital.com currently serves as a placeholder 'Site en construction' page hosted by OVHcloud. It lacks any substantive business content, contact information, or policies, indicating that the site is not yet operational or publicly launched. The domain was registered in late 2021 and is hosted on OVH infrastructure, showing consistency in technical setup but minimal digital maturity at this stage. The site uses basic HTML and CSS without any advanced frameworks or CMS detected. Security posture is minimal with no DNSSEC, security headers, or privacy policies implemented. There are no analytics or tracking mechanisms present, and no contact or business information is provided. Overall, the site is safe but offers very limited insight into the business or its operations.

C

CHALLOUF International

challouf.de

43

CHALLOUF International operates as a German-based e-commerce platform specializing in wholesale and retail sales of shisha products, including pipes, tobacco, accessories, and related items. The website targets primarily business customers such as retailers and shisha enthusiasts looking for bulk purchases. The company has been active since 2014, indicating a stable market presence in the niche shisha retail sector. The website is well-structured with clear navigation and product categorization, supporting multiple languages via Google Translate to cater to a broader audience. From a technical perspective, the website leverages a Shopware-based CMS platform, integrates Google Analytics with IP anonymization for user tracking, and uses Doofinder for search functionality. The site is hosted on INWX nameservers, a reputable German hosting provider. The website is mobile-optimized and includes cookie consent mechanisms, aligning with GDPR requirements. However, some modern security headers are missing, and no explicit security policy or incident response information is provided. Security posture is adequate with HTTPS enforced and privacy policies in place, but improvements are recommended in implementing security headers and providing incident response contacts. No critical vulnerabilities or malware indicators were detected. The site collects user data primarily through search forms and newsletter subscriptions, with moderate user tracking via analytics. Overall, the website presents a professional and trustworthy e-commerce platform for shisha products with a solid business foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to improve compliance and trustworthiness further.

H

Hauzi.sk

ubytovanienaslovensku.eu

56

Hauzi.sk is a leading online accommodation search and booking platform primarily serving the Slovak market with over 5500 verified accommodations. The website offers a comprehensive search experience with filters for location, dates, capacity, and amenities, targeting travelers and tourists seeking lodging options in Slovakia and neighboring countries. The platform emphasizes verified listings and best price guarantees, positioning itself as a trusted service in the hospitality sector. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates analytics and marketing tools such as Microsoft Clarity and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical aspects like security headers and explicit SSL configuration details are not evident from the provided data. From a security perspective, the site implements a detailed cookie consent mechanism aligned with GDPR requirements, but lacks visible privacy policy and terms of service pages, as well as incident response contacts or vulnerability disclosure policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a moderate security posture. Overall, Hauzi.sk presents a professional and functional online platform with moderate risk. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance trust and compliance.

P

Pictrs.com

allefotografen.de

61

alleFotografen is a German-language online platform operated by Pictrs.com that enables users to search, find, and contact photographers across various categories and locations in Germany, Austria, and Switzerland. The platform offers photographers the ability to create profiles and showcase portfolios to attract clients. The website is well-structured, professionally designed, and optimized for mobile devices, providing a good user experience with clear navigation and relevant content. Technically, the site uses modern web technologies including Turbo (Hotwire), Select2, FontAwesome, and integrates Google Maps API for location-based searches. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit cookie consent mechanisms are missing. No direct contact emails or phone numbers are published; communication is primarily via web forms. The site complies with GDPR through a privacy policy page but lacks a cookie consent banner. Overall, the platform is a niche media service with a good reputation and consistent branding, serving photographers and clients in the German-speaking market.

S

ShadowLight Fotografie

shadowlight-shop.ch

53

ShadowLight Fotografie operates a professional photography e-commerce platform based in Switzerland, offering password-protected galleries and photo shoots primarily targeting individual clients and families. The website is built on the Pictrs.com platform, utilizing modern web technologies including HTTPS, CSRF protection, and JavaScript libraries for user experience enhancements. While the site demonstrates good design quality and user experience, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS and password protection, but could be improved with additional security headers and clearer incident response information. Overall, the business appears legitimate and consistent with its domain registration data, but privacy compliance and contact transparency need enhancement.

