Security Directory

A

Amt der Stadt Dornbirn

dornbirn.at

60

The website www.dornbirn.at serves as the official digital portal for the city administration of Dornbirn, Austria. It provides a broad range of municipal services and information including citizen assistance, political information, economic development, environmental programs, and cultural activities. The site targets residents and visitors, offering clear navigation and comprehensive content relevant to local governance and community life. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the site is built on TYPO3 CMS, a robust and widely used content management system for government and enterprise websites. The infrastructure supports modern web standards with responsive design and accessibility features, ensuring usability across devices. Performance is moderate, with no critical technical issues detected. SEO and metadata are well implemented, including JSON-LD structured data for enhanced search engine understanding. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies, which are recommended best practices. No vulnerability disclosures or incident response contacts are available, representing an area for improvement. Privacy compliance is partial, as no privacy or cookie policies were found, which may impact GDPR adherence. Overall, the website is trustworthy and professional, reflecting its role as a municipal government portal. The risk level is low, but strategic enhancements in privacy transparency and security policy publication would strengthen its compliance and security posture. Recommendations include adding privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.

O

Mezinárodní Online Casino Česká Republika — 24 Nejlepší Internetové Kasino Stránky s licenci v ČR 2025

onlinecasino-cz24.com

53

The website www.onlinekasinocz.cz is a Czech-language online casino affiliate and informational portal targeting Czech players interested in licensed and international online casinos. It provides detailed reviews, ratings, bonus offers, legal information, and guides on how to play safely and legally in the Czech Republic. The site is well-structured, professionally designed, and mobile-optimized, offering a comprehensive resource for its niche audience. Technically, it uses modern web standards with responsive design and lazy loading for performance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. Privacy compliance is limited, with no clear privacy policy or terms of service pages found, though a cookie consent banner is present. WHOIS data is unavailable, which reduces trustworthiness but the site content and affiliate partnerships suggest a legitimate business model. Overall, the site scores well on content quality and user experience but should improve transparency and security practices.

The website i-pronajem.cz operates as a niche real estate rental listing platform primarily targeting the Czech market. It offers listings for apartments, cottages, and chalets, catering to both private owners and commercial real estate agencies. The business model revolves around providing a platform for rental advertisements, positioning itself as a local player in the real estate sector since 2008. The site content is basic but relevant to its audience, with moderate branding consistency and limited trust indicators. Technically, the website uses standard HTML, CSS, and JavaScript without modern frameworks or CMS detected. Hosting is provided by VAS Hosting, a Czech hosting provider, which aligns with the domain's geographic focus. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No advanced analytics or marketing tools are evident, and tracking is limited to a visitor counter pixel. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and other regulations. No contact information or incident response channels are provided, limiting transparency and user trust. The domain registration data is consistent and legitimate, supporting the site's credibility. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website presents a functional but basic platform with significant opportunities to enhance security posture, privacy compliance, and user engagement through improved technical implementation and transparency.

B

Bundeskammer der Ziviltechniker:innen

zt.at

58

The website https://zt.at represents the Bundeskammer der Ziviltechniker:innen, the official Austrian chamber for civil engineers and architects. It serves as a professional platform providing information, member services, and resources for Ziviltechniker:innen across Austria. The site is well-structured, modern, and targets professionals and public entities involved in engineering and architecture. The presence of regional subdomains and comprehensive content indicates a mature and established organization with a long history dating back to 1860. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, employs privacy-conscious analytics via Matomo, and is optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers, though it lacks explicit cookie consent and published security policies. Overall, the site is trustworthy, professional, and compliant with GDPR, serving its audience effectively.

H

Hunger auf Kunst und Kultur | Der Kulturpass für die Steiermark

hakuk.st

43

The website hakuk.st serves as a cultural promotion platform for the Steiermark region in Austria, focusing on providing information about a cultural pass and related events. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard web technologies and integrations such as Google Fonts and Jetpack analytics. While the site offers good design quality and user experience, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and incident response information. The absence of security headers and vulnerability disclosure policies suggests room for improvement in security posture. Overall, the site is accessible and safe for general audiences but would benefit from enhanced compliance and security practices to improve trust and regulatory adherence.

A

ARCHITEKTUR RAUMBURGENLAND

architekturraumburgenland.at

53

ARCHITEKTUR RAUMBURGENLAND is a small, regionally focused non-profit organization dedicated to promoting architectural culture and community development in Burgenland, Austria. The website serves as a platform for architectural documentation, workshops, events, and publications, targeting architects, local communities, and cultural enthusiasts. The site is built on the Plone CMS platform, utilizing modern JavaScript libraries and responsive design to provide a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security headers and policies could be improved. The domain registration is consistent with the organization's regional focus and history, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

A

Architekturstiftung Österreich

architekturstiftung.at

51

Architekturstiftung Österreich is a small Austrian foundation focused on promoting architecture and building culture through events, publications, and awards. The website is professionally designed using the Plone CMS and integrates modern web technologies including Google Analytics and Leaflet.js. It demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. The domain registration is consistent with the organization's Austrian identity and founding year, supporting legitimacy. Overall, the website serves its cultural and educational mission effectively with a trustworthy online presence.

Z

Zentralvereinigung der Architekt:innen Österreichs

zv-architekten.at

49

The Zentralvereinigung der Architekt:innen Österreichs is a well-established professional association representing architects in Austria. The website serves as a platform to promote architectural culture, organize awards such as the Bauherr:innenpreis, and provide information on events, exhibitions, and publications relevant to the Austrian architecture community. The organization targets architects, building owners, and architecture enthusiasts within Austria, operating primarily as a non-profit entity focused on cultural and professional development in architecture. Technically, the website is built on the Plone CMS platform, utilizing modern frontend technologies including JavaScript libraries like Slick Slider and Leaflet for interactive content. The site is mobile-optimized and presents a good user experience with clear navigation and professional design. However, some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts enhancing responsiveness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit privacy or cookie policies, nor does it offer vulnerability disclosure or incident response information. These gaps represent areas for improvement to enhance user trust and compliance with data protection regulations. Overall, the website is trustworthy and professional, reflecting the organization's reputable standing in the Austrian architectural sector. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, and publishing vulnerability disclosure and incident response contacts to strengthen security posture and regulatory compliance.

S

Sveriges lantbruksuniversitet

interbull.org

59

Interbull is a well-established permanent subcommittee of ICAR, hosted by Sveriges lantbruksuniversitet in Sweden, specializing in independent genetic and genomic evaluations for dairy and beef cattle. The organization provides a range of services including data exchange, breeding value calculations, and validation reports, serving a global audience of animal breeding professionals and researchers. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its specialized audience. Technically, the site is built on the Web2py framework, utilizing modern JavaScript libraries and is hosted via Loopia Group. While the site is mobile-optimized and performs moderately well, there are opportunities to enhance accessibility and SEO further. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting high legitimacy and trustworthiness.

P

Pivní lázně Svijany

pivnilaznesvijany.cz

61

Pivní lázně Svijany is a specialized wellness business offering beer spa treatments and relaxation services integrated within a historic brewery and hotel complex in the Czech Republic. The website presents a professional and well-structured digital presence targeting adults interested in unique wellness experiences involving beer products. The business model focuses on hospitality and niche wellness services, supported by clear contact information and customer testimonials, enhancing trust and credibility. Technically, the website employs a modern tech stack including JavaScript, jQuery, and Google Tag Manager, running on the Public4u CMS platform. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and lack of explicit security policies are areas for improvement. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Despite this, the website content and contact details appear legitimate and professional. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. No incident response or vulnerability disclosure information is present, indicating potential gaps in security readiness. Overall, the website scores well in content quality, privacy compliance, and business credibility but should address WHOIS transparency and enhance security headers to improve trust and security posture.

I

invelt s.r.o.

eshopbmw.com

58

invelt s.r.o. operates a specialized e-commerce platform focused on BMW lifestyle products including clothing, accessories, wheels, and automotive parts. The company targets BMW, MINI, and BMW Motorrad enthusiasts primarily in the Czech Republic, offering fast delivery, free shipping over a threshold, and personal pickup options. The website demonstrates a professional and consistent brand presence with clear contact and legal information, supported by active social media channels. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Owl Carousel, hosted on CDN infrastructure, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, raising concerns about domain registration legitimacy, but the website content and business information appear credible and professional. Overall, the site is well-positioned in its niche retail market with room for security and compliance improvements.

MINI Czech Republic operates as the official localized website for the MINI automotive brand, offering new and used vehicles, financing options, servicing, and accessories. The site is well-positioned within the automotive sector in the Czech market and benefits from its association with the BMW Group, enhancing its market credibility and reach. The website targets consumers interested in premium compact vehicles, including electric models, and provides comprehensive product information and digital services such as the MINI Connected app. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and Adobe's analytics and tag management tools. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good accessibility features. Security is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit incident response and security policy disclosures are absent. Overall, the website presents a professional and trustworthy digital presence with clear business information, privacy compliance, and user-friendly navigation. The lack of WHOIS data is a minor concern but is mitigated by the brand's strong trust signals and official status. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.

N

Nikon

nikonrepair.eu

59

The website 'Nikon Service-System' serves as a repair status tracking portal for Nikon customers, allowing users to log in with credentials provided by dealers or Nikon Service Points. The site is branded with Nikon logos and links to official Nikon Europe privacy and terms pages, indicating an association with the Nikon brand. However, the domain www.nikonrepair.net lacks publicly available WHOIS registration data, raising questions about the domain's registration legitimacy. Technically, the site uses basic web technologies including outdated jQuery 1.7.2, which may expose it to known vulnerabilities. The site is multilingual and mobile-optimized to a basic degree, but lacks modern security headers and cookie consent mechanisms. Google Analytics is used for user tracking, but privacy compliance is minimal. Overall, the site provides a functional but basic user experience with moderate trustworthiness due to branding but diminished by missing WHOIS data and outdated technology.