O

OnlinePro

onlinepro.net

53

OnlinePro is a small German web agency founded in 2018, specializing in web design, online marketing, and web development services targeted primarily at small and medium-sized businesses in the Munich, Augsburg, and Landsberg regions. The website presents a professional and comprehensive overview of their services, emphasizing responsive design, SEO, and custom programming. Technically, the site uses modern web standards including service workers for progressive web app capabilities and integrates Google Analytics and Tag Manager for marketing insights. Security posture is good with HTTPS enabled and cookie consent implemented, though DNSSEC is not enabled and security headers are not explicitly detected. The WHOIS data aligns well with the business claims, showing a consistent domain registration without privacy protection, indicating transparency. Overall, the site is well-designed, user-friendly, and trustworthy, with clear contact channels and social media presence.

R

Renting Coches | Particulares, Empresas y Autónomos

rentingcoches.com

64

RentingCoches.com is a Spanish-language website offering car rental services targeted at individuals, companies, and freelancers primarily in Spain. The business appears to operate as an online platform facilitating car rentals, with a focus on a broad audience including private and corporate clients. The website uses modern web technologies such as Bootstrap for responsive design, ensuring good mobile optimization and basic accessibility. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is minimal with no detected security headers or incident response information, and DNSSEC is not enabled, representing areas for improvement. The domain is registered with a reputable Spanish hosting provider and has been active since 2016, supporting its legitimacy. Overall, the website presents a basic but functional online presence with room for enhancements in security, privacy compliance, and business transparency.

A

Asociácia volejbalových rozhodcov

avr-sr.sk

44

The website represents the official online presence of the Asociácia volejbalových rozhodcov (AVR), a voluntary sports association dedicated to volleyball referees in Slovakia. It serves as a hub for referees to access information about registrations, training, delegations, and community discussions. The site maintains a national position within the Slovak volleyball sports ecosystem and collaborates with recognized volleyball organizations such as SVF, MEVZA, CEV, and FIVB. The business model focuses on supporting and organizing referees rather than commercial activities. Technically, the website uses a traditional web stack with HTML, CSS, JavaScript, and jQuery libraries. It integrates Facebook SDK for social media presence and uses external partner logos to reinforce credibility. The site shows moderate performance and basic mobile optimization but lacks advanced CMS or modern frameworks. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced protections like anti-CSRF tokens. There is no privacy or cookie policy, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. The login form collects user credentials but without visible enhanced security measures. Overall, the security posture is moderate but could be improved significantly. The overall risk is moderate with no critical vulnerabilities detected in the content. Strategic improvements in privacy compliance, security headers, and incident response readiness are recommended to enhance trust and regulatory adherence.

L

Livesport s.r.o.

flashscore.com

62

Flashscore.com is a globally recognized live sports score platform operated by Livesport s.r.o., providing real-time football scores, results, and sports news from over 1000 leagues worldwide. The website targets football fans and sports enthusiasts, offering extensive coverage of major football leagues and tournaments. It monetizes primarily through advertising and affiliate partnerships with numerous bookmakers. Technically, the site employs a modern JavaScript-based framework with strong mobile optimization, fast performance, and good SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit privacy policies and incident response contacts are missing. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall brand presence and external verifications support trustworthiness. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security.txt for vulnerability disclosures, and providing clear contact information for security incidents.

A

ATEX Sportswear SK, s.r.o

atexsport.sk

46

ATEX Sportswear SK, s.r.o is a well-established Slovak company specializing in the manufacturing and retail of high-quality sportswear for professional and leisure athletes. With over 25 years of experience, the company produces custom sportswear including jerseys, vests, trousers, and suits, primarily serving customers in Slovakia and the Czech Republic, while expanding into other European markets. Their business model combines bespoke manufacturing with e-commerce sales through multiple regional online shops. The website reflects a professional brand image with consistent messaging and strong trust indicators such as long-term athlete partnerships and product warranties. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers and formal security policies are absent. The security posture is solid but could be improved by adding HTTP security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy pages. Overall, the site is trustworthy, professionally maintained, and suitable for its target audience. Strategically, ATEX Sportswear should focus on strengthening its security transparency and incident response readiness to further build customer trust and comply with evolving regulations.