Nikon Corporation operates a comprehensive corporate website showcasing its global business in imaging and precision technology solutions. The company emphasizes innovation and sustainability aligned with its corporate philosophy. The website targets both business and consumer audiences worldwide, offering detailed product, service, and corporate information. Technically, the site employs modern web standards, responsive design, and privacy-compliant cookie management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and incident response details are absent. The domain WHOIS data is unavailable, likely due to privacy or registry policies, but the website's professional presentation and trust signals affirm its legitimacy. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable and authoritative corporate web presence.

N

noz.de

noz.de

70

noz.de is a well-established regional news portal serving Osnabrück and surrounding areas in Germany. It provides current news in politics, economy, technology, and sports, targeting a general audience interested in local and regional news. The business model is primarily based on digital news publishing with subscription options and advertising revenue. The website demonstrates consistent branding and a professional digital presence with a strong social media footprint. Technically, the site employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for paywall management (Piano), ad security (Confiant), and advertising delivery (Nativendo). The hosting is managed via basecom.de nameservers, indicating a stable infrastructure. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses a consent management platform for GDPR compliance. However, explicit security headers like CSP and X-Frame-Options are not clearly present, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The main areas for improvement include publishing clear privacy and terms of service policies, enhancing security headers, and providing incident response contacts to strengthen compliance and user trust.

B

Biosphärengebiet Schwäbische Alb e.V.

biosphaerengebiet-alb.de

50

The website www.biosphaerengebiet-alb.de serves as the official information portal for the UNESCO Biosphere Reserve Schwäbische Alb, operated by the non-profit organization Biosphärengebiet Schwäbische Alb e.V. It provides comprehensive regional information, educational content, event announcements, and promotes sustainable tourism and environmental conservation. The site targets a broad audience including tourists, local residents, and environmental enthusiasts. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates privacy-compliant cookie consent mechanisms and Matomo analytics for user tracking. Security posture is good with HTTPS enforced and basic security best practices observed, though additional security headers and explicit security policies could enhance protection. The domain WHOIS data is limited but shows no suspicious patterns, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and well-optimized for accessibility and SEO.

A

aut. architektur und tirol

aut.cc

52

aut. architektur und tirol is a non-profit cultural institution based in Innsbruck, Austria, dedicated to promoting architecture and building culture in the Tirol region. The organization offers exhibitions, events, publications, and architectural tours, targeting architecture enthusiasts, professionals, and the local community. The website reflects a well-structured and content-rich platform supporting these activities. Technically, the site is built on the Plone CMS platform, utilizing modern web technologies and frameworks such as Patternslib and Slick Slider, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of explicit privacy and cookie policies indicates room for improvement in compliance. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

A

afo architekturforum oberösterreich

afo.at

48

afo architekturforum oberösterreich is a well-established non-profit organization dedicated to promoting architecture and building culture in Upper Austria. The website serves as a comprehensive platform for events, exhibitions, residencies, and publications related to architecture. It targets architects, planners, cultural institutions, and the general public interested in architectural discourse and urban development. The organization maintains strong partnerships with regional and national architecture networks, enhancing its market position as a key cultural player in the region. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as Leaflet.js and Moment.js for interactive features. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags and structured navigation. Security-wise, the site demonstrates good practices including HTTPS enforcement and security headers. However, it lacks a cookie consent mechanism and published security or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a comprehensive privacy policy, but cookie consent and GDPR explicit mechanisms could be enhanced. Overall, the website is professional, trustworthy, and content-rich, supporting the organization's mission effectively. Strategic recommendations include implementing cookie consent, publishing security policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.

H

HolidayCheck AG

holidaycheck.at

61

HolidayCheck AG operates a leading hotel review and travel booking portal primarily serving the German-speaking markets of Austria, Germany, and Switzerland. The website offers extensive hotel reviews, price comparisons from numerous travel providers, and additional services such as car rentals and travel forums. The company holds a strong market position with a large user base and recognized brand. Technically, the website is built on modern web technologies including React and employs performance optimizations and accessibility features, ensuring a fast and user-friendly experience across devices. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

The UFC Store is the official e-commerce platform for UFC merchandise, offering licensed apparel and accessories to fans worldwide. The website presents a professional and consistent brand image, targeting UFC enthusiasts and sports merchandise consumers. The business model focuses on retail sales of official UFC gear, positioning itself as a key player in the sports retail sector. Technically, the site employs modern web technologies including JavaScript, CSS, and optimized font formats, delivering a moderate performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and comprehensive privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain registration transparency, although the site itself appears legitimate and trustworthy. Overall, the site scores well in content quality and business credibility but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.

I

iNDiGO multimedia s.r.o.

indigo.cz

41

iNDiGO multimedia s.r.o. is a small Czech Republic-based technology company specializing in bespoke mobile and web-based solutions tailored to client needs. The website presents a basic but clear business overview with contact information and social media links, targeting business clients seeking customized software solutions. The company has been established since 2005, indicating a stable market presence. Technically, the website is simple, built with basic HTML and CSS, hosted on Forpsi servers as inferred from the nameservers. There is no evidence of modern frameworks, CMS, or analytics tools. The site is accessible without WAF or security challenges but lacks advanced technical features such as security headers, HTTPS confirmation, or performance optimizations. From a security perspective, the site does not display privacy or cookie policies, security policies, or incident response information. No security headers or vulnerability disclosures are present, and no forms or scripts that could pose risks are detected. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the security posture is basic and could be improved significantly. The overall risk is moderate due to the lack of security and privacy compliance features, but no critical vulnerabilities or suspicious indicators were found. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and establishing incident response contacts to enhance trust and compliance.

B

BARBORA ŠNÁBLOVÁ Attorneys

snablova.com

59

BARBORA ŠNÁBLOVÁ Attorneys is a specialized boutique law firm based in Prague, Czech Republic, focusing on international and domestic dispute resolution, particularly arbitration and litigation. Established in 2015, the firm offers expert legal services in commercial arbitration, investment disputes, sports-related cases, and arbitration-related litigation, serving clients both locally and internationally. Their website reflects a professional and client-focused approach, emphasizing strategic legal guidance throughout dispute processes. Technically, the website is built on the Webnode platform, hosted on AWS S3 with Cloudfront CDN, and employs modern web technologies including JavaScript and Google Tag Manager for analytics. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and domain legitimacy verification.

N

nextron internet team GmbH

mynikon.de

67

myNikon.de is the official German Nikon brand portal operated by nextron internet team GmbH, providing a comprehensive platform for Nikon product registration, promotions, educational content, and event information. The website targets photography enthusiasts and Nikon customers in Germany, offering services such as online tutorials, warranty information, and a newsletter subscription. The site maintains a consistent brand presence aligned with Nikon Europe B.V., its parent company. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Swiper.js and Slick Carousel, and integrates OneTrust for cookie consent management. Hosting is managed via nextron.ch nameservers, indicating a professional infrastructure. Security posture is solid with HTTPS enforced, cache-control headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website is professional, trustworthy, and well-structured, supporting Nikon's market position in Germany.

F

FORPSI Cloud

forpsicloud.cz

71

FORPSI Cloud is a Czech-based cloud computing service provider offering reliable, secure, and scalable cloud solutions targeted at businesses and IT professionals. The website positions the company as a cost-effective and trustworthy cloud services provider in the Czech and Slovak markets. The digital infrastructure includes modern JavaScript libraries, Kentico CMS, and integration with major analytics and marketing platforms such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS data reduces transparency and slightly impacts trust, but the professional website and compliance measures mitigate this concern. No contact emails or phone numbers are explicitly found, which could be improved to enhance business credibility.

D

Datlab s.r.o.

datlab.cz

60

Datlab s.r.o. is a Czech-based company specializing in data gathering, processing, and analytics with a focus on economic data and public procurement. Their website showcases a suite of products aimed at helping businesses, public authorities, and researchers navigate sanctions, tenders, and risk detection in public procurement. The company serves a diverse audience including government bodies, municipalities, state-owned enterprises, and academic institutions, positioning itself as a trusted regional player in the data analytics sector. Technically, the website employs modern web technologies including JavaScript frameworks (Vue.js implied), Google Analytics, Google Tag Manager, and multiple tracking pixels with a consent management system in place. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility could be made. Hosting and domain registration are consistent with the company's Czech Republic base. From a security perspective, the website enforces HTTPS and uses consent-based tracking mechanisms. However, it lacks explicit security headers and published security policies such as incident response or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and content-rich, with moderate tracking and good business credibility. Strategic improvements in privacy documentation, security headers, and incident response transparency would enhance the security posture and compliance standing.

S

SSH Communications Security

ssh.com

74

SSH Communications Security is a well-established cybersecurity company specializing in privileged access management, secure file transfers, SSH key management, and quantum-safe cryptography solutions. The company positions itself as the inventor of Secure Shell (SSH) technology and offers a comprehensive portfolio targeting enterprises, government agencies, and critical infrastructure sectors. Their market position is reinforced by strategic partnerships, such as with Leonardo, and recognized certifications including FIPS 140-3. The website content is professional, comprehensive, and clearly targeted at business and government customers seeking advanced cybersecurity solutions. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools such as Google Analytics 4 and Google Tag Manager. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Security best practices are observed with HTTPS enforcement, multiple security headers, and secure form implementations with consent mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR consent mechanisms. However, the WHOIS data for the domain is not publicly available, which is unusual but does not detract significantly from the overall trustworthiness given the company's strong external trust signals. Overall, SSH Communications Security presents a mature, professional, and secure online presence consistent with its business profile. Strategic recommendations include publishing explicit security policy documentation, incident response contacts, and a security.txt file to further enhance transparency and trust.