A

ALPINE PRO

alpinepro.sk

65

ALPINE PRO is an established Slovak e-commerce retailer specializing in outdoor clothing and accessories, operating since 2004. The website targets outdoor enthusiasts and general consumers within Slovakia, offering a range of products through an online platform. The business appears to be medium-sized with consistent branding and a professional online presence. Technically, the website employs modern web technologies including JavaScript modules, Google Fonts, and integrates third-party services such as Cookiebot for cookie consent, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious activities were detected. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

A

Arval Slovakia

jazdisarvalom.sk

67

Arval Slovakia operates as a leader in the operational car leasing market in Slovakia, targeting both corporate clients and private individuals. The company offers ready-to-drive vehicles with a streamlined leasing process, positioning itself as a market leader with a focus on customer convenience and service quality. The website reflects a professional business model centered on transportation leasing services, with clear branding and consistent messaging aligned with the parent company Arval. Technically, the website employs modern web technologies including Google Tag Manager and Cookiebot for consent management, hosted on a Slovak hosting provider with DNSSEC enabled, ensuring a secure and compliant infrastructure. Security posture is strong with HTTPS enforced and CSRF protections in place, although explicit privacy and terms of service documents are not found, which could be improved for compliance and transparency. Overall, the website is safe, well-structured, and trustworthy, with extensive user tracking for marketing and analytics purposes. Strategic recommendations include publishing comprehensive privacy and terms policies, adding clear contact information, and implementing a security.txt file to enhance vulnerability disclosure and incident response readiness.

GiacoTour is a Slovak promotional website encouraging users to register and purchase Giacomini brand products to participate in contests and win prizes. The platform targets consumers interested in Giacomini products and aims to build customer engagement through promotional campaigns. The website is relatively new, consistent with its domain registration in 2021, and hosted on local Slovak infrastructure. Technically, the site uses modern CSS frameworks like Tailwind and includes basic security measures such as CSRF tokens in forms. However, it lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No contact information or social media presence is provided, limiting transparency and business credibility. The site is accessible without WAF or blocking mechanisms, and no adult or explicit content is present, making it safe for general audiences.

T

twd SK, s.r.o.

twd.sk

59

twd SK, s.r.o. is a Slovakian company specializing in retail and manufacturing of furniture and construction hardware, large-format materials, and related services such as production of parts, terraces, and facades. Established since 1993, the company holds a strong regional market position with partnerships with renowned brands like Blum, Voga, Festool, Bosch, and Dewalt. Their website reflects a professional and consistent brand image targeting both domestic and professional craftsmen. The business model focuses on providing quality products and services through physical stores, an e-shop, and specialized services.

A

AutoScout24

autoscout24.se

64

AutoScout24 is a leading European online marketplace specializing in new and used cars. The website autoscout24.se serves the Swedish market, providing a comprehensive platform for car buyers and sellers with extensive search and filtering capabilities. The site is professionally designed, mobile-optimized, and offers a seamless user experience. Technically, it leverages modern web technologies including React, service workers for PWA features, and a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement, security headers, and reCaptcha Enterprise integration, although explicit security policies and incident response details are not publicly disclosed. Overall, the site presents a low-risk profile with high trustworthiness and business credibility.

A

AutoScout24

autoscout24.fr

65

AutoScout24 is a leading European online marketplace specializing in the sale and purchase of new and used vehicles. The platform offers a comprehensive range of automotive services including vehicle listings, price evaluations, financing options, and insurance advisory, targeting both private consumers and professional dealers across multiple European countries. The website demonstrates a high level of digital maturity with modern web technologies such as React, service workers, and integration of major analytics and advertising platforms. Privacy compliance is well addressed with GDPR-aligned policies and consent management mechanisms. Security posture is strong with HTTPS enforcement, security headers, and use of reCaptcha Enterprise, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site presents a professional, trustworthy, and user-friendly experience with extensive automotive content and clear navigation.

A

AutoScout24

autoscout24.be

55

AutoScout24 Belgium operates as a prominent online marketplace for buying and selling new and used vehicles. The platform targets consumers and businesses within Belgium, offering vehicle listings and search functionalities. The website is professionally designed with a consistent brand presence and provides legal and privacy information in Dutch and French, reflecting the bilingual nature of the region. The business model centers on facilitating vehicle transactions, positioning AutoScout24 as a leading player in the Belgian transportation sector. Technically, the website employs modern web standards including HTML5, CSS, and JavaScript, with responsive design elements ensuring good mobile optimization. However, no advanced frameworks or CMS platforms are explicitly detected in the provided content. Performance is moderate, and SEO and accessibility features are basic but adequate for the site's purpose. From a security perspective, the site uses HTTPS (implied by canonical URLs) but lacks visible security headers in the provided data. The WHOIS information is restricted by DNS Belgium policies, limiting transparency but common for commercial domains. No direct contact or incident response information is found, and cookie consent mechanisms are absent, indicating areas for compliance improvement. Overall, the website presents a trustworthy and professional front for its business, though enhancements in security headers, privacy compliance mechanisms, and public contact information would strengthen its security posture and regulatory adherence.