N

Nový Web s.r.o.

novy-web.cz

42

Nový Web s.r.o. is a Czech technology company specializing in advanced web development, e-commerce solutions, automation, and online marketing services. With over 17 years of experience, the company serves a diverse client base ranging from small and medium-sized enterprises to large corporations. Their key offerings include data integration, process automation, custom web and e-shop development, PPC campaign management, and SEO optimization. The website reflects a professional and consistent brand image with detailed portfolio references and clear contact information. Technically, the website employs modern web technologies including Google Analytics, Microsoft Clarity, Smartlook, and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, it lacks some security headers and a comprehensive privacy policy page, which are areas for improvement. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness. No WAF or blocking mechanisms are detected, and the site is fully accessible. The company does not publicly disclose a security policy or incident response contacts, which could be enhanced to improve security posture and compliance. Overall, Nový Web s.r.o. presents a credible and professional online presence with room for improvement in privacy compliance and security best practices. The missing WHOIS data warrants caution but does not currently indicate malicious intent. Strategic recommendations include implementing security headers, publishing a privacy policy with GDPR details, and adding a security.txt file to facilitate vulnerability reporting.

C

Citroën

citroen.cz

60

The website www.citroen.cz serves as the official online presence for Citroën in the Czech Republic, focusing on the sale of new and used vehicles along with after-sales services. It targets consumers in the Czech market interested in automotive products, providing tools such as vehicle configuration and dealer locators. The site is professionally designed with consistent branding aligned with the Citroën brand and Stellantis group ownership. Technically, the site leverages modern technologies including Adobe Experience Manager CMS, Google Analytics, Dynamic Yield for personalization, and Adobe Helix RUM for performance monitoring. Security measures such as HTTPS and standard security headers are implemented, ensuring a secure browsing experience. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS data, slightly reduce the overall trust and compliance posture. The site includes a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. Overall, the website is a credible and professional digital asset for Citroën in the Czech market.

D

dieBeiden Internetagentur GmbH

diebeiden.at

45

dieBeiden Internetagentur GmbH is a small, regional full-service internet agency based in Salzburg, Austria, with approximately 19 years of industry experience. The company specializes in web design, custom web development, CMS solutions, mobile app development, e-commerce platforms, and newsletter systems. Their market position is supported by a solid client base of over 400 satisfied customers and a professional online presence that highlights their expertise and service breadth. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the website is built on the XMS Content Management System, leveraging modern web standards including HTML5, CSS, and JavaScript. The site demonstrates good SEO practices and basic accessibility features, with moderate performance characteristics. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, though there is room for improvement by adding security headers and explicit security policies. From a security and compliance perspective, the site complies with GDPR requirements, evidenced by a comprehensive privacy policy and cookie consent banner. However, no dedicated security policy or incident response contacts are provided, which could be enhanced to improve trust and readiness. No vulnerabilities or suspicious activities were detected in the provided content. Overall, dieBeiden presents a trustworthy and professional digital footprint suitable for its business scope. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen their security posture and compliance standing.

The analyzed content corresponds to a Chrome browser internal error page (chrome-error://chromewebdata/) indicating that the requested website content is not accessible or blocked. No actual website content, metadata, or business information is present, making it impossible to assess the business or security posture meaningfully. The page is a local browser error page and not a public website, thus no privacy, cookie, or terms of service policies are found. No contact information or security policies are available, and no external links or social media references are detected. The technical infrastructure is limited to Chromium internal scripts for error display. Overall, this is not a functional website but an error placeholder.

S

Stauss-Perlite GmbH

stauss-perlite.at

66

Stauss-Perlite GmbH is a well-established Austrian manufacturer and supplier specializing in mineral building materials, non-combustible insulation, plaster carriers, and facade systems. With over 100 years of history, the company serves a global customer base, offering a broad product portfolio including expanded perlite and related construction materials. The website reflects a mature business with clear branding, comprehensive product information, and a professional digital presence. Technically, the site uses modern web technologies, is mobile-optimized, and includes privacy-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and provides multiple contact channels for customer engagement.

A

AdSimple GmbH

adsimple.at

70

AdSimple GmbH is a small Austrian digital marketing agency specializing in online advertising, SEO, and social media marketing. The company targets businesses seeking to improve their online presence and advertising effectiveness. The website is built on WordPress using the Avada theme, incorporating modern web technologies and standard marketing tools such as Google Tag Manager and Gravity Forms. The site is well-structured, mobile-optimized, and provides clear navigation and contact options. Security posture is good with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are lacking. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website presents a professional and trustworthy business presence with no critical security issues detected.