S

Shisha-Arabica

shisha-arabica.de

45

Shisha-Arabica is a German-based e-commerce retailer specializing in shisha products, including shishas, tobacco, charcoal, hoses, heads, and accessories. The website targets mature customers interested in shisha smoking, primarily in Germany and Austria. The business operates a well-structured online shop with clear navigation and a consistent brand presence. The company appears established since 2017 with a medium-sized market presence in the niche retail sector. Technically, the website uses modern web technologies such as jQuery, Google Fonts, and Doofinder for search functionality, hosted on INWX nameservers. The site is mobile-optimized and provides a good user experience with clear legal and privacy documentation in German. Security-wise, HTTPS is enforced, but some security headers are missing, and no explicit security policy or incident response contacts are published. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and compliant with relevant regulations for its industry.

Vizua s. r. o. is a Slovak boutique creative marketing agency established in 2010, specializing in branding, performance marketing, PPC advertising, social media, web development, graphic design, copywriting, and video production. The company positions itself as a quality-focused agency with a small dedicated team and holds a Google Partner certification, indicating recognized expertise in Google advertising services. Their client portfolio includes multiple Slovak businesses, demonstrating active market engagement and a niche boutique market position. Technically, the website is built on modern web technologies including Craft CMS, uses Google Analytics for tracking, and employs smooth scrolling and image loading JavaScript libraries. Hosting is provided by Websupport, a Slovak hosting provider, with DNSSEC enabled and HTTPS enforced, reflecting a solid technical foundation. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks explicit security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data is consistent with the business claims, showing a well-aged domain registered since 2010 with no privacy protection, supporting legitimacy. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. Strategic improvements in privacy compliance and security headers would further strengthen the security posture and regulatory adherence.

Z

Zeppelin SK

zeppelin.sk

61

Zeppelin SK is a well-established Slovak company specializing in the sale and rental of construction and agricultural machinery, prominently featuring Caterpillar equipment. Founded in 2004, the company operates a professional website with comprehensive content, targeting construction firms, agricultural businesses, and machinery rental clients in Slovakia. The site reflects a strong market position with consistent branding and multiple service offerings including spare parts and energy systems. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, and live chat integrations, ensuring a functional and user-friendly experience with good mobile optimization. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and a detailed cookie consent mechanism, though some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

M

McDonald's Slovakia spol. s.r.o.

mcdonalds.sk

70

McDonald's Slovakia spol. s.r.o. operates the official McDonald's website for Slovakia, providing information on menu offerings, promotions, and services such as McDelivery and a mobile app with coupons. The website targets general consumers in Slovakia and maintains a strong brand presence consistent with the global McDonald's identity. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a large retail and hospitality business.

H

podkings.de

hello-vape.de

48

The website www3.podkings.de is a parked domain landing page primarily monetized through advertising networks such as Google Adsense and DoubleClick. It lacks substantive business content, contact information, or clear branding, indicating it is not an active commercial site. The technical infrastructure relies on standard HTML5 and JavaScript with third-party ad and tracking scripts loaded from multiple external domains. The site is accessible without WAF or security challenges but does not implement HTTPS enforcement or security headers, which weakens its security posture. Privacy compliance is minimal, with only a basic privacy policy linked via a popup and no cookie consent mechanism. Overall, the site presents low business credibility and trustworthiness, with a high degree of user tracking and advertising but no clear business entity or services.

Dampfshop4u is a German-based online retailer specializing in vaping products including e-cigarettes, e-liquids, aromas, and accessories. The website presents a well-structured e-commerce platform with detailed product categories and a focus on user experience for mature audiences interested in vaping. The business appears to be established since 2014, targeting the German market with a niche product offering. Technically, the site uses modern web technologies and integrates cookie consent management via Usercentrics, indicating compliance with GDPR requirements. Hosting is provided by Timme Hosting, a German provider, which aligns with the business location. Security posture is adequate with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a mature audience with tobacco-related products.

The website www2.vitastik.de is a parked domain primarily used for domain resale and advertising via Sedo's domain parking service. It does not represent an active business or service provider. The site content is minimal, consisting mainly of domain sale notices and advertising placeholders. The technical infrastructure relies on Sedo's scripts and Google Ads for monetization. There is no evidence of a dedicated CMS or business platform. Security posture is weak, with no HTTPS detected and no security headers or policies present. Privacy compliance is minimal, with only a basic privacy policy hosted externally and a simple cookie consent mechanism. Overall, the site lacks business credibility and trust indicators, reflecting its status as a parked domain rather than an operational business website.

H

HLMH Vertrieb UG

ismoker.eu

72

iSmoker.eu is a German-based e-commerce retailer specializing in e-cigarettes, e-liquids, and vaping accessories. Established in 2011, the company has built a solid market position with over 100,000 customers and is recognized for quality products and customer support. The website offers a comprehensive product catalog, detailed business information, and multiple trust signals including Trusted Shops certification and clear contact details. The target audience is adult smokers and vapers primarily in Germany and Europe. Technically, the site is built on Prestashop CMS, uses modern JavaScript libraries, and integrates Google Analytics and reCAPTCHA for security and analytics. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is good with HTTPS enforced and use of CAPTCHA on forms, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the site is professional, trustworthy, and compliant with relevant regulations.

V

VAPE GmbH

hisvape.net

36

hisVape is a small e-commerce retailer specializing in electronic cigarettes, e-liquids, aromas, and self-mixer supplies primarily targeting German-speaking adult consumers in Austria and surrounding regions. The website is built on the Shopware CMS platform and employs modern web technologies including Google reCAPTCHA for form security and an age verification modal to comply with youth protection laws. The business has been established since 2011, consistent with the domain registration data. The site currently displays a message indicating the shop is permanently closed but remains accessible for existing customers to manage orders. Technical infrastructure is moderate with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and CAPTCHA protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent branding, customer review pages, and a ticket-based contact form, though no direct phone or email contacts are published. Overall, the site is moderately trustworthy but could improve in security and privacy transparency.

D

Damfastore

damfastore.de

37

Damfastore is a German-based e-commerce retailer specializing in e-cigarettes, liquids, aromas, and related accessories. The website targets both private customers and business clients, offering a broad product range with a focus on quality and fast delivery. The company positions itself as a specialist retailer with physical stores and an online presence, supported by ISO 9001 certification indicating adherence to quality management standards. Technically, the website employs modern web technologies including JavaScript, CSS, and trusted third-party widgets such as Trusted Shops and Doofinder for enhanced user experience and trust. The site is mobile-optimized and uses HTTPS to secure communications. However, there is a lack of publicly accessible privacy policy, terms of service, and explicit contact information, which impacts privacy compliance and user trust. Security posture is moderate with good SSL configuration but missing security headers and incident response contacts. Overall, the site is functional and professional but could improve transparency and compliance documentation.

Z

ZAZO

zazo.de

56

ZAZO is a German-based e-commerce retailer specializing in vaping products including e-cigarettes, e-liquids, aromas, and accessories. Established since 2011, it positions itself as a trusted vape shop with a broad product range and reliable shipping services. The website is professionally designed, mobile-optimized, and provides a secure login mechanism with CSRF protection. However, explicit privacy and terms of service policies are not found in the provided content, which is a compliance gap. The cookie consent mechanism is implemented, supporting GDPR compliance to some extent. Security posture is good with HTTPS and secure forms, but incident response and vulnerability disclosure policies are absent. Overall, the site is legitimate, well-branded, and targets mature audiences interested in vaping products.

A

Automobile Tierhold GmbH

kia-tierhold-augsburg.de

63

Automobile Tierhold GmbH operates as an authorized Kia automobile dealership based in Augsburg, Germany. The company offers a wide range of new and used Kia vehicles, including electric and hybrid models, and provides services such as test drive bookings, vehicle configurators, leasing options, and business vehicle solutions. The website reflects a professional local dealership with consistent Kia branding and a focus on customer engagement through online tools and offers. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern JavaScript libraries like jQuery and Adobe DTM for analytics and tag management. It employs Google Tag Manager and OneTrust for cookie consent management, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security or incident response policies, which are areas for improvement. The WHOIS data is minimal but does not raise immediate concerns, though more transparency would enhance trust. Overall, the website is well-structured, user-friendly, and compliant with basic privacy requirements, serving its target audience effectively.