P

Preciosa Ornela

preciosa-ornela.com

54

Preciosa Ornela is a Czech-based manufacturer specializing in traditional Czech beads and glass products, targeting crafters, jewelry designers, and manufacturers. The website showcases a broad product range including seed beads, pressed beads, and glass rods, supported by tutorials, product news, and event information. The company appears to have a solid market position within the decorative glass manufacturing sector. Technically, the website uses modern JavaScript libraries, Google Tag Manager for analytics and consent management, and integrates YouTube content. The site is mobile-optimized with good navigation and professional design. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and detailed privacy policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security practices.

The International Floorball Federation (IFF) operates the website floorball.sport as the official global governing body for the sport of floorball. The site primarily serves as an informational hub for floorball events, news, and media channels, targeting players, fans, and sports organizations worldwide. The domain registration data aligns well with the organization's identity, confirming legitimacy and appropriate domain age. Technically, the website employs basic HTML and CSS with external resources such as Font Awesome and Azure DNS hosting. The site is currently under construction, resulting in limited content and slower page loads. Mobile optimization and accessibility are basic but functional. No advanced CMS or analytics tools are detected, indicating a simple technical infrastructure. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended to enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No contact or incident response information is provided, limiting transparency and user trust. Overall, the website is moderately trustworthy and functional but requires improvements in privacy compliance, security hardening, and content completeness to better serve its audience and meet modern standards.

GTmetrix is a well-established web performance testing and monitoring service founded in 2009. It offers a freemium SaaS model with free and PRO subscription plans, targeting website owners, developers, and digital marketers. The platform provides detailed performance reports using Lighthouse metrics, real user data, and actionable recommendations to optimize website speed and user experience. GTmetrix has analyzed over 1.3 billion pages, indicating strong market presence and trust. Technically, the website employs modern web technologies including JavaScript, HTML5, CSS3, and integrates Lighthouse for performance audits. DNS is managed via Cloudflare, ensuring reliable hosting infrastructure. The site is fast, mobile-optimized, and accessible, with a professional design and clear navigation. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Security posture is good with HTTPS enforced and secure forms, though explicit security headers and a published security policy are absent. No vulnerabilities or exposed sensitive data were detected. The absence of direct contact emails or phone numbers is noted, with contact primarily via forms. Social media presence on major platforms enhances credibility. Overall, GTmetrix presents a low-risk profile with strong business credibility, technical maturity, and privacy compliance. Strategic improvements in security transparency and incident response readiness would further enhance trust and resilience.

O

Original Games

spotthedifference.com

55

SpotTheDifference.com is a niche casual gaming website offering over 70 'spot the difference' puzzles and games. The site targets general audiences interested in casual online puzzles and is funded primarily through advertising. The business appears small and focused on providing entertainment through browser-based games with some social media integration. Technically, the site uses a variety of third-party ad networks and tracking services, including Google Analytics, Criteo, and InMobi, indicating a moderate level of digital maturity but with potential privacy concerns. The site lacks visible privacy policies and contact information, which impacts trust and compliance. Security posture is weak due to missing HTTPS enforcement and security headers, and the absence of WHOIS registration data raises legitimacy concerns. Overall, the site functions as a basic casual gaming platform with room for improvement in security, privacy, and business transparency.

H

Helix Pflanzensysteme GmbH

helix-pflanzensysteme.de

58

Helix Pflanzensysteme GmbH is a specialized company focused on vertical greening systems and sustainable urban green solutions, serving architects, urban planners, and municipalities primarily in Germany. Their website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content about their services including planning, construction, and maintenance of green facades and noise barriers. The technical infrastructure is based on TYPO3 CMS, with modern web technologies and integrations such as Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with detailed policies and user consent options. Overall, the website reflects a trustworthy and credible business with a strong market position in the real estate and urban ecology sector.

D

D\D Landschaftsplanung

dnd.at

48

D\D Landschaftsplanung is a specialized landscape planning firm based in Vienna, Austria, focusing on urban green space and landscape architecture projects. The company maintains a professional web presence showcasing projects, news, and contact information, targeting clients and professionals interested in landscape architecture. The website employs a modern technical stack including Bootstrap 5 and jQuery, with responsive design and basic accessibility features. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and documented incident response policies. Privacy compliance is strong with a comprehensive privacy and cookie policy in German and English. Overall, the website is trustworthy and professionally maintained, though improvements in security headers and incident response documentation are recommended.