D

DS MACHINES s.r.o.

kochpro.sk

68

KochPro, operated by DS MACHINES s.r.o., is a Slovak-based company specializing in professional gastronomy equipment including cooking kettles, frying pans, and kitchen robots. The company positions itself as a reliable partner for professional kitchens in Slovakia and the Czech Republic, leveraging a partnership with the established manufacturer Alba Horovice. Their business model focuses on B2B sales, installation, and servicing of gastro equipment, supported by express repair services and extended warranties. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization. Technically, the website uses modern web technologies including Laravel Livewire, service workers, and integrates Google Tag Manager and analytics tools. The site is served over HTTPS with CSRF protections and a comprehensive cookie consent mechanism, indicating a good level of digital maturity and privacy compliance. Performance is moderate with room for optimization, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and provides granular cookie consent options. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively. Strategic improvements in security headers and incident response transparency would further enhance its posture.

L

Ladislav Pavlovič

ladislavpavlovic.sk

52

The website ladislavpavlovic.sk is a dedicated informational and commemorative site focused on the life and career of Ladislav Pavlovič, a Slovak football legend. It serves a niche audience of football fans and sports historians primarily in Slovakia, offering biographical content, career highlights, achievements, and media galleries. The site also links to a related football event domain, pavloviccup.com, indicating a partnership or related service. Technically, the site uses a moderately modern stack including Bootstrap, jQuery, and Google Fonts, hosted likely by Websupport, with DNSSEC enabled for domain security. However, it lacks advanced security headers and privacy policies, which are critical for compliance and trust. The site is mobile responsive and has good navigation and content quality but does not collect user data via forms. Security posture is moderate with room for improvement in headers and privacy compliance. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.

S

SLAVO KISS

slavokiss.com

60

Slavokiss.com is a professional portfolio website for a graphic designer specializing in sports logos and branding. The site showcases a variety of sports-related branding projects including logos, fonts, and uniform designs, targeting clients worldwide. The business appears to be a small-scale, niche service provider with a focus on sports brand identity development. The website is well structured with a clean design and includes social media integration for broader reach. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with integrations of social media SDKs and Google Fonts. Hosting and domain registration are consistent with a legitimate small business, with the domain registered since 2013 and no privacy protection on WHOIS data. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and implementing privacy and cookie policies. No signs of WAF or content blocking were detected, and the content is safe for general audiences.

B

Barzzuz s.r.o.

kafe.sk

64

Barzzuz s.r.o. operates the website kafe.sk, a Slovak-based specialty coffee roastery and e-commerce platform focused on selling freshly roasted coffee beans, ground coffee, coffee machines, and barista accessories. The company targets coffee enthusiasts and consumers primarily in Slovakia, offering a wide range of single origin and espresso coffee products along with educational content about coffee preparation. The website demonstrates a good level of digital maturity with structured data, SEO optimization, and mobile responsiveness. It integrates modern analytics and advertising tools such as Google Analytics GA4 and Facebook Pixel with a consent management mechanism to comply with privacy regulations. Security posture is solid with HTTPS enforced and script blocking until user consent, though additional security headers could enhance protection. Contact information is clearly provided, enhancing business credibility. However, the absence of visible privacy policy and terms of service pages indicates room for improvement in compliance documentation.

S

Slovenský zväz ľadového hokeja (SZĽH)

hockeyslovakia.sk

58

HockeySlovakia.sk is the official website of the Slovak Ice Hockey Federation (SZĽH), serving as a comprehensive portal for Slovak ice hockey fans, players, coaches, and media. The site offers extensive information including live match results, statistics, news, educational resources, and organizational details about Slovak hockey. It holds a strong market position as the national governing body for ice hockey in Slovakia, providing authoritative content and services related to the sport. Technically, the website employs modern web technologies such as ASP.NET framework, Bootstrap, jQuery, and integrates Google Analytics, Google Tag Manager, and advertising networks like Google AdSense and Sitelement. The site is mobile-optimized with good navigation and content relevance. Security-wise, it uses HTTPS, anti-CSRF tokens, Google reCAPTCHA, and cookie consent mechanisms, though it could improve by adding explicit security headers like Content-Security-Policy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent aligned with GDPR. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or malicious content.

D

DS KORP.

dskorp.eu

68

DS KORP. is a Slovak holding company specializing in manufacturing and gastronomy sectors, managing multiple brands such as Gastro Hangar, DS Machines, and KochPro. The company positions itself as a synergy-driven innovator in these industries, offering new and refurbished gastro equipment, universal robots, and German-inspired gastro devices. The website is professionally designed, mobile-optimized, and provides clear information about its subsidiaries and services, targeting businesses and professionals in related sectors. Technically, the site uses modern web technologies including service workers and cookie consent management, ensuring GDPR compliance and user privacy. Security posture is adequate with HTTPS and consent mechanisms, though security headers and explicit policies could be improved. Overall, the domain appears legitimate despite the absence of WHOIS registrant data due to EURid privacy policies. The site is safe, free of adult or questionable content, and demonstrates good business credibility and technical maturity.

D

DS Machines s.r.o.

gastrohangar.sk

68

DS Machines s.r.o. operates the Gastro Hangar website, specializing in the sale of new and refurbished gastro kitchen equipment primarily targeting professional gastronomy businesses in Slovakia. The company emphasizes quality, reliability, and competitive pricing, offering a broad product range including spare parts and accessories. Their market position is that of a niche regional supplier with a strong focus on customer satisfaction and warranty support. Technically, the website is built using modern web technologies including Livewire and JavaScript frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact and legal information. No critical vulnerabilities or blocking mechanisms were detected.

B

Byty Severná, s.r.o.

bytyseverna.sk

67

Byty Severná, s.r.o. operates a modern residential real estate development project in Banská Bystrica, Slovakia, offering a range of apartments with unique layouts and large terraces. The company targets families, young couples, and real estate investors seeking comfortable urban living close to nature and city center amenities. Their business model focuses on direct sales of residential units supported by virtual tours and financing options. The website reflects a small but professional local developer with consistent branding and clear contact channels. Technically, the website employs modern web technologies including Laravel Livewire, JavaScript libraries like Splide.js for carousels, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Hosting is inferred to be with Websupport, a reputable Slovak hosting provider. The site is mobile optimized with good SEO practices and a comprehensive cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS with DNSSEC enabled and includes CSRF tokens for form security. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a detailed privacy policy and cookie consent management. Overall, the website presents a trustworthy and professional online presence for a real estate developer. The risk profile is low with no critical security or compliance issues identified. Strategic improvements include adding terms of service, security headers, and incident response information to enhance legal and security posture.

U

upjers GmbH & Co. KG

wurzelimperium.de

51

Wurzelimperium is a German browser-based online game operated by upjers GmbH & Co. KG, focusing on gardening and economic simulation gameplay. The website offers a free-to-play model with multiple servers and user account management, supported by a comprehensive privacy and cookie policy compliant with GDPR. Technically, the site uses standard web technologies including JavaScript, Google Tag Manager, and cookie consent tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and some security best practices, though improvements in security headers and library updates are recommended. Overall, the site is professional, trustworthy, and suitable for a general audience with no adult content.

B

Bundesministerium der Justiz und für Verbraucherschutz

bmjv.de

72

The Bundesministerium der Justiz und für Verbraucherschutz (Federal Ministry of Justice and Consumer Protection) operates an official German government website providing comprehensive legal and consumer protection information. The site targets citizens, legal professionals, and government entities, offering extensive resources on legislation, justice digitalization, and consumer rights. The website is well-branded, consistent, and professionally maintained, reflecting its authoritative role in the German government. Technically, the site is built on the Government Site Builder CMS, employs modern web standards including HTML5, CSS3, and SVG graphics, and is hosted on DNS servers associated with 123ns.eu and 123ns.de. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No major third-party analytics or advertising scripts were detected, indicating a privacy-conscious approach. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, suggesting areas for improvement. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is trustworthy, safe, and compliant with GDPR, serving as a reliable source of legal and consumer information for the German public. Strategic recommendations include enhancing security transparency, publishing incident response details, and implementing security.txt for vulnerability reporting.