A

alchemia-nova research and innovation gemeinnützige GmbH

alchemia-nova.net

53

alchemia-nova is a small Austrian research and innovation institute specializing in nature-based solutions and circular economy principles to foster climate-smart and sustainable societies. The organization offers research, consulting services, and innovative products targeting sectors such as water management, resilient infrastructure, agriculture, and industrial production. Their market position is niche but well-defined, focusing on sustainability and circular transformation. Technically, the website is built on WordPress with modern JavaScript libraries and includes multilingual support. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and security headers. Overall, the website is trustworthy and professionally maintained, with strong privacy compliance and clear contact information.

B

Büsscher & Hoffmann

bueho.com

61

Büsscher & Hoffmann is an Austrian manufacturer specializing in bitumen and polymer bitumen membranes for roofing and waterproofing systems. The company serves construction professionals and building owners with a broad product portfolio covering flat roofs, green roofs, pitched roofs, basements, and bridges. Their business model includes manufacturing, direct sales, technical support, and logistics services, positioning them as a reputable medium-sized player in the manufacturing sector with a strong regional presence. Technically, the website is built on the Pimcore CMS platform, utilizing modern web technologies and personalization scripts, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks DNSSEC and visible security headers, indicating room for improvement in security posture. Overall, the website is professional and trustworthy, though it lacks explicit privacy policy and terms of service pages in the provided content. The domain registration is consistent and mature, supporting the legitimacy of the business.

S

StadtLABOR – Innovationen für urbane Lebensqualität GmbH

stadtlaborgraz.at

47

StadtLABOR – Innovationen für urbane Lebensqualität GmbH is a small Austrian company specializing in sustainable and cooperative urban development. Their website presents them as an innovation lab focused on integrating climate protection, resource conservation, and innovation into urban projects and neighborhood development. The company targets municipalities, urban planners, and citizens interested in sustainable city living. Their business model revolves around consulting, project management, and community engagement in urban development. Technically, the website is built on WordPress using the Neve theme, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled, but lacks some advanced security headers and published security policies. Privacy compliance is mostly met with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the website is professional, trustworthy, and well-branded, with active social media channels and recent content updates.

F

FC Slovan Liberec

slovanliberec.cz

45

FC Slovan Liberec operates as a professional football club based in the Czech Republic, providing comprehensive information about its teams, matches, fan engagement, and merchandising through its official website. The site targets football fans and local community members, offering news, schedules, player statistics, and multimedia content. The club holds a notable position in Czech football with historical league and cup victories, supported by multiple commercial partners and sponsors. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and social media connectivity. The site is mobile-optimized and features a cookie consent mechanism indicating awareness of privacy regulations. However, the absence of a visible privacy policy and WHOIS data limits full trust verification. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and incident response contacts. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

The website sinners.cz currently serves as a placeholder page hosted by Váš-hosting.cz, a Czech hosting provider. The site offers basic information about domain registration and hosting services, including free PHP and FTP hosting and unique server administration. The content is minimal and primarily directs visitors to the hosting provider's main site and related services. The domain WHOIS data indicates a creation date in the future (August 2025), suggesting the domain is newly registered or the data is a placeholder, and no active business presence is established yet. Technically, the site uses standard HTML5 and CSS3 with Google Fonts for styling. There is no evidence of a CMS or advanced frameworks. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts are detected, and no forms are present, indicating minimal data collection. From a security perspective, the site lacks visible security headers and does not provide HTTPS verification data. There are no privacy or cookie policies, no incident response contacts, and no vulnerability disclosure mechanisms. The contact information is limited to a single support email address. The WHOIS data inconsistency and placeholder content reduce trustworthiness and legitimacy. Overall, the site is safe with no adult or questionable content but is limited in business credibility and security posture. It is recommended to monitor the domain for future development and ensure proper security and compliance measures are implemented when the site becomes active.

The website elh.cz is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to its content. The domain is registered since 2005 with REG-WEDOS and uses Cloudflare nameservers, indicating a mature domain with standard security and performance infrastructure. However, no business information, contact details, privacy or cookie policies, or terms of service are visible on the page, limiting the ability to assess the company's operations or compliance. The technical infrastructure relies on Cloudflare's security platform, but no further CMS or technology stack details are available due to content blocking. Security posture cannot be fully evaluated, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site lacks visible trust indicators and business transparency, and the content quality is poor due to the blocking mechanism.

Mastercard Polska operates as a regional presence of the global Mastercard brand, providing payment solutions and services tailored to the Polish market. The website serves as an informational platform targeting consumers and businesses in Poland, showcasing Mastercard's products and digital payment technologies. The site demonstrates a consistent and professional brand image aligned with Mastercard's global identity. Technically, the website employs modern web technologies including custom web components and a digital experience platform framework, ensuring a responsive and user-friendly interface. Security posture is strong with HTTPS enforced, though there is room for improvement in implementing additional security headers and explicit privacy and cookie policies. Overall, the site is trustworthy and safe, with no indications of malicious content or vulnerabilities in the provided data.

A

Austrian Federal Ministry for Innovation, Mobility, and Infrastructure

nachhaltigwirtschaften.at

64

The website nachhaltigwirtschaften.at is an official Austrian government platform dedicated to sustainable development, renewable energy, and environmental technologies. It serves as a communication and information hub for various research and technology programs managed by the Austrian Federal Ministry for Innovation, Mobility, and Infrastructure (BMIMI). The platform provides open access to project data, publications, events, and training materials, targeting researchers, policymakers, industry stakeholders, and the general public interested in sustainability. The site is well-branded, consistent, and professionally maintained, reflecting its government affiliation and mission. From a technical perspective, the website uses standard web technologies including HTML5, CSS3, JavaScript, and CKEditor for content management. It appears to be custom-built rather than using a common CMS. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security-wise, HTTPS is enforced, and forms are secured, but there is a lack of explicit security headers and no visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is solid but could be improved by adding security headers, cookie consent, and incident response details. The domain registration is consistent with the Austrian government entity, supporting high legitimacy and trustworthiness. There are no signs of malicious activity or content safety concerns. The platform is a reliable and authoritative source for sustainable development information in Austria.

B

Bauer Media AS

hvordanlytte.no

46

Bauer Media AS operates hvordanlytte.no, a Norwegian digital radio information portal focused on providing listeners with comprehensive details about digital radio platforms including DAB+, streaming apps, and digital TV channels. The website serves as a hub for multiple branded radio channels under Bauer Media, targeting Norwegian radio audiences interested in modern digital listening options. The business model centers on media broadcasting and digital streaming services, leveraging partnerships with major digital TV and streaming platforms to maximize reach. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, ensuring good mobile optimization and user experience. However, some areas such as security headers and privacy compliance require improvement. Security posture is moderate with no critical vulnerabilities detected but lacks visible security policies and headers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures to align with best practices and regulatory requirements.

U

Unie státních zástupců České republiky

uniesz.cz

52

Unie státních zástupců České republiky is a professional non-profit association representing state prosecutors in the Czech Republic. The website serves as an information portal providing organizational details, internal regulations, news, and official statements relevant to its members and the public. The site targets legal professionals and government officials within the Czech Republic. Technically, the website is built on WordPress with common web technologies such as jQuery and FontAwesome, and it integrates Facebook social media features. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. Security-wise, the website uses HTTPS and secure login forms but lacks advanced security headers and explicit incident response or security policy disclosures. The absence of WHOIS data for the domain is a notable concern, limiting trust verification of domain registration details. Overall, the website is functional and professional but could improve its security posture and transparency regarding privacy and terms of service.

L

LYOS

lyoskin.com

60

LYOS is a small Finnish e-commerce skincare brand launched in 2024, offering a playful and natural skincare product line. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Facebook Pixel for marketing. The brand has received industry recognition through awards and media features, positioning itself as a niche player in the clean and natural beauty market. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled. Privacy compliance is lacking as no explicit privacy or cookie policies are found, and no consent mechanisms are implemented. Contact information is limited to forms and social media links, with no direct emails or phone numbers published. Overall, LYOS presents a professional and trustworthy online presence but should improve privacy and compliance disclosures to enhance user trust and regulatory adherence.

V

Verband für Dämmsysteme, Putz und Mörtel e.V.

wdvs-planungsatlas.de

55

The website wdvs-planungsatlas.de is a specialized German platform providing free CAD details and technical construction resources focused on thermal insulation composite systems (WDVS). It is operated by the Verband für Dämmsysteme, Putz und Mörtel e.V., a construction industry association. The site targets architects, planners, and construction professionals seeking optimized construction details for energy-efficient building envelopes. The business model centers on offering free technical content and research reports to support planning and compliance with thermal protection standards. The site is positioned as a niche authoritative resource within the German construction sector. Technically, the website uses a traditional web stack with jQuery, jQuery UI, FancyBox, and Piwik/Matomo analytics. It employs cookie consent mechanisms and CSRF tokens in forms, indicating moderate digital maturity and privacy awareness. The site is mobile optimized with SVG graphics and structured navigation, though no CMS or hosting details are evident. Performance is moderate with room for improvement in security headers and advanced SEO. From a security perspective, the site uses HTTPS and cookie consent but lacks visible HTTP security headers such as CSP or HSTS. No vulnerability disclosure or incident response information is provided. The login form includes CSRF protection, but no phone or physical address contact details are listed, limiting direct support channels. WHOIS data is minimal but consistent with the site's German construction association identity. Overall, the security posture is moderate with recommendations to enhance header policies and publish security policies. The overall risk assessment is low; the site is professional, trustworthy, and compliant with GDPR through its privacy and cookie policies. Strategic recommendations include improving security headers, publishing terms of service and security policies, and enhancing contact transparency to strengthen trust and compliance.